JP2000013413A - Group communication device and method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve security by means of filtering using the address of a terminal in group communication in which communication is performed only between terminals by allowing a means which forms a frame to include a means that forms an IP packet in which an Ethernet packet is written in its data area. SOLUTION: An edge device 2-1 writes an Ethernet packet from a terminal 1-8 in a data area of an IP packet and transmits it as an IP packet transmitted from the device 2-1 to a node part 2-3. The part 2-3 restores the Ethernet packet from the terminal 1-8. When the Ethernet packet is a uni-cast packet and also a transmitting and receiving address is registered with a group that is the same as group information which is previously notified from a managing part 2-2, the Ethernet packet is written in the data area of an IP packet and is transmitted as an IP packet from the part 2-3 to the device 2-1 to which the destination terminal 1-8 is connected.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to computer communication for transmitting packets between computer devices using a network, and more particularly to group communication in which communication can be performed only between computer devices belonging to a predetermined group. is there. Here, the address means the MAC (Media
Access Control: Medium access control.

[0002]

2. Description of the Related Art Hitherto, as a computer communication system for home users, a system for packetizing and transmitting data between computer devices using a dial-up communication line and a computer device using a cable modem using a CATV line. A system for performing communication between devices has been widely constructed.

In the former case, bridges or routers are installed at both ends for connection between Ethernets at distant points, and Ethernet packets (such as IP packets in the case of a router) are converted into a protocol on a communication line. Communication is common. That is, an Ethernet packet or an IP packet is transferred to an HDLC (High Level Data Link).
Control) or PPP (Point-to-Point Protocol).

The HDLC protocol maps a packet between a start flag and an end flag and transmits the packet over a communication line. On the other hand, in the latter case, the cable modem installed in the house provides the user with an Ethernet connection interface and connects to the center LAN.

[0005] The above-mentioned cable modem system can provide a group communication service that enables communication only between terminals of members registered in advance using a commercially available LAN switch or the like. The conventional example will be described with reference to FIG. FIG. 18 is an overall configuration diagram of a conventional group communication device. In FIG. 18, reference numeral 1-1 denotes a cable modem for subscriber premises, and reference numeral 1-2 denotes a subscriber system (CATV).
Subscriber line such as a line), reference numerals 1-3 are relay amplifiers, reference numeral 1
-4 is an Ethernet interface, 1-5 is a head end unit for controlling the cable modem, 1-
6 is a cable modem on the center side, and 1-7 is a center L
AN, reference numeral 1-8 denotes a terminal, reference numeral 1-9 denotes a LAN switch, and reference numeral 3 denotes a center processing device. Here, terminal 1-
8 is a computer device. The operation will be described below.

A cable modem realizes high-speed digital transmission by using an empty channel of a cable television, and has a transmission speed of up (from the user side to the center side) / down (from the center side to the user side). There are a symmetric type and an asymmetric type in which the downstream speed is higher than the upstream speed. The cable modem 1-1 provides the user with the Ethernet interface 1-4 to connect the terminal 1-8. The signal from the terminal 1-8 is digitally modulated and transmitted to the center processing device 3 via the subscriber system (coaxial cable) 1-2. The center processing device 3 is connected to a center LAN 1-7 via a cable modem 1-6. The communication control of the modem is performed by a headend (including a translator) unit 1-5, and the user shares a communication channel. Therefore, the transmission speed can be fully used when it is free, but the speed decreases when another user interrupts.

A LAN switch 1 is connected to the center LAN 1-7.
-9 is connected. In a general cable modem system, a router is connected instead of the LAN switch 1-9, but the LAN switch 1-9 is required to realize group communication between limited members. That is, grouping is performed by installing a switch having a VLAN (Virtual LAN) function on the center side.

As a method of performing group communication with the LAN switch 1-9 or forming a VLAN, (1) port unit, (2) IP subnet unit, and (3) M
There are three types of AC address units.

[0009]

In the above method,
(1) In the setting in units of ports, the number of ports becomes insufficient when the number of groups increases. (2) In the VLAN of the IP layer, it is difficult for the user to easily change the setting of the IP address, so that it is difficult to ensure security. (3) In the VLAN of the MAC layer, it is necessary to individually set the addresses of the terminals. When the number of terminals increases, the management time becomes enormous, and the broadcast packet reaches all the terminals connected to the port. However, there is a problem that the processing load on the terminal is large.

The present invention has been made in view of such a background, and performs filtering using a terminal address in a group communication in which communication is performed only between terminals connected to an edge device of a registered member. It is an object of the present invention to provide a group communication device capable of improving security. SUMMARY OF THE INVENTION An object of the present invention is to provide a group communication device that can improve user convenience by automating a process of registering terminal address information. SUMMARY OF THE INVENTION An object of the present invention is to provide a group communication device capable of improving security and reducing the processing load of a terminal by limiting the reach of a broadcast packet. SUMMARY OF THE INVENTION It is an object of the present invention to provide a group communication device that can reduce the time for address search processing and address processing.

