JP2007116449A - Network communication system and communication apparatus and program used for the communication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a contrivance capable of providing both a service for each of cells configuring a mesh net network service system and a service bridged over a plurality of the cells. <P>SOLUTION: The mesh net network service system 10 includes VSGs 30. Each VSG 30 is used for a gateway when a data access is made to a mesh net. Arranging the VSG 30 to each gateway of the mesh nets forms three new architectures. Firstly data communication access control from a plurality of different areas is carried out. Secondly a band used for the service is controlled by each different area. Thirdly protocol conversion in a network layer corresponding to a plurality of the areas and protocol conversion applied to the service are executed. Thus, provision of the service in each cell and provision of the service bridged over among the cells can both be smoothly executed. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a network communication system and also relates to a communication apparatus used for the communication system. Furthermore, it is related with the program which implement | achieves the communication apparatus.

  In recent years, the use of mesh network service systems has been widely studied. Various sightseeing spot service systems and local government networks using this mesh network service system have been studied.

  In this patent, it is called a mesh network service system, but it may be simply called a mesh network (net) or simply a mesh network. Further, the mesh network service system may be called a mesh network.

Examples of Invention Related to Network Communication Patent Document 1 below discloses a broadband communication technique using a multi-hop mesh network. Patent Document 2 below discloses a configuration in which device groups using non-hierarchical networks monitor each other. Further, Patent Document 3 below discloses a technique related to allocation of wireless communication line traffic in a mobile wireless communication network. In particular, Patent Document 3 below describes a technique for creating a map representing assignment.

JP-T 2002-512050 JP-T-2002-517921 JP 2004-215265 A

  A mesh network service system is generally composed of a plurality of cells. Here, the cell is used to mean a certain geographical range or a certain range where communication is possible. Therefore, when providing a service limited to a certain area, it is desirable that the service can be provided in units of cells. On the other hand, there is a case where it is desired to provide a service extending over a plurality of cells.

  However, in the conventional mesh network network service system, only the overall service is often provided, and the service can be provided on a cell-by-cell basis, and a service that spans multiple cells and a service for each cell. There is no known one that can be realized with one system.

  The present invention has been made in view of such circumstances, and an object thereof is a mechanism capable of providing both a service for each cell constituting the system and a service spanning a plurality of cells in a mesh network service system. Is to realize.

  The present invention employs the following means in order to solve the above problems.

A. MESH NETWORK NETWORK SERVICE SYSTEM (1) The present invention includes an inter-cell connection service network that performs communication between cells and an intra-cell service network that performs communication within each cell in order to solve the above-described problems. In the mesh network service system, the inter-cell connection service network includes a plurality of base stations and an inter-cell communication network connecting the plurality of base stations, and the intra-cell service network includes any one of the bases A service gateway connected to a station, an intra-cell service server for providing a predetermined service to a subscriber terminal in the cell, the intra-cell service server connected to the service gateway, and the subscriber terminal A subscriber station that communicates with the in-cell service server, wherein the base station is connected Through the cell service server that, also by using a communication network between the cells, a mesh network network service system and providing a communication service between cells.

  (2) Further, the present invention provides a mesh network service management server connected to any one of the base stations in the mesh network service system according to (1), wherein any one of the mesh network service systems A mesh network service system comprising: a mesh network service management server that provides a predetermined service to a subscriber terminal located in a cell.

  (3) Further, the present invention provides a network management / operation server connected to any one of the base stations in the mesh network service system described in (1), which manages the inter-cell connection service network. A mesh network service service system including a network management / operation server.

  (4) Further, the present invention provides an existing service server that connects to an external system and provides an external service provided by the external system to the subscriber terminal in the mesh network service system described in (1) above. A mesh network service service system comprising an existing service server connected to any one of the base stations.

B. Service Gateway (5) The present invention is provided for each service provided to the subscriber terminal in the service gateway used in the mesh network service service system described in (1), in order to solve the above problem. Recording means for recording information relating to the private network, the recording means for recording data of the subscriber terminal registered in the private network, and the registration request to the private network received from the subscriber terminal The service gateway further includes registration means for registering the subscriber terminal information in the recording means.

  (6) In the service gateway used in the mesh network service system described in (1) above, the present invention records information relating to a private network provided for each service provided to the subscriber terminal. Means for recording data of a service provider device registered in the private network, and when receiving a registration request for the private network from the service provider device, to the recording means And a registration means for registering information of the service provider device.

  (7) Further, the present invention is the service gateway according to the above (6), further comprising a distribution unit that distributes the data of the service provider device in the recording unit. .

C. Mesh network service management server (8) In order to solve the above-mentioned problem, the present invention provides each mesh provided to the subscriber terminal in the mesh network service management server used in the mesh network service service system described in (2) above. Recording means for recording information about a private network provided for each service, the recording means for recording data of the service gateway registered in the private network, and participation in the private network from the service gateway A mesh network service management server comprising: registration means for registering information on the service gateway in the recording means when a request is received.

  (9) In the mesh network service management server used in the mesh network service system described in (2) above, the present invention provides information on a private network provided for each service provided to the subscriber terminal. Recording means for recording, when recording request for recording to the private network is received from the recording means for recording data of the service provider device registered in the private network and the service provider device, A mesh network service management server comprising: registration means for registering information of the service provider device in a recording means.

  (10) Further, the present invention provides the mesh network service management server according to (9) above, including distribution means for distributing the data of the service provider device in the recording means. It is a service management server.

D. The program (11), the present invention is to solve the above problems, the computer, the program for operating as the claim 5, wherein the service gateway, to the computer, from the subscriber terminal, to the private network When a registration request is received, the recording unit is caused to execute a registration procedure for registering information on the subscriber terminal, and the recording unit relates to a private network provided for each service provided to the subscriber terminal. A recording means for recording information, the recording means recording data of a subscriber terminal registered in the private network.

  (12) Further, in the program for causing the computer to operate as the service gateway according to (6), when the computer receives a registration request to the private network from the service provider device, A registration means for registering information of the service provider device to a recording means, wherein the recording means is a recording means for recording information relating to a private network provided for each service provided to the subscriber terminal. The program is a recording means for recording data of a service provider apparatus registered in the private network.

  (13) In the program according to (12), the present invention further causes the computer to execute a distribution procedure for distributing data of the service provider device in the recording means to the outside. It is a program.

  (14) In the program for causing a computer to operate as the mesh network service management server described in (8) above, when the computer receives a request for participation in the private network from the service gateway, Registration means for registering the information of the service gateway to the recording means, and the recording means is a recording means for recording information relating to a private network provided for each service provided to the subscriber terminal. And a recording means for recording data of the service gateway registered in the private network.

  (15) Further, according to the present invention, in the program for causing a computer to operate as the mesh network service management server described in (9) above, the computer receives a registration request to the private network from a service provider device. Recording means for registering information of the service provider device, wherein the recording means records information relating to a private network provided for each service provided to the subscriber terminal. The program is a recording means for recording data of a service provider device registered in the private network.

  (16) In the program according to (15), the present invention further causes the computer to execute a distribution procedure for distributing data of the service provider device in the recording unit to the outside. It is a program.

  (17) The present invention records information on a global private network provided for each service provided to the subscriber terminal in the mesh network service management server used in the mesh network service system described in (2) above. Recording means for recording the data of the service gateway registered in the global private network, and the global private network from a service gateway for receiving a global service provided via the global private network. Registration means for registering the information of the service gateway in the recording means when receiving a request to join a network, and the global private network is connected between cells. Want a mesh network service management server, which is a private network.

