GB2371189A

GB2371189A - Converting user frames to network frames to ATM cells, and back again

Info

Publication number: GB2371189A
Application number: GB0204725A
Authority: GB
Inventors: Hisao Furukawa; Shoji Miyaguchi
Original assignee: DISTRIB SYSTEMS RES INST; Distribution Systems Research Institute; Miyaguchi Research Co Ltd
Current assignee: DISTRIB SYSTEMS RES INST; Distribution Systems Research Institute; Miyaguchi Research Co Ltd
Priority date: 1996-12-06
Filing date: 1997-10-17
Publication date: 2002-07-17
Also published as: GB0204605D0; GB2372182A; GB2370734A; GB2371188B; GB2372182B; GB2371959A; GB2371959B; GB2371188A; GB0204606D0; GB0204726D0; GB0204725D0; GB2370735A; GB2371958A; GB2370734B; GB0204600D0; GB0204718D0; GB0204942D0; GB2371958B; GB2370735B

Abstract

User frames containing user addresses and data are sent from a user device (e.g. 1061-1, Fig. 51) to access control apparatus (1010-1, Fig. 2) where they are converted to network frames containing network addresses. The network frames are then sent to an ATM exchanger 10133-1 for conversion to ATM cells . The ATM frames are transferred through an ATM network 10133. At the other end of the ATM network received ATM cells are converted back to network frames and then user frames by a second ATM exchanger 10133-2, and a second access control apparatus (1010-2, Fig. 49), before being sent to a destination user (e.g. 1061-2, Fig. 49).

Description

2371 1 89

INTEGRATED INFORMATION COMMUNICATION SYSTEM

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to an integrated information communications system integrally connecting information communication equipments or information communication systems such as and/or for personal computer, LAN (Local Area Network), telephone (including portable telephone), FAX (Facsimile), CATV (Cable Television), Internet and the like, not only via dedicated lines, but also via ISDN (Integrated Services Digital Network), FR (Frame Relay), ATM (Asynchronous Transfer Mode), IPX (Integrated Packet Exchange), satellite, wireless and public lines. Here, the integrated information communication equipment performs communication provided with an address (for the information or the communication) for distinguishing the integrated information communication equipments with other equipments. Particularly, the present invention relates to an integrated information communication system which integrates data transfer services based on connection-less networks (e.g., IP (Internet Protocol) technology used RFC791 or RFC1883) and improves the overall economics of the information communication system by employing a unified address system, and ensuring security to realize an interactive communication between connected terminals or systems.

2. Description of the Prior Art

In accordance with a development of computer and information

communication technology, computer communication networks have in recent years come to be widely used in universities, research institutes, government organizations and intra-corporation/inter-

corporation situations. LANs are used for intra-corporation communication networks, and in the event that the geographic locale is on a national basis, the form thereof becomes such as sown in FIG.1. In the example described in FIG.1, each local LAN uses a common protocol, with each being connected by dedicated lines. Here, e.g., corporation X has LAN-X1, LAN-X2 and LAN-X3 as LANs, corporation Y has LAN-Y1, LAN-Y2 and LAN-Y3 as LANs, and both corporations X and Y use communication address systems ADX and ADY for respectively performing computer communications. Since it is necessary to lay a separate dedicated line for each corporation with such a LAN network. system architecture becomes costly, and in the event that connection is to be made to a LAN network of another corporation, interfacing must be matched such as the communication address system, making inter-connection very difficult and very costly. On the other hand, the Internet has recently become widespread as a global-scale computer communication network. On the Internet, networks are connected using a router of a provider, a communication protocol called TOP (Transmission Control Protocol)/IP (Internet Protocol) is employed, dedicated lines or FR networks are used for connecting remote areas, and Ethernets which are 10 Mbps LANs or FDDIs (Fiber Distributed Data Interface) which are 100 Mbps

LANs are used as communication paths within structures. FIG.2 shows an example of an Internet connection, in which the routers in the providers maintain mutual connection by exchanging routing-table connection information. Each router is connected to a plurality of networks, and judgment is made based on the routing-table regarding to which router connected to which provider's network received data should go next. Thus, on the Internet, the IP address attached to each IP frame (IP datagram) is checked, the judgment is made to which router the IP frame should be sent, and that the IP frame is sent accordingly. Thus, the IP frames are transferred one after another and delivered to a destination computer, by means of all routers performing the above-described operation.

FIG.3 illustrates the information contents of the RFC791 of the IP frame used by the Internet, divided into a control field and a

data field. FIG.4 illustrates the information contents of a similar

RFCl883, also divided into a control field and a data field. In -

either figure, the parentheses () indicate the number of bits. -

However, with the Internet, since the system is such that the communication path is not administrated in an integrated manner, one cannot tell whether the other party with which communication is being made is the authorized party, and there are problems regarding security in that information may be eavesdropped. Also, in reality, IP addresses within many LANs are being separately decided by the LAN users, so there is the necessity to replace the IP address of the LAN user to the IP address for the Internet when connecting the LAN to

the Internet. Also, communication quality such as communication speeds and communication error rates for the trunk lines making up the Internet communication path differ from one line to another for each LAN, and are practically non-uniform. For example, there are problems such as an attempt to send a 10 Mbps TV signal for video-

conferencing not achieving the desired communication speed.

Therefore, the Internet cannot be in peace used for the communication of the country and the research institute which especially require the reliability or for the business of the company. Further, there is no administrator for performing maintenance of the network such as in the case of failure, of for integrating the overall network for future planning for the network and so forth. Also, with LAN networks and the Internet, the terminals are personal computers (computers), and it has been difficult to user telephones, FAX, CATV and so on in an integrated manner therein.

SUMMARY OF THE INVENTION

The present invention has been made in accordance with the abovedescribed situations, and it is an object of the present invention to provide an integrated information communication system capable of containing a plurality of VANs which perform data/information transfer by using IF frame of which security and reliability in communications has been ensured, by means of not using dedicated lines or the Internet so as to improve economic considerations of the information communication system architecture, and ensuring communication speeds, communication quality and

communication trouble countermeasures in a unified manner. Also, it is another object of the present invention to provide an integrated information communication system which uses a single information transfer which is not dependent on the type of service, such as sound, image (motion and still), text, etc., so as to inter-connect services which have conventionally been provided separately, such as total communication services, analog/digital telephone line services, Internet provider services, FAX services, computer data exchange services, CATV services and so forth. Further, it is another object of the present invention to provide an integrated information communication system which enables inter-corporation communication with very little change to the computer communication address systems which have been independently and separately created within each separate corporation (including universities, research institutes, government organizations, etc.).

The present invention relates to an integrated information communication system, and the above objects of the present invention are realized as follows: the present invention is configured by providing an access control apparatus for connecting a plurality of computer communication networks or information communication equipments to each, and a relay device for networking the aforementioned access control apparatus, the system having functions for performing routing by transferring the information by a unified address system, and is configures such that the aforementioned plurality of computer communication networks or information

communication equipments can perform communications in an interactive manner. In FIG.1 which is given as an example of a conventional arrangement, the range of dedicated lines used for intra-corporation and inter-corporation communications is indicated by solid lines, and this is replaced with the equivalent of a computer communication network according to IF technology as a common communication network indicated by broken lines.

The above-described objects of the present invention are achieved by an ICS user frame having a unique ICS user address system ADX being converted into an ICS network frame having an address system ADS, based on the administration of a conversion table provided within an access control apparatus, and by being arranged such that in the case that transmission is made over at least one VAN contained therein following rules of the aforementioned address system ADS, and the destination other access control apparatus is reached, conversion is made to the aforementioned ICS user address system ADX based on the administration of the aforementioned conversion table, and another external information communication apparatus is reached. Also, the above-described objects of the present invention are achieved by an ICS user frame having a unique ICS user address system ADX being converted into an ICS network frame corresponding with a reception ICS network address registered beforehand to the conversion table in accordance with a user logic communication line, rather than using an ICS user address within the

aforementioned ICS user frame based on the administration of a conversion table provided within the access control apparatus, and by being arranged such that in the case that transmission of the aforementioned ICS network frame is made to another access control device via at least one VAN following rules of the ICS address system ADS, the transfer destination of the aforementioned ICS network frame being either 1 or N. this is returned to the aforementioned ICS network frame based on the administration of a conversion table provided within the aforementioned access control apparatus, and another external information communication apparatus is reached.

