JP5758461B2 - Communication method, external information processing apparatus, internal information processing apparatus, and program - Google Patents

Description

  The present invention relates to a communication method, an external information processing apparatus, an internal information processing apparatus, and a program, and in particular, an internal information processing apparatus connected to a local area network and an external information processing apparatus connected to a network different from the local area network. It is related with the communication method etc. which communicate between.

  When a plurality of information processing apparatuses belonging to an internal network communicate with an information processing apparatus existing in an external network, a NAT device converts a source address into an external IP address, thereby reducing the number of external IP addresses with a small number of external IP addresses. The information processing apparatus can communicate with an external network. In the external network, it is not known which information processing apparatus is accessing in the internal network. For this reason, it is difficult to access a specific information processing apparatus from an external network.

  Conventionally, when accessing one of the information processing apparatuses in the internal network from an external network, for example, as described in Patent Document 1, a virtual private network (VPN) is established to perform communication. It has been broken. In VPN, a packet is generally encapsulated by adding a new header (tunneling), and the packet is encrypted and transmitted.

  In addition to VPN, NAT traversal is known as a method for accessing any information processing apparatus on the internal network from the external network. Various methods are known for NAT traversal (see, for example, Non-Patent Document 1).

  It is also known to connect a plurality of networks using UPnP Proxy (see Non-Patent Document 2). By adding UPnP Proxy daemon to each network, you can create a bridge so that hosts on the network can see each other and access each other.

  For example, Patent Document 2 is known as one that uses a proxy in peer-to-peer (P2P) communication. Patent Document 2 describes that a peer-to-peer anonymous proxy is started up and an anonymous communication path is secured with a server.

  Patent Documents 3, 4, and 5 are known as techniques for using a plurality of port numbers between information processing apparatuses. In Patent Document 3, an arbitrary port number is dynamically given to a proxy server to notify a proxy client in the same network, and the proxy client uses the notified port number to send a request of a client application to the proxy server. Sending is described. Patent Document 4 describes that port number information used in connectionless communication is exchanged on the assumption that a plurality of computers can communicate with each other using a connection protocol. Patent Document 5 describes that http communication is performed using a fixed port number, and then communication between a client terminal and a secret server is performed using a dedicated protocol using a different port number.

JP 2012-222678 A JP 2005-236939 A Japanese Patent Laying-Open No. 2005-157639 JP-A-10-303947 JP 11-338798 A

"STUN-Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATs)", [online], March 2003, Internet <URL: http: //tools.ietf.org/html/rfc3489> "UPnP Proxy", [online], Internet <URL: http: //www.nongnu.org/upnpproxy/>

  However, in order to construct a VPN, it is usually necessary to set a router. Therefore, for example, for a user in a home network, the threshold is high. In order to construct a VPN, it is usually possible to make settings only for a privileged user of the system. Therefore, it is necessary to put a mechanism in the system from the beginning. In particular, in a distribution form (download sales etc.) of an application typified by a recent smartphone or the like, a system cannot be put into the system from the beginning, and it is difficult for a general user to set a VPN. Furthermore, if a VPN is set, a plurality of application programs can be used. Therefore, a security problem may occur, and a warning or the like is issued to the user.

  The UPnP Proxy generates a bridge between a plurality of networks. A problem similar to VPN arises in that it can be used by a plurality of application programs.

  On the other hand, in NAT traversal, a communication path can be realized by application software. However, NAT traversal is usually realized by a connectionless protocol such as UDP (ie, a protocol that does not confirm that transmitted data has arrived at the other party). On the other hand, content distribution or the like in P2P communication is realized by a connection type protocol such as TCP (that is, a protocol for confirming that transmitted data has arrived at the other party). If NAT traversal is used, the program becomes complicated and difficult to implement.

  For example, as described in Patent Document 2, it is known to implement P2P communication using a P2P proxy. However, the P2P type proxy described in Patent Document 2 is for ensuring anonymity. The P2P type proxy described in Patent Document 2 simply secures a communication path instead of the computer itself. Therefore, the P2P type proxy described in Patent Document 2 simply assumes a case where a plurality of P2P type proxies are connected in order on the communication path.