  (18) Further, the present invention relates to a global private network provided for each service provided to the subscriber terminal in the mesh network service management server used in the mesh network service service system described in (2) above. Recording means for recording the data of the service gateway registered in the global private network, and from the service gateway to provide the local service as a global service to the global private network Registration means for registering information of the service provider device in the recording means when receiving a registration request, wherein the global private network provides the global service A fit of a private network, a mesh network service management server, which is a private network that spans between cells.

  (19) Further, according to the present invention, in the mesh network service management server described in the above (18), data of a service gateway that intends to provide the local service in the recording unit as a global service is transmitted via a broadband wireless access network. A mesh network service management server characterized by including distribution means for distributing data.

  (20) Further, according to the present invention, in the program for causing a computer to operate as the mesh network service management server described in (17), the computer tries to receive a global service provided via the global private network. When receiving a request to join the global private network from a service gateway, the recording means executes a registration procedure for registering information of the service gateway, and the recording means provides each of the subscriber terminals Recording means for recording information on a global private network provided for each service, the recording means for recording data of the service gateway registered in the global private network It is.

  (21) Further, in the program for causing a computer to operate as the mesh network service management server described in (18), the present invention provides a global service from a service gateway that intends to provide a local service as a global service. When the registration request to the private network is received, the recording means is caused to execute a registration procedure for registering information of the service provider device, and the recording means is provided for each service provided to the subscriber terminal. A recording means for recording information relating to a provided global private network, the recording means recording data of the service gateway registered in the global private network.

  (22) Further, according to the present invention, in the program for causing a computer to operate as the mesh network service management server according to (19), a service for providing the computer with the local service in the recording unit as a global service. A program for distributing gateway data via a broadband wireless access network.

  As described above, according to the present invention, communication on a network can be performed smoothly.

  DESCRIPTION OF EXEMPLARY EMBODIMENTS Hereinafter, preferred embodiments of the invention will be described with reference to the drawings.

Chapter 1 Mesh Network Business Model In this embodiment, a mesh network network service system 10 as shown in FIG. 1 is taken as an example, and a specific example of system configuration and service provision will be described in order.

1-1 Overall Configuration As shown in FIG. 1, this mesh network service system 10 includes an inter-cell connection service network 12, intra-cell service networks 14a, 14b, 14c, a mesh network service management server 16, and existing services. And a connection unit 18.

  In the present embodiment, the service is provided via a VPN (Virtual Private Network). In order to receive provision of a predetermined service, it is necessary to register and participate in a VPN that provides the service. Also, when providing a service, it is necessary to register and participate in the VPN.

  This VPN corresponds to a preferred example of the claimed private network.

1-2 Inter-cell connection service network The inter-cell connection service network 12 includes a plurality of base stations 20a, 20b, and 20c, and a communication network 22 that connects them. A mesh network management / operation server 24 is connected to the base station 20a.

1-3 Intra-cell service network The intra-cell service network 14 includes a VPN service gateway (hereinafter simply referred to as VSG) 30 that manages communication within the cell, and an intra-cell service server that provides services limited to the cell. 32. A plurality of subscriber stations 34 are connected to the VSG 30 and the subscriber terminal 36 is connected to the mesh network service system 10 via any one of the subscriber stations. The subscriber station 34 and the VSG 30 are connected to each other by PMP (Point to Multiple Point). In addition to the subscriber station 34, the store 38 is also preferably connected to the VSG 30 in the same manner. The PMP connection will be described in detail later.

Chapter 2 Services Provided In this embodiment, the mesh network service system 10 provides a mesh network service. The mesh network service includes the following four service components. These four service components basically exist independently of each other. However, there are cases where they are operated in conjunction with each other.

  As described below, the four service components are “in-cell service business”, “inter-cell connection service business (mesh network construction)”, “mesh network service”, and “existing service (and Connection service) ”.

  In this embodiment, a new business on the network can be provided by interconnecting subscribers, information providers, companies, stores, administrative institutions, etc. existing in the region.

2.1 In-cell service A business-in- cell service is a service provided in a predetermined cell. A cell refers to an area in which communication is possible via a predetermined VSG 30. Typically, it is a range (range in which communication by radio waves is possible) covered by the VSG 30 and the subscriber station 34.

  First, the VPN service gateway 30 (VSG 30) and the plurality of subscriber stations 34 are connected by PMP (Point to Multiple Point) (generally, wireless connection is used). As a result, the subscriber terminal 36 existing in the cell is provided with a network connection via the PMP connection by accessing one of the subscriber stations 34. As a result, the subscriber terminal 36 can receive various information, inter-terminal communication, application service, and the like, and can use these services.

  In order to provide a unique service within the cell, a service server for the cell (in-cell service server) is connected to the VSG 30. The VSG 30 performs access control by its packet switch function (see FIG. 2). As a result, the subscriber terminal 36 can access the in-cell service server 32.

  The VSG 30 owns the following service layers in order to provide services in the cell. This is shown in FIG. 2 (VSG functional configuration diagram).

  (1) A service layer that performs address distribution / management of the subscriber terminal 36 for each VPN group for a plurality of VPN groups. This layer is realized by the VPN address distribution server 48 in FIG.

  (2) A service layer that provides a VPN group list that provides cell services (service information of different cells can also be posted). This layer is realized by the VPN list distribution server 46 in FIG.

  (3) A service layer that executes location information management / authentication of the subscriber terminal 36 and resolves the destination (subscriber station unit) of the terminal existing in the cell for each VPN group when a call connection request is received. . This layer also provides a proxy server function for call control transfer between the VSG 30 and to the subscriber station 34. This layer is implemented by the location information management / authentication server / control transfer proxy server 44 in FIG. The call control information includes address information of the transmitting / receiving terminal / transport information / band information necessary for the application, and the proxy function unit of the VSG 30 and the subscriber station 34 uses the information as a data flow ID in the database. Register and set in hardware to enable switch processing at the packet level. Therefore, this system is a system that cannot perform data communication unless call control communication is normally answered, and realizes a firewall with improved performance.

  The location information management / authentication server / control transfer proxy server 44 holds subscriber terminal information on a hard disk or the like for authentication or the like. Further, information on the service provider device is also stored in this hard disk or the like. Such a hard disk corresponds to a preferred example of the recording means in the claims.

  Further, the location information management / authentication server / control transfer proxy server 44 corresponds to a preferred example of the registration means in the claims.

  (4) A service layer that manages the currently used PMP-side access bandwidth for each VPN group and executes bandwidth reservation control from the subscriber terminal 36. This layer is realized by the VPN band resource management server 42 in FIG.

  (5) A service layer that provides the VPN group information to the subscriber terminal 36 when the subscriber terminal 36 participates in a predetermined VPN group. This layer is realized by the VPN-Web server 240 in FIG. The user can browse the Web page on which the VPN group information is posted by accessing the VPN-Web server 40.

  The VPN-Web server 40 presents VPN group information by using the information of the service provider device stored in the hard disk or the like by the location information management / authentication server / control transfer proxy server 44. In particular, information of service provider devices belonging to the VPN group is presented. For example, in the presentation of information relating to the VPN group of the surveillance camera service, information relating to the surveillance camera of the service provider belonging to the VPN group is presented. The user can receive a monitoring camera service by selecting and accessing a desired monitoring camera from the group of monitoring cameras.

  Note that the “service provider monitoring camera” corresponds to a preferred example of the service provider device in the claims. Further, in this way, the VPN-Web server 40 corresponds to a preferred example of the delivery means in the claims.

  With the service layer as described above, an in-cell service that is a service for the inside of a predetermined cell can be provided to the subscriber terminal 36.

