JP2001237892A - Internet access system and method using access server - Google Patents

Abstract

PROBLEM TO BE SOLVED: To reduce installation investment by simplifying a dialup Internet access so as to allow a plurality of providers to share an access server in common. SOLUTION: When an outgoing subscriber terminal 131 dials a dialup access number, a relay exchange system 11 translates the dialup access number and the translated number reaches an IAT 22. After PPP termination, a corresponding ISP is recognized from a user same (domain name) of the outgoing subscriber terminal 131 and a password, and an address of an authentication server of the ISP acquired. After the end of authentication, an IP address of the outgoing subscriber terminal, an IP address of an access router and an IP address of a DNS server are acquired from user data of each ISP stored in a proxy server 28 to attain access to the ISP. Thus, using one dialup number can access a plurality of providers.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system and method for an Internet access system, and more particularly, to an Internet access trunk (Internet Acc).
The present invention relates to an Internet access method and method using a shared access server in a function of a remote access server of a transit exchange or a subscriber exchange system having an ESS Trunk (called IAT).

[0002]

2. Description of the Related Art Generally, one ISP (Internet)
t Service Provider (Internet Service Provider, hereinafter sometimes abbreviated as provider) is assigned one or more dial-up numbers. One or more IATs are assigned to each dial-up number. That is, the IAT group is assigned to each ISP. Therefore, remote access (hereinafter referred to as RA
The function (referred to as S) is implemented for each ISP. When the calling subscriber wants to connect to an ISP, it must turn the corresponding dial-up number. The IAT having the RAS function translates the called number in a transit or terminating switching system and interprets the IAT according to a routing table.
Connect to The IAT is a PPP (Point to P)
After termination of the protocol, the system refers to the system data in the IAT and connects to the authentication server of the corresponding ISP. Further, after the authentication is completed, the ISP sends an IP address (IP: Internet Prot) to the calling subscriber.
ocol). When the calling party tries to connect to another ISP, the calling party will turn another dial-up number, and another IA in the transit or terminating switching system.
Arrives at T.

[0003]

Therefore, the IAT is an IS
Each P is divided and installed.
The access router is connected to the access router in the access point via the LAN, and is connected to the ISP router via the WAN. Therefore, it is necessary to prepare an access router for each ISP.
In other words, since the IAT or RAS is not shared in this way, capital investment is a great burden for both carriers and ISPs, and there is a problem in that it does not lead to reduction in Internet access charges.

An object of the present invention is to efficiently operate an IAT, reduce capital investment, and improve a subscriber service by sharing one IAT with a plurality of providers.

[0005]

According to an aspect of the present invention, there is provided an Internet access system using an access server having an Internet access trunk for remote access of an Internet service provider. The Internet access trunk has access means for accessing a plurality of Internet service providers by a unified dial-up number.

[0006] Further, the access means uses the proxy server installed in the access point to obtain the Internet access from the user name (domain name) and password of the calling subscriber terminal receiving the service of the Internet service provider. It is characterized by identifying the service provider.

[0007] Further, the access means performs user authentication based on a user name (domain name) and a password of the calling subscriber terminal receiving the service of the Internet service provider using a proxy server installed in the access point. The authentication server of the Internet service provider to be checked is identified.

[0008] Further, the access means may include an IP address of a router connected to the Internet service provider, an IP address of a DNS server of the corresponding Internet service provider, and an IP address of a calling subscriber terminal based on system data contained in the proxy server. And is obtained.

A first internet access method of the present invention is an internet access method using an access server having an internet access trunk for remote access of an internet service provider, wherein the internet access trunk is unified. It is characterized by accessing a plurality of Internet service providers using a dial-up number.

