JP2004229265A - Internet connecting system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an Internet connecting system, capable of acquiring a benefit of IPv6 by a comparatively simple method, and is capable of finding additional values by a maker who manufactures a client-side instrument. <P>SOLUTION: The system has an InterBOX 3 provided on a network connected with IPv6 terminal 2, and an InterServer 6 for connecting to the InterBOX 3 by IPv4 through a global network. In this InterServer 6 IPv6, an IPv6 address of the IPv6 terminal 2 or a part its address are stored, associated with the IPv4 address of the InterBOX 3, and routing to the IPv6 terminal 2 is realized by establishing a tunneling connection between the InterBOX 3 at the IPv4 terminal. This InterServer 6 controls connection, performs filtering, and produces a predetermined command, based on the classification of the IPv6 terminal, network classification, user information, etc. <P>COPYRIGHT: (C)2004,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention realizes the construction of a network using IPv6 (Internet Protocol version 6), which is the next-generation IP, under the current infrastructure environment where IPv4 (Internet Protocol version 4) has become widespread, and implements a server in an IPv6 environment at home. Related to a system for providing services.
[0002]
[Prior art]
Generally, in a service providing environment through a public network centered on the Internet, the value of all information is collected not on the client side but on the server side.
[0003]
In other words, the terminal device as each client is basically merely a viewer for browsing information on the Internet. Also, each client issues various information requests to the Internet side, and the Internet side can obtain such information of each client. In other words, all information is collected on the Internet side, and the Internet side only provides fixed information unilaterally. For this reason, it is difficult for a maker that manufactures a client terminal to create added value.
[0004]
In order to change such a situation, it is necessary to reverse the access direction and reverse the positions of the server and the client. That is, when there is a home network connected to the Internet, it is necessary to create a state in which access to the home network is started from the Internet side and a service is provided from the home network side to the Internet side.
[0005]
For this purpose, it is necessary that each device connected to the home network can be uniquely identified from the internetwork side, and that routing problems in the home and security problems must be solved. IPv6 (Internet Protocol version 6: 6th generation Internet Protocol) is a technology that can solve such a problem and find one solution.
[0006]
However, in view of the current environment surrounding Japanese carriers and Internet service providers, it is expected that IPv6 will take a considerable amount of time to spread. For example, the amortization of currently used IPv4 equipment requires at least two to three years, and only a test service is provided.
[0007]
The only way for manufacturers to implement an IPv6-compatible network right now is to start with ISP-level services, but this is very costly and impractical for many manufacturers.
[0008]
Because the circumstances of home networks are various and very different, and the connection mechanism differs greatly depending on the carrier and ISP, a mechanism to absorb these differences and realize an IPv6 environment with a uniform approach. is necessary.
[0009]
Although this does not deny the novelty or inventive step of the invention according to this application, the following prior art documents relate to the above-mentioned circumstances.
[0010]
[Patent Document 1]
JP-A-2001-274845
[0011]
[Problems to be solved by the invention]
The present invention has been made in view of such circumstances, and can obtain the benefits of IPv6 by relatively simple means, and a manufacturer that manufactures a client-side device can find its own added value. It is intended to provide an Internet connection system.
[0012]
[Means for Solving the Problems]
In order to achieve the above object, according to a first main aspect of the present invention, a relay device provided in a first network to which a client device is connected and communication is performed by a first communication protocol, Has a server connected by a second communication protocol through a second network, and the relay device stores a global address of the client device in the first communication protocol in the client device global address. A storage unit, a server address storage unit for storing a global address of the server according to a second protocol, and a connection from the client device passing through the server based on the server global address stored in the storage unit. A first routing device for routing to the And a first packet processing device that establishes a tunneling connection of the first protocol with the server by encapsulating / decapsulating the packet with the second protocol. A second packet processing device for encapsulating / decapsulating a packet of the first protocol with a second protocol to enable a tunneling connection with the device, and a client device connected to the relay device. A terminal device global address management device for managing a global address in the first protocol in association with a global address in the relay device in the second protocol, and a global address of the terminal device managed by the management device; A second routing device for routing to the relay device; Internet connection system is provided which is characterized in that is provided.
[0013]
According to such a configuration, an IPv6 packet is transmitted and received between the home network and the Internet server by tunneling connection. Then, the terminal device existing in the home network can be uniquely recognized from the outside through the server and can be controlled. Since all communications are performed via the Internet server regardless of the carrier or the ISP, all the terminal devices in the home and all connections to the terminal devices are owned by the owner of the Internet server or Manufacturers can freely set and control.
[0014]
In other words, it is possible to solve all the conventional problems of IPv6 device individual recognition, home routing and security in a mixed IPv6 and IPv4, and to realize the construction of an extremely open and closed network. become.
[0015]
Here, the first protocol and the second protocol may be different protocols or may be the same protocol, but in the most preferred embodiment, the first protocol is IPv6, The second protocol is IPv4.
[0016]
According to one embodiment of the present invention, the server is provided with a model determining unit that determines whether the client device and / or the relay device is a predetermined model. In this case, the server includes a communication session disconnecting unit that disconnects the communication session or restricts transmission and reception of the packet based on the client device or the relay device when the model determination unit determines that the client device or the relay device is not a predetermined type. Preferably, it is provided. The server may further include a command conversion unit that converts a command to be transmitted to the client device based on a result of the determination by the model determination unit into a command of a predetermined format for controlling the client device. . Further, it is preferable that the server is provided with a client device control unit that controls the client device based on a result of the determination by the model determination unit.
