JP2003069606A - Integrated information communication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an integrated information communication system which secures the security and the reliability of communication without changing a private address system by unitarily guaranteeing a communication speed, a communication quality, countermeasures against communication faults, etc., without using a leased line or the Internet. SOLUTION: The integrated information communication system is provided with an access controller for individually connecting a lot of external computer communication networks or information communication devices and repeaters for networking the access controller and has a function to transfer and route information in a unitary address system by making the access controller perform address conversion and enables mutual communication between the computer communication networks or information communication devices.

Description

Detailed Description of the Invention

[0001]

TECHNICAL FIELD The present invention relates to a personal computer and a LAN.
(Local Area Network), telephone (including mobile phone), FA
X (Facsimile), CATV (Cable Television), information communication devices such as the Internet or information communication systems can be used not only for leased lines but also for ISDN (Integrated Services Di
Gital Network), FR (Frame Relay), ATM (Asynchro
nous Transfer Mode), IPX (Integrated Packet Exch
ange), satellite, wireless, and an integrated information communication system connected integrally via a public line. Here, the information communication device communicates with an address (for information communication) for distinguishing it from other devices. The present invention is particularly applicable to connectionless networks (for example, IP (Intern) of RFC791, RFC1883.
et protocol) technology-based data transfer service is integrated to improve the economic efficiency of the entire information communication by adopting a unified address system, ensuring security and mutual communication between connected terminals or systems. Integrated information communication system.

[0002]

2. Description of the Related Art With the development of computers and information communication technology, computer communication networks have become widespread in recent years in universities, research institutes, government agencies, companies or within companies. The LAN is used as a computer communication network in a company, and when the area spreads nationwide, it has a form as shown in FIG. Figure 1
In the example of 50, LANs in each area use a common protocol and are connected by dedicated lines. Here, for example, the company X uses LAN-X1, LAN-X2, and L as LANs.
AN-X3 is used and company Y uses LAN-Y as a LAN.
1, LAN-Y2, LAN-Y3 are used, and companies X and Y perform computer communication using communication address systems ADX and ADY, respectively. In such a LAN network, since it is necessary to lay an individual dedicated line for each company, the system construction becomes expensive and LANs of other companies
When connecting to a network, it is necessary to match interfaces such as a communication address system, and it is very difficult to connect the interfaces, and there is a problem that a great cost is required.

On the other hand, in recent years, the Internet has become widespread as a computer communication network on a global scale. In the Internet, a router of a provider is used to connect the networks, and TCP / IP (Transmission Co
It uses a communication protocol called "ntrol Protocol / Internet Protocol" and uses a leased line or an FR network to connect a remote place, and if it is a premises, it is an Ethernet which is a 10 Mbps LAN or FDDI which is a 100 Mbps LAN. (F
iber Distributed Data Interface) is used as a communication path. FIG. 151 shows an example of a connection form of the Internet. In the Internet, routers within a provider exchange routing table connection information with each other and maintain the connection between them. Although each router is connected to a plurality of networks, the routing table determines whether the received data is to be sent to which router connected to which provider's network. Thus, on the Internet, each IP
Destination IP attached to frame (IP datagram)
Look at the address, determine the next router to send to, and send to that router. When all routers perform this operation, IP frames are delivered one after another and delivered to the target computer.

FIG. 152 shows an I used for the Internet.
The information content of RFC791 of the P frame is shown, and is divided into a control unit and a data unit. Figure 153 shows a similar R
The information content of FC1883 is shown, and it is divided into a control section and a data section. In each case, () indicates the number of bits.

[0005]

However, since the Internet does not have a system for comprehensively managing communication paths, it is not possible to confirm whether or not the communication partner is the intended legitimate person. There is a security problem that there is a high risk of eavesdropping on the LAN, and the fact that many LAN internal IP addresses are uniquely determined by the LAN user First, it is necessary to replace the IP address of the LAN user with the IP address for the Internet.
Also, the communication quality such as the communication speed and the communication error rate is not uniform because the backbone lines that make up the communication path of the Internet are different for each line of the LAN. However, there is a problem in that the communication speed is not achieved even when trying to send. Furthermore,
There is no manager in charge of maintenance such as network failure countermeasures and overall network planning such as future plans of the network, and reliability is especially important. Has the problem that it cannot be used with confidence. Further, in a LAN network or the Internet, the terminal is a personal computer (computer), and it has been difficult to integrate and use a telephone, FAX, CATV and the like.

The present invention has been made under the circumstances as described above, and an object of the present invention is to improve the economical efficiency of constructing an information communication system without using a leased line or the Internet, and to improve the communication speed and communication quality. , An integrated integrated information communication system capable of accommodating a plurality of VANs for performing data / information transfer by IP frame which secures security and reliability in communication by integrally guaranteeing communication failure countermeasures. To provide. Furthermore, by a single information transfer that does not depend on the type of service such as voice, image (moving picture, still image), text, comprehensive communication service, analog and digital telephone line service, Internet provider service, FAX service, computer data exchange. An object of the present invention is to provide an integrated information communication system in which services that have conventionally been provided individually such as services and CATV services are mutually connected. In addition, integration that enables inter-company communication without changing the address system for computer communication that individual companies (including universities, research institutes, government agencies, etc.) conventionally determine and use separately within each company. It is also intended to provide an information communication system. The IP terminal refers to a terminal or a computer having a function of transmitting and receiving IP frames.

[0007]

SUMMARY OF THE INVENTION The present invention relates to an integrated information communication system, and an object of the present invention is to provide an access control device for individually connecting a plurality of external computer communication networks or information communication devices, and the access control device. And a function to transfer and route information by a unified address system, and to establish mutual communication between the plurality of computer communication networks or information communication devices. To be done. The present invention corresponds to a computer communication network based on the IP technology in which the range of the dedicated line used for communication inside and between companies shown in FIG. 150 as a conventional example is replaced with a common communication network shown by a broken line. To do.

The above object of the present invention is to provide an ICS user frame having a unique ICS user address system ADX to the address system A based on the management of a conversion table in the access control device.
While converting into an ICS network frame having DS, at least one or more built-in VANs are transmitted according to the rules of the address system ADS, and when reaching another target access control device, the conversion table is used as a basis for management. , And is converted into the ICS user address system ADX so as to reach another external information communication device. In addition, an ICS user frame having a unique ICS user address system ADX is associated with a user logical communication line without using the ICS user address in the ICS user frame based on the management of the conversion table of the access control device. Incoming ICS registered in the conversion table
The ICS network frame is converted into an ICS network frame corresponding to a network address, the transfer destination of the ICS network frame is 1 or N, and the ICS network frame is accessed by another access via at least one VAN according to the rules of the ICS address system ADS. This is achieved by returning to the ICS user frame based on the management of the conversion table of the access control device when the data is transferred to the control device so as to reach another external information communication device.

[0009]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS FIG. 1 schematically shows the basic principle of the present invention.
ted Information / Communication System: abbreviated as "ICS" hereinafter) 1 has a rule of assigning an address independently defined as computer information / communication address. That is, it has a unique address system ADS, and a plurality of external computer communication networks and information communication devices, for example, a large number of LANs (LAN-X1 and LAN-X of company X in this example).
2, LAN-X3 and company Y's LAN-Y1, LAN-
Y2, LAN-Y3) has an access control device (2 to 7 in this example) that serves as an access point. The LAN-X1, LAN-X2, and LAN-X3 of the company X have the same address system ADX, and the LAN-Y1, LAN-Y2, and LAN-Y3 of the company Y have the same address system ADY. The access control devices 2, 3 and 4 have a conversion table that manages mutual conversion between the address system ADS and the address system ADX, and the access control devices 5, 6 and 7 include the address system ADS and the address system ADY. It has a conversion table for managing mutual conversion. The computer communication data (ICS frame) in ICS1 is the address system ADS of ICS1.
By using the address according to the above, communication is performed by the IP frame used in the Internet or the like.

Here, a communication operation in the case of the same company will be described. The computer communication data (ICS frame) 80 transmitted from the LAN-X1 of the company X is given an address according to the address system ADX.
Under the management of the conversion table of the access control device 2 in the above, it is converted into an address according to the address system ADS to become the ICS frame 81. Then, when it is transmitted in the ICS 1 according to the rule of the address system ADS and reaches the target access control device 4, it is restored to the computer communication data 80 of the address system ADX under the management of the conversion table, and It is transmitted to LAN-X3. Here, the ICS frame transmitted and received inside the ICS 1 is "I
It is called "CS network frame", and the ICS frame transmitted / received outside ICS1 is "ICS user frame".
Say. The format of the ICS user frame is basically the format defined by RFC791 or RFC1883 used on the Internet or the like, but the handling of the ICS frame deviating from the principle will be described in an embodiment described later.

The ICS network frame 81 includes a network control section 81-1 and a network data section 81.
-2, and the address (address system ADS) of each ICS logical terminal inside the access control devices 2 and 4 is stored inside the network control unit 81-1.
The data value of the ICS user frame 80 is used as the network data portion 81-2 as it is, or the data format is converted into the network data portion 81-2 according to the rules defined inside the ICS 1. This data format conversion rule includes conversion into ciphertext and data compression, for example, and the access control device 2 uses the encryption means and the ciphertext as the original plaintext (I
It may have a decoding means and a data compression means for returning to the CS user frame), and a compressed data decompression means for returning the data compressed data to the original. In the access control device 2,
The ICS user frame 80 is the ICS network frame 81-2, and the network control unit 81-1 is the ICS.
The operation to add to the network frame 81-2 is "IC
In the access control device 4, the operation of removing the network control unit 81-1 from the ICS network frame 81 in the access control device 4 is "ICS reverse encapsulation".
Call.

Similarly, the case of inter-company communication will be described.
The address system A is included in the computer communication data (ICS user frame) 82 transmitted from the LAN-Y2 of the company Y.
Although the address according to DY is given, it is converted into an address according to the address system ADS under the management of the conversion table of the access control device 6 in the ICS 1, and becomes the ICS frame 83. Then, when it is transmitted in the ICS1 according to the rule of the address system ADS and reaches the target access control device 3, it is converted into computer communication data 82 of the address system ADX under the management of the conversion table,
It is transmitted to the LAN-X2 of the company X. Although the present invention uses 32 bits and 128 bits as the length of the address, it is not limited to these lengths. Even if the length of the address is changed to other than 32 bits or 128 bits, the essence of the address conversion which is the basic idea of the present invention does not change.

As described above, according to the present invention, the centralized address management of the ICS 1 enables computer communication within and between companies. A commonly used computer communication user terminal is accommodated in the LAN of the user's premises, and VAN (Value Added Network) is accessed via an access line.
The user frame accommodated in k) and having a different data format and address system for each service type is transferred. For example, Internet services use IP addresses, telephone services use telephone numbers / ISDN numbers (E.164 addresses), X. In the 25 packet service, X. 121 addresses are used. On the other hand, in the ICS 1 of the present invention, address conversion (called ICS address conversion) is performed in the conversion table of the access control device based on the input ICS user frame, and data having various structures is unified into a single data. Information is transferred by converting it into a frame of a data format and address system, that is, an ICS frame.

FIG. 2 shows the ICS 1 of the present invention as a plurality of VANs.
(VAN-1, VAN-2, VAN-3) is schematically shown, each VAN is managed by a VAN operator, and a user of ICS1 applies to the VAN operator for a user communication line. VAN operator performs the IC of the user
The S user address, the ICS network address, etc. are determined, and together with the line type, these pieces of information are registered in the conversion table 12 in the access control device 10 as shown in FIG. I
The CS1 has access control devices 10-1, 10-2, 10-3, 10-4, 10-5 as access points of external connection elements with the LANs of the companies X and Y (or their terminals). Further, the relay devices 20-1, 20-2, 20-
3, 20-4, ICS network servers 40-1, 40-2,
It has 40-3, 40-4, 40-5 and ICS address management servers 50-1 and 50-2. Each VAN
A relay device 20 as shown in FIG. 4 is provided in the internal communication path, and an inter-VAN gateway 30 as shown in FIG. 5 is provided as a connecting element of VAN-2 and VAN-3. LAN 1-1, 1-2, 1-3, 1-shown in FIG.
4 are access control devices 10-1, 10-5, and 5 respectively.
10-4 and 10-2 are connected via user communication lines 36-1, 36-2, 36-3, 36-4.

Access control device 10 (10-1, 10-
2, 10-3, 10-4, 10-5) are devices for accommodating a user communication line from the user (company X, Y) to the ICS 1, and as shown in FIG. 11, a conversion table 12 as a database for performing address conversion, a line unit 13 of an input / output interface,
It consists of a temporary conversion table 14. In addition, the relay device 20
Has a transfer function of an ICS network frame and a routing function of routing, and has a processing device 21 and a relay table 22 including a CPU and the like as shown in FIG.
2 is used to determine the communication destination when the ICS network frame is transferred inside ICS1. VA
As shown in FIG. 5, the N-to-N gateway 30 has a relay table 32 for determining the destination of the ICS network frame between the processing device 31 including a CPU and the like and the VAN.

The ICS network server 40 comprises a processing device 41 and an ICS network database 42 as shown in FIG. 6, and the ICS network database 42 has various uses. For example, user-specific data corresponding to the ICS user address (user name, address, etc.), data that does not correspond to the ICS user address, for example, data indicating a communication failure status inside the VAN, or data that is not directly related to the VAN, for example, Digital library that holds and publishes digital documents, public key of public encryption method using encryption technology used to authenticate the authenticity of senders and receivers, data holding such as public key certification data or secret key of private key method Used for. The processing device 41 refers to the ICS network database 42, acquires the corresponding data, and transmits it to the access control device 10. In addition, ICS network database 4
In addition to operating independently, 2 can communicate with other ICS network servers by transmitting and receiving ICS network frames based on the IP communication technology, and can acquire data from other ICS network servers. The ICS network server is given a unique ICS network address inside the ICS.

In the present invention, an address for identifying a computer or terminal used in an ICS network frame is called an "ICS network address", and an address for identifying a computer or terminal used in an ICS user frame is called an "ICS user". Address ”. ICS
Network address is used only inside ICS
Either one or both of a 2-bit length and a 128-bit length are used. Similarly, the ICS user address uses one or both of a 32-bit length and a 128-bit length. An ICS network address is given to each of the ICS logic terminal inside the access control device 10, the relay device 20, the inter-VAN gateway 30, and the ICS network server so as to be uniquely identified from others. Also, ICS
The user address is composed of a VAN upper code and a VAN internal code. When the length of the VAN upper code is represented by C1 bits and the length of the VAN internal code is represented by C2 bits, C1 + C2 uses either 32 bits or 128 bits. .

In the present invention, the specific method of determining the VAN upper code and the VAN internal code is not specified, but C
In the case of 1 + C2 = 32 bits, for example, VAN upper code = area management code (4 bits) ‖country code (4 bits) ‖VAN code (8 bits) VAN internal code = VAN area code (4 bits) ‖V
The AN access point code (8 bits) ‖ user logic code (4 bits) may be defined. An example of the ICS user address is shown in FIG. 7 for description. Here, the symbol "a | b" represents the concatenation of the data a and b, that is, the data obtained by arranging the data a and b in this order. The ICS network address is also
Like the user network address, it can be assigned including the locality. For example, ICS network address = region management code‖country code‖VAN code‖VAN area code‖user logical communication line code. In this way, the relay device can efficiently find the transmission destination by determining the transmission destination in consideration of the area. The same can be defined when C1 + C2 = 128 bits.

In the present invention, C1 + C2 = 32 bits or C1 + C2 =, regardless of how the internal fields of the VAN upper code and the VAN internal code are divided and the length of each divided field is determined.
As long as 128 bits are protected, the IC
S-frames can be constructed. Further, when determining the VAN upper code and the VAN internal code, a part of these codes may be set uniquely to the user. That is, the user can have a user-specific address system. While the address values of 32-bit representation is from address 0 to ^{(2 32} -1) address, in this address, for example, 10 × ^{2 24} address (10 × ² 24 ⁺² 24 -1) address or, (1
72 × 2 ²⁴ + 16 × 2 ¹⁶ ) From the address (172 × 2
Up to ²⁴ + 32 × 2 ¹⁶ -1) or (192 ×
From the address 2 ²⁴ + 168 × 2 ¹⁶ ) to (192 × 2 ²⁴ +
In the section up to the address of 169 × 2 ¹⁶ −1), the present invention is implemented by giving an address uniquely determined by the user.

A physical communication line can be logically divided into a plurality of communication lines, which is a conventional technique.
For example, it is realized by a frame relay (FR) multiplex communication system. In the present invention, the user communication line is divided into a user physical communication line and one or more user logical communication lines for use. Figure 8 shows this situation, 100 Mbps
An example is shown in which the user physical communication line 60 having a communication speed of s is divided into two user logical communication lines 61-1 and 61-2 having a communication speed of 50 Mbps. In addition, separate computer communication devices 62-1, 62-2, 62-3, 62
-4 is connected to each user logical communication line, and IC
S user address “4123,0025,0026,4
124 "is each computer communication device 62-1 to 62-4
Here is an example given to. The user physical communication line 60 is connected to the access control device 63, and the connection point between them is "I".
The CS logic terminal is referred to as "CS logic terminal."
A unique ICS network address is given inside S. In the example of FIG. 8, the user logical communication lines 61-1 and 61-2 are connected to the access control device 63, and the I
The ICS is connected to each of the CS logic terminals 64-1 and 64-2.
Network addresses “8710” and “8711” are assigned.

As described above, since the ICS network server 40 is also given a unique ICS network address,
The ICS network address is the ICS logic terminal or I
The CS network server can be specified as the only one inside the ICS. The ICS network server can exchange information by transmitting and receiving another ICS network server and an ICS network frame assigned with each other's ICS network address using the IP communication technology. This communication function is called "ICS network server communication function". The access control device also has a unique ICS network address in the ICS, and can exchange information with the ICS network server by using another ICS network server communication function as the access control device server. The ICS network server communication function is realized by using, for example, conventional TCP or UDP (User Datagram Protocol).

As described above, the ICS frame of the present invention includes the ICS network frame transmitted / received inside the ICS and the ICS user frame transmitted / received outside the ICS, and each frame is a control unit and a data unit. As shown in FIG. 9, the network control unit, the network data unit, the user control unit, and the user data unit are used in ICS encapsulation or ICS decapsulation. That is, when the ICS user frame enters the ICS from the access control device, the ICS user frame becomes the data part of the ICS network frame, and the control part (network control part) of the ICS network frame is added (ICS encapsulation).
The inside of the network control unit is divided into a basic unit and an extension unit. The basic part is, for example, RFC791 or RFC188.
It is used for the header of 3 standards, and the extension part is used for encryption and the like. If encryption or the like is not necessary at all, the extension part is not used and may not exist.

An area for storing a source address and a destination address is placed in the network control section of the ICS frame. The ICS frame format has an address length of 32.
There are a case of 128 bits and a case of 128 bits. When the address length is 32 bits, for example, the RFC shown in FIG. 152 is used.
The frame format defined by 791 is adopted. When the ICS network address is insufficient with 32 bits, for example, when 64 bits are used, the 32 bits (64 bits-32 bits) of the shortage are written in the option part of the ICS network frame control unit according to the rules of RFC791, and the network address Use 64 bits in length. Here, the above-mentioned user-specific address will be supplemented. Many users, for example (10 ×
Considering the case of having a private address (one of the ICS user addresses) in the section from the address 2 ²⁴ ) to the address (10 × 2 ²⁴ +2 ²⁴ -1), the ICS network address corresponds to the ICS user address. Since the length of the ICS user address is 32 bits, the length of the ICS network address is insufficient when the length is 32 bits, and requires 64 bits, for example. In this case, as described above, the shortage of 32 bits is written in the option section of the ICS network frame control section and the length of the network address is set to 64 bits for use.

It will be described in the first embodiment that the communication between the same users (referred to as intra-company communication) is possible using the private address. Also, the address length is 12
When it is 8 bits, for example, RFC188 shown in FIG.
The present invention is implemented by adopting the frame format according to the definition of No. 3. The source address area and the address stored in the destination address area in the network control unit are ICS network addresses, which are a source ICS network address and a destination ICS network address, respectively. Further, the source address area in the user control unit and the address stored in the destination address area are ICS user addresses,
The sender ICS user address and the receiver ICS user address, respectively.

In implementing the present invention, it is not always necessary to comply with the regulations of RFC791 and RFC1883 as the format of the ICS frame, and the address has 32 bits and 1
Any frame format using any of the 28 bits can be implemented. Generally, in ICS, an ICS user frame defined by RFC791 or RFC1883 of a communication protocol is received from a user, but other frame formats are converted into an ICS user frame format by a conversion unit (conversion unit), and ICS It can be handled in the network.

Embodiment-1 (Basics of ICS, intra-company communication and inter-company communication): The first embodiment of the present invention with reference to FIGS. 10 and 11.
An example will be described of basic communication for determining a transfer destination in the ICS from a recipient ICS user address based on management of a conversion table. 170-1, 170-2, 170- in the figure
3, 170-4 are LANs 100-1 and 100-, respectively.
22, 100-3, 100-4, which are gateways provided inside, and the ICS frame can pass through these gateways 170-1 to 170-4.

First, the address system A is connected to the LAN 100-1 of the company X having a unique address system ADX.
A terminal with an address according to DX and an LA of the same company X
Communication with a terminal connected to N100-2 and having an address according to the address system ADX will be described. That is, the ICS user address “00” on the LAN 100-1
12 "and a terminal having an ICS user address" 0034 "on the LAN 100-2. This communication is based on an address system (ADX in this example) unique within the same company. The terminal to which the address is set is a typical communication mutually performed via the ICS 100, and this is called an intra-company communication service (or intra-company communication). A terminal having an address according to the address system ADX and a company Y
Communication with a terminal connected to the LAN 100-3 and having an address according to the address system ADY will be described. That is, the terminal having the ICS user address “0012” on the LAN 100-1 and the I terminal on the LAN 100-3.
This is communication with a terminal having the CS user address “1156”. This communication is a typical terminal mutual communication performed by terminals having different address systems between different companies using an ICS address system that can be commonly used by each other. This is an inter-company communication service (or inter-company communication). Call.

<< Common Preparation >> In explaining this example,
Address formats and the like are determined as follows, but the specific numerical values and formats shown here are all examples, and the present invention is not limited to these. The ICS network address is represented by a 4-digit number, and both the sender ICS user address and the recipient ICS user address are represented by a 4-digit number. Then, of the sender ICS user address and the receiver ICS user address, an address whose upper two digits are not “00” is set as an inter-company communication address, and this inter-company communication address is I.
This is the only value inside the CS100. Top 2 of sender ICS user address and receiver ICS user address
Although the address whose digit is “00” is the in-company communication address, this in-company communication address may be duplicated with the in-company communication address of another company within the ICS 100. A conversion table 113 included in the access control device 110-1
-1 includes a source ICS network address, a destination IC network address, a sender ICS user address, a receiver ICS user address, a request identification, a speed classification, and the like. The request identification registered in the conversion table 113-1 indicates, for example, “1” for the intra-company communication service, “2” for the inter-company communication service, and “3” for the virtual private line connection described in another embodiment. The speed classification is the speed of the line required for communication from the ICS network address,
It includes throughput (for example, the number of ICS frames transferred within a fixed time).

<< Preparation for corporate communication >> LAN100
-1 and the user of LAN 100-2 specify the terminal to the VAN operator so that intra-corporate communication between terminals connected to each LAN can be performed via VAN-1 and VAN-3. Make an application. Then, the VAN operator responds to the application by accessing the access control devices 110-1 and 110 connected to the LAN 100-1 and the LAN 100-2.
In the conversion table of -5, the above-mentioned ICS network address,
While setting the ICS user address, request identification, etc.,
It is also written and stored in the ICS address management server 150-1.

The setting items relating to VAN-1 are as follows. The ICS network address is determined from the ICS logical terminal of the access control device 110-1 connected to the LAN 100-1. Here, the IC of the logical terminal is determined.
The S network address is “7711”. The corporate communication address of one terminal connected to the LAN 100-1 for which the application is made is “0012”, and this is the sender IC
S user address. The inter-company communication address used by the terminal of this address is "2212", and this is the sender ICS user address. Then, the access control device 1 connected to the LAN 100-2 to which the application is applied
The ICS network address is determined from the ICS logic terminal 10-5. Here, the ICS network address is "9922" and this is the incoming ICS network address. Further, the ICS user address of one terminal connected to the LAN 100-2 is set to "0034", and this is set to the receiver ICS user address. The value "1" indicating the in-company communication service for which the application has been made is the request identification, and the above is registered in the conversion table 113-1.

The setting items relating to VAN-3 are as follows. A value required for reverse communication (communication from LAN 100-2 to LAN 100-1) is set in the conversion table of the access control device 110-5 connecting the LAN 100-2 to which the application is applied. That is, the sending ICS network address and the receiving ICS network address have opposite data, and at the same time, the sender ICS user address and the recipient ICS user address have opposite data. The ICS network address of the LAN 100-2 is set to “9922” and is set as the transmission ICS network address. In-house ICS of terminals connected to LAN 100-2
As the user address, “0034” is set as the sender ICS user address, and the ICS user address “0012” of the communication destination terminal is set as the recipient ICS user address. Further, the ICS network address “7711” of the LAN 100-1 is set as the incoming ICS network address, the value of the request identification indicating the in-house communication service is set as “1”, and this is set as the request identification. The above is the access control device 1
Register by writing in the conversion table of 10-5.

<< Operation of In-Company Communication >> The terminal having the ICS user address “0012” is the ICS user frame P1.
Is sent. The sender ICS user address "0012" is set in this ICS user frame P1 and the receiver I
“0034” is set in the CS user address.

Next, description will be made with reference to the flowchart of FIG.

The ICS user frame P1 is transferred to the access control device 110-1 via the user logical communication line 180-1. The access control device 110-1 is the LA
Originating ICS network address of N100-1 "77"
11 "(steps S100 and S101), the received I
Recipient of CS user frame ICS user address "0"
034 ”, the conversion table 113-1 is referred to, and it is known from the request identification value“ 1 ”that this communication is intra-company communication (step S102). Corresponding to the recipient ICS user address“ 0034 ”. The incoming ICS network address "9922" is acquired (step S103), and then I
It is CS-encapsulated (step S106). The above procedure is shown in a flowchart of FIG. 12, and the intra-company communication follows the flow (1). The sender ICS user address may be used, for example, to identify the source of the ICS frame.

The access control device 110-1 forms an ICS network frame P2 by ICS encapsulation and transmits it to the relay device 120-1. Since the ICS network address of the network control unit is guaranteed to be unique within the ICS, it does not collide with other ICS frames. The ICS network frame P2 contains the relay device 120-based on the incoming ICS network address.
1 and 120-2 to reach the access control device 110-5 of VAN-3. Access control device 110-
Reference numeral 5 denotes a LAN by removing the network control unit from the ICS network frame P4 and decapsulating the ICS, reproducing the same ICS user frame P5 as the ICS user frame P1 from the network data unit of the ICS frame.
Transfer to 100-2. LAN for ICS user frames
It is routed in 100-2 and transferred to the terminal having the ICS user address “0034”.

<< Preparation for inter-company communication >> As an example of inter-company communication service, LAN1 according to address system ADX
ICS user address "001 connected to 0-1"
2 ”terminal and LAN1 according to address system ADY
ICS user address “115” connected to 00-3
Communication with a terminal having 6 "will be described. LAN 100
-1 and the user of the LAN 100-3 specify terminals to the connected VANs so that they can communicate via VAN-1 and VAN-2, and apply to the VAN operator. The VAN operator can use the LAN 10 upon request.
Necessary items are set in the conversion table of the access control device connected to 0-1 and the LAN 100-3.

The setting items relating to VAN-1 are as follows. The ICS network address of LAN100-1 is set to "7711", and there is an application for LAN1.
The in-company communication address of one terminal connected to 0-1 is set to "0012", and this is set to the sender ICS user address. The inter-company communication address given to the terminal of this ICS user address is "2212", and this is the sender ICS user address (inter-company). ICS of the access control device 110-4 connected to the ICS network address of the LAN 100-3 for which the application is made
The ICS network address is determined from the logic terminal, but here it is "8822" and this is the incoming ICS network address. In addition, the ICS user address of one terminal connected to the LAN 100-3 is “1156”.
Let this be the recipient ICS user address. Further, the value "2" indicating the inter-company communication service for which the application is made is used as the request identification, and the above is registered in the conversion table 113-1.

The setting items relating to VAN-2 are as follows. As a conversion table for the access control device 110-4 to which the LAN 100-3 is connected, a temporary conversion table 114-that holds reverse data for a certain period of time, for example, 24 hours.
Set 2. That is, with respect to the ICS network address “8822” connected to the LAN 100-3 that uses the communication service between companies, the originating ICS network address, the sender ICS user address, the recipient ICS user address, the incoming ICS network address, the request identification, etc. The temporary conversion table 114-2 including the above is provided inside the access control device 110-4. However, the temporary conversion table 114
The timing of setting -2 will be described later. In the other embodiment described above, the temporary conversion table 114-2 is not set.

<< Operation of Inter-company Communication >> A terminal having an ICS user address “0012” has an ICS user frame in which the sender ICS user address is set to “0012” and the receiver ICS user address is set to “1156”. Send F1. The ICS user frame F1 is transferred to the access control device 110-1 via the user logical communication line 180-1.

The access control device 110-1 is the LAN 1
0-1 originating ICS network address “771
1 "(steps S100, S101), recipient ICS
Conversion table 113-using user address “1156”
By referring to No. 1, it is known that the request identification is "2", that is, the inter-company communication service (step S102). Next, the incoming call I corresponding to the recipient ICS user address "1156"
While knowing that the CS network address is "8822" (step S104), the sender ICS user address "0012" is set as the inter-company communication address "221".
2 ”(step S105). The access control device 110-1 sends the originating ICS network address“ 7 ”.
711 ”, sender ICS user address“ 2212 ”,
Recipient ICS user address “1156”, incoming ICS
A network control unit is added as a network address "8822" to encapsulate it in an ICS, and the ICS network frame F2 is transmitted to the relay device 120-1 (step S106). The above procedure is the flow of (2) in the flowchart of FIG.

In the above-mentioned inter-enterprise communication, when the sender ICS user address in the ICS user frame F1 is the inter-enterprise communication address "2212", the sender and the receiver use the inter-enterprise communication address. Is performed (steps S102 and S104). In this case, the access control device 110-1 determines that the sender ICS user address “22
The process of converting the 12 "into the inter-company communication address" 2212 "is unnecessary and is not executed.
It becomes (3) in the flowchart of 2. The sender ICS user address may be used to specify the source of the ICS frame, for example.

The relay device 120-1 transmits the ICS network frame based on the incoming ICS network address to the relay device 120-2 in VAN-1, the inter-VAN gateway 130, and the relay device 120-3 in VAN-2.
And is transferred to the access control device 110-4 in the VAN-2. Next, description will be made with reference to the flowchart in FIG. The access control device 110-4 receives the ICS network frame (step S110), creates an ICS user frame F5 from the network data part (step S111: ICS reverse encapsulation), and receives the incoming IC.
The ICS logical terminal to be transmitted is determined from the S network address ((1) of step S112) LAN 100
-3 (step S113). Sending IC at the same time
S network address "8822" and sender ICS
The relationship between the user address “1156”, the recipient ICS user address “2212”, and the incoming ICS network address “7711” is the access control device 110-4.
If these are not registered in the conversion table inside the
The type address is set to the request identification “2”, that is, the designation of the inter-company communication is set in the temporary conversion table 114-2 (step S
112 (2)). The setting contents of the temporary conversion table 114-2 are updated, for example, by performing processing such as deleting when there is no use for 24 hours. ICS user frame is LAN1
00-3 is routed and transferred to the terminal having the ICS user address “1156”. Conversion table 114-
The column of the sender ICS user address of No. 2 is the conversion table 113.
In the case of being divided into “inside company” and “between companies” like -1, for example, sender ICS user address (inside company)
Value of "0023" and the value of the sender ICS user address (between companies) is "1159", the destination address of the user control unit of the ICS user frame immediately after the ICS decapsulation. When the ICS user frame whose address value written in the column is “1159” is processed, the process of rewriting the destination address value of the user control unit of this ICS user frame to “0023” is performed in step S112 (1) described above. ) Processing. To summarize the effects of the above processing, inside the LAN, the ICS user address “0023” for intra-company communication is used.
However, for other companies outside the LAN, it can be claimed that the ICS user address for inter-company communication is “1159”. In the above other embodiment, the temporary table 11
Do not set to 4-2. Further, in the other embodiment described above, the conversion table 113-1 indicates the sender ICS user address (inside the company).
And the sender ICS user address (between companies) is not included,
Further, the flowchart (2) of FIG. 12, that is, step S
Does not include 105. Further, in step S104, the sender ICS user address is not referred to. The advantage of this embodiment is that when there are many sender ICS user addresses for one receiver ICS user address, the number of registrations in the conversion table can be reduced to only one receiver ICS user address.

Embodiment 2 (Virtual Private Line): The operation of the virtual private line connection according to the present invention will be described with reference to FIG.
Here, the virtual private line connection is irrelevant to the ICS user address in the user control unit of the ICS user frame,
Incoming ICS whose ICS user frame is registered in the conversion table
It is a communication that transfers fixedly to a network address,
It takes the form of one-to-one or one-to-N. The components of FIG. 14 are almost the same as those of FIG. 10 and FIG. 11 of the first embodiment,
The difference is the registered contents of the conversion table. In the conversion table of the access control device, the incoming ICS network address is fixedly determined from the outgoing ICS network address. The address is not registered, or if registered, it is ignored.

The company X's LAN is connected to the access control device 210-1 by using the virtual private line connection.
A case will be described in which communication is performed between the computer 200-1 and the LAN 200-2 of the company X connected to the access control device 210-5.

<< Preparation >> The user applies to the VAN operator for virtual private line connection. VAN operator is L of company X
Access control device 210-1 for connecting the AN 200-1
And the user logical communication line 240-1, the ICS network address “7711” of the ICS logical terminal at the connection point is determined, and similarly, the access control device 210-5 that connects the LAN 200-2 of the company X and the user logical communication line 240. The ICS network address “9922” of the ICS logic terminal at the connection point with the −2 is determined. Next, the VAN operator, in the conversion table 213-1 of the access control device 210-1, sets the outgoing ICS network address “7711” and the incoming ICS.
The network address “9922” and the request type are set. FIG. 14 shows an example in which the request type “3” is a virtual private line connection. Similarly, the access control device 21
In the conversion table of 0-5, the outgoing ICS network address “9922” and the incoming ICS network address “77
11 "and request type information is set.

<< Procedure >> The procedure will be described with reference to the flowchart of FIG.

LAN 200-1 of company X is ICS200
To the ICS through the user logical communication line 240-1
The user frame F10 is transmitted. Access control device 2
10-1 is the ICS network address “7711”
The ICS user frame F10 is received from the ICS logic terminal (step S200, S201), and the conversion table 213
It is recognized that the connection is a virtual private line by referring to the request identification value "3" of the outgoing ICS network address "7711" of -1 (step S202), and the incoming ICS network address "9922" is read (step S20).
3). Next, the access control device 210-1 creates a ICS network frame F11 by adding a network control unit in which the incoming ICS network address is set to "9922" and the outgoing ICS network address is set to "7711" in the ICS user frame F10. (Step S204: ICS encapsulation), relay device 2
It is sent out to 20-1 (step S205). IC
The relay device 22 which has received the S network frame F11
0-1 is the incoming I of the ICS network frame F11.
The destination is determined based on the CS network address, and the ICS network frame F is sent to the relay device 220-2.
12 is sent out. ICS network frame F12
Is transferred to the access control device 210-5 via the relay device 220-4 in the VAN-3.

The access control device 210-5 removes the network control unit from the ICS network frame F13 (ICS reverse encapsulation) and sets the ICS user frame F14 to the ICS network address "992".
2 "ICS logic terminal to user logic communication line 240-
Send to 2. And the LAN 200-2 of the company X is I
The CS user frame F14 is received. Since the LAN 200-2 can also transmit to the LAN 200-1 in the same manner as described above, mutual communication is possible. In the above description, it is clear that the sender and the receiver are not necessarily the same company X. Therefore, the LAN 200-1 of the company X and the LAN 200 of the other company Y are processed in the same manner.
-3, the ICS user frame can be transferred.

In the above description, one-to-one communication is taken as an example, but one-to-N communication is also possible. For example, in FIG.
In the conversion table 213-1 of the access control device 210-1 of
A plurality of incoming ICS network addresses may be set as indicated by the outgoing ICS network address “7712”. In this example, two ICS network addresses “6611” and “8822” are set. When the access control device 210-1 receives the ICS user frame from the ICS logical terminal whose ICS network address is "7712", the first ICS network frame in which the network control unit in which the incoming ICS network address is set to "6611" is added is added. Then, a second ICS network frame with a network control unit in which the incoming ICS network address is set to "8822" is created, and these are sent to the relay device 220-1. As a result, one-to-two communication is possible. Further, by transferring each ICS network frame in the same manner as described above, one-to-N communication is possible.

Embodiment 3 (ICS network server): As shown in FIG. 16, the ICS network server 330 is composed of a processing unit 331 and an ICS network database 332, and the data held by the ICS network database 332 is a question item, Type,
It consists of the content of the reply and the network address of another ICS network server. The ICS network server 330 analyzes the data part of the ICS frame received from the access control device 310-1, refers to the ICS network database 332 based on this, and acquires the answer content corresponding to the question item (type " 1 "), the obtained answer is returned to the access control device 310-
Send to 1. Further, when the ICS network database 332 does not hold the answer contents corresponding to the question item (type “2”), the ICS network server communication function is used to set the question item based on the ICS network address of another ICS network server. The corresponding answer is queried and acquired by another ICS network server, and the answer to the question obtained as a result is transmitted to the access control device 310-1.

More specifically, the conversion table 3 is prepared as a preparation item.
13-1 includes an ICS user address “2000” and an ICS network address “77” of the ICS network server 330.
21 "and request identification" 4 ". Here, the request identification" 4 "has a common number (ICS special number) with other users such as the ICS user address" 2000 "being the Japanese telephone number" 119 ". Number)). next,
It is written in the ICS network database 332 that the type for the question Q1 is "1" and the answer content is "A1", the type for the question Q2 is "2", the answer content is blank, and another IC
ICS network address “88” of the S network server 340
44 "is written.

Next, the ICS user address "0012"
User transmits the ICS user frame F20 directed to the ICS user address “2000” of the ICS network database 332 (including the question Q1), and the access control device 310-1 uses the ICS logical terminal of the line unit 311-1. The ICS user frame F20 is received, the ICS network address "7711" is acquired, and then the conversion table 31
Referring to 3-1, the ICS network frame in which the ICS frame F20 is ICS encapsulated is sent to the ICS network server 320. As shown in the flowchart of FIG. 17, the ICS network database 332 is the ICS frame F20.
The answer A1 corresponding to the question Q1 included in (steps S300 and S301), and the access control device 310-
Answer A1 is returned to 1. The access control device 310-1 is
I including answer A1 in ICS user address "0012"
Send a CS frame.

An IC in which the user of the ICS user address "0012" directs to the ICS user address "2000"
After transmitting the S frame F21 (including the question Q2), the access control device 310-1 refers to the conversion table 313-1,
When the ICS network address “7721” is obtained, I
An ICS frame in which the CS frame F21 is ICS encapsulated is sent. The ICS network database 332 recognizes the type “2” corresponding to the question Q2 of the ICS frame F21 (step S300), and the ICS network database 332.
Knowing that he / she does not hold the answer (A2), he / she uses the ICS network communication function based on the ICS network address “8844” of the other ICS network server 340 to execute the ICS.
Information is exchanged with the network server 340 (step S302), and the answer “A2” corresponding to the question Q2 is acquired (step S3).
03), the response A2 is returned to the access control device 310-1. The access control device 310-1 transmits an ICS frame including the answer A2 to the ICS user address “0012”.

Embodiment-3A (when the ICS network server is connected to the relay device): As shown in FIG.
The network server 330 is connected to the access control device 310-1, but is not connected to the relay device 320-1. On the other hand, in this embodiment, as shown in FIG.
The S network servers 340A-1 and 340A-2 are connected to the access control devices 310A-1 and 310A-2, respectively, while the ICS network server 340A-3 is connected to the relay device 320.
It is connected to A-1. In addition, which ICS network server 3
40A-1, 340A-2, 340A-3 are also ICS3
00A has a unique ICS network address. The ICS network server 340A-3 uses the ICS network communication function to communicate with the ICS network servers 340A-1 and 340A-2 connected to the access control device in the same VAN-300A1, and only these ICS network servers are available. You can collect and retain the unique information that you maintain. Such an ICS network server is a VAN-300A1.
Is a representative ICS network server. As a result, the ICS network server 340A-1 communicates with the ICS network server 340A-3 representing the VAN-300A1 and obtains the unique information of the ICS network server 340A-2 connected to another access control device. can do. Also, VAN
-ICS network server 340A-3 representing 300A1
, And the ICS network server 340A-6 representing the other VAN-300A2 can communicate with each other using the ICS network communication function and exchange the unique information held by each. still,
VA is connected to the ICS network server connected to the access control device.
Information held by all the ICS network servers inside N may be collected and used as an ICS network server representing VAN.

Embodiment 4 (ICS address management server): As shown in FIG. 19, the ICS address management server 430 is connected to the access control device 410-1 via the ICS network communication line 460, and this access control device 41 is connected.
An IC having an ICS logic terminal on the line unit 411-1 of 0-1
A correspondence table 432 of the S network address and the corresponding ICS user address is held. IC
S user address “2013”, “2014”, “12”
ICS network addresses “7711”, “7711”, and “771” corresponding to 34 ”and“ 4500 ”, respectively.
2 ”and“ 7713 ”are held. At the same time, all information described in the conversion table and address related information such as records regarding VAN operation may be included. Further, the ICS address management server 430 includes a plurality of other information. It holds the ICS network address of the ICS address management server and the ICS network addresses of a plurality of ICS name servers.
In addition, the ICS address management server is described in Example-5 below.
The ICS that communicates with the ICS name server and the ICS network server communication function shown in, and corresponds to the ICS user address
You can get the name.

Processing unit 4 of access control unit 410-1
12-1 communicates with the ICS address management server 430 using the ICS network server communication function, presents the value of the ICS network address and tells the corresponding ICS user address, or presents the value of the ICS user address. The corresponding ICS network address can be taught. This will be described with reference to the flowchart of FIG. The ICS address management server 430 checks whether the ICS network address or the ICS user address inquired by the access control device server 410-1 is registered in the correspondence table 432 held by itself (step S400), and is included in the correspondence table. If yes, answer (step S401). If not, another IC
Communication is performed with the S address management server 440 using the ICS network server communication function to acquire the ICS user address or the ICS network address (step S402), and the result is returned to the access control device 410-1 as the inquiry source (step S403). ). With this configuration, the access control device 410-1 can request the ICS address management server 430 to acquire the other address from one of the ICS network address and the ICS user address.

Embodiment-4A (when the ICS address management server is connected to the relay device): As shown in FIG. 19, the ICS address management server 430 is connected to the access control device 410-1, but is relayed. Device 420-1
Not connected to. On the other hand, in this embodiment, FIG.
ICS address management server 450B-3
Is connected to the relay device 420B-1, and the ICS address management server 450B-3 is the only I inside the ICS 400B.
It has a CS network address. The ICS address management server 450B-3 uses the ICS network server communication function and is connected to the access control device inside the same VAN-400B1.
-1 and 450B-2, the ICS network address, the ICS user address, and the ICS address related information held by these ICS address management servers can be collected and held. Such an ICS address management server is an ICS that represents the VAN-400B1.
It is called an address management server. As a result, the ICS address management server 450B-1 communicates with the ICS address management server 450B-3 representing the VAN-400B1,
Information related to the ICS address held by the ICS address management server 450B-2 can be obtained. Also, VA
ICS address management server 4 representing N-400B1
IC representing 50B-3 and other VAN-400B2
The S address management server 450B-6 can communicate with each other using the ICS network server communication function to exchange the ICS address related information held by each. The ICS address management server connected to the access control device may collect the information held by all the ICS address management servers inside the VAN to serve as the ICS address management server representing the VAN.

Example-5 (ICS name server): IC
The S user address is, for example, a 32-bit binary number or 1
This embodiment-5 has a drawback that it is hard to remember because it is expressed by a 28-bit binary number, and instead, a method of using an "ICS name" that is easy for a person to remember is Embodiment-5. In addition, instead of "ICS name", "ICS domain name"
The term is also used. In this case, the ICS name server is referred to as an ICS domain name server.

