JPH1188438A - Integrated information communication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To secure the security and reliability of communication by providing an access controller and a relay device, transferring information in a one- dimensional address system and executing routing. SOLUTION: An address obeying an address system ADX is given to computer communication data (ICS frame) 80 emitted from LAN-X1 of a company X. Then, it is converted into an address following an address system ADS based on the management of the conversion table of the access controller 2 in ICS1 and it becomes an ICS frame 81. When it is transmitted in ICS1 in accordance with the rule of the address system ADS and it reaches a target access controller 4, it is restored into computer communication data 80 of the address system ADX leased on the conversion table. Then, it is transmitted to LAN-X 3 of the same company X. Thus, computer communication in the company and between the companies is realized by the one-dimensional address management of ICS1.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to a personal computer, a LAN, and the like.
(Local Area Network), Telephone (including mobile phone), FA
X (Facsimile), CATV (Cable Television), the Internet and other information communication equipment or information communication systems, as well as dedicated lines, ISDN (Integrated Services)
Digital Network), FR (Frame Relay), ATM (Asy
nchronous Transfer Mode), IPX (Integrated Packet
Exchange), an integrated information communication system integratedly connected via satellite, wireless, and public lines. Here, the information communication device communicates with an address (for information communication) for identifying it from the others. The present invention is particularly applicable to connectionless networks (for example, RFC791, RFC1883 IP
(Internet Protocol) technology to integrate the data transfer service, to improve the economics of the entire information communication by adopting a unified address system, to ensure security and to enable mutual communication between connected terminals or systems. And an integrated information communication system.

[0002]

2. Description of the Related Art With the development of computers and information communication technology, computer communication networks have recently become widespread within universities, research institutes, government agencies, or within or between companies. The LAN is used as a computer communication network in a company, and has a form as shown in FIG. 165 when the area is spread nationwide. FIG.
In the example of 65, LANs in each region use a common protocol and are connected by dedicated lines. Here, for example, company X has LAN-X1, LAN-X2, L
Company AN uses LAN-Y3 as LAN.
1. Using the LAN-Y2 and LAN-Y3, the companies X and Y perform computer communication using the communication address systems ADX and ADY, respectively. In such a LAN network, it is necessary to lay an individual dedicated line for each company, so that the system construction is expensive and the LAN of another company is also required.
When connecting to a network, it is necessary to match interfaces such as a communication address system, and there is a problem that interconnection is extremely difficult and a large cost is required.

On the other hand, in recent years, the Internet has become widespread as a computer communication network on a worldwide scale. In the Internet, the networks are connected using a router of a provider, and TCP / IP (Transmission Co., Ltd.) is used.
The communication protocol called Internet Protocol (Internet Protocol) is used. A dedicated line or an FR network is used to connect a remote location. (F
iber Distributed Date Interface) is used as a communication path. FIG. 166 shows an example of a connection form of the Internet. In the Internet, routers in a provider maintain a connection between them while exchanging routing table connection information. Each router is connected to a plurality of networks, and next determines which router connected to which provider's network sends the received data based on the routing table. Thus, in the Internet, each IP
Destination IP attached to frame (IP datagram)
Looking at the address, determine the next router to send to and send it to that router. This operation is performed by all routers, so that IP frames are successively delivered and delivered to a target computer.

[0004] FIG. 167 shows the I used for the Internet.
The information content of RFC791 of the P frame is shown, and is divided into a control unit and a data unit. FIG. 168 shows a similar R
It shows the information content of FC1883, which is divided into a control section and a data section, and in each case () shows the number of bits.

[0005]

However, since the Internet does not have a system for comprehensively managing communication paths, it is not possible to confirm whether or not a communication partner is an intended legitimate person. There is a problem in terms of security such as a high risk of wiretapping, and the IP address inside a large number of LANs is actually determined by the LAN user independently. In addition, it is necessary to replace the IP address of the LAN user with an IP address for the Internet.
The communication quality such as the communication speed and the communication error rate varies among the trunk lines constituting the Internet communication line for each LAN line, and is hardly unified. For example, a 10 Mbps TV signal is used for the communication of the TV conference. However, there is a problem that the communication speed is not achieved even if the user tries to send the message. Furthermore, there is no manager in charge of maintenance and management such as network failure countermeasures, and the entire network such as network future planning, and it is used for communications of companies and businesses of countries and research institutions where reliability is particularly important. However, there is a problem that the Internet cannot be used with security. In a LAN network or the Internet, the terminal is a personal computer (computer), and it has been difficult to integrate and use a telephone, a facsimile, a CATV, and the like.

SUMMARY OF THE INVENTION The present invention has been made in view of the above circumstances, and an object of the present invention is to improve the economics of building an information communication system without using a dedicated line or the Internet, and to improve the communication speed and communication quality. An integrated information communication system capable of accommodating a plurality of VANs for performing data / information transfer using IP frames that secures security and reliability in communication by integrally assuring communication failure countermeasures and the like. To provide. In addition, a single information transfer independent of the type of service such as voice, image (moving image, still image), text, etc., enables comprehensive communication services, analog and digital telephone line services, Internet provider services, fax services, and computer data exchange. An object of the present invention is to provide an integrated information communication system in which services that have been individually serviced, such as services and CATV services, are interconnected. In addition, an integrated system capable of performing inter-company communication without changing the address system for computer communication, which is conventionally used by individual companies (including universities, research institutes, government agencies, and the like) in each company separately. It is also an object to provide an information communication system. The IP terminal refers to a terminal or a computer having a function of transmitting and receiving an IP frame.

[0007]

SUMMARY OF THE INVENTION The present invention relates to an integrated information communication system, and an object of the present invention is to provide an access control device for individually connecting a plurality of external computer communication networks or information communication devices, and the access control device. This is achieved by providing a relay device for networking, having a function of transferring and routing information in a unified address system, and enabling mutual communication between the plurality of computer communication networks or information communication devices. Is done. The present invention is equivalent to a computer communication network based on IP technology in which the range of a dedicated line used for communication inside and between companies shown in FIG. 165 shown as a conventional example is replaced by a common communication network shown by a broken line. I do.

An object of the present invention is to provide an ICS user frame having a unique ICS user address system ADX by using an address system A based on management of a conversion table in an access control device.
DS is converted to an ICS network frame having DS, and at least one or more built-in VANs are transmitted in accordance with the rules of the address system ADS. This is achieved by converting the data into the ICS user address system ADX so as to reach another external information communication device. In addition, an ICS user frame having a unique ICS user address system ADX can be used for a user logical communication line without using an ICS user address in the ICS user frame based on management of a conversion table of an access control device. Incoming ICS registered in conversion table
The ICS network frame is converted to an ICS network frame corresponding to the network address, and the transfer destination of the ICS network frame is 1 or N, and the ICS network frame is accessed by another access via at least one VAN according to the rules of the ICS address system ADS. This is achieved by returning to the ICS user frame based on the management of the conversion table of the access control device when transferred to the control device, and reaching another external information communication device.

[0009]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS FIG. 1 schematically shows the basic principle of the present invention.
The ted Information / Communication System (hereinafter abbreviated as “ICS”) 1 has an address assignment rule uniquely defined as a computer information / communication address. That is, it has a unique address system ADS, and has a plurality of external computer communication networks and information communication devices such as a large number of LANs (in this example, LAN-X1 and LAN-X of company X in this example).
2, LAN-X3 and company Y's LAN-Y1, LAN-
Y2, LAN-Y3) as access points for connection (in this example, 2 to 7). The LAN-X1, LAN-X2, and LAN-X3 of the company X have the same address system ADX, and the LAN-Y1, LAN-Y2, and LAN-Y3 of the company Y have the same address system ADY. The access control devices 2, 3, and 4 have a conversion table for managing the mutual conversion between the address system ADS and the address system ADX, and the access control devices 5, 6, and 7 perform the conversion between the address system ADS and the address system ADY. It has a conversion table for managing mutual conversion. The computer communication data (ICS frame) in ICS1 is the address system ADS of ICS1.
Communication using an IP frame used in the Internet or the like is performed using an address in accordance with the above.

Here, a communication operation in the case of the same company will be described. The computer communication data (ICS frame) 80 transmitted from the LAN-X1 of the company X is given an address according to the address system ADX.
Under the management of the conversion table of the access control device 2 in the above, the address is converted into an address in accordance with the address system ADS to become the ICS frame 81. Then, the data is transmitted within the ICS 1 according to the rules of the address system ADS, and when it reaches the target access control device 4, it is restored to the computer communication data 80 of the address system ADX under the management of the conversion table. Sent to LAN-X3. Here, the ICS frame transmitted and received inside the ICS1 is referred to as “I
An ICS frame transmitted and received outside the ICS1 is called an “ICS user frame”.
That. The format of the ICS user frame is, in principle, the format specified in RFC791 or RFC1883 used in the Internet or the like, but the handling of the ICS frame out of the principle will be described in an embodiment described later.

The ICS network frame 81 includes a network control unit 81-1 and a network data unit 81.
The address (address system ADS) of each ICS logic terminal inside the access control devices 2 and 4 is stored in the network control unit 81-1.
The ICS user frame 80 is used as the network data section 81-2 as it is, or is converted into a network data section 81-2 by converting the data format according to a rule defined inside the ICS1. The conversion rules of the data format include, for example, conversion into cipher text and data compression. The access control device 2 uses the encryption means and the cipher text as the original plain text (I
(CS user frame) and a compressed data restoring means for restoring the compressed data. In the access control device 2,
The ICS user frame 80 is an ICS network frame 81-2, and the network control unit 81-1 is an ICS network frame 81-2.
The operation added to the network frame 81-2 is referred to as "IC
In the access control device 4, the operation of removing the network control unit 81-1 from the ICS network frame 81 is referred to as "ICS decapsulation".
Call.