BRIEF DESCRIPTION OF THE DRAWINGS

In the accompanying drawings: FIG.1 is a block diagram for describing conventional LAN networks; FIG.2 is a diagram illustrating an example of a form of the Internet; FIG.3 is a diagram illustrating an IP frame according to RFC791 stipulations; FIG.4 is a diagram illustrating an IF frame according to RFC1883 stipulations; FIG.5 is a block diagram systematically illustrating the basic principle of the present invention; FIG.6 is a block diagram to show an example of a network wherein an ICS according to the present invention is constructed of a plurality of VANs;

l FIG.7 is a block diagram to show an example of configuring the access control apparatus; FIG.8 is a block diagram to show an example of configuring the relay apparatus; FIG.9 is a block diagram to show an example of configuring the inter-VAN gateway; FIG.lO is a block diagram to show an example of configuring the ICS network server; FIG.11 is an array diagram illustrating an example of the ICS user address used in the present invention; FIG.12 is a wiring diagram illustrating the connection relation between the ICS logic terminals and the user communication lines; FIG.13 is a diagram illustrating the relation between the ICS user frame and the ICS network frame which are used in the present invention; FIG.14 is a portion of a constructional block diagram to show a first embodiment (intra-corporation communication, inter-

corporation communication) according to the present invention; FIG.15 is a portion of a constructional block diagram to show a first embodiment (intra-corporation communication, inter-

corporation communication) according to the present invention; FIG.16 is a diagram to show an example of the conversion table in the access control apparatus; FIG.17 is a diagram to show an example of the temporary

IJ conversion table in the access control apparatus; FIG.18 is a flowchart to show an example of operation of the access control apparatus; FIG.19 is a flowchart to show an example of operation of the access control apparatus in inter-corporation communication; FIG.20 is a constructional block diagram to show a second embodiment (virtual dedicated line) according to the present invention; FIG.21 is a diagram to show an example of the conversion table in the access control apparatus; FIG.22 is a flowchart to show an example of operation of the access control apparatus in virtual dedicated line connection; FIG.23 is a constructional block diagram to show a third embodiment (ICS network server) according to the present invention; FIG.24 is a diagram to show an example of the conversion table in the access control apparatus; FIG. 25 is a diagram to show an example of the table in the ICS network database; FIG.26 is.a flowchart to show an example of operation within the access control apparatus in virtual ICS network server connection; FIG.27 is a constructional block diagram to show a fourth embodiment (ICS address administration server) according to the present invention; FIG.28 is a diagram to show an example of the conversion

J table in the access control apparatus; FIG.29 is a diagram to show an example of the correspondence table in the ICS address administration server; FIG.30 is a flowchart to show an example of operation of the ICS address administration server; FIG.31 is a constructional block drawing illustrating a fifth embodiment (ICS name server) according to the present invention; FIG.32 is a diagram to show an example of the conversion table in the access control apparatus; FIG.33 is a diagram to show an example of the ICS name conversion table in the ICS name server; FIG.34 is a flowchart to show an example of operation of the ICS name server; FIG.35 is a portion of a constructional block drawing illustrating a eighth embodiment (accounting server) according to the present invention; I..

FIG.36 is a portion of a constructional black diagram to show an eighth embodiment (accounting server) according to the present invention; FIG.37 is a diagram to show an example of the conversion table in the access control apparatus; FIG.38 is a diagram to show an example of the fixed charging definition table in the accounting server; FIG.39 is a diagram to show an example of the accounting information database in the accounting server; 1 0

FIG.40 is a flowchart to show an example of operation of the charging process; FIG.41 is a portion of a constructional block diagram to show a ninth embodiment (ICS frame database server) according to the present invention;.

FIG.42 is a portion of a constructional block diagram to show a ninth embodiment (ICS frame database server) according to the present invention; FIG.43 is a diagram to show an example of the stored information administration table and the Box in the ICS frame database server; FIG.44 is a diagram to show an example of the stored information administration table and the Box in the ICS frame database server; FIG.45 is a diagram illustrating an example of an ICS user frame used by the ICS frame database server; FIG.46 is a flowchart to show an example of operation of the communication example 1 of the ICS frame database server; FIG.47 is a flowchart to show an example of operation of the communication example 2 of the ICS frame database server; FIG.48 is a flowchart to show an example of operation of the communication example 3 of the ICS frame database server; FIG.49 is a portion of a constructional block diagram to show a tenth embodiment (transfer by X.25, FR, ATM, satellite communication, and containment of telephone line, ISDN line, CATV

line, satellite line, IPX frame) according to the present invention; FIG. 50 is a portion of a constructional block diagram to show a tenth embodiment according to the present invention; FIG.51 is a portion of a constructional block diagram to show a tenth embodiment according to the present invention; FIG.52 is a diagram to show an example of the conversion table in the access control apparatus; FIG.53 is a diagram illustrating the manner of frame conversion of the ICS network frame and the X.25 format; FIG.54 is a diagram illustrating the manner of frame conversion of the ICS network frame and the FR format; FIG.55 is a diagram illustrating the manner of frame conversion of the ICS network frame and the ATM format; FIG.56 is a portion of a constructional block diagram to show an eleventh embodiment (transfer by X.25, FR, ATM, satellite communication. and containment of telephone line, ISDN line, CATV line, satellite line, IPX frame) according to the present invention; FIG.57 is a portion of a constructional block diagram to show an eleventh embodiment according to the present invention; FIG.58 is a portion of a constructional block diagram to show a twelfth embodiment (containment of the access control apparatus within the X.25 network and FR network) according to the present invention; FIG.59 is a portion of a constructional block diagram to show a twelfth embodiment according to the present invention;

FIG.60 is a portion of a constructional block diagram to show a thirteenth embodiment (the access control-apparatus connected with the relay network) according to the present invention; FIG.61 is a portion of a constructional block diagram to show a fourteenth embodiment (provision of access control apparatuses outside of the ICS) according to the present invention; FIG.62 is a portion of a construction block diagram to show a fifteenth embodiment according to the present invention; FIG.63 is a portion of a construction block diagram to show a fifteenth embodiment according to the present invention; FIG.64 is a portion of a construction block diagram to show a fifteenth embodiment according to the present invention; FIG.65 is a diagram to show an example of the conversion table in the access control apparatus; FIG.66 is a diagram illustrating an example of the table to define the relation between the communication speed and the speed class; FIG.67 is a flowchart to show an example of operation of the fifteenth embodiment; FIG.68 is a flowchart to show an example of operation of the fifteenth embodiment; FIG.69 is a diagram to show the ICS user frame after the electronic signature assignment; FIG.70 is a diagram to show the ICS user frame before the electronic signature assignment;

al FIG.71 is a construction block diagram to show a sixteenth embodiment according to the present invention; FIG.72 is a diagram to show an example of the conversion table in the access control apparatus; FIG.73 is a flowchart to show an example of operation of the sixteenth embodiment; FIG.74 is a diagram to explain the electronic signature at sending and receiving times; FIG.75 is a construction block diagram to show a seventeenth embodiment according to the present invention; FIG.76 is a construction block diagram to show a eighteenth embodiment according to the present invention; FIG.77 is a diagram to show an example of the conversion table in the access control apparatus; FIG.78 is a diagram to show an example of the conversion table original in the ICS conversion table server; FIG.79 is a diagram to show an example of the correspondence table in the ICS address administration server; i, FIG.80 is a diagram to show an example of the ICS name conversion table in the ICS name server; FIG.81 is a construction block diagram to show a nineteenth embodiment according to the present invention; FIG.82 is a diagram to show an example of the intensive conversion table in the intensive access control apparatus; FIG.88 is a diagram to show an example of the simple 1 4

-) conversion table in the simple access control apparatus; and FIG.84 is a flowchart to show an operation of the nineteenth embodiment. DESCRIPTION OF THE PREFERRED EMBODIMENTS

FIG.5 systematically illustrates the basic principle of the present invention, wherein an integrated information communication system (hereafter referred to as "ICS") 1 according to the present invention has self-appointed address providing rules as a computer information/communication address. i.e., the system has a unique address system ADS, and has access control apparatuses (2 through 7 in the present example) which serve as access points for connecting a plurality of computer co munication networks or information communication equipment, e.g., a great number of LANs (in the present example, corporation X's LAN-X1, LAN-X2 and LAN-X3, and corporation s LAN-Y1, LAN-Y2 and LAN-Y3). Here, the corporation X's LAN-X1, LAN-X2 and LAN-X3 have the same address system ADX, and the corporation s LAN-Y1, LAN-Y2 and LAN-Y3 have the same address system ADY. The access control apparatuses 2, 3 and 4 have conversion tables for administrating mutual conversion between the address system ADS and the address system ADX. The access control apparatuses 5, 6 and 7 have conversion tables for administrating mutual conversion between the address system ADS and the address system ADY. The computer communication data (ICS frame) within the ICS 1 uses addresses according to the address system ADS of the ICS 1, and performs the communication according to [P frame which is used

on the Internet.

