CN1732654A

CN1732654A - Internet connection system and server for routing connection to client device

Info

Publication number: CN1732654A
Application number: CNA2003801079542A
Authority: CN
Inventors: 石田宏树; 田中伸明; 草野隆史
Original assignee: Freebit Co Ltd
Current assignee: Freebit Co Ltd
Priority date: 2002-11-29
Filing date: 2003-12-01
Publication date: 2006-02-08
Anticipated expiration: 2023-12-01
Also published as: JP2004229265A; HK1173872A1; CN1732653A; JP2004282788A; CN1732654B; JP3649440B2; CN1732653B; JP3649438B2; ES2359811T3; JP3779971B2; JP2004194313A; JP3688282B2; JP2004194291A; JP2004194312A; JP2004254346A

Abstract

The purpose of the present invention is to provide an Internet connection system which is capable of benefiting from the IPv6 by relatively easy means and in which manufacturers of client-side devices can create added values for users. IPv6 packets are transmitted by a tunneling connection between a home network and a server on the Internet. Also terminal devices present in the home network can be uniquely recognized and controlled from outside via the server. Since all communications are performed via the server on the Internet regardless of the carrier and the ISP, the terminal device and all connections to the terminal device can be freely configured and controlled by the owner or the manufacturer of the server on the Internet.

Description

The internet connected system and be used for to the server that carries out Route Selection that is connected of client computer

The association request reference

The application advocates based on the application 2002-23845 in the Japanese patent application number, the priority of Treaty of Paris the 4th (and regulation of its corresponding various countries) of application 2003-161246 number, application 2003-35390 number, based on above-mentioned opinion, these specifications and accompanying drawing integrally are recorded in the application's the specification.

Technical field

The present invention relates under the present infrastructure environment that IPv4 (4: the 4 editions Internet protocols of Internet Protocol version) has popularized, realize to utilize IPv6 as follow-on IP (Internet Protocol version6: network construction the 6th edition Internet protocol), the above-mentioned server that the system of service is provided and uses for this reason from the IPv6 environment of server in family.

Background technology

Generally, by being that the service of the common network at center provides in the environment with the internet, the value of full detail is not to concentrate on client computer one side, but server one side.

In other words, as each terminating machine of client computer, the simple reading machine of the information on the internet basically only is used for reading.In addition, each client computer sends to internet one side with various information requirements, and internet one can be to obtain the information of this each client computer.In other words, full detail concentrates on internet one side, and only one side unilaterally provides typing information from the internet.Therefore, present situation is that the manufacturer who makes the client terminal machine is difficult to produce surcharge.

In order to change this situation, must make the access side opposite, with the position reversing of server and client computer.In other words, when existing with in-home network that the internet is connected, one side begins to visit in-home network from the internet, must produce the state that service is provided from in-home network one direction internet one side.

Therefore,, must can determine with unique, must solve the problem and the safety issue of the Route Selection in the family from internet network one with each machine of home-network linkups.Corresponding to this problem,, have IPv6 (the 6th edition Internet protocol, the 6th generation Internet Protocol) as a kind of technical solution of finding out.

Yet, because, can think that the universal of IPv6 needs considerable time around the communications carrier of present Japan and ISP's environment.Such as, the machine material depreciation subsistence level of the IPv4 that uses is 2 years～3 years now, just tests service.

Though present manufacturer realizes the IPv6 map network immediately and can only do the service that reaches the ISP level, because need very high cost, is unpractical for a lot of manufacturers.

The situation of in-home network is of all kinds very large difference, and the structure that communications carrier and ISP connect also has very big difference, must have to be used for digesting these difference realize the IPv6 environment with uniform way structure.

Summary of the invention

For achieving the above object, according to the 1st main points of view of the present invention, provide a kind of internet connected system, it is characterized in that its formation comprises: be connected, be arranged at the relay in the 1st network that communicates with the 1st communication protocol with client computer; This relay, is provided with in above-mentioned relay with the server that the 2nd communication protocol connects by the 2nd network: the above-mentioned client computer global address storage part of storing the global address in above-mentioned the 1st communication protocol of above-mentioned client computer; Store the server address storage part of the global address in the 2nd communication protocol of above-mentioned server; Being used for global address based on the server that is stored in this storage part makes the connection of sending from above-mentioned client computer carry out the 1st routing arrangement of Route Selection via above-mentioned server; By with the bag in the 1st agreement with the 2nd agreement package/unpack and above-mentioned server between establish the 1st bag processing unit that the protocol channel of the 1st agreement connects; In above-mentioned server, be provided with: for and above-mentioned relay between protocol channel be connected to become the 2nd bag processing unit that the bag in the 1st agreement can be carried out package/unpack with the 2nd agreement; The terminating machine global address administration device that global address in global address in the 1st agreement of the above-mentioned client computer that will be connected with above-mentioned relay and the 2nd agreement of above-mentioned relay manages explicitly; And carry out the 2nd routing arrangement to the Route Selection of above-mentioned relay based on the global address of the above-mentioned terminating machine of the management of management devices thus.

According to such formation, between network within the family and the internet one side's server, the IPv6 bag connects by protocol channel to be received and dispatched.So, can be from the outside discern and be controlled at the terminating machine that exists the in-home network uniquely by above-mentioned server.So, because all communication is all irrelevant with communications carrier and ISP, can be undertaken by above-mentioned internet one side's server, thus the terminating machine in the above-mentioned family and with whole can freely the setting and control that is connected of this terminating machine by the owner of above-mentioned internet one side's server.

In other words, the problem that in the past became Route Selection in the individual recognition to the IPv6 machine among IPv6 and IPv4 mix, family of problem and fail safe all can solve, and can realize the network construction of very open and sealing.

Herein, above-mentioned the 1st agreement and the 2nd agreement both can be different agreements, also can be identical agreements, and in optimum execution mode, above-mentioned the 1st agreement is IPv6, and the 2nd agreement is IPv4.

According to an embodiment of the present invention, whether in above-mentioned server, being provided with above-mentioned client computer of differentiation or/and above-mentioned relay is the machine judegment part of the machine of regulation.In this occasion, preferably in this server, also be provided with and utilizing above-mentioned machine judegment part to be judged as above-mentioned client computer or relay when not being the machine of regulation, according to the communication session cut-out portion with the transmitting-receiving of cutting off this communication session or restriction bag.In addition, preferably be provided with the order transformation component that order that judged result based on above-mentioned machine judegment part will send to client computer is transformed to the order of the prescribed form that is used for controlling this client computer.In addition, in above-mentioned server, the client computer control part of controlling above-mentioned client computer based on the judged result of above-mentioned machine judegment part is set preferably.

According to another embodiment of the present invention, in above-mentioned server, be provided with also whether the environment of differentiating with above-mentioned client computer or/and the 1st network that relay was connected is the network kind judegment part of the kind of regulation.In this occasion, preferably above-mentioned server has is judging that the non-public network environment be connected with above-mentioned client computer or relay is not the kind time-like of regulation, according to to cut off the communication session cut-out portion of the transmitting-receiving that this communication session or restriction wrap.In addition, in this occasion, preferably above-mentioned server, be provided with at least one or the state information obtaining section of a plurality of information in the operate condition of obtaining above-mentioned client computer or/and relay, user mode, the positional information, be more preferably this state information obtaining section, to obtain at least one or a plurality of information in the operate condition, user mode, positional information of above-mentioned client computer with the corresponding method of the machine of above-mentioned client computer.