[0011]

A first aspect of the present invention is a group communication apparatus, which is characterized by a large number of terminals and a center processing apparatus for accommodating the terminals via a communication line. Device, and an edge device inserted into the communication line for each of one or more of the terminals, wherein the edge devices are assigned to a plurality of groups, and between terminals connected to edge devices belonging to the same group. Group communication means for permitting transmission and reception of packets; and means for forming a frame including a packet transmitted and received between the edge device and the center processing device and transmitted and received by the terminal. Is a communication device including group communication means for allowing transmission and reception of the frame between edge devices belonging to the group.

Here, a feature of the present invention is that the packet is an Ethernet packet, and the means for forming the frame is a means for forming an IP packet in which the Ethernet packet is written in its data area. Is included.

Preferably, the group communication means includes a table in which a group to which the edge device belongs and an address of the terminal connected to the edge device are recorded.

As described above, since the group communication means manages the group communication by using the edge device, the security of the filtering using the terminal address in the group communication can be improved. For example, if there is a terminal that attempts to access a terminal belonging to another group in violation of the rule, even if the terminal that violates the rule sends a packet by falsifying its own address, Since the validity is determined by checking the address of the connected edge device, a packet transmitted by a terminal violating the rule can be invalidated.

Furthermore, in the address check, it is only necessary to search for the terminal addresses under the edge devices belonging to the same group, so that the address search processing and the address search time can be reduced.

It is preferable that the edge device includes means for notifying the group communication means of address information of a terminal connected thereto. As described above, the user's convenience can be improved by automating the registration processing of the terminal address information.

At this time, the notifying means may include a means for confirming the address information of the terminal at predetermined intervals and notifying the group communication means, or the notifying means may include It may be configured to include means for confirming the address information of the terminal when a change occurs in the configuration of the terminal connected to the group and notifying the group communication means.

The group communication means determines whether or not the Ethernet packet included in the IP packet is a broadcast packet addressed to all terminals belonging to the same group, and the determination result of the determination means is When indicating a broadcast packet, it is preferable to include a means for adding a group identifier to the IP packet including the broadcast packet and transmitting the IP packet to all the edge devices. At this time, the edge device is configured to include means for referring to the group identifier, receiving an IP packet having a group identifier of a group to which the edge device belongs, and discarding an IP packet having a group identifier other than the group to which the edge device belongs. Is desirable.

The IP packet broadcast to each edge device in this manner is referred to by its edge device for its group identifier. If the group identifier indicates a group to which the device belongs, the IP packet is accepted. If the packet indicates another group, the broadcasted Ethernet packet can be distributed to a predetermined group by discarding the IP packet.

Alternatively, the group communication means determines whether or not the Ethernet packet included in the IP packet is a broadcast packet addressed to all terminals belonging to the same group, and a determination by the determination means. If the result indicates a broadcast packet, the IP containing the broadcast packet
It may be configured to include means for transmitting a packet to each of the edge devices belonging to the same group.

As described above, the I broadcast broadcast only to the edge devices belonging to the predetermined group from the beginning.
Invalid IP discarded by distributing P packets
Bandwidth can be used effectively without transferring packets.

Further, there is provided means for forming a control IP packet including an Ethernet packet for transmitting control information transmitted and received between the edge device and the center processing device,
It is preferable that the group communication unit includes a group communication unit that allows transmission and reception of the control IP packet between edge devices belonging to the same group.

Thus, control information transmission Ethernet packets that do not need to be transferred to the terminal can be transferred between the edge device and the center processing device using group communication. Therefore, control information is not unnecessarily transmitted to the terminal and security is improved, and the terminal does not need to process unnecessary control information transmission Ethernet packets, thereby reducing the processing load.

At this time, the group communication means determines whether or not the control information transmission Ethernet packet included in the control IP packet is a broadcast packet addressed to all edge devices belonging to the same group. And when the determination result of the determining means indicates a broadcast packet, a means may be provided that includes a means for assigning a group identifier to the control IP packet containing the broadcast packet and transmitting the packet to all the edge devices. . At this time,
The edge device is configured to include means for referring to the group identifier, receiving a control IP packet having a group identifier of a group to which the edge device belongs, and discarding a control IP packet having a group identifier other than the group to which the edge device belongs. It is desirable.

Alternatively, the group communication means determines whether or not the control information transmission Ethernet packet included in the control IP packet is a broadcast packet addressed to all edge devices belonging to the same group. When the determination result of the determination unit indicates a broadcast packet, the configuration may include a unit that transmits the control IP packet including the broadcast packet to each of the edge devices belonging to the same group.

A second aspect of the present invention is a group communication method, in which an edge device is inserted into a communication line between one or more terminals and a center processing device accommodating the terminal. Are assigned to a plurality of groups, allow transmission and reception of packets between terminals connected to edge devices belonging to the same group, and transmit and receive packets transmitted and received by the terminal between the edge device and the center processing device. This is a group communication method that configures a frame including a frame and allows transmission and reception of the frame between edge devices belonging to the same group.

Here, a feature of the present invention is that the packet is an Ethernet packet, and the frame is an IP packet in which the Ethernet packet is written in its data area, and is included in the IP packet. It is determined whether the Ethernet packet is a broadcast packet addressed to all terminals belonging to the same group. If the determination result indicates a broadcast packet, a group identifier is assigned to the IP packet including the broadcast packet. To all the edge devices.