Now, description will be made regarding the operation in the

case of communication within a single corporation. The computer communication data (ICS frame) 80 transmitted from the LAN-X1 of a corporation X is provided with addressing following the address system ADX, but is subjected to address conversion following the address system ADS under administration of the conversion table of the access control apparatus within ICS 1, and becomes ICS frame 81.

This is then sent within the ICS 1 under the rules of the address system ADS, and upon reaching the destination access control apparatus 4, is restored to the computer communication data 80 of the address system ADX under the administration of the conversion table thereof, and is sen* to the LAN-X3 within the same corporation X. Here, the ICS frame being sent and received within the ICS 1 is referred to as an "ICS network frame", and the ICS frame being sent and received outside of the ICS 1 is referred to as an "ICS user frame". The form of the ICS user frame is stipulated by a form defined by RFC791 or RFC1883 as a rule used in the Internet, but dealing with ICS frames which do not follow the above rule will be described later in conjunction with description of another

embodiment. The ICS network frame 81 is comprised of a network control field 81-1 and a network data field 81-2, with the network control

field 81-1 storing the addresses (address system ADS) of the access

control apparatuses 2 and 4 therein. The ICS user frame is either

used as the network data field 81-2 with no change to the data value

thereof, or is subjected to data format conversion under the stipulations determined within the ICS 1 and is used as network data field 81-2. An example of the data format conversion stipulations

might be conversion to ciphertext or data compression, and the access control apparatus 2 may be provided with ciphering means, deciphering means for returning the ciphertext to the original plain-text (ICS user frame), data compression means, and data decompression means for returning the compressed data to the original data. In the access control apparatus 2, the ICS user frame SO is used as the ICS network frame 81-2, and the operation of adding the network control field 81-

1 to the ICS network frame 81-2 is referred to as "ICS encapsula-

tion". Also, in the access control apparatus 4, the operation of removing the network control field 81-1 from the ICS network frame 81

is referred to as "ICS reverse encapsulation".

Now, description will be made regarding the operation in the

case of communication between different corporations. The computer communication data (ICS user frame) 82 transmitted from the LAN-Y2 of a corporation Y is provided with addressing following the address system ADY, but is subjected to address conversion following the address system ADS under administration of the conversion table of the access control apparatus 6 within ICS 1, and becomes ICS frame 83. This is then sent within the ICS 1 in accordance with the rules of the address system ADS, and upon reaching the destination access control apparatus 3, is converted to the computer communication data 1 7

82 of the address system ADX under the administration of the conversion table thereof, and is sent to the LAN-X2 within the corporation X. While address lengths of 32 bits and 128 bits are used in the present invention, the present invention is by no means restricted to these. Even if the length of the address is changed to such other than 32-bit or 128-bit, this does not change the principle of address conversion which is the principle idea of the present invention. Thus, according to the present invention, both intra-

corporation and inter-corporation computer communications are enabled by unified address administration by the ICS 1. Generally used user terminals for computer communications are incorporated within the LAN within the structure of the user, and incorporated within the VAN (Value Added Network) via access lines, and user data frames are sent which have differing data formats and differing address system for each type of service. For example, an IF address is used for Internet services, a telephone number/ISDN number (E.164 address) for telephone services, and an X.121 address is used for X.25 packet services. Conversely, according to the ICS 1 of the present invention, address conversion (referred to as "ICS address conversion") is performed with the conversion table of the access control apparatus based on the inputted ICS user frame, thus realizing sending of information frames of data of varied structures unified under a single data format and address system, i.e., converted to ICS frames.

FIG.6 schematically illustrates an example wherein the ICS 1 of the present invention is comprised of a plurality of VANs (VAN-l, VAN-2, VAN3), with each VAN being administered by a VAN operator.

An ICS 1 user applies to the VAN operator for a user communication line, and the VAN operator decides an ICS address, an ICS network address and the like for the user and registers these informations with a circuit type in a conversion table 12 within the access control apparatus 10 such as shown in FIG.7. The ICS 1 has as access points serving as external connection elements with the LANs (or terminals thereof) of the corporations X and Y the access control apparatuses 10-1, 10-2, 10-3, 104 and 10-5, and further has relay apparatuses 20-1, 20-2, 20-3 and 20-4, and also ICS network servers 40-1, 40-2, 40-3, 40-4 and 40-5, as well as ICS address administra-

tion servers 50-1 and 50-2. A relay apparatus 20 such as shown in FIG.8 is provided to the communication path within each of the VANs, and an inter-VAN gateway 30 such as illustrated in FIG.9 is provided as a connection element of the VAN-2 and the VANES. The LANs 1-1, 1-

2, 1-3 and 1-4 shown in FIG.6 are respectively connected to the access control apparatuses 10-1, 10-5, 10-4 and 10-2, via the user communication lines 36-1, 36-2, 36-3 and 36-4.

The access control apparatus 10 (10-1, 10-2, 10-3, 10-4 and 10-5) are devices containing the user communication lines from the user (corporations X and Y) to the ICS 1, and as shown in FIG.7, is comprised of a processing device 11 comprised of a CPU and so on, a conversion table 12 serving as a database for performing address

i)N conversion and the like, a line portion 13 of an input/output interface, and a temporary conversion table 14. Also, the relay apparatus 20 has a transferring function of an ICS network frame and a routing function of path designating, and as shown in FIG.8 has a processing device 21 comprised of a CPU and so on and a relay table 22, the relay table 22 being used for determining the communication destination when the ICS network frame is transferred within the ICS 1. The inter-VAN gateway 30 has a processing device 31 comprised of a CPU and so on and a relay table 32 for determining where to send the ICS network frames between the VANs, as shown in FIG.9. As shown in FIG.10, the ICS network server 40 is comprised of a processing

device 41 and an ICS network database 42, the usage of the ICS network database 42 being various. Examples of the usage include: user- specific data (such as the name or address of the user) corresponding with the ICS user address, data not corresponding with the ICS user address, such as data indicating the state of -

communication trouble within the VAN, or data not directly related to the VAN, such as an electronic library which maintains and discloses digital documents, public keys for a public encryption system using encryption technology employed in verifying the authenticity of the transmitter and receiver, and maintaining data such as public key proof data or secret keys for a secret encryption system. The processing device 41 refers to the ICS network database 42, and obtains corresponding data and transmits the data to the access control apparatus 10. Further, not only does the ICS network 2 0

: database 42 operate in stand-alone manner, but also is capable of communicating with other ICS network servers and obtaining data therefrom, by means of transmitting and receiving the ICS network frames based on IF communication technology. Within the ICS, the ICS network server is the only component provided with a single ICS network address.

According to the present invention, the address used to identify computers, terminals and the like used within the ICS network frame is referred to as an "ICS network address", and the address used to identify computers, terminals and the like used within the ICS user frame is referred to as an "ICS user address".

The ICS network address is used only within the ICS, one or both of the two types being used; 32-bit length and/or 128-bit length.

Similarly, the ICS user address also uses one or both of the two types; 32-bit length and/or 128-bit length. The ICS logic terminal within the access control apparatus 10, the relay apparatus 20, the inter-VAN gateway 30 and the ICS network server are arranged so as to be provided each with an ICS network address so as to be uniquely identified. Also, the {CS user address is formed of a VAN upper code and a VAN internal code. With the length of the VAN upper code being represented as C1 bits and the length of the VAN internal code being represented as C2 bits, the ICS user address is used such that the total of C1 + C2 equals either 32 bits or 128 bits.

In the present invention, no particular method for deciding the VAN upper code and the VAN internal code is stipulated, but in

an) the case of C1 + C2 = 32 bits, the following example can be given for a method for deciding such: VAN upper code = district administration code (4 bits) country code (4 bits) I VAN code (8 bits) VAN internal code = VAN district code (4 bits) I VAN access point code (8 bits) user logic code (4 bits) FIG.11 makes description thereof using an example of an ICS

user address. Here, the symbol "a I b" indicates linkage of data "a" and "b", i.e., data obtained by means of arrayed data "a" and "b" in this order. The ICS network address can be provided with locality in the same manner as with the user network address. i.e., ICS network address = district administration code I country code I VAN code I VAN district code I user logic communications line code Thus, the relay apparatus can efficiently find the transfer destination by means of deciding the transferring destination with consideration to the district. The address can be determined in the same way in the case of C1 + C2 = 128 bits, as well. Incidentally, with the present invention, the ICS frame can be constructed as described later, as long as C1 + C2 = 32 bits or C1 + C2 = 128 bits 2 2

go) is kept, regardless of how the field sections for the VAN upper code

and the VAN internal code are made, or the length of each of the sections. Also, when deciding the VAN upper code and the VAN internal code, part of these codes may be made to be unique to the user. That is, the user can make a user-specific address system.