According to other another execution mode, above-mentioned server, the combined information with at least one or a plurality of information in address based on above-mentioned client computer or relay, operate condition, user mode, the positional information is retrieved the search part of above-mentioned client computer or relay.In this occasion, preferably this search part has the means that each above-mentioned relay guide look shown the client computer that relay therewith is connected.So, in this occasion, preferably in above-mentioned server, also be provided with the client computer control part of the above-mentioned client computer of control, this client computer control part, making therewith by the client computer of selecting to determine from above-mentioned guide look shows, the corresponding client computer control program of client computer starts.

According to other another execution mode, in above-mentioned server, be provided with the client address search part of carrying out the retrieval of the global address in the 1st agreement of above-mentioned client computer based on connection request to above-mentioned client computer.In this occasion.Preferably in above-mentioned server, be provided with and be familiar with and permit or deny connection request person understanding portion the connection of above-mentioned client computer to carrying out people to the connection request of above-mentioned client computer.

According to other another execution mode, this system also has the protocol channel link information management devices of the protocol channel link information of management between above-mentioned relay and server, this protocol channel link information management devices, notify above-mentioned relay with the global address in the 2nd agreement of above-mentioned server, and notify above-mentioned server the global address in the 1st agreement of global address in the 2nd agreement of above-mentioned relay and above-mentioned client computer or its part.In this occasion, preferably above-mentioned protocol channel link information management devices carries out the understanding of above-mentioned relay or server, and carries out above-mentioned notice when being sure in this result.

According to other another execution mode, above-mentioned server, have with the filtration treatment device of predetermined rule to being dealt into/filtering from the communication of above-mentioned client computer.In this occasion, preferably above-mentioned server also has the filtering rule configuration part of the interface of the rule that is provided for editing afore mentioned rules.

According to other another execution mode, whether in above-mentioned relay, being provided with the above-mentioned client computer of differentiation is the machine judegment part of the machine of regulation.In this occasion, preferably in above-mentioned relay, be provided be judged as according to above-mentioned machine judegment part above-mentioned client computer be not the regulation machine the time, according to to cut off the communication session cut-out portion of this communication session.

According to the 2nd main points of view of the present invention, a kind of relay is provided, have with client computer the above-mentioned relay that uses in the internet connected system of the server that the relay that is connected, is arranged in the 1st network that communicates with the 1st communication protocol and this relay be connected with the 2nd communication protocol by the 2nd network, it is characterized in that in above-mentioned relay, being provided with: the above-mentioned client computer global address storage part of storing the global address in above-mentioned the 1st communication protocol of above-mentioned client computer; Store the server address storage part of the global address in the 2nd communication protocol of above-mentioned server; Being used for global address based on the server that is stored in this storage part makes the connection of sending from above-mentioned client computer carry out the 1st routing arrangement of Route Selection via above-mentioned server; By with the bag in the 1st agreement with the 2nd agreement package/unpack and above-mentioned server between establish the 1st bag processing unit that the protocol channel of the 1st agreement connects.

According to the 3rd main points of view of the present invention, a kind of server is provided, a kind of have with client computer an above-mentioned server that uses in the internet connected system of the server that the relay that is connected, is arranged in the 1st network that communicates with the 1st communication protocol and this relay be connected with the 2nd communication protocol by the 2nd network, it is characterized in that being provided with in above-mentioned server: for and above-mentioned relay between protocol channel be connected to become the 2nd bag processing unit that the bag in the 1st agreement can be carried out package/unpack with the 2nd agreement; The terminating machine global address administration device that global address in global address in the 1st agreement of the above-mentioned client computer that will be connected with above-mentioned relay and the 2nd agreement of above-mentioned relay manages explicitly; And carry out the 2nd routing arrangement to the Route Selection of above-mentioned relay based on the global address of the above-mentioned terminating machine of the management of management devices thus.

According to the 4th main points of view of the present invention, a kind of server is provided, be a kind of relay that is arranged in the 1st network that has; The above-mentioned server that uses in the internet connected system of the server that connects by above-mentioned relay and internet of the client computer that is connected of the 1st network therewith; It is characterized in that the client address management devices that the address of the address of the above-mentioned client computer that will be connected with above-mentioned relay and above-mentioned relay manages explicitly; Based on the address of the above-mentioned client computer of in above-mentioned management devices, being managed, will carry out the routing arrangement of Route Selection to the above-mentioned relay that connects above-mentioned client computer to the connection of above-mentioned client computer from above-mentioned internet; Whether differentiate above-mentioned client computer or/and above-mentioned relay is the machine judegment part of the machine of regulation; The order that will send to above-mentioned client computer based on the judged result of above-mentioned machine judegment part is transformed to the order transformation component of the order of the prescribed form that is used for controlling this client computer.

According to this formation, can be identified in the terminating machine that exists the in-home network uniquely from the outside by above-mentioned server.So, because all communication is all irrelevant with communications carrier and ISP, can be undertaken by above-mentioned internet one side's server, thus the terminating machine in the above-mentioned family and with whole can freely the setting and control that is connected of this terminating machine by the owner of above-mentioned internet one side's server.

According to an embodiment of the present invention, also be provided with and be judged as above-mentioned client computer or relay according to above-mentioned machine judegment part when not being the machine of regulation, according to the communication session cut-out portion with the transmitting-receiving of cutting off this communication session or restriction bag.

In addition, according to another embodiment of the present invention, above-mentioned client computer can be communicated by letter with above-mentioned relay, but comprises the peripheral unit that oneself can not be connected with the internet.

According to another other execution mode, also be provided with the environment of differentiating the 1st network that is connected with above-mentioned client computer or/and relay and whether be the network kind judegment part of the kind of stipulating.In this occasion, preferably also have and be judged as the kind time-like that the non-public network environment that is connected with above-mentioned client computer or relay is not a regulation, according to the communication session cut-out portion with the transmitting-receiving of cutting off this communication session or restriction bag.

According to another other execution mode, also have at least one or the state information obtaining section of a plurality of information in the operate condition of obtaining above-mentioned client computer or/and relay, user mode, the positional information.In this occasion, preferably above-mentioned state information obtaining section is to obtain at least one or a plurality of information in the operate condition, user mode, positional information of above-mentioned client computer with the corresponding method of the machine of above-mentioned client computer.In addition, be more preferably the client computer control part that the above-mentioned client computer of control also is set, this client computer control part has the means that show at least one information in the operate condition, user mode, positional information of above-mentioned client computer to the user.

In addition, the combined information that also has at least one or a plurality of information in address based on above-mentioned client computer or relay, operate condition, user mode, the positional information is retrieved the search part of above-mentioned client computer or relay.Preferably this search part have will retrieval the client computer guide look of having a guide look of demonstration with its operate condition show means.In addition, above-mentioned guide look shows means, be to each above-mentioned relay therewith the client computer that is connected of relay have a guide look of device shown.In addition, preferably also be provided with the client computer control part of the above-mentioned client computer of control, this client computer control part, making therewith by the client computer of selecting to determine from above-mentioned guide look shows, the corresponding client computer control program of client computer starts.

According to another other execution mode, above-mentioned relay is arranged in the above-mentioned client computer.

According to another kind of execution mode, also be provided with: for make and above-mentioned relay between protocol channel be connected to become may be by with the 2nd bag processing unit of the bag in the 1st agreement with the 2nd agreement package/unpack; The terminating machine global address administration device that global address in global address in the 1st agreement of the above-mentioned client computer that will be connected with above-mentioned relay and the 2nd agreement of above-mentioned relay manages explicitly; And carry out the 2nd routing arrangement to the Route Selection of above-mentioned relay based on the global address of the above-mentioned terminating machine of the management of management devices thus.Above-mentioned the 1st agreement and the 2nd agreement both can be different agreements, also can be identical agreements.