First, the ICS name will be described. Two
As shown in FIG. 7, the ICS address expressed in a decimal number is, for example, a regional management code, a country code, a VAN code, a VAN.
It is expressed by area code, VAN access point code, and user logic code.
For example, regional management code ‖ country code ‖ VAN code ‖ VA
N area code / VAN access point code / represented by user logic code. The ICS name is, for example, the area management code that can be represented by a binary value as described above,
S (element of ICS name meaning Asia), JP (Japan), VAN # 1 (identifying one of VAN), DIS # 1
(Identify one of the VAN area codes that make up VAN # 1), ACS # 1 (VAN limited by DIS # 1)
Identify one of the access point codes), USR # 1
(Identify one of user logic codes). Reverse the elements of the ICS name defined above,
Lined with "." Between the dots, that is, "USR # 1.ACS #"
1. DIS # 1. VAN # 1. JP. AS "is defined as the ICS name. In the above case, for example, USR # 1 is divided into USR # 10 and COMP # 10, ACS # 1 is divided into ACS # 11 and ACS # 12, and "USR # 10. COMP # 10. AC
S # 11. ACS # 12. DIS # 1. VAN # 1. J
P. You may divide into more detail like "AS".

An ICS name server, which is a type of ICS network server, will be described. As shown in FIG. 22, the ICS name server 550 includes a processing device 551 and an ICS name conversion table 552. The ICS name conversion table 552 includes, for example, an ICS name and a type (IC corresponding to the ICS name.
S user address is identified), ICS user address, etc. The type “2” indicates that the ICS network database 332 does not hold the ICS network address corresponding to the ICS name, and thus acquires the ICS network address corresponding to the ICS name from another ICS name server. Here, for example, IC
S name "USR # 2.ACS # 2.DIS # 2.VA
N # 2. JP. Another ICS name server that manages "AS" is "USR # 2. “DIS #” excluding ACS # 2 ”
2. VAN # 2. JP. It can be called by "AS". IC
The S name server 550 analyzes the ICS frame data part received from the access control device 510-1, refers to the ICS name conversion table 552 based on this, acquires the ICS user address corresponding to the ICS name, and acquires the ICS user address. 510-1. Further, based on the ICS user dress, the corresponding ICS name is answered. IC
If the corresponding ICS user address does not exist in the S name conversion table 552, the ICS network server communication function is used to make a request to another ICS name server that holds the ICS user address inquired about. The acquired ICS user address is transmitted to the access control device 510-1.

Sender IC connected to LAN 500-1
The terminal with the S user address “0012” is “USR # 1.ACS # 1.DIS # 1.VAN #” of ICS name 1.
1. JP. A method of acquiring the ICS user address corresponding to AS "will be described. Here, the access control device 510 is used.
A case where -1 acquires data from the ICS name server 550 and a case where -1 acquires data from another ICS name server 560 will be described.

First, as a preparation item, the access control device 5
In the conversion table 513-1 of 10-1, the ICS name server 5
I corresponding to 50 ICS user address "1000"
The CS network address "7741" and the request identification "4" are registered. Here, the request type “4” is ICS
User address "1000" is telephone number "119"
Represents an ICS special number common to other users. In the ICS name conversion table 552 of the ICS name server 550, the ICS name “USR # 1.ACS # 1.D” is displayed.
IS # 1. VAN # 1. JP. The receiver ICS user address “2014” corresponding to AS ”is registered. Then, the terminal user of the sender ICS user address“ 0012 ”of the LAN 500-1 is the access control device 510.
-1, the ICS user frame F40 is transmitted, and the ICS name # 1 “USR # 1.ACS # 1.DIS # 1.VA” is sent.
N # 1. JP. A request is made for the conversion from AS "to an ICS user address. The processing unit 512-1 in the access control unit 510-1 receives the ICS user frame F40 from the ICS logic terminal of the line unit 511-1.
Get network address "7711", then IC
Based on the recipient ICS user address of the S user frame F40, the conversion table 513-1 is referred to, and when the corresponding request identification is "4" (connect to the ICS name server with the ICS special number), it is acquired by the above operation. The ICS user frame F40 is ICS-encapsulated by using the ICS network address "7711", and IC is sent to the ICS name server 550.
Send an ICS network frame containing the S name.

As shown in the flow chart of FIG. 23, I
The CS name server 550 analyzes the ICS name in the ICS frame received from the address control device 510-1 in the processing device 551, and refers to the ICS name conversion table 552 based on this ICS name (step S500). And
The ICS user address corresponding to the ICS name is ICS
If it exists in the name conversion table 552, get it,
The ICS network frame F45 including the ICS user address "2014" is sent to the access control device 510-.
1 (step S501). In addition, I was asked
When the CS name does not exist in the ICS name conversion table 552, for example, the processing device 512-1 receives the ICS user frame F41, and the ICS name # 2 (that is, USR # 2.AC) described in the ICS user frame F41 is received.
S # 2. DIS # 2. VAN # 2. JP. AS) is I
If not described in the CS name conversion table 552, IC
The S name server 550 uses the ICS name (DIS # 2.V).
AN # 2. JP. The ICS network address of another ICS name server is acquired from the ICS name conversion table 552 based on AS), and the ICS name server 560 and the ICS
By exchanging information using the network server communication function, the ICS user address “1130” corresponding to the inquired ICS name is acquired (step S502), and the acquired result is transmitted to the access control device 510-1 ( Step S503).

The access control device 510-1 exchanges information with the ICS address management server 570 based on the recipient ICS user address described in the ICS network frame F45 received from the ICS name server 550 to obtain the ICS user address. The corresponding ICS network address and the address-related information included in the correspondence table are acquired, and the data including the acquired ICS user address, ICS network address, and address-related information is written in the conversion table 513-1. Access control device 510-1
Sends the ICS user address “2014” (or “1130”) obtained from the ICS name server 550 to the LAN 5
0-1 is transmitted to the terminal user of the sender ICS user address "0012". Here, the ICS user address “0012” is written in the ICS network frame F45. The terminal user of the sender ICS user address “0012” of the LAN 500-1 receives the recipient ICS user address “2” obtained from the access control device 510-1.
014 ”(or“ 1130 ”) is obtained.

Embodiment-5A (when the ICS name server is connected to the relay device): In FIG. 22, the ICS name server 550 is connected to the access control device 510-1, but the relay device 520-1 is connected to it. Not connected.
On the other hand, in this embodiment, as shown in FIG. 24, the ICS name server 550C-3 is connected to the relay device 520C-1, and the ICS name server 550C-3 is the ICS 500.
It has the only ICS network address inside C. The ICS name server 550C-3 uses the ICS network server communication function to connect to the ICS name servers 550C-1 and 550C- connected to the access control devices 510C-1 and 510-C2 inside the same VAN-500C1.
2 can be communicated with to collect and retain the unique information retained only by these ICS name servers. Such an ICS name server is called an ICS name server representing the VAN-500C1. As a result, the ICS name server 550C-1 can communicate with the ICS name server 550C-3 representing the VAN-500C1 and obtain the unique information of the ICS name server 550C-2. Also, an IC representing the VAN-500C1
S name server 550C-3 and other VAN-500C
2 represents the IC with the ICS name server 550C-6.
Communication can be performed using the S network server communication function, and the unique information held by each can be exchanged. It should be noted that the ICS name server connected to the access control device has all I
Collect the information held by the CS name server, and
May be used as the ICS name server representing the.

Embodiment-6 (ICS name server): In Embodiments-5 and -5A, access control device 510-
1 does not write the acquired data such as the ICS user address and the ICS network address to the conversion table 513-1.
These data obtained instead are converted into a temporary conversion table 514-1.
Write to. In this case, the address data written in the temporary conversion table is deleted after 24 hours, for example.

Embodiment-7 (ICS name server): In Embodiments-5 and -5A, access control device 510-
1 does not call the address management server 570 and obtains I
CS user address “2014” (or “1130”)
Is provided to the terminal having the ICS user address "0012".

Embodiment 8 (Billing server): As a billing system, "network billing system" for counting and billing ICS user frames transmitted and received during communication, and information inside the transmitted and received ICS user frames The "information charging method" that counts and charges the ICS user frame that is transmitted and received, and does not charge the ICS user frame that is transmitted and received.
For example, there are three methods, a "flat-rate billing method" in which a fixed fee is set on a monthly basis. Here, in the information charging system,
The user control unit of the ICS user frame counts and charges by designating an identifier indicating information charging. In both the network charging method and the information charging method, the case where the sender of communication bears the charge is called "call origination charge", and the case where the receiver pays is called "incoming call charge". The network billing method and the information billing method are collectively called "pay-as-you-go billing method".

<< Structure >> A charging system in the ICS network of the present invention will be described with reference to FIGS. 25 and 26.

The setting information of the charging method is the conversion table 813-1 and the charging server 840 in the access control device 810-1.
Is held in the flat rate definition table 843 in the
-1 is set value of whether network charging or information charging is used, and whether to use a pay-as-you-go billing system (divided into outgoing billing and incoming billing) or a flat-rate billing system (divided into outgoing billing and incoming billing) The setting value of whether to use is held. Hereinafter, description will be given with reference to the flowchart in FIG. The access control device 810-1 uses the ICS user frame F50.
(Step S800), based on the ICS user address included in the ICS user frame, the type of charging method for each ICS frame held in the conversion table 813-1 is read to check the charging condition (step S80).
1) If the read type indicates a pay-as-you-go billing system, billing information is generated, and the billing information is stored in the billing information frame F51.
Is transferred to the charging server 840, which is one of the ICS network servers (step S810), and if the read type is a value that does not indicate the pay-per-use charging system, the charging information is not generated and the charging information is displayed in the charging information frame. It is not transferred to the charging server 840 as F51 (step S820).

The billing server 840 receives the billing information frame F51 sent from each access control device and stores the billing information contained in the billing information frame. The billing server 840 has a billing processing device 841 and a billing information database 842. The billing processing device 841 sends the billing information frame F5 sent from the access control device 810-1.
1 is received, the billing information contained in the billing information frame F51 is analyzed and stored in the billing information database 842. The billing information database 842 uses the ICS network address and the ICS user address as identifiers.
Store billing information as a database. Further, in the case of the pay-per-use charging system, the billing information database 842 stores information by a count indicating the pay-per-use amount, and an upper limit value can be set for the count. If the set upper limit value is exceeded, the billing server 840 Notifies the access control device 810-1 that the count exceeds the upper limit value, and the access control device 810-1 that receives the notification stops the communication of the user.
The billing server 840 can pass the stored billing information to other VANs or users by using the ICS network server communication function.

(1) Outgoing billing communication example by network billing of a pay-as-you-go billing system: Company X and Company Y are ICS of the present invention
A case where communication between companies is performed using 800 will be described. In this case, LAN800-1 and LAN800-3
The charging method for communication is network charging,
This is a case where the communication charge on the transmitting side is charged to the LAN 800-1 and information charging is not performed.

<< Preparations for Communication >> LAN80
0-1 and LAN 800-3 are connected to the respective access control devices 810-1 and 810-4.

<< Preparation for charging >> LA for communication
Conversion table for N800-1 and LAN800-3 charging conditions
Register 13-1. For registration in the conversion table 813-1, the charging condition is set based on the originating ICS network address, the sender ICS user address, the incoming ICS network address, and the recipient ICS user address. "1" as the value for outgoing billing in network billing
To set. Also, "1" is set as the charging unit price.
Since information charge is not performed, "0" indicating non-charge is set as the charge condition in the information charge condition of the conversion table 813-1. Access control device 8 accommodating LAN 800-3
In the conversion table to 10-4, the charge burden is LAN800-1
Therefore, in order to prevent the access control device 810-4 from performing the charging process, "0" indicating the flat-rate charging system is set.

<< Explanation of Charging Operation >> The ICS user frame F50 transmitted from the terminal of the ICS network address “0012” connected to the LAN 800-1 is processed by the processing unit 812-1 in the access control unit 810-1 ( Steps S800 and S801), the field of the charging condition is specified from the sender ICS user address and the recipient ICS user address in the ICS user frame (step S8).
10) Refer to the charging condition to specify the charging method for network charging from that field. Since the setting value in this case is "1", which is the setting for outgoing charging in network charging, the charging unit price is referred to (step S811), and charging information is generated (for example, charging unit price "1" is set). Generated as billing information once (step S)
812), and transfers the billing information to billing server 840 as billing information frame F51 (step S813).
In the billing processing device 841 of the billing server 840, the network billing counter of the billing information database 842 is added according to the billing information in the billing information frame F51 received from the access control device 810-1 (step S814). If the charging condition is not one of the charging examples described later, the charging described here is performed.

(2) Example of outgoing charging communication of the flat-rate charging system:
A case where the company X uses the ICS 800 of the present invention to perform communication within the company X will be described. In this case, LAN8
In the communication between 00-1 and LAN 800-2, the flat-rate charging system is used, and the communication fee of the calling side is LAN 800-1.
To pay.

<< Preparations for communication >> LAN80
0-1 and LAN 800-2 are connected to the respective access control devices 810-1 and 810-5.

<< Preparation for charging >> LA for communication
The charging conditions of N800-1 and LAN800-2 are registered in the conversion table 813-1. The registration in the conversion table 813-1 includes the transmission ICS network address and the sender ICS.
The charging condition is set based on the user address, the incoming ICS network address, and the recipient ICS user address. "0" is set as the value for which the charging is the fixed-rate charging system, and the charging load is set to "1" indicating the outgoing charging in order to indicate the charging load. Since information is not charged, "0" indicating non-charge is set as the charging condition in the information charging condition of the conversion table 813-1. Access control device 81 accommodating LAN 800-2
"0" indicating the flat-rate charging system is also set in the conversion table for 0-5.

<< Explanation of Billing Operation >> The ICS user frame transmitted from the terminal of the ICS network address “0012” connected to the LAN 800-1 is processed by the processing unit 812-1 in the access control unit 810-1 (step S8
00, S801), sender I in the ICS user frame
The field of the charging condition is specified from the CS user address and the recipient ICS user address (step S81).
0), refer to the charging condition to specify the charging method from the field. Since the set value in this case is "0" indicating the flat-rate charging system, the charging process such as generation of charging information is not performed (step S820). The process of charging a charge is performed with reference to the flat-rate charge definition table 843. That is, the flat-rate charge definition table 843 indicates “0” indicating the outgoing charge.
Is set, the LAN 800-1 is charged for the fee.

(3) Example of incoming call billing communication by network billing of the pay-as-you-go billing system: A case where a company X and a company Y communicate with each other will be described. In this case, LAN800-
1 and the LAN 800-3 is a charging system in which the network charging is a pay-as-you-go system and the LAN 800-3 bears the communication charge on the receiving side, and the information charging is not performed.

<< Preparations for Communication >> LAN80
0-1 and LAN 800-3 are connected to the respective access control devices 810-1 and 810-4.

<< Preparation for charging >> LA for communication
The charging conditions of N800-1 and LAN800-3 are registered in the conversion table 813-1. The registration in the conversion table 813-1 includes the transmission ICS network address and the sender ICS.
The charging condition is set based on the user address, the incoming ICS network address, and the recipient ICS user address. “2” as the value for incoming call billing in network billing
Is set and "1" is set as the charging unit price. Since information charging is not performed, "0" indicating non-charging is set as the charging condition in the information charging condition of the conversion table 813-1. LA
In the conversion table for the access control device 810-4 accommodating the N800-3, since the charge burden is the LAN 800-3, "2" is set as the value for charging the called party by the pay-as-you-go network charging. .

<< Explanation of Charge Implementation >> The ICS user frame transmitted from the terminal of the ICS network address “0012” connected to the LAN 800-1 is processed by the processing unit 812-1 in the access control unit 810-1 (step S8
00, S801), sender I in the ICS user frame
The field of the charging condition is specified from the CS user address and the recipient ICS user address (step S81).
0), refer to the charging condition in order to specify the charging method for network charging from that field. The setting value in this case is "2", which indicates the incoming call charge by network charge.
Therefore, the access control device 810-1 accommodating the LAN 800-1 suspends the accounting process (step S820). The access control device 810-4 accommodating the LAN 800-3 refers to the conversion table when the corresponding ICS frame is received. In this case, since the network charge is set to "2" which is the incoming call charge in the pay-per-use system, the charge information is generated (for example, the charge unit price "1" is generated as the charge information of two times), and the charge is charged. It is transmitted to the billing server 840 as an information frame. Billing server 8
Access control device 810-
In accordance with the billing information of the billing information frame received from 4, the network billing counter of the LAN 800-3 of the billing information database 842 is added.

(4) Incoming call communication example of the flat-rate charging system:
The case where the company X performs communication within the company X will be described. In this case, the charging method in the communication between the LAN 800-1 and the LAN 800-2 is a flat-rate charging method for network charging, and all charges are charged to the LAN 800-2 of the receiving side.
In this case, the information charge is not made.

<< Preparations for Communication >> LAN80
0-1 and LAN 800-2 are connected to the respective access control devices 810-1 and 810-5.

<< Preparation for charging >> LA for communication
The charging conditions of N800-1 and LAN800-2 are registered in the conversion table 813-1. The registration in the conversion table 813-1 includes the transmission ICS network address and the sender ICS.
The charging condition is set based on the user address, the incoming ICS network address, and the recipient ICS user address. “0” is set as the value indicating the flat-rate charging system, and the charge burden of the flat-rate charge definition table 843 is set to “2” for the incoming call charge in order to indicate the charge burden. Since information is not charged, "0" indicating non-charge is set as the charging condition in the information charging condition of the conversion table 813-1. LAN
“0” indicating the flat-rate charging system is also set in the conversion table for the access control device 810-5 accommodating 800-2.

<< Explanation of Charging Operation >> The ICS user frame transmitted from the terminal of the ICS network address “0012” connected to the LAN 800-1 is processed by the processing unit 812-1 in the access control unit 810-1 (step S8
00, S801), sender I in the ICS user frame
The field of the charging condition is specified from the CS user address and the recipient ICS user address (step S81).
0), refer to the charging condition to specify the charging method from the field. In this case, since "0" indicating the flat-rate charging system is set, the charging process such as charging information generation is not performed (step S820). The process of charging a charge is performed with reference to the flat-rate charge definition table 843. That is, the flat-rate charge definition table 843 indicates “2” indicating the incoming call charge.
Is set, the LAN 800-2 is charged for the fee.

(5) Example of origination billing communication by information billing of the pay-as-you-go billing system: The case where the company X communicates with the company Y will be described. The charging method in the communication between the LAN 800-1 and the LAN 800-3 is a case where information charging is performed without charging in the network. Charges are charged when the sender is the LAN 800-1.

<< Preparations for Communication >> LAN80
0-1 and LAN 800-3 are connected to the respective access control devices 810-1 and 810-4.

<< Preparation for Charging >> As the charging condition in the network charging condition, “0” indicating non-charging is set in the conversion table 813-1. Since the billing itself is not done,
The charging unit price is not set. As the information billing condition, "1" indicating the caller billing is set by the pay-as-you-go billing, and the billing unit price is set to "2".

<< Explanation of Charging Operation >> The ICS user frame transmitted from the terminal of the ICS network address “0012” connected to the LAN 800-1 is processed by the processing unit 812-1 in the access control unit 810-1 (step S8
00, S801), sender I in the ICS user frame
The charging condition field is specified from the CS user address and the recipient ICS user address (step S81).
0). To specify the charging condition for network communication from that field, refer to the charging condition. In this case, since "0" indicating non-charge is set, the charge process for the network is not performed (step S82).
0). Next, in order to specify the charging condition for the information charging, the charging condition of the information charging condition is referred to. in this case,
Since "1" indicating the pay-per-use charge of the sender is set, the pay-per-use charge is performed. Further, the charging unit price indicating the weighting of the metered charging is referred to, and the setting value of the charging unit price in this case is "2". Next, the charging information for each ICS user frame is generated based on the obtained information (for example, the charging unit price “2” is generated as the charging information of two times).
Then, the billing information is transferred to the billing server 840 as a billing information frame F51. Receiving the billing information, the billing processing device 841 in the billing server 840 receives the sending ICS network address and the sender I from the billing information frame F51.
The information storage field of the billing information database 842 is specified based on the CS user address, the incoming ICS network address, and the recipient ICS user address, and the network billing counter there is added according to the billing information of the billing information frame F51.

(6) Example of incoming call billing communication by information billing of the pay-as-you-go billing system: The case where the company X communicates with the company Y will be described. The charging method in the communication between the LAN 800-1 and the LAN 800-3 shows a case where the information charging is performed without the network charging. The charge is paid by the LA
This is the case where N800-3 is set.

<< Preparations for Communication >> LAN80
0-1 and LAN 800-3 are connected to the respective access control devices 810-1 and 810-4.

<< Preparation for Charging >> As the charging condition in the network charging condition, “0” indicating non-charging is set in the conversion table 813-1. Since the billing itself is not done,
No charge unit price is set. The information billing condition is set to "2", which is a pay-as-you-go billing with pay-as-you-go billing, and the billing unit price is set to "2".

<< Explanation of Charging Operation >> The ICS user frame transmitted from the terminal of the ICS network address “0012” connected to the LAN 800-1 is processed by the processing unit 812-1 in the access control unit 810-1 (step S8
00, S801), sender I in the ICS user frame
The charging condition field is specified from the CS user address and the recipient ICS user address (step S81).
0). To specify the charging condition for network communication from that field, refer to the charging condition. In this case, since "0" indicating non-charge is set, the charge process for the network is not performed (step S82).
0). Next, in order to specify the charging condition for information charging, the charging condition of the information charging condition is referred to. In this case, since "2" indicating the pay-per-use charge of the called party is set, the pay-per-use charging is performed. . Further, the charging unit price indicating the weighting of the pay-per-use charging is referred to, and in this case, "2" is set. Next, based on these obtained information, I
The billing information for each CS user frame is generated (for example, the billing unit price “2” is generated as billing information of twice), and the billing information is set as the billing information frame F51 in the billing server 84.
Transfer to 0. The billing processing device 841 in the billing server 840 that has received the billing information receives from the billing information frame F51 the originating ICS network address, sender ICS user address, destination ICS network address, and recipient I.
Charging information database 842 based on CS user address
Information storage field is specified, and the network charging counter there is added according to the charging information of the charging information frame.

(7) An example in which the charging condition is not registered in advance in the conversion table in the outgoing charging communication by the information charging of the pay-as-you-go charging system: The company X communicates with the company Y. The charging conditions in the communication between the LAN 800-1 and the LAN 800-4 are the same as the above, but in this case, the value that defines the charging conditions is the conversion table 813- of the access control 810-1 to which the LAN 800-1 is connected. The difference is that it is not registered in 1.

<< Preparations for communication >> LAN80
0-1 and LAN 800-4 are connected to the respective access control devices 810-1 and 810-2.

<< Preparation for charging >> In this case, since the charging condition is not registered in the conversion table 813-1, the LAN8
No preliminary preparation is required in the access control device 810-1 that accommodates 00-1. The conversion table of the access control device 810-2 accommodating the LAN 800-4 includes the LAN 80
Set charging conditions for 0-4 incoming calls. As the charging condition in the network charging condition, "0" indicating non-charging is set in the conversion table. Since the billing itself is not done,
No charge unit price is set. As the information billing condition, "3" indicating the caller billing by the metered billing is set, and the billing unit price is set to "1".

<< Explanation of Charging Operation >> The ICS user frame transmitted from the terminal of the ICS network address “0012” connected to the LAN 800-1 is processed by the processing unit 812-1 in the access control unit 810-1 (step S8
00), from the conversion table 813-1, an attempt is made to specify the field of the charging condition by using the sender ICS user address and the receiver ICS user address in the ICS user frame (step S801). Since there is no field indicating the condition, an inquiry is made to the access control device 810-4 accommodating the recipient user based on the recipient ICS user address of the recipient user (step S802). Access control device 810-4
Is the access control device 8 which indicates the charging condition of the called user.
The conversion table in 10-4 is referred to and the accounting condition is answered to the access control device 810-1. Access control device 81
The charging condition that 0-1 has acquired from the access control device 810-4 is registered in the temporary conversion table 814-1 (step S803). After that, the processing device 812-1 refers to the charging condition in order to specify the charging condition for the network communication from the charging condition (step S810).
In this case, since "0" indicating that the network charge is not charged is set, the charge process for the network is not performed (step S820).

Next, in order to specify the charging condition for information charging, the charging condition of the information charging condition is referred to. In this case, since "1" indicating the pay-per-use fee charged by the sender is set, the pay-per-use fee is charged. Further, the charging unit price indicating the weighting of the pay-per-use charging is referred to, and the setting value of the charging unit price in this case is "1", and the weighting of the charging is known. Charge information is generated for each ICS user frame based on the obtained information (for example, a charge unit price "1" is 1
The accounting information is generated) and the accounting information is transferred to the accounting server 840 as an accounting information frame F51.
Receiving the billing information, the billing processor 841 in the billing server 840 identifies the information storage field of the billing information database 842 from the billing information frame F51 based on the originating ICS network address and the recipient ICS user address, and bills the information there. Counting information frame F
Add according to the charge information of 51.

Embodiment-9 (ICS frame database server): FIGS. 28 and 29 show ICS frame database servers 950 and 9 which are one of the ICS network servers.
6 is an example of the ICS 900 including 60, and the ICS frame database servers 950 and 960 store data based on a request timing of a terminal that uses the ICS 900 (hereinafter, referred to as “ICS using terminal”) or retrieve stored data. And send it to the requestor. The ICS frame database servers 950 and 960 are processing devices 951 and 961, storage information management tables 952 and 962,
It is composed of BOX 953 and 963. Processor 9
51 and 961 receive the ICS user frame from the ICS using terminal, refer to the use request of the ICS frame database server explicitly shown by the ICS using terminal, and refer to the IC
The S user frame storage instruction is issued to the storage information management tables 952 and 962, and the BOX 953 and 963 are instructed to store the information. The storage information management tables 952 and 962 receive the instructions of the processing devices 951 and 961 and accommodate them.
Items to be managed such as a communication partner address and an index number of stored information are stored for each CS user terminal. BOX95
In response to an instruction from the processing devices 951 and 961, 3 and 963 store a management number of information stored for each accommodated ICS-use terminal, user information, and the like. The preparation items for using the ICS frame database servers 950 and 960 and communication examples thereof will be described below. << Preparations >> VAN-1 operator is LAN 90 of company X
001 of the ICS user address connected to 0-1
In order to enable the information storage of the terminal having 2 ", information about the user (ICS user address" 0012 "in this example) is registered in advance in the stored information management table 952 and the BOX 953. Also, the VAN-3 operator also. Similarly, in order to enable the information storage of the terminal having the ICS user address “0034” connected to the LAN 900-2 of the company X, the information regarding the user (in this example, ICS) is stored in advance in the stored information management table 962 and the BOX 963. User address "00
34 ", etc.) is registered. The ICS user uses the ICS user frame F60 as shown in FIG.
Send to. In the ICS user frame F60, the user control unit is provided with a usage request identifier for using the ICS frame database server (an identifier that explicitly indicates that the ICS frame database server is used) and an information operation identifier (within the ICS frame database server). An identifier that explicitly indicates the operation of the stored information) is added. In this embodiment, the user realizes the user's ICS frame database server use request by adding the use request identifier and the information operation identifier to the user control unit of the ICS user frame F60.
The usage request identifier and the information operation identifier can be added to the user data section.

<< Communication Example >> (1) Communication Example-1 (Operation of ICS Frame Database Server on Sending Side): The terminal having the ICS user address “0012” connected to the LAN 900-1 of the company X
Communication using the ICS frame database server is performed to the terminal having the ICS user address “0034” connected to the LAN 900-2 of the company X. A flow chart is shown in FIG. 31 and its operation will be described.

The call originator terminal stores the ICS user in the user control unit with a usage request identifier (user management number stored on the sending side: ICS user code using the ICS frame database server 950) arbitrarily assigned by the user using the ICS. ICS user frame F6 to which is added an index number for operating the stored information) and an information operation identifier (scheduled transfer time, information storage, information transfer, information deletion, information end, etc.)
0 is sent to the ICS 900. The received access control device 910-1 (step S900) receives the processing device 912.
-1 refers to the usage request identifier of the ICS user frame F60 (step S901), and if the number of the usage request identifier set by the caller terminal exists, the ICS user frame F60 is transferred to the processing device 951. The processing device 951 that has received the ICS user frame F60 refers to the usage request identifier and the information operation identifier (step S91).
0), perform the operation indicated by the information operation identifier.

If information storage is indicated, processor 95
1 responds to the sender ICS user address of the relevant frame by receiving the usage request identifier (caller storage user management number) and the information operation identifier (information storage) of the ICS user frame F60 sent from the sender terminal. Then, the receiver ICS user address and the usage request identifier are stored in the storage information management table 952, and the ICS user frame is stored in the BOX 953 (step S911). The ICS user frame to be stored can be a plurality of I's from the sender.
Since this is divided into CS user frames and transmitted, this operation is executed until the last frame of the ICS user frames to be stored is indicated by the information operation identifier (information end) shown in the ICS user frame F60 (step S).
912).

When the scheduled transfer time is indicated (step S913), the processing device 951 causes the processing device 951 to use the usage request identifier (caller side stored user management number) and the information operation identifier (of the ICS user frame F60 sent from the sender terminal). When the designated time is stored in the stored information management table 952 by receiving the scheduled transfer time (step S914), and the processing device 951 constantly monitors the scheduled transfer time, and the corresponding time is reached. Transfers the stored information from the BOX 953 to the recipient terminal (step S
915).

If information transfer is indicated, processor 95.
1 receives the usage request identifier (caller storage user management number) and the information operation identifier (transfer request) of the ICS user frame F60 sent from the caller terminal,
The information (ICS user frame) stored in the BOX 953 is transmitted to the receiver terminal (step S916).
If information erasure is indicated, the processing device 951
ICS user frame F60 transmitted from the sender terminal
Of the storage information management table 952 and the BOX
The stored information is deleted from 953 (step S
917).

(2) Communication example-2 (operation of ICS frame database server on receiving side): LAN 900 of company X
-2 connected to the LAN 900-1 of the company X is the terminal having the ICS user address "0034"
Information from the terminal having the CS user address “0012” is received using the user BOX. A flowchart is shown in FIG. 32, and its operation will be described.

The originator's terminal uses the user control unit for the recipient side I
Usage request identifier that uses the CS frame database server 960 (destination storage user management number: a code that is arbitrarily given by the user who uses the ICS, and serves as an index number when the ICS user operates the stored information. ) And the information operation identifier are added to the ICS user frame F60
To the ICS 900. The corresponding ICS user frame F60 is transferred in the ICS 900 to the access control device 910-5 in which the receiver terminal is accommodated (step S
920), the processor 912-5 refers to the usage request identifier of the ICS user frame F60 (step S92).
1) If the number of the usage request identifier set by the sender terminal exists, the ICS user frame F60 is transferred to the processing device 961.

The processing device 961 having received the ICS user frame F60, the information operation identifier (information storage, information transfer, information deletion, information end) of the ICS user frame F60.
(Step S930), and if the information is stored, the sender ICS user address and the receiver ICS of the corresponding frame
The usage request identifier is stored in the stored information management table 962 in association with the user address, and the ICS user frame is stored in the BOX.
It stores in 963 (step S931). I to store
Since the CS user frame is divided into a plurality of ICS user frames and transmitted from the sender, this operation is an information operation identifier (information end) shown in the ICS user frame F60.
This is executed until the final frame of the ICS user frame to be stored is indicated (step S932). The processing device 962 attaches to the recipient terminal that the information addressed to the recipient terminal exists in the ICS frame database server 960 at the timing agreed with the recipient terminal in advance (for example, at 12:00), by attaching the destination-side stored user management number. And notifies it (step S933). The receiver terminal that has received the notification transmits the ICS user frame F60 in which the usage request identifier and the information operation identifier (information transfer) are set to the access control device 91.
0-5, ICS frame database server 9
The 60 transmits the user information stored in the BOX 963 to the recipient terminal (step S936), and the recipient terminal I
The information (ICS user frame) stored in the CS frame database server 960 is received. The processing device 961 receives the ICS user frame F60 from the receiver terminal.
When the frame in which the usage request identifier and the information operation identifier (information erasure) are clearly received, the information is erased from the stored information management table 962 and the BOX 963 (step S93).
7).

(3) Communication example-3 (when the receiving side cannot temporarily receive): A terminal having the ICS user address "0012" connected to the LAN 900-1 of the company X connects to the LAN 900-2 of the company X. When communicating with the terminal having the specified ICS user address “0034”, even if the connection with the recipient terminal or the LAN 900-2 of the company X is temporarily unavailable, the information addressed to the recipient terminal is stored in the ICS frame database. It is stored in the server 960 once and communication is performed in a state where connection is possible. The operation is shown in FIG.
This will be described with reference to the flowchart in FIG.

The sender terminal temporarily stores the information in the ICS frame database server 960 in the user control unit even when the communication with the receiver terminal is impossible, so that the information operation identifier (temporarily stored) is stored. ) Added I
The CS user frame F60 is sent to the ICS 900.
The corresponding ICS user frame F60 is sent to the access control device 910-5 in which the receiver terminal is accommodated up to the ICS900.
The access control device 910-5 receives the ICS user frame F60 (step S940), and the processing device 912-5 checks the existence of the usage request identifier inside the ICS user frame F60 (step S941).
By referring to the information operation identifier (once stored) of the CS user frame F60 (step S942), if there is a request for once storing, it is judged whether the receiving side terminal is in the communicable state,
If possible, the relevant ICS user frame F60 is transmitted to the receiving side terminal (step S950), and if not possible, the relevant ICS user frame F60 is transferred to the processing device 961 of the ICS frame database server 960,
Next, the processing device 961 determines that the corresponding ICS user frame F
The sender ICS address, the receiver ICS address, and the usage request identifier of 60 are stored in the storage information management table 962, and
The CS user frame is stored in the BOX 963 (step S951).

Since the ICS user frame to be stored is sent by dividing it into a plurality of ICS user frames, this operation should be stored by the information operation identifier (information end) shown in the ICS user frame F60. IC
The process is executed until the final frame of the S user frame is shown (step S952). The processing device 912-5 constantly monitors the communication state with the receiver terminal, and when the receiver terminal becomes ready to receive, notifies the processing device 961 that the receiver communication state is possible. Processor 96 that received the notification
1 notifies the receiver terminal that the information addressed to the receiver terminal exists in the ICS frame database server 960 at a timing agreed with the receiver terminal in advance (for example, after 5 minutes) (step S953). The receiver terminal that has received the notification transmits the ICS user frame F60 in which the usage request identifier (ICS storage user management number) and the information operation identifier (information transfer) are set to the access control device 910-5,
The ICS frame database server 960 is BOX9.
The user information stored in 63 is transmitted to the receiver terminal (step S956), and the receiver terminal receives the stored information from the ICS frame database server 960.

The processor 961 receives the ICS from the receiver terminal.
When receiving the frame in which the usage request identifier and the information operation identifier (information deletion) of the user frame F60 are received, the information is deleted from the stored information management table 962 and the BOX 963 (step S957).

Example-10 (X.25, FR, ATM,
Transmission by satellite communication and telephone line, ISDN line, CATV
Line, satellite line, accommodating IPX frame): I of the present invention
The format of the data from the user in CS is RFC79.
The present invention is not limited to the ICS user frame according to 1 or RFC1883, and can accommodate a telephone line, an ISDN line, a CATV line, a satellite line, and IPX. Also, the relay network of the ICS network frame in the ICS network is X. 25, FR, ATM, satellite communication, etc. are available. In the present invention, AT
The M switch includes a cell relay switch, and the ATM network includes a cell relay network.

34 to 37 show the ICS1000 of the present invention.
Shows an example of interface conversion in
Access control devices 1010-1 and 1010-2, IC
S frame interface network 1050, X. 25 mesh 10
40, FR network 1041, ATM network 1042, satellite communication network 1043, X. 25 / ICS network frame conversion units 1031-1 and 1031-2, FR / ICS network frame conversion units 1032-1 and 1032-2,
ATM / ICS network frame converter 1033
1 and 1033-2, satellite / ICS network frame conversion units 1034-1 and 1034-2, telephone line conversion units 1030-1 and 1030-2, ISDN line conversion units 1029-1 and 1029-2, CATV line conversion unit 1
028-1 and 1028-2, satellite line conversion unit 1027
-1 and 27-2, IPX conversion units 1026-1 and 10-2
26-2.

ICS frame interface network 1050
Is an IC that complies with the regulations of RFC791 or RFC1883.
It is a relay network that transfers S network frames in the same format. X. 25 network 1040 is an X.25 network. 25 is a relay network that transfers frames in the H.25 format, and uses ICS network frames as X.25. X.25 for converting to and from a frame of 25 format. 25 / ICS network frame converter 10
31-1 and 1031-2 are included in the input / output unit. F
The R network 1041 is a relay network for transferring a frame relay format frame, and is an F network for converting an ICS network frame into a frame relay format frame and vice versa.
It has R / ICS network frame conversion units 1032-1 and 1032-2 as input / output units. ATM network 10
42 is a relay network for transferring ATM format frames,
The input / output unit has ATM / ICS network frame conversion units 1033-1 and 1033-2 for converting an ICS network frame into an ATM format frame and inverse conversion. The satellite communication network 1043 is a relay network that transfers information using satellites, and the satellite / ICS network frame conversion unit 10 for converting an ICS network frame into an interface of the satellite communication network and vice versa.
34-1 and 1034-2 are included in the input / output section. The telephone line conversion units 1030-1 and 1030-2 convert and reverse functions corresponding to the physical layer and the data link layer (the first layer and the second layer of the OSI communication protocol) between the telephone line and the access control device. It has the function of converting. ISD
The N line conversion units 1029-1 and 1029-2 are ISD
It has a function of converting a function corresponding to a physical layer or a data link layer between the N line and the access control device and a function of performing reverse conversion. CATV line conversion units 1028-1 and 1028-
Reference numeral 2 has a function of converting a function corresponding to a physical layer or a data link layer between the CATV line and the access control device and a function of performing reverse conversion. Satellite line converters 1027-1 and 1
The 027-2 has a function of converting a function corresponding to a physical layer or a data link layer between the satellite line and the access control device and a function of performing reverse conversion. The IPX conversion units 1026-1 and 1026-2 have a function of converting a function corresponding to a physical layer or a data link layer between the IPX and the access control device and a function of performing reverse conversion.

(1) X. Access control means 1010-1 and access control device 1010 via the 25 network 1040.
-2 will be described below.

The access control device 1010-1 transmits the ICS network frame to the X. 25 to the exchange 10131-1. X. X.25 in the 25 switch 10131-1. 25
/ ICS network frame conversion unit 1031-1
The ICS network frame received from the access control device 1010-1 is the X. Convert to 25 format frame. And X. 25 switch 101
31-1 is an X. X.25 format frames as X.25. 25 mesh 10
Send within 40. X. X.25 sent from the H.25 switch 10131-1. The 25-format frame is X.25. 25 net 104
0, and X. The 25 exchange 10131-2 is reached. Next, X. X.25 in the 25 exchange 10131-2. Two
5 / ICS network frame conversion unit 1031-2
Received X. The access control device 1 converts the 25-format frame back to the ICS network frame format.
010-2. Access control device 1010-2
Receives the ICS network frame. Access control apparatus 1010-2 to X. 25 switch 10131-2
Similarly, the network frame of the ICS 1000 transmitted to the access control device 101 is also transferred to the access control device 1010-1.

(2) Access control measures 1010-1 and access control device 1010-2 via the FR network 1041.
The operation when communication is performed with will be described.

The access control device 1010-1 sends out an ICS network frame. FR exchange 10132
FR / ICS network frame converter 10 in -1
32-1 converts the ICS network frame received from the access control device 1010-1 into a FR format frame as shown in FIG. 39. And FR exchange 1
0123-1 sends the FR format frame to the FR network 1041, and the F sent from the FR exchange 101321 is sent.
The R format frame is transferred in the FR network 1041 and
The exchange 10132-2 is reached. FR switch 1013
FR / ICS network frame converter 1 in 2-2
032-2 sends the received FR format frame to the ICS.
It is converted back to the network frame format and sent to the access control device 1010-2. Access control device 101
0-2 receives the ICS network frame. From the access control device 1010-2 to the FR exchange 10132-
Similarly, the ICS network frame sent to No. 2 is also transferred to the access control device 1010-1.

(3) Access control measures 1010-1 and access control device 1010-through the ATM network 1042
The operation in the case of communicating with 2 will be described.

The access control device 1010-1 uses the ICS
The network frame is sent to the ATM exchange 10133-1. ATM / I in the ATM switch 10133-1
The CS network frame conversion unit 1033-1 converts the ICS network frame received from the access control device 1010-1 into an ATM format frame as shown in FIG. ATM switch 10133-1 is ATM
The frame of the format is transmitted to the ATM network 1042, and the ATM
The ATM format frame sent from the exchange 10133-1 is transferred in the ATM network 1042, and the ATM exchange 1
Reach 0133-2. ATM switch 10133-2
ATM / ICS network frame conversion unit 103 in
3-2 inversely converts the received ATM format frame into an ICS network frame format and sends it to the access control device 1010-2. Access control device 1010
-2 receives the ICS network frame. Access control device 1010-2 to ATM switch 10133-
Similarly, the ICS network frame sent to No. 2 is also transferred to the access control device 1010-1.

(4) Access control measures 1010-1 and access control device 1010 via satellite communication network 1043
-2 will be described below.

The access control device 1010-1 sends the ICS network frame to the satellite receiver / transmitter 101413. Satellite / ICS in Satellite Receiver / Transmitter 10134-1
The network frame conversion unit 1034-1 converts the ICS network frame received from the access control device 1010-1 into an interface within the satellite communication network 1043. Next, the satellite transmitter / receiver 101134-1 converts the ICS converted into an interface in the satellite communication network 1043.
ICS transmitted from the satellite receiver / transmitter 10134-1 by transmitting the network frame into the satellite communication network 1043
The network frame is transferred in the satellite communication network 1043 and reaches the satellite receiver / transmitter 10134-2. The satellite / ICS network frame conversion unit 1034-2 in the satellite receiver / transmitter 10134-2 receives the received satellite communication network 10.
The access control device 1010-2 by inversely converting the ICS network frame converted into the interface in 43.
Send to. The access control device 1010-2 receives the ICS network frame. Access control device 10
The ICS network frame sent from 10-2 to the satellite receiver / transmitter 10134-2 is also transferred to the access control device 1010-1 in the same manner.

(5) User 1060 connected to the telephone line conversion unit 1030-1 of the access control device 1010-1
-1 originates the call and the user 1060-2 connected to the telephone line conversion unit 1030-2 of the access control device 1010-2.
The operation when communication is performed with the telephone line interface will be described.

The user 1060-1 applies to the VAN operator for telephone line connection. The VAN operator is user 1060-1
The access control device 1010-1 that connects the
ICS network address of CS logic terminal "772
1 ”is determined. Next, the VAN operator sets the originating ICS network address“ 7721 ”and the sender telephone number“ 03 ”in the conversion table 1013-1 of the access control device 1010-1.
-5555-1234 ", recipient's phone number" 06-55 "
55-9876 ", incoming ICS network address" 5521 "and request type, etc. are set. In this example, the request type" 5 "is a telephone line connection. -2 conversion table 1
The outgoing ICS network address “552 to 013-2
1 ", sender's telephone number" 06-5555-9876 ",
Recipient phone number "03-5555-1234", incoming call I
Information such as the CS network address “7721” and the request type is set.

The user 1060-1 has the telephone number "06-5."
555-9876 "is transmitted. Telephone line conversion unit 103
0-1 converts the received telephone number into the reading format of the processing device 1012-1 and sends it to the processing device 1012-1. Upon receiving the telephone number information from the telephone line conversion unit 1030-1 having the ICS network address “7721”, the processing device 1012-1 transmits the call I in the conversion table 1013-1.
The request type of the CS network address "7721" is referred to, the telephone line connection is recognized, and the incoming ICS network address "5521" is read from the incoming telephone number "06-5555-9876". The access control device 1010-1 sets the incoming ICS network address to "5521" and the outgoing ICS network address to "7.
An ICS network frame having a network control unit set to 721 ″ and a network data unit in which information for informing that there is an incoming call has been written is created and sent to the network of the ICS 1000. The access control device 1010 The ICS network frame sent from -1 is transferred in the network of the ICS 1000 and reaches the access control device 1010-2. The ICS network frame having the network data part in which information for notifying that there is an incoming call is received The access control device 1010-2 that has made a call is the telephone line conversion unit 1030-2 of the ICS network address “5521”.
Sends a signal to notify the user 1060-2 of an incoming call. Then, the user 1060-2 sends a response signal.