[0017]
According to another embodiment, the server is provided with a network type determination unit that determines whether the environment of the first network to which the client device and / or the relay device is connected is a predetermined type. ing. In this case, when it is determined that the private network environment to which the client device or the relay device is connected is not a predetermined type, the server disconnects the communication session or restricts transmission / reception of packets based on the determined type. It is preferable to have Further, in this case, it is preferable that the server has a state information acquisition unit that acquires at least one or a plurality of pieces of information such as an operation state, a use state, and position information of the client device or / and the relay device. It is further preferable that the obtaining unit obtains at least one or a plurality of pieces of information such as an operation state, a use state, and position information of the client device by a method according to a model of the client device.
[0018]
According to yet another embodiment, the server is a client device based on information obtained by combining at least one or a plurality of pieces of information of an address, an operation state, a use state, and location information of the client device or the relay device. Alternatively, it has a search unit for searching for a relay device. In this case, it is preferable that the search unit has means for displaying a list of client devices connected to the relay device for each of the relay devices. Further, in this case, the server is provided with a client device control unit that controls the client device, and the client device control unit selects a specific client device from the list display to provide the client device with the client device control unit. It is desirable to start a corresponding client control program.
[0019]
According to yet another embodiment, the server includes a client device address search unit that searches for a global address of the client device in a first protocol based on a connection request to the client device. Have been. In this case, it is preferable that the server is provided with a connection requester authentication unit that authenticates a person who has made a connection request to the client device and permits or denies connection to the client device.
[0020]
According to yet another embodiment, the system further includes a tunneling connection information management device that manages tunneling connection information between the relay device and a server, wherein the tunneling connection information management device includes: Notifying the relay device of the global address of the server in the second protocol, and transmitting the global address of the relay device in the second protocol and the global address of the client device in the first protocol or a part thereof to the server Notify In this case, it is preferable that the tunneling connection information management device authenticates the relay device or the server, and performs the notification when the result is positive.
[0021]
According to yet another embodiment, the server has a filtering processing device that filters communication to / from the client device according to a predetermined rule. In this case, it is preferable that the server further includes a filtering rule setting unit that provides an interface for editing the predetermined rule.
[0022]
According to yet another embodiment, the relay device is provided with a model determining unit that determines whether the client device is a predetermined model. In this case, it is preferable that the relay device be provided with a communication session disconnecting unit that disconnects the communication session based on the type of the client device determined by the model determining unit when the client device is not the predetermined type.
[0023]
According to a second main aspect of the present invention, a relay device provided in a first network to which a client device is connected and communication is performed according to a first communication protocol, and the relay device is connected through a second network A relay device used in an Internet connection system having a server connected by a second communication protocol, wherein the relay device stores a global address of the client device in the first communication protocol. A client device global address storage unit, a server address storage unit that stores a global address of the server in a second protocol, and a connection from the client device based on the server global address stored in the storage unit. A first route for routing through the server A first packet processing device that establishes a first protocol tunneling connection with the server by encapsulating / decapsulating packets of a first protocol with a second protocol. A relay device is provided.
[0024]
According to a third main aspect of the present invention, a relay device provided in a first network to which a client device is connected and communication is performed by a first communication protocol, and the relay device is connected to a second network through a second network. A server connected by a second communication protocol, the server being used in an Internet connection system having a first communication protocol for enabling a tunneling connection with the relay device. A second packet processing device for encapsulating / decapsulating a packet in a protocol in a second protocol, and a global address in a first protocol of the client device connected to the relay device in a second protocol of the relay device. A terminal device global address management device that is managed in association with the global address in the protocol, and A second routing device for routing to the relay device based on the global address of the terminal device is managed by the apparatus, the server, characterized in that is provided is provided.
[0025]
According to a fourth main aspect of the present invention, a relay device provided in a first network to which a client device is connected and communication is performed according to a first communication protocol, and the relay device is connected through a second network A server connected by a second communication protocol, the computer software program being installed in the relay device used in the Internet connection system, wherein the program includes the first communication of the client device. A client device global address storing procedure for storing a global address in a protocol, a server address storing procedure for storing a global address in the second protocol of the server, and a server global address stored by the storing procedure. Connection from the client device A first protocol for routing the first protocol through the server, and encapsulating / decapsulating a packet of the first protocol with the second protocol to communicate the first protocol with the server. And a first packet processing procedure for establishing a tunneling connection.
[0026]
According to a sixth main aspect of the present invention, a relay device provided in a first network to which a client device is connected and communication is performed by a first communication protocol, and the relay device is connected through a second network A server connected by a second communication protocol; and a computer software program installed on the server used in the Internet connection system, the program including a tunneling connection with the relay device. A second packet processing procedure of encapsulating / decapsulating a packet of a first protocol with a second protocol to enable the packet, and a global address of the client device connected to the relay device with the first protocol With the global address of the relay device in the second protocol. And a second routing procedure for performing routing to the relay device based on the global address of the terminal device managed by the management procedure. Is provided.
[0027]
Still other features and significant effects of the present invention will be understood by those skilled in the art by referring to the embodiments and drawings described in the following embodiments.
[0028]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0029]
FIG. 1 shows an example of a network configuration according to this embodiment.
[0030]
In FIG. 1, reference numeral 1 denotes an IPv6 home network to which various client IPv6 terminal devices 2 (hereinafter, referred to as “IPv6 terminals”)... The home network 1 is constituted by, for example, a LAN installed in each home.
[0031]
The home network 1 is connected to the Internet 4 via an InterBOX 3 ("relay device" of the present invention) and a communication carrier / ISP. In the Internet network 4, unlike IPv6, communication is performed using IPv4 (second communication protocol) which is now widely used.
[0032]
The Internet network 4 is connected to an InterServer 6 (“server” of the present invention) that controls communication of the Ipv6 terminal 2 on the home network 1. The InterServer 6 is a connection between the IPv6 terminal 2 and all the IPv6 terminals 2a, 2b and the IPv6 server 7 on the Internet network 4 or other home / global networks 1a and 1b, as will be described later in detail. It has a function to mediate.