In addition, preferably also be provided with the client address search part of carrying out the retrieval of the global address in the 1st agreement of above-mentioned client computer based on connection request to above-mentioned client computer.In this occasion.The people who preferably also is provided with the connection request of the above-mentioned client computer of subtend is familiar with and permits or deny connection request person understanding portion to the connection of above-mentioned client computer.

In addition, this server also has the protocol channel link information management devices of the protocol channel link information of management between above-mentioned relay and server, this protocol channel link information management devices, notify above-mentioned relay with the global address in the 2nd agreement of above-mentioned server, and obtain global address or its part in the 1st agreement of global address in the 2nd agreement of above-mentioned relay and above-mentioned client computer.Herein, preferably above-mentioned protocol channel link information management devices carries out the understanding of above-mentioned relay, and carries out above-mentioned notice when being sure in this result.

According to other another execution mode, also have with the filtration treatment device of predetermined rule to being dealt into/filtering from the communication of above-mentioned client computer.In this occasion, preferably also has the filtering rule configuration part of the interface that is provided for editing the afore mentioned rules rule.

According to the server that in internet of the present invention connected system, uses, can utilize relatively easy means to enjoy the benefit of IPv6, and can provide the manufacturer of the machine of making client computer one side can find the internet method of attachment of surcharge alone.

Other other features of the present invention and significant effect for those skilled in the art can be by obtaining understanding with reference to execution mode and the accompanying drawing recorded and narrated in the best mode of inventing below being used for implementing.

Description of drawings

Fig. 1 is the figure that the network configuration example of an embodiment of the invention is shown.

Fig. 2 is the summary pie graph that the example of same InterBOX is shown.

Fig. 3 is the summary pie graph that the example of same InterServer is shown.

Fig. 4 is the summary pie graph that filter house is shown.

Fig. 5 is the flow chart that is illustrated in the processing in the filter house.

Fig. 6 is the summary pie graph that IPv6 terminal search part is shown.

Fig. 7 is the illustration that searching picture is shown.

Fig. 8 is the illustration that the result for retrieval tabulation demonstration that relates to InterBOX is shown.

Fig. 9 is the concept map that the control that utilizes IPv6 terminal control part is shown.

Figure 10 is the function diagram that the communication example of this execution mode is shown.

Figure 11 is the function diagram that another communication example of this execution mode is shown.

Figure 12 is the figure that example is set that InterBOX or IPv6 terminal are shown.

Figure 13 illustrates the illustration that InterBOX is connected with protocol channel between InterServer.

Embodiment

With reference to the accompanying drawings embodiments of the present invention are described.

Fig. 1 is the figure that the network configuration example that relates to present embodiment is shown.

1 is the various client computer IPv6 terminals 2 that communicate with IPv6 (the 1st communication protocol) (below be called " IPv6 terminal ") among the figure ... the IPv6 home network that is formed by connecting.This home network 1, such as, constitute by the LAN that imports each family.

So this home network 1 is connected with internet 4 through InterBOX and communications carrier/ISP.In this internet 4, utilize the IPv4 (2nd communication protocol) that widely popularize now different to communicate with above-mentioned IP v6.

So, in this internet 4, be connected with the InterServer6 (" server " of the present invention) of the communication of the IPv6 terminal 2 of control on the above-mentioned home network 1.This InterServer6 describes in detail as the back, has the function of whole IPv6 terminal 2a, 2b on above-mentioned IP v6 terminal 2, the internet 4 or on other families/global network 1a, 1b, connection between the IPv6 server 7 being carried out intermediary.

So InterBOX3 and InterServer6 are that intention is made by same manufacturer or under unified specification, are designed to the device of interlock in advance.So, in InterBOX3, store the privately owned address among the IPv4 of InterServer6 in advance, constantly carry out protocol channel and be connected with ISP and communications carrier are irrelevant with above-mentioned InterServer6.In addition, for the IPv6 terminal 2 that is connected with above-mentioned home network 1, also be intended to by with same manufacturers such as above-mentioned InterBOX3 or under unified specification, make, based on global address, other information of the IPv6 that distributes to this IPv6 terminal 2, can determine in kind (machine) of this terminal of above-mentioned InterServer6 one side etc.

At this, about the whole bag of tricks that is assigned of the IPv6 address of IPv6 terminal 2.The IPv6 address constitutes by 128, by partly forming by " prefix " part of NIC and ISP distribution with at " the interface ID " that generated alone by the user of its latter half of setting of setting at its first half.In this example, also be to use the prefix of distributing and " interface " part that the intrinsic MAC Address of each terminal generates to form by each manufacturer.This IPv6 address both can determine before terminal 2 is dispatched from the factory already, also can be to generate automatically by be connected IPv6 address prefix and the MAC Address of oneself of utilizing this InterBOX3 with InterBOX3.In addition, above-mentioned IP v6 terminal 2 also can be the video tape recorder and the such household electrical appliances of television set that itself can not be connected with the internet.In this occasion, in above-mentioned InterBOX, be provided with the interface (IEEE1394) that these household electrical appliances can be communicated by letter, can distribute virtual ip address to the ID (unique ID) of each household electrical appliances.

Fig. 2 is the summary pie graph that above-mentioned InterBOX3 is shown.

This InterBOX3 has: the server address storage part 10 of storing the global address among the IPv4 of above-mentioned InterServer6; Based on the address of this InterServer6 and InterServer6 between establish the protocol channel session establishment portion 11 that protocol channel connects; With the bag among the IPv6 with IPv4 carry out package/unpack be used for and above-mentioned InterServer6 between carry out the protocol channel transmitting-receiving package handling part 12; Be used for above-mentioned bag from above-mentioned InterServer6 one side of unpacking is carried out the Route Selection handling part 13 that Route Selection connects to desired IPv6 terminal 2; And the pack receiving and transmitting portion 14 of the transmitting-receiving of wrapping.In addition, this InterBOX3 is provided with in order to utilize the prefix of distributing to InterBOX3 to generate the prefix storage part portion 15 (address generating unit) of occasion etc. of the address of IPv6 terminal 2.

According to this formation, can be by the passage that utilizes IPv4 between above-mentioned InterServer6 and InterBOX3, established to receiving and dispatching from the bag of above-mentioned IP v6 terminal 2 or the bag of issuing IPv6 terminal 2.

In addition, Fig. 3 is the summary pie graph that above-mentioned InterServer6 is shown.

In this InterServer6, have: with the address storage part 16 of the global address 16b association store among the IPv6 of global address 16a among the IPv4 of InterBOX3 and above-mentioned client computer; Based on the address of above-mentioned relay 3 and this InterBOX3 between establish the protocol channel session establishment portion 17 that protocol channel connects; For make and above-mentioned network home appliance 2 between communication become the package handling part 18 that the bag among the IPv6 may be carried out package/unpack with IPv4; And the Route Selection portion 19 that the communication between above-mentioned IP v6 terminal 2 and another terminal/server is carried out Route Selection.In addition, this InterServer6 has: based on the IPv6 address of above-mentioned IP v6 terminal 2, differentiate the machine judegment part 21 of the kind of this IPv6 terminal 2; The order that to issue above-mentioned IP v6 terminal 2 based on this differentiation result is transformed to the order configuration part 22 that defined order is set; The filter house 23 that the IPv6 bag that passage is sent filters with predetermined rule; And the communication session cut-out portion 24 that cuts off the occasion communication session of regulation.So the transmitting-receiving of bag is undertaken by transmitting-receiving handling part 25.