Upon receiving the response signal, the telephone line conversion unit 1030-2 converts it into a format that can be transferred within the network of the ICS 1000. Access control device 1010-2
Sets the incoming ICS network address to "7721",
Create an ICS network frame having a network control unit in which the outgoing ICS network address is set to "5521" and a network data unit in which information for notifying that a telephone response has been received is created and sent to the ICS network. To do. Access control device 1010-
The ICS network frame sent from 2 is ICS
Access control device 1010 is transferred in the network.
Reach -1. An access control device 1010-2 that has received an ICS network frame having a network data part that describes information for transmitting a response
Sends a signal from the telephone line conversion unit 1030-1 having the ICS network address “7721” to the user 1060-1 to notify the response. As a result, the users 1060-1 and 1060-2 start full-duplex communication by analog signals (voice etc.), and the user 1
060-1 sends an analog signal. Upon receiving the analog signal, the telephone line conversion unit 1030-1 converts the analog signal into an analog information format that can be transferred within the ICS network.

The access control device 1010-1 receives the incoming call I
CS network address is "5521", originating ICS
A network control unit having a network address set to "7721" and an ICS network frame having a network data unit in which analog information is described are created and sent to the ICS 1000 network. The ICS network frame sent from the access control device 1010-1 is transferred in the network of the ICS 1000 and reaches the access control device 1010-2.
I that has a network data part that describes analog information
Upon receiving the CS network frame, the access control device 1010-2 receives the ICS network address “552.
The 1 "telephone line conversion unit 1030-2 sends the analog information to the user 1060-2 as an analog signal obtained by converting the analog information into a telephone line interface.
The analog signal sent from 0-2 is also transferred to the user 1060-1 by the same procedure.

(6) I of the access control device 1010-1
User 10 connected to SDN line conversion unit 1029-1
61-1 is transmitted and I of the access control device 1010-2
User 10 connected to SDN line conversion unit 1029-2
The operation when performing communication with the 61-2 through the ISDN line interface will be described.

The user 1061-1 informs the VAN operator of the IS.
Application for DN line connection, VAN operator is user 1061
-1 is specified, and the ICS network address “7” of the ICS logical terminal is specified.
722 ″ is determined. Next, the VAN operator enters the calling ICS in the conversion table 1013-1 of the access control device 1010-1.
Information such as network address "7722", sender ISDN number "03-5555-1111", receiver ISDN number "06-5555-2222", incoming ICS network address "5522" and request type is set. In this example, the request type "6" is connected to the ISDN line. Similarly, the access control device 101
In the conversion table 1013-2 of 0-2, the originating ICS network address “5522” and the sender ISDN number “06-5”
555-2222 "Recipient ISDN number" 03-555 "
5-1111 ", incoming ICS network address" 7 "
722 ″ and information such as request type.

The user 1061-1 has the ISDN number "06".
-5555-2222 "is transmitted. The ISDN line conversion unit 1029-1 processes the received ISDN number.
Processing device 1012 after converting to the reading format of 012-1
Send to 1. ICS network address "772
The processing device 1012-1 which has received the ISDN number information from the 2 "ISDN line conversion unit 1029-1 transmits the ICS network address" 77 "in the conversion table 1013-1.
22 "is recognized by referring to the request type of" 22 "and the incoming ISDN number" 06-5555-22 "is recognized.
22 ”to the incoming ICS network address“ 552
2 "is read. The access control device 1010-1 receives the incoming call I.
CS network address is "5522", originating ICS
An ICS that has a network control unit with a network address set to "7722" and a network data unit that describes information for notifying that an ISDN call has arrived.
A network frame is created and sent to the ICS 1000 network.

The ICS network frame sent from the access control device 1010-1 is transferred in the ICS 1000 and reaches the access control device 1010-2.
The access control device 1010-2, which has received the ICS network frame having the network data section in which the information for transmitting the incoming call is described, receives the ISDN line conversion section 102 of the ICS network address “5522”.
A signal for notifying an incoming call is sent from 9-2 to the user 1061-2. Then, the user 1061-2 sends a response signal. ISDN line conversion unit 1029-2
Upon receiving the response signal, converts it into a format that can be transferred within the ICS 1000. The access control device 1010-2 is
An ICS network frame having a network control part in which an incoming ICS network address is set to "7722" and an outgoing ICS network address is set to "5522", and a network data part in which information for reporting that an ISDN response has been described is written. And create
It is transmitted to the network of ICS1000.

The ICS network frame sent from the access control device 1010-2 is transferred in the ICS 1000 and reaches the access control device 1010-1.
The access control device 1010-2, which has received the ICS network frame having the network data section in which the information for transmitting the response is described, receives the ISDN line conversion section 10 having the ICS network address “7722”.
A signal for notifying the response is sent from 29-1 to the user 1061-1. This allows the user 1061
-1 and user 1061-2 are digital signals (voice etc.)
Then, the user 1061-1 sends out a digital signal. ISD that received an analog signal
The N line conversion unit 1029-1 converts the analog signal into ICS1.
000 is converted into a transferable digital information format.

The access control device 1010-1 receives the incoming call I
A CS network address “5522” and a ICS network frame having a network control section in which a transmission ICS network address is set to “7722” and a network data section in which digital information is described are created and sent to the ICS 1000. The ICS network frame sent from the access control device 1010-1 is transferred in the ICS 1000 and reaches the access control device 1010-2. Upon receiving the ICS network frame having the network data part describing the digital information, the access control device 1010-2 converts the digital information into the ISDN line interface in the ISDN line converting part 1029-2 of the ICS network address "5522". It is sent to the user 1061-2 as a digital signal. On the contrary, the digital signal transmitted from the user 1061-2 is also processed by the user 1 in the same procedure.
061-1.

(7) C of the access control device 1010-1
C of the CATV broadcasting station 1062-1 and the access control device 1010-2 connected to the ATV line conversion unit 1028-1.
User 10 connected to ATV line conversion unit 1028-2
The operation in the case of communicating with the 62-2 through the CATV line interface will be described.

The CATV broadcasting station 1062-1 applies to the VAN operator for CATV line connection with the user 1062-2. The VAN operator specifies the access control device 1010-2 to which the user 1062-2 is connected, and determines the ICS network address “5523” of the ICS logical terminal. Next, the VAN operator uses the access control device 101
Information such as the incoming ICS network address "5523" and the request type is set in the corresponding portion of the outgoing ICS network address "7723" of the conversion table 1013-1 of 0-1. In this example, the request type "7" is connected to the CATV line. Similarly, the access control device 101
In the conversion table 1013-2 of 0-2, information such as the outgoing ICS network address “5523”, the incoming ICS network address “7723” and the request type is set.

The CATV broadcasting station 1062-1 sends a CATV analog signal. Upon receiving the CATV analog signal, the CATV line conversion unit 1028-1 converts the CATV analog signal into an information format that can be transferred in the ICS 1000. The access control device 1010-1 receives the incoming call I
CS network address is "5523", originating ICS
A network control part having a network address set to "7723" and an ICS network frame having a network data part describing CATV information are created and sent to the ICS 1000. Access control device 1
The ICS network frame sent from 010-1 is transferred in the ICS 1000, and the access control device 1
Reach 010-2. The access control device 1010-2 that has received the ICS network frame having the network data part describing the CATV information has the CATV line conversion part 1 of the ICS network address “5523”.
In 028-2, the CATV information is sent to the user 1062-2 as a CATV analog signal converted into a CATV line interface. Conversely, user 1062-
The analog signal of CATV sent from No. 2 is also transferred to the CATV broadcasting station 1062-1 by the same procedure.

(8) User 1063 connected to the satellite line conversion unit 1027-1 of the access control device 1010-1
-1 and the user 1063-2 connected to the satellite line conversion unit 1027-2 of the access control device 1010-2 will perform an operation in the case of performing communication with the interface of the satellite line.

The users 1063-1 and 1063-2 are
Users 1063-1 and 1063-are VAN operators.
Apply for satellite line connection between the two. The VAN operator connects the user 1063-1 to the access control device 101.
0-1 is specified, and the ICS network address "7724" of the ICS logic terminal is determined. Similarly user 106
3-2 specifies the access control device 1010-2 to connect to, and the ICS network terminal “5” of the ICS logical terminal.
524 ″ is determined. Next, the VAN operator determines the calling ICS of the conversion table 1013-1 of the access control device 1010-1.
Incoming IC at the corresponding part of network address "7724"
Information such as the S network address “5524” and the request type is set. In this example, the request type "8" is connected to the satellite line. Similarly, information such as the originating ICS network address “5524”, the incoming ICS network address “7724” and the request type is set in the conversion table 1013-2 of the access control device 1010-2.

User 1063-1 sends out satellite signals. The satellite line conversion unit 1027-1 that receives the satellite signal of the satellite line interface transmits the satellite signal to the ICS 100.
Convert 0 to a transferable information format. The access control device 1010-1 sets the incoming ICS network address to "5524" and the outgoing ICS network address to "7.
A network control unit set to 724 "and an ICS network frame having a network data unit in which satellite signal information is described are created and sent to the ICS 1000. I sent from the access control device 1010-1
The CS network frame is transferred within the network of the ICS 1000 and reaches the access control device 1010-2. The access control device 1010-2, which has received the ICS network frame having the network data section in which the satellite signal information is described, transmits the satellite signal information to the satellite channel in the satellite channel conversion section 1027-2 of the ICS network address “5524”. The satellite signal converted to the interface is sent to the user 1063-2. On the contrary, the satellite signal of the interface of the satellite line transmitted from the user 1063-2 is also subjected to the same procedure as the user 1063.
-1.

(9) The terminal having the IPX address "9901" of the user 1064-1 and the I of the user 1064-2.
IPX with the terminal with PX address "8801"
The operation when communication is performed using the interface will be described.

Users 1064-1 and 1064-2 are
A terminal having the IPX address “9901” of the user 1064-1 as the VAN operator and the IP of the user 1064-2.
Apply for an IPX connection with a terminal having an X address "8801". User 1064-1 is the VAN operator
The ICS network address “77” of the access control device 1010-1 and the IPX conversion unit 1026-1 that connect to each other.
25 ″ is determined. Similarly, the access control device 1010-2 and the IPX conversion unit 10 that connect the user 1064-2.
The ICS network address "5525" of 26-2 is determined. Next, the VAN operator uses the access control device 101
Information such as sender IPX address "9901", receiver IPX address "8801", incoming ICS network address "5525", and request type in the corresponding portion of the outgoing ICS network address "7725" of the conversion table 1013-1 of 0-1. Set. In this example, the request type “9” is set to the IPX connection. Similarly, the transmission ICS of the conversion table 1013-2 of the access control device 1010-2
The sender IPX address “8801”, the receiver IPX address “9901”, and the incoming ICS network address “77” are assigned to the corresponding parts of the network address “5525”.
25 "and information such as request type are set.

User's 1064-1 IPX address "9"
The terminal having “901” sets the sender IPX address to “99
01 ”and an IPX frame in which the recipient IPX address is set to“ 8801 ”are transmitted. The access control device 1010-1 transmits the ICS network address“ 772 ”.
The 5 "IPX conversion unit 1026-1 receives the IPX frame and reads the sender IPX address" 9901 "and the receiver IPX address" 8801 "in the IPX frame. Then, the access control apparatus 1010-1 converts the conversion table 1013. From -1, the incoming network address "5525" of the sender IPX address "9901" of the outgoing ICS network address "7725" and the incoming network address "5525" of the recipient IPX address "8801" are read.
0-1 sets the incoming ICS network address to “552
5 ", outgoing ICS network address is" 7725 "
The ICS network frame having the network control unit set to (1) and the network data unit in which the information of the IPX frame is described is created and sent to the ICS 1000.

The ICS network frame sent from the access control device 1010-1 is transferred in the ICS 1000 and reaches the access control device 1010-2.
The access control device 1010-2, which has received the ICS network frame having the network data part in which the information of the IPX frame is described, receives the IC in the IPX conversion part 1026-2 of the ICS network address “5525”.
The information of the IPX frame of the S network frame is
The IPX frame converted into the PX interface is sent to the user 1064-2. The terminal having the IPX address "8801" of the user 1064-2 receives the IPX frame. On the contrary, the sender I sent from the terminal having the IPX address “8801” of the user 1064-2
An IPX frame in which the PX address is set to "8801" and the recipient IPX address is set to "9901" is also transferred to the user 1064-1 by the same procedure.

Example-11 (X.25, FR, ATM,
Transmission by satellite communication and telephone line, ISDN line, CATV
(Accommodation of lines and satellite lines): In the above-mentioned Example-10, X. 25 / ICS network frame converter 10
31-1 and 1031-2, FR / ICS network frame conversion units 1032-1 and 1032-2, ATM
/ ICS network frame conversion units 1033-1 and 1033-2 and satellite / ICS network frame conversion units 1034-1 and 1034-2 are respectively provided in the relay network, that is, X. 25 network 1040, FR network 1041, AT
It is located in the M network 1042 and the satellite communication network 1043.
On the other hand, in Example-11, as shown in FIGS. 25 / ICS network frame converters 1131-1 and 1131-2, FR / ICS network frame converters 113-1 and 1132-2, A
TM / ICS network frame converter 1133-1
, 1133-2, and satellite / ICS network frame conversion units 1134-1 and 1134-2 are arranged in the access control devices 1110-1 and 1110-2, respectively. That is, in Example-10, each relay network (X.2
5 network 1040, FR network 1041, ATM network 1042, satellite communication network 1043), the received ICS network frame is converted and converted back to a format that can be transferred by each relay network side. The access control device performs conversion and reverse conversion into a format that can be transferred by each relay network.

Embodiment-12 (Accommodation of access control device in relay network): In the embodiment-10, X. 25 / I
CS network conversion units 1031-1 and 1031-
2, FR / ICS network conversion units 1032-1 and 1032-2, ATM / ICS network conversion unit 10
33-1 and 1033-2, the satellite communication network / ICS network conversion units 1034-1 and 1034-2 are respectively provided in the relay network, that is, X. 25 network 1040, FR network 104
1, access control devices 1010-1 and 1010-, which are located in the ATM network 1042 and the satellite communication network 1043.
2 is X. It is not installed in 25 networks, FR networks, ATM networks, or satellite communication networks. On the other hand, in Example-12, FIG.
3 and FIG. 44, the access control device 1120
-1, 112-2, 1121-1, 1121-2, 1
122-1, 1122-2, 1123-1, 1123-
2 in the relay network, that is, X.2. 25 mesh 1240-
1, the FR network 1241-1, the ATM network 1242-1, and the satellite communication network 1243-1. In other words, in Example-10, in the access control device installed outside each relay network, from the ICS user frame to the IC based on the management of the conversion table.
Although the conversion to the S network frame and the reverse conversion were performed, in this embodiment, the conversion from the ICS user frame to the ICS network frame, which is performed based on the management of the conversion table (I
CS encapsulation) and inverse conversion (ICS inverse encapsulation) are performed in each relay network, that is, X. 25 exchanges, FR exchanges, ATM network exchanges, satellite receivers and transmitters.

Example-13 (relay network connected to relay device): In Example-10, the X. 25 net 104
0, FR network 1041, ATM network 1042, satellite communication network 1
043 is connected to the access control devices 1010-1 and 1010-2, but is not connected to the relay device. On the other hand, in Example-13, as shown in FIG. 25 network 2020-1 is connected to the access control device 2010 and the relay device 2030, and the FR network 20
21-1 is an access control device 2011 and a relay device 20.
31. The ATM network 2022-1 is connected to the access control device 2012 and the relay device 2032. The satellite communication network 2023-1 is connected to the access control device 2013 and the relay device 2033. 25 mesh 2020-
2 is connected to relay devices 2030, 2034, and 2035, and the FR network 2021-2 is relay devices 2031 and 2035.
And the ATM network 2022-2 is connected to the relay device 203.
1, 2032, 2036 connected to the satellite communication network 202
3-2 is connected to the relay devices 2033, 2036, and 2037. That is, in the present embodiment, X. 25 net 202
0-1, 2020-2, RF networks 2021-1, 2021
-2, the ATM networks 2022-1 and 2022-2, and the satellite communication networks 2023-1 and 2023-2 are all connected to the relay device.

Embodiment-14 (Access control device is ICS)
Installed outside) is shown in FIG. 46.
4 shows the fourth embodiment, the access control device 1210-1
To the outside of the ICS 1200, that is, the LAN-12 of the company X.
It is placed inside 00. Corresponding to this, ICS address management server 1250-1 and ICS network server 1260
-1 is also outside the ICS 1200, that is, LAN 1200-1
Access control device integrated management server 1
Place 240 inside ICS 1200. The access control device central management server 1240 uses the ICS network server communication function to access control device 1210-1, ICS address management server 1250-1, ICS network server 1260-.
1 has a function of communicating with each other and exchanging information.
When the VAN operator makes a contract with the company X and connects a user communication line to the ICS 1200, the access control device 1 uses the function of the access control device integrated management server 1240.
Write the data to the conversion table inside 210-1. Also, I
The CS address management server 1250-1 and the ICS network server 1260-1 use respective ICS network server communication functions, and the ICS address management server 1 inside the ICS 1200 is used.
It is possible to communicate with the 250-2 and the ICS network server 1260-2.

With this configuration, the LAN 1200 can be used according to the same method as described in the first embodiment.
The user terminal inside the computer can perform intra-company communication and inter-company communication. The ICS address management server 1
250-1, ICS network server 1260-1, ICS1
Even if it is placed in 200, as described above, the user terminal
It is clear that intra-company communication and inter-company communication can be performed. In the other embodiment described above, the ICS address management server is replaced with the ICS address name management server described in the embodiment-24.

Embodiment-15 (Non-ICS encapsulation of inter-company communication): An example of non-ICS encapsulation in inter-company communication will be described with reference to FIGS. 47 and 48 based on the management of the conversion table. A method of determining the transfer destination in the ICS from the user address and communicating will be described. This communication method is an embodiment in which the ICS encapsulation is not performed only for inter-company communication, although the conversion table is used as in the first embodiment. Furthermore, even if ICS encapsulation is not performed in inter-company communication, intra-company communication (Example-1), virtual leased line connection (Example-2), and an ICS network server using an ICS special number address Communication (Example-3, 3A)
It will be described that the respective methods can be realized by the same methods as those described in the first to third embodiments.

First, the ICS user address (in the case of a 32-bit length, the address is from address 0 to 2 in this embodiment).
An example of how to determine ³² -1) will be described. The ICS user address is an intra-company communication address, an inter-company communication address, I
It is classified into a CS special number address and an ICS operation address. As the intra-company communication address, the above-mentioned user-specific address is adopted. Inter-company communication address is V
Within the section from address 0 to address (2 ¹⁵ -1) of the AN internal code (16 bits: 0 to address (2 ¹⁶ -1)), a range that does not overlap with the in-company communication address is assigned. The ICS special number address is the VAN internal code (16
In the section from 2 ¹⁵ to (2 ¹⁵ +2 ¹⁴ −1) of (bit), a range that does not overlap with the in-company communication address is assigned. The ICS operation address is from the (2 ¹⁵ +2 ¹⁴ ) address of the VAN internal code (16 bits) to (2 ¹⁶
-1) Allocate a range that does not overlap with the in-company communication address in the section up to the address. The ICS operating address is used for operating the ICS (for example, used for communication for exchanging failure information inside the VAN). 47 and 48, 15170-1, 15170-2, 15170
-3, 15170-4, 15170-5, 15170-
6 are LANs 15100-1 and 15100-, respectively.
2, 15100-3, 15100-4, 15100-
5, 15100-6, and the ICS frame is a gateway provided inside these gateways 15170.
-1 to 15170-6 can be passed.

<< Common Preparation >> Access Control Device 1511
The conversion table 15113-1 included in 0-1 is a source ICS network address, a destination ICS network address,
Includes recipient ICS user address, request identification, speed category. The request identification described in the conversion table 15113-1 is represented by, for example, “1” for in-company communication service, “3” for virtual private line connection, and “4” for ICS network server connection. The speed category includes the line speed and throughput (for example, the number of ICS frames transferred within a fixed time) required for communication from the ICS network address.

<< Preparation for inter-company communication >> LA of company X
The terminal for inter-company communication inside the N15100-1 is IC
The S user address “7711” is held. In this embodiment, the ICS user address for inter-company communication is
Use the same value as the ICS network address. The conversion table 151 is used to convert the ICS address information for inter-company communication.
Do not write to 13-1. Similarly, LA of company Y
The terminal for inter-company communication inside the N15100-3 is IC
The S user address “8822” is held.

<< Preparation for intra-company communication >> LAN 151
00-1, the user of LAN15100-2, each L
Intra-company communication between terminals connected to AN is VAN-1 and VAN.
The terminal is designated and applied to the VAN operator so that communication can be performed via the AN-3. Access control device 15110
-1 logic communication line 15180 connected to the ICS logic terminal
The ICS network address of -1 is "7711". The in-company communication address of the terminal connected to the LAN 15100-1 to which the application is applied is “0012” and “0”.
025 ”, and the communication addresses within the company of the transmission destination from these terminals are“ 0034 ”,“ 0036 ”,“ 004 ”.
It is assumed that they are 5 "and" 0046 ".

The company communication addresses are "0034" and "0".
The terminal having “036” is inside the LAN 15100-2, and the ICS network address assigned to the ICS logical terminal of the access control device 15110-5 is “992.
2 ". The company communication addresses are" 0045 "and" 0 ".
The terminal having “046” is inside the LAN 15100-6, and the ICS network address assigned to the ICS logical terminal of the access control device 15110-4 is “890.
0 ”. The value“ 1 ”indicating the in-company communication service for which the application has been made is the request identification, and the above is the conversion table 15113-1.
Register with. Access control devices 15110-4 and 15
110-5 is also registered in each conversion table for intra-company communication by the same method as above. In addition, the contents of the conversion table created by the above method are stored in the ICS address management server 15
Write to 150-1.

<< Preparation for Virtual Dedicated Line Connection >> The principle is the same as that of the second embodiment and will be described below. LAN15
100-5 is connected to the access control device 15110-1 via the user logical communication line 15180-5,
The ICS network address “7712” is assigned. The LAN 15110-4 is a user logical communication line 1
5180-4 and is connected to the access control device 15110-2, and the ICS network address “661
1 ”is added. User logical communication line 15180
In order to make a virtual private line connection from -5 to the user logical communication line 15180-4, these ICS network addresses "7712" and "6611" and the request identification "in the conversion table 15113-1 inside the access control device 15110-1. 3 ”is registered. For the same purpose, these ICs are also included in the conversion table inside the access control device 15110-2.
S network addresses "6611" and "7712"
Please register.

<< Preparation for Communication with ICS Network Server Using ICS Special Number >> The ICS user address of the ICS network server 15330-1 connected to the access control device 15110-1 is "2000", and the ICS network address is " In the case of 7721 ", each address and request identification" 4 "are registered in the conversion table.

Hereinafter, description will be made with reference to the flowchart of FIG.

<< Communication between Companies >> Communication between companies without ICS encapsulation will be described. That is, LAN15100-
This is "inter-company communication" between the terminal having the ICS user address "7711" on the LAN 1100 and the terminal having the ICS user address "8822" on the LAN 15100-3.

The address "771" of the LAN 15100-1
The terminal having “1” is the sender ICS user address “77”.
11 ", and the ICS user frame F1 in which the recipient ICS user address is set to" 8822 "is transmitted. The ICS user frame F1 passes through the user logical communication line 15180-1 and the access control device 15110-1.
To the ICS logic terminal. Access control device 151
10-1 checks whether the ICS network address “7711” assigned to the ICS logical terminal is registered in the conversion table 15113-1 as a request identification as a virtual private line connection (“3”) (step S1501). ), In this case, since it is not registered, the recipient ICS network address “882” in the ICS user frame F1 is next.
2 "is registered in the conversion table 15113-1 (step S1503). In this case, since it is not registered, the recipient network address" 8822 "in the ICS user frame F1 is the inter-company communication. It is determined whether it is in the address section (step S1504).

When the ICS user frame F1 can be determined to be inter-company communication by the above-described procedure, processing such as accounting for inter-company communication is performed (step S1505). The access control device 15110-1 does not perform the ICS encapsulation and transmits the ICS user frame F1 to the relay device 15120-.
1 (step S1525). Relay device 151
20-1 indicates the I based on the incoming ICS network address.
The CS user frames are transmitted to the relay devices 15120-2 and 15
Access control device 15 of VAN-2 via 120-3
110-4. Access control device 15110-
4 is transferred to the LAN 15110-3. The ICS user frame is routed through the LAN 15110-3,
It is delivered to the terminal having the ICS user address “8822”.

<< Intra-Company Communication >> It will be described that intra-company communication for ICS encapsulation can be realized despite the non-ICS encapsulation of inter-company communication. For communication between the terminal having the ICS user address “0012” connected to the LAN 15100-1 and the terminal having the ICS user address “0034” connected to the LAN 15100-2,
The ICS user frame P1 is transmitted. In this ICS user frame P1, the sender ICS user address is "0.
012 ”is added to the recipient ICS user address as“ 003 ”.
4 "are set respectively. ICS user frame P
1 is transmitted through the user logical communication line 15180-1 and further transferred to the access control device 15110-1. The access control device 15110-1 checks whether the request type is registered as a virtual private line connection (“3”) in the conversion table 15113-1 with the ICS network address “7711” assigned to the ICS logical terminal. (Step S1501) In this case, since it is not registered, it is next checked whether the recipient network address "0034" in the ICS user frame P1 is registered in the conversion table 15113-1 (step S1503). In the case of the present embodiment, "0034" is registered and the request identification is read as "1" in the company communication (step S15).
10), the incoming ICS network address "9922" corresponding to the outgoing ICS network address "7711" is acquired from the conversion table, and processing such as accounting for inter-company communication is performed (step S1511). The above procedure is also shown in the flowchart of FIG.

The access control device 15110-1 uses the acquired originating ICS network address "7711",
Using the incoming ICS network address "9922", a network control unit is added to encapsulate the ICS (step S1520), and the ICS network frame P2 is constructed and transmitted to the relay device 15120-1 (step S1525).

<< Communication by Virtual Private Line >> It will be described that communication by a virtual private line for ICS encapsulation can be realized despite the non-ICS encapsulation of inter-company communication.

LAN15100-5 is ICS15100
To the user logical communication line 15180-5
Send a CS user frame. The access control device 15110-1 which received the ICS user frame from the ICS logical terminal of the ICS network address "7712"
Checks whether the ICS network address “7712” assigned to the ICS logic terminal is registered in the conversion table 15113-1 as a virtual private line connection (“3”) (step S1501). In this case, since it is registered, it can be confirmed that the incoming ICS network address is a virtual private line connection of "6611", and processing such as billing is performed (step S1502). The access control device 15110-1 sets the incoming ICS network address to "6611" in the received ICS user frame,
An ICS-encapsulated ICS network frame is created by adding a network control unit in which the originating ICS network address is set to "7711" (step S1520) and transmitted to the relay device 15120-1 (step S1525).

<< Communication with ICS network server using ICS special number >> Despite the non-ICS encapsulation of inter-company communication, I
It will be described that communication with an ICS network server that performs CS encapsulation is possible. In other words, the LAN 1510 of company X
The terminal (address “0012”) connected to 0-1
It will be described that communication with the ICS network server 15330-1 connected to the access control device 15110-1 is possible.

The terminal of the sender ICS user address "0012" of the LAN 15100-1 transmits the ICS user frame G1 to the access control device 15110-1,
It requests communication with the ICS network server 15330-1 whose recipient ICS user address is "2000". The access control device 15110-1 checks whether the ICS network address “7711” given to the ICS logical terminal has the request identification registered in the conversion table 15113-1 as a virtual private line connection (“3”). (Step S1501) In this case, since it is not registered, it is next checked whether the recipient network address "2000" in the ICS user frame G1 is registered in the conversion table 15113-1 (steps S1503, S151).
0). In this case, the request identification of the conversion table 15113-1 is read as communication (“4”) with the ICS network server 15330-1 (step S1512). Next, the conversion table 151
The ICS network address "7721" of the ICS network server 15330-1 is acquired from 13-1 and processing such as billing is performed (step S1513). Next, the ICS user frame is converted into an ICS packet (step S152).
0), and transmits to the ICS network server 15330-1 (step S1525).

Embodiment 16 (Other Embodiment Using ATM Network): Another embodiment will be described in which the network inside the ICS of the present invention is constructed using the ATM network. In this example,
(1) Supplementary explanation of prior art on ATM, (2) Explanation of constituent elements, (3) Frame flow using SVC, (4) PV
Frame flow using C, (5) 1: N using PVC
Communication or N-to-1 communication, (6) N-to-N communication using PVC,
Will be described in order. In the embodiment described here, the ICS
Since the technology for address conversion between the network frame and the ATM network is mainly disclosed, the intra-company communication service and the inter-company communication service described in the first embodiment and the virtual private line service described in the second embodiment are described. This embodiment can be applied to any of them.

(1) Supplementary Explanation of Prior Art Related to ATM: First, a supplementary explanation of related art related to ATM necessary for explaining this embodiment will be given. In an ATM network, a plurality of non-fixed logical lines capable of flexibly setting communication speed and the like can be set on a physical line, and this logical line is called a virtual channel (VC). Depending on how the virtual channel is set, SVC (Swiched V
irtual Channel) and PVC (Permanent Virtual Channel)
l) is specified. SVC is to set up a virtual channel when necessary, and is required for a required time between an arbitrary ATM terminal (which is a general communication device which is connected to an ATM network and communicates using the ATM network). It is possible to secure a logical line having a speed of The ATM terminal that is trying to start the communication sets up the virtual channel call,
Regarding this method, the ITU-T
ng). An address (hereinafter referred to as an "ATM address") for identifying the other party's ATM terminal to which the call is set is required for the call setting.
It is structured so that it is unique within the ATM network so that the TM terminal can be identified. In this address system, ITU-T
E.164 format specified in Recommendation Q.931 or ATM
According to ForumUNI3.1 specifications, 3 as shown in FIG.
There are different types of NSAP ATM addresses. In addition, ICS
Then, which of the above ATM address systems is to be used?
Since it will be used properly depending on the specific configuration of the M network, it will be described in the present embodiment by the expression of an ATM address.

[0171] PVC is a semi-fixed call setting that can be regarded as a virtual leased line when viewed from an ATM terminal. An ID for identifying the virtual channel (hereinafter, referred to as “virtual channel ID”) is assigned to the established virtual channel in both the SVC and the PVC. Specifically, the virtual channel ID is the VPI of the cell header part of the ATM cell format (53 bytes) shown in FIG.
(Virtual Path Identifier) and VCI
And (Virtual Channel Identifier).

Information communication in the ATM network is performed in the unit of information in the ATM cell format shown in FIG. 51. Therefore, to transfer the ICS network frame through the ATM network,
It is necessary to convert this into an ATM cell. This conversion is
The CPCS (Common Part Convergence Subla) shown in FIG.
(Yer) frame, and the CPCS frame shown in FIG. 53 is decomposed into ATM cells. When a communication frame is divided into ATM cells, it usually becomes a plurality of ATM cells. Therefore, a series of plural ATM cells associated with one communication frame is called an ATM cell series. A
When the TM cell sequence is received, the reverse conversion is performed.
Assembling the ATM cell sequence shown in Fig. 5 into a CPCS frame and the CPCS frame to the communication frame shown in Fig. 52.
Extract and restore (ICS network frame) 2
Staged processing is performed. The conversion into the CPCS frame and the disassembly / assembly of ATM cells are well known techniques.
It is a standardized technology according to the UT recommendation. Also, C
The protocol header in the PCS frame user information is standardized in RFC1483 of IETF.

(2) Description of components: FIGS. 54 and 55
The ATM network 1042 from FIG. 35 among FIGS. 34 to 36.
3 and the internal structure of the conversion unit 1033-1 inside the ATM switch 10133-1 and the conversion unit 1033-2 inside the ATM switch 10133-2 is described.
This corresponds to a simplified description of the access control devices 1010-2 and 1010-1 shown in FIGS. In the present embodiment, the internal structure of the access control device or the operation of the processing device in the access control device has the same basic principle as that described in the first embodiment.

The access control device 1010-5 of FIG.
Is the connection point of companies X and A who are users of ICS905
ICS network addresses “7711” and “7722” are given as (ICS logic terminal), respectively. Similarly, the access control device 1010-7 is provided with the ICS network addresses “7733” and “7744” as connection points of the companies W and C, respectively. In FIG. 55, the access control device 1010-6 is similarly given the ICS network addresses “9922” and “9933” as connection points of the companies Y and B, respectively, and the access control device 1010-8 is also the same. As connection points of Z and D, ICS network addresses “9944” and “9955” are given, respectively. Here, in the example of the ATM network, the company X, the company Y, etc. used as examples of users may be different bases of the same company performing intra-company communication, or different companies performing inter-company communication. It doesn't matter.

An interface unit 1133-5 is provided in the conversion unit 1033-5 inside the ATM exchange 10133-5, and the interface unit 1133-5 connects the access control device 1010-5 and the ATM exchange 10133-5. It is in charge of matching the interface (physical layer, data link layer protocol) with the communication line. The conversion unit 1033-5 is a processing device 1233.
5, an ATM address conversion table 1533-5 for call setup by SVC, and a VC address conversion table 1433-5 for address conversion from an ICS network address used by both SVC and PVC to a virtual channel. Has been done. In addition, ATM switch 10133-5
Is an ATM address management server 1633-5 as an information processing device for storing the ATM address conversion table, and P
In the case of using the VC, a PVC address management server 1733-5 as an information processing device that stores the VC address conversion table is connected to perform information processing related to the address conversion. The components related to the ATM switch 10133-6 are the same as those of the ATM switch 10133-5. 54 and 55, the access control device 1010-5 is connected to the ATM switch 10133-5 via the communication line 1810-5, and the access control device 1010-7 is connected to the ATM switch 10133-5 via the communication line 1810-7. The access control device 1010-6 is a communication line 1810.
Access control device 1010-8 via the communication line 1810-8 and the ATM switch 1013 via the communication line 1810-8.
It is connected to 3-6. ATM switch 10133-5
Is the only AT in the network in the conversion unit 1033-5 inside thereof.
The M address "3977" is set, and the ATM switching unit 10133-6 has an internal conversion unit 1033-6.
The only ATM address in the network is "3999". ATM switch 10133-5 and ATM switch 1
0133-6 is an ATM exchange 10133 in this embodiment.
It is connected via -7.

(3) Frame flow using SVC: As shown in FIGS. 54 and 55, SV is used as a communication path in the ATM network.
An example in which C is applied will be described by taking an ICS user frame sent from a terminal of company X to a terminal of company Y as an example.

<< Preparation >> ATM Address Conversion Table 1533-
5, the incoming ICS network address indicating the destination of the ICS network frame, the incoming ATM address indicating the destination for establishing a virtual channel in the ATM network, and the channel such as the communication speed required for the virtual channel. Register the performance and. Also, similar registration is made for the ATM address conversion table 1533-6. As an example, the values set in the ATM address conversion table 1533-5 include the incoming ICS network address, the ICS network address assigned to the ICS logical terminal of the access control device 1010-6 as the address for communication with the company Y. "9922" is set, and the ATM address "3999" uniquely assigned in the ATM network to the conversion unit 1033-6 is registered as the incoming ATM address. In this embodiment, the channel performance is 64 Kbps.
Set the communication speed of. ATM address conversion table 1533
The contents registered in -5 are the ATM address management server 16
It is also written and stored in 33-5.

The values set in the ATM address conversion table 1533-6 are the incoming ICS network address, the ICS network address "7711" assigned to the ICS logical terminal of the access control device 1010-5 as the address for communication with the company X. "Set up and receive ATM
As the address, the conversion unit 103 inside the ATM switch 10133-5 to which the access control device 1010-5 is connected.
AT assigned uniquely in the ATM network to 3-5
Register the M address “3977”. In this embodiment, a communication speed of 64 Kbps is set as the channel performance. A
The contents registered in the TM address conversion table 1533-6 are
It is also written and stored in the ATM address management server 1633-6.

<< ICS Network Frame Transfer from Access Control Device >> As described in the first embodiment, the terminal of the company X is connected to the access control device 1010-6 via the access control device 1010-5. The ICS user frame sent to the terminal of the company Y is ICS-encapsulated when passing through the access control device 1010-5, and the originating ICS network address “7711”.
And the incoming ICS network address "9922" I
It becomes the ICS network frame F1 included in the CS frame header. The ICS network frame F1 is transmitted from the access control device 1010-5 to the ATM switch 10133-.
5, and reaches the conversion unit 1033-5. Less than,
This will be described with reference to the flowchart in FIG.

<< Acquisition of Virtual Channel ID >> Converter 103
Upon receiving the ICS network frame F1 (step S1601), the 3-5 AT receives the received frame F1.
In order to correctly transfer to the M switch 10133-5, the IC
It is necessary to obtain the virtual channel ID of the SVC virtual channel determined by the correspondence between the outgoing ICS network address "7711" and the incoming ICS network address "9922" inside the S frame header. In the case of communication based on SVC, the virtual channel corresponding to this communication path may or may not be established at the time of receiving the ICS network frame. The processing unit 1233-5 first knows whether the virtual channel is established.
"7711" and incoming ICS network address "9"
It is searched whether or not the virtual channel corresponding to the pair with 922 "is registered in the VC address conversion table 1433-5 (step S1602), and the virtual channel to be sought when it is registered here is established. Know that,
From the VC address conversion table 1433-5, it is acquired at the same time that the virtual channel ID corresponding to the pair of the outgoing ICS network address “7711” and the incoming ICS network address “9922” is “33”. From the channel type value “11”, it is known that this virtual channel is communication based on SVC. if,
If there is no registration on the VC address conversion table 1433-5, a virtual channel to be obtained is established by performing << call setting >> described later, and at that time, the VC address conversion table 1433-
The virtual channel ID is obtained from the information registered in step 5 (step S1603).

<< Call Setting >> The virtual channel ID corresponding to the communication path determined by the correspondence between the "source ICS network address and the destination ICS network address" in the above description.
Is not registered in the VC address conversion table 1433-5, that is, when the virtual channel corresponding to this communication path has not been established yet, the following call setup is performed,
It is necessary to establish a virtual channel in the ATM network that constitutes the ICS 905, and an operation example of this call setting will be described.

Processing unit 1233 of conversion unit 1033-5
5 refers to the VC address conversion table 1433-5, I
The outgoing ICS network address “7711” and the incoming ICS inside the header of the CS network frame F1
If the virtual channel ID corresponding to the pair with the network address "9922" is not registered (step S
1602), referring to the ATM address conversion table 1533-5, finds the incoming ICS network address "9922" registered in the ATM address conversion table 1533-5 that matches the incoming ICS network address "9922", and receives the corresponding incoming call. ATM address "3999"
And the channel performance "64K" and the like corresponding thereto are obtained (step S1605). The processing device 1233-5 uses the acquired incoming ATM address "3999" to make a call setting request to the ATM exchange 10133-5. At this time,
It also requests channel performance such as the communication speed of the virtual channel acquired from the ATM address conversion table 1533-5 at the same time. When the ATM switch 10133-5 receives the call setup request, the ATM switch 10133-5 uses the signaling system that is standard equipment of the ATM switch itself as a conventional technique, and the virtual ATM switch 10133-5 reaches the ATM switch 10133-6. A channel is established (step S1606).
Virtual channel I assigned to identify the virtual channel
D is a conversion unit 1 provided inside each of the ATM exchanges.
033-5 or 1033-6 is notified, but in the case where it is based on the regulation of the signal system of the prior art, the value notified from the ATM switch 10133-5 on the calling side (for example, "33").
And the value notified from the ATM switch 10133-6 on the called side (for example, “44”) is not always the same value.
In the conversion unit 1033-5, the ATM switch 10133-5
The virtual channel ID “33” notified from the ICS
A VC address conversion table 1433-5 together with the outgoing ICS network address “7711” and the incoming ICS network address “9922” of the network frame F1.
(Step S1607), and while the connection of this virtual channel is established, the VC address conversion table 1433-
Hold on 5. When the virtual channel connection becomes unnecessary, the conversion unit 1033-5 releases the call of the virtual channel at the AT.
M switch 10133-5 is requested, and virtual channel ID “33” is sent from the VC address conversion table 1433-5.
Delete the registration that corresponds to. Registration in the VC address conversion table 1433-6 in the conversion unit 1033-6 will be described later.

<< Transmission of Frame >> The processing unit 1233-5 of the conversion unit 1033-5 accesses the access control unit 1010- with respect to the virtual channel (virtual channel ID "33") established according to the above description. IC received from 5
The S network frame F1 is converted into a CPCS frame shown in FIG. 52, further decomposed into ATM cells shown in FIG. 53, and transferred to the relay ATM switch 10133-7 (step S1604).

<< Transfer of ATM Cell >> The ATM cell sequence S1 composed of a plurality of cells obtained by converting the ICS network frame F1 by the above-mentioned method is transferred from the ATM switch 10133-5 to the relay ATM switch 10133-.
5 and further to the ATM switch 10133-6 as the ATM cell sequence S2. Hereinafter, description will be given with reference to the flowchart in FIG.

<< Operation after Reaching Frame >> When the ATM cell sequence S2 reaches the ATM switch 10133-6 (step S1610), the ATM cell sequence S2 is transferred from the ATM switch 10133-6 to the conversion unit 1033-6. It The converting unit 1033-6 assembles the received ATM cell as shown in FIG. 53 into a CPCS frame, and further restores the ICS network frame from the CPCS frame as shown in FIG. 52 (step S1611). In FIG. 55, the restored ICS network frame is
Although shown as an S network frame F2, its frame content is the same as that of the ICS network frame F1. The ICS network frame F2 has the incoming ICS network address "992" of its frame header.
2 "access control device, ICS
ICS with network address "9922"
The data is transferred to the access control device 1010-6 having the logical terminal (step S1612).

At this time, in the conversion unit 1033-6, the ICS
The originating ICS network address “7711” of the network frame F2, the terminating ICS network address “9922”, the channel type “11” indicating the SVC known at the time of the incoming call, and the SVC virtual channel assigned at the time of call setup. Virtual channel ID "4"
4 "is registered in the VC address conversion table 1433-6 (step S1614). At this time, the originating ICS network address" 7 "of the ICS network frame F2 is registered.
711 "is the incoming IC of the VC address conversion table 1433-6
Incoming ICS network address “9922” of ICS network frame F2 to S network address
To the originating ICS network address of the VC address conversion table 1433-6 in the reverse position. However, at the time of this registration, if the same contents as the contents to be registered are already registered in the VC address conversion table 1433-6, the registration is not performed. VC address conversion table 1433-6
The address translation information registered in (1) is held on the VC address translation table 1433-6 while the connection of the virtual channel having the corresponding virtual channel (virtual channel ID “44” in this example) is maintained ( Step S1613).

<< Flow in Reverse Direction of Frame >> Next, ICS
54 and 55 on the assumption that the virtual channel of the SVC is set up by the description so far in the case of the flow in the opposite direction of the frame, that is, the case of flow from the company Y to the company X.
Will be described with reference to. IC issued from company Y to company X
When the S user frame passes through the access control device 1010-6, the transmission ICS network address “9” is transmitted.
922 ”and the incoming ICS network address“ 771 ”
ICS network frame F3 with 1 "in the header section
And the processing unit 1233-6 of the conversion unit 1033-6 inside the ATM switch 10133-6 performs the processing according to the above-described flow of FIG. 56.

In this case, the VC address conversion table 1433-6 of the conversion unit 1033-6 has the source ICS network address "9922" and the destination ICS network address as described in << Operation after frame arrival >>. Since the virtual channel ID “44” corresponding to “7711” is registered as the channel type “11”, that is, SVC, the virtual channel ID “44” operates according to the flow of (1) in FIG. Then, the ICS network frame F3 is converted into a plurality of ATM cells (ATM series S3) and transferred. The ATM cell sequence S3 is relay-transferred through the relay ATM switch 10133-5, becomes the ATM cell sequence S4, reaches the ATM switch 10133-5, and the conversion unit 1033-6 has a virtual channel having the virtual channel ID "33". And is restored as an ICS network frame F4 having the same contents as the ICS network frame F3. In the conversion unit 1033-5, the IC
Originating ICS in the header of S network frame F4
Since the pair of the network address “9922” and the incoming ICS network address “7711” is already registered in the VC address conversion table 1433-5 in a form in which the arrival and departure are reversed, it is not registered in the VC address conversion table. ICS
The network frame F4 is sent to the access control device 1010.
Transfer to -5.