Alternatively, it is determined whether or not the Ethernet packet included in the IP packet is a broadcast packet addressed to all terminals belonging to the same group. If the determination result indicates a broadcast packet, the broadcast packet is determined. And transmitting the IP packets to the edge devices belonging to the same group.

[0029]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of the present invention will be described with reference to FIGS. FIG. 1 is a diagram showing an overall configuration of a group communication device according to an embodiment of the present invention. FIG. 2 is a diagram showing a configuration of an Ethernet packet from a terminal and an Ethernet packet from an edge device / node unit according to the embodiment of the present invention. FIG. 3 is a diagram showing a configuration of an Ethernet packet. FIG. 4 is a diagram showing a configuration of an IP packet. FIG.
FIG. 2 is a block diagram of a main part of the edge device according to the embodiment of the present invention. FIG. 6 is a block diagram of a main part of the node unit according to the embodiment of the present invention. FIG. 7 is a configuration diagram of a table according to the embodiment of the present invention.

The present invention relates to a group communication apparatus, and the feature of the present invention is that, as shown in FIG. 1, a plurality of terminals 1-8 and a subscriber system including the terminals 1-8 including a communication line. 1-2, a center processing device 3 accommodated via a communication terminal 1-2, and an edge device 2-1 inserted into a communication line for each terminal 1-8. The edge devices 2-1 are assigned to a plurality of groups, and A management unit 2-2 and a node unit 2- as group communication means for allowing transmission and reception of packets between the terminals 1-8 connected to the edge device 2-1 belonging to the group.
5 and 6, the edge device 2-1 and the node unit 2-3 transmit / receive data between the edge device 2-1 and the center processing device 3 as shown in FIGS. And a processor 6-1 and 7-1 as means for forming a frame including a packet to be transmitted.
Is a group communication device that allows transmission and reception of the frame between the edge devices 2-1 belonging to the same group.

Here, a feature of the present invention is that the packet is the Ethernet packet shown in FIG. 3, and the processors 6-1 and 7-1 execute the Ethernet packet 3--3 as shown in FIG. 1 constitutes the IP packet 3-2 written in the data area.

Further, in the embodiment of the present invention, communication is performed by transmitting and receiving the Ethernet packet 3-3 shown in FIG. 2 between the cable modems 1-1 and 1-6 shown in FIG. The form of communication between the device 2-1 and the center processing device 3 is not directly related to the present invention, and other forms of communication may be used.

In the node section 2-3, as shown in FIG.
The table includes a table in which the group to which the edge device 2-1 created according to the information from the management unit 2-2 belongs and the address of the terminal 1-8 connected to the edge device 2-1 are recorded.

The processor 6 of the edge device 2-1
1 notifies the management unit 2-2 of the address information of the terminal 1-8 connected to itself. At this time, the processor 6-1
May check the address information of the terminal 1-8 at predetermined intervals and notify the management unit 2-2 of the address information, or
The processor 6-1 may check the address information of the terminal 1-8 and notify the management unit 2-2 when a change occurs in the configuration of the terminal 1-8 connected to the processor 6-1.

In the first embodiment of the present invention, the node unit 2
3 determines whether or not the Ethernet packet included in the IP packet is a broadcast packet addressed to all the terminals 1-8 belonging to the same group. When indicating, the IP packet including the broadcast packet is assigned a group identifier and transmitted to all edge devices 2-1.

In the second embodiment of the present invention, the processor 7-1 of the node unit 2-3 is a broadcast packet in which the Ethernet packet included in the IP packet is addressed to all terminals 1-8 belonging to the same group. If the result of the determination indicates a broadcast packet, the IP packet including the broadcast packet is transmitted to the edge device 2-1 belonging to the same group.

Further, processors 6-1 and 7-1 as means for forming a control IP packet including an Ethernet packet for transmitting control information transmitted and received between the edge device 2-1 and the center processing device 3 are provided. Processor 6
1 and 7-1 are edge devices 2 belonging to the same group
-1 allow transmission and reception of the control IP packet.

In the first embodiment of the present invention, the processor 7-1 of the node unit 2-3 controls all the edge devices 2-1 in which the control information transmission Ethernet packet included in the control IP packet belongs to the same group. It is determined whether or not the broadcast packet is a broadcast packet addressed to the router. If the determination result indicates a broadcast packet, a group identifier is assigned to the control IP packet including the broadcast packet, and the broadcast packet is addressed to all edge devices 2-1. Send each.

In the second embodiment of the present invention, the processor 7-1 of the node unit 2-3 is configured to determine whether the control information transmission Ethernet packet included in the control IP packet belongs to all the edge devices 2-1 belonging to the same group. It is determined whether or not the broadcast packet is directed to the edge device 2-1. If the determination result indicates a broadcast packet, the control IP packet including the broadcast packet is transmitted to the edge device 2-1 belonging to the same group. .

[0040]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of the present invention will be described. The group communication device according to the embodiment of the present invention shown in FIG. 1 is compared with the conventional group communication device shown in FIG.
Reference numeral 2-2: management unit, reference numeral 2-3: node unit, reference numeral 2-
4 Ethernet interfaces are different. These devices are the same as those of the cable modem 1 described in the conventional example shown in FIG.
1 and 1-6, one LA
N and are communicable with each other.