A second Internet access method according to the present invention is an Internet access method using an access server having an Internet access trunk for remote access of an Internet service provider, wherein the Internet access trunk is a proxy server. , Using the domain name in response to an authentication request sent from the calling subscriber terminal, obtains the IP address of an authentication server that checks user authentication, accesses the authentication server, executes authentication, and succeeds in authentication. Then, when an authentication acknowledgment is returned to the calling subscriber terminal and an IP address assignment request is received from the subscriber terminal after returning the authentication acknowledgment to the calling subscriber terminal, the IP address assigned to the subscriber terminal and the Internet Service Provider DNS Obtains the P address, is characterized by allocating the IP address of the Internet service provider.

[0011]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Next, an embodiment of the Internet access system according to the present invention will be described with reference to the drawings. FIG. 1 shows a local exchange system having an IAT to which the present invention is applied.
(PHS: Plan Old Telephone N
network and PHS network 102 (PHS: Pers)
onal Handy Phone System)
And ISDN network 103 (Integrated Ser
IAT module 12 (IAT: International Network), a transit switching system 11, and a plurality of Internet access trunks (IATs) connected to the transit switching system 11.
t AccessTrunk) and the HUB 15 concentrating output lines (10BASE-T) from a plurality of IATs.
And a router 1 that performs routing (communication path control) processing
61, 162, a proxy server 28 as an access server, an ISP1 provider 18 for providing Internet services, and an I / O for providing Internet services.
ISP of SP2 provider 19 and ISP of ISP1 provider 18 that performs user authentication (check of password etc.)
1 authentication server 181, an ISP2 authentication server 191 of an ISP2 provider 19 that performs user authentication (check of a password or the like), routers 161 and 162, and router 1
A relay data network 17 for connecting the ISP 1 with the ISP 1 provider 18 and the ISP 2 provider 19;
ISP1 terminal 131 contracted with provider 18,
132 and I contracted with ISP2 provider 19
SP2 subscriber terminal 133.

In FIG. 1, the access point includes a transit switching system 11 and an IAT module 12
, HUB 15, routers 161, 162, and proxy server 28. Also, the PSTN network 101
Is a communication network connecting the ISP1 subscriber terminal 131 and the transit switching system 11, the PHS network 102 is a communication network connecting the ISP1 subscriber terminal 132 and the transit switching system 11, and the ISDN network 103 is a ISP2 subscription. Is a communication network that connects the client terminal 133 and the relay switching system 11. Also, each communication network has multiple different ISPs
May be connected. Further, in FIG. 1, two units are provided for convenience of explanation, but there may be more units.

The IATM 12 is composed of a plurality of IATs 22, ie, IATs 22-1, 22-2,.
22-n.

Referring to FIG. 1, ISP1 subscriber terminal 1
31 owns the dial-up number (IS
When the dialing of the common access point of the P1 provider 18 and the ISP2 provider 19) is dialed, the IA to be connected is determined by the incoming call analysis of the transit switching system 11.
T22 is determined. If there is a vacant channel that can be connected at that time, the IAT22 corresponding to the channel is determined.
Connect to In addition, a plurality of subscribers use the same dial-up number and the multi-hunting method of the switching system (the dial-up number in this case is a representative number having a plurality of lines, and selects one of the plurality of lines). The call arrives at the vacant IAT 22. Furthermore, even if a plurality of providers assign the same dial-up number, the call arrives at the vacant IAT 22 with the same number. In this way, by unifying the dial-up numbers, it is possible to save or consolidate the number resources.

A call from a subscriber's terminal is sent via a modem built in the IAT 22 to a PPP (Point to Point).
(Point Protocol) termination. Then I
The AT 22 connects to the proxy server 28 installed in the access point via the intra-office LAN for authenticating the calling subscriber (checking the password input from the subscriber's terminal).

At this time, the proxy server 28 recognizes the corresponding ISP and issues an authentication request to the corresponding ISP. After the authentication is completed, the proxy server 28 acquires the IP address of the calling subscriber, the IP address of the DNS server of the ISP, and the IP address of the access router (router 161), and returns them to the calling subscriber.