  It is known to communicate using a plurality of port numbers. However, Patent Document 3 is for avoiding the inconvenience that the same port cannot be used continuously, and communication between proxies that transmits the port number changed by the proxy server in advance to a proxy client in the network is performed. Assumed. Therefore, the same port number is continuously used for communication between the proxy server and the proxy client. Furthermore, it cannot be applied to communication between information processing apparatuses existing in the internal network and the external network. Patent Documents 4 and 5 are based on the premise that communication such as http or connection type is possible. NAT traversal is realized by a connectionless protocol such as UDP. Therefore, it cannot be simply applied to a connectionless protocol such as NAT traversal.

  Therefore, the present invention easily communicates by constructing a communication path across the NAT between the internal information processing apparatus existing in the local area network and the external information processing apparatus existing outside the local area network. It is an object to propose a communication method or the like that can realize the above.

A first aspect of the present invention is a communication method for performing communication between an internal information processing apparatus connected to a local area network and an external information processing apparatus connected to a network different from the local area network, the internal information processing apparatus and the external information processing apparatus, NAT and NAT Yue example step of constructing a communication path by Yue example, the internal information processing apparatus external communication control provided for the internal communication control means and said external information processing apparatus including the The means includes a lower communication step of performing communication on the communication path using an internal lower proxy existing in the local area network and an external lower proxy existing in a network different from the local area network.

A second aspect of the present invention is a communication method according to the first aspect, wherein in the lower communication step, an internal communication control means provided in the internal information processing apparatus and an external communication control means provided in the external information processing apparatus are provided. , using said internal lower proxy and said external lower proxy, which performs communication according to a protocol used in the NAT Yue example, internal communication control means and the external information processing apparatus provided in the internal information processing apparatus The external communication control means uses an internal upper proxy existing in the local area network and an external upper proxy existing in a network different from the local area network, by a protocol different from the protocol used for the NAT traversal. It includes a host communication step for performing communication on the communication path.

  According to a third aspect of the present invention, there is provided a communication method according to the second aspect, wherein the protocol used in the lower communication step does not confirm that transmitted data has arrived at the other party. The protocol used in the step is to confirm that the transmitted data has arrived at the other party.

  A fourth aspect of the present invention is the communication method according to any one of the first to third aspects, wherein the external proxy management means included in the external information processing apparatus generates the external lower level proxy in the application layer. And executed on the information processing terminal.

A fifth aspect of the present invention, the first and a fourth one aspect of the communication method, the external proxy management means the external information processing apparatus, the communication path is constructed in the NAT Yue example step After that, the external lower level proxy is generated.

  A sixth aspect of the present invention is the communication method according to any one of the first to fifth aspects, wherein the external proxy management means included in the external information processing apparatus newly sets a port number and A notification step of generating a proxy and notifying the set port number to the internal information processing apparatus through the communication path, and an internal communication control means included in the internal information processing apparatus generate a socket, and a newly generated socket And associating with the notified port number of the external lower level proxy.

A seventh aspect of the present invention, external information is connected to a network different from the local area network, performs communication by building a communication path by NAT Yue example between the internal information processing apparatus connected to the local area network External communication control for communicating data on the communication path using the external lower level proxy between the information processing device and an external proxy management unit that generates an external lower level proxy in the application layer Means are provided.

Eighth aspect of the present invention, internal information connected to a local area network, performs communication by building a communication path by NAT Yue example to and from an external information processing apparatus connected to a network different from said local area network An internal communication that is a processing device and communicates data on the communication path between the internal proxy management means for generating an internal lower level proxy in the application layer and the external information processing device using the internal lower level proxy Control means are provided.

Ninth aspect of the present invention, a computer connected to a network different from the local area network, performs communication by building a communication path by NAT Yue example between the internal information processing apparatus connected to the local area network In order to function as an external communication control unit that performs data communication on the communication path between the external proxy management unit that generates an external lower level proxy in the application layer and the information processing apparatus using the external lower level proxy. It is a program.

Aspect of the tenth present invention, a computer connected to a local area network, performs communication by building a communication path by NAT Yue example between the external information processing apparatus connected to a network different from the local area network , An internal proxy management unit that generates an internal lower level proxy in the application layer, and the information processing apparatus, to function as a communication control unit that performs data communication on the communication path using the internal lower level proxy It is a program.