[0033]
Here, the InterBOX 3 and the InterServer 6 are intended to be manufactured by the same manufacturer or under a unified standard, and are designed to be linked in advance. In the InterBOX 3, an IPv4 global address of the InterServer 6 is stored in advance, and is always routed and connected to the InterServer 6 regardless of ISP or carrier. The IPv6 terminal 2 connected to the home network 1 is also intended to be manufactured by the same manufacturer as the InterBOX 3 or the like or under a unified standard, and is assigned to the IPv6 terminal 2. On the basis of the IPv6 global address, the type (model) of the terminal can be specified on the InterServer 6 side.
[0034]
Here, various methods can be considered for allocating the IPv6 address of the IPv6 terminal 2. The IPv6 address is composed of 128 bits and includes a “prefix” portion set in the first half thereof and assigned from the NIC or ISP, and an “interface ID” portion set in the second half and generated by the user independently. Also in this example, a prefix assigned to each manufacturer and an interface ID generated using a MAC address unique to each terminal are used in combination. The IPv6 address may be determined before shipment of the terminal 2 or may be automatically generated by connecting to the InterBOX 3 using the IPv6 address prefix of the InterBOX 3 and its own MAC address. It may be something.
[0035]
FIG. 2 is a schematic configuration diagram showing the InterBOX 3.
[0036]
The InterBOX 3 includes a server address storage unit 10 that stores the IPv4 global address of the InterServer 6, a tunneling session establishment unit 11 that establishes a tunneling connection with the InterServer 6 based on the InterServer 6, and a packet in the IPv6. Encapsulation processor 12 for encapsulating / de-encapsulating with IPv4 and performing tunneling transmission / reception with the InterServer 6, and routing for routing the decapsulated packet from the InterServer 6 to a desired IPv6 terminal 2. It has a processing unit 13 and a packet transmitting / receiving unit 14 for transmitting / receiving packets. The InterBOX 3 is provided with a prefix storage unit 15 (address generation unit) for, for example, generating an address of the IPv6 terminal 2 using a prefix assigned to the InterBOX 3.
[0037]
According to such a configuration, a packet from the IPv6 terminal 2 or a packet to the IPv6 terminal 2 can be transmitted and received through a tunnel based on IPv4 established between the InterServer 6 and the InterBOX 3.
[0038]
FIG. 3 is a schematic configuration diagram showing the InterServer 6.
[0039]
The InterServer 6 has an IPv4 global address 16a of the InterBOX 3 and an IPv6 global address 16b of the client device stored in association with each other, and a tunneling connection between the InterBOX 3 and the InterBOX 3 based on the InterBOX 3 address. A capsulation processing unit 18 for encapsulating / decapsulating an IPv6 packet with IPv4 to enable communication between the IPv6 terminal 2 and the IPv6 terminal 2, and a tunneling session establishing unit 17 for establishing communication with the IPv6 terminal 2. A routing unit 19 for routing communication between the terminal and the server. Further, the InterServer 6 converts a command to the IPv6 terminal 2 into a predetermined command based on the model determination unit 21 that determines the type of the IPv6 terminal 2 based on the IPv6 address of the IPv6 terminal 2. A command setting unit 22 for setting a communication session, a filter unit 23 for filtering IPv6 packets transmitted by tunnel according to a predetermined rule, and a communication session disconnecting unit 24 for disconnecting a communication session in a predetermined case. The transmission / reception of the packet is performed by the transmission / reception processing unit 25.
[0040]
The InterServer 6 is connected to the user management server 30. As will be described later in detail, the user management server 30 manages information of the user of each InterBOX 3 and each IPv6 terminal 2. It has a user information management DB 31 that stores prefixes, model information, and the like.
[0041]
Further, the InterServer 6 has a Web server 32 published on the Internet 4 (IPv4 network), and makes it possible to receive requests from the user of the InterBox 3 or the IPv6 terminal 2 and perform various settings. For example, at least a part of the filter rules by the filter unit 23 can be appropriately changed by the user through the Web server 32. The access to the Web server 32 may be via the InterBOX 3 and the InterServer 6, or via the Internet 4 which does not go through these.
[0042]
As shown in FIG. 4, the filter unit 23 includes a filter rule storage unit 33 and a filter rule setting unit 34. The filter rule storage unit 33 and the filter rule setting unit 34 are connected to the Web server 32 published on the Internet, and the Web server 32 has an InterServer interactive interface generation unit 35 as shown in FIG. Installed. The user connected to the Web server 32 can input / change a filter rule by displaying the interface generated by the interface generating unit 35 on his / her own terminal. As the filter rules that can be set here, for example, those relating to security can be considered.
[0043]
The filter rules for security can be roughly classified into: (1) no access to the home network from outside; and (2) a server (Web) that allows access to the home network from outside in advance. Sites and networks, and (3) no restrictions on external access to the home network. Further, as a filtering method in this case, a method that does not permit access at all may be used, but only a specific port may be passed.
[0044]
Here, if the access from the home network 1 to the outside can be restricted so as not to access the server set in advance, it is possible to prevent children from accessing harmful contents or to prevent the user from illegally accessing the harmful contents (trapping traps). It is possible to prevent access to a site that looks like a device.
[0045]
The setting of the filter rule can be performed after the authentication of the ID and the password by the user authentication unit 36 provided in the Web server 32 and connectable to the user management server 30.
[0046]
The filter rule setting unit 34 sets the filter rule based on the user's input as described above. In addition, the filter rule setting unit 34 stores the member information (charging) stored in the user management server 30 regardless of the setting from the user. Information and information on the terminal model) to automatically generate a filter rule. For example, it is possible to set as a gateway such that connection is not permitted or connection to only a specific server is possible, depending on the attribute of the member or the status of payment of the membership fee.