  FIG. 2 also shows functions of the VSG 30 other than these service layers. As shown in FIG. 2, the VSG 30 shows a VPN 1 for providing a monitoring camera connection service to the subscriber terminal 36 in the cell, a VPN 2 for a store advertisement, a VPN 3 for a communication group, and the like. In the present embodiment, in order to use a predetermined service, it is used by participating in a VPN group for providing the service. For example, when the user wants to use the service of the surveillance camera, the subscriber subscribes and registers with VPN1. Then, when the subscriber terminal 36 actually participates in the VPN 1, the subscriber terminal 36 can receive the image of the monitoring camera. These services are shown in the VPN group Web display in FIG.

  As shown in FIG. 2, the VSG 30 is provided with a packet switch 50. The packet switch 50 performs a communication packet exchange operation. The operation is the same as conventional packet switching.

  FIG. 3 is a sequence diagram showing the operation when the surveillance camera VPN service is provided.

  When a surveillance camera terminal installed in a school or a building is registered in the VSG 30, it can be displayed in real time as VPN-Web information by performing information disclosure registration. A user who wants to join the surveillance camera group (that is, VPN1 in this embodiment) is authenticated when joining the VPN group of the surveillance camera. After browsing the Web on the subscriber terminal 36, the user can connect to the target surveillance camera and view the video from the surveillance camera on the subscriber terminal.

  Such an operation will be described with reference to the sequence diagram of FIG.

  (1) First, the VSG 30 transmits the VPN service group list to the subscriber terminal 36 by the VPN service group list publicity function. This transmission is also sent to a monitoring camera terminal that provides a monitoring camera service. This operation is performed by the VPN list distribution server 46.

  (2) Next, the surveillance camera terminal registers an information provider in the remote camera group with respect to the VSG 30. The VSG 30 authenticates this registration and performs registration. This registration is executed by registering in the list managed by the VPN list distribution server 46 and registering in the list managed by the VPN-Web server 40.

  (3) Next, the VSG 30 distributes the address for the remote camera group to the surveillance camera terminal based on the registered contents. This distribution is executed by the VPN address distribution server 48.

  (4) Next, the user performs user registration from the subscriber terminal 36 to the remote camera group. This is to use the service of the surveillance camera. This user registration is processed by the VSG 30. Specifically, after being authenticated by the terminal location information management / authentication server / control transfer proxy server 44, it is registered in the VPN1 of the service.

  (5) After registration, the VPN service group address is distributed to the subscriber terminal 36. This distribution is executed by the VPN address distribution server 48.

  (6) Thereafter, the subscriber terminal 36 browses the Web information and selects a monitoring camera that the user wants to see.

  (7) Selection is performed on the Web. For example, the selection is performed by clicking an icon of a camera to be viewed. By this selection, a call control session (connection request) is transmitted to the surveillance camera terminal.

  (8) The monitoring camera terminal that has received this call control session (connection request) returns a call control session (connection response) to the subscriber terminal 36 that is the caller.

  (9) Upon receiving this reply, the subscriber terminal 36 activates application software necessary for viewing the surveillance camera, and uses this application to view the video of the surveillance camera. Note that the monitoring camera side starts sending video data captured by the monitoring camera to the subscriber terminal 36.

  As described above, the user can use the video distribution service of the monitoring camera using the subscriber terminal 36.

2.2 Cell connection service business (mesh network construction)
The inter-cell connection service is a service for interconnecting each cell in a mesh type by accommodating communication between cells in a communication path via the base station 20. The mesh network management / operation server 24 performs setting / maintenance / management on the network between the base stations 20. This is shown in FIG. As shown in FIG. 4, the plurality of base stations 20 are connected in a mesh form via a communication network 22. Each base station 20 is connected to the VSG 30 of each cell.

  The base station 20 is provided with a network transmission switch. Then, as shown in FIG. 4, the VSG 30 is mesh-connected using a network transmission switch. This network transmission switch is equipped with a management function that monitors the connected link level. When a link level failure occurs, the link failure information is output to all other normal ports. Thus, the mesh network service management server 16 (also referred to as MSM 16) connected to the mesh network receives the data path ID information set in the mesh network and uses the link where the failure has occurred. Detect the data path. Then, the MSM 16 converts the data path ID information and the session ID (s) using the data path into packet data, and notifies all the VSGs 30 in the mesh network.

  In addition, since the MSM 16 manages the session passing through the mesh network in association with the data path ID used by the session, the same as the above when the use band of the specific data path is insufficient. It is possible to distribute traffic on the data path in a way.

  FIG. 5 is an explanatory diagram showing the operation of the MSM 16 when the destination VSG connection and participation request is issued, and the operation associated therewith. As shown in this figure, when the calling VSG 30m sends a request to join or connect to the destination VSG 30n to the MSM 16 (as shown in FIG. ID) assigned by the MSM 16, and the ID is unique within the mesh network. The MSM 16 returns this ID to the calling side VSG 30m together with the information on the destination VSG 30n (see circle 2 in FIG. 5 (a symbol in which the number 2 is superimposed in a circle figure)). Thereafter, the calling side VSG 30m transmits this ID together with the connection request transfer information to the destination VSG 30n (see circle 3 in FIG. 5 (a symbol in which a numeral 3 is superimposed in a circle figure)). In FIG. 5, this ID is described as a session ID.

  For inter-cell connection, a plurality of data paths can be specified for the VSG 30 between two points, and an ID (transfer label) can be assigned to each data path. For example, in the example shown in FIG. 4, there are three data paths between the base station 20e and the base station 20i, and ID = 1, ID = 2, and ID = 3 are assigned, respectively.

2.3 Mesh Network Service The mesh network service is a service that provides a service management function for the entire mesh network by interlinking cell services. The mesh network service management server 16 for providing the mesh network service has the following service layers. This is shown in FIG.

  (1) Service layer for distributing / managing data path IDs to each VSG for each mesh network service VPN group.

  This service layer is executed by the VPN address distribution server 68. As described above, in this embodiment, various services are provided by participating in a VPN for the service.

  The same applies to the mesh network service, and it is necessary to register with the VPN for that purpose and then participate in the VPN.

  Therefore, when a cell service provider uses this mesh network service, the VSG 30 of the cell to which the cell service provider belongs must be authenticated by the MSM 16. By being authenticated, it is possible to participate in the VPN for the mesh network service.

  (2) A service layer that provides the VPN group list for mesh network service to the VSG.

  This service layer is executed by the VPN list distribution server 66.

  (3) When the location information management of the subscriber terminal 36 is executed in units of cells (VSG 30) and a call connection request is received, the destination of the subscriber terminal 36 existing in the cell for each mesh network service VPN group (VSG30 unit) It is a service layer that performs resolution. The service layer also performs terminal authentication for participation in the mesh network service VPN group.

  This service layer is provided by the terminal location information management / authentication server 64.

  The terminal location information management / authentication server 64 records the data of the VSG 30 on a hard disk or the like in order to provide the service layer. Further, information on the service provider's device (for example, a monitoring camera terminal) is also stored in this hard disk or the like.

  This hard disk or the like corresponds to a preferred example of the recording means in the claims. The terminal location information management / authentication server 64 corresponds to a preferred example of a registering unit in the claims.

  (4) A service that receives link level information owned by each packet switch constituting the mesh network in real time, performs bandwidth management in the mesh network, and performs bandwidth reservation for each data path ID between the VSGs 30. layer.

  The VPN layer resource management server 62 executes this service layer.

  (5) A service layer that provides the VPN group information to the subscriber terminal 36 when the subscriber terminal 36 participates in a predetermined VPN group.