<< Application example to half-duplex communication >> In the above, ICS
The internal network of 905 is composed of ATM network, and IC
Regarding the case of transferring the S frame from the company X to the company Y and the case of transferring the S frame in the opposite direction from the company Y to the company X,
The implementation using one SVC virtual channel has been described. This transfer and the reverse transfer are performed, for example, by a company Y connecting from the client terminal of the company X connecting to the ICS to the ICS.
Applied to the request frame (transfer) to the server terminal and the response frame (reverse transfer) from the server terminal of the company Y to the client terminal of the company X in response to the request frame, only one-way communication is performed at a time, but This is an application example of half-duplex communication that realizes bidirectional communication by switching the communication direction for each band.

<< Application Example to Full-Duplex Communication >> The virtual channel itself set in the ATM network is capable of full-duplex communication, that is, bidirectional communication at the same time, according to the ATM protocol. Transfer and reverse transfer using one SVC virtual channel in the ATM network
For example, a request frame (transfer) from a plurality of client terminals of the company X connected to the ICS to a plurality of server terminals of the company Y connected to the ICS, and a request frame from the plurality of server terminals of the company Y to a plurality of client terminals of the company X. When applied to the response frame (reverse transfer), the frames between the client terminal and the server terminal are transferred asynchronously, so that bidirectional communication is simultaneously performed on one SVC virtual channel that serves as a communication path. ,
This is an application example of full-duplex communication.

(4) Frame flow using PVC: An example in which the internal network of the ICS 905 is configured by an ATM network as shown in FIGS. 54 and 55, and PVC is applied as a communication path in the ATM network, An ICS user frame transmitted from the terminal of the company W to the terminal of the company Z will be described as an example.

<< Preparation >> In the VC address conversion table 1433-5 in the conversion unit 1033-5, the outgoing ICS network address, the incoming ICS network address, the AT
M network (ATM switch 10133-5 and ATM switch 1
P0 fixedly set to (referring to the communication path between 0133-6)
Virtual channel ID of VC and virtual channel ID is PVC
The channel type indicating that is registered. This registration is different from the case of SVC, and is an ATM switch (10133-5, 10133-7, 10133-6) that serves as a communication path.
At the same time when the PVC virtual channel is set to the VC virtual channel, it is registered in the VC address conversion table 1433-5 and is held fixed until the communication channel is required, that is, until the PVC virtual channel is released. Further, it is similarly registered and held in the VC address conversion table 1433-6. The virtual channel ID of the PVC is assigned to each ATM exchange when the PVC is fixedly connected between the ATM exchanges.

A value set in the VC address conversion table 1433-5 is an address for communication with the company W as a source ICS network address, that is, an ICS network assigned to the ICS logical terminal of the access control device 1010-7. Set the address "7733" and receive the incoming ICS
Communication address with company Z as network address,
That is, the ICS network address “9944” assigned to the ICS logic terminal of the access control device 1010-8.
To set. Further, the virtual channel ID is set to the PVC virtual channel ID "55" assigned to the ATM switch 10133-5, and the channel type is set to the value "22" indicating PVC. Also, VC address conversion table 1
The setting registered in 433-5 is also written and stored in the PVC address management server 1733-5.

Similarly, the VC address conversion table 143 in the conversion unit 1033-6 inside the ATM switch 10133-6.
In 3-6, the same setting is performed in the form in which the outgoing ICS network address and the incoming ICS network address are reversed. In this case, even if the same PVC is indicated, the virtual channel ID is the VC address conversion table 1433-.
The value may be different from 5. At this time, the settings registered in the VC address conversion table 1433-6 are also written and stored in the PVC address management server 1733-6.

A value set in the VC address conversion table 1433-6 is an address for communication with the company Z as a source ICS network address, that is, an ICS network assigned to the ICS logical terminal of the access control device 1010-8. Set the address "9944" and receive the incoming ICS
An address for communication with the company W as a network address, that is, an ICS network address “773 given to the ICS logical terminal of the access control device 1010-7.
3 "is set. Furthermore, ATM is set as the virtual channel ID.
“66” is set as the ID of this PVC virtual channel assigned to the exchange 10133-6, and the value “22” indicating PVC is set as the channel type.

<< ICS network frame transfer from access control device >> Sent from the terminal of company W through the access control device 1010-7 to the terminal of company Z connected to the access control device 1010-5. The ICS user frame is ICS-encapsulated when passing through the access control device 1010-7, and has an outgoing ICS network address “7733” and an incoming ICS network address “9944” in the ICS frame header.
It becomes the network frame F5. The ICS network frame F5 is transmitted from the access control device 1010-7 to the AT.
It is transmitted to the M switch 10133-5 and reaches the conversion unit 1033-5 via the interface unit 1133-5.

<< Acquisition of Virtual Channel ID >> Processor 12
33-5 is the received ICS network frame F5
Originating ICS network address "77
33 ”and the incoming ICS network address“ 994 ”
4 ”to refer to the VC address conversion table 1433-5, and the access control device 1010-using this conversion unit 1033-5 and the ICS logical terminal to which the incoming ICS network address“ 9944 ”is given as a connection point. 8 is connected to the ATM exchange 10133-6 inside the conversion unit 103
3-6, the virtual channel ID for identifying the set virtual channel is acquired as "55". At the same time, the acquired channel type value “2
From 2 "we know that this virtual channel is PVC.

<< Transmission of Frame >> Processor 1233-5
I received from the access control device 1010-7 for the PVC virtual channel “55” acquired as described above.
The CS network frame F5 is converted into an ATM cell sequence and transmitted to the ATM exchange 10133-7. This AT
The method of M cell conversion is the same as that described in the SVC embodiment. The processing procedure of the above conversion unit 1033-5 is shown in FIG.
It becomes like 6 and the flow of (1) is always in PVC.

<< ATM Cell Transfer >> A composed of a plurality of cells obtained by converting the ICS network frame F1
The TM cell series S1 is transferred from the ATM exchange 10133-5 to the relay ATM exchange 10133-7, and further, the AT
The ATM cell sequence S2 is transferred to the M switch 10133-6, and this operation is the same as in the case of SVC.

<< Operation after Reaching Frame >> When the ATM cell series S2 reaches the ATM switch 10133-6, the AT
M cell sequence S2 is from ATM switch 10133-6 to AT
It is transferred to the conversion unit 1033-6 inside the M switch 10133-6. The conversion unit 1033-6 restores the ICS network frame from the received ATM cell sequence, and this operation is the same as in the case of SVC. ICS restored
Although the network frame is described as ICS network frame F6 in FIG. 55, the content of the frame is I
It is the same as the CS network frame F5. The ICS network frame F6 is the incoming ICS of the header section.
The data is transferred to the access control device identified by the network address "9944", that is, the access control device 1010-8 having the ICS logic terminal assigned with the ICS network address "9944". Conversion unit 1 above
The processing procedure of 033-6 is as shown in FIG. 57, and in PVC, the flow is always (1).

<< Flow in Reverse Direction of Frame >> Next, ICS
The flow in the opposite direction of the frame, that is, the case of flow from the company Z to the company W will be described with reference to FIGS. The ICS user frame transmitted from the company Z to the company W passes through the access control device 1010-8, and has an outgoing ICS network address “9944” and an incoming ICS network address “7733” in the header section F7. Conversion unit 1033-6 installed in the ATM switch 10133-6 inside the ATM switch 10133-6.
The processing device 1233-6 described above performs processing according to the flow of FIG. In this case, V of the conversion unit 1033-6
The C address conversion table 1433-6 contains virtual channel IDs corresponding to the outgoing ICS network address “9944” and the incoming ICS network address “7733”.
Since "66" is registered, the virtual channel ID "6"
For 6 ", the ICS network frame F7 is converted into a plurality of ATM cell sequences and transmitted.

The ATM cell sequence transferred in the ATM network reaches the conversion unit 1033-5 of the ATM switch 10133-5, is then received from the virtual channel having the virtual channel ID "55", and is transferred to the ICS network frame F7. It is restored as an ICS network frame F8 having equivalent contents. However, in the conversion unit 1033-5, the ICS
The pair of the outgoing ICS network address “9944” and the incoming ICS network address “7733” held in the header of the network frame F8 has already been registered in the VC address conversion table 1433-5 in the form of reversing the incoming and outgoing calls. Virtual channel ID for incoming address pair
Since "55" is obtained from the channel type value "22" as PVC, no registration processing is performed and the ICS network frame F8 is transferred to the access control device 1010-7.

<< Application Example to Half-Duplex Communication >> As described above, I
Although the internal network of the CS 905 is configured by using the ATM network and the embodiment of transferring the ICS frame by using the PVC has been described, the PVC and the above-mentioned SVC set the call when the virtual channel is fixedly set or when necessary. However, there is no difference in the operation itself of transferring a frame to the set virtual channel. Therefore, the ICS of the present invention
On the other hand, the application example to the half-duplex communication using the PVC virtual channel of the ATM network is the same as the application example to the half-duplex communication using the SVC virtual channel.

<< Application Example to Full-Duplex Communication >> For the same reason as the application example to the half-duplex communication, the application example to the full-duplex communication of PVC is the application example to the full-duplex communication in SVC. Is equivalent to

(5) One-to-N communication or N-to-one communication using PVC: In the above description, one virtual channel of PVC is a communication path connecting one company (base) to one company (base), that is, An example has been shown in which one ICS logic terminal and one ICS logic terminal are used as a communication path in the ICS, but one virtual channel of a PVC is used as a communication path between one ICS logic terminal and a plurality of ICS logic terminals. It is possible to share. An example of such 1-to-N communication or N-to-I communication will be described with reference to FIG.

<< Description of Constituent Elements >> In FIG. 58, in the access control device 1010-10, the company X connects the ICS logical terminal assigned the ICS network address “7711” in the access control device 1010-10 to the connection point. Is connected to the ATM switch 10133-10. Company X
From the companies A to D who are trying to connect from
Is an access control device 1010-20 with the ICS logical terminal assigned the ICS network address "9922" as a connection point, and company B has access control device 1010-2.
The ICS logic terminal to which the ICS network address “9923” in 0 is given is the connection point. Similarly, company C
Is a connection point which is an ICS logical terminal provided with the ICS network address "9944" in the access control device 1010-40, and the company D is the access control device 1010-4.
The ICS logic terminal assigned with the ICS network address “9955” in 0 is set as the connection point. The access control devices 1010-20 and 1010-40 are ATM switches 1.
0133-20, ATM switch 10133-
10 and ATM switch 10133-20 are connected via a relay network.

<< Preparation >> For the ATM switches 10133-10 and 10133-20, the ATM switch 10133
-10 Internal conversion unit 1033-10 and ATM switch 10
One PVC virtual channel connecting to the conversion unit 1033-20 inside 133-20 is set, the virtual channel ID given to the conversion unit 1033-10 of the virtual channel is “33”, and the conversion unit 1033 of the virtual channel is set. The virtual channel ID given to −20 is “44”. Converter 10
33-10 VC address conversion table 1433-1 and converter 1033-20 VC address conversion table 1433-1
The registration for 20 is performed as shown in FIG.

<< Frame Flow of 1: N Communication >> The frame flow of the 1: N communication will be described with reference to the frames transmitted from the company X to the companies A to D, respectively. Originating ICS network address "771" directed from company X to company A
1 ”and the incoming ICS network address“ 9922 ”
The ICS network frame having
By referring to the VC address conversion table 1433-10 in 3-10, it is transmitted to the PVC virtual channel of the virtual channel ID “33”. The outgoing ICS network address "7711" directed from company X to company B and the incoming I
ICS with CS network address "9933"
Similarly for the network frame, the virtual channel ID "3"
3 "PVC virtual channel. Originating ICS network address" 7 "from Company X to Company C.
711 ”and the incoming ICS network address“ 994 ”
4 ”and an ICS network frame having a source ICS network address“ 7711 ”directed from the company X to the company D and a destination ICS network address“ 9955 ”similarly have a virtual channel ID“ 33 "PVC virtual channel. This indicates that one-to-N (company X to company A to D) communication is performed by sharing one PVC virtual channel. , I.e., the case where a frame is transferred from companies A to D to company X will be described in the next section.

<< Frame Flow of N-to-1 Communication >> The frame flow of N-to-1 communication will be described with reference to the frames transmitted from companies A to D to company X respectively. Originating ICS network address from company A to company X "992"
2 "and the incoming ICS network address" 7711 "
The ICS network frame having
By referring to the VC address conversion table 1433-20 at 3-20, it is transmitted to the PVC virtual channel with the virtual channel ID “44”. The outgoing ICS network address “9933” directed from company B to company X and the incoming I
ICS with CS network address "7711"
Similarly for the network frame, the virtual channel ID "4"
4 "PVC virtual channel. Originating ICS network address" 9 "from Company C to Company X.
944 ”and the incoming ICS network address“ 771 ”
Similarly, an ICS network frame having "1" and an ICS network frame having an outgoing ICS network address "9955" and an incoming ICS network address "7711" directed from the company D to the company X are also virtual channel IDs " 44 "PVC virtual channel. This indicates that N to 1 (Company A to D to Company X) communication is being performed by sharing one PVC virtual channel.

(6) N to N communication using PVC: 1 to N
It is possible to share one virtual channel of a PVC as a communication path between a plurality of ICS logic terminals and a plurality of ICS logic terminals by a method similar to communication. Referring to FIG. 59, N
An example of communication with N will be described.

<< Explanation of Components >> The company X selects the ICS logical terminal address “771” of the access control device 1010-11.
1 "is a connection point, and company Y has access control device 1010.
The access control device 1010-11 is connected to the ATM switch 10133-11 by using the ICS logical terminal address "7722" of -11 as a connection point. The party to be connected from the company X or the company Y is the company A or the company C, the company A uses the ICS logical terminal address “9922” of the access control device 1010-21 as a connection point, and the company C uses the access control device 1010-. The ICS logical terminal address "9944" of 41 is used as a connection point. Access control device 101
0-21 and 1010-4 are ATM exchanges 10133-
21 connected to the ATM switch 10133-11 and 1
0133-21 are connected via a relay network.

<< Preparation >> For the ATM exchanges 10133-11 and 10133-21, the ATM exchange 10133
-11 Internal conversion unit 1033-11 and ATM switch 10
One PVC virtual channel connecting to the conversion unit 1033-21 inside 133-21 is set, and the virtual channel ID given to the conversion unit 1033-11 of this virtual channel is set.
"33", the conversion unit 1033-21 of this virtual channel
The virtual channel ID given to the node is set to "44". VC address conversion table 1433-1 in conversion unit 1033-11
1 and VC address conversion table 1 in the conversion unit 1033-21
The registration as shown in FIG. 59 is performed for 433-21.

<< Flow of N-to-N Communication Frame >> First, the flow of N-to-N communication frame will be described with reference to the frames transmitted from the company X to the companies A and C, respectively. Originating ICS network address "77" from company X to company A
11 "and the incoming ICS network address" 992 "
The ICS network frame having 2 ″ is converted by the conversion unit 10
By referring to the VC address conversion table 1433-11 in 33-1, it is transmitted to the PVC virtual channel with the virtual channel ID “33”. Outgoing ICS network address "7711" and incoming I directed from company X to company C
Similarly, the ICS network frame having the CS network address "9944" has the virtual channel ID "3".
3 "PVC virtual channel. Next, Company Y
The description will be given using the frames transmitted from the respective companies to the companies A and C. For the ICS network frame having the outgoing ICS network address “7722” and the incoming ICS network address “9922” directed from the company Y to the company A, the conversion unit 1033-11 refers to the VC address conversion table 1433-11. , Virtual channel ID
It is transmitted to the PVC virtual channel of "33". Originating ICS network address "7722" and terminating ICS network address "9" directed from company Y to company C
Similarly, the ICS network frame with 944 "
It is transmitted to the PVC virtual channel with the virtual channel ID “33”.

Next, the flow in the opposite direction of the frame will be described with reference to the frames transmitted from company A to companies X and Y, respectively. For the ICS network address having the outgoing ICS network address “9922” and the incoming ICS network address “7711” directed from the company A to the company X, the conversion unit 1033-2 can refer to the VC address conversion table 1433-21. , Virtual channel ID
It is transmitted to the PVC virtual channel of "44". Outgoing ICS network address "9922" and incoming ICS network address "7" directed from company A to company Y
The ICS network frame having 722 ″ is transmitted to the PVC virtual channel with the virtual channel ID “44” by referring to the VC address conversion table 1433-2 in the conversion unit 1033-2. An ICS with an outgoing ICS network address "9944" and an incoming ICS network address "7711"
The network frame is transmitted to the PVC virtual channel with the virtual channel ID “44”. Originating ICS network address "994" from company C to company Y
4 "and incoming ICS network address" 7722 "
The ICS network frame having the same is also transmitted to the PVC virtual channel with the virtual channel ID “44”. From the above, N to N sharing one PVC virtual channel
Communication takes place.

[Embodiment 17] (Other embodiment using FR network): Another embodiment will be described in which the network inside the ICS of the present invention is constructed using the FR network. In this example,
(1) Supplementary explanation of conventional technology concerning FR, (2) explanation of components, (3) frame flow using SVC, (4) PVC
Flow of frame using (5) 1 to N communication or N to 1 communication using PVC, (6) N to N communication using PVC will be described in this order. In this embodiment, SVC or PV
It is possible to use either of the two types of methods using C, or to use both methods in a mixed manner.
Each case using will be described. Further, since the intra-company communication service and the inter-company communication service described in the first embodiment and the virtual private line service described in the second embodiment are realized by the access control device of the present invention, a network in the network inside the ICS is used. It is not necessary to separately consider the communication of the frame, and in the present embodiment, these communication services are integrated and described.

(1) Supplementary explanation of the prior art regarding FR:
A supplementary description will be given of a conventional technique relating to FR necessary for explaining a method of configuring the inside of the ICS of the present invention using an FR network.

The frame relay uses a variable-length communication information unit called a frame for communication, and designates a communication path for each frame, thereby accumulating and exchanging frames in the network and logical multiplexing. It is a conventional technology standardized by the ITU.TI.233 recommendation, etc., which realizes (technology for using one physical line by multiplexing it to multiple logical lines). A communication service using this technology is a frame mode bearer service (Frame M
ode Bearer Service: hereinafter referred to as “FMBS”), and a frame switch bearer service (Frame Switch Bearer) that assumes a partner selection connection (SVC) for FMBS
Service: hereinafter referred to as "FSBS") and a Frame Relay Bearer Service (hereinafter referred to as "FRBS") on the premise of a permanent virtual connection (PVC). Although the term “frame relay” generally refers to only FRBS (in a narrow sense, “frame relay”), in the ICS of the present invention, “frame relay” refers to the entire FMBS including FSBS and FRBS. Designation (broadly defined “frame relay”)
, Especially when referring to FSBS only, "SV
The term "frame relay using C" is used, and particularly, only the FRBS is referred to as "frame relay using PVC". Hereinafter, the "frame relay in a broad sense (FMBS)" defined above is abbreviated as FR. , A frame transferred on the FR network is called an "FR frame" to distinguish it from an ICS frame.

In the FR network, a plurality of logical lines can be set on the physical line as described above, and this logical line is called a logical channel. In order to identify a logical channel, an identifier assigned to each FR terminal connected to both ends of the logical channel (which is a general communication device that is connected to the FR network and communicates using the FR network) is used as a data link connection identifier (Data Link Connection Identifier: Below, "D
LCI ”))).
SVC and PVC are defined by the setting method. The SVC sets up a logical channel when necessary, and can establish a logical line with an arbitrary FR terminal for a required time and at a required speed. The FR terminal attempting to start the communication sets up the call on the logical channel, and this method is standardized as a signaling method in ITU-T. For call setup, the other party F who sets up the call
An address for identifying the R terminal (hereinafter referred to as "FR address") is required, and the FR address is systematized so as to be unique within the FR network so that each FR terminal can be identified. The PVC has call settings fixedly set in the FR exchange, and can be regarded as a virtual leased line when viewed from the FR terminal.

For the established logical channel, SV
A DLCI for identifying a logical channel is assigned to both C and PVC, and when the FR frame is transferred, DL is set in the DLCI bit portion of the FR frame address portion shown in FIG.
Set the CI. The format of the FR frame address part is 3
Although there is a rule of type, in FIG. 60, the address part of 2-byte format is shown. The performance of the logical channel of the FR network (channel performance) includes the committed information rate (hereinafter referred to as “CIR”), which is the information transfer rate guaranteed by the FR network in the normal state (the state where congestion does not occur).
There is) etc.

To transfer a communication frame such as an ICS network frame via the FR network, it is necessary to convert it into an FR frame as shown in FIG. When the FR frame is received, the reverse conversion is performed, and the communication frame (ICS network frame) is extracted from the FR frame and restored as shown in FIG. This FR frame conversion is a standardized technique according to the ITU-T recommendation. The protocol header in the user data of the FR frame is standardized by RFC1490 of IETF.

(2) Description of components: FIGS. 62 and 63
34 to 36, focusing on the FR network 1041 from FIG. 35, the conversion unit 1032-1 described inside the FR exchange 101321 and the conversion described inside the FR exchange 10132-2. The internal structure of the unit 1032-2 is described, and it corresponds to a simplified version of the access control devices 1010-2 and 1010-1 described in FIGS. 34 to 36. In the method of constructing the inside of the ICS using the FR network, the internal configuration of the access control device or the operation of the processing device in the access control device has the same basic principle as that described in the first embodiment.

The access control device 1010-5 uses the ICS9
The ICS network addresses “7711” and “7722” are given as the connection points (ICS logic terminals) of companies X and A, which are the 25 users. Similarly, the access control device 1010-7 is provided with ICS network addresses “7733” and “7744” as connection points of the companies W and C, respectively. Similarly, the access control device 1010-6 is given the ICS network addresses “9922” and “9933” as the connection points of the companies Y and B, respectively, and the access control device 1010-8 is similarly assigned to the companies Z and D. The ICS network address "9" is used as the connection point.
"944" and "9955" are added. Here,
In the embodiments of FIGS. 62 and 63, the companies X and Y shown as examples of users may be different bases of the same company performing intra-company communication, or may perform inter-company communication. It can be a different company.

Conversion unit 1 inside the FR exchange 10132-5
032-5 has an interface unit 1132-5, and the interface unit 1132-5 has an access control device 101.
0-5 and the FR exchange 10132-5, the communication line 1812-5, the access control device 1010-7 and F
Communication line 1812 for connecting to R switch 10132-5
It is in charge of matching the interface with -7 (physical layer, data link layer protocol).
The conversion unit 1032-5 is an SV in addition to the processing device 1232-5.
FR address conversion table 1532 for call setup by C-
5 and a DLC address conversion table 1432-5 for address conversion from an ICS network address used by both SVC and PVC to a logical channel. The FR exchange 10132-5 is a DL address management server 1632-5 as an information processing device for storing the FR address conversion table, and DL in the case of using PVC.
By connecting to a DLC address management server 1732-5 as an information processing device for storing the C address conversion table,
Performs processing related to address translation. FR switch 1013
Regarding the components related to 2-6 as well, the FR exchange 101
It is the same as 32-5. In this embodiment, the access control device 1010-5 is connected to the FR exchange 10132-5 via the communication line 1812-5 and the access control device 1010-7 is connected to the FR exchange 10132-5 via the communication line 1812-7. 6 via the communication line 1812-6,
Further, the access control device 1010-8 is connected to the communication line 181.
Each of the FR exchanges 10132-6 is connected via 2-8. The FR exchange 10132-5 uses the conversion unit 1032-5 inside the FR exchange 10132-5 as the only FR address "297" in the network.
7 "is set, and the FR exchange 10132-6 is
Only the FR address "2999" in the network is set in the conversion unit 1032-6 inside the unit. FR switch 1013
2-5 and 10132-6 are connected via the FR relay network, but in this example, they are connected via the FR exchange 10132-7 that represents the FR relay network.

(3) Frame flow using SVC: As shown in FIGS. 62 and 63, the network inside the ICS is composed of a FR network, and the SVC is used as a communication path in the FR network.
The embodiment to which is applied will be described by taking an ICS user frame issued from a terminal in the company X to a terminal in the company Y as an example.

<< Preparation >> FR address conversion table 1532 in the conversion unit 1032-5 inside the FR exchange 10132-5.
In -5, the incoming ICS indicating the destination of the ICS network frame transferred from the conversion unit 1032-5 to the FR network.
The network address, the terminating FR address indicating the destination for setting up a logical channel on the FR network, and the channel performance such as the authorized information rate required for the logical channel are registered. Further, the FR address conversion table 153 in the conversion unit 1032-6 inside the FR exchange 10132-6.
Similar registration is made for 2-6.

As an example, the FR address conversion table 1532
The value set in -5 is as an incoming ICS network address, as an address for communication with the company Y,
The ICS network address “9922” assigned to the ICS logical terminal of the access control device 1010-6 is set, and the access control device 101 is set as the incoming FR address.
The FR address "2999" uniquely assigned in the FR network is registered in the conversion unit 1032-6 in the FR exchange 10132-6 to which 0-6 is connected. In this embodiment, the authorized information rate of 64 Kbps is set as the channel performance. The contents registered in the FR address conversion table 1532-5 are also written and stored in the FR address management server 1632-5.

As values to be set in the FR address conversion table 1532-6, the ICS assigned to the ICS logical terminal of the access control device 1010-5 as the incoming ICS network address and the address for communication with the company X.
Incoming FR by setting network address "7711"
As the address, the conversion unit 1032 inside the FR exchange 10132-5 to which the access control device 1010-5 is connected.
The FR address "2977" uniquely assigned in the FR network is registered for -5. In this embodiment, the authorized information rate of 64 Kbps is set as the channel performance. The contents registered in the FR address conversion table 1532-6 are also written and stored in the FR address management server 1632-6.

<< ICS network frame transfer from access control device >> It is issued from the terminal of the company X via the access control device 1010-5 to the terminal of the company Y connected to the access control device 1010-6. The ICS user frame is ICS-encapsulated when passing through the access control device 1010-5, and becomes an ICS network frame F1 having a source ICS network address "7711" and a destination ICS network address "9922" inside the ICS frame header. . The ICS network frame F1 is transmitted from the access control device 1010-5 to the FR exchange 10132-5, and the interface unit 113 that processes electrical signal conversion / matching of a communication path.
The conversion unit 1032-5 is reached via 2-5. Hereinafter, description will be given with reference to the flowchart in FIG.

<< Acquisition of DLCI >> When the conversion unit 1032-5 receives the ICS network frame F1 (step S1701), the frame is transferred to the FR exchange 10132.
S for realizing the FR network communication path inside the ICS 925, which is determined by the correspondence between the outgoing ICS network address “7711” and the incoming ICS network address “9922” in the ICS frame header for transfer to S-5.
It is necessary to find the DLCI of the VC logical channel. SV
In the case of C-based communication, at the time of receiving the ICS network frame, the logical channel corresponding to this communication path may be established or may not be established yet. In order to know whether the logical channel is established, the processor 1232-5 first determines that the logical channel corresponding to the pair of the outgoing ICS network address "7711" and the incoming ICS network address "9922" is DLC.
It is searched whether it is registered in the address conversion table 1432-5 (step S1702). If it is registered here,
Know that the desired logical channel is established. That is, from the DLC address conversion table 1432-5, the transmission I
DL corresponding to a pair of CS network address "7711" and incoming ICS network address "9922"
When the CI is “16”, it is known that the logical channel is the communication based on SVC from the value “10” of the channel type that is acquired at the same time. If D
If there is no registration on the LC address conversion table 1432-5, the logical channel to be obtained is established by performing << call setting >> described later, and at that time, the DLC address conversion table 1432 is established.
-5 obtain the DLCI from the information registered above (step S1703).

<< Call setup >> In the above, "DLCI corresponding to the communication path determined by the correspondence between the outgoing ICS network address and the incoming ICS network address is DLC.
When not registered in the address conversion table 1432-5 ", that is, when the logical channel corresponding to the communication path is not yet established, the call setting described below is performed, and the ICS
It is necessary to establish a logical channel in the FR network that constitutes 925, and an operation example of this call setting will be described.

Processing unit 1232-of conversion unit 1032-5
5 refers to the DLC address conversion table 1432-5,
Originating ICS network address “77” inside the ICS frame header of ICS network frame F1
11 "and incoming ICS network address" 9922 "
Knowing that there is no DLCI registration for the pair
Referring to the FR address conversion table 1532-5, the incoming ICS
The incoming ICS network address "9922" registered in the FR address conversion table 1532-5 that matches the network address "9922" is found, and the incoming FR address "2999" corresponding to it and the channel performance "64K" corresponding to it are obtained. (Step S1705).
This incoming FR address "2999" is, as described in the << Preparation >> section, the access control device 1010-6 whose connection point is the ICS logical terminal to which the incoming ICS network address "9922" is assigned. FR connected
It is an address that is set so as to be unique within the FR network for the conversion unit 1032-6 inside the exchange 10132-6.

The processing device 1232-5 receives the incoming call F
FR switch 10132 using R address "2999"
A call setup request is made to -5. At this time, the channel performance such as the authorized information rate of the logical channel acquired at the same time from the FR address conversion table 1532-5 is also requested (step S1706). When the FR exchange 10132-5 receives the call setup request, the FR exchange 10132-5 uses the signaling system standardly equipped in the FR exchange itself as a conventional technique.
From the FR switch 10132-6 to the FR switch network, a logical channel connecting the conversion units 1032-5 and 1032-6 is established. The DLCI assigned to identify the established logical channel is the conversion unit 1032-5 or 1032 held inside each of the FR exchanges.
6 is notified, but in the case where it is based on the regulation of the signaling method of the prior art, the value (for example, “16”) notified from the FR exchange 10132-5 on the calling side and the FR exchange 10 on the called side.
The value (for example, “26”) notified from 132-6 is
The values are not always the same. In the conversion unit 1032-5, FR
DLCI “16” notified from the exchange 10132-5
DLC address conversion table 1 together with the outgoing ICS network address “7711” and the incoming ICS network address “9922” of the ICS network frame F1.
It is registered in 432-5 (step S1707) and held in the DLC address conversion table 1432-5 while the connection of this logical channel is established. When the logical channel connection becomes unnecessary, the conversion unit 1032-5 requests the FR switch 10132-5 to release the call of the logical channel, and at the same time, from the DLC address conversion table 1432-5 to the DLCI.
Delete the registration corresponding to “16”. The conversion unit 103
Registration in the DLC address conversion table 1432-6 in 2-6 will be described later.

<< Transmission of Frame >> The processing device 1232-5 of the conversion unit 1032-5 receives from the access control device 1010-5 the logical channel (DLCI “16”) established according to the above description. The converted ICS network frame F1 is converted into an FR frame as shown in FIG. 61 and transferred to the FR exchange 10132-5 (step S1704).

<< Transfer of FR Frame >> The FR frame S1 obtained by converting the ICS network frame F1 by the above-mentioned method is transferred from the FR exchange 10132-5 to the relay FR exchange 10132-5, and further FR The FR frame S2 is transferred from the exchange 10132-5 to the FR exchange 10132-6. Hereinafter, description will be made with reference to the flowchart in FIG.

<< Operation after Reaching Frame >> FR Frame S
2 reaches the FR exchange 10132-6 (step S1710), this FR frame is transferred to the FR exchange 1013.
2-6 to conversion unit 1 inside the FR exchange 10132-6
032-6. The converting unit 1032-6 restores the ICS network frame from the FR frame as shown in FIG. 61 (step S1711). The restored ICS network frame is described as ICS network frame F2 in FIG. 63, but the content of the frame is the same as ICS network frame F1.
The ICS network frame F2 has the incoming ICS network address "99" inside the ICS frame header.
22 "identified as access control device or IC
IC with S network address "9922"
The data is transferred to the access control device 1010-6 having the S logic terminal (step S1712).

At this time, in the conversion unit 1032-6, the ICS
The originating ICS network address “7711” of the network frame F2, the terminating ICS network address “9922”, the channel type “10” indicating the SVC known at the time of the incoming call, and the SVC logical channel assigned at the time of call setup. The DLCI “26”
It is registered in the DLC address conversion table 1432-6 (step S1714). At this time, the source ICS network address “7711” of the ICS network frame F2 is set to the destination ICS network address of the DLC address conversion table 1432-6, and the destination ICS network address “9922” of the ICS network frame F2 is set to DLC.
The address conversion table 1432-6 is written in the opposite position to the originating ICS network address. However, at the time of this registration, if the same content as the content to be registered is already registered in the DLC address conversion table 1432-6,
Do not register. The address translation information registered in the DLC address translation table 1432-6 is held in the DLC address translation table 1432-6 while the connection of the corresponding logical channel (DLCI "26" in this example) is maintained. It

<< Reverse Flow of Frame >> Next, the reverse flow of the ICS frame, that is, the case of flow from the company Y to the company X, is performed under the premise that the logical channel of the SVC is set up. Similarly, description will be made with reference to FIGS. 62 and 63.

The ICS user frame transmitted from the company Y to the company X is ICS-encapsulated when passing through the access control device 1010-6. IC inside the ICS frame header
FR switchboard 1 converted to S network frame F3
It is transferred to the conversion unit 1032-6 inside the 0132-6.
The processing device 1232-6 of the conversion unit 1032-6 is shown in FIG.
Although the processing according to the flow of FIG. 3 is performed, the DLC address conversion table 1432-6 of the conversion unit 1032-6 already has the transmitting IC
DLCI "2" corresponding to the S network address "9922" and the incoming ICS network address "7711"
Since 6 ”is registered as the channel type“ 10 ”, that is, SVC, it operates according to the flow of (1) in FIG.
For the DLCI "26", the ICS network frame F3 is converted into an FR frame (FR frame S3) and transferred.

The FR frame S3 is relay-transferred through the FR network and becomes the FR frame S4, which is the FR exchange 10132-.
5 is reached, and the DLCI “1” is sent to the conversion unit 1032-5.
It is received through a logical channel having 6 ″ and is restored as an ICS network frame F4 having the same content as the ICS network frame F3.
In -5, the outgoing ICS network address “9922” and the incoming ICS network address “7” are provided inside the ICS frame header of the ICS network frame F4.
Since the pair with “711” has already been registered in the DLC address conversion table 1432-5 in the form in which the arrival and departure are reversed, the ICS network frame F4 is not registered in the DLC address conversion table and the access control device 1010-5 is used. Transfer to.

<< Application Example to Half-Duplex Communication >> As described above, I
The internal network of CS925 is composed of FR network.
When a CS frame is transferred from company X to company Y,
On the contrary, regarding Yang that transfers from company Y to company X, 1
Implementation has been described using the SVC logical channel of the book. Transfer in the opposite direction to such transfer is performed by, for example, ICS.
Request frame (transfer) from the client terminal of company X connecting to the server to the server terminal of company Y connecting to the ICS
And a response frame (reverse transfer) from the server terminal of the company Y to the client terminal of the company X in response to this request frame, only one-way communication is performed at a time, but the communication direction is switched at each time zone. It is an application example of half-duplex communication that realizes bidirectional communication.

<< Application example to full-duplex communication >> The logical channel set in the FR network is the full-duplex communication according to the FR regulations.
That is, two-way communication is possible at the same time. Request frames (transfers) for transfer using one SVC logical channel and reverse transfer in the FR network, for example, from a plurality of client terminals of the company X connected to the ICS to a plurality of server terminals of the company Y connected to the ICS. And a response frame (reverse transfer) from the plurality of server terminals of the company Y to the plurality of client terminals of the company X in response to the request frame, the frames between the client terminal and the server terminal are transferred asynchronously. Therefore, it becomes a communication path 1
Two-way communication takes place simultaneously on the book's SVC logical channel, which is an application of full-duplex communication.

(4) Frame flow using PVC: IC
The internal network of S925 is composed of FR network, and further F
An embodiment in which PVC is applied as a communication path in the R network will be described by taking an ICS user frame sent from a terminal of company W to a terminal of company Z as an example.

<< Preparation >> DLC address conversion table 143 in the conversion unit 1032-5 inside the FR exchange 10132-5.
2-5, the FR network (FR Exchange 10132-5 and FR exchange 1
The DLCI of the PVC fixedly set to (the communication path of 0132-6) and the channel type indicating that the logical channel is PVC are registered. This registration is different from the case of SVC, and the FR exchange (1013
2-5 and 10132-5 and 10132-6), when a PVC logical channel is set, at the same time, the PVC logical channel is registered in the DLC address conversion table 1432-5 and a communication path is required,
That is, the PVC logical channel is held fixed until it is released. Also, a DLC address conversion table 1432-6 in the conversion unit 1032-6 inside the FR exchange 10132-6.
Register and hold it in the same way. In addition, PVC DLCI
Is assigned to each FR exchange when a PVC is fixedly connected between the FR exchanges.

The value set in the DLC address conversion table 1432-5 is the transmission ICS network address, the address for communication with the company W, that is, the IC assigned to the ICS logic terminal of the access control device 1010-7.
Set the S network address "7733" and receive the incoming call I
A communication address with the company Z as a CS network address, that is, an ICS network address “994 assigned to the ICS logical terminal of the access control device 1010-8.
4 ". Furthermore, as the DLCI, the FR exchange 1
ID of PVC logical channel assigned to 0132-5
“18” is set, and the channel type is set to the value “20” indicating PVC. Also, the DLC address conversion table 14
The setting to be registered in 32-5 is also written and stored in the DLC address management server 1732-5. In addition, D in the conversion unit 1032-6 inside the FR exchange 10132-6
In the LC address conversion table 1432-6, the same setting is performed in the form in which the outgoing ICS network address and the incoming ICS network address are reversed. In this case, even if the same PVC is indicated, the DLCI may have a value different from that of the DLC address conversion table 1432-5.

A value set in the DLC address conversion table 1432-6 is an address for communication with the company Z as a source ICS network address, that is, an ICS assigned to the ICS logic terminal of the access control device 1010-8.
Network address "9944" is set, and incoming IC
As an S network address, an address for communication with the company W, that is, an ICS network address “773 given to the ICS logical terminal of the access control device 1010-7.
3 "is set. Furthermore, the FR exchange 101 is included in the DLCI.
“28” is set as the ID of the PVC logical channel assigned to 32-6, and “20” indicating PVC is set as the channel type. Also, the DLC address conversion table 14
The settings to be registered in 32-6 are also written and stored in the DLC address management server 1732-6.

<< ICS Network Frame Transfer from Access Control Device >> As described in Embodiment-1, a company W terminal is connected to the access control device 1010-8 via the access control device 1010-7. The ICS user frame transmitted to the Z terminal is ICS encapsulated when passing through the access control device 1010-7, and the transmission ICS network address “7733” and the reception ICS network address “9944” are set to the IC.
The ICS network frame F5 is provided inside the S frame header. The ICS network frame F5 is transmitted from the access control device 1010-7 to the FR exchange 10132-.
5, and reaches the conversion unit 1032-5 via the interface unit 1132-5.

<< Acquisition of DLCI >> Processor 1232-5
Refers to the DLC address conversion table 1432-5 using the outgoing ICS network address “7733” and the incoming ICS network address “9944” in the header of the received ICS network frame F5, and refers to the communication path for this ICS network address pair. It is acquired that the DLCI of the logical channel set as is “18”. At the same time, it is known from the acquired channel type value “20” that this logical channel is PVC.

<< Transmission of Frame >> Processor 1232-5
Is the PVC logical channel “1” acquired as described above.
8 ", the ICS network frame F5 received from the access control device 1010-7 is converted into an FR frame and transmitted to the FR exchange 10132-5.
The R frame conversion method is the same as that described in the SVC example. The processing procedure of the conversion unit 1032-5 described above is shown in a flowchart of FIG. 64, and the PVC always follows the flow of (1).

<< Transfer of FR Frame >> FR frame S1 obtained by converting ICS network frame F5
Is the FR exchange 1032-5 to the relay FR exchange 10
132-5, and further FR exchange 10132-5
The FR frame S2 is transferred from the FR exchange 10132-6 to the FR exchange 10132-6, and this operation is similar to that of the SVC.

<< Operation after Reaching Frame >> FR Frame S
2 reaches the FR exchange 10132-6, the FR frame S2 is transferred from the FR exchange 10132-6 to the FR exchange 1
It is transferred to the conversion unit 1032-6 inside the 0132-6. The conversion unit 1032-6 restores the ICS network frame from the received FR frame, and this operation is the same as in the case of SVC. The restored ICS network frame is described as ICS network frame F6 in FIG. 63, but the frame content is the same as ICS network frame F5. The ICS network frame F6 receives the incoming call I inside the ICS frame header.
It is transferred to the access control device identified by the CS network address "9944", that is, the access control device 1010-8 having the logical terminal to which the ICS network address "9944" is assigned. The above conversion unit 103
FIG. 65 is a flowchart showing the processing procedure of 2-6, and the PVC always follows the flow of (1).

<< Reverse Flow of Frame >> Next, the reverse flow of the ICS frame, that is, the case of flow from the company Z to the company W will be described using the PVC logical channel as a communication path. The ICS user frame transmitted from the company Z to the company W is the IC when passing through the access control device 1010-8.
S-encapsulated, originating ICS network address "9944" and terminating ICS network address "7"
The FR switch 101 is converted into an ICS network frame F7 having 733 "inside the ICS frame header.
32-6 is transferred to the conversion unit 1032-6. The processing unit 1232-6 of the conversion unit 1032-6 performs the process according to the flow of FIG. 64. In this case, the conversion unit 1032-6.
In the DLC address conversion table 1432-6 of No. 6, the transmitting IC
DLCI corresponding to the S network address "9944" and the incoming ICS network address "7733"
Since "28" is registered, the ICS network frame F7 is converted into an FR frame and transmitted with respect to the DLCI "28".

The FR frame transferred in the FR network is F
DLC is provided in the conversion unit 1032-5 of the R switch 10132-5.
It is received from the logical channel having I "18" and restored as an ICS network frame F8 having the same contents as the ICS network frame F7. However, the conversion unit 1032-5 determines that the transmission ICS network address “994” held in the header of the ICS network frame F8.
4 "and the incoming ICS network address" 7733 "are already in the DLC address conversion table 1 with the origin and destination reversed.
It is already registered in 432-5, and the DLCI “18” for this calling / receiving address pair is the channel type value “2”.
Since the PVC is obtained from 0 ″, the registration processing is not performed, and the ICS network frame F8 is transferred to the access control device 1010-7.

<< Application Example to Half-Duplex Communication >> As described above, I
Although the internal network of the CS 925 is configured by using the FR network and the embodiment of transferring the ICS frame by using the PVC has been described, the PVC and the SVC have a logical channel fixedly set up or a call set up when necessary. There is no difference in the operation itself of transferring the FR frame to the set logical channel. Therefore, the application example to the half-duplex communication when the ICS is configured using the FR network and the PVC logical channel is used for the FR network is the same as the application example to the half-duplex communication using the SVC logical channel. Is equivalent.

<< Application example to full-duplex communication >> For the same reason as the application example to half-duplex communication, the application example to PVC full-duplex communication is the application example to full-duplex communication in SVC. Is equivalent to

(5) One-to-N communication or N-to-one communication using PVC: In the above description, one logical channel of PVC is a communication path connecting one company (base) and one company (base), that is, In the ICS, the embodiment in which one ICS logic terminal and one ICS logic terminal are used as a communication path is shown, but one PVC logical channel is used as a communication path between one ICS logic terminal and a plurality of ICS logic terminals. It can be shared as. An example of such 1-to-N communication or N-to-1 communication will be described with reference to FIG. 66.

<< Explanation of Components >> The company X uses the ICS logical terminal provided with the ICS network address "7711" in the access control device 1010-12 as a connection point, and the access control device 1010-12 uses the FR exchange. 10
132-12. The parties to be connected from company X are companies A to D, and company A has access control device 1
ICS network address “992 in 010-22
Company B with ICS logic terminal with 2 "as connection point
Uses the ICS logic terminal provided with the ICS network address "9933" in the access control device 1010-22 as a connection point. Similarly, company C has access control device 1
ICS network address “994 in 010-42
4 "is added to the ICS logic terminal as a connection point, and company D
Uses the ICS logic terminal provided with the ICS network address "9955" in the access control device 1010-42 as a connection point. The access control devices 1010-22 and 1010-42 are connected to the FR exchange 10132-22, and the FR exchanges 10132-12 and 10132-42 are connected.
Are connected via the FR relay network.