Referring to FIG. 2, each I within the IATM 12
1 shows a functional configuration diagram of an AT. That is, in FIG. 2, the IAT 22 includes a modem 221 and an IAT control unit 222 that operates under program control by a processor (not shown). The IAT control unit 222 determines that the PP
It comprises a P-terminal function unit 223 and an IP address analysis unit 224.

Further, in FIG. 2, the proxy server 2
Reference numeral 8 denotes a server control unit 281 operated by a processor (not shown) under program control, and a storage unit 282 that can read and write data and stores system data. The storage unit in this case is a memory (for example,
It may be a non-volatile memory such as a flash memory, a volatile memory such as a RAM, or a recording medium such as a magnetic disk. The storage unit 282 stores the provider I
D table 283 and data address table 284
And system data including an authentication server address table 285 and a plurality of provider tables 286. The provider table 286 is provided for each provider, and the provider table 286 includes an area of a default GW address table storing an IP address (GW: gateway) of a default GW,
The ISP's DNS server (DNS: Distri)
It is composed of a DNS address area for storing IP addresses of butted Name Services, and a subscriber IP address pool area for storing IP addresses of a plurality of calling subscriber terminals.

Note that some providers have a plurality of subdomains. In this case, the provider table 286 includes an area of a default GW address table for each ISP, an area of a DNS address for each ISP, and Each ISP comprises a subscriber IP address pool area.

It should be noted that the IAT control unit 222
1 and a transmission / reception circuit (not shown) for transmitting / receiving data to / from the relay switching system 11 via the HUB 15. Further, the server control unit 281 includes a transmission / reception circuit (not shown) for transmitting / receiving data to / from the router 162.

Next, the outline of the operation of the present invention will be described with reference to FIG. A call from a subscriber's terminal (in the example, an ISP1 subscriber terminal or an ISP2 subscriber terminal) is sent to the IAT
22 is connected to the IAT control unit 222 via a modem 221 built in the device. IAT control unit 2 from subscriber terminal
The connection to 22 is made based on the PPP protocol. The PPP termination function unit 223 of the IAT control unit 222 performs processing based on the PPP protocol with the subscriber terminal. In addition, PPP (Point-to-Point Prot)
ocol) is RFC1661 (RFC: Requests).
t for Comments) and I
ETF (Internet Engineering)
Task Force). Thereafter, the IAT control unit 222 sets the IP address analysis unit 22
After the analysis of the IP address by the server 4, the connection is made to the proxy server 28 via the intra-station LAN (via the HUB 15 and the router 162). At this time, proxy server 2
8 server control unit 281 is the ISP with which the calling subscriber
The corresponding ISP is identified from the user name (domain name). Further, the server control unit 281 reads the ISP (ISP1 provider or ISP) from the authentication server address area of the provider table 286 stored in the storage unit 282 from the user name (domain name) of the ISP.
(2 providers).
After that, the server control unit 281 sends an authentication request to the corresponding ISP and executes authentication. After the authentication is completed, the IAT control unit 222 of the IAT 22 allocates the IP address of the calling subscriber terminal by communicating with the proxy server 28.

The IAT control unit 222 of the IAT 22, which has obtained the originating IP address, the IP address of the DNS server, and the IP address of the default GW from the proxy server 28, returns these data to the originating subscriber and transmits the user packet. Prompt the request. Then, the terminal of the calling subscriber sends a user packet via the router 161 from the IP address of the default GW.

Next, the operation of the embodiment of the present invention will be described with reference to FIGS. FIG. 3 shows a signal processing sequence in the IAT 22. Now, ISP1
In order for outgoing subscribers who have contracted with the provider 18 to access the Internet via the provider, IS
Assuming that the dial-up is performed using the P1 subscriber terminal 131, the call setting request is sent to the IA of the IAT module 12 via the PSTN network 101 and the transit switching system 11.
The call arrives at T22. Then, the IAT control unit 222 received via the modem 221 sends the ISP1 subscriber terminal 131
Communication based on the PPP protocol is performed, and a PPP link (link setting 213 in FIG. 2) is established between the ISP1 subscriber terminal 131 and the IAT 22 (sequences 301 to 306 in FIG. 3).