  This service layer is executed by the VPN-Web server 60. The VPN-Web server 60 distributes VPN group information based on the data of the VSG 30 stored by the terminal location information management / authentication server 64 and information on the service provider device. Therefore, this VPN-Web server 60 corresponds to a preferred example of the delivery means in the claims.

  Next, the operation when this mesh network service is actually provided will be described with reference to the sequence diagram of FIG.

  First, the MSM 16 executes “VPN service group list publicity”. This is an operation of distributing the VPN service group list, and is distributed to each connected VSG 30. Various services provided in the present embodiment are provided when a user participates in a VPN as described above. A VPN is set for each service, and the user can use the service by registering and participating in the VPN that provides the desired service. In the case of the mesh network service in FIG. 7 as well, since the VPN of the mesh network service is set similarly, a group of available VPNs is provided as a list. The transmission of this list is executed using an inter-cell connection service (see FIG. 7).

  Next, the VSG 30 selects a VPN service to be joined from the distributed list and notifies the MSM 16 of it. Upon receiving this notification, the MSM 16 performs service registration. In parallel with this operation, the VSG 30 adds the participating VPN service to the list (see FIG. 7).

  Then, the VSG 30 transmits a new list to which the new service (mesh network service) is added to the subscriber terminal 36 and the monitoring camera terminal (see FIG. 7). This transmission is executed by the VPN list distribution server 46.

  Now, in the subscriber terminal 36 receiving the list distribution, the subscriber wants to use the new mesh network service (monitoring camera service), and the VPN group (monitoring camera in FIG. 7) of the mesh network service. Register as a user (referred to as a group). This registration request is forwarded to the MSM 16 and authenticated at the MSM 16. If the authentication is successful, the participation of the surveillance camera group is permitted (registered), and the surveillance camera group address for participation is distributed to the subscriber terminal 36 (see FIG. 7).

  On the other hand, in the surveillance camera terminal, in order to start the service, the service provider considers joining the surveillance camera group and registers as a user in the surveillance camera group. This registration request is also transferred to the MSM 16 and authenticated by the MSM 16. When the authentication is successful, the participation of the monitoring camera group is permitted (registered), and the address for the monitoring camera group for participating is distributed to the monitoring camera terminal (see FIG. 7).

  In this embodiment, if a user participates in a VPN, in principle, the user can freely provide the service or receive the service. Depending on the type of service, it is preferable to adopt a configuration that requires registration on the Web or the like when providing the service, but this depends on the quality of the service. In a service such as a monitoring camera, it is generally preferable to register in advance on the Web and perform an operation such as a user who wants to use clicks a desired monitoring camera icon from the Web. For example, it is generally preferable to display the state of provision of the service, a list of providers, etc. on the Web display for the VPN group like the surveillance camera connection service: VPN1 shown in FIG. It is also preferable to adopt.

  In this embodiment, when the surveillance camera group address is distributed to the subscriber terminal 36, the subscriber terminal 36 automatically browses the Web information using the address. This automatic browsing is realized by automatically starting a Web client at the subscriber terminal 36. In this way, when an address is distributed, the Web client is activated by using the address, which is a conventionally known technique. Those skilled in the art can configure such a subscriber terminal 36. Easy.

  Next, the user looks at the screen (Web screen) of the subscriber terminal 36 and selects a desired monitoring camera. By clicking the icon of the selected surveillance camera, the transfer camera viewed from the Web is selected (see FIG. 7). When this selection is made, a call control session is started. First, a connection request is transmitted from the subscriber terminal 36 to the surveillance camera terminal. This transmission is transferred through the network by assigning a route in the mesh network, and delivered to the monitoring camera terminal as the counterpart. When the monitoring camera terminal receives this connection request, it returns a connection response accordingly (see FIG. 7). As a result, an application for displaying the surveillance camera image is automatically activated on the subscriber terminal 36. Since it is a conventionally known technique to automatically start a predetermined application when a predetermined message is received, a person skilled in the art can configure the subscriber terminal 36 having such a configuration. Easy.

  Next, the surveillance camera terminal transmits the video of the surveillance camera to the subscriber terminal 36. On the subscriber terminal 36, the predetermined application displays the video of the surveillance camera. Such display applications are well known.

  Note that such video also passes through the network by assigning a route in the mesh network (see FIG. 4).

2.4 Existing Service The existing service in this embodiment refers to an existing service such as Internet access and telephone. These existing services can also be used after service authentication by registering to participate in the MSM 16 as in the cell service in the present embodiment. In other words, a VPN for the Internet connection service is prepared, and it becomes possible to use the Internet connection service by registering and participating in the VPN.

  In the present embodiment, an existing connection service unit 18 is provided for connection to the existing service. The existing connection service unit includes a VSG 30 as shown in FIG. As a result, the subscriber terminal 36 in another cell will see it as another cell.

  From the subscriber terminal 36, the connection service to the existing network can be used via the VSG 30 in the existing service connection unit 18.

  Therefore, since the provision of this existing service is a form of mesh network service, the service is provided via the MSM 16. The operation is the same as the operation described in FIG.

  The VSG 30 in the existing service connection unit 18 corresponds to a preferred example of the existing service server in the claims.

Chapter 3 VSG
Hereinafter, the VSG 30 which is a characteristic configuration in the mesh network service system 10 of the present embodiment will be described in detail.

3.1 VSG
The VSG (VPN service gateway) 30 is used as a gateway when performing data access to the mesh network in this embodiment.

  By arranging this VSG 30 at the entrance / exit of the mesh network, in the present embodiment, the following three new architectures that did not exist in the prior art can be formed.

(1) The data communication access control VSG 30 from three different areas allows a packet to pass only for access-permitted communication. This is shown in FIG. FIG. 8 shows a state in which communication between the three types of areas is controlled. As shown in FIG. 8, the three types of areas are three types: an area such as a PMP connection subscriber station and an external network, a mesh network area, and a VPN service server area.

  Among these, the VSG 30 performs communication at a speed of about 1 Gbps for areas such as PMP connection subscriber stations and external networks, and mesh network areas. In addition, the VPN service server area communicates at a speed of about 1 Gbps or higher.

  Note that communication controlled by the VSG 30 includes so-called loopback communication. In particular, since communication between the same cells (such as in the case of a PMP-connected subscriber station) exists in the same area for both the caller and the receiver, the VSG 30 makes a call from the area where the call originated to the same area. There is a case of “wrapping”.

(2) Service use bandwidth control for different areas The three types of areas described above are service-operated with different bandwidths (widths). When data communication passes through the VSG 30, data communication is executed after bandwidth allocation is executed in the algorithm specified by the service. In this way, since bandwidth allocation is performed for each service, it is possible to secure a communication bandwidth according to service quality and efficiently use the performance of the provided communication network.

  Conventionally, bandwidth allocation by location has existed, but bandwidth designation by a service has not been performed. In this embodiment, since the bandwidth allocated by the service is limited, the bandwidth of the communication network can be used more effectively.

(3) Protocol conversion in the network layer corresponding to the three types of areas and protocol conversion applied to the service When the three types of areas are operated by different network protocols, the VSG 30 converts to the corresponding network protocol. Data communication between the mutual areas is possible.

  Also, corresponding to the service, the network protocol is converted to enable data communication between the mutual areas.

Functional Configuration Next, the functional configuration of the VSG 30 will be described. An explanatory diagram for explaining this function is shown in FIG. The VSG 30 includes predetermined software 70 and predetermined hardware 80 that executes the software. The hardware 80 includes a processor, storage means, various interface means, and VSG firmware (FirmWare).

  As shown in FIG. 9, the software 70 of the VSG 30 includes a VSG service application 72, a VSG service control 74, and a VSG middleware (Middleware) 76. Here, the application means the application, and is a term obtained by shortening the application.