<< Preparation >> For the FR exchanges 10132-12 and 10132-22, the FR exchange 10132-5
2 conversion unit 1032-12 and FR exchange 10132
-22. One PVC logical channel connecting to the internal conversion unit 1032-22 is set, the DLCI given to the conversion unit 1032-12 of this logical channel is set to "16", and the conversion unit 1032-22 of the logical channel is set. Given to DLC
Let I be “26”. DLC in the conversion unit 1032-12
Address conversion table 1432-12 and conversion unit 1032-2
6 to the DL address conversion table 1432-22 in FIG.
Registration as shown in FIG.

<< Frame Flow of 1: N Communication >> The frame flow of the 1: N communication will be described with reference to the frames transmitted from the company X to the companies A to D, respectively. Originating ICS network address "7711" from company X to company A
And the ICS network frame having the incoming ICS network address “9922” is converted by the conversion unit 1032-1.
2 by referring to the DLC address conversion table 1432-12, the data is transmitted to the PVC logical channel of DLCI “16”. An ICS network frame having a source ICS network address "7711" and a destination ICS network address "9933" directed from the company X to the company B is similarly transmitted to the PVC logical channel of the DLCI "16". Outgoing I from Company X to Company C
CS network address "7711" and incoming ICS
ICS network frame with network address "9944", source ICS network address "7711" and destination IC directed from company X to company D
Similarly, the ICS network frame having the S network address "9955" also has a PVC of DLCI "16".
Sent on a logical channel. This indicates that one-to-N (company X to company A to D) communication is performed by sharing one PVC logical channel. Reverse flow of frame,
That is, the case where the frame is transferred from the companies A to D to the company X will be described below.

<< Frame Flow of N-to-1 Communication >> The frame flow of N-to-1 communication will be described with reference to the frames transmitted from companies A to D to company X, respectively. Outgoing ICS network address from company A to company X "9922"
And the ICS network frame having the incoming ICS network address “7111” is converted by the conversion unit 1032-2.
2 by referring to the DLC address conversion table 1432-22, the data is transmitted to the PVC logical channel of DLCI “26”. An ICS network frame having a source ICS network address “9933” and a destination ICS network address “7711” directed from the company B to the company X is similarly transmitted to the PVC logical channel of the DLCI “26”. Outgoing I from Company C to Company X
CS network address "9944" and incoming ICS
ICS network frame with network address "7711", outgoing I from company D to company X
CS network address "9955" and incoming ICS
The ICS network frame having the network address “7711” is similarly transmitted to the PVC logical channel of DLCI “26”. This means that N to 1 (company A
~ D to enterprise X) Indicates that communication is performed by sharing one PVC logical channel.

(6) N to N communication using PVC: 1 to N
It is possible to share one PVC logical channel as a communication path between a plurality of ICS logic terminals and a plurality of ICS logic terminals by a method similar to communication. Referring to FIG. 67,
An example of this N-to-N communication will be described.

<< Description of Components >> The company X determines that the ICS logical terminal address of the access control device 1010-13 is "771".
1 "is a connection point, and company Y has access control device 1010.
The ICS logical terminal address “7722” of −13 is used as the connection point, and the access control device 1010-13 is the FR exchange 1
0132-13. The party to connect from company X or company Y is company A or company C, and company A
Has the ICS logical terminal address “9922” of the access control device 1010-23 as a connection point, and the company C has the ICS logical terminal address “99” of the access control device 1010-43.
44 "is the connection point. Access control device 1010
-23 and 1010-43 are FR exchanges 10132-2
3 is connected to FR exchanges 10132-13 and 101.
32-23 are connected through an FR relay network.

<< Preparation >> For the FR exchanges 10132-13 and 10132-23, the FR exchange 10132-1
3 internal conversion unit 1032-13 and FR exchange 1013
2-23, one PVC logical channel connecting the conversion unit 1032-23 is set, the DLCI given to the conversion unit 1032-13 of this logical channel is set to “16”, and the conversion unit 1032-23 of the logical channel is set. Given to DLC
Let I be “26”. DLC in the conversion unit 1032-13
Address conversion table 1432-13 and conversion unit 1032-2
The DLC address conversion table 1432-23 in 3 is registered as shown in FIG.

<< Flow of N-to-N Communication Frame >> First, the flow of N-to-N communication frame will be described with reference to the frames transmitted from the company X to the companies A and C, respectively. Originating ICS network address "7" from company X to company A
711 ”and the incoming ICS network address“ 992 ”
The ICS network frame having 2 ″ is converted by the conversion unit 10
The data is transmitted to the PVC logical channel of DLCI "16" by referring to the DLC address conversion table 1432-13 in 32-13. Further, the ICS having the outgoing ICS network address “7711” and the incoming ICS network address “9944” directed from the company X to the company C.
Similarly for the network frame, P of DLCI "16"
Sent to the VC logical channel. Next, the frames transmitted from the company Y to the companies A and C will be described. An ICS network frame having a source ICS network address “7722” and a destination ICS network address “9922” directed from company Y to company A is
DLC address conversion table 143 in conversion unit 1032-13
2-13 to refer to the PVC of DLCI "16"
Sent on a logical channel. In addition, the outgoing ICS network address “772” directed from the company Y to the company C
2 "and the incoming ICS network address" 9944 "
ICS network frames with
It is transmitted to the "16" PVC logical channel.

Next, the flow in the opposite direction of the frame will be described with reference to the frames transmitted from the company A to the companies X and Y, respectively. For the ICS network address having the outgoing ICS network address “9922” and the incoming ICS network address “7711” directed from the company A to the company X, refer to the DLC address conversion table 1432-23 in the conversion unit 1032-23. Then, DLCI
It is transmitted to the PVC logical channel of "26". Further, the ICS network frame having the outgoing ICS network address “9922” and the incoming ICS network address “7722” directed from the company A to the company Y is
The conversion unit 1032-23 causes the DLC address conversion table 143.
2-23, the PVC of DLCI "26"
Sent on a logical channel. Similarly, the originating ICS network address “9” directed from the company C to the company X.
944 ”and the incoming ICS network address“ 771 ”
ICS network frames with 1 "are DLCI
It is transmitted to the PVC logical channel of "26". The outgoing ICS network address "9944" and the incoming ICS network address "7" directed from company C to company Y
The ICS network frame with 722 "is also D
It is transmitted to the PVC logical channel of LCI "26". According to the above description, one PVC logical channel is shared and N
It is shown that communication to N is performed.

Example-18 (telephone line, ISDN line,
(Accommodation of CATV line, satellite line, IPX line, mobile phone line): Connection to an access control device, which is an access point to the ICS of the present invention, is performed by a LAN as described in Example-1 and Example-2. Not limited to communication lines (dedicated lines, etc.) to, telephone lines, ISDN lines, C
An ATV line, a satellite line, an IPX line, and a mobile phone line can be accommodated, and another embodiment different from Embodiment-10 will be described.

68 to 71 are a telephone line, an ISDN line, a CATV line, a satellite line, and an I-line according to ICS6000.
1 illustrates an example of a system that accommodates a PX line and a mobile phone line, and line units 6011-1 and 6011-2 are telephone line conversion units 6030-1 and 6030-, respectively.
2. ISDN line conversion units 6029-1 and 6029-
2. CATV line conversion units 6028-1 and 6028-
2, satellite line conversion units 6027-1 and 6027-2, I
It is composed of PX conversion units 6026-1 and 6026-2 and mobile phone conversion units 6025-1 and 6025-2.
The telephone line conversion units 6030-1 and 6030-2 are physical layers and data link layers (OSI (Open Systems Interconnection)) between the telephone lines 6160-1 and 6160-2 and the access control devices 6010-1 and 6010-2. It has a conversion function and a reverse conversion function of functions corresponding to the first and second layers of the communication protocol. The ISDN line conversion units 6029-1 and 6029-2 are connected to the ISDN line 6
1611 and 6161-2 and access control device 601
It has a function of converting a function corresponding to a physical layer and a data link layer between 0-1 and 6010-2 and an inverse conversion function, and has a function of CATV line conversion units 6028-1 and 6028-2.
Has a function of converting a function corresponding to a physical layer or a data link layer between the CATV lines 6162-1 and 6162-2 and the access control devices 6010-1 and 6010-2 and a function of reverse conversion. Furthermore, the satellite line conversion unit 6027-
1 and 6027-2 are satellite lines 6163-1 and 61
63-2 and access control device 6010-1 or 601
The IPX conversion unit 6 has a function of converting a function corresponding to a physical layer and a data link layer between 0 and 2 and an inverse conversion function.
026-1 and 6026-2 are IPX lines 6164-
1 and 6164-2 and the access control devices 6010-1 and 6010-2 have a conversion function and a reverse conversion function of a function corresponding to a physical layer or a data link layer. The mobile phone conversion units 6026-1 and 6026-2 have a function corresponding to a physical layer or a data link layer between the mobile phone wireless lines 616511 and 6165-2 and the access control devices 6010-1 and 6010-2. It has the functions of conversion and inverse conversion.

ICS frame interface network 6050
Is the ICS frame interface network 10 shown in FIG.
The ICS network frame is a network of the same type as 50 and conforms to the regulations of RFC791 or RFC1883 and is transferred in the same format. X. 25 network 6040 also corresponds to X.25 of FIG. 25 network 1040, which is the same type of network, accepts ICS network frames, and transmits X.25. It is converted into a frame of 25 format and transferred, and finally converted into the format of ICS network frame and output. The FR network 6041 is also a network of the same type as the FR network 1041 in FIG. 35, accepts an ICS network frame, converts it into a frame relay format frame and transfers it, and finally converts it back into the ICS network frame format and outputs it. To do. The ATM network 6042 is also shown in FIG.
The ATM network 1042 is the same type of network, accepts an ICS network frame, converts it into a frame of ATM format and transfers it, and finally converts it back to the format of ICS network frame and outputs it. The satellite communication network 6043 is the same type of network as the satellite communication network 1043 in FIG.
The S network frame is accepted, the information is transferred using the satellite, and finally converted back to the ICS network frame format and output. Also, the CATV network 6044
Accepts ICS network frames and accepts CATV
I convert it to a frame of the format, transfer it inside, and at the end I
It is converted back to the CS network frame format and output.

<< Common Preparation >> Access Control Device 6010
The conversion table 6013-1 in -1 is a transmission ICS network address, a sender ICS user address, a receiver IC.
S user address, incoming ICS network address,
Contains the request identification. This request identification is represented, for example, by "1" for intra-company communication service, "2" for inter-company communication service, "3" for virtual private line connection, and "4" for ICS network server connection. The conversion table 6013-1 includes the first example and the second example.
The address registered by the same method is described. I
The CS network server 670 has an ICS user address of “2000” and an ICS network address of “782”.
1 ", which is connected to the access control device 6010-1 via the ICS network communication line 6081-1, and the conversion table 6
013-1 is the recipient ICS of the ICS network server 670.
The user address “2000”, the incoming ICS network address “7821”, and the request identification “4” are registered.

The operation will be described with reference to the flowchart of FIG.

<< Communication from telephone line to ISDN line >> The user 6060-1 has the sender ICS user address “3”.
An ICS user frame F110 of 400 "and a recipient ICS user address of" 2500 "is transferred to a telephone line 6160-.
1 to the access control device 6010-1. The access control device 6010-1 receives the ICS user frame F110 from the telephone line conversion unit 6030-1 having the ICS network address “7721” (step S
1800), ICS network address "7721"
Checks whether or not the request identification is registered as the virtual private line connection “3” in the conversion table 6013-1 (step S1801). In this case, it is not registered, so
Next, the recipient ICS user address “2500” written on the ICS user frame F10 is converted into the conversion table 60.
13-1 is registered (step S1803),
Further, it is checked whether or not the request identification is registered as inter-company communication "2" (step S1804). In this case, since it is registered, the incoming IC from the conversion table 6013-1.
The S network address “5522” is acquired, and processing such as accounting for inter-company communication is performed (step S180).
5), ICS user frame F110 is ICS encapsulated (step S1820), converted into ICS network frame F120, and ICS network communication line 6080-1.
And is transmitted to the ICS frame transfer network 6030 (step S1825). ICS network frame F12
0 is, for example, X. 25. The network 6040 and the ICS network communication line 6080-2 reach the access control device 6010-2, where the ICS decapsulation is performed to restore the ICS user frame F110, and the user 6061 having the recipient ICS user address “2500” -2 is reached.

<< Communication from ISDN line to CATV line
>> User 6061-1 has sender ICS user address “3500” and receiver ICS user address “260
The ICS user frame Flll of 0 "is sent to the access control device 6010-1 via the ISDN line 6161-1. The access control device 6010-1 has the ISDN line conversion unit 6 of the ICS network address" 7722 ".
It receives the ICS user frame Flll from the 029-1 (step S1800), and checks whether or not the request identification is registered as the virtual private line connection "3" in the conversion table 6013-1 on the ICS network address "7722" ( Step S1801). In this case, since the virtual private line connection “3” is registered, the incoming ICS network address “5523” is acquired from the conversion table 6013-1, and processing such as billing related to the private line connection is performed (step S1802), and the ICS User frame Flll is IC
S encapsulation (step S1820), conversion into an ICS network frame F121, and ICS network communication line 6
It is transmitted to the ICS frame transfer network 6030 via the 080-1 (step S1825).

In the virtual private line connection, the sender ICS user address and the receiver ICS user address written in the ICS network frame Flll do not have to be used inside the access control device. Next, the ICS network frame F121 is, for example, F
The access control device 6010-2 arrives via the R network 6041 and the ICS network communication line 6080-2, and the ICS decapsulation is performed to restore the ICS user frame Flll, and its incoming ICS network address "5523".
Via the CATV line unit 6028-2 to which
User 6 connected from CATV line 6162-2
Reach 062-2.

<< Communication from CATV line to satellite line >> The user 6062-1 is the sender ICS user address "3".
The ICS user frame F112 of 600 "and the recipient ICS user address of" 2700 "is transferred to the CATV line 616.
It is sent to the access control device 6010-1 via 2-1. The access control device 6010-1 uses the CATV line conversion unit 602 of the ICS network address “7723”.
8-1 receives the ICS user frame F112 (step S1800), and checks whether or not the ICS network address "7723" is registered in the conversion table 6013-1 as a virtual private line connection "3". (Step S1801). In this case, since it is not registered, next, the receiver ICS user address “2700” written on the ICS user frame F112.
Is registered on the conversion table 6013-1 (step S
1803) Further, it is checked whether or not the request identification is registered as inter-company communication "2" (step S180).
4). In this case, since the inter-company communication “2” is registered, the incoming ICS network address “5524” is acquired from the conversion table 6013-1, and processing such as accounting for inter-company communication is performed (step S1805), and the ICS user Frame F112 is ICS encapsulated (step S
1820), and converts it into the ICS network frame F122 and transmits it to the ICS frame transfer network 630 via the ICS network communication line 6080-1 (step S1825).
The ICS network frame F120 is, for example, an ATM.
The access control device 6010-2 reaches the access control device 6010-2 via the network 6042 and the ICS network communication line 6080-2, the ICS user frame frame F112 is restored by decapsulating the ICS, and the user 6063-2 having the receiver ICS user address “2700”. To reach.

<< Communication from satellite line to IPX line >> The user 6063-1 is the sender ICS user address "37".
00 "and the ICS user frame F113 of the recipient ICS user address" 2800 ", the telephone line 6163-
1 to the access control device 6010-1. The access control device 6010-1 receives the ICS user frame F113 from the satellite line conversion unit 6027-1 of the ICS network address “7724” (step S
1800), ICS network address "7724"
Checks whether the request identification is registered as the virtual private line connection “3” on the conversion table 6013-1 (step S1801). In this case, since it is not registered, the recipient ICS user address "2800" written on the ICS user frame F113 is converted into the conversion table 6013-.
1 is registered (step S1803), and it is further checked whether the request identification is registered as inter-company communication "2" (step S1804). In this case, since the inter-company communication “2” is registered, the incoming ICS network address “5525” is acquired from the conversion table 6013-1, and processing such as accounting for inter-company communication is performed (step S1805). IC frame F113
S encapsulation (step S1820), conversion into an ICS network frame F123, and ICS network communication line 6
It is transmitted to the ICS frame transfer network 6030 via the 080-1 (step S1825). The ICS network frame F123 reaches the access control device 6010-2 via, for example, the ICS frame interface network 6050 and the ICS network communication line 6080-2, and is ICS decapsulated to restore the ICS user frame F113.
User 60 of recipient ICS user address “2800”
Reach 64-2.

<< Communication from IPX line to mobile phone line >>
The user 6064-1 has a sender ICS user address “0012” and a receiver ICS user address “290.
The ICS user frame F114 of 0 "is transferred to the IPX line 6
It is sent to the access control device 6010-1 via 164-1. The access control device 6010-1 uses the IPX line conversion unit 602 of the ICS network address “7725”.
The ICS user frame F114 is received from 6-1 (step S1800), and it is checked whether or not the request identification is registered as the virtual private line connection "3" on the conversion table 6013-1 on the ICS network address "7725" ( Step S1801). In this case, since it is not registered, the receiver ICS user address “2900” written on the ICS user frame F114 is registered on the conversion table 6013-1 (step S18).
03) Furthermore, it is checked whether or not the request identification is registered as inter-company communication “2” (step S1804). In this case, since "2" is not registered, it is checked whether the request identification is registered as intra-company communication "1" (step S1810). In this case, inter-company communication “1”
Is registered, the incoming call I from the conversion table 6013-1 is received.
The CS network address “5526” is acquired, and processing such as accounting relating to intra-company communication is performed (step S18).
11), ICS user frame F114 is ICS encapsulated (step S1820), converted into ICS network frame F124, and ICS network communication line 6080-
It is transmitted to the ICS frame transfer network 6030 via 1 (step S1825). ICS network frame F1
24 is access control device 6010-via a CATV line network 6044 and an ICS network communication line 6080-2.
2 is reached, the ICS user frame F114 is restored by decapsulating the ICS, and the user 6065-2 of the recipient ICS user address “2900” is reached.

<< Communication from Cellular Telephone Line to Telephone Line >> The user 6065-1 uses the sender ICS user address “3
800 "and recipient ICS user address" 2400 "
ICS user frame F115 of the mobile phone line 61
It is sent to the access control device 6010-1 via 65-1. The access control device 6010-1 uses the mobile phone line conversion unit 603 of the ICS network address “7726”.
The ICS user frame F115 is received from 5-1 (step S1800), and it is checked whether the ICS network address "7726" is registered in the conversion table 6013-1 as the request identification as the virtual private line connection "3" ( Step S1801). In this case, since it is not registered, the recipient ICS user address “2400” written on the ICS user frame F115 is converted into the conversion table 6
It is registered on 013-1 (step S180
3) Further, it is checked whether the request identification is registered as inter-company communication "2" (step S1804). In this case, the request identification is registered as the inter-company communication “2”, so the incoming ICS network address “5521” is acquired from the conversion table 6013-1 and processing such as billing related to the inter-company communication is performed (step S1805). , The ICS user frame F115 is ICS encapsulated (step S1820), converted into an ICS network frame F125, and transmitted to the ICS frame transfer network 6030 via the ICS network communication line 6080-1 (step S182).
5). The ICS network frame F120 is, for example, the satellite line network 6043 and the ICS network communication line 6080-2.
The access control device 6010-2 is reached via the
The ICS user frame Fl15 is decapsulated and restored, and reaches the user 6060-2 having the recipient ICS user address "2400".

<< Communication from Cellular Phone Line to ICS Network Server >> The user 6066-1 has the sender ICS user address “3980” and the recipient 1CS user address “20”.
The ICS user frame F116 of "00" is transmitted to the access control device 6010-1 via the mobile phone line 6166-1. The ICS user frame F116 is received from (step S1800), and it is checked whether or not the ICS network address "7726" is registered as the request identification on the conversion table 6013-1 as the virtual private line connection "3" (step S1801). In this case, since it is not registered, the receiver ICS user address “2000” written on the ICS user frame F116 is registered on the conversion table 6013-1 (step S180).
3) Further, it is checked whether the request identification is registered as inter-company communication "2" (step S1804). In this case, since it is not registered, it is checked whether or not the request identification is registered as intra-company communication "1" (step S1810). In this case, since it is not registered, it is checked whether the request identification is registered as communication "4" with the ICS network server (step S1812). In this case, since it has been registered, the incoming ICS from the conversion table 6013-1.
The network address “7821” is acquired, and processing such as accounting relating to intra-company communication is performed (step S181
3), ICS user frame F116 is ICS encapsulated (step S1820), converted into an ICS network frame and transmitted to ICS network server 670 (step S1825). The method in which the ICS network server 670 returns the reply to the user 6066-1 as the transmission source is the same as the method described in the third embodiment.

In the various transmission methods of the ICS user frame described above, the transmission side user changes the receiver ICS user address to be written in the ICS user frame, so that the transmission side has the telephone line, ISDN line, CATV.
Receiving side telephone line, ISDN line, CATV, whether it is a line, satellite line, IPX line, or mobile phone line
Any of a line, a satellite line, an IPX line, and a mobile phone line can be selected.

Example 19 (Dial Apple Computer):
An example using a dial applet will be described with reference to FIGS. User 740 inside the LAN 7400
0-1 has the ICS user address “2500”, and similarly, the user 7410-1 inside the LAN 7410 is the IC
It has an S user address “3601”. The person who manages the dial-up router 7110 inputs the telephone number designated for the recipient ICS user address and its priority into the router table 7113-1 of the dial-up router 7110 from the router table input unit 7018-1.

Here, referring to FIG. 76, the router table 71
The registration contents of 13-1 will be described. When the recipient ICS user address "3601" is specified, the first priority is the telephone number "03-1111-1111", the second priority is the telephone number "03-2222-2222", and the priority is The third place is telephone number "03-3333-333"
3 ”. Recipient ICS user address "3602"
Similarly, "3700" is also registered. Then, from the sender ICS user address “2500” to the recipient ICS
FIG. 77 shows an example of communication to the user address “3601”.
The flow chart will be described with reference to the flowchart.

The user 740-1 receives the ICS user frame F200 via the gateway 7400-2 and the user logical communication line 7204 and dials up the router 711.
Send to 0. The dial-up router 7110 is the processing device 7.
It operates under the control of 112-1 and receives the ICS user frame F200 (step S190).
1), the recipient ICS user address “3601” included in the ICS user frame F200 is read, and the address “3601” is used as a search keyword in the router table 711.
3-1 is searched (step S1902) to find a telephone number having a high priority. In this case, the telephone number with the first priority is "03-1111-" as shown in the router table of FIG.
1111 ”, so dial-up router 7110
Calls the telephone number "03-1111-1111" via the telephone network 7215-1 as the first attempt (step S1910). As a result, the telephone number "03-
A telephone communication path 7201 is established with the line unit 7011-1 of the access control device 7010-1 called by "1111-1111", that is, the dial-up router 7110 and the line unit 7011-1 are connected by a telephone line. . When the dial-up router 7110 and the line unit 7011-1 are not connected by the telephone line in the above-mentioned telephone call procedure, the dial-up router 7110 next uses the router table 7113-1 to rank the second highest telephone number "0".
As a second attempt, the telephone number “03-2” is found through the telephone network 7215-1.
222-2222 "(step S191)
1). As a result, the telephone number "03-2222-222"
2 "access control device 7010-1 called by
A telephone communication path 7202 is established with the line unit 7011-1. If the dial applet 7110 and the line unit 7011-1 are not connected to each other by the telephone line in the above-mentioned telephone calling procedure, the dial-up router 7110 then uses the router table 7113-1 to give the third highest priority telephone number. As a third attempt to find "03-3333-3333", the telephone number "03" is sent through the telephone network 7215-3.
-3333-3333 "(step S1
912). As a result, the telephone number "03-3333-33"
33 "is called by the access control device 7010-
The telephone communication path 7203 is established with the third line unit 7011-3. It should be noted that when the dial-up router 7110 does not establish a telephone communication path to the access control device even after a plurality of attempts, the dial-up router 7110 receives the ICS.
The frame F200 is stored in the storage unit 7117-1 (step S1913), and after a predetermined time (step S1914).
Then, the router table is indexed again (step S1902) and an attempt is made to establish the telephone communication paths 7201, 7202, 7203.

Next, the dial-up router 7110
The operation after the line section 7011-1 and the line section 7011-1 are connected by a telephone line will be described. The dial-up router 7110 starts an authentication procedure as to whether or not the user is an authorized user registered as a user in the access control device 701O-1 (step S1920). Any authentication procedure may be used as long as it can achieve the purpose of authentication. For example, dial-up router 7110
Sends the ID and password for identifying the dial-up router 7110 to the line unit 7011-1 through the telephone line 7201, and the access control device 7010-1.
Authentication section 7016-1 checks whether the received ID and password are correct, and if correct, the user is correct,
That is, the notification data for notifying the "affirmation confirmation" is sent to the telephone communication path 7
The authentication procedure is completed by transmitting the data to the dial-up router 7110 via 201. The received ID
And if either of the passwords is incorrect, the communication via the telephone communication path 7201 is interrupted.

When the dial-up router 7110 receives the notification of the positive confirmation in the user authentication from the telephone line 7201, it sends the ICS user frame F200 to the telephone communication line 7.
When the access control device 7010-1 confirms that the ICS user frame F200 has been received (step S1930), the telephone communication path 7201 is released and the telephone is hung up (step S1931). Processing ends.

Upon receiving the ICS user frame F200, the access control device 7010-1 receives the processing device 7012.
The ICS encapsulation is performed by using the conversion table 7013-1 under the management of -1.
To generate an ICS network communication line 73 inside the ICS 7100.
Send to 01. In this embodiment, the outgoing ICS network address of the ICS network frame F301 is the network address “7501” given to the ICS logical terminal in the line unit 7011-1, and the incoming IC
The S network address is the access control device 7010-
“8601” assigned to the second ICS logic terminal.
ICS network frame F301 is ICS7100
Is transferred to reach the access control device 7010-2,
Here, the ICS is decapsulated and the user logical communication line 7
After passing through 601, the user 7410-1 having the ICS user address “3601” is reached.

In the above description, the dialup router 7110 and the line unit 70 of the access control device 7010-1.
11-1 and telephone number "03-2222-222
2 ”is established, the ICS user frame F200 indicates that the telephone communication path 720 has been established.
2 and is transferred from the dial-up router 7110 to the line unit 7011-1. In this case as well, when the access control device 7010-1 receives the ICS user frame F200, it performs ICS encapsulation, and I
Generate a CS network frame F302 to generate ICS7
It is sent to the ICS network communication line 7301 inside the 100. Here, the ICS user frame F302 has an outgoing ICS user address “7502” and an incoming ICS user address “8601”.

When the telephone communication path 7203 called by the telephone number "03-3333-3333" is established between the dial-up router 7110 and the line unit 7011-3 of the access control device 7010-3, the ICS user frame is set. F200 passes through telephone communication path 7203,
Dial-up router 7110 to line unit 7011-3
Transferred to. In this case, the access control device 7010-
3 receives the ICS user frame F200, performs ICS encapsulation, and ICS network frame F303.
To generate an ICS network communication line 73 inside the ICS 7100.
Sent to 03. In this case, the outgoing ICS network address of the ICS network frame F303 is the network address “7800” given to the ICS logical terminal in the line unit 7011-3, and the incoming ICS network address is the I of the access control device 7010-2.
It is "8601" given to the CS logic terminal. ICS
The network frame F303 is transferred through the ICS 7100 and reaches the access control device 7010-2, where the ICS is decapsulated and the user logical communication line 7601 is transmitted.
To reach the user 7410-1 having the ICS user address “3601”.

Embodiment-20 (speed class and priority): << Structure >> As shown in FIGS. 78 to 80, ICS8000-
1 is access control devices 8010-1, 8010-2,
801O-3, 8010-4, relay device 8020-1,
An ICS address management server 8025-1 and an ICS network server 8027-1 are included, and these devices include an ICS network communication line 8030- for transferring an ICS network frame.
1,8030-2,8030-3,8030-4,80
It is tied at 30-5 and 8030-6. Line section 801
1-1, the processing device 8012-1, and the conversion table 8013-1 are all provided inside the access control device 8010-1. The ICS logical communication lines 8051-1, 8051-2, are connected to the plurality of ICS logical terminals of the line unit 801-1.
8051-3, 8051-4 are respectively connected, IC
S network address “7721”, “7723”,
“7724” and “7725” are given respectively. The ICS network communication line in the ICS8000-1 is IC
A speed class is assigned to indicate the speed of transferring S network frames. For example, the ICS network communication lines 8030-1, 8030-2, and 8030-6 all have a speed class of "4", and the ICS network communication Line 8030
-3 and 8030-5 have a speed class of "3", and the ICS network communication line 8030-4 has a speed class of "2". The speed class is defined by the same standard as the speed class registered inside the conversion table 8013-1. The ICS address management server 8025-1 has an IC
S network address "7811", ICS network server 8027-1 has ICS network address "782"
1 "is added to each, and the ICS network communication line 8054-
1 and 8054-2 are connected to the access control device 8010-1.

User 8400 as ICS Communication Terminal
1 has an ICS user address “2500”, and ICS
A user 8400-2 as an ICS communication terminal connected to the line unit 8011-1 via the logical communication line 8051-1.
Has an ICS user address "2510", and access control device 801 via ICS logical communication line 8052-1.
0 to 2 and a user 84 as an ICS communication terminal
00-3 has an ICS user address “3600”,
Further, the user 8400-4 has the ICS user address “36
10 "and are respectively connected to the access control device 8010-3 via the gateway 8041-1 and the ICS logical communication line 8053-1.

The method of registering the ICS network address and the ICS user address in the conversion table 8013-1 is the same as that of the first embodiment and the second embodiment. 80, instead of deleting the speed registered in the conversion table 113-1 of No. 1, the speed class and priority are registered, and the speed class and priority are the address management server 8025-1. Is stored together with the corresponding ICS user address as a part of the address related information.

The speed class is expressed by a numerical value or the like instead of the speed unit. For example, the communication speed is 64K.
Bps is represented by speed class 1, communication speed of 128 Kbps is represented by speed class 2, and similarly, communication speed of 500 Mbps is represented by speed class 7. The higher the value of the speed class, the faster the speed. FIG. 81 shows an example of the correspondence between communication speeds and speed classes. In this way, the number of communication speed classes is changed from 1 to 7
It is not necessary to have 7 stages, and it may be subdivided into, for example, about 20 stages in accordance with the progress of communication technology. Further, the communication speed does not need to be exactly matched with the physical communication speed of the ICS network communication line in the ICS 8000-1, and for example, it corresponds to 25% of the physical communication speed to give a margin to the communication speed. You may do it. The priority is represented by a numerical value in eight steps, for example, and represents the priority order when the ICS network frame is sent from the access control device or the relay device to the ICS network communication line and compared in the same speed class. The higher the numerical value of the priority, the higher the priority. For example, the relay device receives two ICS network frames F510 and F511 at substantially the same time, and the speed classes of these two frames have the same value "3".
And the priority of the ICS network frame F510 is “3”, and the ICS network frame F511
If the priority is “5”, the ICS network frame F511 having the higher priority is transmitted earlier in time.

In this embodiment, for example, the ICS network communication lines 8030-3 and 8030-4 are connected to the relay device 8020.
-1 to the access control device 8010-3, it is called "in the same communication route", and the ICS network communication line 8030-
5 and 8030-6 are said to be “in the same communication route” from the relay device 8020-1 to the access control device 8010-4. The communication route may be directed from the access control device to the relay device, or may be directed from one relay device to another relay device connected by the ICS network communication line. A plurality of ICS network communication lines of the same speed class may exist in the same communication route, and in this case, the same speed class may be in the same ICS network communication line.

<< Operation >> The operation will be described with reference to the flowcharts of FIGS. 82 and 83.

The user 8400-1 sends the ICS user frame F500 having the sender ICS user address "2500" and the receiver ICS user address "3600" to the ICS.
It is sent to the logical communication line 8051-1. The processing device 8012-1 of the access control device 8010-1 has a line unit 80.
11-1 receives the ICS user frame F500 from the ICS logic terminal of the ICS network address "7721" and the ICS network address "7721".
Is acquired (step S2001), and the address “772
1 "checks whether or not the request identification is registered as the virtual private line connection" 3 "on the conversion table 8013-1 (step S2002). In this case, since it is not registered,
Next, the receiver ICS user address "3600" written on the ICS user frame F500 is acquired corresponding to the ICS network address "7721" (step S2004), and the address "3600" is registered in the conversion table. Then, it is checked whether the request identification is registered as the inter-company communication “2” (step S2005). In this case, since it is registered, the incoming ICS network address “5522” is acquired from the conversion table 8013-1 in preparation for performing the ICS encapsulation, and the conversion table 801 is further acquired.
The information related to the charge of the speed class "3" and the priority "3" is acquired from 3-1 (step S2006). Next, the ICS encapsulation is performed by generating the ICS network frame F510 in which the speed class "3" and the priority "3" are written in the ICS network frame control unit (step S2020), and the ICS network communication line 8
030-1 (step S2021).

In the above description, the ICS network frame is for inter-company communication with a request identification of "2", but in the case of a virtual line connection with a request identification of "3", a conversion table 8013-1 is used. Incoming ICS network address,
The speed class, the priority, etc. are acquired, and the information relating to the charging is further acquired (step S2003). Get degrees,
Further, information related to billing is acquired (step S201
1) In the case of communication "4" to the ICS network server, the incoming ICS network address and the like are acquired from the conversion table 8013-1, and further information related to charging is acquired (step S).
2013), ICS network server 80 after ICS encapsulation
27-1.

The ICS network frame F510 generated by the above procedure is the ICS network communication line 8030-
1 to reach the relay device 8020-1. At this time,
At approximately the same time, another ICS network frame F51
1 is the relay device 80 via the ICS network communication line 8030-2.
It is assumed that 20-1 is reached. The ICS network frame F511 is sent from the user 8400-2 as an ICS user frame F501, and the ICS logical communication line 80
It reaches the access control device 8010-2 via 52-1 and is ICS encapsulated into an ICS network frame F511, and the ICS network communication line 8030-
2 is transmitted to reach the relay device 802011. The relay device 8020-1 receives the ICS network frames F510 and F511 (step S2).
030), under the control of the processing device 8021-1, first, the relay table 8022-1 is checked to find out which one of the ICS network frames F510 and F511 is the ICS network communication line, that is, the communication route (step S2031). ,
The communication routes are divided (step S2032). In the case of the present embodiment, the two ICS network frames F5
Both 10 and F511 are transmission destinations of the relay device 802.
0-1 is a communication route from the access control device 8010-3 to the ICS network communication lines 8030-3 and 8030.
There are four or two ICS network communication lines. Next, for both the ICS network frames F510 and F511, the speed class described in the control unit is read out and divided into speed classes (step S2041), and thereafter, the procedure for each divided speed class is performed. In the case of this embodiment, the IC
The speed classes of the S network frames F510 and F511 are both "3". Next, ICS of the same speed class
As for the frame, the priority described in each control unit is read, and the ICS frame having the higher priority is transmitted (step S2042). In case of the same priority, either one may be transmitted first. As a result of the above processing, the relay device 8
020-1 transmits the ICS network frame F511 to the ICS network communication line 8030-3 first, and then the ICS.
The network frame F510 is transferred to the ICS network communication line 80.
30-3.

In the above procedure, when there is only an ICS network communication line of a speed lower than the speed class described in the control unit of the ICS network frame F510, information on the deterioration of the communication service due to the speed decrease,
That is, the sender ICS user address and the recipient user address described in the corresponding ICS network frame,
The time (year / month / day / hour / minute / second) of the communication service is recorded in the relay operation file 8023-1. The recorded contents of the relay operation file are notified to the user of the ICS 8000-1 upon request.

By the above procedure, the two ICS network frames F511 and F510 have the higher priority I.
The CS user frame F511 precedes in time and the IC
It is transferred through the S network communication line 8030-3 and reaches the access control device 8010-3. The ICS network frame F511 is decapsulated by the ICS into the ICS user frame F501, and the ICS logical communication path 8053-1
Via ICS user address “3610” user 84
Reach 00-4. ICS network frame F5
10 is decapsulated by the ICS into an ICS user frame F500, and the user 8400-at the ICS user address "3600" passes through the ICS logical communication path 8053-1.
Reach 3.

Next, options for using the priority will be shown. At the time of ICS encapsulation, conversion table 8013-
When the speed class and priority registered in 1 are transferred to the ICS network frame, the processing device 8012-
1 checks the length written in the ICS user frame control unit to be processed, and, for example, only when the ICS user frame is a predetermined value (for example, 256 bytes) or less, the priority value Is incremented by "+1" to increase the ICS network
Post to By doing so, it is possible to realize a service that preferentially transfers the inside of the ICS8000-1 to only the short ICS user frame. By this method, ICS8
The 000-1 operator can easily realize a communication service in which a short ICS user frame has a higher priority, that is, a communication fee has been increased. With a short ICS user frame for users, the throughput becomes more reliable. Whether or not to adopt the priority option is achieved, for example, by setting it for each access control device.

The above method may be carried out by executing only the speed class and excluding the priority, that is, the same priority. In another embodiment, conversion table 8013-1 shows sender I
It does not include CS user addresses (intra-company and inter-company).
Even in this case, the flowchart of FIG.
It does not change because it does not refer to the CS user address.

Embodiment-21 (Granting Electronic Signature to ICS User Frame): An embodiment for electronically signing an ICS user frame and certifying that the ICS user frame has passed through the access control device will be explained. An embodiment of encrypting the ICS user frame when requested will be described. First, a technique of an electronic signature (electronic signature) used in this embodiment will be described. In using a digital signature, there are a signer who creates the digital signature and a signature verifier. The signer a simultaneously generates a pair of the signing key KSa and the verification key KPa of the signer a, holds the signing key KSa as a secret, and publishes only the verification key KPa by some means. The signer a is the private signature key KSa of the signer a only.
Is used to generate an electronic signature σ that depends on the data m and the signature key KSa. When expressed by a mathematical formula, the following formula 1 is obtained.

[0301]

Σ = SIGN (KSa, h (m)) where SIGN is a signature function representing a signature function, and the function y = h (m) is an electronic function having a function of compressing the data m into short data. A hash function for signature. The verifier b uses the publicized verification key KPa,

## EQU2 ## The correctness of the electronic signature σ is verified by ν = TEST (σ, KPa, h (m)). If ν = 1, both the electronic signature σ and the data m are correct, and the electronic signature σ
It is shown that both the electronic signature σ and the data m have not been rewritten and have not been tampered with after the generation of. Also, ν =
A value of 0 indicates that either or both of the electronic signature σ and the data m are incorrect. The verification key KPa is widely disclosed by an appropriate means, for example, a public key guidance service center that provides guidance service work of a public key or a public key, a general advertisement, or the like. Even if the verification key KPa is published, the signature key KS
Techniques for creating a signature function SIGN that makes it virtually impossible to calculate a are known.

Next, a procedure for adding a digital signature to the ICS user frame will be described. Conditions relating to the time and place of giving the electronic signature, that is, the time consisting of the year, month, day, hour, minute and second when the electronic signature was given, the person in charge of operating the access control device, and the "time / place parameter" indicating the identification symbol of the access control device. P1 ″, and signature function SIGN and hash function h (m)
The "signature function parameter P2" indicating the type of the signature, the length of the signature key, etc. is also the target of the electronic signature. When expressed by a mathematical formula, the following formula 3 is obtained.

[0303]

## EQU3 ## σ = SIGN (KSa, h (m)) However, m = UF | P1 | P2.

Here, UF is an IC before ICS encapsulation.
The S user frame or the restored ICS user frame after ICS decapsulation. The user on the receiving side receives the ICS user frame UF, the time / place parameter P1, the signature function parameter P2, and the electronic signature σ in the ICS user frame on the receiving side as UF∥P1∥P2∥. This is shown in FIG. 84. Furthermore, inside the ICS user frame UF, the parameter P
There is also a method in which the areas for writing 1, P2 and the electronic signature σ are made empty as shown in FIG. In this case, when the empty area of the ICS user frame UF is represented by Data,
The electronic signature σ is

(4) σ = SIGN (KSa, h (m)) However, m = Data || P1 || P2.

Generated as

(5) ν = TEST (σ, KPa, h (m)) However, m = Data || P1 || P2.

It is performed as.

Furthermore, for example, the length of the ICS user frame UF is 2048 bytes, and the length of UF | P1 || P2 | σ is 2448 bytes (2048 bytes + 400 bytes).
, The field representing the length of the frame inside the control unit of the ICS user frame UF (see FIG. 1 for example).
It is necessary to rewrite the total length field of 52) from 2048 bytes to 2448 bytes. By this method, the ICS user frame in which the length field is rewritten is represented by UF '. When adopting such an embodiment, the electronic signature σ is

(6) σ = SIGN (KSa, h (m)) However, m = UF '| P1 | P2.

Generated as

(7) ν = TEST (σ, KPa, h (m)) However, m = UF '| P1 | P2.

[0309] is performed.

In this embodiment, the order in which UF, P1 and P2 are arranged may be changed, for example, m = Pl / P2 / U.
An electronic signature σ = SIGN (KSa, h (m)) may be calculated as F, and P1 / P2 / UFUF / may be set in the ICS user frame on the receiving side. In this embodiment,
The encryption function is represented by y = ENC (K1, x), and the decryption function is represented by x = DEC (K2, y). Here, x is plaintext data, y is ciphertext data, ENC is an encryption function, DE
C represents a decryption function, K1 represents an encryption key, and K2 represents a decryption key. The digital signature technique is also called digital signature. For example, W. Diffie, ME Hell
man's paper "New Direction in Cryptography" IEEE, I
T. Vol.IT-22, No.6, p.644-654, 1976, published by Shokoido 1990, edited by Shigeo Tsujii "Cryptography and Information Security", p.127-
138.

<< Structure >> As shown in FIGS. 86 and 87,
The ICS 9000-1 is an access control device 9010-1,
9010-2, 9010-3 and relay device 9120-1
These devices include ICS network communication lines 9030-1 and 9030- for transferring ICS network frames.
It is tied at 2,9030-3. The line control unit 90111-11, the processing device 9012-1, the conversion table 9013-1, and the electronic signature unit 9017-1 are all access control devices 90.
It is provided inside 10-1. Electronic signature unit 9017
The inside of -1 includes a signature key KSa, a verification key KPa, a program module for realizing the electronic signature function SIGN and a hash function h (m), a time / place parameter P1, and a signature function parameter P2. Here, signature Ken KS
a is a secret value held by the access control device 9010-1, and since the electronic signature unit holds the secret signing key inside, it is necessary to prevent the secret signing key from leaking to the outside. For example, the electronic signature unit is stored inside a physically strong box so that the signature key cannot be read from the outside. In the plurality of ICS logic terminals of the line unit 9011-1,
ICS network address "7721", "772"
2 ”,“ 7725 ”,“ 7726 ”,“ 7727 ”,
“7728” is added.

The encryption / decryption means 9018-1 has an encryption function and holds an encryption key K1 and a decryption key K2. When the ICS user frame UF1 is input, the ciphertext UF2 is generated as UF2 = ENC (K1, UF1), and when the ciphertext UF2 is input, the plaintext is UF1 =.
Calculated as DEC (K2, UF2).

<< Operation >> The operation will be described with reference to the flowchart of FIG. The user 94001 has an ICS user frame F90 of a sender ICS user address “2500” and a receiver ICS user address “3600”.
0 is sent to the ICS logical communication line 9051-1. Processing device 9012-1 of access control device 9010-1
Receives the ICS user frame F900 from the ICS logical terminal of the ICS network address “7721” of the line unit 9011-1, acquires the ICS network address “7721” (step S2001), and the address “7721” becomes the conversion table 9013−. It is checked whether or not the request identification is registered as the virtual private line connection "3" on step 1 (step S2002). In this case, since it has not been registered, the ICS network address "77"
The receiver ICS user address "3600" written on the ICS user frame F900 corresponding to 21 "is acquired (step S2004), and this address" 360 "is acquired.
0 "is registered in the conversion table, and it is further checked whether the request identification is registered as inter-company communication" 2 "(step S2005). In this case, since it is registered, I
As a preparation for CS encapsulation, conversion table 9013-1
The incoming ICS network address "5522" is acquired from the. Next, the information related to the charging of the speed class and the priority is acquired from the conversion table 9013-1 (step S
2006). Since “1” is designated in the signature column of the conversion table 9013-1 and “YES” is registered in the transmission electronic signature column at the same time, the processing device 9012-1 stores it in the electronic signature unit 9017-1. Digital signature function SIGN
Or a program module that realizes the hash function h (m), time / place parameter P1, signature function parameter P
2 is used to generate an electronic signature of the ICS user frame F900 by the above-mentioned electronic signature technique, and a new ICS is generated.
Create a user frame (represented by UF2) (step S)
2019). This can be expressed by the following equation 8.