[0047]
The filter rules as the gateway can be used to control the vendors that provide the pay business through the InterServer 6. For example, as shown in FIG. 3, a proxy server 38 is provided in the InterServer 6 to manage the access destination of the user in the DB 39 so that the user can connect only to the access destination set in the filter rule setting unit 34. You may. In this case, in addition to the user ID and the password, what service (server) the user has contracted under what conditions is managed by the user management DB 31, and the transaction is controlled according to the conditions. It is preferable to implement the function. Further, with respect to a specific vendor, a setting may be made such that only a sample is shown to a user who has not completed the registration procedure, and the main body is not shown.
[0048]
FIG. 5 is a flowchart showing the processing in the filter unit 23. First, when a tunneling session is started, a filter rule is set based on the member information received from the user management server 30 (step S1). Next, information on the connection request destination of the user (for example, an address of a Web site) is received from the proxy server 38 (step S2). Next, the information of the connection destination is applied to the filter rule to determine whether or not the connection is possible (step S3). If the connection cannot be permitted, the communication session disconnecting unit 24 disconnects the communication session (step S4). If the connection can be permitted, it is determined whether the session is still valid (step S5). If the session is valid, the processes of steps SS2 to S5 are repeated. If it is not valid, the process ends.
[0049]
Alternatively, the proxy server 38 may measure the amount of data communication, and may not allow access from a person who has not paid a fee. In this case, only the user ID is given to the vendor, and the user's password and IP address are not guided. As a result, the user only needs to manage a pair of IDs and passwords for InterServer 6. In addition, since the IP address may be changed for the convenience of the user or for other reasons, it is appropriate to have the ID confirmed each time using the ID as a key in terms of system consistency. It is appropriate because the danger of doing so can be eliminated.
[0050]
The execution of the filter rule and the execution of the communication session disconnection or connection based on the filter rule are performed by the communication session disconnecting unit 24. Note that a filtering method using the set filter rules, a gateway method, and other methods are known, and thus description thereof is omitted.
[0051]
The InterServer 6 has an IPv6 terminal search unit 26 (FIG. 3) that provides a function for a person who does not know the address of the IPv6 terminal 2 to search for the IPv6 terminal 2. The search unit 26 searches for and specifies a desired IPv6 terminal 2 based on information specified by the user, for example, the operating state of the IPv6 terminal 2 and the operating state of the network.
[0052]
For this reason, as shown in FIG. 6, the search unit 26 includes a state information receiving unit 40 for receiving state information such as an operation state of the IPv6 terminal 2 connected to the IPv6 network and the InterBOX 3 and a state of the network. A status information storage unit 41 that stores the IP address of the IPv6 terminal and the IP address of the InterBOX 3 in association with each other, and an IPv6 terminal control unit 42 are provided.
[0053]
The status information receiving unit 40 receives the status of each IPv6 terminal 2 for each prefix or domain (IPv6 network or InterBOX 3) that accommodates the IPv6 terminal 2. The information receiving unit 40 may receive the status by inquiring the status at a predetermined cycle for each of the prefix and the domain, or may inquire at the time when a request for reference to each prefix or the domain is made. May be obtained. In the case of the former method, for example, an inquiry about the power ON / OFF of each terminal 2 is made every minute for each InterBOX registered in the InterBOX address storage unit 16a.
[0054]
The state information storage unit 41 stores the state information of each IPv6 terminal 2 in association with the IPv6 terminal and the InterBOX 3. Here, the acquired state information is roughly divided into an operation state, a use state, position information, information indicating characteristics, information indicating information held by a node (InterBOX 3 or IPv6 terminal 2), and other information for specifying a node. At least one or more of the valid information.
[0055]
The operation information is at least one or more of a power supply state, a network connection state, and a communication state. The usage state is at least one or more of information about the user, information about the operation time, and information about the load. The position information is at least a geographical position and coordinate information, a postal code, a room number, and the like. The information indicating the characteristic is one or more of information such as the type, function, shape, color, device information, software information, function, and administrator of the node.
[0056]
The models determined by the IPv6 model determining unit 21 are also individually stored as status information. The status information receiving section 40 can specify information obtained from the IPv6 terminal 2 based on the model information, and can obtain necessary information in a format suitable for them.
[0057]
The search unit 26 further includes a connection request authentication unit 27 that connects to the user management server 30 to authenticate a person who makes the search or connection request, and permits search and connection requests. For example, a user's home network (InterBOX 3) is not permitted to search and connect to a user other than the specific user permitted to connect to the network. If the authentication unit 27 determines that the answer is affirmative, the search unit 26 accesses the state information storage unit 41 and the address storage unit 16 to search for the address of the desired terminal 2 (specifies the InterBOX 3). I do.
[0058]
As a result of the search, for example, when the user searches the InterBOX 3 of his / her home network from the outside using a personal computer, all the IPv6 terminals 2 connected to the InterBOX 3 are displayed in a list together with the state. It may be. FIG. 7 shows an example of a search screen, and FIG. 8 shows an example of a list display relating to the InterBOX identified as a result of the search. In the example of the search interface shown in FIG. 7, an input box 43 for searching the InterBOX 3 and an input box 44 for searching the IPv6 terminal 2 are provided, and are programmed so that the search can be performed from either of them. I have.
[0059]
In the example of the search result list display of FIG. 8, all the terminals 2 connected to the InterBOX 3 are displayed in a list together with information on the owner, state, type, and model name. Then, by pressing an operation screen display button indicated by 45 in the figure, the terminal control unit 42 is activated and an operation screen (not shown) corresponding to the type and model of the terminal 2 is displayed.
[0060]
FIG. 9 is a conceptual diagram of the control by the control unit 42.
[0061]
First, while the InterBOX 3 is connected to the InterServer 6 through the tunneling session, the IPv6 terminal 2 notifies its operation status by a request from the status information acquisition unit 40 (step S11). At this time, the above-described operation state may not be obtained unless the user logs in to the control unit 42 from the IPv6 terminal 2 side. The acquisition of the operating state is performed at a constant cycle, and is stored and updated in the state information storage unit 41 (step S12).