In addition, this InterServer6 is connected with subscriber management server 30.This subscriber management server 30, describe in detail as following, it is the user's of management each InterBOX3 and each IPv6 terminal 2 the server of information, have the membership informations such as ID, password and nuclear money information except each user, also the subscriber information management DB31 of storing IP v6 prefix and machine information etc.

And then this InterServer6 has in the internet 4 (IPv4 networks) and goes up disclosed Web server 32, can accept the requirement that the user by above-mentioned InterBOX3 and IPv6 terminal 2 sends and carry out various settings.Such as, at least a portion of the filtering rule of above-mentioned filter house 23 can be passed through this Web server 32, carries out suitable change by above-mentioned user.In addition,, both can carry out, also can carry out through internet 4 without these through InterBOX3 and InterServer6 to the visit of this Web server 32.

Above-mentioned filter house 23 as shown in Figure 4, has filtering rule storage part 33 and filtering rule configuration part 34.This filtering rule storage part 33 and filtering rule configuration part 34 and are connected at disclosed above-mentioned Web server 32 on the internet, in above-mentioned Web server 32, as shown in Figure 3, the InterServer session are installed with interface generating unit 35.The user of Web server 32 connections shows on the terminal of oneself by the interface with interface generating unit 35 generations thus therewith, just can import/change filtering rule.As the filtering rule that can set herein, such as, can consider to relate to the filtering rule of fail safe.

As the filtering rule of fail safe aspect, can be divided into substantially: 1. do not approve from the outside any visit of home network one side; 2. except the server (Web website) and network of approval in advance, do not approve from the visit of outside to home network one side; 3. do not limit from the outside any visit of home network.In addition, as the filter method of this moment, both can be the method for not approving any visit, also can be only to pass through particular port.

About visit,, just can prevent that children from visiting harmful interior (trap is set) website that prevents that perhaps user capture is generally illegal herein, if can make and can not the server of prior setting be conducted interviews by limiting from 1 pair of outside of home network.

In addition, the setting of this filtering rule can be carried out after the understanding of IP address that utilizes user's understanding portion 36 that can be connected with the above-mentioned subscriber management server 30 in being arranged at above-mentioned Web server 32 and password.

Above-mentioned filtering rule configuration part 34, as mentioned above, filtering rule is set in the input that is based on the user, in addition, also can have the setting that does not rely on from the user, and be based on the function that the membership information (information of nuclear money information and terminal machine) that is stored in the above-mentioned subscriber management server 30 generates filtering rule automatically.Such as, according to above-mentioned member's attribute and the membership dues situation of paying dues, set and disapprove the gateway that connects or connect only specific server etc.

As the filtering rule of this gateway, can be used to control the supplier that chargeable service is provided by this InterServer6.Such as, as shown in Figure 3, acting server 38 is set in above-mentioned InterServer6 and, also can be that the user can only connect the visit destination of being set by above-mentioned filtering rule configuration part 34 by the visit destination of DB39 leading subscriber.In this occasion, wish outside above-mentioned user ID and password, also install by above-mentioned user management DB31 and manage this user with signatory which kind of service (server) of which kind of condition and according to the function of this condition control transaction.In addition, for specific supplier, also can be set at login formality uncompleted user is only made it see the sample page or leaf and can't see main part or the like.

Fig. 5 is the flow chart that is illustrated in the processing in this filter house 23.After at first the protocol channel session begins,, set filtering rule (step S1) based on the membership information of accepting from above-mentioned subscriber management server 30.Then, accept information (such as, the address of Web website) (step S2) from the above-mentioned user's of above-mentioned acting server 38 connection request destination.Then, this information that connects the destination is applicable to above-mentioned filtering rule, judgement could connect (step S3), in the occasion that mustn't connect, by above-mentioned communication session cut-out portion 24 communication session is cut off (step S4).In the occasion that permission connects, judge whether session goes back effectively (step S5), in effective occasion, reprocessing above-mentioned steps S2～S5.In invalid occasion, end process.

In addition, also can utilize above-mentioned acting server 38, the traffic of instrumentation data is for approving from the visit of not paying nuclear money person.In this occasion, for supplier, only notify user's ID, do not notify this user's password and IP address.Therefore, the user can only manage a pair of ID and the password that InterServer6 uses.In addition, because the IP address is sometimes owing to user's relation or other reasons change, utilize key confirmation ID also is being suitable aspect the consistency of system at every turn, so for to carry out the danger of unauthorized access be suitable owing to having data supplier one side in order to get rid of.

The execution of above-mentioned filtering rule and be the enforcement of the cut-out of communication session of basis and connection etc. with it can be undertaken by above-mentioned communication session cut-out portion 24.In addition, because utilize the filter method of the filtering rule that sets, gateway approach and other methods all are known, its explanation of Therefore, omited.

In addition, above-mentioned InterServer6 has the IPv6 terminal search part 26 (Fig. 3) of function that the people who is provided for making the address of not knowing above-mentioned IP v6 terminal 2 carries out the retrieval of this IPv6 terminal 2.This search part 26 can be according to user appointed information, such as, based on retrieval such as the operating state of IPv6 terminal 2 and the operating state of network and determine desirable IPv6 terminal 2.

Therefore, this search part 26 as shown in Figure 6, has the state information receiving portion 40 of the state information of the operating state of accepting the above-mentioned IP v6 terminal 2 be connected with above-mentioned IP v6 network and InterBOX3 and the state of network etc.; State information accumulation portion 41 with the IP address correlation accumulation of the IP address of this information and above-mentioned IP v6 terminal and InterBOX3; And IPv6 terminal control part 42.

Above-mentioned state information receiving portion 40 is accommodated the prefix of above-mentioned IP v6 terminal 2 or the state that territory (IPv6 network or InterBOX3) accepts each IPv6 terminal 2 to each.Than state information receiving portion 40, both can be to each above-mentioned prefix and territory, accept its state by query State with the cycle of regulation, also can when having, obtain state by inquiry at the requiring of the reference in each prefix or territory.Under the former situation of method, such as, to logining in the inquiry of the ON/OFF of the per power supply that carried out each terminal 2 in 1 minute of each relay of above-mentioned InterBOX address storage part 16a.

Above-mentioned state information accumulation portion 41, with the state information of above-mentioned each IPv6 terminal 2, IPv6 terminal and InterBOX3 store explicitly therewith.Herein, the state information that obtains can be divided into substantially: the information of expression operate condition, user mode, positional information, characteristic; The information that node (InterBOX3 and IPv6 terminal 2) is possessed is shown; Be to determine in the effective information of other nodes at least one or a plurality of.

Be one or more in the state, network connection state, communications status of power supply at least as action message.As user mode relate at least the user information, the information that relates to operate time, relate to one or more in the information of load.Positional information is geographical position and coordinate information, postcode, house numbers or the like at least.As the information that characteristic is shown one or more among the information of kind, function, shape, color, device information, software information, function, manager etc. of node.

In addition, the machine that utilizes above-mentioned IP v6 machine judegment part 21 to differentiate is also deposited as state information respectively.Above-mentioned state information receiving portion 40, based on the definite information that obtains from above-mentioned IP v6 terminal 2 of this machine information, can be to obtain essential information with its form that is fit to.

Above-mentioned search part 26 also possesses the connection request understanding portion 27 that the people who carries out above-mentioned retrieval or connection request to being connected with above-mentioned subscriber management server 30 carries out understanding, permission retrieval and connection request.Such as, to user's home network (InterBOX3), for this network, retrieval and connection except the specific user that permission connects all disapprove.Be judged as when sure in this understanding portion 27, these search part 26 above-mentioned state information accumulation portion 41 of visit and address storage parts 16 are retrieved the address (determining InterBOX3) of desirable terminal 2.