The address values of a 32 bit expression value are from address 0 to address (232-1), the present invention is carried out by providing an address decided uniquely to the user within the range of address 10 x 224 to address (10 x 224+224-1), or address (172 x 224+ 16 x 23) to address (172 x 224+ 32 x 2 6-1) or address (192 x 224+ 168 x 2) to address (192 x 224+ 169 x 2 -1).

A physical communication line can be separated into a plurality of communication lines and used, this being realized in conventional art as a multiplex communication method by frame relay (FR), for example. According to the present invention, the user's communication line is separated into a user physical communication line and one or more user logic communication lines. FIG.12 illustrates an example of this aspect, wherein a user physical communication line 60 is separated into two user logic communication lines 61-1 and 61-2. Also, separated computer communication apparatuses 62-1, 62-2, 62-3 and 62-4 are each connected to respective user logic communication lines, and the ICS user addresses 4123, 0025, 0026, 4124" are assigned to each of the computer communication apparatuses 62-1 through 62-4. The user physical communication line 60 is connected to the access control apparatus 2 3

63, and the point of contact between the two is called "ICS logic terminal". The ICS logic terminal is provided with an only ICS network address within the ICS. In the example shown in FIG.12, the user logic communication lines 61-1 and 61-2 are connected to the access control apparatus 63, and ICS network addresses "8710" and "8711" are assigned to the ICS logic terminals 64-1 and 64-2 of the contact points, respectively.

As described above, the ICS network server 40 is also provided with an only ICS network address, so that the ICS network address can determine that the ICS logic terminal or the ICS network server is the only one within the ICS. The ICS network server is capable of exchanging information with other ICS network servers by means of transmitting and receiving the ICS network frames provided with each other's ICS network addresses, using IF communication technology. This function is referred to as a "ICS network server communication function". The access control apparatus is also provided with an only ICS network address within the ICS, and is capable of exchanging information with other ICS servers by means of a communication function of the ICS network server. The ICS network server communication function can be realized by TOP or UDP (User Datagram Protocol) of a conventional technology.

There are two types of the ICS frames in the present invention, as described above, the ICS network frame which is transmitted and received within the ICS, and the ICS user frame which is transmitted and received outside of the ICS. Each ICS 2 4

r network frame is comprised of a control field and a network data

field (ICS user frame), and, as shown in FIG.13, the network control

field is comprised of a besic field and an expansion field, and the

network data field is comprised of a user control field and user data

field, so as to allow usage by ICS encapsulation or ICS reverse

encapsulation. That is, when the ICS user frame enters the ICS from the access control apparatus, the ICS user frame becomes a data field

of the ICS network frame, and the control field (network control

field) of the ICS network frame is added thereto (ICS encapsulation).

The expansion field in the network control field is used for the

cipher or the like. In a case that the cipher is useless. the expansion field is not used.

Inside the network control field of the ICS frame is placed

an area for storing the transmitter's address and intended receiver's address. There are two types of the ICS frames, those with a 32-bit address length and those with a 128-bit address length, and a frame format with 32-bit address length being employed according to the RFC791 stipulations shown in FIG.3, for example. In the event that 32 bits is insufficient for the ICS network address, for example, in the event that a 64-bit address is to be used, following the RFC791 stipulations, the lacking 32 bits (64 bits - 32 bits) are written into an option field or the expansion field in the network control

field of the ICS network frame control field, thus making the network

address usable at 64 bits. Now, supplemental description will be

made regarding the aforementioned user-specific address. In the 2 5

/ event that a great number of users have a private address (a type of ICS user address) in the section between an address (10 x 224) and an address (10 x 224 + 224 - 1) for example, in the case that the length of the ICS user address is 32 bits, the 32 bits is insufficient for the ICS network address, since the ICS network address is assigned corresponding to the ICS user address, and 64 bits is required, for example. In this case, as described above, the lacking 32 bits are written into the option field of the ICS network frame control field,

thus making the network address usable at 64 bits. The fact that communication between the same user (called "intra-corporation communications") is possible using a private address will be described in the first embodiment. Also, in the event that the address length is 128 bits, the present embodiment is carried out under the frame format according to the RFC1883 stipulations such as shown in FIG.4, for example. The originating address area within the network control field and the address stored in the destination

address area are made to be ICS network addresses, each respectively being the transmitting ICS network address and the receiving ICS network address. Further, the originating address area within the user control field and the address stored in the destination address

area are made to be ICS user addresses, each respectively being the sending ICS user address and the receiving ICS user address.

Incidentally, there is no need to following the RFC791 or RFC1883 stipulations for the ICS frame format in carrying out the present invention; the present invention can be carried out as long 2 6

as the frame format is such that uses addresses of 32 bits or 128 bits in length. Generally, the ICS receives the ICS user frame stipulated by RFC791 or RFC1883, but other frame formats can be handles within the ICS network by converting to ICS user frame with a conversion means (or changing portion).

Embodiment-1 (Basic ICS, intra-corporation communication and inter-

corporation communication): A first embodiment of the present invention will be described with reference to PIGs.14 and 15, regarding a basic communication wherein the transfer destination within the ICS is determined from the receiver ICS user address, based on administration by a conversion table. In the figures, 170-1, 170-2, 170-3 and 170-4 respectively denote gateways provided within the LANs 100-1, 100-2, 100-3 and 100-4, and the ICS frames can pass through these gateways 170-1 through 170-4. FIG.16 shows an example of a conversion table 113-1 in the access control apparatus 111-1 and FIG.17 does the same of a temporary conversion table 114-2 in the access control apparatus 110-4.

First, description will be made regarding communication

. between a terminal which is connected to a LAN 100-1 of the corporation X which has a unique address system ADX, and a terminal which is connected to a LAN 100-2 of the same corporation X. That is, this is a communication between a terminal which has an ICS user address "0012" on the LAN 100-1 and a terminal which has an ICS user 2 7

address "0034" on the LAN 100-2. This communication is a typical communication made between terminals which have set addresses based on a unique address system within a single corporation (ADX in this example), the communication being made via the ICS 100 in an interactive manner. This type of communication is referred to as intra-corporation communication service (or intra-corporation communication). Next, description will be made regarding a

communication between a terminal which is connected to a LAN 100-1 of the corporation X which has a unique address system ADX and a terminal which is connected to a LAN 100-3 of the corporation Y which has a unique address system ADY. That is, this is a communication between a terminal which has an ICS user address "0012" on the LAN lOQ-1 and a terminal which has an ICS user address "1156" on the LAN 100-3. This communication is a typical communication made between terminals which have different address systems within different corporations, the communication being made using an ICS address system which can be shared between the two. This type of communication is referred to as inter-corporation communication service (or inter-corporation communication).

<<Common preparation>> In describing the present embodiment, the address format and so forth is determined as described below, but the specific numeric values and formats are all but an example, and the present invention is by no means limited to these. The ICS network address is represented by a 4-digit number, and the sender ICS user address and 2 8

the receiver ICS user address are both represented by a 4-digit number. Of the sender ICS user address and the receiver ICS user address, addresses of which the upper two digits are not "00" are used as an intercorporation communication address, and this inter corporation communication address is an only value within the ICS 100. Of the sender ICS user address and the receiver ICS user address, addresses of which the upper two digits are Too., are used as an intra-corporation communication address, and this intra-

corporation communication address may be duplicate of other intra-

corporation communication address within the ICS 100. Also, the conversion table 113-1 in FIG.16 provided to the access control apparatus 110-1 contains the following: transmitting ICS network addresses, receiving ICS network addresses, sender ICS network addresses, receiver ICS network addresses, request identification (ID), speed segments and so forth. The request identification registered to the conversion table 113- 1 is such that, e.g., "1" represents the intra-corporation communication service, "2n represents the inter-corporation communication service, and "3" represents a virtual dedicated line connection (which will be descrived hereinafter). The speed segment is the line speed that the communication from the ICS network address requires, including throughput (e.g., the number of ICS frames sent within a predetermined time).

<Preparation for intra-corporation communication>> The users of the LAN 100-1 and the LAN 100-2 specify the 2 9

terminals and apply to the VAN operator in order that the intra-

corporation communication of the terminals connected to the LANs can perform the communication via the VAN-l and VAN-3. The VAN operator responds to the application and sets the aforementioned ICS network address, ICS user address, requested identification, etc. to the conversion tables of the access control apparatuses 110-1 and 110-5 connected to the LAN 100-1 and LAN 100-2, and further writes and holds them in the ICS address administration server 150-1.