After the termination of the PPP from the subscriber, a PPP authentication request (adding a user ID and a password) is transmitted from the ISP1 subscriber terminal 131 of the calling subscriber (sequence 306). Upon receiving the authentication request, the IAT control unit 222 of the IAT 22 transmits the user ID via the IP address unit 224.
A PPP authentication request packet carrying the D and the password (the authentication request 201 in FIG. 2) is transmitted to the proxy server 28 in the access point. In this case, the IP address section 224 stores the telephone number of the access point dialed from the ISP1 subscriber terminal 131 (not shown) in the storage section (I
The IP address of the proxy server 28 is extracted using a conversion table (an IP address corresponding to each access point telephone number is registered in advance) stored in the AT module 12). The extracted I
Using the P address, the IAT control unit 222 creates an authentication request packet and sends it to the proxy server 28.

Then, the server control unit 281 of the proxy server 28 received via the HUB 15 and the router 162
Uses the user name and the ISP domain name in the fields of the authentication request packet (authentication request 201 in FIG. 2) sent from the IAT 22 in accordance with the IP address search (described later) of the authentication server shown in FIG. , The applicable I
The IP address of the authentication server of the SP (in this case, ISP1
The IP address of the authentication server 181 is read (sequence 318). Further, the server control unit 281 sends the corresponding ISP (ISP1) according to the IP address of the authentication server.
An authentication request packet (authentication request 202 in FIG. 2) is sent to the provider 18) (sequence 327).

When the ISP1 provider 18 receives the authentication request packet, the ISP1 provider 18
1 Pass the authentication request packet to the authentication server 181. ISP
1 The authentication server 181 reads the user ID and password in the authentication request packet, and based on the read user ID and password, the user ID and password registered for each user at the time of contract in a database (not shown). Is checked by searching for a certificate, the result is created as an authentication response packet, and the ISP1 provider 18
Reply to proxy server 28 via After the authentication from the ISP1 provider 18 is completed, the proxy server 28
Server control unit 281 of IAT2
Reply 2 IAT22 that received the authentication response packet
The IAT control unit 222 returns a PPP authentication response to the ISP1 subscriber terminal 131 (sequences 328 and 31).
9, 308).

Then, the ISP1 subscriber terminal 131
A P address assignment request is sent to the IAT 22 (sequence 309). When the IAT control unit 222 of the IAT 22 receives the IP address assignment request, it sends an assignment request packet to the proxy server 28 (sequence 320).

Then, as shown in FIG. 5, the server control unit 281 of the proxy server 28 sends the IP address of the ISP1 subscriber terminal 131 of the calling subscriber and the DNS server of the ISP according to the user data search mechanism (described later). I
The P address and the IP address of the access router are obtained and returned to the ISP1 subscriber terminal 131 of the calling subscriber (sequences 329, 321, 310).

Next, the control unit 222 of the IAT 22
When the charging start request is sent to the ISP1 provider 18, the ISP1 provider 18 returns an ISP charging start response and starts to calculate the communication charge for using the Internet (sequences 322, 323).

On the other hand, when the I
The SP1 subscriber terminal 131 is connected to the ISP1 provider 18
Then, communication with the Internet is started via (sequence 311). Eventually, when the subscriber terminates communication to the Internet at the ISP1 subscriber terminal 131 and disconnects the line, the ISP1 subscriber terminal 131 and IAT2
2 is disconnected, the billing process of the ISP1 provider 18 ends, and the trunk hunt of the IAT 22 is released (sequences 312, 324, 325, 313,
314, 316, 317, 315).

