JP2005198145A - Server, access destination data base server and network system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a network system which registers address information of a server which receives allocation of a port number for port forward, inquires the address information from the wide area network side and easily accesses the server. <P>SOLUTION: A router 2 having a port forwarding function and an access destination data base server 6 are connected to the Internet 1, image servers 3a, 3b, 3c are connected under the router 2, when the image servers 3a, 3b, 3c are connected to the router 2 or power is turned on, the allocation of the port number is requested to the router 2, the image servers 3a, 3b, 3c inform the access destination data base server 6 of the address information including the allocated port number and the access destination data base server 6 transmits the address information of the image servers 3a, 3b, 3c to a terminal 4 when it is accessed from the terminal 4 via the Internet 1. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a server that is connected to a relay apparatus and can receive access port database number assignment by assigning a port number for port forwarding, and a terminal that registers the access information and accesses it via a wide area network The present invention relates to an access destination database server that can provide address information of the server, and a network system composed of these.

  Since ADSL and CATV are becoming popular because they are always connected to a wide area network such as the Internet, the spread of broadband routers is remarkable. However, since the current IP protocol IPv4 lacks the absolute number of global IP addresses, it uses the NAT (Network Address Translation) function and the port forwarding function (static IP masquerade) to cope with the shortage of global IP addresses. doing. This NAT function converts the local IP address into a global IP address on the WAN side of the router when accessing from the LAN side device to the Internet.

  Further, when accessing a specific device on the LAN side from the Internet, the access can be made by using the port forwarding function (static IP masquerade function) of the router. In other words, first, it is necessary to set a port number and local IP address conversion table in the router in advance. When accessing from the Internet, the global IP address and port number of the router are designated. The router that has received this access converts the global IP address to the local IP address in accordance with a preset conversion table. This conversion makes it possible to access one device in the LAN having a local IP address from the Internet.

  As described above, the conventional router alleviates the global IP address depletion by the port forwarding function and the NAT function, and connects a plurality of user devices and the Internet. However, the user knows the port number of the LAN side device, and Had to be manually set and changed.

  Therefore, a standard for dynamically performing port forwarding (port mapping) has been created by the UPnP Forum (see Non-Patent Document 1). In the setting of this standard, the subordinate terminal asks the router whether or not the port can be used, registers if the router is usable, and if the terminal is not usable, determines whether or not the terminal can be used again. This is repeated until inquiry and decision are made. According to the UPnP standard, manual port forwarding setting is not required, and the port number on the Internet side can be automatically set regardless of the router vendor.

  However, since the port number is automatically selected, there is a problem that the user on the Internet side does not know which port number is assigned to which terminal. From the inside of the LAN, the user interface (web screen) of the router or terminal can be used to check the port number used by each terminal. From the Internet side (external), the router user interface is used for security reasons. This is because cannot be used.

Therefore, the applicant has a plurality of servers under the router, and when communicating by receiving port assignments according to the UPnP standard, the applicant selects a representative server from among them to manage address information, and allows access from a wide area network. On the other hand, a method for providing address information of other servers has been proposed (Japanese Patent Application No. 2003-12241). Thereby, it is possible to access other servers by accessing the representative server from the wide area network side.
UPnP standard, [online], [November 29, 2002 search], Internet <URL: http: // www. upnp. org / standardizeddcps / default. asp>

  As described above, the port forwarding function (static IP masquerade function) of a conventional router can access a device on the LAN side by using a port number. It was necessary to know the port number, and if there was a port number change due to a system change on the LAN side, the change had to be followed manually.

  Also, when port forwarding is set dynamically according to the UPnP Forum standard, the terminal asks the router whether or not the port can be used, registers if it can be used, and if the terminal cannot use it, the terminal asks again. However, since the router automatically selects a port number, there is a problem that a user on the Internet side does not know which port number is assigned to the terminal.

  Furthermore, the access method by the representative server proposed by the applicant requires that the port number of the representative server be a fixed port. If the fixed port number cannot be used, the representative server cannot be accessed, and naturally all servers are accessed. Will not be able to. For example, the port number “80” is used when communicating by HTTP. However, when this port number is reserved for another use in the router, this port number cannot be assigned to the representative server, and therefore it may not be possible to implement. There was a problem of appearing.