The items to be set for the VAN-1 are as follows. The ICS network address is decided by the ICS logic terminal of the access control apparatus 1101 to which the LAN 100-1 is connected, with the ICS network address of the ICS logic terminal in this case being set as "7711". The intracorporation co unication address of the terminal connected to the LAN 1001 from which the application was made is set as "0012", and this is used as the sender ICS user address. The intra-corporation communication address used by the terminal of the above address is set as "2212", and this is used as the sender ICS user address. Next, the intra-corporation communication address of the terminal connected to the LAN 100-2 from which the application was made is decided by the ICS logic terminal of the access control apparatus 110-5 to which the LAN 100-2 is connected, in this case the ICS network address being set as "9922", and this is used as the receiving ICS network address. Further, the ICS user address used by the terminal connected to the LAN 100-2 is set as "0034", and this is used as the receiver ICS user address.

3 0

The number "1" is set as the request identification, indicating the intracorporation communication service that was applied for, and the above is registered to the conversion table 113-1 in FIG.16.

The items to be set for the VAN-3 are as follows. Values necessary for reverse communication (communication from the LAN 100-2 to the LAN-1) are set to the conversion table of the access control apparatus 110-5 connecting the LAN 100-2 from which application was made. That is, data is set reverse to the transmitting ICS network address and the receiving ICS network address, and at the same time, data is set reverse to-the sender ICS user address and the receiver ICS user address. The ICS network address of the LAN 100-2 is set as "9922", and this is used as the transmitting ICS network address.

The address "0034" is set as the sander ICS user address for the intracorporation ICS user address of the terminal connected to the LAN 100-2, and the ICS user address "0012" of the terminal of the other party is used as the receiver ICS user address. Also, the ICS user address "7711" of the LAN 100-1 is used as the receiving ICS network address and the value "1" is set as the request identification, indicating the intra- corporation communication services. The above is written to the conversion table in the access control apparatus 110-5 and registered.

cooperation of intra-corporation communication>> The terminal having an ICS user address "0012" sends an ICS user frame PI to the receiver "0034". This ICS user frame PI has set as the sender ICS user address "0012", and as the receiver ICS user 3 1

address has set "0034".

The operation will be explained with reference to FIG.18.

The ICS user frame P1 is sent to the access control apparatus 110-1 via the logic communication line 180-1. The access control apparatus 110-1 refers to the conversion table 113-1 of FIG.16 from the transmitting ICS network address "7711" (Steps S100 and S101) and the receiver ICS user address "0034-of the received ICS user frame, it knows that the communication is the intra-corporation communication due to the value "1" of the request identification (Step S102). The access control apparatus 110-1 obtains that the receiving ICS network address corresponding to the receiver ICS user address "0034" is "9922", and then it is ICSencapsulized (Step Sl06). The above procedures illustrated in a flowchart are as shown in FIG.18, with the intra-corporation being flow (I) therein. The sender ICS user address may be used to specify the transmitted original of the ICS frame. The access control apparatus 110-1 sends the ICS network frame P2 to the relay apparatus 120-1 by the ICS encapsulation.

Since the network address of the network control field is ensured of

its uniqueness within the ICS, there is no conflict with other ICS frames. The ICS network frame P2 passes through the relay apparatus 120-1 and 120-2 based on the receiving ICS network address, and reaches the access control apparatus llO-5 of the VAN-3. The access control apparatus 110-5 removes the network control field from the

ICS network frame P4 and performs the ICS reverse encapsulation. and 3 2

-I, re-creates an ICS user frame P5 which is the same as the ICS user frame PI from the network data field of the ICS frame, and sends it

to the LAN 100-2. The ICS user frame is routed through the LAN 100-

2, and is transferred to the terminal which has the ICS user address "0034".

<preparation for inter-corporation communication>> As an example of performing the inter-corporation communication, a communication between a terminal which has an ICS user address "0012" and is connected to a LAN 100-l under the address system ADX, and a terminal which has an ICS user address "1156" and is connected to a LAN 100-3 under the address system ADY, will be described. The users of the LANs 100-1 and 100-3 specify the terminal to the VAN each is connected to so as to be able to perform the communication via VAN-1 and VAN-2, and make application to the VAN operator. The VAN operator sets the necessary items in the conversion table of the access control apparatus which is connected to the LANs 1001 and 100-3, in accordance with the application.

The items to be set regarding the VAN-1 are as follows. The ICS network address of the LAN 100-1 is made to be "7711", the intra corporation communication address held by the terminal connected to the LAN 100-1 from which there was application is made to be "0012", and this is made to be the sender ICS user address. The inter corporation communication address provided to the terminal of the above ICS user address is made to be "2212", and this is made to be the sender ICS user address (intercorporation). The ICS network 3 3

/ address is determined by the ICS logic terminal of the access control apparatus 110-4 connected to the ICS network address of the LAN 100-3 from which there was application, the ICS network address here being "8822", and this is made to be the receiving ICS network address.

Also, the ICS user address of a terminal connected to the LAN 100-3 is made to be "1156", and this is made to be the receiver ICS user address. Further, number "2" is set as the request identification, indicating the inter-corporation communication service that was applied for, and the above is registered to the conversion table 113 The items to be set regarding the VAN-2 are as follows. As a conversion table for the access control apparatus 110-4 to which the LAN 100-3 is connected, a temporary conversion table 114-2 which holds reverse data for a certain time, e.g., 24 hours, is set. That is, regarding the ICS network address "8822" to which is connected the LAN 100-S which uses the inter-corporation communication service, the following are provided within the access control apparatus 110-4: a temporary conversion table 114-2 which includes a transmitting ICS network address, sender ICS user address, receiver ICS user address, receiving ICS network address, request identification and so forth.

The setting of the temporary conversion table will be explained hereinafter. <<Operation of inter-corporation communication>> The terminal having an ICS user address "0012" transmits the ICS user frame F1 in which the sender ICS user address "0012" and the 3 4

receiver ICS user address "1156" are set. The.ICS user frame F1 is transferred to the access control apparatus 110-1 via the-user logic communications line 180-1.

The access control apparatus 110-1 refers to the conversion table 113-1 from the transmitting ICS network address "771-1" (Steps S100 and S101) and the receiver ICS user address "1156", it knows that the request identification is "2", that is, the communication is the intercorporation communication (Step S102). Next, the access control apparatus 110-1 obtains that the receiving ICS network address corresponding to the receiver user address "1156" is "8822" (Step S104), and then converts the sender ICS user address "0012" into an inter-corporation communication user address "2212" (Step S105). The access control apparatus 110-1 performs the ICS encapsulation by adding a network control field as the transmitting

ICS network address "7711", the sender ICS user address "2212-, the receiver ICS user address "1156" and the receiving ICS network address "8822", and sends it to the relay apparatus 120-1 as the ICS network frame F2 (Step S106). The above procedures illustrated in a flowchart are as shown in FIG.18, with the inter-corporation communication being flow (2) therein.

In the above inter-corporation communication, in the event that the sender ICS user address within the ICS user frame F1 is made to be the inter-corporation communication address "2212", the sender and receiver perform the inter-corporation communication using an inter-corporation communication address (Steps S102 and S104). In 3 5

- J this case, the access control apparatus 110-1 does not perform the process of converting the sender ICS user address "2212" into the intercorporation communication address "2212", as such is not necessary. The above procedures are illustrated in a flowchart shown in FIG.18, with the inter-corporation communication as flow (3). The sender ICS user address may be used to specify the transmitted original of the ICS frame.

The relay apparatus-120-1 transfers the ICS network frame to the access control apparatus 110-4 within the VAN-2 via the relay apparatus 120-2 within the VAN-1, the inter-VAN gateway 130, and the relay apparatus 1203 within the VAN-2, based on the receiving ICS network address. It will be described with reference to FIG.19. The access control apparatus 110-4 receives the ICS network frame (Step S110), forms an ICS user frame F5 from the network data field (Step

S111: ICS reverse encapsulation), decides from the receiving ICS network address the ICS logic terminal for sending ((1) in Step S112), and sends to the LAN 100-3 (Step S113). At the same time, in the event that the relation among the transmitting ICS network address "7711", the sender ICS user address "2212", the receiver ICS user address "1156" and the receiving ICS network address "8822" is not registered in the conversion table within the access control apparatus 110-4, a temporary conversion table 114-2 is compiled ((2) in Step S112). The registration contents of the temporary conversion table 114-2 are updated according to a process such as the contents being deleted if there is no usage thereof for 24 hours. The ICS use 3 6

frame is routed through the LAN 100-3, and is transferred to the terminal having the ICS user address "1156".