[0012] Similarly, the case of inter-company communication will be described.
The computer communication data (ICS user frame) 82 transmitted from the LAN-Y2 of the company Y has an address system A
Although an address according to DY is given, the address is converted into an address according to the address system ADS under the management of the conversion table of the access control device 6 in the ICS 1 to form an ICS frame 83. Then, the data is transmitted in the ICS 1 according to the rules of the address system ADS, and when it reaches the target access control device 3, it is converted into the computer communication data 82 of the address system ADX under the management of the conversion table.
It is transmitted to LAN-X2 of company X. In the present invention, 32 bits and 128 bits are used as the address length, but the address is not limited to these lengths. Even if the address length is changed to other than 32 bits or 128 bits, the essence of the address conversion, which is the basic concept of the present invention, does not change.

As described above, according to the present invention, intra-company and inter-company computer communication is enabled by the centralized address management of the ICS 1. A user terminal for computer communication, which is generally used, is accommodated in a LAN of a user's premises and is connected to a VAN (Value Added Network) via an access line.
k), and a user frame having a different data format and address system for each service type is transferred. For example, Internet services use IP addresses, telephone services use telephone numbers / ISDN numbers (E.164 addresses), X.25 packet service X.25 121 addresses are used. On the other hand, in the ICS 1 of the present invention, address conversion (referred to as ICS address conversion) is performed on the conversion table of the access control device based on the input ICS user frame, and data of various structures is unified into a single unified data. The transfer of information is realized by converting the data into a frame of a data format and an address system, that is, an ICS frame.

FIG. 2 shows that the ICS 1 of the present invention is connected to a plurality of
(VAN-1, VAN-2, VAN-3) is schematically shown, each VAN is managed by a VAN operator, and a user of ICS1 applies for a user communication line to the VAN operator. And the VAN operator performs the user's IC
An S user address, an ICS network address, and the like are determined, and such information is registered in a conversion table 12 in the access control device 10 as shown in FIG. I
CS1 has access control devices 10-1, 10-2, 10-3, 10-4, and 10-5 as access points of external connection elements with LANs (or terminals thereof) of companies X and Y, Further, the relay devices 20-1, 20-2, 20-3, 20-4 and the ICS network servers 40-1, 40-2,
40-3, 40-4, and 40-5, and ICS address management servers 50-1 and 50-2. Each VAN
A relay device 20 as shown in FIG. 4 is provided in the internal communication path, and an inter-VAN gateway 30 as shown in FIG. 5 is provided as a connection element of VAN-2 and VAN-3. The LAN 1-1, 1-2, 1-3, 1-4 shown in FIG. 2 are access control devices 10-1, 10-5, respectively.
10-4, 10-2 are connected via user communication lines 36-1, 36-2, 36-3, 36-4.

The access control device 10 (10-1, 10-
2, 10-3, 10-4, and 10-5) are devices for accommodating a user communication line from a user (company X, Y) to the ICS 1, and a processing device including a CPU and the like as shown in FIG. 11, a conversion table 12 as a database for performing address conversion and the like, a line unit 13 of the input / output interface,
And a temporary conversion table 14. Also, the relay device 20
Has a function of transferring an ICS network frame and a routing function of specifying a route, has a processing unit 21 including a CPU and a relay table 22 as shown in FIG.
2 is used to determine a communication destination when an ICS network frame is transferred inside ICS1. VA
As shown in FIG. 5, the N-to-N gateway 30 has a processing device 31 such as a CPU and a relay table 32 for determining the destination of an ICS network frame between VANs.

The ICS network server 40 comprises a processing device 41 and an ICS network database 42 as shown in FIG. 6, and the ICS network database 42 has various uses. For example, user-specific data (user name and address, etc.) corresponding to the ICS user address, data not corresponding to the ICS user address, for example, data representing a communication failure situation inside the VAN, or data not directly related to the VAN, for example, Digital library that holds and publishes digital documents, data retention such as public key of public encryption method using encryption technology used to authenticate the validity of sender and receiver, public key certification data or secret key of secret key method Used for The processing device 41 refers to the ICS network database 42, acquires corresponding data, and transmits the data to the access control device 10. ICS network database 4
2 operates independently and communicates with other ICS network servers by transmitting and receiving ICS network frames based on IP communication technology, and can acquire data from other ICS network servers. The ICS network server is provided with a unique ICS network address within the ICS.

In the present invention, an address for identifying a computer or terminal used in an ICS network frame is called an “ICS network address”, and an address for identifying a computer or terminal used in an ICS user frame is referred to as an “ICS user”. Address. " ICS
The network address is used only inside the ICS and 3
One or both of a 2-bit length and a 128-bit length are used. Similarly, the ICS user address uses one or both of the 32-bit length and the 128-bit length. An ICS network address is assigned to each of the ICS logical terminal, the relay device 20, the inter-VAN gateway 30, and the ICS network server inside the access control device 10 so as to be uniquely identified from the others. Also, IC
The S user address is composed of a VAN upper code and a VAN internal code. When the length of the VAN upper code is represented by C1 bits and the length of the VAN internal code is represented by C2 bits, C1 + C2 represents either 32 bits or 128 bits. Used.

In the present invention, the specific method of determining the VAN upper-level code and the VAN internal code is not specified.
In the case of 1 + C2 = 32 bits, for example, VAN upper code = area management code (4 bits) ‖country code (4 bits) ‖VAN code (8 bits) VAN internal code = VAN area code (4 bits) ‖V
AN access point code (8 bits) ‖user logical code (4 bits) may be determined. FIG. 7 illustrates an example of the ICS user address. Here, the symbol "a @ b" represents the concatenation of data a and b, that is, data obtained by arranging data a and b in this order. ICS network address
As in the case of the user network address, it can be given including the regionality. For example, ICS network address = region management code / country code / VAN code / VAN region code / user logical communication line code. By doing so, the transmission destination is determined in consideration of the area, so that the relay device can efficiently find the transmission destination. The same applies to the case of C1 + C2 = 128 bits.

In the present invention, C1 + C2 = 32 bits or C1 + C2 = 1 regardless of the method of partitioning the internal fields of the VAN upper code and the VAN internal code and the length of each partition field.
As long as 28 bits are protected, ICS
A frame can be configured. Further, when determining the VAN upper-level code and the VAN internal code, some of these codes may be determined uniquely for the user. That is, the user can have a user-specific addressing scheme. 32 While the address values of the bit representation is from address 0 to ^{(2 32} -1) address, in this address, for example, from 10 × ^{2 24} address ^{(10 × 2 24 +2 24 -1} ) address, or (17
2 × 2 ²⁴ + 16 × 2 ¹⁶ ) to (172 × 2 ²⁴⁾
+ 32 × 2 ¹⁶ -1) or (192 × 2
²⁴ + 168 × 2 ¹⁶ ) to (192 × 2 ²⁴ +1)
In the section up to the address of 69 × 2 ¹⁶ -1), the present invention is implemented by assigning an address determined uniquely to the user.

A physical communication line can be logically divided into a plurality of communication lines for use.
For example, it is realized by a multiplex communication system of a frame relay (FR). In the present invention, a user's communication line is divided into a user physical communication line and one or more user logical communication lines. FIG. 8 shows this state, and is 100 Mbps.
An example is shown in which a user physical communication line 60 having a communication speed of s is divided into two user logical communication lines 61-1 and 61-2 having a communication speed of 50 Mbps. Also, separate computer communication devices 62-1, 62-2, 62-3, 62
-4 is connected to each user logical communication line, and IC
S user address “4123, 0025, 0026, 4
Reference numeral 124 "denotes each of the computer communication devices 62-1 to 62-4.
The example given to is shown. The user physical communication line 60 is connected to the access control device 63, and the connection point between them is "I
CS logic terminal ”. The ICS logic terminal includes IC
A unique ICS network address is assigned inside S. In the example of FIG. 8, the user logical communication lines 61-1 and 61-2 are connected to the access control device 63, and the connection point I
ICS is applied to each of CS logic terminals 64-1 and 64-2.
Network addresses “8710” and “8711” are assigned.

As described above, since the ICS network server 40 is also given a unique ICS network address,
The ICS network address is the ICS logic terminal or I
The CS network server can be specified as the only one in the ICS. The ICS network server can exchange information with another ICS network server by transmitting and receiving, using the IP communication technology, an ICS network frame to which each ICS network address is assigned. This communication function is called “ICS network server communication function”. The access control device also has a unique ICS network address inside the ICS, and can exchange information with the ICS network server using another ICS network server communication function as the access control device server. The ICS network server communication function is realized by using, for example, conventional TCP and UDP (User Datagram Protocol).

As described above, the ICS frame of the present invention includes an ICS network frame transmitted and received inside the ICS and an ICS user frame transmitted and received outside the ICS. As shown in FIG. 9, the network control unit, the network data unit, the user control unit, and the user data unit are used in ICS encapsulation or ICS decapsulation. That is, when the ICS user frame enters the ICS from the access control device, the ICS user frame becomes a data part of the ICS network frame, and a control unit (network control unit) of the ICS network frame is added (ICS encapsulation).
The inside of the network control unit is divided into a basic unit and an extension unit. The basic part is, for example, RFC791 or RFC183
3 is used for the specified header, and the extension part is used for encryption and the like. If encryption or the like is not required at all, the extension unit is not used and need not be present.

An area for storing a source address and a destination address is provided in the network control unit of the ICS frame. The format of the ICS frame has an address length of 32.
When the address length is 32 bits, for example, the RFC shown in FIG.
The frame format according to the standard of No. 791 is adopted. If the ICS network address is insufficient with 32 bits, for example, if 64 bits are used, the insufficient 32 bits (64 bits-32 bits) are written in the option part of the ICS network frame control unit in accordance with the rules of RFC791, and the Use with a length of 64 bits. Here, the above-mentioned address specific to the user is supplemented. Many users, for example, (10 ×
Considering the case where a private address (one of ICS user addresses) is provided in a section from address 2 ²⁴ ) to address (10 × 2 ²⁴ +2 ²⁴ −1), the ICS network address corresponds to the ICS user address. Since the length of the ICS user address is 32 bits, the length of the ICS network address is not enough at 32 bits, for example, 64 bits are required. In this case, as described above, the insufficient 32 bits are written in the option section of the ICS network frame control section, and the network address is used with the length of 64 bits.