The outline of the operation will be described below. Edge device 2
-1 detects the address information of the subordinate terminal 1-8 connected by the Ethernet interface 2-4, and
Notify 2. The communication protocol at this time is SN
MP protocol is available. In the management unit 2-2,
The edge device 2-1 and the subordinate terminal 1-8 are linked to the group information based on the group registration information from the user in advance, and the information is notified to the node device 2-3 by the SNMP protocol.

The group registration information is notified to the node unit 2-3 and the edge device 2-1 as a group identification ID. By notifying the address information of the terminal 1-8, the user does not need to apply for the address information to the network side when adding or changing the terminal 1-8.
Further, even when the terminal 1-8 moves between users, it is notified as a new terminal from the destination edge device 2-1. Therefore, it is possible to confirm that the terminal 1-8 has been moved by the address duplication check in the management unit 2-2. Updating makes it possible to support terminal movement. In the node section 2-3,
The packet filtering is performed based on the destination address of the Ethernet packet from the terminal 1-8 connected to the edge device 2-1.

Next, a method of transmitting an Ethernet packet and a filtering operation will be described. Edge device 2-1
Then, the Ethernet packet from the terminal 1-8 is written in the data area of the IP packet, and is transmitted as an IP packet transmitted from the edge device 2-1 to the node unit 2-3. Of the Ethernet packet, and the Ethernet packet is a unicast packet, and its transmission / reception address is stored in the management unit 2.
-2 The result of collating with the group information notified earlier,
If registered in the same group, the Ethernet packet is written in the data area of the IP packet and transmitted as an IP packet from the node unit 2-3 to the edge device 2-1 to which the destination terminal 1-8 is connected. .

If the Ethernet packet is a broadcast packet, the packet is added to a group identifier and written in the data area of the IP packet, and transmitted as a broadcast IP packet transmitted from the node unit 2-3. At this time, whether to transmit the entire Ethernet packet from the terminal 1-8 or the portion excluding the FCS (error check bit) can be changed as necessary.

When the maximum data length (MTU) is exceeded by writing the Ethernet packet into the IP packet, the Ethernet packet is divided and transmitted.
At this time, a flag indicating the presence / absence of division, size, and the like is required as overhead information, but such a division process is a process generally performed in the transmission of an IP packet, and a description thereof will be omitted.

By the above processing, the address of the terminal 1-8 can be concealed, and by linking with the address of the edge device 2-1, only the terminal addresses in the same group are searched when searching for transmission / reception terminal address information. Only a check is required, and the search process and search time can be significantly reduced.

Next, an outline of a packet transmission format according to the present invention will be described with reference to FIG. Symbol 3-1
Is the format of the Ethernet packet from the terminal 1-8, and reference numeral 3-2 is the edge device 2-1 or the node unit 2.
Reference numeral 3-3 denotes a format of the transmission Ethernet packet of the edge device 2-1 or the node unit 2-3.

As shown in the figure, the edge device 2-1 or the node unit 2-3 sends the Ethernet packet 3-1 from the terminal 1-8 to the edge device 2-1 or the node unit 2
-3 is written in the data area as an IP packet 3-2. Further, by mapping this IP packet to the data area of another Ethernet packet, the IP packet is transmitted as an Ethernet packet 3-3 from the edge device 2-1 or the node unit 2-3. Thus, the terminal 1-
The mapping of the IP packet 3-2 in which the Ethernet packet 3-1 from No. 8 is written in the data area to the data area of another Ethernet packet 3-3 is referred to as encapsulation.

The formats of the Ethernet packets 3-1 and 3-3 and the IP packet 3-2 are standardized, and details are as shown in FIGS. Code 4
-1 is an IP header, and 4-2 is IP data. Note that the structure of the Ethernet header is slightly different in the IEEE 802.3 standard (LENGTH instead of TYPE, and the header length is different), but is not related to the operation of the present invention. Also, the Ethernet packet from the terminal 1-8 is
When writing in the data area of the P packet (IP data 4-2), a group identifier is added to the broadcast packet in the first embodiment of the present invention, which will be described later (the group identifier is the area of the IP data 4-2). , But omitted in FIG. 2).

Next, the configuration of the edge device 2-1 will be described with reference to FIG.
This will be described with reference to FIG. Reference numeral 6-1 denotes a processor, reference numeral 6
Reference numeral -2 denotes a data RAM, reference numeral 6-3 denotes a program memory for storing a processing program of the processor, reference numerals 6-4 and 6-5 denote Ethernet interfaces, and reference numeral 6-6 denotes a bus. The Ethernet packet from the terminal 1-8 is transferred from the Ethernet interface 6-4 via the bus 6-6 to the data RAM 6-2 as a buffer and the processor 6
-1 is written in the data area of the IP packet, and further encapsulated as shown by reference numeral 3-3 in FIG.
The data is transferred from the Ethernet interface 6-5 to the center processing device 3.

Similarly, packets from the center processing unit 3 are transmitted from the Ethernet interface 6-5 via the bus 6-6 using the data RAM 6-2 as a buffer, and
-1.