  Accordingly, the present invention provides a server that can be assigned a port number for port forwarding and that can be accessed from the wide area network side by registering address information in an access destination database server on the wide area network. With the goal.

  In addition, the present invention provides an access destination database server that registers address information of a server connected to a wide area network and assigned a port number for port forwarding, and facilitates access to the server from the wide area network side. The purpose is to do.

  A further object of the present invention is to provide a network system in which address information of a server that has been assigned a port number for port forwarding is registered, and the server can be easily accessed by inquiring this from the wide area network side.

  In order to solve the above-described problems, the present invention is a server that can be connected to a relay device having a port forwarding function, and assigns a port number to the relay device when connected to the relay device, or when it is operated by power ON or manually. The main feature is that it includes a control unit that requests and notifies address information including the assigned port number to an access destination database server connected to the wide area network.

According to the server of the present invention, the port forward port number can be assigned, and address information can be registered in the access destination database server on the wide area network to enable access from the wide area network side. .

  In addition, according to the access destination database server of the present invention, it is possible to register the address information of the server that has been assigned the port number for port forwarding, and to access this server that is difficult to recognize from the wide area network side.

  Furthermore, according to the network system of the present invention, it is possible to easily access the server by registering the address information of the server assigned the port number for port forwarding and inquiring about this from the wide area network side.

  In order to solve the above-mentioned problem, a first form of the present invention is a server that can be connected to a relay device having a port forwarding function, and assigns a port number when connected to the relay device or powered on or manually operated. Is a server having a control unit for requesting the relay device and notifying the access destination database server connected to the wide area network of the address information including the assigned port number and the global IP address on the wide area network side of the relay device, Since it is possible to register the address information including the updated port number in the access destination database server on the wide area network after receiving the port forward port number assignment, even if the port number is updated locally, the wide area network Can be accessed from the side.

  The second mode of the present invention is a server in which, in the first mode, the control unit notifies the access destination database server of the domain name used in the server information and / or the DDNS service together with the address information. Information such as a MAC address, a unique URL, a domain name, etc. is notified, so that the server can be specified.

  The third aspect of the present invention is a server in which the authentication information is included in the server information in the first or second aspect, and the authentication information is notified. Authentication is also possible.

  A fourth aspect of the present invention is an access destination database server that stores address information of a server that is connected to a wide area network and that is under the control of a relay device having a port forwarding function. When accessed, the control unit takes out the address information of the server from the storage unit, transmits the server list page information to which the hyperlink corresponding to the address information is added, and the terminal follows the hyperlink to jump It is an access destination database server that can be connected to the server by registering address information such as the IP address of the server and the port number assigned to the relay device, and even if the port number is updated locally, from the wide area network side Can allow access.

  A fifth mode of the present invention is an access destination database server according to the fourth mode, wherein the storage unit is provided with a server management table for registering server information and address information of servers placed under the relay device. In addition, since address information such as the IP address of the server to which the port number is assigned and the global IP address and port number of the relay device are registered in the server management table, it becomes easy to access this server from the wide area network side.

According to a sixth aspect of the present invention, in the fifth aspect, the server management table is an access destination database server in which server information and a domain name used in a DDNS service are registered in addition to address information in the server management table. Since the address information and server information of the server to which the port number is assigned are registered, centralized management is possible, and access to this server from the wide area network side becomes easy.

  In the seventh aspect of the present invention, when the server information is notified by including the ID information in the server information, the server information is registered in the server management table, and user authentication is requested when accessed from the terminal via the wide area network. An access destination database server that returns information to the terminal, searches a server management table based on an ID given by user authentication, and returns page information for displaying a list of servers. Authentication is performed before sending the list display page information to specify, so there is no need to send server list information to unauthorized users, reducing the load on the access destination database server and to the server itself There is no connection, and safety is high. Further, it is possible to determine which server is a list display target based on the authentication result, and it is possible to display only a list of servers corresponding to users accessing from the wide area network side.

  The eighth mode of the present invention returns a list of connectable servers in response to a connection request from a terminal. When the terminal selects one of them, an authentication request is made to the server, and the authentication is successful. This is an access destination database server that can transmit page information including a link to the server only when the terminal automatically jumps to connect to the server, and the access destination database server has a load when performing authentication. Decrease.