[0062]
Next, the user of the IPv6 terminal 2 logs in from outside using an ID and a password from outside, identifies the terminal to be controlled from the list as described above, and activates the control unit 42 (step S13). The control unit 42 processes all commands on the server side, gives appropriate commands to the terminal device, and controls them.
[0063]
Further, by selecting a terminal name from the list, the terminal may be routed and connected to the selected IPv6 terminal. Further, a search may be performed by inputting a specific state as a search condition, and when the terminal is found, the terminal may be directly connected to the terminal. Note that even when a search for the terminal is performed from the outside through a Web server without using the tunneling connection via the InterServer 6, the connection to the terminal is established after the tunneling connection is established.
[0064]
Here, the “tunneling” is a technology for connecting IPv6 networks (routers) via an IPv4 network, and a technology for encapsulating and exchanging IPv6 packets between specific routers using IPv4.
[0065]
Each of the components 10 to 42 of the InterBOX 3 and the InterServer 6 actually controls a certain area secured on a hard disk provided in the computer system, a computer software program installed therein, and these hard disks. And a peripheral device such as a CPU, a RAM, and other input / output devices for reading and executing the program.
[0066]
Further, it is preferable that each of the InterBOXs 3 is composed of one computer system, but it is preferable that the InterServer 6 is composed of a plurality of computer systems connected to each other to distribute a load. For example, the terminal search unit that manages the status of the InterBOX 3, the IPv6 terminal 2, and the home network is preferably configured by a server having a dedicated transmission / reception interface and a control unit. This is because a session for managing ON / OFF and other states of each device is expected to be enormous, and it is necessary to distribute the load. When one InterServer 6 supports InterBOXs and IPv6 terminals of a plurality of different manufacturers, a plurality of encapsulation processing units 18, a command setting unit 22, a filter unit 23, and the like may be provided.
[0067]
Next, the operations of the above-described InterBOX 3 and InterServer 6 will be described in detail with reference to communication examples shown in FIG.
[0068]
FIG. 10 shows a case where communication is performed between the IPv6 terminal 2 of the home network to which the InterBOX 3 is connected and the IPv6 server 7 which is connected to the InterServer 6 directly or via the IPv6 home network 1a. is there.
[0069]
In this example, it is assumed that the IPv6 address 16a of the IPv6 terminal 2 and the IPv4 global address 16b of the InterBOX are previously stored in the InterServer 6, as shown in FIG. For this reason, the IPv6 terminal 2 needs to notify the InterServer 6 of its own IPv6 address through the InterBOX 3 or another means in advance. This operation is achieved, for example, when the user connects his / her IPv6 terminal 2 to the home network 1 and a tunneling connection is automatically established between the InterBOX 3 and the InterServer 6 by the plug and play function. It may be so. When the InterServer 6 knows the IPv6 address of the IPv6 terminal 2 or a part thereof (the IPv6 address prefix of the InterServer), the InterServer 6 announces (disseminates) it to another ISP router so that routing to the IPv6 address is performed through the InterServer 6. It has become.
[0070]
If the IPv6 address of the IPv6 terminal 2 depends on the prefix assigned to the InterBOX 3, the address 16a of the IPv6 terminal 2 stored in the InterServer 6 is used as the address 16a of the InterBOX 3 that constitutes a part of the address 16a. It is only necessary to store the IPv6 prefix. In this case, the InterServer 6 announces the routing information of the prefix to another ISP router.
[0071]
When a connection request to the IPv6 terminal 2 is made from the IPv6 server 7 in a state where the above processing and setting (tunneling connection) have already been performed, the connection from the IPv6 server 7 is routed to the InterServer 6. You. The InterServer 6 determines the IPv4 address of the InterBOX 3 from the address 16a of the IPv6 terminal 2, and causes the tunneling session establishing units 17 and 11 to establish a communication session within the tunnel connection with the InterBOX 3.
[0072]
When the tunneling communication session is established, the packet to the IPv6 terminal 2 is encapsulated by the encapsulation processing unit 18 as an IPv4 packet for the InterBOX 3 and transmitted. In the InterBOX 3, the encapsulation processing unit 12 decapsulates the packet, and the routing processing unit 13 performs a routing process to the IPv6 terminal 2 based on the address of the IPv6 terminal 2 included in the packet. In this manner, for example, connection to the IPv6 terminal 2 on the IPv6 home network at home can be performed by activation from the external IPv6 server 7 side.
[0073]
For example, assuming that the IPv6 terminal 2 is a home surveillance camera, the camera is started and connected via the InterServer 6 and the InterBOX 3 by connecting its own PDA or the like to a nearby IPv6 network even when going out. It becomes possible to control.
[0074]
In this example, an IPv6 terminal model discriminating unit 21, a command setting unit 22, and a filter unit 23 provided in the InterServer 6 according to the model of the terminal 2 function.
[0075]
The model determining unit 21 is configured to determine the model and network environment of the IPv6 terminal 2 based on, for example, the IPv6 address of the IPv6 terminal. In this embodiment, it is assumed that the IPv6 terminal 2 and the InterServer 6 are manufactured by the same manufacturer or based on a unified standard. In this case, the IPv6 terminal 2 is assigned (or generated) to each terminal 2 in advance. By setting a certain rule for an address, it is possible to easily determine the type of this model and the network environment simply by knowing this address.
[0076]
When a special command is required for controlling the IPv6 terminal 2, the model-specific command setting unit 22 converts a command included in communication from the IPv6 server 7 into a command for the model and sets the command. For example, a predetermined command may be generated from a message described in the HTML language. Further, a command from one server 7 may be converted into a command for a plurality of IPv6 terminals 2.