  The present invention is a communication method for performing communication between the first information processing apparatus and the second information processing apparatus, wherein the proxy management means provided in the first information processing apparatus newly sets a port number. A notification step of generating a proxy and notifying the second information processing device of the set port number, and a communication control means provided in the second information processing device generates a socket, and the port number of the newly generated socket May be regarded as a communication method including an associating step of associating with the notified port number of the newly generated proxy.

  Further, the information processing apparatus may generate two proxies, and may be regarded as performing by two different proxies for information transmission and reception. The program can be realized simply. Usually, a fixed port number is used in communication, and a pair of proxies corresponding to the fixed port number is prepared. However, when device information is transmitted / received using UDP or the like after NAT traversal, the program becomes complicated with a pair of proxies. Therefore, in this case, the program can be simplified by providing separate proxies for transmission and reception. In particular, as in the sixth aspect, communication using a plurality of proxies can be easily realized by dynamically setting port numbers and generating two lower proxies.

  Further, the present invention may be regarded as a computer-readable recording medium that regularly records the programs described in the ninth and tenth aspects.

  According to each aspect of the present invention, a communication path is constructed by traversing NAT between an internal information processing device in a local area network and an external information processing device outside the local area network, and the internal information processing device and the external information processing device By implementing the communication between and using the internal lower proxy and the external lower proxy, the program can be simplified and communication can be easily realized.

  Further, as in the second aspect of the present invention, communication that is a premise for advanced services such as content distribution using the internal lower proxy and the external lower proxy (for example, the internal information processing apparatus and the external information processing) And the like, and by realizing communication for advanced services such as content distribution using internal upper proxy and external upper proxy, the program can be simplified, Advanced communication services can be realized easily.

  Further, as in the third aspect of the present invention, communication by an internal lower proxy and an external lower proxy, and communication by an internal upper proxy and an external upper proxy, respectively, are connectionless protocols generally used over NAT. It is possible to simplify the program by using the connection type protocol used for advanced services and the connection type protocol used for advanced services.

  Furthermore, as in the fourth aspect of the present invention, by generating and executing a proxy in the application layer, even current application distribution in a smartphone or the like can be easily realized.

  Furthermore, as in the fifth aspect of the present invention, the proxy management means generates a proxy after the communication path is constructed, thereby making it impossible to communicate in a state where the communication path is not constructed. .

  Furthermore, as in the sixth aspect of the present invention, a proxy is created by dynamically setting a port number in one information processing apparatus, and the port number of this proxy is notified to the other information processing apparatus, By performing communication using a dynamically set port number, the information processing apparatus does not need to previously hold information regarding the port number for communication. In addition, when the port number is set in advance, the number of proxies that can be used is limited, and the port number for communication using UDP or the like should be set dynamically on the assumption that there is a communication path due to NAT traversal. This makes it possible to easily realize communication using a plurality of proxies simultaneously.

It is a block diagram which shows an example of a structure of the content delivery system 1 which concerns on this invention. It is a block diagram which shows an example of a structure of the information processing terminal 5 of FIG. It is a block diagram which shows an example of a structure of the network access server 9 of FIG. It is a flowchart which shows an example of operation | movement of the content delivery system 1 of FIG. It is a 1st sequence diagram which shows a specific example of operation | movement of the content delivery system 1 of FIG. It is a 2nd sequence diagram which shows a specific example of operation | movement of the content delivery system 1 of FIG. It is a flowchart which shows an example of the process which produces | generates a proxy in the content delivery system 1 of FIG.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. The present invention is not limited to this embodiment.

  FIG. 1 is a block diagram showing an example of an outline of a configuration of a content distribution system 1 according to the present invention. The content distribution system 1 includes a local area network (LAN) 3 (an example of “local area network” in the claims of the present application), an information processing terminal 5 (an example of “external information processing apparatus” in the claims of the present application), and a server group 7 is provided.

  The LAN 3 includes a network access server (NAS) 9 (an example of “internal information processing apparatus” in the claims of the present application) and a router 11. In the present embodiment, it is assumed that the router 11 performs address conversion of a device existing in the local area network 3 as a NAT device. Here, when a certain device exists in the LAN 3, it is not necessary to convert the identification information on the network when the device communicates with another device existing in the LAN 3. That is, for example, in the Internet protocol, it means that the NAT device does not need to perform network address translation (NAT) of the IP address), and that a certain device does not exist in the LAN 3 means that the device does not exist in the LAN 3. This means that it is necessary to convert the identification information on the network when communicating with other devices existing in the network. Whether or not a certain device exists in the LAN 3 can be distinguished by whether or not NAT by the router 11 is performed. In the present embodiment, the NAS 9 exists in the LAN 3. The information processing terminal 5 exists outside the LAN 3. When a certain device is connected to the LAN 3, it means that the device exists in the LAN 3, and when a certain device is connected to a network other than the LAN 3, this device does not exist in the LAN 3, and other network such as a global network. It is assumed that this means a state in which devices in the LAN 3 can be accessed.