  The VSG service application 72 includes operations such as VPN group publicity / registration / authentication, management function of subscriber terminals in the cell, setting of subscriber stations, setting and management of Web servers for each VPN, control of base station side radio equipment, etc. Execute the operation. The VSG service control 74 executes operations such as VPN service session protocol processing. Further, the VSG middleware 76 executes the download of the VSG firmware 82 and the inter-board communication control operation.

  As shown in FIG. 9, the hardware 80 of the VSG 30 includes an interface between the VSG firmware 82, the mesh network interface means 84, the PMP network or external network interface means 86, and the intra-cell service server 32. Means 88. Here, the mesh network represents the inter-cell connection service network 12. The PMP network is a network formed by the subscriber stations 36 connected by PMP. The external network represents an existing external network connected by the existing service connection unit 18 in FIG.

Processing functions of VSG hardware Next, an outline of processing functions of the VSG 30 hardware will be described.

  (1) The VSG 30 has three 1 Gbps Ethernet (registered trademark) ports and enables packet switch transmission by a full-wire process. The VSG 30 has a packet classification / VPN tag insertion / deletion function / change and deletion function of a designated field in the header / band shaping function according to the session.

Interface specifications between VSG and PMP radio apparatus Hereinafter, interface specifications between the VSG 30 and the PMP radio apparatus will be described. Here, the wireless device for PMP represents the subscriber station 34, particularly a radio device of the subscriber station 34.

I / F specifications with wireless devices In the prior art, transmission of PMP (Point to MultiPoint) was a fixed transmission band. On the other hand, in the present embodiment (the present invention), the band between the individual subscriber stations 34 can be changed in real time by the VSG 30 dynamically setting.

    -In particular, in the present embodiment, a method is adopted in which the reference value of 1 Link of the access band is determined on the VSG 30 side, and a multiple of the reference value is assigned to the radio apparatus. With this method, according to the present embodiment, the transmission band can be set more easily, and a highly flexible communication system can be realized.

  FIG. 10 shows, as an example, a related diagram representing the contents of setting information representing settings for the subscriber station side radio apparatus # 1. In the present embodiment, the VSG 30 can dynamically change the band allocation by setting the base station side radio apparatus 90 dynamically. According to FIG. 10, in the subscriber station side radio apparatus # 1, settings relating to three types of services of service ID = 0, ID = 1, and ID = 2 are made. Service ID = 0 is fixed for subscriber station PMP wireless device control communication. In this service (ID = 0), a VLAN with VLAN-ID = 1 is set, and “1” is set for both the number of uplink links and the number of downlink links.

  Further, according to FIG. 10, VLANs with VLAN-ID = 2 and 5 are set for service ID = 1. In the VLAN (VLAN-ID = 2), “5” is set as the number of uplink links, and “2” is set as the number of downlink links. On the other hand, in the VLAN (VLAN-ID = 5), “1” is set as the number of uplink links, and “26” is set as the number of downlink links. The number 26 means that, for example, when 1 link unit = 300 kbps, a bandwidth of 7.8 Mbps is guaranteed.

  Furthermore, according to FIG. 10, VLANs with VLAN-ID = 5 and 6 are set for service ID = 2. In the VLAN (VLAN-ID = 5), “3” is set as the number of uplink links, and “20” is set as the number of downlink links. On the other hand, in the VLAN (VLAN-ID = 6), “1” is set as the number of uplink links, and “2” is set as the number of downlink links.

  The outline of the bandwidth setting change procedure is as follows.

  (1) The VSG 30 sends band setting information to the base station-side radio apparatus 90.

  (2) The base station side wireless device 90 transmits band setting information to the subscriber side wireless device 92 of the subscriber station 34 using the control communication channel.

  According to such a procedure, since the VSG 30 assigns a service ID and controls each wireless device, it is possible to completely guarantee the bandwidth for various data traffic transmitted between the subscriber station 34 / VSG 30. Note that the same bandwidth is guaranteed for the internal switch of the VSG 30.

  A specific operation for setting the bandwidth will be described later with reference to FIG.

  FIG. 11 is a conceptual diagram showing a state of communication between the VSG 30 and the subscriber station 34. As shown in this figure, the VSG 30 is provided with a base station side radio apparatus 90, and communication with the subscriber station 34 is performed via the base station side radio apparatus 90. Further, as shown in FIG. 11, a subscriber station side radio device 92 is provided on the subscriber station 34 side. The subscriber station side wireless device 92 is the same device as the base station side wireless device 90, and executes PMP communication. As shown in FIG. 11, a fixed VLAN for communication control and a VLAN path for data communication are extended between the VSG 30 and the subscriber station 34 as described above. A plurality of data communication VLAN paths can be set as described above. Further, the specific assignment is performed by assigning a radio transmission channel using the VLAN-ID as a logical channel as described with reference to FIG. At this time, as described with reference to FIG. 10, it is possible to assign different transmission bands for uplink and downlink.

Band Setting Sequence FIG. 12 is a sequence diagram showing an operation sequence for band setting.

  In the present embodiment, as described above, the band allocation can be changed by the VSG 30 dynamically setting the base station side radio apparatus 90. As described above, the bandwidth setting change procedure includes the following two steps.

  (1) The VSG 30 sends band setting information to the base station-side radio apparatus 90.

  (2) Next, the base station side radio apparatus 90 transmits band setting information to the subscriber station side radio apparatus 92 using the control communication channel.

  In this way, since the VSG 30 assigns service IDs to control the wireless devices 90 and 92, it is possible to completely guarantee the bandwidth for various data traffic transmitted between the subscriber stations 34 / VSG 30. It is possible to effectively use the entire PMP radio band to which the subscriber stations 34 are connected. This bandwidth guarantee is the same for the VSG internal switch.

  In FIG. 12, a base station side PMP millimeter-wave radio device 90 a is shown as the base station side radio device 90, but this is a preferred example of the base station side radio device 90.

  In FIG. 12, the VSG 30 assigns a service flow ID. This service flow ID is a band management ID assigned to Packet Classification in the VSG 30. This ID corresponds to the VPN service group. Further, this band is used when setting up communication between the VSG 30 and the base station PMP millimeter-wave radio apparatus 90a.

  As shown in FIG. 12, the message that the subscriber terminal 36 joins a predetermined VPN group is a message from the subscriber station 34-subscriber station side radio apparatus 92-base station side PMP millimeter wave radio apparatus 90a-VSG30. It is conveyed by route. Then, the VSG 30 sets the service ID / VLAN information / the number of links to the base station side PMP millimeter-wave radio apparatus 90a. Next, the base station side PMP millimeter-wave radio apparatus 90a sets the band of the subscriber station 34 using the control channel. In this way, the bandwidth of each wireless device is sequentially set and a path is formed.

  As described above, according to the present embodiment, it is possible to realize a mechanism that can smoothly provide a service for each cell constituting a system and a service that spans a plurality of cells.

Chapter 4 Global Service FIG. 13 shows a functional overview of the mesh network service. FIG. 13 (1) shows an explanatory diagram in the case of providing a VSG local service as a global service of a mesh network. Similarly, FIG. 13 (2) shows an explanatory diagram in the case where inter-terminal communication is provided as a global service.

  First, in FIG. 13 (1), communication is performed via the broadband wireless access network 112. A broadband wireless access network (Broadband Wireless Access) 112 is a network for accommodating a plurality of cells and mesh-connecting them, and is the same as the inter-cell connection service network 12. (This is hereinafter referred to as a BWA mesh network.) The BWA mesh network 112 is connected to the MSM 16 as already described in FIG. In addition, a plurality of cells are connected to the BWA mesh network 112 as shown in FIG. 13A, and a corresponding VSG 30 is connected to each cell. And about VSG30, the predetermined subscriber terminal 36 is connected in each cell.