The result of retrieval, such as, use personal computer under the situation of the InterBOX3 of the home network of external retrieval oneself the user, also this state of whole IPv6 terminals 2 that can be connected with this InterBOX3 demonstration of tabulating.Fig. 7 illustrates the example of searching picture, and Fig. 8 is the illustration that the tabulation demonstration of the InterBOX3 that relates to the deterministic retrieval result is shown.With in the example of interface, be provided with the input field 44 that is used for retrieving the input field 43 of InterBOX3 and is used for retrieving IPv6 terminal 2 in retrieval shown in Figure 7, its programming becomes and can retrieve from any one.

In addition, in the example that the tabulation of the result for retrieval of Fig. 8 shows, the whole terminals 2 that are connected with above-mentioned InterBOX3 are with the demonstration of tabulating of the information of the owner, state, kind and machine name.So when pressing in the drawings the operation screen the Show Button with 45 expressions, above-mentioned terminal control part 42 starts, and shows kind and the corresponding operation screen of machine (not shown) with relevant terminal 2 at every turn.

Fig. 9 is the concept map that the control that utilizes above-mentioned control part 42 is shown.

At first, IPv6 terminal 2 when InterBOX3 is in by the protocol channel session with state that InterServer6 is connected, is used to the requirement from above-mentioned state information receiving portion 40, notifies its operating state (step S11).At this moment, also can be just can not obtain above-mentioned operating state from above-mentioned control part 42 logins of IPv6 terminal 2 one directions.Obtaining of above-mentioned operating state carried out with certain cycle, accumulated in the above-mentioned state information accumulation portion 41 and upgraded (step S12).

Then, the user of above-mentioned IP v6 terminal 2 utilizes ID and password to login from the outside, from above-mentioned tabulation, as mentioned above, determines the terminal that will control and starts above-mentioned control part 42 (step S13).This control part 42 is handled complete order in the server place and the order that will be fit to sends to above-mentioned terminating machine and it is controlled.

In addition, also can be by selecting the terminal name from above-mentioned tabulation, carry out Route Selection and connect to selected IPv6 terminal.In addition, also can import the state of determining by search condition and retrieve, and find the occasion of this terminal, be directly connected to this terminal.In addition, even be connected irrelevantly when by the Web website this terminal being retrieved with protocol channel, establish protocol channel with being connected of this terminal and is connected and carries out afterwards from the outside by InterServer6.

Herein, so-called " protocol channel " is to be used for that (router) is the technology that between particular router the IPv6 bag is exchanged with the IPv4 package through the interconnective technology of IPv4 network between the network with IPv6.

In addition, above-mentioned each inscape 1O～42 of above-mentioned InterBOX3 and InterServer6, be actually certain zone of guaranteeing and be installed on wherein computer software programs, be used for controlling these hard disks and read and carry out that peripheral equipments such as the CPU of said procedure, RAM, other input/output units constitute by the hard disk that is arranged in the computer system.

In addition, above-mentioned InterBOX3 preferably is made of a computer system that comprises each terminal 2, and above-mentioned InterServer6 is preferably by interconnected a plurality of computer system constitutes for load is disperseed.Such as, the network home appliance search part 26 of the state of managing I nterBOX3 and IPv6 terminal 2 and home network preferably is made of the server with special-purpose transmitting-receiving interface and control part.This is that load must disperse event because estimating the ON/OFF of each machine of management and the so-called session meeting of other states enlarges.In addition, with the InterBOX and the corresponding occasion of IPv6 terminal of a plurality of different manufacturers, above-mentioned package handling part 18 and order configuration part 22, filter house 23 etc. also can be provided with a plurality of in an InterServer6.

Described in detail below with reference to the action of the communication example below Figure 10 above-mentioned InterBOX3 and InterServer6.

Figure 10 be illustrated in the home network that is connected with InterBOX3 IPv6 terminal 2 and with above-mentioned InterServer6 directly or the occasion that communicates between the IPv6 server 7 that is connected through IPv6 home network 1a.

In this example, in above-mentioned InterServer6, as shown in this figure, prerequisite is to store the IPv6 address 16a of above-mentioned IP v6 terminal 2 and the IPv4 global address 16b of InterBOX in advance.Therefore, above-mentioned IP v6 terminal 2 must be in advance, such as, by above-mentioned InterBOX3 or other means IPv6 address to above-mentioned InterServer6 notice oneself.This action also can, such as, by the user own IPv6 terminal 2 is connected to above-mentioned home network 1, utilize plug-and-play feature, automatically and above-mentioned InterServer6 between establishment be connected with the protocol channel of InterBOX3 and realize.Above-mentioned InterServer6, after the IPv6 address of knowing this IPv6 terminal 2 or its part (the IPv6 address prefix of InterServer6), other ISP router is circulated a notice of (broadcasting) Route Selection of this IPv6 address is undertaken by InterServer6 so that make.

In addition, depend on the occasion of the prefix of distributing to above-mentioned InterBOX3 in the IPv6 address of above-mentioned IP v6 terminal 2, also the IPv6 prefix of above-mentioned InterBOX3 that constitutes the part of this address 16a can be deposited, as the address 16a that is stored in the IPv6 terminal 2 among the above-mentioned InterServer6.So in this occasion, above-mentioned InterServer6 notifies the routing information of this prefix other ISP router.

Under the state that above processing and setting (protocol channel connection) have been finished, proposing from above-mentioned IP v6 server 7 one sides behind the connection request of above-mentioned IP v6 terminal 2, the connection of IPv6 server 7 from then on is routed to InterServer6.InterServer6 tells the IPv4 address of above-mentioned InterBOX3 from the address 16a of above-mentioned IP v6 terminal 2, utilize above-mentioned protocol channel session establishment portion 17,11 with above-mentioned InterBOX3 between establish the communication session of protocol channel in being connected.

So, when establishing the protocol channel communication session, issue the bag of mentioned order configuration part IPv6 terminal 2, by above-mentioned package handling part 18 to carry out package towards the IPv4 of above-mentioned InterBOX3 bag and to send.InterBOX3, when package handling part 12 was unpacked this bag, above-mentioned Route Selection handling part 13 carried out handling to the Route Selection of above-mentioned IPv6 terminal 2 according to the address that is contained in the IPv6 terminal 2 in the above-mentioned bag.So, such as, can utilize from the startup that is in outside IPv6 server 7 one sides carry out with in-home network on being connected of IPv6 terminal 2.

Such as, be in the family during monitoring camera at above-mentioned network home appliance 2, even out the time,, can and control above-mentioned camera via above-mentioned InterServer6 and InterBOX3 startup by own PDA etc. is connected with near IPv6 network.

In addition, in this example, can make IPv6 terminal machine judegment part 21, order configuration part 22 and filter house 23 work that are arranged among the InterServer6 according to the machine of terminal 2.

The formation of above-mentioned machine judegment part 21, such as, can differentiate the machine and the network environment of this IPv6 terminal 2 based on the IPv6 address of above-mentioned IP v6 terminal (address itself or the information that is associated with the address).In the present embodiment, imagination above-mentioned IP v6 terminal 2 and InterServer6 make by same manufacturer or according to unified specification, in this occasion, by to allocating the certain rule of IPv6 address setting in advance, just can be easy to differentiate this machine and network environment as long as known this address to (or generation) each IPv6 terminal 2.In this execution mode,, differentiate manufacturer and machine based on above-mentioned prefix portion and the MAC Address portion in the above-mentioned IP v6 address.