  The information processing terminal 5 includes a terminal information processing unit 13 and a terminal distribution information storage unit 15. The terminal information processing unit 13 establishes a communication path with the NAS 9 through NAT traversal and receives content distribution from the NAS 9. The terminal distribution information storage unit 15 stores the received content. Note that if the information processing terminal 5 exists in the LAN 3, it is not necessary to traverse the NAT, and it is only necessary to connect to the NAS 9 and receive content distribution. Therefore, in this embodiment, a case where the information processing terminal 5 exists outside the local area network will be described.

  The NAS 9 includes a server information processing unit 17 and a server distribution information storage unit 19. The server information processing unit 17 distributes content to the information processing terminal 5. The server distribution information storage unit 19 stores contents to be distributed. The content to be stored is digital content such as music, still images, and moving images. The server distribution information storage unit 19 may be stored in a plurality of devices in the LAN.

  The server group 7 is a plurality of servers for supporting NAT traversal between the information processing terminal 5 and the NAS 9. The server group 7 includes an authentication server 21 and a NAT traversal support server 23. It should be noted that the server group 7 does not need a plurality of devices physically, but only needs to be realized as a function.

  The authentication server 21 authenticates the information processing terminal 5 and the NAS 9 and ensures the validity of the information processing terminal 5 and the NAS 9 as a premise of NAT traversal. In order to allow access from outside to inside through NAT traversal, it is usually necessary to perform processing such as authentication due to security requirements, but if authentication processing is not required, such an authentication server is provided. There is no need. Further, if validity is ensured by another method, it is not necessary to authenticate by an external server. Further, the authentication server 21 may authenticate only the information processing terminal 5.

  The NAT traversal support server 23 is for assisting the information processing terminal 5 and the NAS 9 to connect by traversing the NAT, if necessary. At present, an external server is generally required for NAT traversal, but such an external server is not necessary when adopting a NAT traversal method that does not require an external server.

FIG. 2 is a block diagram showing an example of an outline of the configuration of the information processing terminal 5 of FIG. The terminal information processing unit 13 includes an external authentication processing unit 31, a DRAG-CP 33, a DMP 35, an external proxy management unit 37 (an example of “external proxy management unit” in the claims of the present application), and an external proxy group 39. The DRAG-CP 33 includes an external communication control unit 41 (an example of “external communication control unit” in the claims of the present application) and an external device information storage unit 43. The DMP 35 includes an external distribution processing unit 45. The external proxy group 39 is an example of the external communication S proxy 47 ₁ , the external communication T proxy 47 ₂ (the external communication S proxy 47 ₁ and the external communication T proxy 47 ₂ are “external lower level proxy” in the claims of the present application. .), it includes an external distribution proxy 47 ₃ (an example of the "external upstream proxy" in the claims), and external digital proxy 47 _4, the external http proxy 47 _5.

FIG. 3 is a block diagram showing an example of an outline of the configuration of the NAS 9 of FIG. The server information processing unit 17 includes an internal authentication processing unit 51, DRAG-D 53, DMS 55, internal proxy management unit 57, and internal proxy group 59. The DRAG-D 53 includes an internal communication control unit 61 (an example of “internal communication control means” in the claims of the present application) and an internal device information storage unit 63. The DMS 55 includes an internal distribution processing unit 65. The internal proxy group 59 is an example of the internal communication S proxy 67 ₁ , the internal communication T proxy 67 _2, and the internal communication S proxy 67 ₁ and the internal communication T proxy 67 ₂ are examples of the “internal lower proxy” in the claims of this application. .), includes an internal distribution proxy ₆₇₃ (an example of the "internal upper proxy" in the claims), and internal digital proxy 67 _4, the internal http proxy 67 _5.