  In the ninth aspect of the present invention, a relay device having a port forwarding function and an access destination database server are connected to a wide area network, a server is connected under the relay device, and the server is connected to the relay device or turned on. Or, when operated manually, the relay device requests the relay device to assign a port number, and the relay device notifies the access destination database server of the address information including the port number assigned to each subordinate server and the server information received from the server. The access destination database server is a network system that transmits address information of the server to the terminal when accessed from the terminal via the wide area network, and the address information of the server that has been assigned the port number for port forwarding Register the port number to be updated locally. Even to the server, it is possible to easily access the server by making an inquiry from the wide area network to the access destination database server.

  The tenth form of the present invention, in the ninth form, when the access is made from the terminal via the wide area network, the access destination database server transmits a display page for designating the server, and the server is designated from the terminal. This is a network system that takes out the address information of the server from the storage unit and sends page information to which it can be linked, and designates the server when inquiring this from the wide area network side. Therefore, the server can be easily accessed since the page information to which the address information of the server is added so as to be linkable is transmitted. Similarly, it is possible to respond to access from the terminal in the seventh and eighth embodiments.

  In an eleventh aspect of the present invention, in the first to tenth aspects, when accessing from a terminal via a wide area network, the access destination includes the name corresponding to the server connected under the relay device. A network system in which a database server identifies a group of servers or servers and returns page information including hyperlinks to the specified server. When accessing from a terminal via a wide area network, it supports a server for specifying a server. One name (keyword for user authentication) to be included is included. Using this keyword as a key, the access destination database server displays a list of servers including links of connectable servers, or if only one server supports, page information that automatically jumps to the server is displayed. Send. This makes it possible to omit the authentication step.

  In the twelfth aspect of the present invention, in the first to tenth aspects, when accessing from a terminal via a wide area network, the domain name corresponding to the WAN side IP address of the relay apparatus and the servers connected under the relay apparatus respectively This is a network system that returns the page information including the hyperlink to the specified server when the access destination database server identifies the server by accessing the name including the name attached to it, and when accessing from a terminal via a wide area network Includes a plurality of names (keywords for user authentication) for designating a server. Using this keyword as a key, the access destination database server displays a list of servers including links of connectable servers, or if only one server supports, page information that automatically jumps to the server is displayed. Send. This makes it possible to omit the authentication step.

(Embodiment 1)
The server under the router and the access destination database server on the Internet in the first embodiment of the present invention will be described. FIG. 1 is a configuration diagram of a network system for accessing an image server under a router in the first embodiment of the present invention, FIG. 2 is a configuration diagram of the image server in the first embodiment of the present invention, and FIG. 3 is an embodiment of the present invention. It is a block diagram of the access destination database server in the form 1.

  In FIG. 1, 1 is the Internet (the wide area network of the present invention), 2 has an interface that can be connected to the Internet 1, has a plurality of LAN-side ports, subordinate devices, and image servers 3 a, 3 b, 3 c described later. Routers (in particular, the relay apparatus of the present invention) that dynamically route IP packets according to the UPnP standard, and 3a, 3b, and 3c are image servers (servers of the present invention) such as network cameras. 4 is a terminal that can connect to the Internet 1 to access the image servers 3a, 3b, and 3c, and 5 is an IP address that is assigned to the image servers 3a, 3b, and 3c from a predetermined local IP address (hereinafter, IP address) within the LAN. A DHCP (Dynamic Host Configuration Protocol) server to be allocated, 6 is an access destination that responds to the terminal 4 with a web page linked to a global IP address (hereinafter referred to as an external IP address) when accessed by the unique ID of the image server 3a, 3b, 3c A database server (hereinafter referred to as an access destination database server).