The fact that communication between the same users (called intra-company communication) is possible using the private address will be described in the first embodiment. If the address length is 12
In the case of 8 bits, for example, RFC188 shown in FIG.
The present invention is carried out by adopting the frame format defined by the above-mentioned rule. The addresses stored in the source address area and the destination address area in the network control unit are ICS network addresses, which are the originating ICS network address and the destination ICS network address, respectively. Further, the source address area in the user control unit and the address stored in the destination address area are ICS user addresses,
These are the sender ICS user address and the receiver ICS user address, respectively.

When implementing the present invention, the format of the ICS frame does not necessarily have to comply with the rules of RFC791 and RFC1883.
Any frame format using any of the 28 bits can be used. In general, ICS receives an ICS user frame specified by RFC791 or RFC1883 of a communication protocol from a user. Other frame formats are converted into an ICS user frame format by a conversion unit (conversion unit). It can be handled in the network.

Embodiment 1 (Basic of ICS, intra-enterprise communication and inter-enterprise communication): First embodiment of the present invention will be described with reference to FIGS.
An embodiment will be described for basic communication for determining a transfer destination in the ICS from a recipient ICS user address based on the management of a conversion table. In the figure, reference numerals 170-1, 170-2, 170-3, and 170-4 denote gateways provided inside the LANs 100-1, 100-2, 100-3, and 100-4, respectively. 170-1 to 170-4.

First, it is connected to the LAN 100-1 of the company X having the unique address system ADX, and the address system A
Terminal with address according to DX and LA of same company X
Communication with a terminal connected to N100-2 and having an address according to the address system ADX will be described. That is, the ICS user address “00” on the LAN 100-1
12 "and a terminal having an ICS user address" 0034 "on the LAN 100-2. This communication is based on an address system unique to the same company (ADX in this example). The terminal to which the address is set is a typical communication mutually performed via the ICS 100. This is called an intra-company communication service (or an intra-company communication). A terminal having an address according to the address system ADX and a company Y
Communication with a terminal that is connected to the LAN 100-3 and has an address according to the address system ADY will be described. That is, the terminal having the ICS user address “0012” on the LAN 100-1 and the I
This is communication with the terminal having the CS user address “1156”. This communication is a typical terminal intercommunication performed by terminals having different address systems between different companies using an ICS address system that can be used in common with each other. Call.

<< Common Preparation >> In describing this example,
The address format and the like are determined as follows, but the specific numerical values and formats shown here are merely examples, and the present invention is not limited thereto. The ICS network address is represented by four digits, and both the sender ICS user address and the recipient ICS user address are represented by four digits. Then, of the sender ICS user address and the receiver ICS user address, an address whose upper two digits are not “00” is set as the inter-company communication address, and the inter-company communication address is I
It is the only value inside CS100. Top 2 of sender ICS user address and receiver ICS user address
The address having the digit “00” is set as the intra-company communication address. However, the intra-company communication address may overlap with the intra-company communication address of another company within the ICS 100. Further, the conversion table 113 provided in the access control device 110-1.
-1 is the source ICS network address, the destination ICS
Network address, sender ICS user address,
It contains the recipient ICS user address, request identification, speed category, etc. The request identification registered in the conversion table 113-1 is
For example, the intra-company communication service is represented by “1”, the inter-company communication service is represented by “2”, and the virtual leased line connection described in other embodiments is represented by “3”. The speed category is a line speed required for communication from the ICS network address,
It includes the throughput (for example, the number of ICS frames transferred within a certain time).

<< Preparation for Intra-Company Communication >> LAN 100
-1 and the user of the LAN 100-2 designate a terminal to a VAN operator so that intra-company communication between terminals connected to each LAN can be performed via VAN-1 and VAN-3. Make an application. Then, in response to the application, the VAN operator accesses the access control devices 110-1 and 110-1 connected to the LANs 100-1 and 100-2.
In the conversion table of −5, the above-mentioned ICS network address,
While setting the ICS user address, request identification, etc.,
The data is also written and stored in the ICS address management server 150-1.

The setting items related to VAN-1 are as follows. The ICS network address is determined from the ICS logical terminal of the access control device 110-1 to which the LAN 100-1 is connected.
The S network address is “7711”. The intra-company communication address of one terminal connected to the LAN 100-1 to which the application was made is set to “0012”
S user address. The inter-company communication address used by the terminal having this address is “2212”, which is the sender ICS user address. Then, the access control device 1 connected to the LAN 100-2 to which the application has been made
The ICS network address is determined from the ICS logical terminal of 10-5. Here, the ICS network address is set to “9922” and this is set as the incoming ICS network address. Further, the ICS user address of one terminal connected to the LAN 100-2 is set to “0034”, which is set as the receiver ICS user address. The value “1” indicating the applied intra-company communication service is set as the request identification, and the above is registered in the conversion table 113-1.

The setting items related to VAN-3 are as follows. The value required for the reverse communication (communication from the LAN 100-2 to the LAN 100-1) is set in the conversion table of the access control device 110-5 that connects the LAN 100-2 to which the application has been made. In other words, the reverse data is set for the originating ICS network address and the destination ICS network address, and at the same time, the reverse data is set for the sender ICS user address and the receiver ICS user address. It is assumed that the ICS network address of the LAN 100-2 is “9922” and is the originating ICS network address. In-house ICS of terminal connected to LAN 100-2
The user address “0034” is set as the sender ICS user address, and the ICS user address “0012” of the communication destination terminal is set as the receiver ICS user address. Further, the ICS network address “7711” of the LAN 100-1 is set as the incoming ICS network address, the value of the request identification indicating the intra-enterprise communication service is set to “1”, and this is the request identification. Access control device 1
Write and register in the conversion table of 10-5.

<< Internal Communication Operation >> The terminal having the ICS user address “0012” is assigned to the ICS user frame P1.
Is sent. The sender ICS user address “0012” is set in this ICS user frame P1, and the receiver I
“0034” is set in the CS user address.

Next, description will be made with reference to the flowchart of FIG. The ICS user frame P1 is transmitted to the access control device 110-1 via the user logical communication line 180-1.
Is forwarded to The access control device 110-1 is a LAN
100-1 originating ICS network address “771
1 "(steps S100, S101) and the received IC
S user frame recipient ICS user address “00”
34 ", the conversion table 113-1 is referred to, and from the request identification value" 1 ", it is known that this communication is an intra-company communication (step S102), which corresponds to the receiver ICS user address" 0034 ". An incoming ICS network address “9922” is obtained (step S103), and then I
CS encapsulation is performed (step S106). FIG. 12 is a flowchart showing the above procedure, and the intra-company communication is the flow (1) therein. In addition, sender I
The CS user address may be used, for example, to specify the source of the ICS frame.

The access control device 110-1 forms an ICS network frame P2 by ICS encapsulation and transmits the frame to the relay device 120-1. Since the uniqueness of the ICS network address of the network control unit is guaranteed inside the ICS, it does not collide with other ICS frames. The ICS network frame P2 passes through the relay devices 120-1 and 120-2 based on the destination ICS network address, and reaches the access control device 110-5 of the VAN-3. Access control device 110-
5 removes the network control unit from the ICS network frame P4 and decapsulates the ICS, reproduces the same ICS user frame P5 as the ICS user frame P1 from the network data unit of the ICS frame, and executes LAN demultiplexing.
Transfer to 100-2. ICS user frame is LAN
100-2 is routed and transferred to the terminal having the ICS user address “0034”.

<< Preparation for Inter-company Communication >> As an example of the inter-company communication service, the LAN 1 conforming to the address system ADX is used.
ICS user address “001” connected to 00-1
Terminal with 2 "and LAN1 according to address system ADY
ICS user address “115” connected to 00-3
Communication with a terminal having 6 ". LAN 100
-1 and the user of the LAN 100-3 designate a terminal to each of the connected VANs so that communication can be performed via the VAN-1 and VAN-2, and apply to the VAN operator. The VAN operator requests the LAN 10
The necessary items are set in the conversion tables of the access control devices connected to 0-1 and the LAN 100-3.

The setting items related to VAN-1 are as follows. The ICS network address of the LAN 100-1 is set to “7711”, and the LAN 1
The intra-company communication address of one terminal connected to 00-1 is "0012", and this is the sender ICS user address. The inter-company communication address assigned to the terminal having the ICS user address is “2212”, which is the sender ICS user address (between companies). The ICS of the access control device 110-4 connected to the ICS network address of the LAN 100-3 to which the application was made
The ICS network address is determined from the logical terminal. Here, “8822” is used as the incoming ICS network address. The ICS user address of one terminal connected to the LAN 100-3 is set to "1156".
And this is set as the recipient ICS user address. Further, the value “2” indicating the inter-enterprise communication service for which the application has been made is set as the request identification, and the above is registered in the conversion table 113-1.

The setting items relating to VAN-2 are as follows. As a conversion table of the access control device 110-4 to which the LAN 100-3 is connected, a temporary conversion table 114- which holds data in the opposite direction for a certain period, for example, 24 hours.
Set 2. That is, regarding the ICS network address “8822” to which the LAN 100-3 using the communication service between companies is connected, the originating ICS network address, the sender ICS user address, the recipient ICS user address, the terminating ICS network address, the request identification, etc. Is provided in the access control device 110-4. However, the temporary conversion table 114
The timing of setting -2 will be described later. In the above other embodiment, the temporary conversion table 114-2 is not set.

<< Operation of Inter-company Communication >> A terminal having an ICS user address “0012” sets an ICS user frame with “0012” as a sender ICS user address and “1156” as a receiver ICS user address. Send F1. The ICS user frame F1 is transferred to the access control device 110-1 via the user logical communication line 180-1.

The access control device 110-1 is connected to the LAN1
The outgoing ICS network address of “00-1” “771”
1 "(steps S100, S101) and the recipient ICS
Using the user address "1156" and the conversion table 113-
1 to know that the request identification is "2", that is, the inter-company communication service (step S102). Next, the incoming call I corresponding to the receiver ICS user address "1156"
It knows that the CS network address is “8822” (step S104) and replaces the sender ICS user address “0012” with the inter-company communication address “221”.
(Step S105) The access control device 110-1 transmits the ICS network address “7”.
711 ”, the sender ICS user address“ 2212 ”,
Recipient ICS user address "1156", incoming ICS
A network control unit is added as a network address “8822” to perform ICS encapsulation, and the ICS is transmitted to the relay device 120-1 as an ICS network frame F2 (step S106). The above procedure corresponds to the flow (2) in the flowchart of FIG.