Next, the configuration of the node section 2-3 will be described with reference to FIG. Reference numeral 7-1 denotes a processor, and reference numeral 7-
Reference numeral 2 denotes a data RAM, reference numeral 7-3 denotes a program memory for storing a processing program of the processor, reference numeral 7-4 denotes an Ethernet interface, and reference numeral 7-5 denotes a bus. The packet from the terminal 1-8 is filtered and encapsulated in the processor 7-1 from the Ethernet interface 7-4 via the bus 7-5 using the data RAM 7-2 as a buffer.
-4.

(First Embodiment) A first embodiment of the present invention will be described with reference to FIGS. FIG. 8 is a diagram showing a transmission format of a unicast packet between terminals (referred to as PCs) 1-8. FIG. 9 shows a terminal (P) according to the first embodiment of the present invention.
C) It is a figure showing the transmission format of the broadcast packet between 1-8. FIG. 10 is a diagram showing a transmission format of a unicast packet between the edge device (described as LEC) 2-1 and the management unit (referred to as RMS) 2-2. FIG. 11 is a diagram showing a transmission format of a broadcast packet from the edge device (LEC) 2-1 to the management unit (RMS) 2-2. FIG. 12 shows the management unit (RMS) 2-2 to the edge device (LE) according to the first embodiment of the present invention.
FIG. 3C is a diagram showing a transmission format of a broadcast packet to 2-1.

Each format assumes the case of an Ethernet packet, and shows only the address information part of the header information. The description of other header information (protocol type, etc.) is omitted. The IP address of the IP packet on the Ethernet packet from the edge device 2-1 or the node unit 2-3 is an address corresponding to the IP address of the edge device 2-1 or the node unit 2-3.

First, transmission formats of a unicast packet and a broadcast packet for transmitting / receiving user information between terminals 1-8 will be described.

In FIG. 8, an Ethernet packet as a unicast packet (PC-B, PC-A) from the terminal 1-8 is written in the data area of the IP packet in the edge device 2-1 and further encapsulated. , The source is the edge device 2-1, and the destination is the Ethernet packet (RSN-1, LEC-1, H, PC-
B, PC-A) is transferred to the center side. The node unit 2-3 that has received this checks the transmission / reception address information of the encapsulated IP packet against the group information, and
If the P packets are in the same group, Ethernet packets (LEC-2, RSN @ 1, H, PC-B, PC-) addressed to the edge device 2-1 to which the destination terminal 1-8 is connected.
A), and transfer to the user side. The edge device 2-1 that has received the packet extracts the encapsulated IP packet (H, PC-B, PC-A), and further extracts the Ethernet packet (PC-B, PC-A) from the data area of the IP packet. And transfers it to the subordinate terminal 1-8 via the Ethernet interface 2-4.

In FIG. 9, an Ethernet packet as a broadcast packet (BC, PC-A) from the terminal 1-8 is written in the data area of the IP packet in the edge device 2-1, further encapsulated, and Is a unicast Ethernet packet (RSN-1, LEC-
1, H, BC, PC-A). The node unit 2-3 receiving the packet compares the address information of the encapsulated IP packet with the group information, copies the IP packet, and encapsulates the IP packet into a broadcast Ethernet packet corresponding to the number of groups to which the IP packet belongs. At the same time, broadcast Ethernet packets (BC, RSN-1, H, H) in which a group identifier (group ID) is added to each Ethernet packet.
ID-1 to k, BC, PC-A). In the edge device 2-1 which has received this, the encapsulated IP packet (H, ID-k, BC, PC-A)
Ethernet packet (ID-k, B
C, PC-A) is taken out, the group identifier is checked, and if it belongs to the same group, the broadcast packet (BC, PC-A) is transferred to the subordinate terminal 1-8 via the Ethernet interface 2-4. . If not, discard it.

Next, the transmission format of the unicast packet and the broadcast packet for transmitting and receiving the address information and other control information packets of the terminal 1-8 performed between the edge device 2-1 and the management unit 2-2. explain.

In FIG. 10, an Ethernet packet (R) as a unicast packet from the edge device 2-1 is output.
MS-1, LEC-1) are written in the data area of the IP packet by the edge device 2-1 itself (H, RMS-
1, LEC-1), and further encapsulated and addressed to the Ethernet packet (RMS-1, LMS-1) of the node unit 2-3.
EC-1, H, RMS-1, LEC-1) are transferred to the center side. Upon receiving this, the node unit 2-3 encapsulates the IP packet (H, RMS-1, LEC
-1), further fetches the Ethernet packet (RMS-1, LEC-1) written in the data area, collates transmission / reception address information with group information,
Ethernet packets (RMS-
1, LEC-1) to the center LAN 1-7. The management unit 2-2 assumes a general-purpose workstation and transfers the data without encapsulation in order to directly connect to the center LAN 1-7. Unicast communication from the management unit 2-2 to the edge device 2-1 is performed in a reverse procedure. The edge device 2-1 and the management unit 2-2 are registered in advance as the same group.

In FIG. 11, the Ethernet packet (BC, LEC-1) as a broadcast packet from the edge device 2-1 is written into the data area of the IP packet by the edge device 2-1 itself (H, BC, LE).
C-1), and further, encapsulated and broadcast Ethernet packets (BC, LEC-1, H, B
C, LEC-1). The node unit 2-3 receiving the packet extracts the encapsulated IP packet (H, BC, LEC-1), and further writes the Ethernet packet (B) written in the data area.
C, LEC-1) and take it out as center LAN1
Transfer to -7.