[0077]
Further, the filter unit 23 has a function of filtering IPv6 packets passing through the InterServer 6 based on a predetermined rule. This filtering rule may be set, for example, for each connection destination IPv6 terminal 2 or may be set for each network. The communication session disconnecting unit disconnects the communication session when the model determining unit 21 determines that the communication environment is not a predetermined model or network environment, or when the filter unit 23 determines that the communication environment is not appropriate. Have been. Further, even when the connection destination IPv6 terminal cannot be connected because the power is off or the like, if the other IPv6 device can be replaced by another IPv6 device connected to the same InterBox, the other IPv6 terminal is based on the model and type information. You may make it route to.
[0078]
FIG. 11 shows an example in which IPv6 home networks having both InterBOXs 3 and 3 ′ are connected to each other via InterServer 6. An IPv6 terminal A and an IPv6 terminal B are respectively connected to each home network, and a case where communication is performed between the two IPv6 terminals A and B will be described as an example.
[0079]
Also in this case, each address of the IPv6 terminals A and B or a part thereof (IPv6 prefix) is stored in the InterServer 6 in association with the IPv4 address of each InterBOX 3.
[0080]
Then, when a connection from one terminal A to the other terminal B is requested, first, a communication session within a tunnel connection is established between the InterBOX A of the terminal A and the InterServer 6. Then, the InterBOX-B is specified based on the address of the terminal B included in the packet, whereby a tunneling communication session is established between the InterServer 6 and the InterBOX-B. Then, in the InterBOX-B, routing in the network is performed based on the IPv6 address of the terminal B included in the packet.
[0081]
As a result, the two IPv6 terminals 2 can communicate with each other via the InterServer 6 using IPv6.
[0082]
When communication is to be performed between the two IPv6 terminals 2, the address of the connection destination IPv6 terminal may be unknown. In this case, the connection source user accesses the InterServer 6, and activates the IPv6 terminal search unit 26. At this time, for security, the connection request authentication unit 27 authenticates the user, determines whether the connection request is valid, and permits search for the connection destination IPv6 terminal or user. When a desired IPv6 terminal can be specified, a tunnel communication session is established based on the IPv6 address of the terminal.
[0083]
According to the above configuration, all communication relating to the Ipv6 terminal 2 is performed via the InterServer 6, regardless of the carrier or ISP. The owner of the InterServer 6 can freely set and control. As a result, the conventional problems of individual recognition of IPv6 devices, home routing, and security in a mixed IPv6 and IPv4 can be solved, and a very open and closed network can be constructed. Will be possible.
[0084]
In addition, it is assumed that the owner of the InterServer 6 is a maker that is usually a maker of the IPv6 terminal 2. Therefore, this manufacturer can create added value using the Internet by preparing its own lineup of IPv6 devices corresponding to this InterServer6.
[0085]
Next, sign-up of the IPv6 terminal 2 will be described with reference to FIG.
[0086]
That is, in the above description, the IPv6 address of the IPv6 terminal 2 is received from the InterBOX 3 side, but actually, various methods other than this method can be considered. Further, it is considered that the manufacturer or the owner of the InterServer 6 wants to know the information of the owner (user) of the IPv6 terminal 2. Furthermore, as for the method of generating the address of the IPv6 terminal 2, there may be a case where a fixed IPv6 address is written in a RAM or the like in advance at the time of factory shipment, as described above, and the IPv6 prefix of the InterBOX 3 to be connected. It is thought that it may be decided depending on.
[0087]
Therefore, in this embodiment, for example, as shown in FIG. 12, the user of the IPv6 terminal 2 or the InterBOX 3 first connects to the user management server 30 and performs user registration. This user registration may be performed through the InterBOX 3 using the IPv6 terminal 2 or may be performed using an existing IPv4 communication-compatible device such as a personal computer. Here, a case in which the communication is performed through the IPv6 terminal 2 and the InterBOX 3 will be described. Hereinafter, a case will be described as an example where the IPv6 address of the IPv6 terminal 2 is generated by combining the IPv6 address prefix assigned to the InterBOX 3 and the MAC address of each terminal 2.
[0088]
In this case, first, when the user connects the IPv6 terminal to the InterBOX 3, the InterBOX 3 connects to the user management server 30 via the ISP / carrier. As a result, information necessary for a tunneling connection with the InterServer 6 as well as the IPv6 prefix is notified from the InterBOX 3 to the user management server 30. Further, the user notifies the management server 30 of information for specifying the user, the InterBOX 3 or the IPv6 terminal 2, information on the type of the terminal 2, information on the network 1, and other information necessary for billing through the InterBOX 3. . In this example, an ID and a password are issued for the InterBOX 3 or each user, and the information of the InterBOX 3 and the user are registered in the database 31 in association therewith. Note that the information required for registration is not limited to this, and other information may be required. Conversely, when passwords and billing information are not required, it is not necessary to register such information. Absent.
[0089]
The IPv6 address prefix of the InterBOX 3 may be previously allocated and stored in the InterBOX 3 at the time of manufacture or the like, or may be notified from the server for the first time by performing user registration in this manner. There may be. In the latter case, when user registration is performed on the Internet using an existing personal computer without passing through the InterBOX 3, the IPv6 prefix, the ID, and the password are manually set in the InterBOX 3. When such user registration is completed, information necessary for connection is stored in the InterBOX 3 and the IPv6 terminal 2.
[0090]
The user management server 30 as described above may be connected to the InterServer 6, or may be provided independently of the Internet.
[0091]
On the other hand, FIG. 13 shows an embodiment regarding a specific method of establishing a tunneling connection and a communication session therein. The reference numerals of S21 to S27 shown in the figure correspond to the following steps S21 to S27.
[0092]
First, in the embodiment described above, the InterBOX 3 stores the IPv4 address of the InterServer 6, but this may be a method in which the manufacturer records it in the RAM before shipment from the factory, or may be a method in which the tunnel connection is actually performed. A method of receiving and setting from another server or the like may be used. When the InterServer 6 is single, the former may be used, but when there are a plurality of InterServers 6, the latter method is considered to be more efficient.