In the above-mentioned inter-company communication, if the sender ICS user address in the ICS user frame F1 is set to the inter-company communication address “2212”, the sender and the receiver communicate with each other using the inter-company communication address. Is performed (steps S102 and S104). In this case, the access control device 110-1 transmits the sender ICS user address “22”.
12 "to the inter-company communication address" 2212 "is not required because it becomes unnecessary.
(3) in the flowchart of FIG. The sender IC
The S user address may be used, for example, to specify the source of the ICS frame.

The relay device 120-1 converts the ICS network frame based on the incoming ICS network address into the relay device 120-2 in the VAN-1, the gateway 130 between VANs, and the relay device 120-3 in the VAN-2.
Through the access control device 110-4 in the VAN-2. Next, a description will be given with reference to the flowchart of FIG. The access control device 110-4 receives the ICS network frame (step S110), creates an ICS user frame F5 from the network data part (step S111: ICS decapsulation),
The ICS logical terminal to be transmitted is determined from the S network address ((1) in step S112).
-3 (step S113). Calling IC at the same time
S network address “8822” and sender ICS
The relationship between the user address “1156”, the recipient ICS user address “2212”, and the terminating ICS network address “7711” is determined by the access control device 110-4.
If they are not registered in the conversion table inside the
The kind address is set to "2" of the request identification, that is, the designation of the inter-company communication in the temporary conversion table 114-2 (step S).
112 (2)). The setting content of the temporary conversion table 114-2 is updated by performing processing such as deleting it when there is no usage for 24 hours, for example. ICS user frame is LAN1
The packet is routed through 00-3 and transferred to the terminal having the ICS user address "1156". Conversion table 114-
2 is a conversion table 113.
In the case of being divided into "intra-company" and "between companies" as in -1, for example, the sender ICS user address (intra-company)
Is "0023" and the value of the sender ICS user address (between companies) is "1159", the destination address of the user control unit of the ICS user frame immediately after the ICS decapsulation is performed. Of the ICS user frame whose address value is “1159” written in the column of “1159”, the process of rewriting the destination address value of the user control unit of this ICS user frame to “0023” is performed in the above-described step S112 (1). ). To summarize the effects of the above processing, the ICS user address “0023” for intra-company communication is used inside the LAN.
However, for other companies outside the LAN, it can be claimed that the ICS user address for inter-company communication is "1159". In the other embodiment described above, the temporary table 11
Do not set to 4-2. In the above-mentioned other embodiment, the conversion table 113-1 stores the sender ICS user address (in a company).
And does not include the sender ICS user address (between companies)
Further, the flowchart (2) of FIG.
105 is not included. In step S104, the sender ICS user address is not referred. An advantage of this embodiment is that when there are many sender ICS user addresses for one receiver ICS user address, the number of registrations in the conversion table can be reduced to only one receiver ICS user address.

Embodiment 2 (Virtual Private Line): The operation of the virtual private line connection according to the present invention will be described with reference to FIG.
Here, the virtual leased line connection is independent of the ICS user address in the user control unit of the ICS user frame.
Incoming ICS registered with ICS user frame in conversion table
This is communication that is fixedly transferred to a network address,
It takes the form of one-to-one or one-to-N. The components in FIG. 14 are almost the same as those in FIGS. 10 and 11 of the first embodiment, and the difference is the registered contents of the conversion table. In the conversion table of the access control device, the incoming ICS network address is fixedly determined from the outgoing ICS network address. The address is not registered or is ignored even if it is registered.

The company X uses the virtual leased line connection and is connected to the access control apparatus 210-1.
A case in which communication is performed between the LAN 200-2 of the company X connected to the access control device 210-5 will be described.

<< Preparation >> The user applies for a virtual private line connection to the VAN operator. The VAN operator uses the L of company X
Access control device 210-1 for connecting AN 200-1
An ICS network address “7711” of an ICS logical terminal at a connection point between the user logical communication line 240-1 and the access control device 210-5 for connecting the LAN 200-2 of the company X, and the user logical communication line 240 ICS network address “9922” of the ICS logic terminal at the connection point with the 2-2 Next, the VAN operator adds the outgoing ICS network address “7711” and the incoming ICS to the conversion table 213-1 of the access control device 210-1.
The network address “9922” and the request type are set. FIG. 14 shows an example in which the request type “3” is a virtual private line connection. Similarly, the access control device 21
In the conversion table of 0-5, the source ICS network address “9922” and the destination ICS network address “77”
11 "and the information of the request type are set.

<< Procedure >> This will be described with reference to the flowchart of FIG. Company X LAN 200-1 is ICS200
To the ICS through the user logical communication line 240-1
The user frame F10 is transmitted. Access control device 2
10-1 is the ICS network address “7711”
ICS user frame F10 is received from the ICS logic terminal (steps S200 and S201), and the conversion table 213 is input.
Reference is made to the request identification value “3” of the outgoing ICS network address “7711” of “−1” to recognize that it is a virtual leased line connection (step S202), and the incoming ICS network address “9922” is read (step S20).
3). Next, the access control device 210-1 adds a network control unit in which the incoming ICS network address is set to "9922" and the outgoing ICS network address is set to "7711" to the ICS user frame F10 to create the ICS network frame F11. (Step S204: ICS encapsulation), the relay device 2
The data is transmitted to 20-1 (step S205). IC
The relay device 22 that has received the S network frame F11
0-1 is the incoming I of the ICS network frame F11
The destination is determined based on the CS network address, and the ICS network frame F is sent to the relay device 220-2.
12 is sent out. ICS network frame F12
Is transferred to the access control device 210-5 via the relay device 220-4 in the VAN-3.

The access control device 210-5 removes the network control unit from the ICS network frame F13 (ICS decapsulation) and replaces the ICS user frame F14 with the ICS network address "992".
2 "ICS logic terminal to user logic communication line 240-
Send to 2. The LAN 200-2 of the company X is I
The CS user frame F14 is received. In the same manner as described above, data can be transmitted from the LAN 200-2 to the LAN 200-1, so that mutual communication is possible. In the above description, since it is clear that the sender and the receiver need not be the same company X, the LAN 200-1 of the other company Y and the LAN 200-
For example, the ICS user frame can be transferred to the third device.

In the above description, one-to-one communication has been described as an example, but one-to-N communication is also possible. For example, FIG.
The conversion table 213-1 of the access control device 210-1 of
As indicated by “7712” of the originating ICS network address, a plurality of destination ICS network addresses may be set. In this example, two ICS network addresses “6611” and “8822” are set. Upon receiving the ICS user frame from the ICS logical terminal having the ICS network address of “7712”, the access control device 210-1 adds the first ICS network frame to which the network control unit in which the incoming ICS network address is set to “6611” is added. Then, a second ICS network frame to which a network control unit in which the incoming ICS network address is set to "8822" is added, and these are sent to the relay device 220-1. As a result, one-to-two communication can be performed. Further, one-to-N communication is possible by transferring individual ICS network frames in the same manner as described above.

Embodiment-3 (ICS network server): As shown in FIG. 16, the ICS network server 330 is composed of a processing device 331 and an ICS network database 332, and the data held by the ICS network database 332 is a question item, Type,
It consists of the answer content and the network address of another ICS network server. The ICS network server 330 analyzes the data portion of the ICS frame received from the access control device 310-1, references the ICS network database 332 based on the data, and obtains the answer content corresponding to the question item (type “ 1 "), the obtained response is stored in the access control device 310-
Send to 1. Further, when the ICS network database 332 does not hold the answer content corresponding to the question item (type “2”), the ICS network server communication function is used to enter the question item based on the ICS network address of another ICS network server. The corresponding answer is obtained by asking the other ICS network server a question, and the answer to the obtained question is transmitted to the access control device 310-1.

More specifically, as a preparation matter, conversion table 3
13-1, the ICS user address “2000” of the ICS network server 330 and the ICS network address “77”
21 and the request identification “4.” Here, the request identification “4” has a common number (ICS special number) with other users such as the ICS user address “2000” such as a Japanese telephone number “119”. Number). next,
In the ICS network database 332, write that the type for the question Q1 is "1" and the answer is "A1", the type for the question Q2 is "2", the answer is blank, and the other ICs are blank.
The ICS network address “88” of the S network server 340
44 "is written.

Next, the ICS user address "0012"
Transmits an ICS user frame F20 directed to the ICS user address “2000” of the ICS network database 332 (including the question Q1), and the access control device 310-1 transmits the ICS user terminal from the ICS logical terminal of the line unit 311-1. The ICS user frame F20 is received, the ICS network address “7711” is obtained, and then the conversion table 31
Referring to 3-1, an ICS network frame in which ICS frame F20 is encapsulated in ICS is sent to ICS network server 320. As shown in the flowchart of FIG. 17, the ICS network database 332 stores the ICS frame F20.
The answer A1 corresponding to the question Q1 included in the search is found (steps S300 and S301), and the access control device 310-
1 and the answer A1 is returned. The access control device 310-1 is:
I including the answer A1 in the ICS user address “0012”
Transmit the CS frame.

When the user of the ICS user address “0012” is connected to the IC
The access control apparatus 310-1 transmits the S frame F21 (including the question Q2), and refers to the conversion table 313-1 to
When the ICS network address “7721” is obtained, I
An ICS frame obtained by encapsulating the CS frame F21 in the ICS is transmitted. The ICS network database 332 recognizes the type “2” corresponding to the question Q2 of the ICS frame F21 (Step S300), and
Knowing that it does not hold the answer (A2), it uses the ICS network communication function based on the ICS network address “8844” of the other ICS network server 340 to perform ICS network communication.
Information is exchanged with the network server 340 (step S302), and an answer "A2" corresponding to the question Q2 is obtained (step S3).
03), and returns the answer A2 to the access control device 310-1. The access control device 310-1 transmits an ICS frame including the answer A2 to the ICS user address “0012”.