In addition, need the occasion of special order in this IPv6 terminal of control 2, above-mentioned machine order configuration part 22 can be by setting the order conversion that comprises in will the communication from above-mentioned IP v6 server 7 order used of machine for this reason.Such as, can be from generate the order of regulation with the message of Html language description.In addition, also the order that a server 7 sends can be transformed to the order that is used for a plurality of IPv6 terminals 2.

In addition, above-mentioned filter house 23 has the function that will filter by the IPv6 bag of this InterServer6 based on predetermined rule.The rule of this filtration, such as, both can set as the IPv6 terminal 2 that connects the destination each, also can set each network.In addition, its formation can be to be judged as the machine and the occasion of network environment that is not regulation by above-mentioned machine judegment part 21 and to be judged as above-mentioned filter house 23 inappropriate occasions, and above-mentioned communication session cut-out portion can cut off communication session.In addition, even be in OFF state or the like and the occasion that can not connect at the power supply of the IPv6 terminal that connects the destination, if can utilize the destination that is connected that another IPv6 machine of being connected with same InterBOX replaces, also can be routed to this other IPv6 terminals based on above-mentioned machine and kind of information.

In addition, Figure 11 is for having between relay 3,3 ' the IPv6 home network example via the interconnective occasion of InterServer6 simultaneously.With in each home network, IPv6 terminal A is connected respectively with IPv6 terminal B, and the occasion that communicates between these two IPv6 terminal A, B is that example describes.

In this case, also in above-mentioned InterServer6, IPv6 terminal A, B address or its part (IPv6 prefix) separately deposited explicitly with the IPv4 address of separately InterBOX3.

So, requiring when a terminal A is connected with another terminal B, at first between terminal A one side's InterBOX3A and the InterServer6 in passage connects the establishment communication session.So, based on the address among the terminal B that is contained in this bag, determining above-mentioned InterBOX3B, the result establishes the protocol channel communication session between this InterServer6 and InterBOXB.So, in this InterBOXB,, in network, carry out Route Selection based on the IPv6 address among the terminal B that is contained in this bag.

Thus, two IPv6 terminals 2 can utilize IPv6 to communicate through above-mentioned InterServer6 each other.

In addition, want like this under situation about communicating between two IPv6 terminals 2, do not know to connect the address of the IPv6 terminal of destination sometimes.In this case, connect the user in source, visit above-mentioned InterServer6, start above-mentioned network home appliance search part 26.At this moment, for the sake of security, above-mentioned connection request understanding portion 27 carries out this user's understanding, and after judging whether to be proper connection request, permission connects the IPv6 terminal of destination and user's retrieval.So,, just can establish the tunneling traffic session based on the IPv6 address of this terminal in the occasion that can determine desired IPv6 terminal.

According to above such formation, because it is all irrelevant with communications carrier and ISP to relate to whole communications of IPv6 terminal 2, IPv6 terminal 2 on the home network of family and work unit and server 7 undertaken by above-mentioned InterServer6, so can freely be set by the owner of above-mentioned InterServer6 and control.As a result, the problem that in the past became Route Selection in the individual recognition to the IPv6 machine among IPv6 and IPv4 mix, family of problem and fail safe all can solve, and can realize the network construction of very open and sealing.

In addition, the owner who imagines this InterServer6 herein is the manufacturer as the producer of common IPv6 terminal 2.So this manufacturer just can produce the additional increment that utilizes the internet by to the adjustment of the machine of the IPv6 of the corresponding our company of InterServer6 therewith.

Based on Figure 12 the adjustment of above-mentioned IP v6 terminal 2 is illustrated below.

In other words, in the above description, the IPv6 address of IPv6 terminal 2 is accepted from above-mentioned InterBOX3 one side, in fact, also can consider the method various methodologies in addition.In addition, can think,, wish the owner's (user) of understanding IPv6 terminal 2 information as the owner of manufacturer and InterServer6.And then, can think, also described about the generation method of the address of IPv6 terminal 2 just like preceding, just the fixedly IPv6 address of each network home appliance is written to the situation of RAM etc., the also situation of the IPv6 prefix of the InterBOX3 of reliable connection decision in the stage of dispatching from the factory.

So, in the present embodiment, such as, as shown in figure 12, the user of IPv6 terminal 2 or InterBOX3 at first is connected with subscriber management server 30, carries out user's login.This user login both can utilize IPv6 terminal 2 to be undertaken by InterBOX3, also can utilize the IPv4 of existing microcomputer etc. the corresponding machine of communicating by letter to carry out.Below the occasion of being undertaken by IPv6 terminal 2 and InterBOX3 is described.In addition, below, the IPv6 address of IPv6 terminal 2 is that the occasion that the MAC Address combination by the IPv6 address prefix of distributing to above-mentioned InterBOX3 and each terminal 2 generates is that example describes.

In this case, at first, the user with above-mentioned IP v6 terminal with after InterBOX3 is connected, this InterBOX3 is connected to subscriber management server 30 through the ISP/ communications carrier.So, this subscriber management server 30 of necessary information untill further notice that just can will be connected with the protocol channel between other above-mentioned InterServer6 of above-mentioned IP v6 prefix from InterBOX3.In addition, the user just can determine the information of this user, InterBOX3 or IPv6 terminal 2 with being used for and relate to the essential information of the kind of information of terminal 2, the information that relates to network 1, other nuclear moneys etc. to notify above-mentioned management server 30 by this InterBOX3.In this example, each this InterBOX3 or each user are provided ID and password respectively, above-mentioned InterBOX3 and user's information signs in to database 31 therewith explicitly.In addition, the information that must login is not limited thereto, and can think that other information also need, otherwise, in password and nuclear money information etc. when not required, just do not need to login these information.

In addition, the IPv6 address prefix of above-mentioned InterBOX3 both can be during fabrication or the like be allocated in advance and was deposited in this InterBOX3, also can be so be known by server one square tube when the beginning by user's login.In addition, in the latter case,, can in InterBOX3, set above-mentioned IP v6 prefix and above-mentioned ID and password with manual mode not utilizing existing personal computer etc. in the occasion of carrying out user's login on the internet by InterBOX3.So, after this user logins end, the information of necessity when also storage connects in above-mentioned InterBOX3 and IPv6 terminal 2.In this occasion, be arranged at the machine judegment part among the above-mentioned InterServer, also can differentiate based on carrying out machine by the information of user's login.

Above-mentioned this subscriber management server 30 both can be connected with above-mentioned InterServer6, also can be provided with independently separated on the internet.

On the other hand, Figure 13 illustrates that relevant protocol channel connects and the figure of the embodiment of the concrete grammar of the establishment of communication session wherein.Corresponding at each symbol of S21～S26 shown in this figure with each following step S21～S27.

At first, among the embodiment that in above-mentioned, illustrates, the IPv4 address of InterBOX3 storage InterServer6, but this both can be the method that is recorded RAM by manufacturer when dispatching from the factory in advance, also can be the method that other servers are set that is accepted in when the protocol channel of reality connects.Can think that a kind of method is better before InterServer6 is single occasion, and a kind of method efficient is higher after InterServer6 is a plurality of occasion.

The example of this figure is a kind of situation in back, and therefore passage intermediary device 52 is set.This passage intermediary device 52 is to constitute with reference to above-mentioned subscriber information management DB31.In addition, this passage intermediary device 52 is connected with the address database 53 of the IPv4 address of storing InterServer6 and InterBOX3.So, in above-mentioned InterBOX3, preestablish the IPv4 global address of this passage intermediary device 52.In addition, in InterBOX3, establish and set in above-mentioned the ID that sets and password when essential ().

