KR20210156949A - Router with selective VPN connection function of terminal and VPN connection method of terminal using the same - Google Patents

Abstract

The present invention relates to a router having an optional VPN connection function of a terminal and a VPN connection method of the terminal using the same. Provided are a router having an optional VPN connection function of a terminal and a VPN connection method of the terminal using the same, wherein among the plurality of terminals, at least one specific terminal uses a VPN network, while at least one other terminal connects and uses a high-speed Internet network at the same time, or all terminals can be used by connecting to the VPN network or the high-speed Internet network. According to the present invention, the router having an optional network connection function of the terminal selectively connects the plurality of terminals provided in a building to an external network such as the VPN network or a high-speed Internet network to perform data communication.

Description

Router with selective VPN connection function of terminal and VPN connection method of terminal using same { Router with selective VPN connection function of terminal and VPN connection method of terminal using the same }

The present invention relates to a router having a selective VPN connection function of a terminal and a VPN connection method for a terminal using the same, and more particularly, to a terminal capable of selectively connecting each terminal connected to the router to a VPN network and a high-speed Internet network. It relates to a router having a selective connection function and a selective connection method of a terminal using the same.

In general, the Internet is becoming a function that most terminals (eg, PC) must support due to the rapid propagation of the use of high-speed communication networks.

In particular, a wired/wireless router is used to efficiently use the Internet in a plurality of terminals installed at home or at work. At this time, wired/wireless routers support up to dozens of terminals (or devices that support Internet functions) to share Internet services through one IP line. have.

These wired and wireless routers connect a plurality of connected terminals through network ports, connect them to one high-speed communication network, communicate with the external Internet network through a single public IP address, and internally through a private IP address set internally. It supports Internet communication of each connected terminal.

On the other hand, recently, the use of VPN (Virtual Private Network) service that provides the same effect as connecting a dedicated line between remote networks using a special communication system and encryption technique in the Internet network is expanding.

In this regard, research on a wired/wireless router capable of inter-network VPN interworking at a low cost is being conducted to enable low-cost VPN interworking between two remote networks. there is a bar This relates to a network-to-network VPN support wired/wireless router system, comprising: a first DLNA (Digital Living Network Alliance) server for storing first moving picture data; a first DLNA player; and a first DLNA controller requesting to transmit first video data stored in the first DLNA server to the first DLNA player, wherein the first DLNA server transmits the first video data to the first DLNA according to the request. There has been proposed a wired/wireless router system capable of transmitting to a player, and the first DLNA player receiving and playing the first moving picture data from the first DLNA server.

However, although the system of the above reference suggests a device capable of inter-network VPN interworking at a low cost comparable to that of a wired or wireless router, it is possible to selectively use a VPN network and a high-speed Internet network at the same time only by connecting multiple terminals to the router and setting the same. There is no proposed method at all, so the range of communication network use of the terminal is limited.

Reference 1: Republic of Korea Patent Registration No. 10-1686850

In order to solve the problems of the prior art, the present invention is a router that enables VPN interworking between networks at a low cost comparable to that of a wired or wireless router used at home, while selectively connecting a plurality of terminals to the router to a VPN network and a high-speed Internet network And an object of the present invention is to provide a method for connecting a terminal to a network using the same.

In particular, the present invention relates to a terminal in which one or more terminals among a plurality of terminals use a VPN network while at least one other terminal is connected to and used a high-speed Internet network at the same time or all terminals can be used by connecting to a VPN network or a high-speed Internet network. An object of the present invention is to provide a router having a selective network connection function and a network connection method of a terminal using the same.

The present invention in order to solve this technical problem;

A router for performing data communication by selectively connecting a plurality of terminals to a VPN network or a high-speed Internet network, which is an external network, wherein the router includes a VPN connection module responsible for connecting to a remote VPN server, and a terminal connected to the router NAT and forwarding module that changes the IP address so that it can communicate with the VPN network or high-speed Internet network of It provides a router having a selective VPN connection function of the terminal, characterized in that it includes a terminal selection module to designate.

At this time, the NAT and forwarding module includes a NAT module that changes an IP address so that a plurality of terminals can communicate with an external VPN network or high-speed Internet network, and forwarding the assigned IP or some ports of the IP so that the terminal can use it directly. It is characterized in that it includes a forwarding module.

In addition, the terminal selection module selects and specifies a terminal to be connected to the VPN. If the selected terminal exists in the routing table, it designates a VPN route. If the designated terminal does not exist in the routing table, the corresponding routing table is automatically created and VPN It is characterized by designating a path.

In addition, the present invention;

The VPN connection module in charge of connecting to the remote VPN server, changes the IP address so that the terminal can communicate with an external VPN network or high-speed Internet network, and forwards the assigned IP or a part of the IP port so that the terminal can use it In the VPN connection method of a terminal using a router, comprising: a NAT and forwarding module that selects a terminal to communicate via VPN and a terminal selection module that specifies a VPN route A first step of checking whether it exists in the routing table; and a second step of designating a VPN route when the terminal designated through the first step exists in the routing table.

