UPnP 是用於資訊家電設備間相互溝通的網路通訊協定，其作用在於規範各個資訊設備間如>何找到彼此，如何使用對方的資源等等。
然而在UPnP原有的架構中，並未強調安全性的問題，因此任意使用者只要持有支援UPnP 的設備，就能任意使用網路中的設備。
因此，本文針對此一問題，提出下列改進方法，在不影響原有UPnP 網路運作的前提下，提供完善的安全機制，避免被有心人事惡意使用，造成危害：
認證:主控伺服器負責認證合法使用者，只有經過認證的使用者(client)才能存取群組內的資源。
轉送:負責傳遞指令訊息，配合認證機制能加強管理功能，或是作為整合異質網路的橋接器(Bridge)。
群組:依需求將裝置分類，每個群組由一個主控伺服器(server)負責管 理。所有的通訊都必需經由主控伺服器，而不能直接溝通。

Universal Plug and Play(UPnP) is an architecture for pervasive peer-to-peer network connectivity of internet appliances,wireless devices,and PCs of all form factors.It is designed to bring easy-to-use,flexible,standards-based connectivity to ad-hoc or unmanaged networks whether in the home,in a small business,public spaces,or attached to the Internet.
However,it doesn''t focus on the security issue in the UPnP architecture specification. Every device,which supports the UPnP protocol,can control the devices in the UPnP network arbitrarily.
In this thesis, we present the following solutions which provide a better mechanism on secure issue in order to protect our devices from malicious usage and be compatible with original design of UPnP architecture:
Authorization:Only the authorized client can access the resources .
Forwarding:A server forwards the request from the control point to the device and hide the information about the device from control point.
Grouping:Grouping the devices accroding to their attributes,every gruop has a server which manages those devices.

中文摘要
英文摘要
誌謝
目錄
表目錄
圖目錄
1 緒論
1.1 研究動機
1.2 研究方法
1.3 論文架構
2 問題研究
2.1 UPnP 網路架構
2.2 UPnP 應用範例
2.3 潛在的問題與改進構想
3 系統架構設計
3.1 認證機制
3.2 需求轉送
3.3 群組管理
4 系統實作
4.1 Intel UPnP SDK
4.2 認證機制
4.3 需求轉送
4.4 群組管理
4.5 閘道
5 結論與展望
5.1 研究成果
5.2 未來展望
參考文獻

[1]Steven Weyhrich. Apple II History. Technical report, Metro Apple Computer Hobbyists User Group, 1990.
[2]電子時報 縱橫IA 電子時報 first edition 2001
[3] Roy Want and Gaetano Borriello. Survey on Information Appliances. IEEE magazine, 2000.
[4] Golden G. Richard. Service Advertisement and Discovery: Enabling Universal Device Cooperation. IEEE magazine, 2000.
[5] Pekesh John. UPnP,Jini and Salutation - white paper. Technical report, California Software Co. Ltd., 1999.
[6] John Cowan. XML 1.1. Technical report, World Wide Web Consortium,2002.
[7] E. Guttman. Service Location Protocol Modification for IPv6. Technical report,Internet Engineering Task Force, 2001.
[8] Salutation Consortium. Salutation Architecture Specification. Technical report,Specification Consortium, 1999.
[9] Microsoft. Universal Plug and Play device Architecture. Technical report, Microsoft corporation, 2000.
[10] Brent A. Miller et al. Home Networking with Universal Plug and Play. IEEE magazine, 2001.
[11] Andrew Liu. Intel Enable Universal Plug and Play for Linux. Technical report, Intel Corporation, 2000.
[12] J. Cohen and S. Aggarwal. General Event Notification Architecture Base. Technical report, Microsoft corporation, 1998.
[13]Don Box et al. Simple Object Access Protocol. Technical report, World Wide Web Consortium, 2000.
[14] Yaron Y. Goland et al. Simple Service Discovery Protocol. Technical report, Internet Engineering Task Force, 1999.
[15] Lauren Wood et al. Document Object Model (DOM) Level 1 Specification (Second Edition). Technical report, World Wide Web Consortium, 2000.
[16] Berners T. Lee et al. Uniform Resource Identifiers (URI): Generic Syntax. Technical report, Internet Engineering Task Force, 1998.