In this embodiment, it is not set in the temporary conversion table 114-2. In another embodiment of this, the conversion table 113-

1 does not include the sender ICS user address (intra-corporation) and the sender ICS user address (inter-corporation), and further does not contain the flowchart (2) in FIG.18, i.e., Step S105. A merit of this embodiment is that the register number to the conversion table can be reduced to one of the sender ICS user address if there are the sender ICS user address for one of the receiver ICS user address.

Embodiment-2 (Virtual dedicated line): Now, description of the operation of virtual dedicated line

connection according to the present invention will be made with reference to FIG.20. Here, the virtual dedicated line connection refers to communication wherein the ICS user frame is transferred in a fixed manner to a receiving ICS network address already registered in the conversion table, regardless of the ICS user address within the user control field of the ICS user frame, in which the format

taken is one-on-one or one-on-N. While the components of FIG.20 are the same as those of Embodiment-1 shown in FIGs.14 and 15, what is different is the contents of registration in the conversion table shown in FIG.21. In the conversion table of the access control apparatus, the receiving ICS network address is determined from the transmitting ICS network address in a fixed manner, so that either 3 7

the sender ICS user address (intra-corporation), the sender ICS user address (inter-corporation) and the receiver ICS user address are either not registered, or ignored if registered.

Description will now be given regarding a case in which the

corporation X uses virtual dedicated line connection, and the communication is conducted between the LAN 200-1 of the corporation X which is connected to the access control apparatus 210-1, and the LAN 2002 of the corporation X which is connected to the access control apparatus 210-5. c preparation>> The user applies to the VAN operator for the virtual

dedicated line connection. The VAN operator determines the ICS network address "7711" of the ICS logic terminal at the connection point between the access control apparatus 210-1 for connecting the LAN 200-1 of the corporation X and the user logic Communications line 240-1, and similarly determines the ICS network address "9922" of the ICS logic terminal at the connection point between the access control apparatus 210-5 for connecting the LAN 200-2 of the corporation X and the user logic communications line 240-2. Next, the VAN operator performs setting to the conversion table 213-1 of the access control apparatus 210-1 of the following: the transmitting ICS network address "7711", the receiving ICS network address "9922" and the request identification. Illustrated in FIG. 21 is an example wherein the request identification "3" has been made to serve as the virtual dedicated line connection. Similarly, the VAN operator performs 3 8

al setting to the conversion table of the access control apparatus 210-5 of the following: the transmitting ICS network address "9922", the receiving ICS network address "7711" and the request identification.

<<Procedures>> The operation will be explained with reference to FIG.22.

The LAN 200-1 of the corporation X sends an ICS user frame F10 to the ICS 200 via the user logic communications line 240-1. The access control apparatus 210-1 receives the ICS user frame F10 from the ICS logic terminal of the.ICS network address "7711" (Steps S200 and S201), references to the request identification "3" of the originating ICS network address "7711" in the conversion table 213-1, identifies this as a virtual dedicated line connection (Step S202), and reads the receiving ICS network address "9922" (Step S203).

Next, the access control apparatus 210-1 adds a network control field

to the ICS user frame F10 in which the receiving ICS network address is set to "9922" and the transmitting ICS network address is set to "7711", thus forming an ICS network frame F11 (Step S204; ICS encapsulation). and sends the frame F11 to the relay apparatus 200-1 (Step S205). The relay apparatus 220-1 which received the ICS network frame Fll determines the destination based on the receiving ICS network address of the ICS network frame F11, and sends an ICS network frame F12 to the relay apparatus 2202. The ICS network frame F12 is transferred to the access control apparatus 210-5 via the relay apparatus 220-4 within the VAN-.

The access control apparatus 210-5 removes the network n

-? control field from the ICS network frame F13 (ICS reverse

encapsulation), and sends the ICS network frame F14 from the ICS logic terminal of the ICS network address "9922" to the user logic communications line 240-2. Then, the LAN 200-2 of the corporation X receives the ICS user frame F14. Transmission can be made in the same say as described from the LAN 200-2 to the LAN 200-1, and thus, interactive communication is available. Since it is clear that the sender and the receiver are not necessary to be the same corporation X, using the same method, an ICS user frame can be transferred from the LAN 200-1 of the corporation X to a LAN 200-3 of another corporation Y. While the above description has been made with reference to a

case of one-on-one, one-on-N communication can also be performed.

For example, a plurality of ICS network addresses may be set to the conversion table 213-1 of the access control apparatus 210-1 shown in FIG. 20, as indicated by the transmitting ICS network address "7712".

In the present example, two ICS network addresses "6611" and "8822" are set. The access control apparatus 210-1, upon receiving the ICS user frame from the ICS logic terminal with an ICS network address "7712", forms a first ICS network frame wherein an ICS network control field set with "6611" for the receiving ICS network address

is added thereto, and a second ICS network frame wherein a network control field set with "8822" for the receiving ICS network address

is added thereto, these being sent to the relay apparatus 220-1.

Consequently, one-on-two communication can be performed. Further, 4 0

one-on-N communication can be performed by transferring each ICS network frame in the same manner as described above.

Embodiment-3 (ICS network server): AS shown in FIG.23, an ICS network server 330 is comprised of a processing device 331 and an ICS network database 332, the data held by the ICS network database 332 comprising: question item, type, contents of answer, and network addresses of other ICS network servers. The ICS network server 330 analyzes the data portion of the ICS frames received from the access control apparatus 310-1, refers to the ICS network database 332 based on this, obtains answer contents corresponding with the question items (in the event that the identification is "1"), and sends the obtained answer to the access control apparatus 310-1. In the event that the ICS network database 332 does not have answer contents corresponding with the question items (in the event that the identification is "2"), questions another ICS network server and obtains the answer contents corresponding with the question items therefrom, using the ICS network server communication function, based on the ICS network address of another ICS network server, and sends the answer obtained thus to the access control apparatus 310-1..

In further detail, the following are registered to the conversion table 313-1 shown in FIG.24 as preparatory items: the ICS user address "2000" of the ICS network server 330, the ICS network address "7721" and the request identification "4". Here, the request 4 1

identification "4" indicates that the ICS user address "2000" is a number used in common with other users (called an "ICS special number"), like the telephone number "119" in Japan. Next, it is written to the ICS network database 332 that the type of the question Q1 is "1" and that the answer contents are "A1", that the type of question Q2 is "2", the answer contents field is left blank, and the

ICS network address for the other ICS network server 340 is written as "8844".

Next, the user of the ICS user address "0012" sends an ICS frame F20 (including question Q1) to the ICS user address "2000" of the ICS network database 332. The access control apparatus 310-l receives the ICS user frame F20 from the ICS logic terminal of the line portion 311-1, obtains the ICS network address "7711", references the conversion table 313-1, and sends an ICS network frame which is ICS encapsulated to the ICS network server 320 as illustrated in the flowchart shown in FIG.26. The ICS network database 332 finds the answer A1 corresponding to the question Q1 contained in the ICS frame F20 (Step S300 and S301), and returns the answer Al to the access control apparatus 310-1. The access control apparatus 310-1 sends an ICS frame containing the answer A1 to the ICS user address "0012".

The user of the ICS user address "0012" sends an ICS frame F21 (including question Q2) to the ICS user address "2000". The access control apparatus 310-1 refers to the conversion table 313-1, and upon obtaining the ICS network address "7721", sends an ICS frame 4 2

comprised of the ICS encapsulated frame F21. The ICS network database 332 recognizes the type "2" corresponding to the question Q2 contained in the ICS frame F21 tSteP S300) and knows that the ICS network database 332 itself does not have the answer (A2).

Therefore, the ICS network database 332 performs information exchange with another ICS network server 340 using ICS network communication functions, based on the ICS network address "8844" of the ICS network server 340 (Step S302), and returns the answer A2 to the access control apparatus 310-1. The access control apparatus 310-1 sends an ICS frame containing the answer A2 to the ICS user address "0012".