  In the first embodiment, when the image servers 3a, 3b, and 3c are connected to the router 2, each server requests the router 2 to assign a port, and the router 2 gives an assignable port number for registration. For example, when the image server 3a is connected to the router 2 and the port number is requested to be assigned, the router 2 assigns, for example, “8080” from predetermined assignable port numbers. By this assignment and the port forward function of the router 2, the Internet 1 can access the image server 3a to which this port number “8080” is assigned. Similarly, when the image servers 3b and 3c request port number assignment and are assigned, for example, “8081” and “8082”, the Internet 1 side can access the image servers 3a, 3b and 3c with this port number. It becomes possible. However, in order for a user on the Internet 1 side to access the image servers 3a, 3b, 3c, it is necessary to know the port number. For this reason, conventionally, it has been necessary to determine a representative server from among the image servers 3a, 3b, and 3c and to give a fixed port number “80” thereto. However, since this cannot be handled by the router 2 in which the fixed port number “80” has been reserved in advance, in the first embodiment of the present invention, the image servers 3a, 3b, 3c are assigned access after the port number is assigned. The port number assigned to the destination database server 6 is notified. Thereby, when it is desired to access the image servers 3 a, 3 b, 3 c from the terminal 4, the access can be made by accessing the access destination database server 6 from the terminal 4.

  Therefore, the internal configuration of the image servers 3a, 3b, 3c and the access destination database server 6 according to the first embodiment will be described with reference to FIGS. First, the image servers 3a, 3b, and 3c will be described. In FIG. 2, 11 is a network interface between the image servers 3a, 3b, and 3c and the Internet 1, and transmits a request from the browser of the terminal 4 to the image servers 3a, 3b, and 3c, and the image servers 3a, 3b, and 3c. A file described in a markup language such as HTML is transmitted to the Internet 1 in order to display a web page. Reference numeral 12 denotes a camera unit, and reference numeral 13 denotes an image data generation unit that processes a video signal from a CCD or CMOS image sensor provided in the camera unit 12 and compresses it into a JPEG format, an MPEG format, or another compression format.

  14 is a storage unit that stores control programs and various data, and 14a is an HTML storage unit that stores a plurality of web pages (page information) in which display instructions and link information are described in a markup language such as HTML. 14b is an image storage unit that stores the image data compressed by the image data generation unit 13, 14c is a port information storage unit that stores assigned port information, and 14d is an access that transmits address information of the image servers 3a, 3b, and 3c. It is an access destination database server information storage unit that stores the address of the destination database server 6 and the like.

  15 is a web server unit that communicates with the Internet 1 using the protocol TCP / IP, and 16 is configured with HTML or the like for the browser when the web server unit 15 is accessed from the browser of the terminal 4. It is an HTML generation unit that extracts a web page from the storage unit 14 and generates and transmits it. Reference numeral 17 denotes a control unit, which is configured as a function realizing unit that reads a control program into a central processing unit (CPU) and performs each function. Reference numeral 17a denotes port management means for managing port information. The port management means 17a performs a registration process for assigning a port number, and when registered, notifies the access destination database server 6 of the port number. Reference numeral 18 denotes a drive unit configured by a motor or the like that performs operations such as pan / tilt of the camera unit 12, and 19 denotes a camera control unit that drives the drive unit 18. The control unit 17 processes a request from the browser and operates the HTML generation unit 16 to generate a web page, retrieves image data to be transmitted to the browser from the storage unit, and sets a mode for the camera control unit 18. It is specified and operated.

  Next, the internal configuration of the access destination database server 6 will be described. In FIG. 3, 21 is a network interface with the Internet 1, 22 is a web communication unit that communicates with the Internet 1 using the protocol TCP / IP, and 23 is a control unit. The controller 23 is also configured as the above-described function realization means. 24, when there is an access from the browser of the terminal 4, the web page composed of HTML or the like is extracted from the storage unit 14 for the browser, generated, transmitted, and the ID, password, etc. sent from the terminal 4 If the ID information (authentication information of the present invention) is authenticated, the address information of the corresponding image servers 3a, 3b, 3c is extracted from the server management table storage unit 25b described later, and the web page linked with this URL is displayed. It is an HTML generation unit that generates and transmits to the terminal 4.

  25 is a storage unit for storing control programs and various data, 25a is an HTML storage unit that stores a plurality of web pages for authentication and image server access described in a markup language such as HTML, and 25b is an image. A server management table storage unit that stores a server management table including port information, IP addresses, ID information, passwords, and the like to which the servers 3a, 3b, and 3c are assigned. The server management table storage unit 25b also stores the external IP address of the router 2.