Embodiment-3A (when the ICS network server is connected to the relay device): As shown in FIG.
The network server 330 is connected to the access control device 310-1, but is not connected to the relay device 320-1. On the other hand, in the present embodiment, as shown in FIG.
The S network servers 340A-1 and 340A-2 are connected to the access control devices 310A-1 and 310A-2, respectively, while the ICS network server 340A-3 is connected to the relay device 320.
A-1. Also, any ICS network server 3
40A-1, 340A-2 and 340A-3 are also ICS3
00A has a unique ICS network address inside. The ICS network server 340A-3 communicates with the ICS network servers 340A-1 and 340A-2 connected to the access control device inside the same VAN-300A1 using the ICS network communication function, and only these ICS network servers are used. Can collect and hold the unique information held by. Such an ICS network server is called VAN-300A1
Is referred to as an ICS network server. As a result, the ICS network server 340A-1 communicates with the ICS network server 340A-3 representing the VAN-300A1, and obtains the unique information of the ICS network server 340A-2 connected to another access control device. can do. Also, VAN
-ICS network server 340A-3 representing 300A1
And the ICS network server 340A-6 representing the other VAN-300A2 can communicate with each other using the ICS network communication function, and can exchange unique information held by each. still,
The ICS network server connected to the access control device has a VA
The information held by all the ICS network servers inside N may be collected and used as the ICS network server representing the VAN.

Embodiment-4 (ICS Address Management Server): As shown in FIG. 19, the ICS address management server 430 is connected to the access control device 410-1 via the ICS network communication line 460.
IC with ICS logic terminal on the line section 411-1 of 0-1
It holds a correspondence table 432 between the S network address and the corresponding ICS user address. For example, IC
S user addresses “2013”, “2014”, “12”
ICS network addresses “7711”, “7711”, “771” corresponding to “34” and “4500”, respectively.
2 ”and“ 7713. ”At the same time, all information described in the conversion table and address-related information such as a record on VAN operation may be included. It holds the ICS network address of the ICS address management server and the ICS network addresses of a plurality of ICS name servers.
Further, the ICS address management server communicates with the ICS name server described in the later-described embodiment-5 using the ICS network server communication function, and can obtain the ICS name corresponding to the ICS user address.

Processing unit 4 of access control unit 410-1
12-1 communicates with the ICS address management server 430 using the ICS network server communication function, and presents the value of the ICS network address and tells the corresponding ICS user address, or presents the value of the ICS user address. The corresponding ICS network address. This will be described with reference to the flowchart of FIG. The ICS address management server 430 checks whether the ICS network address or the ICS user address queried from the access control device server 410-1 is registered in the correspondence table 432 held by the ICS address management server 430 (step S400), and includes it in the correspondence table. If it is included, it answers (step S401), and if it is not included, it communicates with another ICS address management server 440 using the ICS network server communication function to acquire the ICS user address or ICS network address (step S402). ), And returns the result to the access control device 410-1 of the query source (step S403). With such a configuration, the access control device 410-1 requests the ICS address management server 430 to request the ICS network address or I
From one of the CS user addresses, the other address can be obtained.

Embodiment-4A (when the ICS address management server is connected to the relay device): As shown in FIG. 19, the ICS address management server 430 is connected to the access control device 410-1. Apparatus 420-1
Not connected to. On the other hand, in the present embodiment, FIG.
ICS address management server 450B-3
Is connected to the relay device 420B-1, and the ICS address management server 450B-3 is the only I
Has a CS network address. The ICS address management server 450B-3 uses the ICS network server communication function to connect to the access control device inside the same VAN-400B1.
-1 and 450B-2 to collect and store ICS network addresses, ICS user addresses, and ICS address related information held by these ICS address management servers. Such an ICS address management server is provided by an ICS representative of the VAN-400B1.
It is called an address management server. As a result, the ICS address management server 450B-1 communicates with the ICS address management server 450B-3 representing the VAN-400B1,
It is possible to obtain information related to the ICS address of the ICS address management server 450B-2. Also, VA
ICS address management server 4 representing N-400B1
IC representing 50B-3 and other VAN-400B2
The S-address management server 450B-6 communicates using the ICS network server communication function, and can exchange ICS address-related information held by each. The ICS address management server connected to the access control device may collect information held by all ICS address management servers inside the VAN, and may be used as the ICS address management server representing the VAN.

Embodiment-5 (ICS name server): IC
The S user address is, for example, a 32-bit binary number or 1
This embodiment has a drawback that it is difficult to remember because it is represented by a 28-bit binary number. Instead, this embodiment-5 uses a method that uses an "ICS name" that is easy for a person to remember. In addition, instead of "ICS name", "ICS domain name"
The term is also used. In this case, the ICS name server is used instead of the ICS name server.

First, the ICS name will be described. 2
As shown in FIG. 7, the ICS address expressed in a hexadecimal number is, for example, a regional management code, a country code, a VAN code, and a VAN code.
It is represented by a region code, a VAN access point code, and a user logic code. By arranging these numerical codes,
For example, regional management code‖country code‖VAN code‖VA
It is represented by N area code {VAN access point code} user logic code. The ICS name is, for example, an area management code that can be represented by a binary value as described above.
S (element of ICS name meaning Asia), JP (Japan), VAN # 1 (identifies one of VAN), DIS # 1
(Identifies one of the VAN area codes constituting VAN # 1), ACS # 1 (VAN limited by DIS # 1)
One of the access point codes), USR # 1
(Identifies one of the user logic codes). The elements of the ICS name determined above are reversed,
The points are arranged with a dot “.” Between them, that is,
1. DIS # 1. VAN # 1. JP. AS "is defined as an ICS name. In the above-described case, the ICS name is divided into, for example, USR # 1 into USR # 10 and COMP # 10, and ACS # 1 into ACS # 11 and ACS # 12. As “USR # 10. COMP # 10. AC
S # 11. ACS # 12. DIS # 1. VAN # 1. J
P. AS ", for example.

An ICS name server which is a kind of the ICS network server will be described. As shown in FIG. 22, the ICS name server 550 includes a processing device 551 and an ICS name conversion table 552. The ICS name conversion table 552 includes, for example, an ICS name and a type (IC corresponding to the ICS name).
S user address) and an ICS user address. The type “2” indicates that the ICS network database 332 does not hold the ICS network address corresponding to the ICS name, and thus obtains the ICS network address corresponding to the ICS name from another ICS name server. Here, for example, IC
S name "USR # 2.ACS # 2.DIS # 2.VA"
N # 2. JP. The other ICS name server that manages the “AS” is “USR # 2. “DIS #” excluding “ACS # 2”
2. VAN # 2. JP. AS ". IC
The S name server 550 analyzes the ICS frame data portion received from the access control device 510-1, refers to the ICS name conversion table 552 based on this, acquires the ICS user address corresponding to the ICS name, and Transmit to 510-1. Further, based on the ICS user dress, the corresponding ICS name is answered. IC
If the corresponding ICS user address does not exist in the S name conversion table 552, a request is made to another ICS name server holding the ICS user address being queried using the ICS network server communication function, and from there. The obtained ICS user address is transmitted to the access control device 510-1.

Sender IC connected to LAN 500-1
The terminal having the S user address “0012” is connected to the ICS name 1 “USR # 1.ACS # 1.DIS # 1.VAN #”.
1. JP. A method for obtaining an ICS user address corresponding to AS ”will be described. Here, the access control device 510 is described.
The case where -1 acquires data from the ICS name server 550 and the case where it acquires data from another ICS name server 560 will be described.

First, as a preparation matter, the access control device 5
The ICS name server 5 is added to the conversion table 513-1 of 10-1.
I corresponding to 50 ICS user addresses "1000"
The CS network address “7741” and the request identification “4” are registered. Here, the request type “4” is ICS
The user address “1000” is the telephone number “119”
ICS special number common to other users as shown in FIG. The ICS name “USR # 1.ACS # 1.D” is stored in the ICS name conversion table 552 of the ICS name server 550.
IS # 1. VAN # 1. JP. As a result, the receiver ICS user address “2014” corresponding to “AS” is registered, and the terminal user of the sender ICS user address “0012” of the LAN 500-1 accesses the access control device 510.
-1, the ICS user frame F40 is transmitted to the ICS name # 1 "USR # 1.ACS # 1.DIS # 1.VA".
N # 1. JP. AS "to the ICS user address. The processing unit 512-1 in the access control device 510-1 receives the ICS user frame F40 from the ICS logical terminal of the line unit 511-1 and receives the ICS.
Obtain the network address “7711” and then IC
The conversion table 513-1 is referred to based on the recipient ICS user address of the S user frame F40, and when the corresponding request identification is "4" (connection to the ICS name server of the ICS special number), it is obtained by the above operation. The ICS user frame F40 is encapsulated in the ICS using the ICS network address “7711”, and the IC is sent to the ICS name server 550.
Send an ICS network frame containing the S name.

As shown in the flowchart of FIG.
The CS name server 550 analyzes the ICS name in the ICS frame received from the address control device 510-1 in the processing device 551, and refers to the ICS name conversion table 552 based on the ICS name (step S500). And
The ICS user address corresponding to the ICS name is ICS
If it exists in the name conversion table 552, it is obtained,
The ICS network frame F45 including the ICS user address “2014” is transmitted to the access control device 510-
1 (step S501). In addition, I
When the CS name does not exist in the ICS name conversion table 552, for example, the processing device 512-1 receives the ICS user frame F41, and the ICS name # 2 (that is, USR # 2.AC) described in the ICS user frame F41.
S # 2. DIS # 2. VAN # 2. JP. AS) but I
If not described in the CS name conversion table 552, IC
The S name server 550 stores the ICS name (DIS # 2.V
AN # 2. JP. AS), an ICS network address of another ICS name server is obtained from the ICS name conversion table 552, and the ICS name server 560 and the ICS name server
By exchanging information using the network server communication function, an ICS user address “1130” corresponding to the ICS name inquired is obtained (step S502), and the obtained result is transmitted to the access control device 510-1 (step S502). Step S503).