At this moment, above-mentioned InterBOX3 at first, is connected with passage intermediary device 52, sends above-mentioned ID and password (step S21).This passage intermediary device 52 in the understanding of carrying out above-mentioned InterBOX3, obtains the IPv6 address prefix (step S22) of this InterBOX3.Then, this passage intermediary device 52 is selected to establish the InterServer6 (step S23) that passage connects the destination from above-mentioned address database 53, and is given above-mentioned InterBOX3 (step S24) with the IPv4 address notification of this InterServer6.In addition, passage intermediary device 52 is given InterServer6 one side (step S25) with the IPv4 address of InterBOX3, the IPv6 prefix (part of the address of IPv6 terminal 2) that the IPv6 terminal recognition is used.So, above-mentioned InterBOX3 just can discern InterServer6, can determine protocol channel session (step S26, S27).In addition, InterServer6 notifies other routers with the Route Selection of the IPv6 prefix notified.In view of the above, has the Route Selection of IPv6 address of this prefix all by this InterServer6 Route Selection.

According to such formation,, also can establish protocol channel reliably between with one of them and be connected even have a plurality of occasions at InterServer6.In addition, in above-mentioned, be to carry out the understanding of user and terminal, but be not limited thereto by above-mentioned protocol channel intermediary device 52.Above-mentioned protocol channel intermediary device 52 also can only be notified the address of above-mentioned InterServer6 to above-mentioned InterBOX2, carries out user's understanding by above-mentioned InterServer6.In addition, at this moment, InterServer6 also can give address arbitrarily to InterBOX2 and terminal 3.

In addition, more than Shuo Ming execution mode nothing but an embodiment of the invention, in the scope that does not change its main thought, is certainly taked many variations.

Such as, in an above-mentioned execution mode, can establish the protocol channel connection from InterBOX3 one side and from InterServer6 one side, but can think, general starts from InterBOX3 one side in the commercial service of reality.This is because the fixedly IP service of IPv4 itself is rarely found.In other words, this is in this occasion, in case because after protocol channel (in fact IPv4 the connects itself) establishment, set just constant reservation as it is, in case and the session of IPv4 is cut off, the IPv4 of following InterBOX3 is that same situation is very rare, thus when in fact the session of IPv4 itself is cut off, can not carry out Route Selection so.

In addition, in an above-mentioned execution mode, be IPv6, be that example describes as the 2nd agreement with above-mentioned the 1st agreement, but be not limited thereto with IPv4.The 2nd agreement also can be IPv6.In addition, the 1st, the 2nd agreement can all be IPv4 also.In addition, also can be that the both is above-mentioned agreement in addition.

In an above-mentioned execution mode, above-mentioned InterBOX3 is arranged with each terminal branch, but InterBOX3 itself also can be the IPv6 terminal, also can be that InterBOX3 and any one terminal 2 or each terminal 2 are utilized hardware or software integration formation.In this case, above-mentioned InterBOX3 also can be provided with a plurality of in the one family network.

Claims

1. internet connected system is characterized in that comprising:

Be connected, be arranged at the relay in the 1st network that communicates with the 1st communication protocol with client computer;

The server that this relay connects with the 2nd communication protocol by the 2nd network,

In above-mentioned relay, be provided with: the above-mentioned client computer global address storage part of storing the global address in above-mentioned the 1st communication protocol of above-mentioned client computer; Store the server address storage part of the global address in the 2nd communication protocol of above-mentioned server; Being used for global address based on the server that is stored in this storage part makes the connection of sending from above-mentioned client computer carry out the 1st routing arrangement of Route Selection via above-mentioned server; By with the bag in the 1st agreement with the 2nd agreement package/unpack and above-mentioned server between establish the 1st bag processing unit that the protocol channel of the 1st agreement connects;

In above-mentioned server, be provided with: for and above-mentioned relay between protocol channel be connected to become the 2nd bag processing unit that the bag in the 1st agreement may be carried out package/unpack with the 2nd agreement; The terminating machine global address administration device that global address in global address in the 1st agreement of the above-mentioned client computer that will be connected with above-mentioned relay and the 2nd agreement of above-mentioned relay manages explicitly; And carry out the 2nd routing arrangement to the Route Selection of above-mentioned relay based on the global address of the above-mentioned terminating machine of the management of management devices thus.

2. internet as claimed in claim 1 connected system is characterized in that:

Above-mentioned the 1st agreement is different agreements with the 2nd agreement.

3. internet as claimed in claim 1 connected system is characterized in that:

Above-mentioned the 1st agreement is identical agreement with the 2nd agreement.

4. internet as claimed in claim 1 connected system is characterized in that wherein:

Whether in above-mentioned server, being provided with above-mentioned client computer of differentiation or/and above-mentioned relay is the machine judegment part of the machine of regulation.

5. system as claimed in claim 4 is characterized in that:

In this server, be provided with and utilizing above-mentioned machine judegment part to be judged as above-mentioned client computer or relay when not being the machine of regulation, according to the communication session cut-out portion with the transmitting-receiving of cutting off this communication session or restriction bag.

6. internet as claimed in claim 4 connected system is characterized in that:

In above-mentioned server, be provided with the order transformation component that order that judged result based on above-mentioned machine judegment part will send to above-mentioned client computer is transformed to the order of the prescribed form that is used for controlling this client computer.

7. internet as claimed in claim 4 connected system is characterized in that:

In above-mentioned server, the client computer control part of controlling above-mentioned client computer based on the judged result of above-mentioned machine judegment part is set.

8. internet as claimed in claim 1 connected system is characterized in that:

In above-mentioned server, be provided with whether the environment of differentiating with above-mentioned client computer or/and the 1st network that relay was connected is the network kind judegment part of the kind of regulation.

9. system as claimed in claim 8 is characterized in that:

Above-mentioned server has is judging the kind time-like that the non-public network environment that is connected with above-mentioned client computer or relay is not a regulation, according to the communication session cut-out portion with the transmitting-receiving of cutting off this communication session or restriction bag.

10. system as claimed in claim 9 is characterized in that:

Above-mentioned server has at least one or the state information obtaining section of a plurality of information in the operate condition of obtaining above-mentioned client computer or/and relay, user mode, the positional information.

11. system as claimed in claim 10 is characterized in that:

Above-mentioned state information obtaining section is to obtain at least one or a plurality of information in the operate condition, user mode, positional information of above-mentioned client computer with the corresponding method of the machine of above-mentioned client computer.

12. system as claimed in claim 10 is characterized in that:

Above-mentioned server, the combined information with at least one or a plurality of information in address based on above-mentioned client computer or relay, operate condition, user mode, the positional information is retrieved the search part of above-mentioned client computer or relay.

13. system as claimed in claim 11 is characterized in that:

Above-mentioned search part has the means that each above-mentioned relay guide look shown the client computer that relay therewith is connected.

14. internet as claimed in claim 13 connected system is characterized in that:

In above-mentioned server, be provided with the client computer control part of the above-mentioned client computer of control,

This client computer control part, making therewith by the client computer of selecting to determine from above-mentioned guide look shows, the corresponding client computer control program of client computer starts.

15. the system as claimed in claim 1 is characterized in that:

In above-mentioned server, be provided with the client address search part of carrying out the retrieval of the global address in the 1st agreement of above-mentioned client computer based on connection request to above-mentioned client computer.

16. system as claimed in claim 15 is characterized in that:

In above-mentioned server, be provided with and be familiar with and permit or deny connection request person understanding portion the connection of above-mentioned client computer to carrying out people to the connection request of above-mentioned client computer.