Embodiment-4 (ICS address administration server): As shown in FIG.27, the ICS address administration server 430 is connected with via the access control apparatus 410-1 via the ICS network communication line 460 and holds a correspondence table 432 regarding an ICS network address having an ICS logic terminal at the line portion 411-1 of the access control apparatus 410-1 and the ICS user address corresponding thereto. Examples of the conversion table 413-1 and the correspondence table 432 are respectively shown in FIGs.28 and 29. That is, the ICS address administration server 430 holds ICS user addresses "2013", "2014", "1234" and "4500", and the corresponding ICS network addresses "7711", "7711", "7712" and "7713". At the same time, all the information to be described in the conversion table, address related information such as records dealing with VAN operation may be included, as well. Further, the ICS 4 3

J address administration server 430 holds the ICS network addresses of a plurality of other ICS address administration servers, and the ICS network addresses of a plurality of ICS name servers. Also, the ICS address administration server 430 is capable of communicating using the ICS name server described in Embodiment-5 and the ICS network server communication function, thus obtaining ICS names corresponding with ICS user addresses.

The processing device 412-1 of the access control apparatus 410-1 can perform the communication with the ICS address administration server 430 using the ICS network server communication function, and disclose the value of the ICS network address and have the corresponding ICS user address, or disclose the value of the ICS user address and have the corresponding ICS network address. The operation will be explained with reference to FIG.3O. The ICS address administration server 430 checks or not whether the ICS network address or the ICS user address questioned from the access control apparatus server 410-1 is registered in its correspondence table 432 (Step S400), and answers a reply if it is registered (Step S401). If the ICS network address or the ICS user address is not registered in the correspondence table, the ICS address administration server 430 communicates with another ICS address administration server 440 using the ICS network server communication function, thus obtaining the ICS user address or the ICS network address (Step S402), the results thereof being replied to the access control apparatus 410-1 (Step S403). According to such a 4 4

l configuration, the access control apparatus 410-1 is able to request of the ICS address administration server 430 and to obtain one of the ICS network address or ICS user address based on the other.

Embodiment-5 (ICS name server): The ICS user address is problematic in that it is a 32-bit binary expression or 128-bit binary expression for example, and thus is difficult to remember. There is a method wherein an "ICS name" which is easily remembered, is used.

First, description will be made regarding the ICS name. The

ICS address expressed in binary form is, as shown in FIG.11, expressed by e.g., a district administration code, country code, VAN code, VAN district code, VAN access point code, and user logic code, with these numeric values being arrayed to form an expression such as district administration code I country code I VAN code D VAN district code I VAN access point code I user logic code. In the ICS name, the district administration code which can be expressed in the binary form as described above, for example, is expressed as follows: AS (an ICS name component which indicates Asia), JP (Japan), VAN#1 (identification of a VAN), DIS#1 (identification of a VAN district code which comprises the VAN#1), ACS#1 (identification of a VAN access point code restricted by the DIS#1), USR#1 (identification of a user logic code). The components of the ICS name thus decided are reversed and separated by dots ".", thus forming the ICS name "USR#l.ACS#l.DIS#l.VAN#l.JP.AS". In the above- described case, this 4 5

ICS name may be even further divided, so that the USR#1 is divided into USR#10 and COMP#10, and ACS#1 is divided into ACS#11 and ACS#12, thus giving the overall ICS name "USR#lO.COMP#lO.ACS#ll.ACS#12.DIS#1.

VAN#1.JP.AS".

The ICS name server, which is a type of ICS network server, will now be described. As shown in FIG.31, the ICS name server 550 is made up of a processing device 551 and an ICS name conversion table 552, with the ICS name conversion table 552 being comprised of e.g., ICS name, type (identification of existence of an ICS user address corresponding to the ICS name), ICS user address and so forth. The type "2" indicates that the ICS network database 332 does not hold an ICS network address corresponding to the ICS name, and thus the ICS network address corresponding to the ICS name is to be obtained from another ICS name server. An example of the conversion table 513-1 is shown in FIG.32. Here, another ICS name server administrating the ICS name "USR#2.ACS#2.DIS#2. VAN#2. JP.AS" can be called up "DIS#2.VAN#2.JP.AS" with "USR#2" and "ACS#2" removed. The ICS name server 550 analyzes the ICS frame data field received from

the access control apparatus 510-1, refers to the ICS name conversion table 552 based on the above analysis, obtains an ICS user address corresponding to the ICS name, and sends it to the access control apparatus 510-1. Further based on the ICS user address, a reply is made regarding the ICS name corresponding thereto. In the event that an ICS user address corresponding thereto does not exist within the ICS name conversion table 552, the ICS network communication function 4 6

1 - \1

Hi is used to request the questioned ICS user address from another ICS name server which has the ICS user address, and the ICS user address obtained therefrom is sent to the access control apparatus 510-1.

Now, description will be made the method whereby the terminal

of the sender ICS user address "0012" connected to the LAN 500-1 obtains an ICS user address corresponding to the ICS name #1 "USR#1.

ACS#l.DIS#l.VAN#l.JP.AS". Here, two cases will be described: that wherein the access control apparatus 510-1 obtains data from the ICS name server 550, and that wherein the access control apparatus 510-1 obtains data from another ICS name server 560.

First, in preparation, an ICS network address "7741" corresponding to the ICS user address "1000" of the ICS name server 550, and a request identification "4" thereof are registered in the conversion table 5i3-1 of the access control apparatus 510-1. Here, the request number "4" indicates that asthe ICS user address "1000" is the telephone number "119", it is a special ICS number to be common to another user. The receiver ICS user address "2014" corresponding to the ICS name "USR#l. ACS#l.DIS#l.VAN#1. JP.AS" is registered in the ICS name conversion table 552 of the ICS name server 550. Then, the terminal user of the sender ICS user address "0012" of the LAN 500-1 sends an ICS user frame F40 to the access control apparatus 510-1, and requests a conversion from the ICS name #1 "USR#l.ACS#l.DIS#l.VAN#l.JP.AS" to an ICS user address. The processing device 512-1 within the access control apparatus 510-1 receives the ICS user frame F40 from the ICS logic terminal in the

line portion 511-1, obtains the ICS network address "7711" and then refers to the conversion table 513-1 based on the receiver ICS user address of the ICS user frame F40. If the corresponding request identification is 64'i (connection to an ICS name server of the ICS special number), the processing device 512-1 performs the ICS encapsulation of the ICS user frame F40 by using the obtained ICS network address "7711", and sends an ICS network frame including an ICS name to the ICS name server 550.

As shown in FIG.34, the ICS name server 550 analyzes the ICS name within the ICS frame received from the access control apparatus 510-1 with the processing device 551, and refers to the ICS name conversion table 552 (Step S500). Then, in the event that an ICS user address corresponding to the ICS name exists within the ICS name conversion table 552, the ICS user address is obtained, and the ICS network frame F45 including the ICS user address "2014" is sent to the access control apparatus 510-1 (Step S501). In the event that . the questioned ICS name does not exist within the ICS name conversion table 552, the access control apparatus 512-1 receives an ICS user frame F41 for example, and in the event that the ICS name #2 (i.e., "USR#2.ACS#2.DIS#2.VAN#2.JP.AS") described in the ICS user frame F41 is not described in the ICS name conversion table 552, the ICS name server 550 obtains the ICS network address of another ICS name server from the ICS name conversion table 552 based on the ICS name (i.e., "DIS#2.VAN#2.JP.AS"), and then obtains the ICS user address "1130" corresponding to the questioned ICS name, by means of performing an 4 8

rig information exchange by using the ICS name server 560 and the ICS network server communication function (Step S502). The obtained result is sent to the access control apparatus 510-1 (Step S503).

The access control apparatus 510-1 exchanges informations with the ICS address administration server 570 based on the receiver ICS user address which is received from the ICS name server 550 and is described in the ICS network frame F45, obtains the ICS network address corresponding to the ICS user address and the address related information contained in the correspondence table, and writes the data comprised of the obtained ICS user address, ICS network address and address-related information, to the conversion table 513-1. The access control apparatus 510-1 sends the ICS user address "2014" (or "1130") obtained from the ICS name server 550 to a terminal user of the sender ICS user address "0012" of the LAN 500-1. The ICS user address "0012" is written in the ICS network frame F45. The terminal user of the sender ICS user address "0012" of the LAN 500-1 obtains the receiver ICS user address "2014" (or "1130") obtained from the access control apparatus 510-1.

Embodiment-6 (ICS name server): In Embodiment-5, the access control apparatus 510-1 does not write the data such as the obtained ICS user address, the ICS network address and so on to the conversion table 513-1, but rather writes this obtained data to a temporary conversion table 5141. In this case, the aforementioned address written to this temporary conversion 4 9

/ table are deleted after 24 hours, for example.

Embodiment-7 (ICS name server): In Embodiment-5, the access control apparatus 510-1 does not call up the address administration server 570 and only performs service of telling the obtained ICS user address "2014" (or "1130") to the terminal of the ICS user address "0012".