  Next, when the VSG 30 provides a local service provided in the cell as a global service of the mesh network, it can be provided via the service providing server 32 as shown in FIG. It is also possible to provide it via the service providing terminal 36.

  First, when a service as a global service is provided by the service providing server 32, the service providing server 32 is connected to the L2 Switch 94 and is provided via a 600 Mbps network. This L2 Switch 94 is connected to the VSG 30. When providing a service via the service providing terminal 36, the service providing terminal 36 is connected to the L2 Switch 94 via a 400 Mbps wireless network.

  In this way, in the present embodiment, the local service in the VSG local area system is provided as a global service of the mesh network via the L2 Switch 94. The VSG 30 and the BWA mesh network 112 are connected by a 1 Gbps network.

  Next, when providing inter-terminal communication as a global service, the service providing terminal 36 is connected to the BWA mesh network 112 via the VSG 30 as shown in FIG. A terminal 36 on the side receiving the global service is also connected to the BWA mesh network 112 via the VSG 30. As described above, the service providing terminal 36 and the service receiving terminal 36 perform transmission / reception via the VSG 30 and the BWA mesh network 112.

In recent years, telephone services using the Firewall function IP (Internet Protocol) based on SIP session flow identification have attracted attention. SIP attracts attention as one of the effective means for realizing an IP phone as shown in FIG. In FIG. 14, an example in which the Firewall function is provided by identifying such a SIP session flow will be described.

  The transmission source terminal 36j transmits a connection request to the destination terminal 36k. This connection request includes information on the source MAC address and the source local VLAN. This request is made via VSG 30p and VSG 30q.

  Next, the destination terminal 36k returns a connection response to the source terminal 36j. The connection response includes a source MAC address and a destination MAC address, and information on the source local VLAN and the destination local VLAN.

  When the destination terminal 36k returns a connection response, the VSG 30q performs a predetermined Flow setting. Similarly, the VSG 30p also sets Flow, and the Flow ID is set for the set Flow as described above.

  Next, when the predetermined communication ends, the transmission source terminal 36j transmits a connection disconnection request to the destination terminal 36k. The VSG 30p transmits the connection request to the VSG 30q and executes an operation for releasing Flow. Similarly, the VSG 30q transmits this disconnection request to the destination terminal 36k, and executes the operation of releasing Flow.

  A time chart for VSG-provided GVPN group registration is shown in FIG. In FIG. 15, a case will be described in which the VSG LVPN service is provided as a GVPN group as a service of the entire mesh network.

  When the VSG management Web client 136 accesses the VSG management Web console, the VSG 30 receives this, and when the authentication is successful, the VSG 30 returns an authentication OK message to the VSG management Web client 136. Receiving the authentication OK message, the VSG management Web client 136 transmits the GVPN registration setting to the VSG 30. This GVPN registration setting includes information on service contents, SIP URL for VSG service, and authentication code for service.

  The VSG 30 that has received the GVPN registration setting transmits a GVPN registration request to the MSM 16. The MSM 16 that has received this GVPN registration request performs authentication. If the authentication is successful, an authentication OK message is returned to the VSG 30. Further, the MSM 16 assigns the GVPN participation terminal address range based on this request, and registers the assigned address range in the internal storage means. Also, a new GVPN is registered in the GVPN list according to the GVPN registration request. This GVPN list is stored in a predetermined storage means. This storage means corresponds to an example of the recording means in the claims. Further, the means for registering the GVPN list in this recording means corresponds to an example of the registration means in the claims. Specifically, it is desirable that the registration means is composed of a predetermined program and a computer that executes the program. This GVPN list is distributed to each VSG 30.

  Also, a GVPN registration response including information related to the GVPN participation terminal address range is returned to the VSG 30. The VSG 30 that has acquired this GVPN address range transmits a GVPN registration response to the VSG management Web client 136. In this way, a new GVPN group is registered.

  A time chart in the case of joining the GVPN group is shown in FIG. In FIG. 16, when a cell service provider that owns the VSG 30 wants to participate in a GVPN group provided by another cell service provider and receive a service, the GVPN group for communication between terminals in the mesh network provided by the MSM 16 The case of participating in will be explained.

  First, when the VSG management Web client 136 accesses the VSG management Web console of the VSG 30, the VSG 30 authenticates this, and when the authentication is successful, returns an authentication OK message to the VSG management Web client 136. The VSG 30 performs this authentication based on the GVPN list. As described above, this GVPN list is distributed from the MSM 16 to each VSG 30 in advance.

  The VSG 30 displays the GVPN list that the VSG 30 has on the client, and the VSG management Web client 136 that has browsed the GVPN list transmits a GVPN group participation request to the VSG 30. The VSG 30 that has received this GVPN group participation request transfers the GVPN group participation request to the MSM 16.

  The MSM 16 that has received the GVPN group join request performs VSG authentication based on this request. When the authentication is successful, the MSM 16 transmits a GVPN group authentication code to the VSG 30. The VSG 30 that has acquired the GVPN group authentication code transmits a GVPN group join response to the VSG management Web client 136. The VSG management Web client 136 receives this, and a service is added to the LVPN (Local VPN) list to determine the local VLAN. In the VSG 30 that has received this, the VPN list is updated and distributed. The VPN list is assigned a GVPN group authentication code. As a result, services provided locally between certain cells can be used in other cells.

  FIG. 17 is a time chart showing an example of an operation when a cell service provider that owns the VSG 30 wants to participate in a GVPN (Global VPN) group provided by another cell service provider and receive a service. ing.

  First, the VSG 30s connected to the subscriber terminal 36 that participates in the service provides the subscriber terminal 36 with the LVPN list that it has, and the subscriber terminal 36 browses this LVPN list. The subscriber terminal 36 displays this list to the user, and the user selects a VPN group to join from this list. The subscriber terminal 36 transmits a VPN group participation request to the VSG 30s based on the user's request. An authentication code is attached to the VPN group participation request. The proxy server 44 inside the VSG 30s receives this VPN group join request. In this VPN group, as described above, global services provided via GVPN are also included.

  Next, the VSG 30s transmits a destination VSG participation request to the MSM 16. The MSM 16 assigns a data path VID to the destination VSG 30t and performs bandwidth calculation. Further, the MSM 16 returns a participation response of the destination VSG 30t to the VSG 30s. When receiving the destination VSG participation response, the proxy server 44 inside the VSG 30s transmits a GVPN group participation request transfer to the VSG 30t on the service providing side. An authentication code is attached to the GVPN group participation request transfer.

  When receiving the GVPN group join request transfer, the VSG 30t on the service providing side performs authentication based on the authentication code included in the join request. After passing the authentication, the VSG 30t on the service providing side returns a GVPN group participation response to the VSG 30s on the service participating side. This GVPN group participation response includes information such as terminal IP address / authentication ticket / service server address. Note that the VSG 30 s on the service participation side instructs to start the terminal application at this time. When receiving the GVPN group participation response, the VSG 30 s transfers the VPN group participation response to the subscriber terminal 36. The VPN data path is determined by the operation as described above. That is, Web server access (service server URI acquisition) for providing a service is realized.