  The external communication control unit 41 and the internal communication control unit 61 are for realizing communication between the information processing terminal 5 and the NAS 9. The information processing terminal 5 exists outside the LAN 3. The information processing terminal 5 establishes a communication path with the NAS 9 using the NAT traversal technique, establishes a connection, and performs communication. Although NAT traversal can be realized by application software, security problems may arise. Therefore, in this embodiment, the authentication server 21 managed separately from the NAS 9 authenticates the information processing terminal 5 and the NAS 9 to avoid a security problem. Further, with this authentication process, the NAS 9 can be recognized as a connection destination from outside the LAN 3. Therefore, when the information processing terminal 5 requests the NAT traversal support server 23 to connect to the NAS 9, the NAT traversal support server 23 makes the NAS 9 a connection destination to the information processing terminal 5. It is possible to give information.

  The external distribution processing unit 45 and the internal distribution processing unit 65 are for realizing processing in which the NAS 9 distributes the content stored in the server distribution information storage unit 19 to the information processing terminal 5.

  The external proxy management unit 37 and the internal proxy management unit 57 generate a plurality of proxies in order to realize communication between the information processing terminal 5 and the NAS 9. The proxy activated by the external proxy management unit 37 and the internal proxy management unit 57 is activated and executed in the application layer. Therefore, even the current application distribution on a smartphone or the like can be easily realized. In this embodiment, a port number is dynamically set for the proxy. An example of the proxy generation process will be specifically described later with reference to FIG.

  Next, an example of the operation of the content distribution system 1 in FIG. 1 will be described with reference to FIGS. 4, 5, and 6. FIG. 4 is a flowchart showing an example of an outline of the operation of the content distribution system 1 of FIG. 5 and 6 are sequence diagrams showing a specific example of the operation of the content distribution system 1 of FIG.

  First, the authentication server 21 performs authentication processing of the information processing terminal 5 and the NAS 9 (step ST1 in FIG. 4). That is, the external authentication processing unit 31 requests an authentication process from an authentication unit (not shown) included in the authentication server 21. The authentication unit authenticates the information processing terminal 5 and issues a device certificate. The external authentication processing unit 31 stores the issued device certificate in the external device information storage unit 43. The internal authentication processing unit 51 requests an authentication process from the authentication unit provided in the authentication server 21. The authentication unit authenticates the NAS 9 and issues a device certificate. The internal authentication processing unit 51 stores the issued device certificate in the internal device information storage unit 63. The device certificate issued to the information processing terminal 5 and the NAS 9 is unique to each device, and device identification information (for example, a serial number) for identifying each information processing is given. The order of authentication may be performed by authenticating the NAS 9 and authenticating the information processing terminal 5 or simultaneously.

  In addition, the external authentication processing unit 31 and the internal authentication processing unit 51 are set to be connectable to each other according to instructions from the users of the information processing terminal 5 and the NAS 9. At this time, the external authentication processing unit 31 obtains device identification information for specifying the NAS 9 from the device certificate issued by the authentication server 21 to the NAS 9. Further, the internal authentication processing unit 51 obtains device identification information for specifying the information processing terminal 5 from the device certificate issued by the authentication server 21 to the information processing terminal 5.

  The external communication control unit 41 of the information processing terminal 5 makes a connection request to a server set as connectable. The internal communication control unit 61 of the NAS 9 establishes a connection with the information processing terminal set as connectable. The external communication control unit 41 and the internal communication control unit 61 do not establish a connection with a device that is not set to be connectable. Thereby, in addition to the objective reliability by the authentication server 21, the reliability by the user of the information processing terminal 5 and the NAS 9 is also taken into consideration, and it becomes possible to secure more reliability.

  Further, the authentication unit obtains NAT traversal support information for accessing the NAS 9 from outside the LAN 3 by traversing the NAT from the internal authentication processing unit 51. This only needs to be performed before the construction of the communication path (step ST2 in FIG. 4 and step STC1 in FIG. 5). Therefore, for example, the NAT traversal support information may be updated by collecting once at the time of authentication and correcting the information when the internal IP address of 9 is changed.