The case where the ISP1 subscriber terminal 131 accesses the Internet has been described above.
When the Internet is accessed from the ISP1 subscriber terminal 132, the communication is performed via the PHS network 102, but it goes without saying that the operations of the IAT 22 and the proxy server 28 are the same. Also, when the Internet is accessed from the ISP2 subscriber terminal 133, the proxy server 28 selects the ISP2 provider 19 and the ISP2 authentication server 191 as described in the above operation, and the ISP2 subscriber terminal 133
It goes without saying that communication with the Internet is performed via the P2 provider 19.

Next, the mechanism of searching for the address of the ISP authentication server in FIG. 4 will be described. In the provider ID table 283, for each ISP, a provider ID,
A table address and a data address are stored, respectively. Although the table address indicates the table address of the authentication server address table 285, the table address assigned to each ISP in the provider ID table 283 is common (the same table address). The authentication server address table 285 stores each authentication server address for each ISP. The provider ID is an index for identifying a provider. This is obtained from the user name (domain name). That is, when the server control unit 281 of the proxy server 28 of FIG. 2 receives the authentication request packet, the server control unit 281 sets the user name (domain name) to the Program Data U in the field of the authentication request packet.
The provider ID, the table address, and the data address are extracted from the provider ID table 283 by extracting from the nit (PDU) and using a predetermined user name as an index. Then, the server control unit 281 accesses the authentication server address table 285 of the storage unit 282 from the table address searched in the provider ID table 283, and acquires the authentication server address using the provider ID acquired in the provider table 283 as an index. And the IP address of the authentication server. Therefore, even if the access point dial-up numbers of the respective providers are common, they can be distributed to the authentication server of the connected provider.

Next, the mechanism of searching for user data in FIG. 5 will be described. First, the proxy server 28 of FIG.
The server control unit 281 of the table subtracts the data address table 284 in the storage unit 282 from the data address obtained in the provider ID table 283 of FIG. 4, and uses the provider ID obtained in the provider ID table 283 as an index to set the table address of the provider table 286. To get. Next, the server control unit 281 uses the table address acquired from the data address table 284 to store the provider table 28 in the storage unit 282.
Subtract 6 to determine the user's attribute (subdomain name in the field of the allocation request packet)
Is used as an index, and user IP which is user data
The IP address of the subscriber terminal is obtained by searching the corresponding subscriber IP address from the address pool, and the IP address of the default GW and the IP address of the DNS are obtained.

Next, with reference to FIG. 6, a process flow in which the IAT uses a proxy server to perform authentication and obtain each IP address will be described. First, IAT22
By transmitting the authentication request packet to the proxy server 28, the provider ID is introduced to identify the target ISP provider from the domain name in the field of the authentication request packet (step S601 in FIG. 6). In the proxy server, the provider ID
, The address of the authentication server of the corresponding ISP is recognized (step S602). Further, the proxy server accesses the authentication server of the corresponding ISP and executes authentication (step S603).

When the IAT 22 recognizes the success of the authentication based on the authentication response from the proxy server, it returns an operation confirmation response (OK) to the terminal of the calling subscriber (step S604).
S606).

Further, when the IAT 22 receives the IP address assignment request from the terminal of the calling subscriber, the IAT 22 transmits an assignment request packet to the proxy server 28, thereby originating and subscribing according to the user data search mechanism shown in FIG. The IP address of the terminal of the user, the IP address of the DNS server of the ISP, and the IP address of the access router are obtained (steps S607 and S608).

As described above, the target ISP can be recognized based on the user name (domain name) and password of the calling subscriber, not the called number, and the user data necessary for the ISP connection can be obtained from the proxy server (step S60).
9).

[0038]

As described above, the first effect of the present invention is that the capital investment can be reduced by sharing the IAT. The reason is that the number of IAT facilities can be reduced by sharing the IAT with a plurality of providers. For this reason, it is not necessary to prepare in-house LAN equipment for each provider, so that costs can be reduced. Further, since it is not necessary to prepare an access router for each provider, costs can be reduced.