In FIG. 12, an Ethernet packet (B) as a broadcast packet from the management unit 2-2 is
C, RMS-1) is written in the data area of the IP packet in the node section 2-3 (H, BC, RMS-1),
Furthermore, it is encapsulated (BC, RMS-1, H, B
C, RMS-1), a group identifier is added (BC,
RSN-1, H, ID, BC, RMS-1), and are transferred to the edge device 2-1. Edge device 2 receiving this
1, the Ethernet packets (BC, RSN-1,
H, ID, BC, RMS-1) is checked, and the edge device 2-1 that matches the own group receives it, and the edge device 2-1 that does not match the own group discards it. .

As shown in FIG. 7, the table of the node section 2-3 contains the group identification information and the addresses of the edge devices 2-1 belonging to the group and the terminals 1-8 under the edge devices 2-1. Information is linked so that the edge device 2-1 or the group information can be searched from the terminal address. These pieces of information are generated by the management section 2-2 and transferred to the node section 2-3, and the node section 2-3 records this information in a table. Also, the edge device 2-1
Is notified of the identification information of the group to which it belongs.

FIG. 13 is a flowchart showing the operation of the first embodiment of the present invention. FIG. 13 shows the operation of the first embodiment of the present invention.
Are summarized as a flowchart shown in FIG. Between the cable modems 1-1 and 1-6, the IP packet is further encapsulated into an Ethernet packet and transferred. However, this procedure is omitted here because it is not directly related to the present invention.

First, the terminal 1-8 transmits an Ethernet packet to the edge device 2-1 (S1). The edge device 2-1 that has received the packet transmits this Ethernet packet to the IP
The packet is written in the data area of the packet and transmitted to the node unit 2-3 (S2). In the node unit 2-3 receiving this, the I
Restore Ethernet packet from P packet (S
3). The node unit 2-3 determines whether the restored Ethernet packet is a unicast packet (S4). If the result of the determination is a unicast packet, it is determined whether or not the transmission and reception addresses are in the same group (S5). If the result of the determination is the same group, this Ethernet packet is written in the data area of the IP packet and transmitted to the edge device 2-1 to which the destination terminal 1-8 is connected (S6). If the group is different, the Ethernet packet is discarded (S9). If the Ethernet packet restored by the node unit 2-3 is a broadcast packet (S7), a group identifier is added to the Ethernet packet, and the Ethernet packet is transmitted to the edge device 2-1 belonging to each group as a broadcast IP packet. (S8).
The edge device 2-1 that has received this checks the group identifier, and if the IP packet has the group identifier of its own group added thereto, receives it, and receives the IP packet with the group identifier other than its own group added. Discard this, if any.

(Second Embodiment) FIG. 14 shows a second embodiment of the present invention.
This will be described with reference to FIG. FIG. 14 is a diagram showing a transmission format of a broadcast packet between terminals (PCs) 1-8 according to the second embodiment of the present invention. FIG. 15 is a diagram showing a transmission format of a broadcast packet from the management unit (RMS) 2-2 to the edge device (LEC) 2-1 according to the second embodiment of the present invention. Each format assumes the case of an Ethernet packet.
Only the address information part is shown. The description of other header information (protocol type, etc.) is omitted.

The transmission format of the unicast packet between the terminals 1-8, the edge device 2-1 and the management unit 2-
Transmission format of a unicast packet between the two,
The transmission format of the broadcast packet from the edge device 2-1 to the management unit 2-2 is common to the first embodiment of the present invention.

First, the transmission format of a broadcast packet for transmitting and receiving user information between terminals 1-8 will be described.

In FIG. 14, an Ethernet packet (B) as a broadcast packet from terminal 1-8
C, PC-A) is written into the data area of the IP packet by the edge device 2-1 and further encapsulated, and the transmission source is the edge device 2-1 and the destination is the unicast Ethernet of the node unit 2-3. Packet (RSN-1, LEC-
1, H, BC, PC-A). The node unit 2-3 receiving the packet compares the address information of the encapsulated packet (BC, PC-A) with the group information, and outputs a unicast Ethernet packet (the number corresponding to the number of the edge devices 2-1 to which the packet belongs). LEC-2
To n, RSN-1, H, BC, PC-A), and transfer the packet to each edge device 2-1. The edge device 2-1 that receives the packet extracts the encapsulated IP packet (H, BC, PC-A), and further writes the Ethernet packet (BC, PC) written in the data area.
-A) is taken out and transferred to the subordinate terminal 1-8 via the Ethernet interface.

Next, a transmission format of a broadcast packet for transmitting and receiving a packet for address information and other control information of the terminal 1-8 performed between the edge device 2-1 and the management unit 2-2 will be described.

In FIG. 15, an Ethernet packet (B) as a broadcast packet from the management unit 2-2 is
C, RMS-1) is written in the data area of the IP packet in the node section 2-3 (H, BC, RMS-1),
Furthermore, it is encapsulated (BC, RMS-1, H, B
C, RMS-1) and encapsulated in a unicast Ethernet packet addressed to all edge devices 2-1 (LEC-
1-n, RMS-1, H, BC, RMS-1). The edge device 2-1 that has received the packet transmits the encapsulated Ethernet packet (LEC-1, RMS-
1, H, BC, RMS-1). At this time, the security of the management communication is improved by setting so that the packet from the management unit 2-2 is not transferred to the terminal 1-8 under the management unit 2-2.