[0314]

[Formula 8] UF2 = m / | σ, where m = F900 / P1 / P2, σ = SIGN (K
Sa, h (m)).

In the above procedure, the conversion table 9013-
Even if "1" is specified in the signature field of "1", if "NO" is registered in the field of electronic signature at transmission, the electronic signature unit 9017-1 does not operate and the electronic signature is not added. .

Since the encryption class is designated as "1", the ICS user frame UF2 is encrypted by the encryption / decryption means 9018-1 and a new ICS user frame UF3 (= ENC (K1, UF2)).
When the encryption class is "0", encryption is not performed.

Next, the ICS in which the speed class, the priority and the encryption class are written in the ICS network frame control unit.
By generating the network frame F901, I
CS encapsulation is performed (step S2020), and ICS
The data is sent to the ICS network communication line 9030-1 inside the circuit 900-1 (step S2021). In the above description, I
The CS network frame is an example of inter-company communication with a request identification of "2". For example, in the case of a virtual line connection with a request identification of "3", the conversion table 9013-1 relates to the incoming ICS network address and billing. Information is acquired (step S2003), and in the case of intra-company communication whose request identification is "1", information regarding the incoming ICS network address and billing is acquired from the conversion table 901311-1 (step S2003).
2011), in the case of communication to the ICS network server whose request identification is "4", information regarding the incoming ICS network address, billing, etc. is acquired from the conversion table 9013-1 (step S2013).

The ICS network frame F901 generated by the above procedure is the ICS network communication line 9030-.
1 and the relay device 9120-1 to reach the access control device 9010-2, and the ICS is decapsulated and I
The CS user frame F902 becomes, and the ICS user address “3600” is passed through the ICS logical communication path 9051-3.
User 9400-2 is reached. Where F902 =
m‖σ, m = UF1‖P1‖P2, UF1 is I before transmission
CS user frame F900, P1 is time / place parameter, P2 is electronic signature parameter, σ is electronic signature, σ =
SIGN (KSa, h (m)).

<< Electronic Signature and Decryption in ICS Reverse Encapsulation >> The user 9400-3 has the sender ICS user address “3610” and the recipient ICS user address “2”.
The 510 "ICS user frame F930 is sent to the ICS logical communication line 9051-4. Access control device 9
010-3 receives the ICS user frame F930, performs ICS encapsulation using an internal conversion table, and
The CS network frame F931 is generated and sent to the ICS network communication line 9030-3. The ICS network frame F931 is used for the fiber device 9120-1 and the ICS.
Access control device 901 via network communication line 9030-1
0-1 is reached, and the IC is managed under the management of the conversion table 9013-1.
S reverse encapsulation results in an ICS user frame UF1. Since the encryption class is designated as "1" in the control unit of the ICS network frame F931, the ICS user frame (UF1) obtained by decapsulation is encrypted / decrypted by the encryption / decryption means 9018-1. It is decrypted to obtain an ICS user frame UF1 '. UF1 '= DEC (K2, UF
1), and if the encryption class is "0", decryption is not performed.

Next, "1" is specified in the signature column of the conversion table 9013-1, and at the same time, "Y" is entered in the electronic signature at reception column.
Since "ES" is registered, the electronic signature section 901 is displayed here.
7-11 operates, the parameters P1 and P2 and the electronic signature σ are added by the same method as described above, and a new ICS is generated.
The user frame becomes F932. Expressed as a symbol, F9
32 = m‖σ, m = UF1‖P1‖P2, electronic signature σ =
SIGN (KSa, h (m)), UF1 ′ instead of UF1 when the above decoding is performed. In the above procedure, even if "1" is designated in the signature column of the conversion table 9013-1, if "NO" is registered in the column of electronic signature at reception, no electronic signature is given. . The ICS user frame F932 is sent to the ICS user address 25 via the line unit 9011-1 and the logical communication line 9051-4.
10 users 9400-4 are reached.

<< Signature Request >> Sender ICS user address "2800", Receiver ICS user address "3"
The 700 "ICS user frame F940 is the line section 90.
When input from 11-1, the request identification is “2” corresponding to the ICS network address “7728”, and the signature column of the conversion table 9013-1 corresponding to the recipient ICS user address “3700” is entered. At the same time, "0" and "YES" are registered in the field of electronic signature at transmission. Then, since "1" is specified in the "signature request" column written in the predetermined position of the ICS user frame F940, the electronic signature unit 9017-1 operates, and the parameters P1, P2 and A new ICS user frame is provided with the electronic signature σ.

If "0" or "1" is registered in the signature column of the conversion table 9013-1 and "NO" is registered in the transmission electronic signature column, the signature request column of the ICS user frame shows "0" or "1". Even if "1" is specified, the electronic signature is not added before the ICS encapsulation. Similarly, the conversion table 9013-
If "1" is specified in the signature request field of the ICS user frame when "0" or "1" is registered in the field of signature of 1 and "NO" is registered in the field of electronic signature at reception, ICS
No electronic signature is given after decapsulation.

On the other hand, in the case where the ICS user frame is digitally signed at the time of transmission by the transmission side access control apparatus and further at the time of reception by the reception side access control apparatus, FIG.
As shown in, the electronic signature for transmission and the electronic signature for reception are added. Also, the verification key KPa is added to the signature function parameter P2.
There are other examples of including the value of. In this way, ICS
The receiver of the user frame can save the trouble of obtaining the verification key KPa from the public key guidance service center or the like. Furthermore, I
When the content of the CS user frame is an electronic slip (order slip, receipt, etc.), an electronic signature is attached to the electronic slip together with the identification name of the access control device through which the electronic slip passes. If either the sender (creator) of the electronic slip or the recipient (recipient) of the electronic slip tampers with the electronic slip,
The tampering can be detected by the principle of digital signature. Therefore, as long as the digital signature key has a secret value, that is, as long as the operator of the access control device that internally holds the signature key guarantees the signature key as a secret value, the digital signature cannot be tampered with. Can be used as

Embodiment-22 (Electronic signature server and encryption server)
B): As shown in FIG. 86 of the embodiment-21, the electronic signature unit 9017-1 and the encryption / decryption means 9018-1 are inside the access control device 9010-1. On the other hand, in this embodiment, as shown in FIG.
310-1, 9310-2, 9310-3, 9310-
4 is an embodiment in which the electronic signature unit is not included in each of them, and instead, the electronic signature servers 9340-1 and 9340- are used.
2, 9340-3, 9340-4 and ICS network communication line 9
341-1, 9341-2, 9341-3, 9341-
4 and are connected respectively. Each digital signature server includes the function of the digital signature unit of the embodiment 21 and, in cooperation with the access control device, gives a digital signature before the ICS encapsulation or gives a digital signature after the ICS reverse encapsulation. This is the same as the function of the electronic signature unit 9017-1 in Embodiment-21, and includes a signature key, a verification key, a digital signature function, a program module that implements a hash function, a time / location parameter, and a signature function parameter. The electronic signature servers 9342-1 and 9342-2 are connected to the relay devices 9320-1 and 9320-2 via the ICS network communication lines 9344-1 and 9344-2, respectively. All digital signature servers have a unique ICS network address within the ICS network, and communicate with other digital signature servers and access control devices using the ICS network server communication function to exchange information held by each other. Have a function. The electronic signature server 9342-1 is an electronic signature server representing the VAN 9301-1, and communicates with the electronic signature servers 9340-1 and 9340-2 inside the VAN 9301-1 by using the ICS network server communication function, and these electronic signatures You can get the information held by the server. In addition, the electronic signature server 9
340-1 can obtain the information (for example, the verification key) regarding the electronic signature held by the electronic signature server 9340-12 via the electronic signature server 9342-1. The electronic signature server 9342-1 can communicate with the electronic signature server 9342-2 representing another VAN 9301-2 by using the ICS network server communication function, and can exchange the information regarding the electronic signature held by each. The electronic signature server does not exchange the secret signature key held therein with other electronic signature servers, and strictly keeps the secret of the signature key.

Further, in this embodiment, as shown in FIG. 90, the access control devices 9310-1, 9310-2, 9310 are provided.
-3, 9310-4 is an example in which the encryption / decryption means is not included in each inside, and instead, encryption servers 9343-1, 9-3 are used.
343-2, 9343-3, 9343-4 and ICS network communication lines, respectively. Each encryption server includes the function of the encryption / decryption means 9018-1, and cooperates with the access control device connected thereto to encrypt the ICS user frame before the ICS encapsulation, or Decrypting the ICS user frame encrypted at the transmission source after the ICS decapsulation is the same as the above-mentioned encryption / decryption means 9018-1, and an encryption function or a decryption function. It includes a program module, an encryption key, and a decryption key that realize The cipher servers 9343-5 and 9343-6 are connected to the relay devices 9320-1 and 9320-2 via ICS network communication lines, respectively. Each cryptographic server has a unique ICS network address within the ICS network, and communicates with other cryptographic servers using the ICS network server communication function to exchange information held by the respective cryptographic servers. Have the function to Cryptographic server 9343-5 is V
VAN, which is a cryptographic server representing AN9301-1.
Cryptographic servers 9343-1 and 93 inside 9301-1
It is possible to obtain information held by these cryptographic servers by communicating with 43-2 using the ICS network server communication function. Also, the cryptographic server 9343-1 provides the cryptographic server with information (for example, a cryptographic key) about cryptography held by the cryptographic server 9343-2.
It is available via the 9434-5. The cryptographic server 9343-5 can communicate with the cryptographic server 9343-6 representing another VAN 9301-2 by using the ICS network server communication function, and exchange the information regarding the cryptographic information held by each. it can.

Example-23 (Open Connection): An ICS open connection, that is, a preparation procedure performed by a user and a VAN operator in order to change the other party and perform inter-company communication will be described.

<< User Application >> The user applies for the ICS name and ICS user address to the VAN operator, and at the same time, the ICS connection conditions, the user's identity and the payment method (address,
Company name, paying bank account number, etc.) Also,
If there is an in-company communication ICS user address defined by the user, it is presented, but if not, it is not presented. The VAN operator determines an ICS name and an ICS user address and informs the user according to a common rule that is predetermined with other VAN operators. ICS connection condition item is ICS
Name condition, communication band condition, billing condition, electronic signature condition,
The encryption condition, the open area condition, the dynamic change condition and the like are included, and the contents of these various conditions are as follows.

The ICS name condition is a part on the left side of the ICS name, for example, the ICS name is "USR # 1.ACS #".
1. DIS # 1. VAN # 1. JP. In the case of "AS", the user specifies only the leftmost "USR # 1" (the VAN operator decides the remaining right side portion). The communication band condition is the speed class or the priority. The charging condition is Supports communication bandwidth conditions, electronic signature conditions, encryption conditions, etc. for fixed-rate charges for a fixed period, charges for network use (network charges) and charges for information sent and received by digitally signed communications (information charges) The electronic signature condition specifies whether or not to add an electronic signature that can prove the fact that the ICS user frame has passed through the access control device together with the date and time, and the encryption condition is that the ICS user frame is transferred. When the open condition is the inter-company communication service, that is, when the request identification of the conversion table is “2”, an unknown condition that is not registered in the conversion table is specified. When an ICS frame is received from a believer, the access control device specifies whether to reject the reception, whether to create a temporary conversion table, or to receive the ICS frame. The condition specifies a function that can be changed according to the user's request through the ICS frame, and is specified by the open class. The method of specifying the value of the open class will be described later. The conditions and encryption conditions can be changed, but important conditions for VAN operation such as ICS address and billing are specified not to be changed.

<< ICS Address Management Server and ICS Name Server >> Referring to FIGS. 91 and 92, the present embodiment has access control devices 11110-1, 11110-2, and 11110 inside the ICS 11000-1. −
3, relay device 11116-1, ICS address management server 11150-1, 11150-2, ICS name server 11160-1, 11160-2, ICS conversion table server 11170-1, 11170-2, user 11132
1, 11132-2 are included. The ICS address management server 11150-2 uses the user 11132 in the internal correspondence table.
-2 ICS network address "8210", IC
The S user address “4200” and the address related information of the user are included, and the ICS name server 11160-2 is
The internal ICS name conversion table shows "USR # 3.ACS # 3.DIS #" of the ICS name of the user 11132-2.
3. VAN # 3. JP. AS ”and ICS user address“ 4200 ”are included.
32-1 ICS user address “3333” is used in association with the ICS network address (“777
7 "), and the IC of the access control device 11110-1
S logic terminal 11111-2 is assigned to the user 11132
-1 to connect to -1 via gateway 11000-2
The S logical communication path 11133-1 is connected. Since the ICS network address "7777" is a user secret value, it is not notified to the user.

Next, the VAN operator uses the internal correspondence table 11152-1 of the ICS address management server 11150-1.
The ICS network address “7777” and the ICS user address (between companies) “33” determined by the above method.
33 ”, ICS user address presented by the user (inside the company)“ 1111 ”and user address related information, that is, communication bandwidth condition, billing condition, electronic signature condition, encryption condition, open condition, dynamic change condition, user identity And payment method
Data path 11153-1 and processing unit 11151-1
Write directly to the correspondence table 11152-1 via. VAN
The operator further uses the ICS name “USR # 1.ACS # 1.DIS #” defined above in the ICS name conversion table 11162-1 inside the ICS name server 11160-1.
1. VAN # 1. JP. AS ”, ICS user address“ 3333 ”, type“ 1 ”(ICS user address“ 3
333 "is written inside the ICS name conversion table 11162-1) is directly written to the ICS name conversion table 11162-1 via the data path 11163-1 and the processing unit 11161-11. The results are shown in the correspondence table 11152-1 and the ICS name conversion table 111.
It becomes like 62-1.

ICS address management server 11150-1
When the ICS name server 11160-1 finishes writing various kinds of information about the new user described above,
Using the respective ICS network addresses “8910” and “8920” and the ICS network communication function, the ICS regarding the new user is stored in the ICS conversion table server 11170-1.
Notify that the address and ICS connection condition information have been obtained. Here, the ICS conversion table server 11170-1 is an IC
It is a kind of S network server, and in this example, ICS network address “8100” and ICS user address “21”.
00 ".

<< ICS Conversion Table Server >> The ICS conversion table server 11170-1 is the ICS address management server 111.
50-1 corresponds to the information described in the correspondence table 11152-1.
Read using the CS network communication function, conversion table prototype 11172
Write to -1. That is, "7777" is written in the field of the transmission ICS network address, "1111" is written in the field of the sender ICS user address (within the company), and "3333" is written in the field of the sender ICS user address (between the companies).
When there is no ICS user address for intra-company communication, the sender ICS user address (in-company) field is blank. The request identification is “2”, which represents communication between companies. The communication band condition is an example in which the speed class is “3” and the priority is “3”. The electronic signature condition is that the signature is “1”, the sending signature is “YES”, and the receiving signature is In this example, the designation is "NO". The charging condition is "4" in the charging class, and in this example, the charging is based on the flat-rate system. The encryption condition is "1" of the encryption class, and in this example, the ICS network frame is specified to be encrypted inside the ICS. The open area class in this example is “0”. In this example, the dynamically changing class “6” can change the signature at the time of transmission according to the user's request.

<< Use of ICS conversion table server (user) >>
The user 11132-1 writes “3333” as the sender ICS user address and the ICS user address “2100” of the ICS conversion table server 11170-1 as the recipient ICS user address, and the recipient is written in the user data part of the ICS user frame. The ICS user frame F1200 in which the information (receiver ICS user address or receiver ICS name) is written is transmitted. The ICS conversion table server 11170-1 receives the ICS user frame F1200 via the access control device 11110-1, and determines whether the recipient information in the user data section is the recipient ICS user address or the recipient ICS name. Accordingly, the incoming ICS network address for inter-company communication is acquired by the method described below. Further, when the recipient ICS name is designated, the recipient ICS user address is further acquired.

(When the recipient ICS user address is designated) The recipient information is the recipient ICS user address "3".
If it is 800 ", the ICS conversion table server 11170-
1 is an I connected to the access control device 11110-1.
The CS address management server 11150-1 is inquired using the ICS network communication function, and the ICS user address “38
ICS network address “760” corresponding to “00”
0 ”(incoming ICS network address) is inquired and acquired. When the recipient ICS user address is not included in the correspondence table 11152-1 (ICS network address search failure), the ICS conversion table server 1117.
0-1 receives “notification of ICS network address search failure” from the ICS address management server 11150-11.

(When the recipient ICS name is designated) The recipient information is "USR # 3.ACS" of the recipient ICS name.
# 3. DIS # 3. VAN # 3. JP. If it is “AS”, the ICS conversion table server 11170-1 indicates to the ICS name server 11160-1 connected to the same access control device 11110-1 that the ICS name “USR # 3. ACS # 3. DIS # 3.
VAN # 3. JP. AS ”is transmitted. The ICS name server 11160-1 is an IC of another ICS name server.
The S network address is held in correspondence with the ICS name (the part of the ICS name excluding the leftmost part USR # n). In this example, the ICS name server 1116
0-1 searches the ICS name conversion table 11162-1,
"ACS # 3.DIS # 3.VAN # 3.JP.AS"
Of the ICS name server 11160-2 that manages
The CS network address “8930” is found, the address “8930” is inquired using the ICS network communication function, and the ICS name “USR # 3.ACS #” is obtained.
3. DIS # 3. VAN # 3. JP. ICS user address “4200” (recipient ICS user address) and ICS network address “821” corresponding to AS ”
0 "(incoming ICS network address). In this procedure, the ICS name server 111
60-2 is the ICS address management server 11150-2
Is inquired about the ICS network address of the user 11132-2, and the address “8210” is acquired.

(Completion of conversion table 11113-1) Recipient I
When CS user address is specified, ICS conversion table server 1
1170-1 is the recipient ICS user address “380
0 ”and incoming ICS network address“ 7600 ”
Is added to the conversion table 11113-1, and the conversion table 11113-
The part corresponding to the receiving user of 1 is completed. When the recipient ICS name is designated, the ICS conversion table server 11170-1
Recipient ICS user address “4200” and incoming IC
Conversion table 1111 for S network address “8210”
3-1 is added to complete the portion corresponding to the receiving user of the conversion table 11113-1. In the above procedure, the ICS address management server 11150-1 and the ICS name server 11160 are used.
-1 receives the "notification of ICS network address search failure" from the ICS conversion table server 11170-
1 transmits the ICS frame indicating the conversion table addition failure to the request source user 11132-1.

<< Other Use of ICS Conversion Table Server (User) >> The user 111132-1 is a conversion table 11113-1.
IC that wrote a request to notify the details of individual user support
S user frame to ICS conversion table server 11170-1
To request the user to be notified of the user-specific contents. Further, the user can request the rewriting of a part of the contents of the conversion table 11113-1 by using the dynamic change class that has been agreed with the VAN operator in advance by the above method. The dynamic change class is determined to be 1, 2, ..., For example, the dynamic change class 1 is designated to increase the priority of each application user by 1, and the dynamic change class 2 is set to 1 priority. Decrease designation, dynamic change Class 3 sets the signature at transmission to "Y
It is specified that the encryption class is set to "ES" and the encryption class is changed to "2".

<< Use of Conversion Table >> How to use the conversion table created by the above procedure has been described in Embodiment-1 and the like. Example-
1 describes a method of creating a temporary conversion table, that is, a method of creating a temporary conversion table when the access control device receives an ICS network frame and decapsulates the ICS and there is no conversion table, whereas in this example, Use the open class of the conversion table. That is, when the access control device receives the ICS network frame and decapsulates the ICS, the received “pair of the incoming ICS network address and the outgoing ICS network address included in the network control unit of the ICS network frame” is converted. If the open class is designated as "2" when it is not registered in the table as "a pair of the outgoing ICS network address and the incoming ICS network address", it is set in the temporary conversion table as in the above-mentioned embodiment. Area class is specified as "1"
If so, do not set the temporary conversion table. Further, if the designation of the open area class is "0", the temporary conversion table is not set and the received ICS network frame is discarded. In this case, the ICS user frame is not delivered to the user. In other words, when the open class designation is "0", reception from an unknown sender not registered in the conversion table is rejected, and so-called closed connection is realized. In the above, in the case of the request identification “4”, it is always treated as the designation “1” of the open class. That is, it is not set in the temporary conversion table.

<< Closing of closed network using open class >> When a company A, company B, company C performs inter-company communication, the open class of IP terminals of these companies is registered in the conversion table Are all set to "0". Then, all ICS user frames from unknown senders that are not registered in the conversion table are discarded by the access control device.
The ICS user frame is transmitted and received only between the companies C and C. In this sense, it is possible to construct a virtual closed network closed to these three companies, that is, to cut out the closed network. Regarding one of the IP terminals of Company A,
If you specify the open class of the conversion table as "2",
Since only this terminal receives an ICS user frame from an unknown sender, it is placed outside the above closed network.

<< Partial Modification of Example (Variation) >>
In the above embodiment, the VAN operator uses the data path 11
153-1 and data path 11163-1
The method of inputting the ICS address, the ICS connection condition and the like to the S address management server 11150-1 and the ICS name server 11160-1 has been described. The VAN operator creates a special ICS network server inside the ICS11000-1 without using these data paths, and from this special ICS network server, using the ICS network communication function, the ICS address management server 1115011 or ICS name server 1116
The contents of the conversion table 11152-1 and the ICS name conversion table may be rewritten by directly inputting the ICS address, the ICS connection condition and the like to 0-1.

Embodiment-24 (ICS address name management server): As shown in FIG. 91 and FIG. 92 of the above-mentioned Embodiment-23, the ICS address management server and the ICS name server are independent of each other, and respectively communicate with ICS network. It is connected to the access control device via a line. On the other hand, in this embodiment, as shown in FIG.
-1 internal ICS address name management server 1300
0-1, 13000-2, 13000-3, 13000
-4 are access control devices 13010-1 and 13010, 13
010-2, 13010-3, 13010-4. ICS address name management server 13000
-1 has a processing device 130001-1, and is an embodiment-23.
Correspondence table 13002-1 having the same function as that included in the ICS address management server, and ICS name conversion table 13003 having the same function as included in the ICS name server
I, which has 1 and 1 and is uniquely distinguishable from others within the ICS
The CS network address “9801” is assigned.

Other ICS Address Name Management Server 13
000-2, 13000-3, 13000-4 are also ICS
It has the same function as the address name management server 13000-1, includes a processing device, a correspondence table, and an ICS name conversion table, respectively, and further has ICS network addresses “9802”, “9803”, and “9804”, respectively.
It is possible to communicate with each other using the CS network communication function and exchange information held by other ICS address name management servers. ICS address name VAN representative management server 13
020-1 is the ICS network address “9805”
In addition, the other ICS address name VAN representative management server 13020-2 has the ICS network address “9806”, and a large number of ICS address name management servers and other ICS address name VANs using the ICS network communication function. It is possible to communicate with the representative management server and exchange information owned by each other. The ICS address name VAN representative management server 13020-1 is the processing device 13.
031-1 and database 13032-1, and V
Information such as ICS address and ICS name is exchanged with all ICS address name management servers inside AN13000-1, and the collected ICS address and ICS name data is accumulated in the database 13032-1, and the above procedure is performed. By VAN13030-1
On behalf of.

The ICS address name management server
Although the processing device, the correspondence table, and the ICS name conversion table are included, as another embodiment, the correspondence table and the ICS name conversion table may be combined into one table, and included in both of these two types of tables. It is sufficient to use only one of the ICS user addresses that are stored.

Embodiment-25 (Function Separation of Access Control Device): As shown in FIGS. 91 and 92 of Embodiment-23,
ICS address management server 11150-1, ICS name server 11160-1, ICS conversion table server 1117
0-1 is connected to the access control device 11110-1, and ICS encapsulation and ICS decapsulation are performed by the conversion table 11 inside the access control device 11110-1.
113-1 is used. On the other hand, in the present embodiment, the functions of the access control device 11110-1 are that the access control device 14110-1 and the plurality of simple access control devices 14210-1, 14210-2, 1421.
It is divided into 0-3. That is, as shown in FIGS. 94 and 95, the access control device 11110-1 uses the ICS network communication lines 14190-1, 14190-2, 14190.
Access control device 1421 via -3
0-1, 14210-2, 14210-3 are connected. ICS address management server 141501, ICS
Name server 141601, ICS conversion table server 14
170-1, ICS charging server 14180-1, electronic signature server 14181-1, encryption server 14182-1,
Operation management server 14183-1, ICS network server 141
84-1 are ICS network communication lines 14191-
1,14191-2,14191-3,14191-
4,14191-5,14191-6,14191-
Aggregate access control device 141 via 7, 14191-8
10-1 and is further connected to the access control device 11
The conversion table 11113-1 inside 110-1 includes an aggregate conversion table 14113-1 and simple conversion tables 14213-1 and 142.
13-2 and 14213-3. However, these aggregate conversion tables and simple conversion tables partially overlap. That is, four items of the originating ICS network address, request identification, speed class, and priority are included in both conversion tables. The temporary partial conversion table 14214-1 is essentially the same as the temporary conversion table described in the example 1 or the like, but the items included in the temporary partial conversion table 14214-1 are included in the simplified conversion table 14213-1. It is the same as the item.
Line unit 14 inside simple access control device 14210-1
211-1 has the same function as the line unit 11111-1 inside the access control device 11110-1.

The simple access control device 14210-1 uses the simple conversion table 14213-1 to perform ICS encapsulation at the time of transmission and ICS decapsulation at the time of reception. 141
13-1 is used to perform the processing relating to the electronic signature and charging as described above. In addition, these simple access control devices 14210-1, 14210-2, 14210-3
And the integrated access control device 14110-1 function together to achieve the same function as the access control device 11110-1. The user 14132-1 is the ICS user frame F13 having the sender ICS user address “3333” and the receiver ICS user address “4200”.
00 is sent to the ICS logical communication line 14133-1.
Processing device 142 of simple access processing device 14210-1
As shown in the flowchart of FIG. 96, 12-1 indicates the ICS network address “7” of the line unit 14211-1.
777 ”ICS logic terminal to ICS user frame F
Upon receiving 1300, the ICS network address “7777” is acquired (step S2501), and whether or not the request identification of this address “7777” is registered as the virtual private line connection “3” on the simple conversion table 14213-1. It is checked (step S2502). In this case, since it is not registered, the ICS user frame F130 is associated with the ICS network address "7777".
Recipient ICS user address “42” written on 0
00 "(step S2504), and it is checked whether or not this address" 4200 "is registered in the simple conversion table 14213-1 and the request identification is registered as inter-company communication" 2 "(step S2505). In this case, since it is registered, the incoming ICS network address “8210” is acquired from the simple conversion table 14213-1 in preparation for performing the ICS encapsulation (step S).
2506).

The simple access control device 14210-1 is
Next, the ICS encapsulation is performed by generating the ICS network frame F1301 in which the speed class and the priority are written based on the information obtained from the simple conversion table 14213-1 inside the ICS network frame (step S2520). The data is sent to the aggregate access control device (step S2521). Here, as described above, the information of the speed class “3”, the priority “3”, and the encryption class “0”, which are the items of the simple conversion table 14213-1, are written in the extension unit of the ICS network control unit.

The aggregate access control device 14110-1 is
The ICS network frame F1301 is received from the simple access control device 14210-1, and the ICS network frame F1301 is received by the aggregate access control device 14
Based on the fact that 11011 passes, the charging information frame F
K01 is created and sent to the charging server 14180-1.
Information such as request identification, speed class, priority, billing class, and encryption class of items registered in the aggregate conversion table 14113-1 is referred to for making the billing information frame FK01. The signature, the sending signature, and the receiving signature of the items of the aggregate conversion table 14113-1 are used to add a digital signature, and like the other embodiments, the digital signature server 14181-. 1 is requested to be electronically signed. Similarly, if the designation of the encryption class is "1", which means encryption, the encryption server 14182-1 is requested. When the above processing is completed, the aggregated access control device 14110-1 determines that the ICS network frame F1
302 is sent to another access control device 14110-2 or the aggregate access control device via the ICS network communication line 14190-4. The ICS network frame F13
The format of 02 is changed by the addition of the electronic signature and the conversion into the ciphertext as described above when the digital signature server or the cryptographic server operates.
It is equivalent to the CS network frame F1301. In the case where the simple access control device 14210-1 can be realized with almost no change in the function of the existing router, the number of users accommodated in the simple access control device 14210-1 is small, and the users are widely dispersed geographically. Has an economic advantage that the total number of ICS address management servers, ICS name servers, ICS conversion table servers, accounting servers, electronic signature servers, and encryption servers can be reduced.

The operation management server 14183-1 is given an ICS network address, and is connected to the aggregate access control device 14110-1 and the relay device.
With the CS network communication function, ICs such as other operation management servers, access control devices, ICS address management servers, etc., communication status (communication congestion degree, etc.) inside the ICS, failure information, etc.
Exchange information on the operation of S.

By the way, the simple access control device 1421
The open class of the items included in the simple conversion table 14213-1 inside 0-1 is used for the same processing as the processing of the open class registered in the conversion table inside the access control device, as described above. . That is, the simple access control device 142
10-1 receives the ICS network frame and IC
When the S reverse encapsulation is performed, the received “pair of the incoming ICS network address and the outgoing ICS network address included in the ICS network frame control unit” is
When the simple conversion table 14213-1 is not registered as “a pair of the outgoing ICS network address and the incoming ICS network address”, that is, when the transmission source of the received frame is not registered in the simple conversion table, the open class is designated. If "2", the temporary partial conversion table 14
214-1 is set, but if the open class designation is "1", the temporary partial conversion table is not set. Further, if the open class designation is "0", the temporary partial conversion table is not set and the received ICS network frame is discarded. This combination does not send the ICS user frame to the user. "0", which is an open class designation, rejects reception from an unknown source that is not registered in the simple conversion table, and realizes a so-called closed connection.

As described in the above embodiment, the IC
The S address management server and the ICS name server may be integrated, that is, a single ICS address name management server may be realized.
The address name management server and the ICS network communication line are connected and used. Further, in the above embodiment, the simple conversion table 1
4213-1 does not include items of speed class and priority, I
At the time of CS encapsulation, write "0" of speed class and priority to the extension part of the ICS network control unit,
It may indicate that there is no designation. Similarly, an example in which the open range class is not specified in the simple conversion table 14213-1 may be used.
In this case, "0" of the speed class and the priority is written in the extension section of the ICS network control section to indicate that there is no designation.

Embodiment 26 (access control device including server and aggregated access control device): As shown in FIG.
The ICS 15000-1 includes access control devices 15110-1, 15110-2, 15110-3 including a server,
Central access control device 15210-1,1 including server
5210-2, 15210-3 and simple access control devices 15213-1, 15213-2, 15213-3 are included. In the example of FIGS. 91 and 92, the ICS address management server 11150-1 and the ICS name server 111.
60-1, the ICS conversion table server 11170-1 are connected to the access control device 11110-1, respectively.
In the example of FIG. 95, the ICS address management server 141
50-1, ICS name server 14160-1, ICS
Conversion table server 14170-1, charging server 14180-
1, electronic signature server 14181-11, encryption server 141
82-1 is an aggregate access control device 14110-
Connected to 1. On the other hand, in this embodiment, FIG.
As shown in FIG. 5, the access control device 15110-1 has an ICS address management server 15115-1 and an ICS name server 15115 inside the same physically independent housing.
-2, ICS conversion table server 15115-3, ICS frame database server 15115-4, charging server 1
5115-5, the operation management server 15115-6, the electronic signature server 15115-7, and the encryption server 15115-8 are included. However, these servers are ICS network addresses "6701", "6702", "670".
3 ”,“ 6704 ”,“ 670 ”,“ 6706 ”,“ 6 ”
707 ”and“ 6708 ”are assigned respectively, and I
With the CS network server communication function, it is possible to exchange information with the ICS network server outside the access control device 15110-1 including the server. The processor 15112-1 is connected to the servers 15115-1 to 1515 through the data line 15117-1.
You can exchange information with 115-8. Furthermore, these servers 15
115-1 to 15115-8 are data lines 15117.
Information can be exchanged with each other via -1.

Similarly, the centralized access control device 15210-1 including the server includes the ICS address management server 15215-1 and ICS inside the same physically independent housing.
Name server 15215-2, ICS conversion table server 15
215-3, ICS frame database server 152
15-4, a billing server 15215-5, an operation management server 15215-6, an electronic signature server 15215-7, and an encryption server 15215-8. However, these servers are ICS network address "7001",
"7002", "7003", "7004", "700
5 "," 7006 "," 7007 ", and" 7008 ", respectively, and the integrated access control device 15210-1 including a server is provided by the ICS network server communication function.
Information can be exchanged with an ICS network server outside the Internet. The processor 152121-1 can exchange information with the servers 15215-1 to 15215-8 via the data line 15217-1. Further, the servers 15215-1 to 15215-8 can exchange information with each other via the data line 15217-1. In the above description, the same physically independent housing means, for example, a stand-alone computer, a single electronic board, or an LSI. In the case of LSI, the integrated access device including the server is realized as a system on an LSI chip.

The ICS frame database server or another server may be excluded from the "access control device including a server". Similarly, the ICS frame database server or another server may be excluded from the “aggregate access control device including a server”. In the case of each of these embodiments, for example, an ICS frame database server and an access control device including a server, or an aggregate access control device including a server are connected via an ICS network communication line.

Embodiment 27 (incoming priority control): FIG.
The control unit in the IP frame shown in FIG. 2 has a source IP address and a destination IP address in addition to the “protocol type”. Further, inside the TCP frame shown in FIG. 98 and the UDP frame shown in FIG. 99, , A source port number and a destination port number are defined respectively. 48 in which IP address (32 bits) and port number (16 bits) are arranged
The bit data is called the socket number. That is,
Socket number = IP address / port number. In this embodiment, the source socket number = source IP address‖
Source port number and destination socket number = destination IP address / destination port number. In the present embodiment, the ICS user frame obtained by reaching the access control device from the ICS network communication line and decapsulating it here
This is an example in which the "protocol type" and the socket number displayed inside the user frame are used to control the priority of the order of transmission to the outside of the ICS.

<Structure> As shown in FIGS. 100 and 101, the ICS 17000-1 is the access control device 1710.
0-1, 17110-1, 17120-1, 17130
-1, 17140-1, 17150-1, 17160-
1, the access control device 17100-1 includes the line unit 1
7111-1, processing device 17112-1, conversion table 171
13-1 is included. 17200-1,17210-1,1
7220-1, 17230-1, 17240-1, 17
250-1, 17260-1, 17270-1, 172
Reference numeral 80-1 is an LA Ν of each company, and each gateway 1721-1, 1721-1-1, 1722.
1-1, 17231-1, 17241-1, 17251
-1,1726-1-1,1727-1-1,17281-
1 to the ICS 17000-1. Each LAN includes two to three terminals having a function of transmitting and receiving an IP user frame. These ICS user addresses are “2600” and “2610” in the LAN 17200-1 and “1” in the LAN 17210-1.
230 ”and“ 1240 ”, LAN 17220-
1 inside is "2700", "2710" and "2720"
The internal LAN 17230-1 is “2800” and “2810”, and the internal LAN 17240-1 is “2”.
100 "and" 2110 ", and LAN17250-
1 inside is “1200”, “1210” and “1220”
The internal LAN 17260-1 is “2200” and “2210”, and the internal LAN 17270-1 is “2”.
300 ”and“ 2310 ”, LAN 17280-
The inside of 1 is "2400" and "2410". Further, 17291-1 and 17292-1 are terminals each having a function of transmitting and receiving IP user frames, and ICS user addresses "2500" and "1250", respectively.
And is connected to the ICS 17000-1.

<< Conversion Table >> Access Control Device 17100-
The conversion table 17113-1 inside 1 will be described with reference to FIG. The function of the conversion table is the same as that of the other embodiments. In this embodiment, the incoming priority symbol, the protocol priority,
The feature is that the priority is controlled by using a partial table that is a component of the conversion table 17113-1 named TCP socket priority and UDP socket priority. Transmission of conversion table I
If the CS network address is "7821", the incoming call priority symbol is defined as "pr-7821". That is, the incoming control priority is
It is set so that the parameter depends on the ICS network address given to the ICS user logic terminal to be transmitted after CS decapsulation. Conversion table 17113-
Looking at another partial table of No. 1, corresponding to, for example, "pr-7821", the protocol priority is "p-1", the TCP socket priority is "t-1", and the UDP socket priority is "N".
It is described as “ULL.” Here, “NULL” represents no designation, and the protocol priority “p−1” is “TCP”, “UDP”, “ICMP”,
It is defined as "IGMP".

Looking at another sub-table, the TCP socket priority "t-1" is the socket symbol "in descending order of priority".
"Sk-1" and "sk-7" are defined. Looking at still another sub-table, the UDP socket priority "u-1" defines "sk-3" and "sk-8" in descending order of priority. Furthermore, the socket symbol "s" written in other subtables
In the content of “k−1”, “To” represents the destination socket number, and the destination IP address is “210”.
0 "and the destination port number are" 30 ". Similarly, in the contents of the socket symbol" sk-2 "," From "represents the source socket number, and the source IP address is This indicates that “1240” and the transmission source port number are “32”.

<< Individual Description of ICS Frame >> The ICS network frame NF01 has the ICS user address “2”.
After being transmitted from the terminal 17291-1 of 500 ", the access control device 17110-1 encapsulated the ICS network address" 7200 "and the incoming ICS network address" 7821 "by the ICS encapsulation.
It is transferred inside the ICS 17000-1 and reaches the access control device 17100-1, where it is ICS decapsulated to become an ICS user frame UF01, and the ICS user address “2100” of the ICS user address “2100” is passed through the user logical communication line 17821-1. Reach the terminal. User frame UF0 inside ICS network frame NF01
The "protocol type" of the control unit of No. 1 is TCP, and T
In this example, the "destination port number" of the CP frame is "30". From the ICS network frame NF02,
NF03, NF04, NF05, NF06, NF07,
NFO8, NF09, NF10, and NF11 are all shown in FIG.
The same is true as shown in FIG.

The frame NF02 has the address "2600".
Of the outgoing ICS network address "7300" and the incoming ICS network address "78"
21 "is ICS-encapsulated, and after being transferred inside the ICS, it is ICS-decapsulated and frame UF0
2, and reaches the terminal of the ICS user address “2110” via the user logical communication line 17821-1. The "protocol type" of the frame UF02 is TCP
In this example, the “destination port number” is “30”.

Frame NF03 has address "1230"
Of the outgoing ICS network address “7400” and the incoming ICS network address “78”
22 "is ICS-encapsulated, and after being transferred inside the ICS, it is ICS-decapsulated and frame UF0
3, and reaches the terminal of the ICS user address “1200” via the user logical communication line 17822-1. "Protocol type" of frame UF03 is TCP
In this example, the “source port number” is “30”.

Frame NF04 has address "1240"
Of the outgoing ICS network address “7400” and the incoming ICS network address “78”
22 "is ICS-encapsulated, and after being transferred inside the ICS, it is ICS-decapsulated and frame UF0
4, and reaches the terminal of the ICS user address “1210” via the user logical communication line 17822-1. The "protocol type" of the frame UF04 is TCP
In this example, the “source port number” is “32”.

Frame NF05 has address "125".
It is sent from the terminal of "0" and encapsulated as an outgoing ICS network address "7500" and an incoming ICS network address "7822".
After the transfer in the CS, the ICS is decapsulated to form a frame UF05, which reaches the terminal of the ICS user address "1220" via the user logical communication line 17822-2. "Protocol type" of frame UF05 is T
This is an example of CP and the "source port number" is "32".

The frame NF06 has the address "2610".
Of the outgoing ICS network address "7300" and the incoming ICS network address "7"
823 "encapsulated by ICS,
After transfer inside, ICS is decapsulated and frame UF
06, and reaches the terminal of the ICS user address “2200” via the user logical communication line 17823-1. UDP is the "protocol type" of frame UF06
In this example, the "destination port number" is "40".

The frame NF07 has the address "2700".
Of the outgoing ICS network address "7600" and the incoming ICS network address "78"
23 "is ICS-encapsulated, and after being transferred inside the ICS, it is ICS-decapsulated and frame UF0.
7, and reaches the terminal of the ICS user address “2210” via the user logical communication line 17823-1. UDP is the "protocol type" of frame UF07
In this example, the "destination port number" is "40".

The frame NF08 has the address "2710".
Of the outgoing ICS network address "7600" and the incoming ICS network address "7"
824 "encapsulated by ICS,
After transfer inside, ICS is decapsulated and frame UF
08, and reaches the terminal of the ICS user address “2300” via the user logical communication line 17824-1. UDP is the "protocol type" of frame UF08
In this example, the “source port number” is “40”.

The frame NF09 has the address "2800".
Of the outgoing ICS network address "7700" and the incoming ICS network address "78"
24 "is ICS-encapsulated, and after being transferred inside the ICS, it is ICS-decapsulated and frame UF0.
9, and reaches the terminal of the ICS user address “2310” via the user logical communication line 17824-1. UDP is the "protocol type" of frame UF09
In this example, the “source port number” is “42”.

Frame NF10 has address "2720"
Of the outgoing ICS network address "7600" and the incoming ICS network address "78"
25 "is ICS-encapsulated, and after being transferred inside the ICS, it is ICS-decapsulated and frame UF1.
It becomes 0 and reaches the terminal of the ICS user address "2400" via the user logical communication line 17825-1. The "protocol type" of the frame UF10 is TCP
In this example, the "destination port number" is "60".

The frame NF11 has the address "2810".
Of the outgoing ICS network address "7700" and the incoming ICS network address "78"
25 "is ICS-encapsulated, and after being transferred inside the ICS, it is ICS-decapsulated and frame UF1.
1 is reached and reaches the terminal of the ICS user address “2410” via the user logical communication line 17825-1. The "protocol type" of frame UF11 is UDP
In this example, the “source port number” is “70”.

<< Example 1 of Determining Priority >> A method of determining priority will be described with reference to the flowchart in FIG. The access control device 17100-1 receives the ICS network frames NF01 and NF02 from the ICS network communication line at substantially the same time (step S1000), and decapsulates each network frame to obtain the ICS user frames UF01 and UF02 (step S1000). S10
10). From the conversion table 17113-1, it can be seen that the incoming ICS network addresses of the ICS logical terminals transmitting these ICS user frames are both "7821", and they match (step S1020). The incoming priority symbol of both the ICS network frames NF01 and NF02 is “pr-7821”, and then the conversion table 171.
According to the partial table of 13-1, the protocol priority corresponding to "pr-7821" is "p-1", the TCP socket priority is "t-1", and the UDP socket priority is "NULL".
Is specified. Further, when the other parts which are the constituent elements of the conversion table 17113-1 are examined, the protocol priority “p
-1 "breakdown from TCP, UDP, ICMP, IGMP
For the TCP having the highest priority in the order of, and the highest priority in the order of the socket symbols “sk-1” and “sk-7” from the breakdown of the TCP socket priority “t-1”, the priority is further increased. From the breakdown of "sk-1", it can be seen that the IP address forming the destination socket number is "2100" and the destination port number is "30". The protocol type displayed inside the ICS network frame NF01 is “TCP” and the destination IP address is “2”.
100 "and the destination port number is" 30 ".
The protocol type displayed inside the CS network frame NF02 is “TCP”, the destination IP address is “2110”, and the destination port number is “30”. In this embodiment, it can be seen that the protocol type and the destination socket number match the designation of the socket symbol "sk-1" in the ICS network frame NF01. By the above procedure, the ICS that is sent with priority
It is determined that the network frame is NF01
(Step S1030). Next, this ICS network frame NF01 is sent to the user logic terminal via the ICS logic terminal (step S1040).

<< Example 2 of Priority Determination >> The access control device 17100-1 receives the ICS network frames NF03, NF04 and NF05 from the ICS network communication line at substantially the same time (step S1000) and reverses the respective network frames. The ICS user frames UF03, UF04, UF05 are obtained by encapsulation (step S1).
010). Based on the conversion table 17113-1, these ICS
Incoming ICS of ICS logic terminal for transmitting user frame
The network addresses are both “7822”, and it can be seen that they match (step S1020). The incoming priority symbols of the ICS network frames NF03, NF04 and NF05 are all "pr-7822", the protocol priority is "P-1", the TCP socket priority is "t-2", and the UDP socket priority is "NULL" is specified. From the breakdown of the protocol priority “p-1”, the TCP priority is high, and the TCP socket priority “t-
From the breakdown of 2 ", the socket symbol" sk-2 "has a high priority, and from the breakdown of the socket symbol" sk-2 ", the IP address forming the source socket number is" 2100 "and the source port number is" 30 ". It is understood that it is ". ICS
The protocol type displayed inside the network frame NF03 is “TCP”, the source IP address is “1230”, and the source port number is “30”. I
The protocol type displayed inside the CS network frame NF04 is "TCP", the source IP address is "1240", and the source port number is "32". Further, the protocol type displayed inside the ICS network frame NF05 is "TCP", the source IP address is "1250", and the source port number is "32". In this embodiment, the protocol type and the source socket number are the same as the socket symbol "sk-".
It can be seen that the ICS network frame NF04 matches the designation of 2 ".
The ICS network frame to be transmitted with priority is NF
It is determined to be 04 (step S1030). Next, this ICS network frame NF04 is set to ICS.
Send to user logic terminal via logic terminal (step S
1040).