The second effect is that the subscriber service can be improved. The reason is that the subscriber can access the Internet without being aware of the provider. Therefore, even if a plurality of providers are subscribed, it is possible to connect to the Internet provider with one dial-up number.

The third effect is that a new business opportunity can be created on the carrier side. The reason is that one IAT can connect to a plurality of providers, so that the carrier can provide a low-cost Internet access business to the plurality of providers.
Therefore, the provider can also reduce the number of access servers, so that the Internet access function can be outsourced to the carrier. Therefore,
Carriers can create new businesses and generate profits.

[Brief description of the drawings]

FIG. 1 is a system block diagram showing an outline of an Internet access system using an IAT according to the present invention.

FIG. 2 is a block diagram showing a functional configuration of the IAT and the Internet access system shown in FIG.

FIG. 3 is a sequence diagram showing a signal processing sequence between the subscriber terminal of FIG. 2 and an ISP provider.

FIG. 4 is a schematic diagram showing a mechanism for searching for an address of an authentication server in the proxy server of FIG. 2;

FIG. 5 is a schematic diagram showing a mechanism for searching for user data in the proxy server of FIG. 2;

FIG. 6 is a flowchart showing a flow of authentication and IP address processing performed by the IAT of FIG. 2 using a proxy server.

[Explanation of symbols]

 Reference Signs List 11 relay switching system 12 IAT module 15 HUB 17 relay data network 18 ISP1 provider 19 ISP2 provider 22 IAT 28 proxy server 101 PSTN network 102 PHS network 103 ISDN network 131,132 ISP1 subscriber terminal 133 ISP2 subscriber terminal 161,162 router 181 ISP1 authentication server 191 ISP2 authentication server 221 modem 222 IAT control unit 223 PPP termination function unit 224 IP address analysis unit 281 server control unit 282 storage unit 283 provider ID table 284 data address table 285 authentication server address table 286 provider table

 ──────────────────────────────────────────────────続 き Continued on the front page F-term (reference)

Claims (6)

[Claims] 1. An Internet access system using an access server having an Internet access trunk for remote access of an Internet service provider, wherein the Internet access trunk accesses a plurality of Internet service providers using a unified dial-up number. An Internet access method using an access server, characterized by having means. 2. The Internet access device according to claim 1, wherein said access means uses a proxy server installed in an access point to obtain the Internet access from a user name (domain name) and a password of a calling subscriber terminal receiving an Internet service provider's service. The Internet access method using an access server according to claim 1, wherein a service provider is identified. 3. The access means uses a proxy server installed in an access point to perform user authentication based on a user name (domain name) and a password of an originating subscriber terminal receiving a service of an Internet service provider. 2. The Internet access method using an access server according to claim 1, wherein an authentication server of an Internet service provider performing the check is identified. 4. The system according to claim 1, wherein said access means includes an IP address of a router connected to said Internet service provider and a DN of said Internet service provider based on system data stored in said proxy server.
4. The Internet access method using an access server according to claim 1, wherein the IP address of the S server and the IP address of the calling subscriber terminal are obtained. 5. An internet access method using an access server having an internet access trunk for remote access of an internet service provider, wherein the internet access trunk accesses a plurality of internet service providers by a unified dial-up number. An internet access method using an access server. 6. An internet access method using an access server having an internet access trunk for remote access of an internet service provider, wherein the internet access trunk is transmitted from a calling subscriber terminal using a proxy server. Obtains an IP address of an authentication server that performs user authentication check from a domain name in response to the authentication request, accesses the authentication server, executes authentication, and, if authentication is successful, sends an authentication confirmation response to the calling subscriber. Reply to the device,
When an IP address assignment request is received from the subscriber terminal after returning an authentication confirmation response to the originating subscriber terminal, the IP address assigned to the subscriber terminal and the DNS IP address of the Internet service provider are acquired, and the Internet service provider is acquired. Internet access method using an access server, wherein an IP address is assigned.