Upon receiving the port number notification from the image servers 3a, 3b, 3c, the access destination database server 6 updates the port number in the server management table storage unit 25b, and when accessed from the terminal 4 via the Internet 1, When the web page for designation / authentication is transmitted and the ID information input thereto matches the authentication data stored in memory, the web page linked with the URL of the corresponding image server 3a, 3b, 3c is displayed. It is generated and transmitted to the terminal 4.

  When accessed from the terminal 4 via the Internet 1, the server designation / authentication web page is returned to the terminal 4, the server management table is searched based on the ID given by the user authentication, and the image server 3a , 3b, 3c may be transmitted as a list. Since authentication is performed before the web page for displaying the list for specifying the image servers 3a, 3b, and 3c is transmitted, it is not necessary to transmit server list information to unauthorized users, and the access destination database server 6 The burden is reduced and there is no connection to the server itself, which is highly secure. Further, it is possible to determine which server is a list display target based on the authentication result, and it is possible to display only a list of servers corresponding to users accessing from the wide area network side.

  Also, in response to a connection request from the terminal 4, a list of connectable image servers 3a, 3b, 3c is returned, and when the terminal 4 selects one of them, an authentication request for the image servers 3a, 3b, 3c is issued. The web page including the link to the image servers 3a, 3b, and 3c may be transmitted only when the authentication is successful. When the terminal 4 automatically jumps and connects to the server, the load when the access destination database server performs authentication decreases.

  Further, when accessing from the terminal 4, for example, the keyword “camera001” including the authentication keyword corresponding to the image servers 3 a, 3 b, 3 c connected under the router 2 is taken into the URL and “http: // www .Service.co.jp / camera001 ", the access destination database server 6 identifies the server group or server and returns a web page including a hyperlink to the designated image server 3a, 3b, 3c. Also good. In this case, when accessing from the terminal 4 via the Internet 1, one name (authentication keyword) corresponding to the server is included in the URL to designate the image servers 3a, 3b, 3c. Using this keyword as a key, the access destination database server 6 displays a list of server groups including links of connectable servers, or when only one server supports, the image servers 3a, 3b are automatically displayed. , 3c, page information to jump to is transmitted. Thereby, it becomes possible to omit the step of the work which specifies a server. When security is applied, a user authentication procedure (ID and password confirmation) may be performed before display.

  Similarly, including the domain name corresponding to the WAN side IP address of the router 2 and the names given to the image servers 3a, 3b, 3c connected under the router 2, for example, “http://YYY.service.co”. By accessing with “.jp / camera001”, the access destination database server 6 may specify the image servers 3a, 3b, 3c and return a web page including a hyperlink to the designated server. This includes a plurality of names (authentication keywords) in the URL in order to designate the image servers 3a, 3b, 3c. Using this keyword as a key, the access destination database server 6 displays a list containing links of connectable image servers 3a, 3b, 3c, or automatically when only one server is supported. Send page information to jump to. Thereby, it becomes possible to omit the step of the work which specifies a server. When security is applied, a user authentication procedure (ID and password confirmation) may be performed before display.

Hereinafter, the configuration of the server management table will be described. FIG. 4 is a configuration diagram of the server management table according to the first embodiment of the present invention. In the server management table shown in FIG. 4, reference numeral 41 denotes a camera ID, which is a MAC address of the image server, for example “00: 02: 2F: 92: D7: 32”, or a unique ID, for example, a unique URL “miemasu.net. / Camera001 / etc. is the camera ID. Others may be unique, but a product-specific MAC address is desirable. Reference numeral 42 denotes an access ID. When a user purchases a product, an ID number such as “35178913” is entered on the document attached by the manufacturer on the manufacturer side, and the ID and MAC address are registered in the access destination database server 6 at the time of shipment. The user who has been authenticated with this ID number “35178913” permits access to this image server. Even if the access ID 42 is not particularly provided, the MAC address of the camera ID 41 may be used. 43 is a password, a default password is set at the time of shipment, is described in an attached document together with an ID, and a user-specific value using an interface that can be set on the user side such as “3ZD45E” after successful user authentication. It is possible to change to The camera ID 41, the access ID 42, and the password 43 correspond to the server information of the present invention, and the access ID 42 and the password 43 correspond to the authentication information of the present invention.