  After the VPN data path is thus determined, the subscriber terminal 36 makes a connection request to the service server (DV camera or the like) 200 based on this path. This connection request is once transmitted to the VSG 30s. When this connection request is received, the proxy server 44 of the VSG 30s transmits a destination VSG connection request to the MSM 16. When the MSM 16 receives the destination VSG connection request, the MSM 16 assigns the data path VID and calculates the bandwidth, and sends back to that effect to the VSG 30s. After the data path VID is assigned, the VSG 30s transfers the connection request to the service providing side VSG 30t to which the service server 200 belongs. When receiving the connection request transfer, the service providing side VSG 30t transfers the connection request to the service server 200. This transfer is executed by the proxy server 44 in the service providing side VSG 30t. In this way, service server access through the VPN path data is realized, and the service server (DV camera or the like) 200 provides a service to the subscriber terminal 36 through the VPN data path.

  When the provision of the service is finished, the subscriber terminal 36 transmits a disconnection request to the VSG 30s. When the proxy server 44 in the VSG 30s receives this disconnection request, it transmits the destination VSG disconnection request to the MSM 16 in the same manner as described above. The MSM 16 performs a predetermined bandwidth calculation based on the destination VSG connection disconnection request and returns the result to the VSG 30s. The Proxy server 44 in the VSG 30s receives the calculation result related to the bandwidth, and then forwards the connection disconnection request to the service server 200 based on the calculation result. The transferred disconnection request is once received by the proxy server 44 in the VSG 30t, and the proxy server 44 transfers the disconnection request to the service server 200. In this way, service provision ends.

  Next, the subscriber terminal 36 transmits a request for leaving the VPN group to the VSG 30s. When the proxy server 44 of the VSG 30 s receives this VPN group leave request, it sends a destination VSG leave request to the MSM 16. The MSM 16 performs a predetermined bandwidth calculation based on this request and returns a destination VSG leave response to the VSG 30s. When the proxy server 44 of the VSG 30s receives this destination VSG leaving response, it transfers the GVPN group leaving request to the VSG 30t on the service providing side. An authentication code is attached to this request. When receiving the GVPN group leaving request, the service providing side VSG 30t performs authentication based on the authentication code attached thereto, and if the authentication is successful, sends a GVPN group leaving response to the service participating side VSG 30s. Send back. When receiving the GVPN group leaving response, the service participating side VSG 30 s transfers the VPN group leaving response to the subscriber terminal 36. The subscriber terminal 36 receives this VPN group leaving response and can know that the leaving from the VPN group has been completed.

  As described above, operations such as participation in the VPN group, provision of service, and withdrawal from the VPN group are performed.

  FIG. 18 shows a time chart regarding the participation of the inter-terminal GVPN group and the call control session.

  First, the VSG 30u to which the subscriber terminal 36x participating in the service is connected provides the subscriber terminal 36x with the LVPN list that the user has, and the subscriber terminal 36x browses this LVPN list. The subscriber terminal 36x displays this list to the user, and the user selects a VPN group to join from this list. The subscriber terminal 36x transmits a VPN group participation request to the VSG 30u on the service participation side based on the user's request. An authentication code is attached to the VPN group participation request. The proxy server 44 in the VSG 30u receives this VPN group join request.

  The VSG 30u transmits a GVPN group join request to the MSM 16. An authentication code is attached to this GVPN group participation request. When receiving the GVPN group participation request, the MSM 16 performs authentication based on the authentication code included in the participation request. Further, the MSM 16 registers the terminal address in the location server. The means for registering the terminal address in this location server corresponds to an example of the registration means in the claims. Thereafter, the MSM 16 transmits a GVPN group join response to the VSG 30u on the service participation side. This GVPN group participation response includes information of terminal IP address / authentication ticket / Web server URI. The VSG 30u that has received the GVPN group participation response transfers the VPN group participation response to the subscriber terminal 36x. This VPN group participation response includes the terminal IP address / authentication ticket / Web server URI / VLAN-ID. By such an operation, the participation of the inter-terminal GVPN group is executed.

  Next, a call control session between terminals will be described. After the inter-terminal GVPN group is joined as described above, the subscriber terminal 36x makes a connection request to the subscriber terminal 36y. This connection request is once transmitted to the VSG 30u. The connection request includes an authentication chit and an instruction of a startup application. When this connection request is received, the proxy server 44 of the VSG 30u transmits the destination VSG connection request to the MSM 16. When the MSM 16 receives the destination VSG connection request, the MSM 16 assigns a data path VID to the destination VSG 30v and performs bandwidth calculation. Further, the MSM 16 returns a connection response of the destination VSG (30v) to the VSG 30u on the service participation side. When receiving the destination VSG connection response, the VSG 30u transfers the connection request transmitted from the subscriber terminal 36x to the VSG 30v on the service providing side. The VSG 30v that has received this connection request transfers the connection request to the subscriber terminal 36y. When the connection response is transmitted from the subscriber terminal 36y that has received the connection request to the VSG 30v on the service providing side, the VSG 30v that has received the connection response transfers the connection response to the VSG 30u on the service participation side. Receiving this connection response, the VSG 30u further transfers the connection response to the subscriber terminal 36x.

  When the provision of the service ends, the subscriber terminal 36x transmits a connection disconnection request to the VSG 30u on the service participation side. When receiving the disconnection request, the VSG 30u transmits the destination VSG disconnection request to the MSM 16 in the same manner as described above. The MSM 16 performs a predetermined bandwidth calculation based on the destination VSG connection disconnection request and returns the result to the VSG 30u. After receiving the calculation result regarding this band, the VSG 30u transfers a connection disconnection request to the VSG 30v on the service providing side based on the calculation result. The VSG 30v that has received the disconnection request transfers this disconnection request to the subscriber terminal 36y. When a connection disconnection response is transmitted from the subscriber terminal 36y that has received the connection disconnection request to the VSG 30v on the service providing side, the VSG 30v that has received the response transfers the connection disconnection response to the VSG 30u on the service participating side. The VSG 30u that has received this disconnection response further transfers the disconnection response to the subscriber terminal 36x.

  By such an operation, the participation of the GVPN group between terminals and the call control session are executed.

Chapter 5 Modifications The mesh network service management server 16 is preferably configured by hardware, but is also preferably configured by causing a computer to execute a predetermined program. In this case, the program is a program that causes a computer to execute each operation described above. In addition, this program is preferably stored in a hard disk or the like for storing various types of information described so far, or another storage medium may be separately prepared.

  Further, although it has been called “hard disk or the like” until now, any means other than the hard disk can be used as long as it can store predetermined information. It may be a semiconductor storage means such as a flash memory, various optical disks such as a DVD-ROM or CD-ROM, or various magnetic disks.

It is explanatory drawing of the mesh network service system of this Embodiment. It is a functional block diagram of VSG. It is a sequence diagram showing operation | movement when the surveillance camera VPN service is provided. It is explanatory drawing which shows a mode that a mesh network network management / operation server performs the setting / maintenance / management on the network between base stations. It is explanatory drawing about operation | movement of MSM when a destination VSG connection and a participation request are issued, and operation | movement accompanying it. It is explanatory drawing which shows the mode of the service layer which a mesh network service management server owns. It is a sequence diagram which shows operation | movement when a mesh network service is actually provided. It is a conceptual diagram which shows the concept of communication access control of VSG. It is a functional block diagram of VSG. It is a related figure showing the content of the setting information showing the setting to subscriber station side radio | wireless apparatus # 1. It is a conceptual diagram which shows the mode of communication between VSG and a subscriber station. It is a sequence diagram showing the operation | movement sequence at the time of a band setting. It is a schematic diagram showing the function of a mesh network service. It is explanatory drawing which shows a mode that a Firewall function is provided by identification of a SIP session flow. It is a sequence diagram which shows the operation | movement at the time of registering in a VSG provision GVPN group. It is a sequence diagram which shows the operation | movement at the time of participating in a GVPN group. It is a sequence diagram which shows the operation | movement at the time of a subscriber terminal participating in the GVPN group which VSG provides. It is a sequence diagram which shows the operation | movement at the time of participating in the GVPN group between terminals, and operation | movement of a call control session.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Mesh network service system 12 Inter-cell connection service network 14 In-cell service network 16 Mesh network service management server 18 Existing service connection part 20a, 20b, 20c Base station 22 Communication network 24 Mesh network management / operation server 30 VPN service gateway (VSG)
32 In-cell service server 34 Subscriber station 36 Subscriber terminal 38 Store 40 VPN-Web server 42 VPN bandwidth resource management server 44 Terminal location information management / authentication server / proxy server for control transfer 46 VPN list distribution server 48 VPN address distribution server 50 packet switch 60 VPN-Web server 62 VPN bandwidth resource management server 64 terminal location information management / authentication server 66 VPN list distribution server 68 VPN address distribution server 70 VSG software 72 VSG service application 74 VSG service control 76 VSG middleware 80 VSG Hardware 82 VSG firmware 84 Interface means with mesh network 86 Interface means with PMP network or external network 88 In-cell service service Bus and the interface means 90 the base station radio unit 90a base station side PMP millimeter-wave wireless device 92 subscriber station radio equipment 94 L2 Switch
112 Broadband Wireless Access Network 136 VSG Management Web Client