<< Example 3 of Priority Determination >> The access control device 17100-1 receives the ICS network frames NF06 and NF07 from the ICS network communication line at substantially the same time (step S1000) and decapsulates each network frame. ICS user frame UF0
6, UF07 is obtained (step S1010). Conversion table 17
113-1 shows that the incoming ICS network addresses of the ICS logical terminals for transmitting these ICS user frames are both "7823", and they match (step S1020). ICS network frame NF
In both 06 and NF07, the incoming call priority symbol is "pr-7
823 ", the protocol priority is" p-2 ", TC
"NULL" is designated as the P socket priority, and "u-1" is designated as the UDP socket priority. From the breakdown of protocol priority "p-2", UDP, TCP, ICMP, IG
For UDP with the highest priority in the order of MP and the highest priority, from the breakdown of the UDP socket priority “t-1”, the socket symbols “sk-3” and “sk-8” have the highest priority, and the socket From the breakdown of the symbol “sk-3”, it can be seen that the IP address forming the destination socket number is “2200” and the destination port number is “40”. The protocol type displayed inside the ICS network frame NF06 is “UDP”, the destination IP address is “2200”, and the destination port number is “40.” On the other hand, it is displayed inside the ICS network frame NF07. The protocol type is “UDP”, the destination IP address is “2110”, and the destination port number is “40.” In this embodiment, the protocol type and the destination socket number match the designation of the socket symbol “sk-3”. The ICS network frame NF06 is determined to be the ICS network frame NF06 by the above procedure (step S1030). To user logic terminal via ICS logic terminal And out (step S1040).

<< Example 4 of Determining Priority >> The access control device 17100-1 uses the ICS network frame NF08.
And and NF09 are received at substantially the same time (step S10
00), decapsulating each network frame to obtain ICS user frames UF08 and UF09.
(Step S1010). From the conversion table 17113-1,
The incoming ICS network address of the ICS logical terminal for transmitting these ICS user frames is "782".
4 ”, and it can be seen that they match (step S102).
0). ICS network frames NF08 and NF0
9, the incoming call priority symbol is "pr-7824", the protocol priority is "p-2", the TCP socket priority is "NULL", and the UDP socket priority is "u-".
2 "is specified. From the breakdown of the protocol priority" p-2 ", the priority of the socket symbol" sk-4 "is high, and from the breakdown of the socket symbol" sk-4 ", the source socket number is configured. It can be seen that the IP address to be transmitted is “2710” and the source port number is “40.” The protocol type displayed inside the ICS network frame NF08 is “UDP”, and the source IP address is “2”.
710 ”and the source port number is“ 40 ”.
The protocol type displayed inside the ICS network frame NF09 is "UDP", the transmission source IP address is "2800", and the transmission source address number is "42". In this embodiment, it is found that the ICS network frame NF08 has the protocol type and the source socket number that match the designation of the socket symbol “sk-4”. Through the above procedure, it is determined that the ICS network frame to be preferentially transmitted is NF08 (step S1030). Next, this ICS network frame NF01 is sent to the user logic terminal via the ICS logic terminal (step S1040). << Example 5 of Priority Determination >> Access Control Device 17100-
1 is the ICS network frames NF10 and NF11
Is received at substantially the same time (step S1000), each network frame is decapsulated to obtain ICS user frames UF10 and UF11 (step S10).
10). From the conversion table 17113-1, it can be seen that the incoming ICS network addresses of the ICS logical terminals transmitting these ICS user frames are both "7825", and they match (step S1020). In both the ICS network frames NF10 and NF11, the incoming priority symbol is "pr-7825", the protocol priority is "p-1", the TCP socket priority is "t-3", and UD.
"U-3" is designated as the P socket priority. From the breakdown of the protocol priority "p-1", the TCP priority is U
Higher than DP. However, the protocol type displayed inside the ICS network frame NF10 is "TCP", and the protocol type displayed inside the ICS network frame NF11 is "UDP". Through the above procedure, it is determined that the ICS network frame to be preferentially transmitted is NF10 (step S1030). Next, this ICS network frame NF10 is sent to the user logic terminal via the ICS logic terminal (step S1040).

Embodiment-28 (Calling Priority Control): ICS
An example in which a user IP frame arriving from outside is encapsulated by the access control device in the ICS and then the order of transmission to the ICS network communication line is determined will be described.

<< Structure >> As shown in FIG. 104, ICS1
7000-2 is an access control device 17100-2, 17
110190-2, the access control device 17100-2 includes a line unit 17111-2, a processing device 17112-2, and a conversion table 17113-2. 1
7240-2, ..., 17280-2 is a corporate LAN
And the IC via the ICS user logical communication line
It is connected to S17000-2. Each LAN
Includes a plurality of IP terminals, 17401-2 to 17411
Each of -2 is an IP terminal.

<< Conversion Table >> The conversion table 1711 shown in FIG.
The function 3-2 is the same as that of the other embodiments, and in this embodiment, a conversion table 1711 named transmission priority symbol, protocol priority, TCP socket priority, and UDP socket priority.
The feature is that a partial table that is a component of 3-2 is used. If the transmission ICS network address in the conversion table 17113-2 is "7821", the transmission priority symbol is "p."
s-7821 ". That is, the transmission priority is a parameter that depends on the network address assigned to the ICS logic terminal that accepts the user IP frame arriving at the access control device from the user logic communication line. Conversion table 17113-
Looking at another subtable of No. 2, for example, the protocol priority is “p-21”, the TCP socket priority is “t-21”, and the UDP socket priority is “NULL” corresponding to “ps-7821”. It is described. Protocol priority, TC
Notations such as P socket priority and UDP socket priority are the same as in the 32nd embodiment.

<< Example 1 of Priority Determination >> A method of priority determination will be described with reference to the flowchart in FIG. The access control device 17100-2 uses the line unit 17111 to which the ICS network address “7821” is assigned.
-2 from the ICS logic terminal to the ICS user frame F0
1 and F02 are received at substantially the same time, and the ICS network address assigned to the ICS logic terminal is acquired (step S2700). Next, the procedure of transmission priority control is performed as follows. The transmission priority symbol of both the ICS user frames F01 and F02 is "ps-7821".
Then, according to the partial table of the conversion table 17113-2,
The protocol priority corresponding to “ps-7821” is “p
-21 ", TCP socket priority is" t-21 ", UD
"NULL" is designated as the P socket priority. Further, when the other parts that are the constituent elements of the conversion table 17113-2 are examined, from the breakdown of the protocol priority “p-21”, TCP, UDP, ICMP, and IGMP have the highest priority in this order, and the TCP with the highest priority. , TCP socket priority "t-21", the socket symbol "s"
The priority is higher in the order of k-21 ”and“ sk-27 ”, and further, from the breakdown of the socket symbol“ sk-21 ”, the IP address forming the source socket number is“ 2100 ”and the source port number is“ 30 ”. The protocol type displayed inside the ICS user frame F01 is “TCP” and the source IP address is “210”.
0 "and the source port number is" 30. "On the other hand, the IC
The protocol type displayed inside the S user frame F02 is "TCP", and the source IP address is "21".
10 "and the source port number is" 30 ". In this embodiment, it is the ICS user frame F01 that the protocol type and the source socket number match the designation of the socket symbol" sk-21 ". I understand.
As described above, I is encapsulated and preferentially transmitted I
It is determined that the CS user frame is F01 (step S2710). Next, the ICS network address “77” given to the logic terminal that has received the ICS user frame F01.
21 "is checked on the conversion table 17113-2 as to whether the request identification is registered as the virtual private line connection" 3 "(step S2720). The following is a series of steps similar to those described in other embodiments. S2730, ..., S277
0, the ICS encapsulation is performed at the end (step S2780), and the ICS network frame NF01 obtained by the encapsulation is given priority to the IC.
It is transmitted within S17000-2 (step S2790). << Other example of priority determination >> Access control device 17100-
2 also accesses the example 2 of priority determination in which the ICS user frames F03, F04, and F05 are received from the ICS logical terminal of the line unit 17111-2 to which the ICS network address “7822” is assigned at almost the same time. The control device 17100-2 uses the line unit 1711 to which the ICS network address “7823” is assigned.
From the ICS logic terminal 1-2, the ICS user frame F
Also for the third example of priority determination in which 06 and F07 are received at substantially the same time, the access control device 17100-2
From the ICS logic terminal of the line unit 17111-2 to which the ICS network address “7824” is assigned,
Also in the fourth example of priority determination in which the ICS user frames F08 and F09 are received at substantially the same time, the access control device 17100-2 further causes the ICS logic of the line unit 17111-2 to which the ICS network address “7825” is assigned. The example 5 of priority determination for receiving the ICS user frames F10 and Fll from the terminals at substantially the same time is the same as the example 1 of priority determination, and the conversion table 17113
-2 is as shown in the partial table which is a constituent element, and the description will be omitted.

Embodiment-29 (plurality of communications): This embodiment is a new embodiment constructed by combining the above-mentioned embodiments-2, -10, and -18, and is shown in FIGS.
Will be explained. The ICS 18000-1 is an access control device 18140-1, 18141-1, 18142-
1, 18143-1, 18144-1, and the conversion table inside the access control device 18140-1 is 18195-
1. The conversion table inside the access control device 18141-1 is 1.
8196-1. Conversion table 18195-1 is conversion table 6
Similarly to 013-1, the designated value of the request identification is "1",
"2", "3", "4" are included, and in-house communication, inter-company communication, virtual leased line connection, and ICS network server connection can be implemented within one access control device correspondingly. . The conversion table 18196-1 is the designated value “3” of the request identification.
It is only possible, and virtual private line connection is possible.

The ICS network server 18160-1 is the ICS
It is connected to the access control device 18140-1 via a network communication line. 18184-1 is an FR network or an ATM network. When 18184-1 is an FR network, 18184-1 corresponds to the FR network 1041 shown in FIG. 35, and when 18184-1 is an ATM network, the ATM network 1042 shown in FIG. Equivalent to.
The conversion units 18181-1 and 18182-1 are 1818.
When 4-1 is an FR network, FR / ICS shown in FIG.
It corresponds to the network frame conversion unit 1032-1.
Also, the conversion units 18181-1 and 18182-1 are
8184-1 is an ATM network as shown in FIG.
This corresponds to the M / ICS network frame conversion unit 1033-1.

LAN 18110-1, 18130-1
Are access control devices 18140-1 and 181 respectively.
42-1 and the ICS user logical communication line. LAN 18120-1 gateway 18171-
1 and 18172-1 are connected to the access control device 18140-1 or 18141-1 via the ICS user logical communication line, respectively. LAN18120-1
Is a plurality of IP terminals 18121-1, 18122-1,
18123-1 is included. Here, the IP terminal refers to a terminal having a function of transmitting and receiving an IP user frame. The IP terminals 18150-1 and 18151-1 are access control devices 18143-1, 18144-1 and ICs, respectively.
It is connected through the S user logical communication line. The ICS network communication line 18191-1 connects the conversion unit 18181-1 and the access control device 18141-1 to each other.
192-1 connects the conversion unit 18182-1 and the access control device 18142-1.

LAN 18120-1 and LAN 18110
When the ICS user frame transmitted from -1 reaches the access control device 18140-1, the conversion table 18195
-Requirement identification values “1”, “2”,
According to the control of "3" and "4", ICS encapsulation is performed in order to receive the communication service of any of intra-company communication, inter-company communication, virtual private line, and ICS network server. The details will be described in other embodiments. As it is explained, it is omitted. In addition, the ICS transmitted from the gateway 18172-1
When the user frame reaches the access control device 18141-1, it is ICS-encapsulated to receive the communication service of the virtual private line according to the control of the request identification value “3” described in the conversion table 18196-1, and the ICS network communication is performed. Line 1
Via 8191-1, and via the conversion unit 18181-1,
Further, through the FR network or ATM network 18184-1, through the conversion unit 18182-1, the ICS network communication line 18192
It is delivered to the access control device 18142-1 via -1. Here, the FR network or ATM network 18184-1 is F
A known permanent connection (PVC) function is used as a function of the R network or the ATM network. By the procedure described above, the transfer of the ICS user frame is realized.

<< Partial modification of the above embodiment: Variation
>> A description will be given with reference to FIG. ICS18000-2
Includes a plurality of access control devices as in 18000-1, and is connected to a LAN or an IP terminal through the access control devices. FR network to ATM network 18 in FIG. 107
184-1 is replaced with an FR network or an ATM network 18200-2, and an access control device 18141-1 and a conversion unit 181.
81-1 and the ICS network communication line 18191-1 are replaced with a PVC interface conversion unit 18210-2, and an access control device 18142-1, conversion unit 18182-1, I
The CS network communication line 18192-1 is replaced with a PVC interface conversion unit 18220-2, and the gateways 18171-1 and 18172-1 are replaced with a new gateway 18230-2. Where 1
When the 8200-2 is an FR network, the PVC interface conversion units 18210-2 to 18220-2 have a function of converting an ICS user frame into an FR frame format and inverse conversion, and the conversion and inverse conversion functions are shown in FIG. As explained in. When 18200-2 is an ATM network, the PVC interface conversion units 18210-2 to 18220-2 have a function of converting an ICS user frame into an ATM frame format and a reverse conversion, and the conversion and reverse conversion functions are performed. This is as described in FIG. The transfer of the ICS user frame by this variation is realized by using the function of permanent connection (represented by PVC) by the FR network or the ATM network.

Embodiment-30 (Operation of Integrated Information Communication System): Description will be made with reference to FIGS. 111 and 112. IC
S19000-1 is VAN19010-1, VAN1
902-1, access control devices 19300-1, 19
310-1, 19320-1, 19330-1, relay devices 19400-1, 19410-1, 1942O-1,
19430-1, VAN gateway 19490-
1, server devices 1950-1, 19510-1, 19
520-1, 19530-1, 19540-1 are included.
Each server device is given an ICS network address, and each includes a plurality of ICS network servers. The plurality of ICS network servers are distinguished by the port numbers used in the TCP communication protocol and the UDP communication protocol. Access control devices 19300-1, 19
310-1, 19320-1, and 19330-1 are conversion tables 19301-1, 19311-1, and 1932, respectively.
1-1 and 19331-1, including conversion table servers 19731-1, 19732-1, 19733-1, 1
9734-1, and domain name servers 19741-1, 19742-1, 19743-1, 1 respectively.
9744-1 including the resource management server 19
751-1, 19752-1, 19753-1, 197
54-1, the relay device 19400-1 includes a route information server 19761-1 and a resource management server 19755-.
1, and the relay device 19410-1 is the route information server 1
9762-1, the relay device 19420-1 includes the route information server 19763-1, and the relay device 19430-.
1 includes a route information server 19764-1, and the server device 1950-1 is a user service server 19711-.
1, the ICS authority server 19721-1, the server device 19510-1 is the integrated resource management server 19750.
-1, the integrated route information server 19760-1, and the server device 19520-1 is the user service server 1971.
2-1 includes the ICS authority server 19722-1, and the server device 19530-1 includes the ICS user address “120.
ICS network server 19980-1 that has an electronic library service of 0 "and an ICS user address" 1300 "
An ICS network server 19 that has a travel guide service
981-1, the server device 19540-1 includes an integrated ICS authority server 19720-1, an integrated domain name server 19740-1, an integrated conversion table server 19730-1,
An integrated user service server 19710-1 is included. The domain name server is I described in other embodiments.
It is a server having the same functions as the CS address management server and the ICS name server, and there are also different functions, and the details of the functions will be defined in this embodiment.

The access control device, the relay device,
The server device and the VAN gateway are ICS network communication lines 1904-1, 19041-1, 19042-1,
19043-1 and the like, and information can be exchanged with each other using the ICS network communication function. The server device is made, for example, by giving a computer an ICS network communication function,
A program that executes the server function runs inside thereof.

Reference numeral 19110-1 is an FR network, and the conversion unit 1
9111-1 and 19112-1 perform interface conversion between the communication line of the FR exchange network and the ICS network communication line for transferring the ICS network frame, and this is the same as that described in other embodiments. Is.
Further, reference numeral 19000-1 is an ATM network, and the conversion unit 199
01-1 and 19902-1 perform interface conversion between the communication line of the ATM switching network and the ICS network communication line for transferring the ICS network frame, which is similar to that described in other embodiments. Is.

LAN 1 is provided outside the ICS 19000-1.
9600-1, 19601-1, 19602-1, 19
603-1, 19604-1, 19605-1, and IC
In this embodiment, IP terminals 19606-1 and 19607-1 having a function of transmitting and receiving S network frames are connected.

<< Hierarchical Structure of ICS Network Server >> This will be described with reference to FIGS. 113 to 118. The integrated user service server 19710-1 is the user service server 19711.
-1, 19712-1 has a higher control right in the sense of giving an instruction or reporting individual information, and the meaning of the higher control right is shown in a tree structure in FIG. 113. 1981
Reference numeral 1-1 is a communication path for information exchange between the centralized user service server 19710-1 and the user service server 19711-1, and is composed of an ICS network communication line, a relay device, and the like. Controlling ICS Authority Server 19720-1, Controlling Conversion Table Server 19730-1, Controlling Domain Name Server 19
740-1, integrated resource management server 19750-1,
The same applies to the integrated route information server 19760-1 and is shown in FIGS. 114 to 118, respectively. In the present embodiment, the hierarchy of the server tree structure is two layers.
It is also possible to increase the number of access control devices, relay devices, server devices, etc. installed inside so that the number of layers is three or more.
The route information server has a function of transmitting and receiving a route table used in the relay device and the access control device inside the ICS. The resource management server includes a relay device, an access control device,
It has a management function such as grasping the installation status of server devices and failure information.

<< ICS 19000- by the ICS operator
Operation of 1 >> ICS operator 19960-1 or 19961-
1 gives instructions to the general user service server 19710-1, the general conversion table server 19730-1, the general resource management server 1950-1, and the general route information server 19760-1 to start operation or to report individual information. Thus, the operation of ICS19000-1 can be easily performed.

<< ICS Officials ICS19000-
Management of 1 >> The ICS official 19950-1 is the general ICS official server 19720-1 and the general domain name server 197.
It is possible to easily manage the addresses and the like used in the ICS 19000-1 by giving an instruction to start operation to the 40-1 or by reporting individual information.

<< Socket Number and Server >> Each ICS network server has an ICS user address and an ICS network address. Each server has a port defined by TCP or UDP communication protocol in addition to the ICS network address. Having a number is an addition to other embodiments. That is, each server has 32
It is identified by a bit ICS network address and a 16-bit port number, a total of 48-bit numerical value (this is called a socket number). Each server is ICS190
0-1 includes programs each having a unique function that operates inside 0-1, and some servers have an "operation interface" as will be described later. Here, the “operation interface” is a function of exchanging information with the operator via a keyboard or the like, and sending and receiving commands such as operation of each server function and start of operation. Each server gives an ICS network address to, for example, an access control device or a relay device, gives different port numbers to a plurality of programs (that is, servers) inside these devices, and distinguishes them by socket numbers. Each server has an ICS network communication function as described in other embodiments, and information can be exchanged with each other using the ICS network address and port number.

<<User's Registration in ICS-1: Inter-company Communication and ICS Network Server >> This will be described with reference to FIGS. 111, 112, and 119. The application applicant 19200-1 of the ICS 19000-1 becomes the ICS acceptor 19940-1 by the ICS.
Apply for subscription (procedure P100). "Application acceptance data" is I
CS user address ICS network address and I
This is an ICS usage item excluding the CS name. For example, request identification (intra-company communication, inter-company communication, virtual private line connection, I
CS network server classification), speed class, communication bandwidth conditions such as priority, billing conditions, open connection conditions, fee payment method,
User address name (identification proof), signature condition, encryption condition, etc. The meanings of these use items are explained in other embodiments.

The ICS acceptor 19940-1 inputs the application acceptance data into the user service server 19711-1 through the operation interface and stores the application acceptance data in the user database 19611-1 (procedure P).
110). Next, the user service server 19711-1
The ICS authority server 197211 to the ICS user address, ICS network address and ICS
Request the name and the ICS network communication function (procedure P
120). The ICS authority server 19721-1 holds the requested ICS address and ICS name inside the database 19621-1 in the ICS network address allocation record table 19622-1 (FIG. 120), the IC.
S user address allocation record table 19623-1 (Fig. 121)
(Procedure P130), the allocation result is recorded in the allocation table, and the allocation result is returned to the user service server 19711-1 (Procedure P140). The user service server 19711-11 stores the allocation result obtained from the ICS authority server 19721-1 in the user database 19611-1 (procedure P150).

FIG. 135 is an example of the ICS network address allocation record table 19622-1, and in the first line of this table, the ICS network address "7700" is assigned to the ICS logical terminal identification of the node identification code ACU-1. Symbol LT
-001 is assigned, and the assignee identification symbol is "use."
r-1 ”, the allocation date is an example of“ April 1, 1998 ”, and the node identification code ACU-1 is the access control unit 19
It is predetermined to refer to 300-1. In the third line of this table, the ICS network address "963
0 is the port number “620” of the node identification code SVU-1
Assigned to each other, the assignee identification code is “Sv-001”
The allocation date is an example of “February 1, 1998”, and it is predetermined that the node identification symbol SVU-1 indicates the server device 19530-1.

FIG. 121 is an example of an ICS user address allocation record table, and the first row name of this table shows the ICS user address “4610” and the ICS name (also called ICS domain name) “ddl.ccl.bbl”. .Aal.j
p ”is assigned, the value of the request identification is“ 2 ”, the assignee identification symbol is“ user-1 ”, and the assignment date is“ 9 ”.
In the fourth line of this table, the ICS user address “1200” is assigned to the ICS name “rrl. qq. pp. jp ”has been assigned, the request identification value is“ 4 ”, and the assignment destination identification symbol is“ S ”.
In the example, v-001 ”and the allocation date are“ February 1, 1998 ”.

The user service server 19711-1 is
Application details of application applicant 19200-1 and acquired ICS
Access control device 19300-
1 as written in the conversion table 19301-1 inside the IC
Information is provided to the conversion table server 19731-1 via the S network communication function (procedure P160). The contents to be provided are outgoing I
The CS network address, sender ICS user address, request identification, speed class, priority, signature condition, encryption condition, open class, etc. are registered items in the conversion table described in the other embodiments. The above-mentioned ICS network address and ICS user address have a request identification value of "2", that is, in the case of inter-company communication, they are registered as a source ICS network address and a sender ICS user address. When the value of the request identification is "4", that is, in the case of the ICS network server, it is registered as the incoming ICS network address and the recipient ICS user address. The conversion table server 19731-1 adds the above contents to the conversion table 19301-1 (procedure P170). The incoming ICS network address and the recipient ICS user address are not registered in the conversion table 19301-1 at this point, but are converted in the "registration of communication partner" described later in this embodiment.
Register with.

Next, the conversion table server 19731-1 uses the IC
The S domain name server 19741-1 is notified of the ICS network address, ICS user address, and ICS name (procedure P180). ICS domain name server 19
741-1 has its internal database 19641-1.
The received ICS network address, ICS user address and ICS name are written and retained in the procedure (procedure P190), and the completion of writing is converted into the conversion table server 19731-1.
(Procedure P200). Conversion table server 19731
-1 confirms this report (procedure P210), reports the end of the series of procedures to the user service server 19711-1 (procedure P220), and the user service server 1971.
1-1 confirms this report (procedure P230), and informs the use applicant of the ICS user address and ICS name as the allocation result (procedure P240). Since the ICS network address is used only inside the ICS, it is not notified to the usage applicant. In the case of the ICS network server, that is, when the request identification value is “4”, the user service server 19
711-1 is ICS19000- in procedure P160.
Notifying all conversion table servers inside 1 to request registration in the conversion tables of all access control devices.

<< Management of conversion table rewriting by integrated conversion table server >> Steps P800 to 960 on the lower side of FIG. 119, FIG.
This will be described with reference to FIGS. The conversion table server 19731-1 is the conversion table server 19731-1.
1 is instructed to rewrite the contents of the conversion table 19301-1, for example, the speed class priority, the transmission ICS network address, and some or all other items in the conversion table (procedure P800), and the conversion table server 19731-1 The contents of the conversion table 19301-1 are changed according to this instruction (procedure P810). Also, domain name server 19741
-1 to rewrite the ICS network address and the like (procedure P820), and the domain name server 19741-1
Updates its internal table according to this instruction (procedure P83
0), the result is reported to the conversion table server 19731-1 (procedure P840), the conversion table server 19731-1 confirms (procedure P850), and the integrated conversion table server 19730-1.
(Procedure P860). The integrated conversion table server 19730-1 is the user service server 19711-1.
To the user database 19611-1, for example, the speed class, the ICS network address, and other items are instructed to be rewritten (procedure P900),
The user service server 19711-1 updates the contents of the user database 19611-1 according to this instruction (procedure P910). Also, the ICS authority server 1972
1-1 ICS network address and I no longer needed
The CS user address and ICS name are returned or a new request is transmitted (procedure P920), and the ICS authority server 19
721-1 updates the ICS network address allocation record table 19622-1 and the ICS user address allocation record table 19623-1 according to this instruction (procedure P93).
0), and the result is the user service server 19711-1.
To the user service server 1 (procedure P940).
9711-1 confirms (procedure P950) and reports to the integrated conversion table server 19730-1 (procedure P960).

In the above description, the integrated conversion table server 1
9730-1 is the first user service server 197.
It is also possible to call 11-1 to execute the steps P900 to P960, and secondly call the conversion table server 19731-1 to execute the steps P800 to P860. Because of this, ICS operator 199
Reference numeral 60-1 indicates a domain name server or an ICS that manages the internal conversion table of the access control device and the address information accompanying it by instructing the integrated conversion table server 19730-1 to rewrite the contents of the access control table. By exchanging information with the authority server, it is possible to easily manage the rewriting of the contents of the conversion table having consistency, that is, the update management of all the conversion tables of the access control device inside the ICS19000-1.

<< User Communication Partner Registration >> This will be described with reference to FIG. Subscriber 1920 of ICS19000-1
0-1 attaches the domain name of the communication partner to the ICS receiver 19940-1 and applies for communication partner registration (procedure P30).
0). The ICS receiver 19940-1 receives the domain name of this communication partner (procedure P310), and the conversion table server 1973.
It is transmitted to 1-1 (procedure P320). Conversion table server 197
31-1 is a domain name server 19740-1, 1974
2-1 and the like to exchange information (procedures P330 and P331), obtain the ICS network address and ICS user address corresponding to the domain name of the inquired communication partner, and update the contents of the conversion table 19301-1 ( Procedure P34
0), and report the result (procedure P350, P360). The updated result is shown in the conversion table 19301-2. The ICS network address acquired here is the incoming ICS network address, and the ICS user address is the recipient ICS.
Each user address is registered in a conversion table as shown in FIG. In the case of an ICS network server,
The fields for the incoming ICS network address and the recipient ICS user address remain blank.

<<User's Registration in ICS-2: Corporate Communication and Virtual Private Line >> This will be described with reference to FIG. 127. In the case of intra-company communication, the point different from the above-mentioned inter-company communication is that the ICS user address is submitted and the ICS name cannot be used. Therefore, the ICS name is not assigned and the ICS name is used. Procedure (P180, P19
0, procedure equivalent to P200) does not exist. First, the application applicant 19200-1 of ICS19000-1
Apply for ICS subscription to ICS recipient 19940-1 (procedure P400). The application acceptance data is an ICS use item excluding the ICS network address and the ICS name, for example, an ICS user address, for example, request identification (intra-company communication, inter-company communication, virtual private line connection, ICS network server classification), The speed class and the priority are the same as those in the inter-company communication. ICS user address is sender ICS
One or more sets of user addresses and recipient ICS user addresses are further presented. Further, in the case of the virtual private line connection, the sender ICS user address and the receiver ICS user address are not presented, which is different from the case of the intra-company communication.

The ICS acceptor 19940-1 uses the "application acceptance data" as the user service server 19711-1.
To the user database 19611-1 by storing the "application acceptance data" into the user database 19611-1.
(Procedure P410). Next, the user service server 1971
1-1 sends the IC to the ICS authority server 19721-1.
S user address, ICS network address and I
The CS name is requested using the ICS network communication function (procedure P420). The ICS authority server 19721-1 allocates only the ICS network address in the same manner as the above-mentioned procedure P130 (procedure P430), records the allocation result in the allocation table, and returns the allocation result to the user service server 197111-1. (Procedure P440). The user service server 19711-1 is the ICS authority server 1972.
The allocation result obtained from 1-1 is the user database 1961.
The data is stored in 1-1 (procedure P450).

The user service server 19711-1 is
Notify the conversion table server 19731-1 of the application contents and the acquired ICS network address (procedure P46).
0), the conversion table server 19731-1 converts the conversion table 193.
01 registration (procedure P370) and report completion of registration
(Procedure P480, P495). FIG. 128 shows the conversion table 193.
01 shows an example in which intra-company communication and registration of a virtual private line are performed.

<< Explanation of Domain Name Server >> In the explanation of FIG. 125, steps P330 and P331 relating to the domain name server.
Regarding this, an example of four layers will be described with reference to FIG. 129.
The ICS network address of the internal table 1960-1 of the domain name server for the domain name "root" is "9500", and the domain name "a" is subordinate to it.
l "," a2 "," a3 "..., For example, an IC where a domain name server that handles the domain name" a1 "is located
This indicates that the S network address is “9610” and the port number is “440”. Domain name "a
Internal table 19610 of domain name server for 1 "
The ICS network address of -1 is "9610", and the domain names "bl", "b2", and "b3" are subordinate to it.
"... exists, for example, the ICS network address of the domain name server that handles the domain name" b2 "is" 9720 "and the port number is" 440 ".

The ICS network address of the internal table 19620-1 of the domain name server for the domain name "b2" is "9720", and the domain names "c4", "c5", "c6" ... . Exists, and for example, the domain name “c5” does not exist in the subordinate field because the end point column display is “YES”, and in this example, corresponds to the ICS name “c5.b2.al.” ICS
It indicates that the network address is “9720” and the ICS user address is “4510”.
The records of the internal table 19620-1 of the domain name server, that is, the ICS name (ICS domain name) and the IC
S network address and ICS user address “4
A group of data including a combination with "610" is specifically called a "resource record" of the domain name server.

<< Call of domain name server >> FIG. 133
Conversion table server 19630-1 refers to domain name server 19640-1, 19650-1, 19660-.
A procedure for calling 1 to retrieve the ICS network address and the ICS user address corresponding to the domain name “c5.b2.al.” will be described. Conversion table server 19
630-1 is a resolver 19635 inside this conversion table.
Enter the domain name "c5.b2.al." in -1.
The resolver 19635-1 uses the ICS network communication function to send the ICS frame 1964-1 including "al" to the ICS.
When sent to the domain name server 19640-1, the ICS frame 19642-1 including the ICS network address “9610” of the ICS domain name server for “a1” is returned. Next, the resolver 19635-1 has "b2".
When an ICS frame 19651-1 including a packet is sent to the ICS domain name server 19650-1, the ICS network address of the ICS domain name server for "b2" is "972.
An ICS frame 19652-1 containing 0 "is returned.

Next, the resolver 19635-1 receives "c5".
When the ICS frame 19661-1 including "1" is sent to the ICS domain name server 19660-1, the ICS frame 19662-1 including the ICS network address "9820" of "c5" and the ICS user address "4520" is returned. Through the above procedure, the conversion table server 196
30-1 acquires the ICS network address “9820” and the ICS user address “4520” corresponding to the domain name “c5.b2.al.”.

<< Rewriting of conversion table from IP terminal >> Fig. 1
34 and FIG. 135, a description will be given. Domain name "c
5. The ICS user frame including "b2.al" is transmitted from the IP terminal 19608-1 to the conversion table server 19731-1 (procedure P500).
Contact the domain name server (procedure P510), and the domain name server is the IC corresponding to the domain name "c5.b2.al".
The S network address “9820” and the ICS user address “4520” are searched and acquired (procedure P52).
0), when replying to the conversion table server 19731-1 (procedure P53O), the conversion table server writes in the conversion table 19301-1 (procedure P540) and reports to the IP terminal 19608-1.
(Procedure P550). In this procedure, the ICS network address "9820" is the incoming network address, and the ICS user address "4520" is the recipient ICS.
The rewritten conversion table as the user address is shown in FIG.
Shown in. Note that FIG. 123 omits the description content of the conversion table corresponding to the request identification included in FIG. 122.

Next, the IP terminal 19608-1 transmits, to the conversion table server 19731-1, an ICS user frame including a designation for changing the speed class to "2" with respect to the registered contents of the conversion table 19301-1X (procedure). P600).
The conversion table server 19731-1 uses the conversion table 19301-1.
Rewrite the registered contents of X to speed class "2" according to the specification
(Procedure P610), and report to IP terminal 19608-1 (Procedure P620). The conversion table rewritten by this procedure is shown in 19301-Y (FIG. 124).

<< Movement of terminal between access control devices >> IC
As can be seen from the example of the S user address allocation record table 19623-1, the first line of this table shows that the ICS user address “4610” has an ICS name (also called ICS domain name) “dd1.cc1.bb1”. .Aa1.j
p "is assigned, and the ICS user address and ICS
It is characterized by holding the name and. IC
Terminal 19608 having S user address "4610"
-1 (Fig. 111) to the access control device 19300-1
From the access control device 19320-1 (FIG. 112) to allocate a new ICS network address “7821” to this terminal, the conversion table 19321
Inside -1, the originating ICS network address "78
21 "and the sender ICS user address" 4610 "are registered as a pair. In this case, the ICS name" dd1. cc1. bb1. aa1. jp "is
As defined by the ICS user address assignment record table 19623-1, the ICS user address “461
It is paired with 0 "and the ICS name is not changed. ICS name" dd "inside the domain name server
1. cc1. bb1. aa1. jp ”, ICS network address“ 7700 ”, and ICS user address“ 4610 ”in combination, the resource record is IC
S name "dd1.cc1.bb1.aa1.jp"
And ICS network address "7821", IC
The S user address is changed to "4610". That is, the ICS network address “7700” is rewritten to another address “7821”, but the ICS name “dd1.cc1.bb1.aa1.jp” and the ICS user address “4610” are not rewritten. In summary, the ICS user address allocation management table of the ICS authority server and the resource record of the domain name server are
It holds the user address and the ICS name, and does not change only one of them. As a result, when a terminal is moved between access control devices, the ICS of this terminal
It is not necessary to change the user address and ICS name.

(Other Embodiments Above: Determination of ICS User Address by User) In the above embodiment, the user is I
This is a modification to determine the CS user address. In other words, the user (user 19200-1)
When applying to CS19000-1, add the ICS user address. ICS Receptionist 19940-1
Includes a new ICS user address in the application acceptance data. Further, the ICS authority server 19711-1 stores the ICS user address proposed by the user in the ICS user address allocation table 19623-1. By the above method, the user can determine his own ICS user address by himself and the degree of freedom is improved.

Embodiment-31 (Calling a communication partner by telephone number): In this embodiment, by using a telephone number as an ICS domain name, it is possible to send and receive an ICS user IP frame to and from a communication partner, and An example in which digitalized voice is stored inside and public communication by telephone is possible is shown. In this embodiment, the telephone number "81-3-1234-56 in Tokyo, Japan" is used.
78 "as the domain name" 5677.83.12.123.8
The description will be given by taking the example of the case of "1", where "3" represents Tokyo and "81" represents Japan.

This will be described with reference to FIG. ICS2000
0-1 is access control devices 2000-1 and 20020
-1,2300-1, relay devices 20080-1,20
090-1, domain name server 20110-1201
20-1, 20130-1, 20140-1, 2015
0-1, the access control device 20010-1 includes a line unit 20011-1, a processing device 20012-1, and a conversion table 2.
0013-1 and conversion table server 20040-1 are included. The conversion table server 20040-1 is the access control device 2001.
It is located inside 0-1 and has an ICS network address of "7800" and a port number of "600". The conversion table server 20040-1 is ICS20000.
-1 is given an ICS user address "4600" from outside, and when a domain name is input, it is converted into an ICS user address and returned, and at the same time, the ICS network address is converted inside the access control device 20010-1. It looks like an ICS server with the function of registering -1.

Reference numeral 20210-1 is a LAN, and 2021
Reference numerals 1-1 and 2030-1 are IP terminals having a function of transmitting and receiving an ICS user frame, each having an ICS user address "4520", "1200", and an IC
It is connected to the ICS 20000-1 via the S user logical communication line. Since the IP terminal 2030-1 can be used as a telephone, it is called an IP telephone. IP phone 2
Reference numeral 0300-1 is a telephone number input unit 20310-1, an IP address storage unit 20320-1, and a voice data transmission / reception unit 203.
30-1, input button 20340-1, voice input / output unit 2
Including 0350-1.

<< Obtaining ICS User Address by Telephone Number >> Enter the telephone number "1234-5678" Button 2
The telephone number is input from 0340-1 to the telephone number input unit 20310-1. The telephone number input unit 20310-1 generates an ICS user frame P1201 and delivers it to the access control device 20010-1 via the ICS user logical communication line.
Here, the ICS user frame P1201 is the sender IC
The S user address is “1200” and the recipient ICS user address is “4600”, and the telephone number “1234-5 input from the input button 20340-1 is in the data portion thereof.
678 ″ is included. The processing device 20012-1 looks at the conversion table 20013-1 and finds the ICS user frame P120.
1 is sent to the conversion table server 20040-1 designated by the ICS user address “4600”. In this example, the conversion table server 20040-1 is the access control device 2001.
Since it is inside 0-1, it is not necessary to use the ICS network communication function. The conversion table server 20040-1 has the telephone number “1” included in the data part of the ICS user frame P1201.
Domain name server 201 based on 234-5678 "
30-1, 20140-1, 20150-1 are inquired one after another, and the terminal 20211-1 of the communication partner when the telephone number "1234-5678" is regarded as a domain name
ICS network address "7920" and ICS
The user address “4520” is acquired.

Next, the conversion table server 20040-1 receives the two addresses “7920” and “452” acquired here.
0 "is used to create a conversion table new item 20030-1,
For the ICS user address “4520”, an ICS user frame P1202 is generated, and the ICS user address “4520” is written in the ICS user frame P1202.
00-1. The IP telephone 20300-1 has the IC included in the received ICS user frame P1202.
The S user address "4520" and the telephone number "1234-5678" inquiring first are combined and held in the IP address storage unit 20320-1, and the ICS user address corresponding to the telephone number "1234-5678" at a later date. Used when "4520" is needed. The conversion table new item 20030-1 is the IP telephone 20300-1 having the ICS network address “7820” and the ICS user address “1200”, and the destination terminal 20211-1 designated by the telephone number “1234-5678”. Relate to. Conversion table new item 200
30-1 is used as a new element of the conversion table 20013-1.

<< Communication Using ICS User Address >> A voice is input from the voice input / output unit 20350-1, and the voice is converted into digital data by the voice data transmission / reception unit 20330-1, and the ICS user frame P1210.
Is transmitted to the destination specified by the telephone number “1234-5678”, that is, the terminal 20211-1 determined by the ICS user address “4520”, according to the same principle as described in the other embodiments. It After that, 2
Between two terminals 20211-1 and 2030-1
Telephone communication is performed by sending and receiving CS user frames.

<< Detailed Description of Domain Name Server >> Of the above description, the conversion table server presents the telephone number “1234-5678” to the domain name server, and the ICS network address “7920” and ICS user address “4”.
The method of acquiring 520 ″ will be described in detail.

FIG. 137 is a diagram showing an embodiment of a "domain name tree" having 6 layers based on international telephone numbers. The root domain name "r" is set in level 1 of the tree.
"root-tel" is provided, and the lower level 2 of the tree
, Domain name "1" ... "44" ... "81" ...
.. exists, and then, for example, the domain name "8"
Level 3 domain name under "1" ... "3" ...
.. exists, and then, for example, the domain name of level 4 is subordinate to the domain name "3" ... "11", "12",
"13" ... exists, and then, for example, the domain name "12"
Level 5 domain names under "...", "33", "3"
4 "," 35 ", ..., Then, for example, the domain name of level 6 is" 567 "below the domain name" 34 ".
7 ”,“ 5678 ”,“ 5679 ”, ... Are present.

FIG. 138 shows an internal table 20131-1 of the domain name server 20130-1 which handles the domain name “3”. For example, the domain server 20140 which handles the domain name “12” under the domain name “3”. -1 IC
This indicates that the S network address is “8720” and the port number is “440”. FIG. 139 shows a domain name server 20140-1 that handles a domain name “12”.
Internal table 2014-1 of the domain name “12”, for example, the ICS network address of the domain server 20150-1 that handles the lower domain name “34” of the domain name “12” is “8820” and the port number is “440”. Is shown. 140 is an internal table 20151 of the domain name server 20150-1 that handles the domain name “34”.
-1, indicating that the domain name "5678" is, for example,
Since the display of the end point column of the internal table 20151-1 is "YES", there is no lower domain name, and in this example, the domain name "5678.34.3.12.3.18."
The ICS network address corresponding to "792
0 ”, indicating that the ICS user address is“ 4520 ”.

<< Calling Domain Name Server >> FIG. 141
Conversion table server 20040-1 refers to domain name servers 20130-1, 20140-1, 20150-
1 and calls the domain name "5678.34.12.
3.81. The procedure for retrieving the ICS network address and the ICS user address corresponding to “.” Here, the resolver 20041-1 is the ICS network address of the domain name server that handles the level 1 domain “root-tel” shown in FIG. 138. In the case of communicating with a domain name server that handles level 2 or level 3 domains in many cases, the ICS network address of the higher domain name server is stored inside the resolver 20041-1. Hold on.

The conversion table server 20040-1 uses the domain name "5678.34.
12. Resolver 20041-1 is a domain name "3.81." Which indicates Tokyo "3" of Japan "81". ”
ICS network address of the server in charge of "86"
If the ICS frame 20135-1 including the domain name “12” under the domain name “3” is sent to the ICS domain name server 20130-1 by using the ICS network communication function, the domain An ICS frame 20 including the ICS network address "8720" of the ICS domain name server 20140-1 that handles the name "12"
Reply 136-1. Next, the resolver 20041-1
Is an ICS frame 2014 including the domain name “34”
When 5-1 is sent to the ICS domain name server 20140-1, the IC including the ICS network address "8820" of the ICS domain name server that handles the domain name "34"
S frame 20146-1 is returned.

Next, the resolver 20041-1 receives the ICS frame 20155-1 including the domain name "5678".
To the ICS domain name server 20150-1, the ICS network address “7920” and ICS user address “452 corresponding to the domain name“ 5678 ”are sent.
ICS frame 20156-1 including 0 "is returned.
Through the above procedure, the conversion table server 20040-1
The ICS network address "7920" and the IC corresponding to the domain name "5678.34.12.2.3.81."
The S user address “4520” is acquired.

<< Telephone line connection >> The telephone line conversion unit 205510-1 is provided inside the line unit 20011-1, and the telephone 2
0520-1 is connected to the telephone line conversion unit 20510-1 via the telephone line 20530-1. Telephone line converter 2
Reference numeral 0510-1 has a function similar to that described in the other embodiments. It converts the voice transmitted from the telephone line 20530-1 into digitized voice, and converts the ICS user frame stored in the data section. To generate. In the opposite transmission direction, that is, in the ICS user frame sent from the ICS network and passing through the access control line part, the digitized voice stored in the data part is converted into analog data by the telephone line conversion part 205510-1. It is converted into voice, or in the case of an ISDN line, converted into its digitized voice. Because it is like this, ICS
The IP terminal 2030-1 to which the domain name is assigned and the telephone 20520-1 can communicate by telephone voice.

(Connection to Public Telephone Network) Further, the telephone line conversion unit 20510-1 and the private branch exchange 20600-1 are
It is connected by a telephone line 20530-2. Private telephone line 20540-from the private branch exchange 20600-1
1, telephones 20520-2 and 20520-3 are connected, and for example, telephone communication is possible between the telephone 20520-2 and the IP telephone 20300-1. Also, from the private branch exchange 2060-1 to the telephone line 20
670-1, public telephone network or international telephone network 20
680-1 can be connected. Because it looks like this,
Telephone communication is possible between the telephone 20520-4 and the IP telephone 20300-1.