And after the first step and before the second step, if the designated terminal does not exist in the routing table, a third step of automatically creating a new corresponding routing table; characterized in that it further comprises.

According to the present invention, a VPN connection is possible by selecting one or more specific terminals while using the internal network environment in a general low-cost router environment in which a terminal can be used only by connecting to the Internet, so that various network environments can be constructed and utilized.

In particular, according to the present invention, secure communication using a specific terminal connected to the router is possible, and if the VPN server provides the necessary public IP, multiple servers can be operated, so that a VPN network can be established between telecommuting, server operation, and remote control, as well as between headquarters of various companies. It can be configured and operated inexpensively, and has the advantage of being able to configure VPN regardless of OS (operating system).

1 is a connection configuration diagram of a router having a selective VPN connection function of a terminal according to an embodiment of the present invention.
2 is a detailed configuration diagram of a router having a selective VPN connection function of a terminal according to an embodiment of the present invention.
3 is a diagram illustrating a VPN connection process using a terminal selection module according to the present invention.

Hereinafter, the characteristics of a router having a selective network connection function of a terminal according to the present invention and a network connection method of a terminal using the same will be understood by the embodiments described in detail with reference to the accompanying drawings.

1 and 2 are diagrams illustrating a router having a selective network connection function of a terminal according to an embodiment of the present invention.

First, the router 100 having a selective network connection function of a terminal according to the present invention selectively connects a plurality of terminals 200 provided in a building to the VPN network 300 or the high-speed Internet network 310 as an external network for data communication. to be able to perform

The router 100 is connected to the modem 400 and connected to the external network, so that some terminals 200a use the distribution function of a general router using the high-speed Internet network 310 as it is, and connect some terminals 200b to the VPN network. The terminal 200a may be set or changed to use the 300 .

In addition, it is possible to select to use the VPN network 300 or the high-speed Internet network 310 for some or all of the terminals 200a and 200b in the router 100. Other VPN networks (300a, 300b) can be used. In this case, in the case of the terminal 200b using the VPN network 300 , the assigned IP can be directly used, so that it can be directly connected to the VPN network 300 .

The router 100 of the present invention can selectively communicate data to the high-speed Internet network 310 through the NAT technology with the terminals 200 connected to the lower level, or communicate with a remote VPN server connected through the VPN technology. , it is possible to simultaneously use the VPN network 300 or the high-speed Internet network 310 according to the connection setting state in the plurality of terminals 200 connected to the router 100 .

For this, the router 100 includes a VPN connection module 110 in charge of connecting to a remote VPN server, and a terminal 200 connected to the router 100 connects to an external VPN network 300 or high-speed Internet network 310 ) change the IP address to communicate with the NAT and forwarding module 120, which forwards the assigned IP or a part of the IP port so that the terminal 200 can use it directly, and the terminal 200b to communicate with the VPN. and a terminal selection module 130 .

More specifically, the VPN connection module 110 is a processor in charge of connection to a remote VPN server, and connectionable methods include PPTP, L2TP, OpenVPN, and the like, and can be connected to multiple remote VPN servers. Each method goes through an authentication process, and a new interface is created for each connection.

And the NAT and forwarding module 120 is a NAT module (or processor) that changes the IP address so that the plurality of terminals 200 can communicate with the external VPN network 300 or the high-speed Internet network 310, and assignment It is a concept including a forwarding module (or processor) that forwards the received IP or some ports of the IP so that it can be directly used in the terminal 200 .

The NAT (Network Address Translation) module is a processor that allows a plurality of terminals 200 connected to the router 100 to communicate with an external network, and the forwarding module directly transmits an IP assigned to the router 100 or a part of the IP port. It is a processor that forwards so that it can be used in the terminal.

In addition, the terminal selection module 130 is a processor that selects a terminal 200b to communicate via VPN. When a terminal 200b to communicate via VPN is selected from among a plurality of terminals 200a and 200b, each individual routing table is automatically selected. Create and specify the path.

As shown in FIG. 3, when the terminal selection module 130 selects and specifies a terminal 200b to be connected via VPN (S1), the terminal selection module 130 checks whether the selected terminal 200b exists in the routing table (S2). If the terminal 200b designated through step S2 does not exist in the routing table, a corresponding routing table is automatically newly created. Designate. (S4)

Of course, if the terminal 200b designated through step S2 is created in the routing table in advance, it branches to step S4 without creating a new routing table and is designated as the corresponding VPN route.

The reason for selecting and specifying the method of selecting and designating the terminal selection module 130 as described above is to prevent the routing table from being duplicated, thereby preventing unnecessary work of each module (or processor) of the router 100 .