FIG. 16 is a flowchart showing the operation of the second embodiment of the present invention. FIG. 16 shows the operation of the second embodiment of the present invention.
Are summarized as a flowchart shown in FIG. Between the cable modems 1-1 and 1-6, the IP packet is further encapsulated into an Ethernet packet and transferred. However, this procedure is omitted here because it is not directly related to the present invention. Steps S1 to S7 and S9 are the same as in the first embodiment of the present invention. In the second embodiment of the present invention, if the Ethernet packet restored by the node unit 2-3 is a broadcast packet (S7), the edge device 2 belonging to the same group
-1 is transmitted as a unicast IP packet (S10).

(Third Embodiment) A third embodiment of the present invention is shown in FIG.
This will be described with reference to FIG. FIG. 17 is an overall configuration diagram of the group communication device according to the third embodiment of the present invention. The third embodiment of the present invention is an example in which an optical access system is assumed as an access system, reference numeral 8-1 denotes an optical terminal unit (ONU), reference numeral 8-2 denotes an optical subscriber line, and reference numeral 8-3: An optical splitter (splitter) 8-4 is a subscriber terminating device (SLT / OL).
T).

In the optical terminating device 8-1, an Ethernet interface is provided by a mounted line card. In addition, the optical network unit 8-1 is connected to the optical network unit 8-4.
Is terminated and connected to the center LAN 1-7.
In the access system, the edge device 2-1 is installed on the user side, and the management unit 2-2 and the node unit 2-3 are installed on the center LAN 1-7 side. Can be implemented. As described above, according to the present invention, the edge device 2 is connected to the environment connected to the LAN.
1, it is possible to easily construct a group communication system by connecting the management unit 2-2 and the node unit 2-3, and it can be said that it is versatile.

[0074]

As described above, according to the present invention,
Security can be improved by filtering using terminal addresses in group communication in which communication is performed only between terminals connected to the registered member edge devices. The convenience of the user can be improved by automating the registration process of the terminal address information. By limiting the reach of the broadcast packet, security can be improved and the processing load on the terminal can be reduced. At the time of the address check, the address search processing and the address processing time can be reduced.

[Brief description of the drawings]

FIG. 1 is a diagram showing an overall configuration of a group communication device according to an embodiment of the present invention.

FIG. 2 is a diagram showing a configuration of an Ethernet packet from a terminal and an Ethernet packet from an edge device / node unit according to an embodiment of the present invention.

FIG. 3 is a diagram showing a configuration of an Ethernet packet.

FIG. 4 is a diagram showing a configuration of an IP packet.

FIG. 5 is a block diagram of a main part of the edge device according to the embodiment of the present invention.

FIG. 6 is a block diagram of a main part of a node unit according to the embodiment of the present invention.

FIG. 7 is a configuration diagram of a table according to the embodiment of the present invention.

FIG. 8 is a diagram showing a transmission format of a unicast packet between terminals.

FIG. 9 is a diagram showing a transmission format of a broadcast packet between terminals according to the first embodiment of the present invention.

FIG. 10 is a diagram showing a transmission format of a unicast packet between an edge device and a management unit.

FIG. 11 is a diagram showing a transmission format of a broadcast packet from an edge device to a management unit.

FIG. 12 is a diagram showing a transmission format of a broadcast packet from the management unit to the edge device according to the first embodiment of the present invention.

FIG. 13 is a flowchart showing the operation of the first embodiment of the present invention.

FIG. 14 is a diagram showing a transmission format of a broadcast packet between terminals according to the second embodiment of the present invention.

FIG. 15 is a diagram showing a transmission format of a broadcast packet from a management unit to an edge device according to the second embodiment of the present invention.

FIG. 16 is a flowchart showing the operation of the second embodiment of the present invention.

FIG. 17 is an overall configuration diagram of a group communication device according to a third embodiment of the present invention.

FIG. 18 is an overall configuration diagram of a conventional group communication device.

[Explanation of symbols]

 1-1, 1-6 Cable Modem 1-2 Subscriber System 1-3 Relay Amplifier 1-4, 2-4 Ethernet Interface 1-5 Headend 1-7 Center LAN 1-8 Terminal 1-9 LAN Switch 2 -1 Edge device 2-2 Management unit 2-3 Node unit 3 Center processing unit 3-1 and 3-3 Ethernet packet 3-2 IP packet 4-1 IP header 4-2 IP data 6-1 and 7-1 Processor 6-2, 7-2 Data RAM 6-3, 7-3 Program memory 6-4, 6-5, 7-4 Ethernet interface 6-6, 7-5 Bus 8-1 Optical termination device 8-2 Optical subscription 8-3 Optical distributor 8-4 Subscriber terminator