The access control device 510-1 exchanges information with the ICS address management server 570 based on the recipient ICS user address described in the ICS network frame F 45 received from the ICS name server 550, and converts the information into the ICS user address. The corresponding ICS network address and the address-related information included in the correspondence table are obtained, and the data including the obtained ICS user address, ICS network address, and address-related information is written into the conversion table 513-1. Access control device 510-1
Converts the ICS user address “2014” (or “1130”) obtained from the ICS name server 550 into the LAN 5
Sent to the terminal user with the sender ICS user address “0012” of 00-1. Here, the ICS user address “0012” is written in the ICS network frame F45. The terminal user of the sender ICS user address “0012” of the LAN 500-1 receives the receiver ICS user address “2” obtained from the access control device 510-1.
014 "(or" 1130 ").

Embodiment-5A (when the ICS name server is connected to the relay device): In FIG. 22, the ICS name server 550 is connected to the access control device 510-1, but the relay device 520-1 is not connected to the access control device 510-1. Not connected.
In contrast, in the present embodiment, as shown in FIG. 24, the ICS name server 550C-3 is connected to the relay device 520C-1, and the ICS name server 550C-3 is connected to the ICS 500.
C has a unique ICS network address inside. The ICS name server 550C-3 uses the ICS network server communication function, and the ICS name servers 550C-1 and 550C- connected to the access control devices 510C-1 and 510-C2 inside the same VAN-500C1.
2 can collect and hold unique information held only by these ICS name servers. Such an ICS name server is called an ICS name server representing VAN-500C1. As a result, the ICS name server 550C-1 can communicate with the ICS name server 550C-3 representing the VAN-500C1, and can acquire the unique information of the ICS name server 550C-2. Also, an IC representing VAN-500C1
S name server 550C-3 and other VAN-500C
And ICS name server 550C-6 representing IC
Communication can be performed using the S network server communication function, and unique information held by each can be exchanged. The ICS name server connected to the access control device stores all I
The information held by the CS name server is collected and VAN
May be used as the representative ICS name server.

Embodiment-6 (ICS name server): In Embodiments -5 and -5A, the access control device 510-
1 writes the obtained data such as the ICS user address and the ICS network address into the conversion table 513-1.
These data obtained instead are converted to a temporary conversion table 514-1.
Write to In this case, the address data written in the temporary conversion table is deleted after 24 hours, for example.

Embodiment-7 (ICS name server): In Embodiments -5 and -5A, the access control device 510-
1 does not call the address management server 570, and
CS user address "2014" (or "1130")
Is performed only to the terminal having the ICS user address “0012”.

Embodiment -8 (charging server): The charging system includes a "network charging system" for counting and charging ICS user frames transmitted and received during communication, and information inside the transmitted and received ICS user frames. And an “information charging method” in which the ICS user frame transmitted and received is not charged and the registration of the ICS user address and the like in the conversion table of the access control device is continued.
For example, there are three schemes, namely, a "fixed-rate billing scheme" in which a fixed fee is set on a monthly basis. Here, in the information billing method,
It counts and charges the user control unit of the ICS user frame by designating an identifier indicating information charging. In both the network charging method and the information charging method, the case where the caller bears the communication is referred to as “outgoing billing”, and the case where the receiver bears the charge is referred to as “incoming billing”. The network charging method and the information charging method are collectively referred to as a "metered charging method".

<< Configuration >> A billing method in the ICS network of the present invention will be described with reference to FIGS. 25 and 26.
The setting information of the charging method is stored in a conversion table 813-1 in the access control device 810-1 and a flat-rate charge definition table 843 in the charging server 840. And whether to perform
Whether to use pay-as-you-go billing (separate outgoing billing and incoming billing) or flat-rate billing (separate outgoing billing and incoming billing)
Is set. Hereinafter, description will be made with reference to the flowchart of FIG. Access control device 8
10-1 receives the ICS user frame F50 (step S800), and reads out the type of accounting method for each ICS frame stored in the conversion table 813-1 based on the ICS user address included in the ICS user frame. The charging condition is checked (step S801), and if the read type indicates the metered charging method, charging information is generated,
The accounting information is transferred to the accounting server 840, which is one of the ICS network servers, as an accounting information frame F51 (step S810). The accounting information is not transferred to the accounting server 840 as the accounting information frame F51 (step S820).

The accounting server 840 receives the accounting information frame F51 sent from each access control device, and stores the accounting information included in the accounting information frame. The billing server 840 includes a billing processor 841 and a billing information database 842. The billing processor 841 includes a billing information frame F5 sent from the access controller 810-1.
1 is received, the accounting information included in the accounting information frame F51 is analyzed, and stored in the accounting information database 842. The charging information database 842 uses the ICS network address and the ICS user address as identifiers,
Store billing information as a database. In the case of the pay-as-you-go billing method, the billing information database 842 stores information by a count indicating the pay-as-you-go rate, and an upper limit value can be set for the count. Notifies the access control device 810-1 that the count has exceeded the upper limit, and stops the communication of the user in the access control device 810-1 that has received the notification.
The billing server 840 can transfer the stored billing information to another VAN or user using the ICS network server communication function.

(1) Example of communication of pay-as-you-go billing method of outgoing billing by network billing: Company X and company Y
A case where communication between companies is performed using S800 will be described. In this case, LAN800-1 and LAN800-
The charging method in the communication 3 is a case where the network charging is a pay-per-use method, all charges are borne by the LAN 800-1, and information charging is not performed.

<< Preparations for Communication >> LAN80
0-1 and the LAN 800-3 are connected to the respective access control devices 810-1 and 810-4.

<< Preparation for Charging >> LA for Communication
Conversion table 8 for charging conditions of N800-1 and LAN800-3
13-1. As the registration in the conversion table 813-1, charging conditions are set based on the originating ICS network address, the sender ICS user address, the terminating ICS network address, and the recipient ICS user address. "1" is set as a value for outgoing billing for network billing in a metered billing system. Also, “1” is set as the charging unit price. Since information billing is not performed, conversion table 8
As the charging condition in the information charging condition of 13-1, "0" indicating non-charging is set. The conversion table for the access control device 810-4 accommodating the LAN 800-3 includes the access control device 81 because the charge is for the LAN 800-1.
In order to prevent 0-4 from performing the charging process, "0" indicating the flat-rate charging method is set.

<< Explanation of Charging Operation >> The ICS user frame F50 transmitted by the terminal having the ICS network address “0012” connected to the LAN 800-1 is processed by the processing device 812-1 in the access control device 810-1 ( (Steps S800 and S801), and specifies a charging condition field from the sender ICS user address and the receiver ICS user address in the ICS user frame (step S8).
10), refer to a charging condition to specify a charging method for network charging from the field. As the set value in this case, “1”, which is the setting for outgoing billing in the metered billing system, is set, the billing unit is referred to (step S811), and billing information is generated (for example, billing unit price “1”). Is generated as one-time billing information) (step S8).
12), the accounting information is transferred to the accounting server 840 as the accounting information frame F51 (step S813). In the accounting processing device 841 of the accounting server 840, the accounting information database 8 according to the accounting information in the accounting information frame F51 received from the access control device 810-1.
The network billing counter of 42 is added (step S814). If the conditions for charging are not any of the charging examples described later, the charging described here is performed.

(2) Example of communication of fixed-rate billing system for outgoing billing by network billing: Company X uses ICS800 of the present invention
The case where the communication within the company X is performed using the communication will be described. In this case, the charging method in the communication between the LAN 800-1 and the LAN 800-2 is a case where the network charging is a flat-rate charging method, all charges are borne by the LAN 800-1, and information charging is not performed.

<< Preparations for Communication >> LAN80
0-1 and the LAN 800-2 are connected to the respective access control devices 810-1 and 810-5.

<< Preparation for Charging >> LA for Communication
The accounting conditions of N800-1 and LAN 800-2 are registered in conversion table 813-1. The registration in the conversion table 813-1 includes the originating ICS network address, the sender ICS
Charging conditions are set based on the user address, the incoming ICS network address, and the recipient ICS user address. “0” is set as a value for the network charging to be the flat-rate charging method, and “1” indicating calling charging is set to the charging burden in the flat-rate charging definition table 843 to indicate the charging burden. Since charging for information is not performed, the conversion table 813-
In the charging condition of the information charging condition of 1, "0" indicating non-charging is set. In the conversion table for the access control device 810-5 accommodating the LAN 800-2, "0" indicating the flat-rate charging method is set.

<< Description of Charging Operation >> The ICS user frame transmitted by the terminal having the ICS network address “0012” connected to the LAN 800-1 is processed by the processing device 812-1 in the access control device 810-1 (step S8
00, S801), the sender I in the ICS user frame
The accounting condition field is specified from the CS user address and the receiver ICS user address (step S81).
0), refer to the charging condition from the field to specify the charging method for network charging. Since the set value in this case is “0” indicating the flat-rate billing method,
No accounting process such as generation of accounting information is performed (step S8).
20). The charge processing is performed in the flat-rate charge definition table 84.
3 is performed. That is, since “0” indicating the outgoing charging is set in the fixed-rate fee definition table 843, the fee is charged to the LAN 800-1.

(3) Example of communication based on pay-as-you-go billing method of network billing and incoming billing: A case where company X and company Y perform communication between companies will be described. In this case, LAN800
The charging method in the communication between the LAN-1 and the LAN 800-3 is a case where the network charging is a pay-per-use method, all the charges are borne by the LAN 800-3, and no information charging is performed.

<< Preparations for Communication >> LAN80
0-1 and the LAN 800-3 are connected to the respective access control devices 810-1 and 810-4.