  A port number 44 is assigned by the UPnP-compatible router 2 and is notified from the image servers 3a, 3b, and 3c. The router 2 has a predetermined assignable port number, and updates each port number in response to a request from each image server, and each image server notifies the access destination database server 6 of this. Therefore, the port number is updated each time. Reference numeral 45 denotes an IP address of the image servers 3a, 3b, and 3c. The IP address 45 is assigned by the DHCP server 5. For example, if the IP address of the router 2 is “192.168.0.1”, the image server 3a is set to “192.168.0.2”, for example. It is notified with the port number. 46 is an internal port number. The port number 44, IP address 45, and internal port number 46 constitute the address information of the present invention. Reference numeral 47 denotes an outside (WAN side) IP address of the router 2, and 48 denotes a group ID given to the server group.

  In the first embodiment, since the server management table has such a configuration, when the image servers 3a, 3b, and 3c are connected or powered on, the IP address and port number are assigned, and the address information and the camera are received. The ID 41, the access ID 42, and the password 43 are notified to the access destination database server 6 and registered in the server management table. The access ID 42 and password 43 are set in advance. When the terminal 4 accesses the access destination database server 6 via the Internet 1 in this state, the access destination database server 6 transmits a web page for designating and authenticating the image server, and the camera ID 41 transmitted from the terminal 4 side. The image server is designated by, and authentication is performed using the access ID 42 and the password 43. When these are authenticated, a web page to which the URLs of the corresponding image servers 3a, 3b, and 3c are added so as to be linkable is transmitted, and the link destination is automatically accessed from the terminal 4. Access is possible without knowing the port numbers 3a, 3b, and 3c.

Next, a sequence performed by the image servers 3a, 3b, 3c, the router 2, the access destination database server 6, and the terminal 4 will be described with reference to FIG. FIG. 5 is an explanatory diagram of a sequence between the image server, the access destination database server, and the terminal according to the first embodiment of the present invention. As shown in FIG. 5, for example, when the image server 3a is connected to the LAN or is turned on or manually operated to request the DHCP server 5 to allocate an IP address and request the forwarding to the UPnP-compatible router 2 (sq1), the router 2 assigns a port number and transmits a port number setting notification to the image server 2a (sq2). The image server 2a receives the port ID 44, the IP address 45, the local port number 46, the outside IP address 47 of the router 2 which is a global IP address, the camera ID 41, the access ID 42 and the password 43 which are initially set in the access destination database. Send to server 6 (sq3
). In the access destination database server 6, these are registered in the server management table. The access destination database server 6 can know the outer IP address of the router from the source IP address of the received packet without including the outer IP address of the router 2 in the information transmitted by the image server 2a.

  Thereafter, when the access destination database server 6 is accessed from the terminal 4 (sq4), the access destination database server 6 makes a server designation and authentication request (sq5), and the terminal 4 designates an image server and inputs authentication information to designate the server. -It transmits as a notification of authentication information (sq6).

  By the way, there are three types of web pages transmitted from the access destination database server 6 to the terminal 4 at this time as shown in FIGS. 6 (a), 6 (b), and 6 (c). When the terminal 4 accesses the access destination database server 6, it can be connected using the domain name of the access destination database server 6 such as “http://www.miemasu.net/”. 6A is an explanatory diagram of an image server designation and authentication web page transmitted by the access destination database server according to the first embodiment of the present invention, and FIG. 6B is an access destination database according to the first embodiment of the present invention. FIG. 6C is an explanatory diagram of an image server individual designation web page transmitted by the access destination database server according to the first embodiment of the present invention. In the web page for image server designation and authentication shown in FIG. 6A, 51 is a camera ID entry box, 52 is an access ID entry box, and 53 is a password entry box, and these designate and authenticate the image server. . Reference numeral 54 denotes a list request button for requesting an image server list designating web page described below, and reference numeral 55 denotes a send button. When the camera ID, access ID, and password are input and the send button 55 is pressed, the image server is designated and authenticated.

  In the image server list designating web page shown in FIG. 6B, 56 is a list display in which each host name and URL of the image server are linked. The image server list designating web page is obtained by selecting, for example, “camera 1” from the list display of the host names “camera 1” to “camera 3” of the image servers 3a, 3b, and 3c, and URL “http: //: miemasu.net”. / Camera001 / "and at the same time authenticate with an access ID and password. When “camera 1” is clicked in FIG. 6B, a web page in which “miemasu.net/camera001/” is input by default in the camera ID entry box 51 in FIG. 6A is transmitted from the access destination database server 6. And authenticate. At this time, a web page without the camera ID entry box 51 may be transmitted.