Claims (22)

An inter-cell connection service network for communication between cells;
An intra-cell service network for communication within each cell;
In a mesh network service system including
The inter-cell connection service network is
Multiple base stations,
An inter-cell communication network connecting the plurality of base stations;
Including
The intra-cell service network is
A service gateway connected to any of the base stations;
An in-cell service server for providing a predetermined service to a subscriber terminal in the cell, the in-cell service server connected to the service gateway;
A subscriber station that communicates with the subscriber terminal, connected to the in-cell service server; and
Including
The mesh network service system according to claim 1, wherein the base station provides an inter-cell communication service via an intra-cell service server to be connected and using the inter-cell communication network. The mesh network service system according to claim 1,
A mesh network service management server connected to any of the base stations, the mesh network service management server providing a predetermined service to a subscriber terminal located in any cell of the mesh network service system,
A mesh network service system comprising: The mesh network service system according to claim 1,
A network management / operation server connected to any of the base stations, the network management / operation server for managing the inter-cell connection service network;
A mesh network service system comprising: The mesh network service system according to claim 1,
An existing service server connected to an external system and providing an external service provided by the external system to the subscriber terminal, the existing service server being connected to one of the base stations;
A mesh network service system comprising: In the service gateway used in the mesh network service service system according to claim 1,
Recording means for recording information related to the private network provided for each service provided to the subscriber terminal, the recording means for recording data of the subscriber terminal registered in the private network,
When receiving a registration request to the private network from the subscriber terminal, registration means for registering information of the subscriber terminal to the recording means;
A service gateway comprising: In the service gateway used in the mesh network service service system according to claim 1,
Recording means for recording information relating to a private network provided for each service provided to the subscriber terminal, the recording means for recording data of a service provider device registered in the private network;
When receiving a registration request to the private network from the service provider device, a registration unit for registering information of the service provider device in the recording unit;
A service gateway comprising: The service gateway apparatus according to claim 6, wherein
Distribution means for distributing the data of the service provider device in the recording means;
A service gateway comprising: In the mesh network service management server used in the mesh network service system according to claim 2,
Recording means for recording information about a private network provided for each service provided to the subscriber terminal, the recording means for recording data of the service gateway registered in the private network;
When receiving a request to join the private network from the service gateway, registration means for registering information on the service gateway in the recording means;
A mesh network service management server. In the mesh network service management server used in the mesh network service system according to claim 2,
Recording means for recording information relating to a private network provided for each service provided to the subscriber terminal, the recording means for recording data of a service provider device registered in the private network;
When receiving a registration request to the private network from the service provider device, a registration unit for registering information of the service provider device in the recording unit;
A mesh network service management server. In the mesh network service management server according to claim 9,
Distribution means for distributing the data of the service provider device in the recording means;
A mesh network service management server. In the program which makes a computer operate | move as a service gateway of the said Claim 5, in the said computer,
A registration procedure for registering information of the subscriber terminal in the recording means when a registration request to the private network is received from the subscriber terminal;
The recording means is a recording means for recording information relating to a private network provided for each service provided to the subscriber terminal, and stores data of the subscriber terminal registered in the private network. A program characterized by being a recording means for recording. In the program which makes a computer operate | move as a service gateway of the said Claim 6, in the said computer,
A registration procedure for registering information of the service provider device in the recording means when a registration request to the private network is received from the service provider device;
The recording means is a recording means for recording information relating to a private network provided for each service provided to the subscriber terminal, and data of a service provider device registered in the private network. A program characterized by being a recording means for recording. The program according to claim 12, further comprising:
A delivery procedure for delivering data of the service provider device in the recording means to the outside;
A program characterized by having executed. A program for causing a mesh network service management server computer to operate as the mesh network service management server according to claim 8, wherein
A registration procedure for registering information of the service gateway in the recording means when a request to join the private network is received from the service gateway;
The recording means is a recording means for recording information on a private network provided for each service provided to the subscriber terminal, and the data of the service gateway registered in the private network is recorded. A program characterized by being a recording means for recording. A program for operating a computer as the mesh network service management server according to claim 9, wherein the computer
A registration procedure for registering information of the service provider device in the recording means when a registration request to the private network is received from the service provider device;
The recording means is a recording means for recording information relating to a private network provided for each service provided to the subscriber terminal, and data of a service provider device registered in the private network. A program characterized by being a recording means for recording. 16. The program according to claim 15, further comprising:
A delivery procedure for delivering data of the service provider device in the recording means to the outside;
A program characterized by having executed. In the mesh network service management server used in the mesh network service system according to claim 2,
Recording means for recording information on a global private network provided for each service provided to the subscriber terminal, the recording means for recording data of the service gateway registered in the global private network,
Registration means for registering information of the service gateway in the recording means when a request to join the global private network is received from a service gateway that intends to receive a global service provided via the global private network When,
And the global private network is a private network spanning between cells. In the mesh network service management server used in the mesh network service system according to claim 2,
Recording means for recording information on a global private network provided for each service provided to the subscriber terminal, the recording means for recording data of the service gateway registered in the global private network,
A registration unit that registers information of the service provider device in the recording unit when a registration request to the global private network is received from a service gateway that intends to provide the local service as a global service;
The mesh network service management server is characterized in that the global private network is a private network for providing the global service and is a private network across cells. In the mesh network service management server according to claim 18,
Distribution means for distributing data of a service gateway that intends to provide the local service in the recording means as a global service via a broadband wireless access network;
A mesh network service management server. A program for causing a computer to operate as the mesh network service management server according to claim 17,
A registration procedure for registering information of the service gateway in the recording means when a request to join the global private network is received from a service gateway that intends to receive a global service provided via the global private network;
The recording means is a recording means for recording information on a global private network provided for each service provided to the subscriber terminal, and records data of the service gateway to be registered in the global private network. A program characterized by being a recording means for recording. In the program for causing a computer to operate as the mesh network service management server according to claim 18,
A registration procedure for registering information of the service provider device in the recording means when a registration request to the global private network is received from a service gateway to provide a local service as a global service;
The recording means is a recording means for recording information on a global private network provided for each service provided to the subscriber terminal, and records data of the service gateway to be registered in the global private network. A program characterized by being a recording means for recording. In the program for causing a computer to operate as the mesh network service management server according to claim 19,
A program for distributing data of a service gateway that intends to provide the local service in the recording means as a global service via a broadband wireless access network.