Embodiment-32 (IP terminal capable of connecting to a plurality of access control devices): This embodiment uses ICS user IP
Use of a movable IP terminal that can be used by connecting to another access control device instead of fixing the IP terminal having a function of transmitting and receiving a frame to a specific access control device,
That is, roaming is realized. Roaming IP
It is realized based on the ICS domain name given to the terminal. In the following description, a | b represents data (concatenated data) obtained by arranging data a and data b in parallel.

<< Password Transmission Technique by Encryption >> This embodiment includes the procedure of encrypting the secret password PW and transmitting it from the sender (encryption side) to the receiver (decryption side). First, the encryption function Ei and the decryption function Di
Will be explained. The encryption function Ei is represented by y = Ei (k1, x), and the decryption function Di is represented by x = Di (k2, y). Here, y is ciphertext, x is plaintext, kl, k
Reference numeral 2 is an encryption key, and i is an encryption number (i = 1, 2, ...) Which defines how to use the secret key encryption or the public key encryption including the value of the encryption key. In the above, instead of the plaintext x, the plaintext x ′ is encrypted with x ′ = x∥r (where r is a random number), and the random number r is discarded from the plaintext x ′ obtained at the time of decryption to obtain the plaintext x. Is also good. In this way, even if the same plaintext is encrypted, different ciphertexts are generated due to the random numbers, which is said to be strong against cipher breaking.

(Example of encryption number i = 1) << Preparation >> The sender m discloses his domain name (represented by DNm) including the recipient. The recipient uses Km = Hash-1 by using the secret data compression function Hash-1.
(DNm) is calculated, and only the encryption key Km is handed to the sender in a secure method that is unknown to a third party. This example is DE
This is an example of adopting the S-cipher, and the sender uses the encryption function Ei
It holds the “encryption module DES-e” and the encryption key Km for realizing the above. The encryption key Km is a secret value shared by the sender and the receiver. The receiver holds the “decoding module DES-d” for realizing the decoding function Di and the data compression function Hash-1. What is used as the data compression function Hash-1 is determined for each value of the encryption number. The data compression function is also called a hash function.

<< Encryption by sender >> The sender sets the secret password PW as x = PW, and the encryption module DE
With S-e and the stored encryption key Km, y = DES-
It is encrypted as e (Km, x), and the ciphertext y and the domain name DNm are transmitted.

<< Decryption by Recipient >> The recipient is the ciphertext y.
And a domain name DNm are received, and Km = Hash-1 (D
Nm) as the secret encryption key Km, and then the recipient uses the decryption module to obtain x = DES-d (Km,
Get the plaintext x as y). The plain text x is the password PW, and the recipient can obtain the secret password PW. Since the third party does not know the data contraction function Hash-1, it cannot calculate the encryption key Km, and therefore the secret password P
W cannot be calculated. In the above-mentioned embodiment, the encryption function or the decryption function may be changed to an encryption function or a decryption function other than the DES encryption as the definition of the encryption number i = 3.

(Example of cipher number i = 2) << Preparation >> This example is an example in which the RSA cipher is adopted, and the receiver has an encryption function y = x ^e modn and a decryption function y = x ^d.
mod n is generated. Here, e ≠ d, and the key d is a secret value. The recipient is a cryptographic module RS that realizes the cryptographic keys e and n that can be disclosed and the cryptographic function y = x ^e modn.
Pass Ae to the sender. The sender holds these encryption key and encryption module RSA-e. The sender has no secret cryptographic module or secret data. On the other hand, the receiver has n and the secret key d, and the decryption function y =
Decoding module RSA-d that implements x ^e mod n
Holding

<< Encryption by sender >> The secret password PW you want to send, your own domain name DNm, and the date and time of transmission (year, month, day, hour, minute, second) are x = PW‖x1‖x2 (however,
xl: domain name DNm, x2 = year / month / day / hour / minute / second), by the encryption module RSA-e, y = x ^e mo
Encrypt as dn and send ciphertext y.

<< Decryption by Recipient >> The recipient is the ciphertext y.
Which has been received in advance and holds the decoding module RSA-
x = y ^d mod n is calculated using d and the decryption key.
Since x = PW.parallel.x1.parallel.x2, data at a predetermined position from the beginning of x is used as PW. In the above encryption, xl of the domain name and x2 of year / month / day / hour / minute / second are used as random numbers. Since the third party does not know the secret key d, the secret password PW cannot be calculated.
In the above-mentioned embodiment, the values of the encryption keys e, d, n can be changed as the regulation of the encryption number i = 4. Further, as the regulation of the encryption number i = 5, the RSA encryption technique may be another public key encryption technique.

<< Terminal Authentication Technique Using Password and Random Number
>> The password PW used on the roaming terminal is
A terminal authentication technique for checking whether the password matches the password registered in the authentication server will be described. As a precondition, the authentication server of the authenticator and the terminal of the authenticated user have an encryption function E (where y = E (k, x), where y is a ciphertext, k
Is an encryption key, x is a plaintext), and a secret password P for a third party.
Own W and. A specific procedure for terminal authentication will be described. The terminal to be authenticated determines a random number R by an appropriate means, calculates Y1 = F (PW, R) using the password PW and the function y = F (PW, R), and determines both the random numbers R and Y1. Send to the authenticator. The authenticator uses random numbers R and Y
While receiving 1, Y2 = F (FW, FW, using the received random number R, the password FW held by itself, and the function F
R) is calculated and it is checked whether or not Y1 = Y2 holds.
If they match, it means that the owner of the terminal as the person to be authenticated uses the correct password PW, that is, the terminal can be authenticated. In the above technique, the random number R is limited to a time-dependent random number (referred to as a time random number) so that the person to be authenticated cannot freely select it, so that it becomes more difficult for a third party to calculate the password PW. . Instead of the encryption function used above, a secret data compression function Hj is used, and Y
1, Y2 = Hj (PW, R).

<< Overall Configuration >> FIGS. 142 and 143 show the overall outline of the roaming technique according to the present embodiment, and the ICS 21000-1 is the access control device 2101.
0-1,21020-1,21030-1,21040
-1,1050-1 and 21060-1, the relay device 21
080-1, 21081-1, 11082-1, 210
83-1 and authentication servers 21100-1,21101-
1,1102-1,21103-1, domain name servers 21130-1,112113-1,112113-1,
21133-1, user service server 21250-
1. Includes ICS Authority Server 21260-1. The access control device 21010-1 includes a conversion table 21013-1, a conversion table server 21016-1, a registration server 21017-1,
The access control device 2 including the connection server 21018-1
1020-1 is a conversion table 21023-1, conversion table server 2
1026-1, registration server 21027-1, and connection server 21028-1 are included. Registration server 21017-1 and 2
1027-1 is given the ICS user address “6300”. Connection server 21018-1 and 210
28-1 is given an ICS user address “6310”, and an access control device determined according to the necessity is registered in the IP terminal from an IP terminal for roaming outside the ICS 21000-1, or It has the function of connecting.

The conversion table server 21016-1 has the conversion table 21.
The conversion table server 21026-1 has the function of rewriting the contents of 013-1, and the conversion table server 21026-1 has the function of rewriting the contents of the conversion table 21023-1 as described in the other embodiments. The LAN 21150-1 includes an IP terminal 21151-1, the LAN 21160-1 includes an IP terminal 21161-1, and the reference numeral 21170-1 is an IP terminal. Reference numeral 21200-1 is a movable roaming terminal, which is identified by the ICS domain name “cl.bl.al.” uniquely assigned as the ICS 210-1.

<< Application for use of roaming terminal >> The owner of the roaming terminal 21200-1 is the ICS user 2
1270-1, the charge payment method of the roaming terminal 21200-1 is specified, and the user service server 212
Apply for ICS domain name (same as ICS name) and ICS user address to ICS authority server 21260-1 via 50-1. Payment method is billing category "M
For example, when MNY = 1, the fee is paid by the home IP terminal (that is, the IP terminal fixedly connected to the access control device), and when MNY = 2, the fee is paid according to the record of the authentication server. Specify ICS
The authority server 21260-1 uses the roaming terminal 2120.
The ICS domain name "cl.bl.a" for using 0-1
l. And the ICS user address “1200”. Further, the owner of the IP terminal 21200-1 fixedly connects the IP terminal 212000-1 to the access control device 21010-1, and uses the user service server. ICS authority server 21260-1 via 21250-1
Apply for an ICS network address. When the user service server 21250-11 acquires the ICS network address, it requests the conversion table server 21016-1 to obtain the ICS network address “8115” and the ICS.
The user address “1200” is set in the conversion table 21013-1. This procedure is described in another embodiment.

[0436] The ICS acceptor 21271-1 displays the ICS in the internal 21201-1 of the roaming terminal 21200-1.
Domain name "cl.bl.al.", ICS user address "1200", special ICS user address for roaming terminal (called roaming special number) "100"
0 ”, ICS user address of registration server“ 630 ”
0 ", ICS user address of connection server" 6310 "
Embedded in the roaming terminal 21200-1, and the encryption function Ei and encryption related data RP1
Embed. Hash function is not embedded. Where R
P1 = Hj (domain name ‖RP0) ‖RP0 (however, R
P0 = MNY || i ||) and the domain name is "cl.
bl. al. ", MNY is the above-mentioned charge classification," i "is an encryption number for classifying the encryption Ei," j "determines the type of hash function Hj. The data compression function Hj is a secret used only by the authentication server and the user service server. Since the user does not have the data compression function Hj and does not know Hj, the encryption related data RP1 cannot be generated.

<< Registration Procedure from Home IP Terminal >> Figure 1
42 to 144, a description will be given. The roaming terminal user uses the home IP of the roaming terminal 21200-1.
Connect to the location of terminal 21151-1. Next, the roaming terminal user decides the password (PW) and inputs it into the input unit 21.
While inputting from 204-1, I uses the cryptographic function and phonetic symbol-related data stored inside 21202-1.
A CS user frame PK01 is generated and transmitted to the access control device 21010-1 via the ICS user logical communication line 21152-1 (procedure T10). The destination of the ICS user frame PK01 is “6300” indicating the roaming registration server, and its own ICS domain name “cl.
bl. al. , Encryption parameter RP1, ICS user address “1200”, expiration date “98-12-3
1 ", ciphertext that encrypts the password" y "," t "
g "(however, tg = 1 to display the registration procedure),
It includes "Yes" or "No" for the roaming connection. Here, as the method of generating the ciphertext “y”, the above-mentioned encryption technique is adopted. For example, when the encryption number = 2, y = x ^e
The encrypted text “y” is generated as mod n (where x = PW / c1.bl.a1 / year / month / day / hour / minute / second). The access control device 21010-1 looks at the conversion table 21013-1 and sends the ICS user frame PK01 to the destination “6300”.
To the registration server 21017-1 (procedure T15).
The registration server 21017-1 has the domain name “c1.b.
1. The authentication server 21100-1 is called by using a1 ″ (procedure T20). Note that the registration server 21017-1.
However, the method of calling the authentication server 21100-1 using the domain name is the same as the method of the connection server 21028-1 calling the authentication server 21100-1 using the domain name, and the details thereof will be described later. Authentication server 21100-1
Examines the contents of PK01 of the received ICS user frame and decrypts the ciphertext "y" by the above-mentioned technique to calculate the password PW. For example, when the code number = 2,
The ciphertext "y" is decrypted with x = y ^d mod n. Then, x = PW / | c1. bl. The password PW can be acquired because it is a1 ‖ year month day hour minute second.

Next, the content of the encryption parameter PP1 is RP.
1 = Hj (domain name ‖RPO) ‖RPO (however, RP
Since O = MNY‖i‖j), the authentication server 2
The secret hash function H held by 1100-1 itself
j and the obtained domain name “cl.bl.al” are used to calculate t = Hj (domain name ‖RP0) ‖RP0), and it is checked whether t = RP1 holds for the received RP1. If established, the domain name "cl.bl.a"
It is determined that the l ”, the billing category MNY, and the encryption numbers“ i ”and“ j ”have not been tampered with.
Checks whether there is an excess or deficiency of registration contents, and if normal, registers the registration result in the authentication table 21100-2, and if there is a shortage, does not register.

This is shown in the row of management number 1 in the authentication table 21100-2, and the domain name is "cl.bl.a".
l. , The encryption number is “2”, the charge category (MNY) is “1”, and the calculated password PW value is “22469”.
1 ”, expiration date“ 98-12-31 ”, roaming connection is“ Yes ”, that is, the roaming connection is accepted. When the PK01 is generated in step T10, the value of tg described above is tg = 2. The roaming connection may be designated as “No.” By applying the above-described encryption technique, the password will not be leaked to a third party. The roaming registration report is sent via the registration server 21017-1 ( Procedure T30), then access control device 21010-1
After that (procedure T35), it is reported to the roaming IP terminal.
(Procedure T40). In addition, tg = 3 from the terminal 21200-1 via the ICS user logical communication line 21152-1.
It is possible to transmit the ICS user frame for changing the value of the password PW as, or changing the value of the expiration time for tg = 4 after the above procedure T40 is completed. For changing the password, a method of designating the password used before that can also be adopted.

<< Transmission / reception of user IP frame at destination >>
The roaming terminal 21200-1 is connected to the access control device 21.
Roaming terminal 21200-1 by connecting to 020-1
An example of inter-company communication in which an IP frame is transmitted and received between the domain name "cl.bl.al." and the communication partner domain name "c2.b2.a2." The user sets "tg", which is the domain name of the communication partner "c2.b2.a2." And tg = 5 in order to specify transmission / reception of the IP frame.
, Its own password PW, and also “5” days for specifying the roaming connection period (represented by TTL) are input unit 212.
Input from 04-1. For this purpose, the roaming terminal 2
21201-1 and 220120-1 inside 1200-1
Is used. Also, the IP frame part 21203-1
Are ICS user IP frames PK01, PK02,
It is used to generate and transmit PK03, PK04, etc.

Next, the roaming terminal 21200-1 generates the user IP frame PK02, and accesses the access control device 2 via the ICS user logical communication line 21210-1.
Send to 102-1 (procedure T50). The user IP frame PK02 has a sender domain name “cl.bl.a”.
l. , Recipient domain name “c2. b2. a2. , Encryption parameter RP2, connection period (represented by TTL). Encryption parameter RP2 includes passwords PW and 212.
This is the data calculated inside 02-2. In other words, the year / month / day / second “yy-mm-dd-ssssss” is generated as the time random number TR (TR = yy-mm-dd-sssss).
s), the internal clock of 21202-2 and the cryptographic function Ei are used to calculate RP2 = Ei (PW, TR) | TR.

The access control device 21020-1 receives the user IP frame PK02, acquires the ICS network address "7800" assigned to the ICS logical terminal, and the request identification is "4" according to the conversion table 21023-1.
Since the sender ICS user address written in the user IP frame PK02 is “1000” (special roaming number), the ICS network address “7800” is held and the ICS user frame PK is stored.
02 together with the recipient ICS user address “6310”
To the connection server 21028-1 pointed to by (procedure T6
0). The ICS network address "7800" held in this procedure is used after procedure T130 described later.

<< Function of Connection Server >> Next, the connection server 2
1028-1 calls the authentication server 21100-1 by using the domain name “c1.b1.a1”, and the domain name “c
l. bl. al. And the encryption parameter RP2 are transferred to the authentication server (procedure T70). Authentication server 21100-
1 is the password P written in the authentication table 21100-2
The values of W and the encryption number are read, the encryption function Ei is selected, and the password PW is read. Next, the encryption parameter R
Since P2 is RP2 = Ei (PW, TR) | TR, using the time random number TR in the latter half of RP2, t =
Calculate Ei (PW, TR). The value of the temporary variable t calculated here is the Ei (PW,
If it matches T), it can be confirmed that the password PW entered in the terminal 21200-1 is correct. Since the time function TR includes the date (that is, TR = yy-mm-dd
-Sssss), fraud can be detected if the received date and time do not match the processing time.

Next, the authentication server 21100-1 has completed the roaming registration described in the authentication table 21100-2,
Connected server 21028 with accounting category and authentication server call information
Report to -1 (procedure T80). In the case of the present embodiment, the accounting category is MNY = 1, and the authentication server call information is the ICS network address “7” of the authentication server 21100-1.
981 ", a port number" 710 ", and a management number" 1 "in the authentication management table. The connection server 21028-1 has a domain name" cl. bl. al. To the domain name server to request the ICS user address and ICS network address associated with this domain name (procedure T9
0), ICS user address “1200” and ICS network address “8115” are acquired (procedure T10).
0). Similarly, the domain name “c2.b2.a2.” Is presented to the domain name server and I
Requesting the CS user address and the ICS network address (procedure T110), the ICS user address “250
0 ”and the ICS network address“ 8200 ”(procedure T120) The access to the domain name server described above is the same as that described in detail in the other embodiments.

Next, the connection server 21028-1 determines that the IC
The ICS network address “7800” of the ICS logical terminal that has input the S user frame (held in step T60), the ICS user address “1200” and the ICS user address “250 that were acquired from the domain name server immediately before.
0 ”, ICS network address“ 8200 ”, roaming registered information, billing category, and authentication server call information transmitted from the authentication server 21100-1 are transmitted to the conversion table server 21026-1 (step T130). 6 writes the transmitted four kinds of addresses in the conversion table 2102311. The value of the request identification is “10”, that is, represents the inter-company communication by roaming. When the charging classification is MNY = 1, the domain immediately before is entered. ICS network address “811 acquired from name server
5 "and ICS user address" 1200 "conversion table 2
It is transcribed to the charging notification destination of 1023-1. If the charging category is MNY = 2, the authentication server call information is converted into the conversion table 21.
Transfer to the billing notification destination of 013-1. Furthermore, the designated “5” days of the roaming connection period included in the ICS user frame PK02 is also written in the conversion table 21013-1. The conversion table server 21026-1 reports the result to the connection server 21028-1 when the writing of the conversion table 21023-1 is completed (procedure T140). This end report is sent to the roaming terminal 21200-1 via the access control device 21020-1 (procedure T150) and the ICS user frame PK03 (procedure T160). Here, the ICS user frame PK03 has the domain name “cl.bl.a” of the roaming terminal 21200-1.
l. ICS user address "1200" associated with "
And the ICS user address “2500” associated with the domain name “c2.b2.a2.” Of the communication partner. The operation company of the access control device uses the connection server 21028-1 described above, that is, a series of procedures for receiving the ICS user frame PK02 and returning the ICS user frame PK03, and for specifying the roaming connection period. The usage fee can be charged to the owner of the roaming terminal 21200-1 for "5 days".

<< Use of Roaming Terminal >> The roaming terminal 21200-1 uses the conversion table 21023-1 created according to the above-described procedure to perform inter-company communication in the same manner as described in the other embodiments. Can be performed (procedure T17
0 to T220). Also, the conversion table server 21026-1
Can delete the roaming connection written in the conversion table 21023-1 when the designated roaming connection period of "5" has passed.

<< Notification of Charging >> Access control device 2102
0-1 notifies the communication charge to the charging notification destination registered in the conversion table 21023-1 (procedure T300 or T31).
0).

<< Access Method to Authentication Server >> In the above description, the connection server 21028-1 is the authentication server 211.
The domain name "c
l. bl. al. To present the roaming terminal 212
0-1 generated ICS network frame PK0
2 is correct or not, that is, the domain name “c1.bl.a” of the roaming terminal 21200-1.
l. The method of checking whether or not "is already registered in the authentication server will be described in detail.

FIG. 145 is a diagram showing an example of a domain name tree having four layers, in which the root domain name “root” is provided in level 1 of the tree, and the level 2 in the tree below it.
.. exist in the domain name "al", "a2", "a3" ...
Domain names “bl”, “b2”, and “b3” exist,
Next, for example, it is shown that the level 4 domain names "cl", "c2", "c3" ... Are present under the domain name "bl".

FIG. 146 shows an internal table 21102-2 of the authentication server 21102-1 that handles the domain name “root”. For example, below the domain name “root”,
Domain server 21101 that handles domain name "al"-
This indicates that the ICS network address of No. 1 is "7971" and the port number is "710". Also, FIG. 147 shows the authentication server 211 that handles the domain name “al”.
01-1 shows an internal table 21101-2 of 01-1. For example, the domain server 21100-1 handling the domain name “b1” has an ICS network address “7981” and a port number “710” below the domain name “a1”. It is shown that it is ".

FIG. 148 shows the internal table 21100-2 of the authentication server 21100-1 that handles the domain name “bl”. For example, the domain name “cl” is the internal table 21100.
Since the display of the end point field of -2 is "YES", there is no subordinate domain name. In this example, the domain name "cl.bl.al." is registered in the authentication server, and the password PW Is recorded as "224691" and the expiration date is recorded as "98-12-31".

<< Calling Authentication Server >> Referring to FIG. 149, the connection server 21028-1 determines that the domain name “c1.
b1. The authentication server 21100-1 is called by using "a1" and the domain name "cl. bl. al. A method for checking whether or not "is already registered in the authentication server. Here, the connection server 21028-1 is the ICS of the authentication server that handles the domain" root "of level 1 shown in FIG. 145."
Holds the network address inside. Also, in the case where communication is often made with the authentication servers handling the level 2 and level 3 domains, the ICS network addresses of these authentication servers are similarly held.

The connection server 21028-1 has a domain name "c1.bl.al" in its internal resolver 21029-1.
Enter. When the resolver 21029-1 uses the ICS network communication function to send the ICS frame 21335-1 including the domain name “al” under the domain name “root” and the encryption parameter RP2 to the authentication server 21102-1, the resolver 21029-1 receives the domain name. Authentication server 21101 that handles "a1"
ICS frame 21336-1 including the ICS network address "7971" of -1 is returned. Next, the resolver 21029-1 uses the IC including the domain name “bl”.
The S frame 21345-1 is set to the authentication server 21101-1.
To the authentication server IC that handles the domain name "bl"
The ICS frame 21346-1 including the S network address “7981” is returned. Next, the resolver 210
29-1 sends the ICS frame 21355-1 including the domain name “cl” to the authentication server 21100-1,
Since the domain name “cl”, in this case the end point column of 21100-2 is “Yes”, it can be determined that the authentication information is registered. As described above, "root", "a
Since "1" and "bl" have been handed down in order, the domain name "cl. bl. al. It can be seen that the authentication information about "is registered in the internal table 21100-2.

The authentication server 21100-1 checks the received encryption parameter RP2 and the expiration date "98-12-31".
Find out that is not past. Next, the authentication server 2110
0-1 reads the values of the password PW and the encryption number written in the authentication table 21100-2 and selects the encryption function Ei. The encryption parameter RP2 is RR2 = Ei (P
Since W, TR) .parallel.TR, t = Ei (PW, TR) is calculated using the time random number TR in the latter half of RP2. If the value of the temporary variable t calculated here matches the Ei (PW, TR) of the first half of the received RP2, it is confirmed that the password PW entered in the terminal 21200-1 is correct. The above result is reported to the connection server 21028-1. As a result, the connection server 21028-1 determines the roaming terminal authentication result (pass or fail) and charging category MNY.
I understand.

<< Other Embodiments of Roaming without Home IP Terminal >> In the above embodiments, the ICS receiver 2127
If 1-1 does not set the home IP terminal,
The "registration procedure from the home IP terminal" is performed via the user service server 21250-1. In this case, the billing record “120” inside the certification table 21100-2 inside the certification server 21100-1 and the information “7981-71” of the certification server shown in the billing notification destination inside the conversion table 21023-1.
0-1 "is used.

<< Other Example of Roaming in which Authentication Server is Included in Domain Name Server >> The domain name tree of FIG. 145 which is the target of the authentication server 21110-1 is the target of the domain name server shown in another example. It has the same structure as the domain name tree. Therefore, each domain server
It is possible to store the data of the authentication server described in this embodiment and include the function of the authentication server. In other words, another roaming implementation method is to implement the authentication server described in this embodiment and the domain name server described in another embodiment in an integrated manner.

<< Access Control Device and IP Terminal Connected to Wireless Transceiver >> Wireless transceiver 21620-1 is ICS2
Wireless transceiver 2 installed inside 1000-1
1620-1 and wireless transceiver 21640-1 can exchange information with each other via a wireless communication path 21625-1.
The terminal 21630-1 includes a wireless transceiver 21640-1, and the terminal 21200-2 is the above-mentioned IP terminal 21200-.
Similar to the item 1, it has the function of inter-company communication using the ICS domain name. An information communication path 21620- is provided between the access control device 21020-1 and the wireless transceiver 21620-1.
There is one. The information communication path 21610-1 is similar to the ICS user logical communication line in that it has a function of transmitting and receiving an ICS user frame, and the difference is the information communication path 21610.
-1 is a point inside the ICS21000-1. Wireless transceiver 21620-1 and wireless transceiver 21640
-1 is a function of receiving an ICS user frame, converting internal information of the ICS user frame into ICS user frame information of a radio wave format and transmitting the function, and vice versa, that is, receiving ICS user frame information of a radio wave format. , ICS
It has the function of converting back to the user frame format and sending it out. Because of this, the IP terminal 21200-
The ICS user frame sent from No. 2 is transmitted to the access control device 21020-1 via the wireless transceiver 21640-1, the wireless communication path 21625-1, the wireless transceiver 21620-1, and the information communication path 21610-1. In the reverse direction, that is, the ICS user frame sent from the access control device 21020-1 is the information communication path 21.
610-1, wireless transceiver 21620-1, wireless communication path 216255-2, wireless transceiver 21640-1 and I
It is delivered to the P terminal 21200-2.

[0458]

As described above, according to the present invention, it is not necessary to use an expensive dedicated line, a high-speed communication line used for moving image communication such as TV is not provided, or a communication line facility is provided. A relatively inexpensive large-scale communication system can be constructed without using the Internet where the person in charge of the expansion plan is absent. In addition, there is almost no change in the private address system for computer communication of individual companies (including government agencies and universities) that were conventionally individually served,
There is an advantage that inter-company communication can be performed together with intra-company communication.
Furthermore, since the network administrator has the control right of the network, the management such as the failure countermeasure of the entire network becomes clear, and the reliability can be easily secured.
Eavesdropping prevention measures can be taken by encrypted communication inside the ICS. In addition, since the network itself can add an electronic signature to the ICS frame as an option, tampering with the ICS frame can be detected, and information security is significantly improved. According to the present invention, a single information transfer (transfer of an IP datagram) that does not depend on services such as voice, image, text, etc., enables services that have conventionally been implemented individually, such as telephone line services and Internet provider services, to be exchanged. It is possible to realize an integrated information communication system connected to.

[Brief description of drawings]

FIG. 1 is a block diagram schematically showing the basic principle of the present invention.

FIG. 2 is a block diagram showing an example of a network in which the ICS of the present invention is composed of a plurality of VANs.

FIG. 3 is a block diagram showing a configuration example of an access control device.

FIG. 4 is a block diagram illustrating a configuration example of a relay device.

FIG. 5 is a block diagram showing a configuration example of an inter-VAN gateway.

FIG. 6 is a block diagram showing a configuration example of an ICS network server.

FIG. 7 is an array diagram showing an example of an ICS user address used in the present invention.

FIG. 8 is a connection diagram showing a connection relationship between an ICS logic terminal and a user communication line.

FIG. 9 is an ICS user frame and an IC used in the present invention.
It is a figure which shows the relationship with an S network frame.

FIG. 10 is a part of a block diagram showing a first embodiment (intra-company communication, inter-company communication) of the present invention.

FIG. 11 is a part of a block diagram showing the first embodiment of the present invention.

FIG. 12 is a flowchart showing an operation example of the access control device.

FIG. 13 is a flowchart showing an operation example of an access control device in inter-company communication.

FIG. 14 is a block diagram showing a second embodiment (virtual private line) of the present invention.

FIG. 15 is a flowchart showing an operation example of an access control device in a virtual private line connection.

FIG. 16 is a block diagram showing a third embodiment (ICS network server) of the present invention.

FIG. 17 is a flowchart showing an operation example in the access control device in connection with a server in the ICS network.

FIG. 18 is a block diagram for explaining a modification of the third embodiment.

FIG. 19 is a block diagram showing a fourth embodiment (ICS address management server) of the present invention.

FIG. 20 is a flowchart showing an operation example of the ICS address management server.

FIG. 21 is a block diagram for explaining a modification of the fourth embodiment.

FIG. 22 is a fifth embodiment of the present invention (ICS name server).
It is a block configuration diagram showing.

FIG. 23 is a flowchart showing an operation example of the ICS name server.

FIG. 24 is a block diagram for explaining a modification of the fifth embodiment.

FIG. 25 is a part of a block diagram showing an eighth example (billing server) of the present invention.

FIG. 26 is a part of a block diagram showing an eighth embodiment of the present invention.

FIG. 27 is a flowchart showing an operation example of a charging process.

FIG. 28 is a part of a block diagram showing a ninth embodiment (ICS frame database server) of the present invention.

FIG. 29 is a part of a block diagram showing a ninth embodiment of the present invention.

FIG. 30 is a diagram showing an example of an ICS user frame used in the ICS frame database server.

FIG. 31 is a flowchart showing an operation example of Communication Example-1 of the ICS frame database server.

FIG. 32 is a flowchart showing an operation example of Communication Example-2 of the ICS frame database server.

FIG. 33 is a flowchart showing an operation example of Communication Example-3 of the ICS frame database server.

FIG. 34 is a tenth embodiment (X.25, FR, A) of the present invention.
TM, satellite communication and telephone line, ISDN line, C
FIG. 4 is a part of a block diagram showing the ATV line, satellite line, and accommodation of IPX frame).

FIG. 35 is a part of a block diagram showing a tenth embodiment of the present invention.

FIG. 36 is a part of a block diagram showing a tenth embodiment of the present invention.

FIG. 37 is a part of a block diagram showing a tenth embodiment of the present invention.

FIG. 38 shows an ICS network frame and an X. It is a figure which shows the mode of 25-format frame conversion.

FIG. 39 is a diagram showing how an ICS network frame and a FR format frame are converted.

FIG. 40 is a diagram showing how an ICS network frame and an ATM format frame are converted.

41 is an eleventh embodiment of the present invention (X.25, FR, A)
TM, satellite communication and telephone line, ISDN line, C
FIG. 4 is a part of a block diagram showing the ATV line, satellite line, and accommodation of IPX frame).

FIG. 42 is a part of a block diagram showing an eleventh embodiment of the present invention.

43 is a part of a block diagram showing a twelfth embodiment of the present invention (where the access control device is accommodated in the X.25 network and the FR network).

FIG. 44 is a part of a block diagram showing a twelfth embodiment of the present invention.

FIG. 45 is a part of a block diagram showing a thirteenth embodiment of the present invention (where the access control device is connected to the relay network).

FIG. 46 is a block diagram showing a fourteenth embodiment of the present invention (when the access control device is installed outside the ICS).

FIG. 47 is a fifteenth embodiment of the present invention (non-IC for inter-company communication)
It is a part of the block diagram showing S encapsulation).

FIG. 48 is a part of a block diagram showing a fifteenth embodiment of the present invention.

FIG. 49 is a flowchart showing an operation example of non-ICS encapsulation for inter-company communication.

FIG. 50 is a diagram showing a format example of an NSAP type ATM address.

FIG. 51 is a diagram showing an information unit in an ATM cell format.

FIG. 52 is a diagram for explaining conversion / restoration between an ICS network frame and a CPCS frame.

FIG. 53 is a diagram for explaining disassembly / assembly between a CPCS frame and a cell.

FIG. 54 is a part of a block diagram showing a sixteenth embodiment (another embodiment using an ATM network) of the present invention.

FIG. 55 is a part of a block diagram showing a sixteenth embodiment of the present invention.

FIG. 56 is a flowchart showing an example of a frame flow using SVC and PVC.

FIG. 57 is a flowchart showing an example of a frame flow using SVC and PVC.

FIG. 58 is a block diagram showing an example of 1-to-N communication or N-to-1 communication using PVC.

FIG. 59 is a block diagram showing an example of N-to-N communication using PVC.

FIG. 60 is a diagram showing an example of an FR frame address section.

FIG. 61 is a diagram showing a modification between the ICS network frame and the FR frame.

FIG. 62 is a part of a block diagram showing a seventeenth embodiment (another embodiment using the FR network) of the present invention.

FIG. 63 is a part of a block diagram showing a seventeenth embodiment of the present invention.

FIG. 64 is a flowchart showing an example of a frame flow using SVC and PVC.

FIG. 65 is a flowchart showing an example of a frame flow using SVC and PVC.

FIG. 66 is a block diagram showing an example of 1-to-N communication or N-to-1 communication using PVC.

FIG. 67 is a block diagram showing an example of N-to-N communication using PVC.

FIG. 68 is an eighteenth embodiment of the present invention (telephone line, ISDN)
Line, CATV line, satellite line, IPX line, mobile phone line)).

FIG. 69 is a part of a block diagram showing the eighteenth embodiment of the present invention.

FIG. 70 is a part of a block diagram showing the eighteenth embodiment of the present invention.

71 is a part of a block diagram showing an eighteenth embodiment of the present invention. FIG.

FIG. 72 is a flowchart showing the operation of the eighteenth embodiment.

FIG. 73 is a part of a block diagram showing a nineteenth embodiment of the present invention.

FIG. 74 is a part of a block diagram showing a nineteenth embodiment of the present invention.

FIG. 75 is a part of a block diagram showing a nineteenth embodiment of the present invention.

FIG. 76 is a diagram showing an example of description contents of a router table in the dial-up router.

77 is a flow chart showing the operation of the nineteenth embodiment. FIG.

FIG. 78 is a part of a block diagram showing a twentieth embodiment of the present invention.

FIG. 79 is a part of a block diagram showing a twentieth embodiment of the present invention.

FIG. 80 is a part of a block diagram showing a twentieth embodiment of the present invention.

[Fig. 81] Fig. 81 is a diagram illustrating an example of correspondence between communication speeds and speed classes.

FIG. 82 is a flow chart showing the operation of the twentieth embodiment.

FIG. 83 is a flow chart showing the operation of the twentieth embodiment.

[Fig. 84] Fig. 84 is a diagram illustrating an ICS user frame after a digital signature is added.

[Fig. 85] Fig. 85 is a diagram illustrating an ICS user frame before an electronic signature is added.

FIG. 86 is a part of a block diagram showing a twenty-first embodiment (electronic signature and encryption) of the present invention.

FIG. 87 is a part of a block diagram showing a twenty-first embodiment of the present invention.

88 is a flow chart showing the operation of the twenty-first embodiment. FIG.

FIG. 89 is a diagram for explaining a digital signature at the time of transmission and at the time of reception.

FIG. 90 is a block diagram showing a twenty-second embodiment (electronic signature server and encryption server) of the present invention.

FIG. 91 is a part of a block diagram showing a twenty-third embodiment (open connection) of the present invention.

FIG. 92 is a part of a block diagram showing a twenty-third embodiment of the present invention.

FIG. 93 is a block diagram showing a twenty-fourth embodiment (ISC address name management server) of the present invention.

FIG. 94 is a part of a block diagram showing a twenty-fifth embodiment of the present invention (function separation of the access control device).

FIG. 95 is a part of a block diagram showing a twenty-fifth embodiment of the present invention.

FIG. 96 is a flowchart showing the operation of the twenty-fifth embodiment.

FIG. 97 is a block diagram showing the twenty-sixth embodiment of the present invention (access control device including server and aggregated access control device).

[Fig. 98] Fig. 98 is a diagram illustrating an example of a TCP frame.

[Fig. 99] Fig. 99 is a diagram illustrating an example of a UDP frame.

FIG. 100 is a twenty-seventh embodiment of the present invention (incoming call priority control).
FIG.

FIG. 101 is a twenty-seventh embodiment of the present invention (incoming call priority control).
FIG.

FIG. 102 is a diagram for explaining the 27th embodiment.

FIG. 103 is a flowchart showing an operation example of priority determination.

FIG. 104 is a twenty-eighth embodiment of the present invention (transmission priority control)
It is a block configuration diagram showing.

FIG. 105 is a diagram showing an example of a conversion table used in the twenty-eighth embodiment.

FIG. 106 is a flowchart showing an operation example of priority determination in the 28th embodiment.

FIG. 107 is a block diagram showing a twenty-ninth embodiment (plurality of communications) of the present invention.

FIG. 108 is a diagram showing an example of a conversion table used in the 29th embodiment.

FIG. 109 is a diagram showing an example of a conversion table used in the 29th embodiment.

FIG. 110 is a block diagram showing a modified example of the thirty-fourth embodiment.

FIG. 111 is a part of a block diagram showing a thirtieth embodiment (operation of the integrated information communication system) of the present invention.

FIG. 112 is a part of a block configuration diagram showing a thirtieth embodiment (operation of the integrated information communication system) of the present invention.

FIG. 113 is a diagram for explaining the 30th embodiment.

FIG. 114 is a diagram for explaining the 30th embodiment.

FIG. 115 is a diagram for explaining the 30th embodiment.

FIG. 116 is a diagram for explaining the 30th embodiment.

FIG. 117 is a diagram for explaining the 30th embodiment.

FIG. 118 is a diagram for explaining the 30th embodiment.

FIG. 119 is a diagram for explaining the 30th embodiment.

FIG. 120 is a diagram showing an example of an ICS network address allocation record table used in the thirtieth embodiment.

FIG. 121 is a diagram showing an example of an ICS user address allocation recording table used in the thirtieth embodiment.

FIG. 122 is a diagram showing an example of a conversion table used in the thirtieth embodiment.

FIG. 123 is a diagram showing an example of a conversion table used in the thirtieth embodiment.

FIG. 124 is a diagram showing an example of a conversion table used in the thirtieth embodiment.

FIG. 125 is a procedure diagram for explaining the 30th embodiment.

FIG. 126 is a diagram showing an example of a conversion table used in the thirtieth embodiment.

FIG. 127 is a procedure diagram for explaining a thirtieth embodiment.

FIG. 128 is a diagram showing an example of a conversion table used in the thirtieth embodiment.

FIG. 129 is a diagram for explaining a domain name server.

FIG. 130 is a diagram for explaining a domain name server.

131 is a diagram for explaining a domain name server. FIG.

FIG. 132 is a diagram for explaining a domain name server.

FIG. 133 is a diagram for explaining calling of a domain name server.

FIG. 134 is a diagram for explaining rewriting of a conversion table from an IP terminal.

FIG. 135 is a diagram for explaining rewriting of a conversion table from an IP terminal.

FIG. 136 is a block configuration diagram showing a thirty-first embodiment (calling of a communication partner by telephone number) of the present invention.

FIG. 137 is a diagram for explaining the thirty-first embodiment.

FIG. 138 is a diagram showing an example of an internal table used in the 31st Example;

FIG. 139 is a diagram showing an example of an internal table used in the thirty-first embodiment.

FIG. 140 is a diagram showing an example of an internal table used in the thirty-first embodiment.

FIG. 141 is a diagram for explaining calling of a domain name server.

FIG. 142 is a part of a block configuration diagram showing a thirty-second embodiment (IP terminal capable of connecting to a plurality of access control devices) of the present invention.

[FIG. 143] FIG. 143 is a part of a block configuration diagram showing a thirty-second embodiment (IP terminal capable of connecting to a plurality of access control devices) of the present invention.

FIG. 144 is a timing chart for explaining a registration procedure from a home IP terminal.

FIG. 145 is a diagram illustrating an access method of an authentication server.

FIG. 146 is a diagram showing an example of an internal table used in the 32nd Example.

FIG. 147 is a diagram showing an example of an internal table used in the thirty-second embodiment.

FIG. 148 is a diagram showing an example of an internal table used in the 32nd Example.

FIG. 149 is a diagram for explaining calling of an authentication server.

FIG. 150 is a block diagram for explaining a conventional LAN network.

FIG. 151 is a diagram showing an example of the form of the Internet.

[Fig. 152] Fig. 152 is a diagram illustrating an IP frame defined by RFC791.

FIG. 153 is a diagram showing an IP frame defined by RFC1883.

[Explanation of symbols]

1,100 Integrated Information and Communication System (ICS) 2, 3, 4, 5, 10 access control device 20 Relay device 30 VAN gateway 40 ICS network server 50 ICS network address management server 60 user physical communication lines

─────────────────────────────────────────────────── ───

[Procedure amendment]

[Submission date] July 8, 2002 (2002.7.8)

[Procedure Amendment 1]

[Document name to be amended] Statement

[Name of item to be amended] Claims

[Correction method] Added

[Correction content]

[Claims]

Continued front page    F term (reference) 5K030 GA15 HA08 HC04 HC14 HD03                       HD06 HD09 LB18                 5K051 AA03 BB02 CC02 CC04 EE02                       FF16 HH27 JJ04

Claims (5)

[Claims] 1. An ICS user frame is input from the access control device 1 to become an ICS network frame, and the ICS network frame is transferred through an ICS network communication line to reach the access control device 2 to restore the ICS user frame. , The ICS network communication line is the ICS logical terminal identification information of the access control device 1, the sender I
It is uniquely determined when a set of a CS user address and a receiver ICS user address is determined, and the ICS logical terminal identification information, the sender ICS user address, and the receiver IC
The ICS network communication line can change when any one of the sets of S user addresses changes, and the ICS network frame includes at least an incoming address or an outgoing address, and 2 for two or more ICS user frames.
The above-mentioned ICS network communication line is fixed, and the above-mentioned two or more ICS
An integrated information communication system having an IP frame transmission / reception function composed of a set of network communication lines. 2. The ICS user frame is input from the access control device 1 to become an ICS network frame, and the ICS network frame is transferred through an ICS network communication line and reaches the access control device 2 to restore the ICS user frame. , The ICS network communication line is uniquely determined when the set of the ICS logical terminal identification information of the access control device 1 and the receiver ICS user address is determined, and the ICS logical terminal identification information, the sender ICS user address, and the receiver The ICS network communication line can change when any one of the set of ICS user addresses changes, and the ICS network frame includes at least an incoming address or an outgoing address, and two or more ICS user frames have two or more ICS user frames. The ICS network communication line is fixed, and the above two or more Integrated information communication system characterized by having an IP frame transmission and reception function comprising a set of CS network communication line. 3. The ICS user frame is input from the access control device 1 to become an ICS network frame, and the ICS network frame is transferred through an ICS network communication line and reaches the access control device 2 to restore the ICS user frame. , The ICS network communication line is uniquely determined when the ICS logical terminal identification information of the access control device 1 is determined, and is one of a set of the ICS logical terminal identification information, the sender ICS user address, and the recipient ICS user address. Is changed, the ICS network communication line can be changed, and the ICS network frame includes at least an incoming address or an outgoing address,
2 or more ICS for 2 or more ICS user frames
An integrated information communication system characterized in that a network communication line is defined and has an IP frame transmitting / receiving function composed of a set of two or more ICS network communication lines. 4. An external ICS user frame having a unique ICS user address system ADX is converted into an internal ICS network frame having an ICS network address system ADS based on management of a conversion table in the access control device, The ICS network frame comprises a network control unit and a network data unit, the network control unit stores an address according to the ICS network address system ADS, the network data unit includes the ICS user frame, and the ICS network frame includes: The data is transmitted internally according to the rules of the ICS network address system ADS,
The CS user frame is reconstructed from the ICS network frame and transferred to another external information communication device, the internal address system is determined independently of the external address system, and the ICS logical terminal When the combination of the ICS network terminal address, the ICS logical terminal identification information, the sender ICS user address, and the receiver ICS user address is determined, the incoming ICS network address is registered as a record in the conversion table so as to be uniquely determined. It can be seen that the identification information of the ICS logic terminal input by the ICS user frame, the sender ICS user address and the receiver ICS user address in the ICS user frame are both registered in the record of the conversion table. When issued, the ICS user frame In an integrated information communication system adapted to be converted into an ICS network frame, a conversion table server is provided, and the conversion table server forms a new conversion table item formed on the basis of information obtained from the ICS user frame. An integrated information communication system characterized by being registered in a conversion table. 5. A transmission ICS user frame is input from an ICS logic terminal at the end of a user communication line, and the transmission side ICS.
When the set of the logical terminal identification information and the receiver ICS user address in the transmission ICS user frame is determined, I is set between the access control device on the calling side and the access control device on the receiving side.
In the integrated information communication system in which the ICS network communication line to which the CS network frame is transferred is defined, a conversion table server is provided, and the conversion table server,
An integrated information communication system, characterized in that new items of a conversion table formed based on information obtained from the ICS user frame are registered in the conversion table.