  In the image server individual designation web page shown in FIG. 6C, 57 is a URL input box for inputting the URL of the image server to be accessed, and 58 is a confirmation button. By inputting “http: //: miemasu.net/camera001/” as the URL and pressing the confirm button 58, the camera of the image server designation and authentication web page of FIG. 6A is displayed as in FIG. 6B. A web page in which “miemasu.net/camera001/” is input by default in the ID entry box 51 is transmitted from the access destination database server 6 and is used for authentication with the access ID and password. A web page without the camera ID entry box 51 may be transmitted.

  Another form when connecting from the terminal 4 to the image servers 3a, 3b, 3c is shown below.

(1) When accessing them by grouping them When “http://www.miemasu.net/camera001/” is specified, the terminal 4 sends a TCP port to the access destination database server 6 whose domain name is “miemasu.net”. Connect with No. 80 and use the GET method to specify "camera00
1 ”is notified. The access destination database server 6 searches the database for an image server having an ID“ camera001 ”, and if there is a plurality, sends an HTML page for display in the format of FIG. Click to select an image server, and if there is only one image server, the terminal connects to the image server by sending an HTML page that redirects to the image server. When security is applied, a user authentication procedure (password confirmation) may be performed before display.

(2) Access using a dedicated domain It is also possible to specify “http://camera001.miemasu.net/”. When there are many image servers to be managed, such as large-scale customers, a dedicated access destination database server 6 is installed and a domain name is assigned to it. This can be done by acquiring a legitimate domain or using a DDNS service. When connecting from the terminal 4 with “http://camera001.miemasu.net/”, camera001. miemasu. Connected to an access destination database server 6 having a net domain name, and the access destination database server 6 transmits an HTML page for display in the format of FIG. 6B when there are a plurality of image servers on the database, When there is only one corresponding image server, the terminal connects to the image server by transmitting an HTML page that redirects to the corresponding image server. When security is applied, a user authentication procedure (password confirmation) may be performed before display.

(3) Access using a dedicated domain and unique ID It is also possible to specify “http://camera001.miemasu.net/35178913/”. The terminal 4 connects to the access destination database server 6 whose domain name is “camera001.miemasu.net” using the TCP port 80 and notifies “35178913” by the GET method. Here, “35178913” is the access ID 42 in FIG. The user can change this ID to an arbitrary value using a user interface provided by the access destination database server 6, and can also change the ID to an arbitrary value using the user interface of the image server. It is also use. Upon receiving the notification, the access destination database server 6 searches the database for an image server having an ID of “35178913”, and if there is a plurality, sends an HTML page for display in the format of FIG. Click on the image server to connect. When there is only one corresponding image server, the terminal connects to the image server by transmitting an HTML page that redirects to the corresponding image server. When security is applied, a user authentication procedure (password confirmation) may be performed before display.

  When the server designation / authentication information notification is transmitted in sq6, the access destination database server 6 takes out the data of the access ID 42 and the password 43 from the server management table storage unit 25b, and when it matches the authentication information, the transfer web page Is transmitted (sq7). The transfer web page is linked to the URL of the destination image server, and the terminal 4 automatically accesses the destination image server 3a (sq8). In response to this, the image server 3a transmits a control screen web page (sq9), and an image can be obtained from the image server 3a by inputting from the screen.

In this way, the terminal 4 inquires the access destination database server 6 about the URL of the image servers 3a, 3b, and 3c, so that the terminal 4 can access without knowing the port numbers of the image servers 3a, 3b, and 3c. . In the above description, the access destination database server 6 performs authentication, but the access destination database server 6 simply transmits the URLs of the image servers 3a, 3b, 3c, and authentication is performed by the image servers 3a, 3b, 3c. Can also be done.

  The present invention relates to an image server such as a network camera that is connected to a relay apparatus and can receive access port data assigned to a port forward port number and registers the access information via a wide area network. This can be used for an access destination database server that can provide address information of the image server to a terminal that accesses the terminal.