Embodiment-8 (Accounting server): There are three types of charging systems: the "network charging system" wherein the charging is performed by counting ICS user frames to be sent or received when a communication is made, the "information charging system" wherein the charging is performed by counting the transferred information in the ICS user frame, and the "fixed charging system" wherein no charging is performed regarding the transferred ICS user frames, but a constant amount is charging for a certain period (month, year, etc.) of a time when the registration of the ICS user address or the like continues in the conversion table of the access control apparatus. The information charging system counts and charges by designating the identification which indicates the information charging to the user control field of

the ICS user frame. The network charging system and the information charging system are "transmitting account" if the transmitter of the communication bears the charges, and are "receiving account" if the receiver does. Each of the network charging system and the 5 0

-, Hi information charging system is called as "charge-by-quantity charging system". <cconfiguration>> The charging system in the ICS network according to the present invention will be explained with reference to FIGs.35 and 36.

Each example of the conversion table 813-1, the definition table for fixed charges 843 and the account information database 842 are respectively shown in FIG.37, FIG.38 and FIG.39.

Setting information of the charging system is held in the conversion table 813-1 in the access control apparatus 810-1 and the definition table for fixed charges 843 in the account server 840, and a set value indicating the network charging or the information charging and a set value indicating the charge-by-quantity charging system (identify the transmitting account and the receiving account) or the fixed charging system (identify the transmitting account and the receiving account) are held in the conversion table 813-1. The operation will be explained with reference to FIG.40. The access control apparatus 810-1 receives the ICS user frame F50 (Step S800), and reads out the type of charging system for each ICS frame held in the conversion table 813-1 us read out based on the ICS user address contained in the ICS user frame F50 and checks up the account condition (Step S801). The access control apparatus 810-1 forms the account information in the event that the read type indicates the charge-by-quantity charging system, and transfers the account information in the form of an account information frame F51 to the

- account server 840 which is one of the ICS network servers (Step S810). However, in the event that the read type indicates the fixed charging system, no formation of account information not transferring the account information in the form of an account information frame F51 to the account server 840 is performed (Step S820).

The account server 840 receives the account information frame F51 sent from each of the access control apparatuses, and stores the account information contained within the account information frames.

There is an account processing device 841 and an account information database 842 within the account server 840, whereby the account processing device 841 receives the accounting information frame F51 sent from the access control apparatus 810-1, analyzes the account information contained within the account information frame F51, and stores the information in the account information database 842. The account information database 842 uses the ICS network address and the ICS user address as identifiers, and stores the account information as a database. Also, in the event that the charging system is the charge-by-q antity charging system, the account information database 842 stores the information regarding the quantity in the form of a count number, which the count number may be set with an upper limit, and in the event that the count exceeds the set upper limit, the account server 840 notifies to the access control apparatus 810-1 that the upper limit has been exceeded, and the access control apparatus 810-1 which receives the notification terminates the communication of the user. The account server 840 is capable of 5 2

handing the stored account information to other VANs and users using the ICS network server communication function.

(1) Example of communication with an arrangement of network charging, transmitting charging and charge-by-quantity charging system: Description will be made regarding a case wherein the

corporation X and the corporation Y perform inter-corporation communication using the ICS 800 according to the present invention.

In this case, the charging system for the LANs 800-1 and 800-3 is the charge-by-quantity charging system for the network charging. with the entire bill being borne by the LAN 800-1, and no information charging being conducted.

<<Preparations- to make for communication>> The LANs 800-1 and 800-3 are each connected to the respective access control apparatuses 810-1 and 8104.

c<Preparations to make for charging>> The charging condition for the LANs 800-1 and 800-3 which are to conduct the communication is registered in the conversion table 813-1. The charging conditions are set for registering in the conversion table 813-1 based on the transmitting ICS network address, the receiver ICS user address, the receiving ICS network address, and the receiver ICS user address. A value "1" is set to indicate that network charging is to be conducted by charge-by-quantity charging with transmitting charging. Also, a value "1" is set for the charging unit price. Since the information charging is not to be 5 3

/: performed, a value "O" indicating non-charging is set to the charging conditions in the information charging condition of the conversion table 813-1. A value "O" indicating the fixed charging system is set in the conversion table of the access control apparatus 810-4 containing the LAN 800-3, to keep the access control apparatus 810-4 from performing the account processing, since the LAN 800-1 is to be billed. <<Description of operation of charging>>

Regarding the ICS user frame F50 sent from the terminal of the ICS network address "0012" connected to the LAN 800 1, the charging condition fields are specified from the sender ICS user

address and the receiver ICS user address in the ICS user frame at the processing device 812-1 within the access control apparatus 810-1 (Steps S800 and S801), and a reference is made to the charging conditions in order to specify the charging system relating to the network charging from the field (Step S810). Since this is "1"

indicating that the charging system is the charge-by-quantity charging and that transmitting charging is to be performed, the charging unit price is referred to (Step Sail), the charging information is formed (e.g. , charging unit price "1" is formed as one unit of charging information) (Step S812), and that charging information is transferred to the account server 840 in the form of an account information frame F51 (Step S813). In the account processing device 841 within the account server 840, the network account counter of the account information database 842 is 5 4

lo incremented, according to the charging information within the account information frame F51 received from the access control apparatus 810-

1 (Step S814). In the event that the charging conditions is neither in examples described later, the charging described here is performed. (2) Example of communication with an arrangement of network charging, transmitting charging and fixed charging system: Description will be made regarding a case wherein the

corporation X performs the intra-corporation communication using the ICS 800 according to the present invention. In this case, the charging system for the LANs 800-1 and 800-2 is the fixed charging system for the network charging, with the entire bill being borne by the LAN 800-1, and no information charging being conducted.

<<Preparations to make for communication>> The LANs 800-1 and 800-2 are each connected to the respective access control apparatuses 810-1 and 8105.

* <preparations to make for charging>> The charging condition for the LANs 800-1 and 800-2 which are to conduct the communication is registered in the conversion table 813-1. The charging conditions are set for registering in the conversion table 813-1 based on the transmitting ICS network address, the sender ICS user address, the receiving ICS network address and the receiver ICS user address. A value "O" is set to indicate that network charging is to be conducted by the fixed charging system, and also, a value "1" indicating the transmitting charging is set to 5 5

billing bearing of the definition table for fixed charges 843, indicating the party bearing the charges. Since the information charging is not to be performed. a value "O" indicating non-charging is set to the charging conditions in the information charging condition of the conversion table 813-1. A value "O" indicating the fixed charging system is set in the conversion table of the access control apparatus 810-5 containing the LAN 800-2.

<<Description of operation of charging>>.

Regarding the ICS user frame sent from the terminal of the ICS networkaddress "0012" connected to the LAN 800-1, the charging condition fields are specified from the sender ICS user address and

the receiver ICS user address and in the ICS user frame at the processing device 812-1 within the access control apparatus 810-1 (Steps S80Q and S8013, and a reference is made to the charging conditions in order to specify the charging system relating to the network charging from the field (Step S810). Since this is "0"

indicating that the charging system is fixed charging, no charging processing such as forming the charging information is performed (Step S820). The processing for billing is performed with reference to the definition table for fixed charges 843. That is, billing is performed to the LAN 800-1, since the value "0" indicating transmitting charging is set to the definition table for fixed charges 843.

(3) Example of communication with an arrangement of network charging, receiving charging and charge-by-quantity charging system: 5 6

Description will be made regarding a case wherein the

corporation X and the corporation Y perform inter-corporation communication. In this case, the charging system for the LANs 800-1 and 800-3 is the charge-by-quantity charging system for network charging, with the entire bill being borne by the LAN 800-3, and no information charging being conducted.

<<Preparations to make for communication>> The LANs 800-1 and 800-3 are each connected to the respective access control apparatuses 810-1 and 8104.

cCpreparations to make for charging>> The charging condition for the LANs 800-1 and 800-3 which are to conduct the communication is registered in the conversion table 813-1. The charging conditions are set for registering in the conversion table 813-1 based on the transmitting ICS network address, the sender ICS user address, the receiving ICS network address and the receiver ICS user address. A value "2" is set to indicate that network charging is to be conducted by the charge-by-quantity charging system, and also, a value "1" is set for the charging unit price. Since the information charging is not to be performed, a value "O" indicating non-charging is set to the charging conditions in the information charging condition of the conversion table 813-1.

value "2" indicating the charge-by-quantity charging system and the receiver charging is set to the conversion table of the access control apparatus 810-4 containing the LAN 800-3, since the LAN 800-3 is to be billed.

5 7