[0093]
The example in this figure is the latter case, and a tunnel broker 52 is provided for that purpose. The tunnel broker 52 is configured to be able to refer to the user information management DB 31. The tunnel broker 52 is connected to an address database 53 for storing IPv4 addresses of the InterServer 6 and the InterBOX 3. The IPv4 global address of the tunnel broker 52 is set in the InterBOX 3 in advance. It is also assumed that the ID and password (if necessary) set above are already set in the InterBOX 3.
[0094]
In this case, the InterBOX 3 first connects to the tunnel broker 52 and transmits the ID and the password (step S21). Thus, the tunnel broker 52 authenticates the InterBOX 3 and obtains the IPv6 address prefix of the InterBOX 3 (step S22). Next, the tunnel broker 52 selects the InterServer 6 to which a tunnel connection is to be established from the address database 53 (step S23), and notifies the InterBOX 3 of the IPv4 address of the InterServer 6 (step S24). Further, the tunnel broker 52 passes the IPv4 address of the InterBOX 3 and the IPv6 prefix for identifying the IPv6 terminal (part of the address of the IPv6 terminal 2) to the InterServer 6 (step S25). As a result, the InterBOX 3 can identify the InterServer 6, and can establish a tunneling session (Steps S26 and S27). Further, the InterServer 6 announces the routing of the notified IPv6 prefix to another router. As a result, all routing of the IPv6 address having the prefix is routed to the InterServer 6.
[0095]
According to such a configuration, even when there are a plurality of InterServers 6, a tunneling connection can be reliably established with one of them.
[0096]
The embodiment described above is merely one embodiment of the present invention, and it goes without saying that various embodiments can be adopted without changing the gist of the invention.
[0097]
For example, in the above-described embodiment, a tunneling connection can be established from both the InterBOX 3 and the InterServer 6; however, it is generally considered that an actual commercial service is only activated from the InterBOX 3. This is because IPv4 fixed IP service itself is rare. That is, in this case, once the tunneling (actually, the IPv4 connection itself) is established, the setting remains as it is, and once the IPv4 session is cut off, it is better that the IPv4 of the next InterBox 3 is the same. Because it is rare, routing is not possible if the IPv4 session itself is actually disconnected.
[0098]
In the above-described embodiment, the first protocol is described as an example of IPv6, and the second protocol is described as an example of IPv4. However, the present invention is not limited to this. The second protocol may also be IPv6. Further, both the first and second protocols may be IPv4. Further, both may be protocols other than the above.
[0099]
【The invention's effect】
As described above, according to the Internet connection system of the present invention, the benefits of IPv6 can be obtained by relatively simple means, and the manufacturer of the client-side device can find its own added value. Internet connection methods that can be provided.
[Brief description of the drawings]
FIG. 1 is a diagram showing an example of a network configuration according to an embodiment of the present invention.
FIG. 2 is a schematic configuration diagram showing an example of an InterBOX.
FIG. 3 is a schematic configuration diagram showing an example of InterServer.
FIG. 4 is a diagram showing a schematic configuration of a filter unit.
FIG. 5 is a flowchart showing processing in a filter unit;
FIG. 6 is a diagram showing a schematic configuration of an IPv6 terminal search unit.
FIG. 7 is a diagram showing an example of a search screen.
FIG. 8 is a view showing an example of a search result list display relating to an InterBOX.
FIG. 9 is a view showing the concept of control by the control unit.
FIG. 10 is a functional diagram showing a communication example according to the embodiment.
FIG. 11 is a functional diagram showing another example of communication in this embodiment.
FIG. 12 is a diagram showing a setup example of an InterBOX or IPv6 terminal.
FIG. 13 is a diagram showing an example of a tunneling connection between an InterBOX and an InterServer.
[Explanation of symbols]
1. IPv6 home network
2 ... IPv6 terminal (client device)
3. InterBOX (relay device)
4: Internet network
6 ... InterServer (server)
7 ... IPv6 server
10: Server address storage unit
11 ... Tunneling session establishment unit
12 ... Capsulation processing unit
13: Routing processing unit
14. Packet transmitting / receiving unit
15 Prefix storage unit
16a: InterBOX global address storage unit
16b: Client device global address storage unit
16 Address storage unit
17 ... Tunneling session establishment unit
18 Capsule processing unit
19 ... Routing part
21 Terminal type discriminator
22 Command setting section
23 ... Filter section
24: Communication session disconnection unit
25 transmission / reception processing unit
26 Terminal search unit
27 ... Connection request authentication unit
30 ... User management server
31 ... User information management DB
32 ... Web server
33 ... Filter rule storage
34: Filter rule setting section
35 ... Interaction interface generator
36 ... User authentication unit
38: Proxy server
39 ... DB
40 ... status information receiving unit
40 ... Information receiving unit
40 state information acquisition unit
41 ... Status information storage unit
42 ... Terminal control unit
52 ... Tunnel broker
53 ... Address database

Claims (26)

A relay device provided in a first network to which a client device is connected and communication is performed by a first communication protocol; and a server to which the relay device is connected by a second communication protocol through a second network. And
The relay device includes a client device global address storage unit that stores a global address of the client device in the first communication protocol, and a server address storage unit that stores a global address of the server in a second protocol. A first routing device for routing a connection from the client device through the server based on the global address of the server stored in the storage unit; A first packet processing device that establishes a tunneling connection of a first protocol with the server by encapsulating / decapsulating with the protocol of
The server includes a second packet processing device for encapsulating / decapsulating a packet of a first protocol with a second protocol to enable a tunneling connection with the relay device; A terminal device global address management device for managing a global address of the connected client device in a first protocol in association with a global address of the relay device in a second protocol, and the terminal managed by the management device And a second routing device for performing routing to the relay device based on a global address of the device. The internet connection system according to claim 1,
The system according to claim 1, wherein the first protocol and the second protocol are different protocols. The internet connection system according to claim 1,
The system according to claim 1, wherein the first protocol and the second protocol are the same protocol. The internet connection system according to claim 1,
A system, wherein the server is provided with a model determining unit that determines whether the client device and / or the relay device is a predetermined model. The system according to claim 4,
The server is provided with a communication session disconnecting unit that disconnects the communication session or restricts transmission / reception of packets based on the client device or the relay device when the client device or the relay device is determined not to be the predetermined type by the model determination unit. System. The internet connection system according to claim 4,
The server is provided with a command conversion unit that converts a command to be transmitted to the client device based on a determination result by the model determination unit into a command of a predetermined format for controlling the client device. System to do. The internet connection system according to claim 4,