 ────────────────────────────────────────────────── ─── Continuing on the front page (72) Inventor Koichi Shuto 3-19-2 Nishishinjuku, Shinjuku-ku, Tokyo F-term (reference) in Nippon Telegraph and Telephone Corporation 5K030 GA15 HA08 HC14 HD03 KA15 KX28 LC15 LD04 5K032 AA08 BA04 CA08 CC06 CC10 CD01 DA06 EC02 EC04 5K033 AA08 BA04 CA08 CB08 CB13 DA05 EC02 EC04

Claims (14)

[Claims] 1. An edge device comprising: a large number of terminals; a center processing device for accommodating the terminals via a communication line; and an edge device inserted into the communication line for one or more of the terminals. Comprises group communication means allocated to a plurality of groups and allowing transmission and reception of packets between terminals connected to edge devices belonging to the same group, wherein the terminal is transmitted and received between the edge device and the center processing device. A group communication unit including a group communication unit that permits transmission and reception of the frame between edge devices belonging to the same group, wherein the packet includes: An Ethernet packet, and the means for composing the frame includes the Ethernet packet Group communication apparatus characterized by comprising means for configuring the IP packet written in the region. 2. The group communication device according to claim 1, wherein the group communication means includes a table in which a group to which the edge device belongs and an address of the terminal connected to the edge device are recorded. 3. The group communication device according to claim 1, wherein said edge device includes means for notifying said group communication means of address information of a terminal connected thereto. 4. The group communication apparatus according to claim 3, wherein said notifying means includes means for checking address information of said terminal at predetermined intervals and notifying said group communication means. 5. The apparatus according to claim 3, wherein said notifying means includes means for confirming the address information of the terminal when the configuration of the terminal connected to the terminal changes, and notifying the group communication means. Group communication device. 6. The group communication means determines whether or not the Ethernet packet included in the IP packet is a broadcast packet addressed to all terminals belonging to the same group, and the determination by the determination means When the result indicates a broadcast packet,
2. The group communication device according to claim 1, further comprising: a unit that assigns a group identifier to the IP packet including the broadcast packet and transmits the IP packet to all the edge devices. 7. The edge device includes means for referring to the group identifier, receiving an IP packet having a group identifier of a group to which the edge device belongs, and discarding an IP packet having a group identifier other than the group to which the edge device belongs. 7. The group communication device according to 6. 8. The group communication means determines whether or not the Ethernet packet included in the IP packet is a broadcast packet addressed to all terminals belonging to the same group, and the determination by the determination means When the result indicates a broadcast packet,
2. The group communication device according to claim 1, further comprising means for transmitting the IP packets including the broadcast packet to the edge devices belonging to the same group. 9. A device for forming a control IP packet including an Ethernet packet for transmitting and receiving control information transmitted and received between the edge device and the center processing device, wherein the group communication means is an edge device belonging to the same group. 2. The group communication device according to claim 1, further comprising group communication means for permitting transmission and reception of the control IP packet between each other. 10. The group communication means determines whether or not the control information transmission Ethernet packet included in the control IP packet is a broadcast packet addressed to all edge devices belonging to the same group. 10. The apparatus according to claim 9, further comprising means for, when the determination result of the determination means indicates a broadcast packet, adding a group identifier to the control IP packet including the broadcast packet and transmitting the control IP packet to all the edge devices. Group communication device. 11. The means for referring to the group identifier, receiving a control IP packet having a group identifier of a group to which the edge device belongs, and discarding a control IP packet having a group identifier other than the group to which the edge device belongs. The group communication device according to claim 10, comprising: 12. The group communication means determines whether or not the control information transmission Ethernet packet included in the control IP packet is a broadcast packet addressed to all edge devices belonging to the same group. 10. The group communication apparatus according to claim 9, further comprising means for transmitting the control IP packet including the broadcast packet to each of the edge devices belonging to the same group when the determination result of the determination means indicates a broadcast packet. . 13. An edge device is inserted into a communication line with a center processing device accommodating the terminal for each of one or more terminals, and the edge devices are assigned to a plurality of groups and belong to the same group. Packets transmitted and received between terminals connected to the edge device and a frame including a packet transmitted and received by the terminal transmitted and received between the edge device and the center processing device, between edge devices belonging to the same group. In the group communication method allowing transmission and reception of the frame, the packet is an Ethernet packet, and the frame is an IP packet in which the Ethernet packet is written in its data area, and the frame is included in the IP packet. A broadcast in which an Ethernet packet is addressed to all terminals belonging to the same group. It is determined whether the packet is a packet, and when the determination result indicates a broadcast packet, the IP packet including the broadcast packet is assigned a group identifier and transmitted to all the edge devices. Group communication method. 14. An edge device is inserted into a communication line between one or more terminals and a center processing device accommodating the terminal, and the edge devices are assigned to a plurality of groups and belong to the same group. Packets transmitted and received between terminals connected to the edge device and a frame including a packet transmitted and received by the terminal transmitted and received between the edge device and the center processing device, between edge devices belonging to the same group. In the group communication method allowing transmission and reception of the frame, the packet is an Ethernet packet, and the frame is an IP packet in which the Ethernet packet is written in its data area, and the frame is included in the IP packet. A broadcast in which an Ethernet packet is addressed to all terminals belonging to the same group. Determining whether the packet is a packet, and when the determination result indicates a broadcast packet, transmitting the IP packet including the broadcast packet to each of the edge devices belonging to the same group. .