<< Preparation for Charging >> LA for Communication
The accounting conditions of N800-1 and LAN 800-3 are registered in conversion table 813-1. The registration in the conversion table 813-1 includes the originating ICS network address, the sender ICS
Charging conditions are set based on the user address, the incoming ICS network address, and the recipient ICS user address. "2" is set as the value for terminating the network charging in the pay-as-you-go charging method, and "1" is set as the charging unit price. Since information charging is not performed, the charging condition in the information charging condition of the conversion table 813-1 is "0" indicating non-charging.
Set. The conversion table for the access control device 810-4 accommodating the LAN 800-3 includes a charge for the LAN 80-3.
Since it is 0-3, "2" is set as a value for network billing to be called party billing in the pay-as-you-go system.

<< Explanation of Charging Implementation >> The ICS user frame transmitted by the terminal having the ICS network address “0012” connected to the LAN 800-1 is processed by the processing device 812-1 in the access control device 810-1 (step S8
00, S801), the sender I in the ICS user frame
The accounting condition field is specified from the CS user address and the receiver ICS user address (step S81).
0), refer to the charging condition from the field to specify the charging method for network charging. Since the set value in this case is “2” indicating incoming billing in the metered billing method, the billing process is interrupted in the access control device 810-1 in which the LAN 800-1 is accommodated (step S820). The access control device 810-4, in which the LAN 800-3 is accommodated, refers to the conversion table when receiving the ICS frame. In this case, since “2” is set for the network charging to be the incoming charging in the pay-as-you-go charging method, charging information is generated (for example, charging unit price “1” is generated as two-time charging information), and charging is performed. The information is transmitted to the accounting server 840 as an information frame. Billing server 8
The access control device 810-
In accordance with the billing information of the billing information frame received from 4, the network billing counter of LAN 800-3 of billing information database 842 is added.

(4) Communication Example of Fixed-Charge Billing Method of Network Billing and Incoming Billing: A case where company X performs communication within company X will be described. In this case, the charging method in the communication between the LAN 800-1 and the LAN 800-2 is such that the network charging is a flat-rate charging method and all charges are set to the LAN.
This is a case where the charge is placed on 800-2 and information billing is not performed.

<< Preparations for Communication >> LAN 80
0-1 and the LAN 800-2 are connected to the respective access control devices 810-1 and 810-5.

<< Preparation for Charging >> LA for Communication
The accounting conditions of N800-1 and LAN 800-2 are registered in conversion table 813-1. The registration in the conversion table 813-1 includes the originating ICS network address, the sender ICS
Charging conditions are set based on the user address, the incoming ICS network address, and the recipient ICS user address. The network billing is set to “0” as a value indicating the flat-rate billing method, and the charge burden of the flat-rate fee definition table 843 is set to “2” of the incoming billing to indicate the billing burden. Since charging for information is not performed, the charging condition in the information charging condition of the conversion table 813-1 is "0" indicating non-charging.
Set. In the conversion table for the access control device 810-5 accommodating the LAN 800-2, "0" indicating the flat-rate charging method is set.

<< Description of Charging Operation >> The ICS user frame transmitted by the terminal having the ICS network address “0012” connected to the LAN 800-1 is processed by the processing device 812-1 in the access control device 810-1 (step S8
00, S801), the sender I in the ICS user frame
The accounting condition field is specified from the CS user address and the receiver ICS user address (step S81).
0), refer to the charging condition from the field to specify the charging method for network charging. In this case, since “0” indicating the flat-rate billing method is set, billing processing such as billing information generation is not performed (Step S).
820). The charge processing is the flat rate charge definition table 8.
43. That is, the flat-rate charge definition table 843
Is set to "2" which indicates incoming billing, and the fee is charged to the LAN 800-2.

(5) Communication example of pay-as-you-go billing method for information billing and outgoing billing: A case where company X communicates with company Y will be described. The billing method in the communication between the LAN 800-1 and the LAN 800-3 is a case where information billing is performed without charging the network. The charge is for the case where the sender is the LAN 800-1.

<< Preparations for Communication >> LAN80
0-1 and the LAN 800-3 are connected to the respective access control devices 810-1 and 810-4.

<< Preparation for Performing Charging >> As the charging condition in the network charging condition, “0” indicating non-charging is set in the conversion table 813-1. Because we don't charge you,
No billing unit is set. As information billing conditions, “3” indicating caller billing is set by pay-as-you-go billing, and the billing unit price is set to “2”.

<< Explanation of Charging Operation >> The ICS user frame transmitted by the terminal having the ICS network address “0012” connected to the LAN 800-1 is sent to the processing unit 812-1 in the access control unit 810-1 (step S8
00, S801), the sender I in the ICS user frame
A charging condition field is specified from the CS user address and the receiver ICS user address (step S81).
0). In order to specify a charging condition for network communication from the field, the charging condition is referred to. In this case, since "0" indicating non-charging is set, the charging process for the network is not performed (step S82).
0). Next, in order to specify a charging condition relating to information charging, the charging condition of the information charging condition is referred to. in this case,
Since "1" indicating the pay-as-you-go billing of the caller is set, the pay-as-you-go billing is performed. In addition, a charging unit price indicating the weighting of the metered charging is referred to. In this case, the set value of the charging unit price is “2”. Next, billing information for each ICS user frame is generated based on the obtained information (for example, billing unit price “2” is generated as two billing information).
Then, the accounting information is transferred to the accounting server 840 as an accounting information frame F51. The billing processing device 841 in the billing server 840 that has received the billing information sends the ICS network address, sender I
The information storage field of the charging information database 842 is specified based on the CS user address, the receiving ICS network address, and the receiver ICS user address, and the network charging counter there is added according to the charging information of the charging information frame F51.

(6) Example of communication of pay-as-you-go billing system of information billing and incoming billing: A case where company X communicates with company Y will be described. The billing method in the communication between the LAN 800-1 and the LAN 800-3 indicates a case where information billing is performed without network billing. The charge burden is L
This is the case of AN800-3.

<< Preparations for Communication >> LAN80
0-1 and the LAN 800-3 are connected to the respective access control devices 810-1 and 810-4.

<< Preparation for Charging >> For the charging condition in the network charging condition, "0" indicating non-charging is set in the conversion table 813-1. Because we don't charge you,
No charge unit price is set. As information billing conditions, “2” indicating payee billing by pay-as-you-go billing is set, and the billing unit price is set to “2”.

<< Explanation of Charging Operation >> The ICS user frame transmitted by the terminal having the ICS network address “0012” connected to the LAN 800-1 is processed by the processing device 812-1 in the access control device 810-1 (step S8
00, S801), the sender I in the ICS user frame
A charging condition field is specified from the CS user address and the receiver ICS user address (step S81).
0). In order to specify a charging condition for network communication from the field, the charging condition is referred to. In this case, since "0" indicating non-charging is set, the charging process for the network is not performed (step S82).
0). Next, a billing condition of the information billing condition is referred to in order to specify a billing condition relating to the information billing. In this case, since "2" indicating the pay-as-you-go billing of the receiver is set, the metered billing is performed. . In addition, reference is made to a charging unit price indicating the weight of the pay-as-you-go charging. In this case, “2” is set. Next, based on the obtained information, I
The charging information is generated for each CS user frame (for example, the charging unit price “2” is generated as two-time charging information), and the charging information is stored as a charging information frame F51 in the charging server 84.
Transfer to 0. The billing processing device 841 in the billing server 840 that has received the billing information sends the calling ICS network address, the sender ICS user address, the called ICS network address, and the receiver I from the billing information frame F51.
Charging information database 842 based on CS user address
Is specified, and a network charging counter there is added according to the charging information of the charging information frame.

(7) An example in which a charge condition is not registered in a conversion table in advance in a pay-as-you-go communication method of information charge and outgoing charge: A case where a company X communicates with a company Y will be described. The billing conditions for the communication between the LAN 800-1 and the LAN 800-4 are the same as described above, but in this case, the value that defines the billing condition is a conversion table 813- of the access control 810-1 to which the LAN 800-1 is connected. 1 is not registered.

<< Preparations for Communication >> LAN80
0-1 and the LAN 800-4 are connected to the respective access control devices 810-1 and 810-2.

<< Preparation for Charging >> In this case, since there is no charging condition registered in the conversion table 813-1, the LAN 8
There is no need for advance preparation in the access control device 810-1 accommodating 00-1. The conversion table of the access control device 810-2 accommodating the LAN 800-4 includes LAN80.
Set the billing conditions when 0-4 is received. As the charging condition in the network charging condition, “0” indicating non-charging is set in the conversion table. Because we don't charge you,
The charge unit price is not set. As the information billing condition, “3” indicating caller billing by pay-as-you-go billing is set, and the billing unit price is set to “1”.

<< Explanation of Charging Operation >> The ICS user frame transmitted by the terminal having the ICS network address “0012” connected to the LAN 800-1 is sent to the processing device 812-1 in the access control device 810-1 (step S8
00), an attempt is made to specify a charging condition field using the sender ICS user address and the receiver ICS user address in the ICS user frame from the conversion table 813-1 (step S801). Since there is no field indicating the condition, an inquiry is made to the access control device 810-4 accommodating the called user based on the called party's ICS user address of the called user (step S802). Access control device 810-4
The access control device 8
Referring to the conversion table in 10-4, the accounting condition is returned to the access control device 810-1. Access control device 81
The billing condition acquired by 0-1 from the access control device 810-4 is registered in the temporary conversion table 814-1 (step S803). After that, the processing device 812-1 refers to the billing condition in order to identify the billing condition for network communication from the billing condition (step S810).
In this case, since "0" indicating that the network charging is non-charging is set, the charging processing relating to the network is not performed (step S820).

Next, in order to specify a charging condition relating to information charging, the charging condition of the information charging condition is referred to. In this case, since "1" indicating the pay-as-you-go billing of the caller is set, the pay-as-you-go billing is performed. Also, the charge unit price indicating the weight of the pay-as-you-go billing is referred to. In this case, the set value of the charge unit is “1”, and the weight of the charge is known. Based on the obtained information, billing information for each ICS user frame is generated (for example, the billing unit price “1” is changed to 1).
The accounting information is generated as accounting information of the frequency), and the accounting information is transferred to the accounting server 840 as an accounting information frame F51.
The billing processing device 841 in the billing server 840 that has received the billing information specifies the information storage field of the billing information database 842 from the billing information frame F51 based on the originating ICS network address and the recipient ICS user address, and charges the information there. Set the counter to the charging information frame F
51 is added according to the accounting information.