  Subsequently, a communication path is constructed between the information processing terminal 5 and the NAS 9 (step ST2 in FIG. 4 and step STC1 in FIG. 5). That is, the external communication control unit 41 of the information processing terminal 5 cannot detect the address on the LAN 3 of the NAS 9. Therefore, the external communication control unit 41 indicates device identification information for identifying the NAS 9 in the NAS 9 device certificate to the NAT traversal support server 23 and makes a connection request to the NAS 9. A support unit (not shown) included in the NAT traversal support server 23 obtains NAT traversal support information held by the authentication server 21 by using the device identification information for specifying the NAS 9, and sends it to the information processing terminal 5. Thus, sending the NAT traversal support information enables the information processing terminal 5 to be connected to the NAS 9. The information processing terminal 5 establishes a communication path with the NAS 9 using a NAT traversal technique. The support unit of the NAT traversal support server 23 supports NAT traversal between the information processing terminal 5 and the NAS 9, if necessary.

  Subsequently, a connection is established between the information processing terminal 5 and the NAS 9 (step ST3 in FIG. 4 and step STC2 in FIG. 5). That is, the internal communication control unit 61 of the NAS 9 permits establishment of a connection with an information processing terminal that is set to be connectable by the user of the NAS 9. In the present embodiment, the internal communication control unit 61 permits establishment of a connection with the external communication control unit 41. On the other hand, the internal communication control unit 61 refuses establishment of a connection with an information processing terminal that is not set as connectable by the user of the NAS 9.

Subsequently, the external proxy management unit 37 and the internal proxy management unit 57 generate a proxy (step ST4 in FIG. 4). First, the external proxy management unit 37 generates an external communication S proxy 47 ₁ and an external communication T proxy 47 ₂ . Internal proxy management unit 57 generates an internal communication S proxy 67 ₁ and internal communication T proxy 67 _2.

  With reference to FIG. 7, the proxy generation processing by the external proxy management unit 37 and the internal proxy management unit 57 will be described. FIG. 7 is a flowchart showing an example of processing for generating a proxy in the content distribution system 1 of FIG. Although the case where the external proxy management unit 37 generates a proxy will be described, the same applies to the case where the internal proxy management unit 57 generates a proxy.

  The external proxy management unit 37 dynamically sets the port number (step STP1) and generates a new proxy (step STP2). The external proxy management unit 37 notifies the internal communication control unit 61 of the newly set port number (step STP3). The internal communication control unit 61 newly creates a socket (step STP4), and links (associates) the port number of the socket (step STP5). Thereby, the external communication control unit 41 and the internal communication control unit 61 can perform communication using the proxy newly generated by the external proxy management unit 37.

Subsequently, device information is exchanged between the information processing terminal 5 and the NAS 9 (step ST5 in FIG. 4 and steps STC3, 4, 5 and 6 in FIG. 5). This is performed by a protocol for realizing NAT traversal such as UDP. That is, the internal communication control unit 61 requests the external communication control unit 41 to transmit the device information of the information processing terminal 5 using the external communication S proxy 47 ₁ and the internal communication S proxy 67 _1. (Step STC3). The external communication control unit 41 transmits the device information of the information processing terminal 5 to the internal communication control unit 61 using the external communication S proxy 41 ₁ and the internal communication S proxy 67 ₁ (step STC4). The external communication control unit 41 requests the internal communication control unit 61 to transmit the device information of the NAS 9 by using the external communication T proxy 47 ₂ and the internal communication T proxy 67 ₂ (step STC5). The internal communication control unit 61 transmits device information of the NAS 9 to the external communication control unit 41 using the external communication T proxy 47 ₂ and the internal communication T proxy 67 ₂ (step STC6). In this way, in the connectionless protocol, unlike the connection protocol described later, a proxy for transmitting device information of the information processing terminal 5 and a proxy for transmitting device information of the NAS 9 are separated. This makes it possible to simplify the program.

Subsequently, the DMS 55 notifies alive information to the DRAG-CP 33 (steps STC7 and 8 in FIG. 6). First, the internal distribution processing unit 65 of the DMS 55 transmits alive information to the internal communication control unit 61 of the DRAG-D 53 (step STC7 in FIG. 6). The internal communication control unit 61 notifies the alive information to the external communication control unit 41 using the external communication S proxy 47 ₁ and the internal communication S proxy 67 ₁ (step STC8 in FIG. 6).

Subsequently, the external proxy management unit 37 and the internal proxy management unit 57, respectively, to create the external distribution proxy 47 ₃ and the internal distribution proxy ₆₇₃ (step ST6 in FIG. 4).