17. the system as claimed in claim 1 is characterized in that:

This system also has the protocol channel link information management devices of the protocol channel link information of management between above-mentioned relay and server,

This protocol channel link information management devices, notify above-mentioned relay with the global address in the 2nd agreement of above-mentioned server, and notify above-mentioned server the global address in the 1st agreement of global address in the 2nd agreement of above-mentioned relay and above-mentioned client computer or its part.

18. system as claimed in claim 17 is characterized in that:

Above-mentioned protocol channel link information management devices carries out the understanding of above-mentioned relay or server, and carries out above-mentioned notice when being sure in this result.

19. internet as claimed in claim 1 connected system is characterized in that:

Above-mentioned server has with the filtration treatment device of predetermined rule to being dealt into/filtering from the communication of above-mentioned client computer.

20. system as claimed in claim 19 is characterized in that:

Above-mentioned server also has the filtering rule configuration part of the interface of the rule that is provided for editing afore mentioned rules.

21. internet as claimed in claim 1 connected system is characterized in that:

Whether in above-mentioned relay, being provided with the above-mentioned client computer of differentiation is the machine judegment part of the machine of regulation.

22. internet as claimed in claim 20 connected system is characterized in that:

In above-mentioned relay, be provided be judged as according to above-mentioned machine judegment part above-mentioned client computer be not the regulation machine the time, according to to cut off the communication session cut-out portion of this communication session.

23. relay, be a kind of above-mentioned relay that uses in the internet connected system of the server that the relay that is connected, is arranged in the 1st network that communicates with the 1st communication protocol and this relay be connected with the 2nd communication protocol by the 2nd network that has with client computer, it is characterized in that:

In above-mentioned relay, be provided with: the above-mentioned client computer global address storage part of storing the global address in above-mentioned the 1st communication protocol of above-mentioned client computer; Store the server address storage part of the global address in the 2nd communication protocol of above-mentioned server; Being used for global address based on the server that is stored in this storage part makes the connection of sending from above-mentioned client computer carry out the 1st routing arrangement of Route Selection via above-mentioned server; By with the bag in the 1st agreement with the 2nd agreement package/unpack and above-mentioned server between establish the 1st bag processing unit that the protocol channel of the 1st agreement connects.

24. server, be a kind of above-mentioned server that uses in the internet connected system of the server that the relay that is connected, is arranged in the 1st network that communicates with the 1st communication protocol and this relay be connected with the 2nd communication protocol by the 2nd network that has with client computer, it is characterized in that:

25. a server is a kind of relay that is arranged in the 1st network that has; The above-mentioned server that uses in the internet connected system of the server that connects by above-mentioned relay and internet of the client computer that is connected of the 1st network therewith is characterized in that comprising:

The client address management devices that the address of the above-mentioned client computer that will be connected with above-mentioned relay and the address of above-mentioned relay manage explicitly;

Based on the address of the above-mentioned client computer of in above-mentioned management devices, being managed, will carry out the routing arrangement of Route Selection to the above-mentioned relay that connects above-mentioned client computer to the connection of above-mentioned client computer from above-mentioned internet;

Whether differentiate above-mentioned client computer or/and above-mentioned relay is the machine judegment part of the machine of regulation;

The order that will send to above-mentioned client computer based on the judged result of above-mentioned machine judegment part is transformed to the order transformation component of the order of the prescribed form that is used for controlling this client computer.

26. server as claimed in claim 25 is characterized in that:

Also be provided with and be judged as above-mentioned client computer or relay according to above-mentioned machine judegment part when not being the machine of regulation, according to the communication session cut-out portion with the transmitting-receiving of cutting off this communication session or restriction bag.

27. server as claimed in claim 25 is characterized in that:

Above-mentioned client computer can be communicated by letter with above-mentioned relay, but comprises the peripheral unit that oneself can not be connected with the internet.

28. server as claimed in claim 25 is characterized in that:

Also be provided with the environment of differentiating the 1st network that is connected with above-mentioned client computer or/and relay and whether be the network kind judegment part of the kind of stipulating.

29. server as claimed in claim 28 is characterized in that also comprising:

Be judged as the kind time-like that the non-public network environment that is connected with above-mentioned client computer or relay is not a regulation, according to the communication session cut-out portion with the transmitting-receiving of cutting off this communication session or restriction bag.

30. server as claimed in claim 25 is characterized in that also comprising:

Obtain at least one or the state information obtaining section of a plurality of information in the operate condition, user mode, positional information of above-mentioned client computer or/and relay.

31. server as claimed in claim 30 is characterized in that:

32. server as claimed in claim 30 is characterized in that:

The client computer control part of the above-mentioned client computer of control also is set,

This client computer control part has the means that show at least one information in the operate condition, user mode, positional information of above-mentioned client computer to the user.

33. server as claimed in claim 30 is characterized in that also comprising:

Retrieve the search part of above-mentioned client computer or relay based on the combined information of at least one or a plurality of information in the address of above-mentioned client computer or relay, operate condition, user mode, the positional information.

34. server as claimed in claim 33 is characterized in that:

Above-mentioned search part has the guide look that the client computer of retrieval is had a guide look of demonstration with its operate condition and shows means.

35. server as claimed in claim 34 is characterized in that:

Above-mentioned guide look shows means, be to each above-mentioned relay therewith the client computer that is connected of relay have a guide look of device shown.

36. server as claimed in claim 34 is characterized in that:

Also be provided with the client computer control part of the above-mentioned client computer of control,

37. server as claimed in claim 25 is characterized in that:

Above-mentioned relay is arranged in the above-mentioned client computer.

38. server as claimed in claim 25 is characterized in that:

Also be provided with: for make and above-mentioned relay between protocol channel be connected to become may be by with the 2nd bag processing unit of the bag in the 1st agreement with the 2nd agreement package/unpack; The terminating machine global address administration device that global address in global address in the 1st agreement of the above-mentioned client computer that will be connected with above-mentioned relay and the 2nd agreement of above-mentioned relay manages explicitly; And carry out the 2nd routing arrangement to the Route Selection of above-mentioned relay based on the global address of the above-mentioned terminating machine of the management of management devices thus.

39. server as claimed in claim 38 is characterized in that:

Above-mentioned the 1st agreement and the 2nd agreement are different agreements.

40. server as claimed in claim 38 is characterized in that:

Above-mentioned the 1st agreement and the 2nd agreement are identical agreements.

41. server as claimed in claim 38 is characterized in that:

Also be provided with the client address search part of carrying out the retrieval of the global address in the 1st agreement of above-mentioned client computer based on connection request to above-mentioned client computer.

42. server as claimed in claim 41 is characterized in that:

Also be provided with and be familiar with and permit or deny connection request person understanding portion the connection of above-mentioned client computer to carrying out people to the connection request of above-mentioned client computer.

43. server as claimed in claim 38 is characterized in that also comprising:

The protocol channel link information management devices of the protocol channel link information of management between above-mentioned relay and server,

This protocol channel link information management devices, notify above-mentioned relay with the global address in the 2nd agreement of above-mentioned server, and obtain global address or its part in the 1st agreement of global address in the 2nd agreement of above-mentioned relay and above-mentioned client computer.

44. server as claimed in claim 43 is characterized in that:

Above-mentioned protocol channel link information management devices carries out the understanding of above-mentioned relay, and carries out above-mentioned notice when being sure in this result.

45. server as claimed in claim 38 is characterized in that also comprising:

With the filtration treatment device of predetermined rule to being dealt into/filtering from the communication of above-mentioned client computer.

46. server as claimed in claim 45 is characterized in that also comprising:

Be provided for editing the filtering rule configuration part of the interface of afore mentioned rules rule.