1 is a configuration diagram of a network system that accesses an image server under a router according to Embodiment 1 of the present invention. Configuration diagram of the image server in Embodiment 1 of the present invention Configuration diagram of access destination database server according to Embodiment 1 of the present invention Configuration diagram of a server management table in Embodiment 1 of the present invention Explanatory drawing of the sequence between the image server, access destination database server, and terminal in Embodiment 1 of this invention (A) Image server designation and authentication web page transmitted by the access destination database server of the first embodiment of the present invention, (b) Image server transmitted by the access destination database server of the first embodiment of the present invention Explanatory drawing of a list designation | designated web page, (c) Explanatory drawing of the image server separate designation | designated web page which the access destination database server of Embodiment 1 of this invention transmits

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Internet 2 Router 3a, 3b, 3c Image server 4 Terminal 5 DHCP server 6 Access destination database server 11, 21 Network interface 12 Camera part 13 Image data generation part 14, 25 Storage part 14a, 25a HTML storage part 14b Image storage part 14c Port information storage unit 14d Access destination database server information storage unit 15 Web server unit 16, 24 HTML generation unit 17, 23 Control unit 18 Drive unit 19 Camera control unit 22 Web communication unit 25b Server management table storage unit 41 Camera ID
42 ID for access
43 Password 44 Port number 45 Local IP address 46 Internal port number 47 Group ID
51 Camera ID entry box 52 Access ID entry box 53 Password entry box 54 List request button 55 Send button 56 List display 57 URL input box 58 Confirm button

Claims (12)

A server that can be connected to a relay device having a port forwarding function, and requests the relay device to assign a port number when it is connected to the relay device or powered on or manually operated, and includes the assigned port number A server comprising a control unit for notifying address information to an access destination database server connected to a wide area network. The server according to claim 1, wherein the control unit notifies the access destination database server of server information and / or a domain name used in a DDNS service together with the address information. The server according to claim 1, wherein the server information includes authentication information. An access destination database server that stores address information of a server that is connected to a wide area network and is under the control of a relay device having a port forwarding function. When accessed from a terminal via the wide area network, the control unit The address information of the server is extracted from the storage unit and page information of a server list to which a hyperlink corresponding to the address information is added is transmitted, and the terminal can connect to the server by following the hyperlink and jumping. An access destination database server characterized by being able to do so. 5. The access destination database server according to claim 4, wherein the storage unit is provided with a server management table for registering server information and address information of servers placed under the relay device. 6. The access destination database server according to claim 5, wherein a domain name used in the server information and / or DDNS service is registered in the server management table in addition to the address information. When the server information is notified including the ID information in the server information, it is registered in the server management table, and when accessed from the terminal via the wide area network, the information requesting user authentication is returned to the terminal, and the user authentication is performed. An access destination database server, wherein the server management table is searched based on the ID given by, and page information for displaying a list of servers is returned. Returns a list of connectable servers in response to a connection request from a terminal. When the terminal selects one of them, it makes an authentication request to the server and includes a link to the server only if the authentication is successful. An access destination database server characterized in that the page information can be transmitted and the terminal can automatically jump and connect to the server. When a relay device having a port forwarding function and an access destination database server are connected to a wide area network, a server is connected under the relay device, and the server is operated by the relay device or by turning on the power or manually, The relay device requests the relay device to assign a port number, and the relay device notifies the access destination database server of address information including the port number assigned to each subordinate server and server information received from the server, and the access destination database When the server is accessed from a terminal via the wide area network, the server transmits address information of the server to the terminal. When accessed from a terminal via a wide area network, the access destination database server transmits page information for designating the server, and when information for designating the server is transmitted from the terminal, the server stores the server information. 10. The network system according to claim 9, wherein the address information is extracted and page information to which the address information is added so as to be linkable is transmitted. When accessing from a terminal via a wide area network, by including the name corresponding to the server connected to the relay device, the access destination database server identifies the server group or server and hyperlinks to the specified server. 10. The network system according to claim 9, wherein page information including is returned. When accessing from the terminal via the wide area network, the access destination database server can be accessed by including the domain name corresponding to the WAN side IP address of the relay device and the name given to each of the servers connected under the relay device. 10. The network system according to claim 9, wherein a server is specified, and page information including a hyperlink to a designated server is returned.

Images