The DRAG-CP 33 requests the DMS 55 to notify the DMS 55 of DDD (Device Description Document, indicating the device function, status, etc.) using http (step STC9 in FIG. 6). The DMS 55 notifies the DAG to the DRAG-CP 33 (step STC10 in FIG. 6). Communication between DRAG-CP33 and DMS55 is performed via DRAG-D53. Communication between the DRAG-CP33 and DRAG-D53, using the internal distribution proxy 47 ₃ and the external distribution proxy ₆₇₃ is performed.

The DMP 35 requests the DMS 55 to transmit a content list (step STC13 in FIG. 6). The DMS 55 transmits a content list to the DMP 35 (step STC14 in FIG. 6). Communication between DMP 35 and DMS 55 is performed via DRAG-CP33 and DRAG-D53, but communication between DRAG-CP33 and DRAG-D53 is performed using external distribution proxy 47 ₃ and internal distribution proxy 67 _3. It is done using.

Subsequently, the external proxy management unit 37 and the internal proxy management unit 57, respectively, the step ST8 of external digital proxy 47 ₄ and the external http proxy 47 ₅ and create an internal digital proxy 67 ₄ and the internal http proxy 67 ₅ (FIG. 4 ).

Subsequently, the DMP 35 and the DMS 55 prepare for distribution of digital content (step ST9 in FIG. 4). The DMP 35 requests the DMS 55 to prepare for digital content distribution (step STC15 in FIG. 6). The DMS 55 notifies the DMP 35 that the digital content is ready for distribution (step STC16 in FIG. 6). The communication between the DMP 35 and the DMS 55 is performed via the DRAG-CP33 and the DRAG-D53, but the communication between the DRAG-CP33 and the DRAG-D53 is performed using the external digital proxy 47 ₄ and the internal digital proxy 67 _4. It is done using.

Subsequently, the DMS 55 distributes the content to the DMP 35 (step ST10 in FIG. 4). The DMP 35 requests the DMS 55 to distribute the content using http (step STC17 in FIG. 6). The DMS 55 delivers content to the DMP 35 using http (step STC18 in FIG. 6). DMP35 and communication between the DMS55 is carried out via the DRAG-CP33 and DRAG-D53, communication between the DRAG-CP33 and DRAG-D53 is, external digital http proxy 47 ₅ and an internal http proxy 67 _Done with ₅ .

  Note that a part or all of the server information processing unit 17 may be activated on the router 11, for example. The internal proxy group 59 only needs to exist in the LAN 3 and does not have to be activated by the same device as the server distribution information storage unit 19. Similarly, when the information processing terminal 5 exists in a LAN different from the LAN 3, for example, a part or all of the terminal information processing unit 13 only needs to exist in a LAN different from the LAN 3.

1 content distribution system, 3 local area network, 5 information processing terminal, 7 server group, 9 network access server, 11 router, 13 terminal information processing unit, 15 terminal distribution information storage unit, 17 server information processing unit, 19 server distribution information Storage unit, 21 authentication server, 23 NAT traversal support server, 31 external authentication processing unit, 33 DRAG-CP, 35 DMP, 37 external proxy management unit, 39 external proxy group, 41 external communication control unit, 43 external device information storage unit , 45 external distribution processing unit, 47 _first external communications S proxy, 47 ₂ external communication T proxy, 47 ₃ external distribution proxy, 47 ₄ external digital proxy, 47 ₅ external http proxy, 51 internal authentication processing unit, 53 DRAG-D, 55 DMS, 57 internal proxy manager, 59 internal proxy group, 61 internal Communication control unit, 63 an internal device information storage section, 65 internal distribution processing unit 67 ₁ internal communication S proxy, 67 ₂ internal communication T proxy, 67 ₃ internal distribution proxy, 67 ₄ internal digital proxy, 67 ₅ internal http proxy

Claims (9)