A system, wherein the server is provided with a client device control unit that controls the client device based on a determination result by the model determination unit. The internet connection system according to claim 1,
A system, wherein the server is provided with a network type determination unit that determines whether the environment of the first network to which the client device and / or the relay device is connected is a predetermined type. 9. The system according to claim 8, wherein
The server, when it is determined that the private network environment to which the client device or the relay device is connected is not a predetermined type, has a communication session disconnecting unit that disconnects the communication session or restricts transmission and reception of packets based on the determined type. A system characterized by the following. The system according to claim 9,
The system according to claim 1, wherein the server has a status information acquisition unit that acquires at least one or a plurality of pieces of information on an operation state, a use state, and location information of the client device or / and the relay device. The system according to claim 10,
The system according to claim 1, wherein the status information acquisition unit is configured to acquire at least one or a plurality of pieces of information on an operation state, a use state, and location information of the client device by a method according to a model of the client device. The system according to claim 10,
The server may include a search unit that searches for the client device or the relay device based on information obtained by combining at least one of address, operation state, use state, and location information of the client device or the relay device. A system characterized by the following. The system according to claim 11,
The system according to claim 1, wherein said search unit includes means for displaying a list of client devices connected to the relay device for each of the relay devices. The Internet connection system according to claim 13,
The server is provided with a client device control unit that controls the client device,
The system according to claim 1, wherein the client device control section starts a client control program corresponding to the client device by selecting a specific client device from the list display. The system according to claim 1,
The server is provided with a client device address search unit that searches for a global address of the client device according to a first protocol based on a connection request to the client device. The system of claim 15,
A system, wherein the server is provided with a connection requester authentication unit that authenticates a person who has made a connection request to the client device and permits or denies connection to the client device. The system according to claim 1,
The system further includes a tunneling connection information management device that manages tunneling connection information between the relay device and a server,
The tunneling connection information management device notifies the relay device of a global address of the server in a second protocol, and a global address of the relay device in a second protocol and a global address of the client device in a first protocol. A system for notifying a global address or a part thereof to the server. The system of claim 17,
The tunneling connection information management device authenticates the relay device or server, and performs the notification when the result is positive. The internet connection system according to claim 1,
The system according to claim 1, wherein the server includes a filtering processing device that filters communication to / from the client device according to a predetermined rule. 20. The system of claim 19,
The system according to claim 1, wherein the server further includes a filtering rule setting unit that provides an interface for editing the predetermined rule. The internet connection system according to claim 1,
The system according to claim 1, wherein the relay device is provided with a model determining unit that determines whether the client device is a predetermined model. The internet connection system according to claim 20,
The system according to claim 1, wherein the relay device is provided with a communication session disconnecting unit that disconnects the communication session based on the type of the client device determined by the model determining unit when the client device is not the predetermined type. A relay device provided on a first network to which a client device is connected and communication is performed by a first communication protocol, and a server to which the relay device is connected by a second communication protocol through a second network. The relay device used for an Internet connection system having:
The relay device includes a client device global address storage unit that stores a global address of the client device in the first communication protocol, and a server address storage unit that stores a global address of the server in a second protocol. A first routing device for routing a connection from the client device through the server based on the global address of the server stored in the storage unit; And a first packet processing device that establishes a tunneling connection of a first protocol with the server by encapsulating / decapsulating with the protocol of (i). A relay device provided on a first network to which a client device is connected and communication is performed by a first communication protocol, and a server to which the relay device is connected by a second communication protocol through a second network. The server used for an Internet connection system having:
The server includes a second packet processing device that encapsulates / decapsulates a packet of a first protocol with a second protocol to enable a tunneling connection with the relay device. A terminal device global address management device for managing a global address of the connected client device in a first protocol in association with a global address of the relay device in a second protocol, and the terminal managed by the management device A second routing device for performing routing to the relay device based on a global address of the device. A relay device provided on a first network to which a client device is connected and communication is performed by a first communication protocol, and a server to which the relay device is connected by a second communication protocol through a second network. A computer software program installed in the relay device used in the Internet connection system having
The program includes a client device global address storing procedure for storing a global address of the client device in the first communication protocol, and a server address storing procedure for storing a global address of the server in a second protocol. A first routing procedure for routing a connection from the client device so as to pass through the server based on the global address of the server stored by the storage procedure; A first packet processing procedure for establishing a first protocol tunneling connection with the server by encapsulating / decapsulating with a protocol. A relay device provided on a first network to which a client device is connected and communication is performed by a first communication protocol, and a server to which the relay device is connected by a second communication protocol through a second network. A computer software program installed on the server used in the Internet connection system having
The program includes a second packet processing procedure of encapsulating / decapsulating a packet of a first protocol with a second protocol so as to enable a tunneling connection with the relay device. A terminal device global address management procedure for managing a global address of the connected client device in a first protocol in association with a global address of the relay device in a second protocol, and the terminal managed by the management procedure A second routing procedure for performing routing to the relay device based on a global address of a device.

Images