On the other hand, the router 100 of the present invention further includes a firewall module for controlling an IP or a part of the IP port when communicating with an external network in the VPN connection module 110 and the NAT module, so that the IP security of each client (terminal) can be strengthened

In addition, the terminal 200 may be used in various types of terminals such as a PC, a notebook computer, and a smart phone, and it is preferable to set the IP so that it can be included in the network implemented in the router 100 . At this time, although both DHCP and static IP setting methods are possible for the terminal 200 , in the present invention, when selecting the terminal 200b for VPN communication, IP is selected, so the static IP setting is more advantageous than using DHCP.

Hereinafter, a VPN connection example of a terminal using the router of the present invention will be described with reference to FIGS. 1 to 3 .

First, based on the IP address of the terminal 200 connected to the router 100, the terminal 200b to be connected to the VPN is selected so that secure communication with a remote location can be performed through the VPN. In this case, multiple remote VPN servers can be configured. The terminal 200b to be connected to the selected VPN may perform secure communication with a remote location by implementing tunneling with a pre-configured remote VPN server through the VPN connection module 110 .

To realize this, the terminal 200b to be connected to the VPN is selected through the terminal selection module 130 , and a route is designated to the VPN connection module 110 by selecting or creating a routing table.

At this time, the terminal 200b to be connected to the VPN is selected, and the terminal itself, which has selected the routing table, is included in the network environment provided by the remote VPN server through the VPN connection module 110 and does not receive an IP directly. Through port forwarding through the interface connected to the terminal, an IP can be directly assigned to the terminal.

For example, if the remote VPN server provides a public IP, port forwarding can be applied through the forwarding module and directly used as a web server using the public IP. Of course, other terminals not selected can access the Internet through the wan port.

Hereinafter, an embodiment of the present invention will be described with reference to FIGS. 1 to 3 .

The router 100 according to the present invention is connected to the modem 400 to enable the Internet through the wan setting.

Then, the internal network is set through the network setting of the router 100, and NAT technology is applied.

In addition, a plurality of terminals 200 are connected to the router 100 and IP is set to check whether the Internet becomes available. In this case, a terminal may be added using a switch.

Next, it is confirmed that the remote VPN server is configured and communication is possible. Multiple remote VPN servers are also possible.

Then, during the VPN connection to the router, select a remote VPN server, and set the connection ID and password.

When a client (terminal) 200b for VPN connection is selected and designated, the corresponding terminal 200b is connected to a remote VPN server through a routing table.

The above description is merely illustrative of the technical idea of the present invention, and various modifications and variations are possible without departing from the essential characteristics of the present invention by those skilled in the art to which the present invention pertains. The scope of protection should be interpreted by the following claims, and all technical ideas within the equivalent range should be construed as being included in the scope of the present invention.

100: router 110: VPN connection module
120: NAT and forwarding module 130: terminal selection module
200, 200a, 200b: Terminal 300, 300a, 300b: VPN network
310: high-speed Internet network 400: modem

Claims (5)

In the router 100 for performing data communication by selectively connecting a plurality of terminals 200 to a VPN network 300 or a high-speed Internet network 310 as an external network,
The router 100 includes a VPN connection module 110 responsible for connecting to a remote VPN server, and a terminal 200 connected to the router 100 with an external VPN network 300 or high-speed Internet network 310 and The NAT and forwarding module 120 for changing the IP address for communication and forwarding the assigned IP or a part of the IP port so that the terminal 200 can use it, and the terminal 200b to communicate with the VPN, select the VPN route A router having a selective VPN connection function of a terminal, characterized in that it comprises a terminal selection module 130 to designate.
The method of claim 1,
The NAT and forwarding module 120 includes a NAT module that changes an IP address so that a plurality of terminals 200 can communicate with an external VPN network 300 or high-speed Internet network 310, and an assigned IP or IP address. A router having a selective VPN connection function of a terminal, characterized in that it includes a forwarding module for forwarding some ports to be used directly in the terminal 200.
The method of claim 1,
When the terminal selection module 130 selects and specifies a terminal 200b to be connected to the VPN, if the selected terminal 200b exists in the routing table, it designates a VPN route, and the designated terminal 200b does not exist in the routing table. If not, a router with a selective VPN connection function of the terminal, characterized in that it automatically creates a corresponding routing table and designates it as a VPN route.
IP address so that the VPN connection module 110 responsible for connecting to the remote VPN server and the terminal 200 connected to the router 100 communicate with the external VPN network 300 or the high-speed Internet network 310 A NAT and forwarding module 120 that changes and forwards the assigned IP or a part of the IP port so that the terminal 200 can use it, and a terminal selection module that selects a terminal 200b to communicate with the VPN and specifies a VPN route In the VPN connection method of the terminal using the router 100 including 130,
a first step of checking whether the terminal 200b to be connected to the VPN is selected and specified, the selected terminal 200b is present in the routing table; and
a second step of designating a VPN route if the terminal 200b designated through the first step exists in the routing table;
A VPN connection method of a terminal using a router, comprising: 5. The method of claim 4,
After the first step and before the second step, if the designated terminal 200b does not exist in the routing table, a third step of automatically creating a new corresponding routing table; How to connect to a VPN.

Images