A communication method for performing communication between an internal information processing apparatus connected to a local area network and an external information processing apparatus connected to a network different from the local area network,
A NAT traversing step in which the internal information processing apparatus and the external information processing apparatus construct a communication path by traversing NAT;
The internal communication control means provided in the internal information processing apparatus and the external communication control means provided in the external information processing apparatus are an internal lower proxy existing in the local area network and an external lower proxy existing in a network different from the local area network. And a lower communication step for performing communication on the communication path according to the protocol used for the NAT traversal ,
The internal communication control means and the external communication control means are protocols used for crossing the NAT using an internal upper proxy existing in the local area network and an external upper proxy existing in a network different from the local area network. A communication method including a higher-level communication step of performing communication on the communication path using a protocol different from the above . The protocol used in the lower communication step is to confirm that the transmitted data has arrived at the other party,
The protocol used in the upper communication step, the transmitted data is to verify that arrives to the other method of communication according to claim 1, wherein. The communication method according to claim 1 or 2 , wherein an external proxy management unit included in the external information processing apparatus generates the external lower level proxy in an application layer and executes the external lower level proxy on the external information processing apparatus. The external proxy management means external information processing apparatus, the communication path in the NAT Yue example steps to generate the external lower proxy after being constructed, the method of communication according to any one of claims 1 to 3. A communication method for performing communication between an internal information processing apparatus connected to a local area network and an external information processing apparatus connected to a network different from the local area network,
A NAT traversing step in which the internal information processing apparatus and the external information processing apparatus construct a communication path by traversing NAT;
The external proxy management means provided in the external information processing apparatus generates a new external lower proxy existing in a network different from the local area network by newly setting a port number, and sets the set port number in the communication path. A notification step for notifying the internal information processing device;
An internal communication control means included in the internal information processing apparatus generates a socket and associates the newly generated socket port number with the notified port number of the external lower-level proxy ; and
The internal communication control means and the external communication control means provided in the external information processing apparatus include a low-level communication step of performing communication on the communication path using the internal low-level proxy and the external low-level proxy existing in the local area network. No communication method. An external information processing apparatus that connects to a network different from the local area network and establishes a communication path by crossing the NAT with the internal information processing apparatus connected to the local area network, and performs communication.
An external proxy management means for generating an external lower proxy and an external upper proxy in the application layer;
External communication control means for communicating data on the communication path using the external lower proxy and the external upper proxy with the internal information processing apparatus ,
The external communication control means is
Using the internal lower level proxy and the external lower level proxy existing in the local area network, communication is performed according to the protocol used for traversing the NAT,
An external information processing apparatus that performs communication using a protocol different from the protocol used for the NAT traversal using an internal upper proxy and the external upper proxy existing in the local area network . An internal information processing apparatus that connects to a local area network and communicates with an external information processing apparatus that is connected to a network different from the local area network by constructing a communication path over NAT.
Internal proxy management means for generating an internal lower proxy and an internal upper proxy in the application layer;
Internal communication control means for communicating data with the external information processing apparatus using the internal lower proxy and the internal upper proxy on the communication path ,
The internal communication control means includes
Using an external lower level proxy existing in a network different from the internal lower level proxy and the local area network, communication is performed according to a protocol used for traversing the NAT,
An internal information processing apparatus for performing communication on the communication path using a protocol different from a protocol used for crossing the NAT, using an external upper proxy existing in a network different from the internal upper proxy and the local area network . A computer that connects to a network different from the local area network and establishes a communication path by crossing the NAT with the internal information processing apparatus connected to the local area network, and performs communication.
An external proxy management means for generating an external lower proxy and an external upper proxy in the application layer;
A program for causing the internal information processing apparatus to function as an external communication control unit that performs data communication on the communication path using the external lower proxy and the external upper proxy ,
The external communication control means is
Using the internal lower level proxy and the external lower level proxy existing in the local area network, communication is performed according to the protocol used for traversing the NAT,
A program for performing communication using a protocol different from the protocol used for traversing the NAT by using an internal upper proxy and the external upper proxy existing in the local area network . A computer connected to a local area network and configured to communicate with an external information processing apparatus connected to a network different from the local area network by establishing a communication path over NAT;
Internal proxy management means for generating an internal lower proxy and an internal upper proxy in the application layer;
A program for causing the external information processing apparatus to function as internal communication control means for communicating data on the communication path using the internal lower proxy and the internal upper proxy ,
The internal communication control means includes
Using an external lower level proxy existing in a network different from the internal lower level proxy and the local area network, communication is performed according to a protocol used for traversing the NAT,
A program for performing communication on the communication path by using a protocol different from a protocol used for crossing the NAT using an external upper proxy existing in a network different from the internal upper proxy and the local area network .

Images