Embodiment 9 (ICS frame database server): FIGS. 28 and 29 show ICS frame database servers 950 and 9 which are one of ICS network servers.
60 is an example of the ICS 900 including the ICS 900, and the ICS frame database servers 950 and 960 store data or retrieve stored data based on a request timing of a terminal using the ICS 900 (hereinafter, referred to as an “ICS using terminal”). To the requester. The ICS frame database servers 950 and 960 respectively include the processing devices 951 and 961, the storage information management tables 952 and 962,
BOX 953 and 963. Processing device 9
51 and 961 receive the ICS user frame from the ICS using terminal, and refer to the use request of the ICS frame database server explicitly indicated by the ICS using terminal, and
An instruction to store the S user frame is issued to the storage information management tables 952 and 962, and an instruction to store information is sent to the boxes 953 and 963. The storage information management tables 952 and 962 receive the instructions of the processing devices 951 and 961, and
The items to be managed, such as the communication partner address and the index number of the stored information, are stored for each CS using terminal. BOX95
3 and 963 receive the instructions of the processing devices 951 and 961, and store the management number, user information, and the like of the information stored for each ICS using terminal to be accommodated. Hereinafter, preparation items for using the ICS frame database servers 950 and 960 and communication examples thereof will be described.

<< Preparation Items >> The VAN-1 operator is the company X
In order to enable information storage of a terminal having an ICS user address “0012” connected to the LAN 900-1 of the user, information on the user (the ICS user address “00” in this example) is stored in the storage information management table 952 and the BOX 953 in advance.
12 "). Similarly, the VAN-3 operator also stores information on the terminal having the ICS user address" 0034 "connected to the LAN 900-2 of the company X in advance. Storage information management table 962 and BOX 9
Information about the user (such as the ICS user address “0034” in this example) is registered in 63. The ICS user transmits an ICS user frame F60 as shown in FIG. This ICS user frame F
Reference numeral 60 stores, in the user control unit, a use request identifier (an identifier explicitly indicating that the ICS frame database server is used) and an information operation identifier (an ICS frame database server) that use the ICS frame database server. (An identifier that explicitly indicates the operation of the information). Note that, in this embodiment, the user
By adding a usage request identifier and an information operation identifier to the user control unit of the CS user frame F60, the I
Although the CS frame database server use request is realized, a use request identifier and an information operation identifier can be added to the ICS user data part.

<< Communication Example >> (1) Communication Example-1 (Operation of ICS Frame Database Server on Transmission Side): A terminal having an ICS user address “0012” connected to the LAN 900-1 of the company X is
The communication using the ICS frame database server is performed to the terminal having the ICS user address “0034” connected to the LAN 900-2 of the company X. FIG. 31 is a flowchart showing the operation.

The originator terminal is a user control unit that uses the ICS frame database server 950 and has a use request identifier (calling side storage user management number: a code arbitrarily assigned by the user using the ICS. ICS user frame F6 to which an index number for operating the existing information and an information operation identifier (scheduled transfer time, information storage, information transfer, information deletion, information end, etc.) are added.
0 is sent to the ICS 900. The received access control device 910-1 (step S900) receives the processing device 912
The use request identifier of the ICS user frame F60 is referred to by -1 (step S901). If the number of the use request identifier set by the sender terminal exists, the ICS user frame F60 is transferred to the processing device 951. The processing device 951 that has received the ICS user frame F60 refers to the use request identifier and the information operation identifier (step S91).
0), perform the operation indicated by the information operation identifier.

When the information storage is indicated, the processing unit 95
1 receives the use request identifier (calling side storage user management number) and the information operation identifier (information storage) of the ICS user frame F60 sent from the sender terminal, and corresponds to the sender ICS user address of the frame. Then, the receiver ICS user address and the use request identifier are stored in the storage information management table 952, and the ICS user frame is stored in the BOX 953 (step S911). The ICS user frame to be stored depends on a plurality of I
This operation is performed until the last frame of the ICS user frame to be stored is indicated by the information operation identifier (end of information) indicated in the ICS user frame F60 because the operation is divided into CS user frames and transmitted (step S).
912).

If the scheduled transfer time is indicated (step S 913), the processing device 951 transmits the use request identifier (calling side stored user management number) and the information operation identifier of the ICS user frame F 60 transmitted from the caller terminal. (Scheduled transfer time), the designated time is stored in the storage information management table 952 (step S914), and the processing device 951 constantly monitors the scheduled transfer time to determine that the time has come. Transfers the information stored from the BOX 953 to the receiver terminal (step S
915).

When the information transfer is indicated, the processing unit 95
1 receives the use request identifier (calling side stored user management number) and information operation identifier (transfer request) of the ICS user frame F60 sent from the caller terminal,
The information (ICS user frame) stored in the BOX 953 is transmitted to the receiver terminal (step S916).
When the information erasure is indicated, the processing device 951
ICS user frame F60 sent from the sender terminal
Receiving the use request identifier and the information operation identifier (information deletion) of the storage information management table 952 and the BOX
953 to delete the stored information (step S
917).

(2) Communication example-2 (operation of ICS frame database server on receiving side): LAN 900 of company X
The terminal having the ICS user address “0034” connected to the LAN-2 is connected to the LAN 900-1 of the company X.
The information from the terminal having the CS user address “0012” is received using the user BOX. FIG. 32 is a flowchart showing the operation.

[0106] The sender terminal sends a message to the user control unit to the receiver I
A use request identifier using the CS frame database server 960 (called-side storage user management number: a code arbitrarily assigned by the user using the ICS, which is an index number when the ICS user operates the stored information. ) And an ICS user frame F60 to which an information operation identifier is added
To the ICS 900. The corresponding ICS user frame F60 is transferred in the ICS 900 to the access control device 910-5 in which the receiver terminal is accommodated (step S60).
920), the processing device 912-5 refers to the use request identifier of the ICS user frame F60 (step S92).
1) If the number of the use request identifier set by the caller terminal exists, the ICS user frame F60 is transferred to the processing device 961.

The processing device 961 that has received the ICS user frame F60 receives the information operation identifier (information storage, information transfer, information deletion, information end) of the ICS user frame F60.
Is checked (step S930). If the information is stored, the sender ICS user address of the corresponding frame and the receiver ICS
The use request identifier is stored in the storage information management table 962 in association with the user address, and the ICS user frame is stored in the BOX.
963 (step S931). I to be stored
Since the CS user frame is transmitted by being divided into a plurality of ICS user frames from the sender, this operation is performed by the information operation identifier (information end) indicated in the ICS user frame F60.
Is executed until the last frame of the ICS user frame to be stored is indicated (step S932). The processing device 962 attaches the receiving side stored user management number to the ICS frame database server 960 at the timing agreed with the receiver terminal in advance (for example, at 12:00), indicating that the information addressed to the receiver terminal exists in the ICS frame database server 960. Is notified (step S933). Upon receiving the notification, the receiver terminal transmits the ICS user frame F60 in which the use request identifier and the information operation identifier (information transfer) are set, to the access control device 91
0-5 to the ICS frame database server 9
60 transmits the user information stored in the BOX 963 to the receiver terminal (step S936), and the receiver terminal
The information (ICS user frame) stored in the CS frame database server 960 is received. The processing device 961 receives an ICS user frame F60 from the receiver terminal.
When a frame indicating the use request identifier and the information operation identifier (information deletion) is received, the information is deleted from the storage information management table 962 and the BOX 963 (step S93).
7).

(3) Communication example-3 (when the receiving side cannot temporarily receive): A terminal having the ICS user address “0012” connected to the company X LAN 900-1 is connected to the company X LAN 900-2. When communication is performed with a terminal having the ICS user address “0034” that has been entered, the information addressed to the receiver terminal is stored in the ICS frame database even if the connection to the receiver terminal or the LAN 900-2 of the company X cannot be temporarily established. The data is temporarily stored in the server 960, and communication is performed in a state where connection is possible. The operation is shown in FIG.
This will be described with reference to the flowchart of FIG.

The originator terminal stores the information in the ICS frame database server 960 once even in the case where communication with the receiver terminal is impossible in the user control unit, so that the information operation identifier for executing the distribution of the information is stored. I)
Send CS user frame F60 to ICS 900.
The corresponding ICS user frame F60 is transmitted to the access control device 910-5 in which the receiver terminal is accommodated.
The access control device 910-5 receives the ICS user frame F60 (step S940), and the processing device 912-5 checks the presence of the use request identifier inside the ICS user frame F60 (step S941).
Referring to the information operation identifier (stored once) of the CS user frame F60 (step S942), if there is a request for storage once, it is determined whether the receiving terminal is in a communicable state,
If possible, the corresponding ICS user frame F60 is transmitted to the receiving terminal (step S950). If not possible, the corresponding ICS user frame F60 is transferred to the processing device 961 of the ICS frame database server 960.
Next, the processing device 961 sends the corresponding ICS user frame F
The sender ICS address, the receiver ICS address, and the use request identifier of the 60 are stored in the storage information management table 962,
The CS user frame is stored in the BOX 963 (step S951).

Since the ICS user frame to be stored is divided into a plurality of ICS user frames from the originator and transmitted, this operation is to be performed according to the information operation identifier (end of information) indicated in the ICS user frame F60. IC
The process is executed until the last frame of the S user frame is indicated (step S952). The processing device 912-5 constantly monitors the communication state with the receiver terminal, and when the receiver terminal becomes able to receive, notifies the processing device 961 that the corresponding receiver communication state is possible. Processing unit 96 that has been notified
1 notifies the receiver terminal that there is information addressed to the receiver terminal to the ICS frame database server 960 at a timing agreed with the receiver terminal in advance (for example, after 5 minutes) (step S953). Upon receiving the notification, the receiver terminal transmits an ICS user frame F60 in which a use request identifier (ICS storage user management number) and an information operation identifier (information transfer) are set to the access control device 910-5,
The ICS frame database server 960 is a BOX 9
The user information stored in 63 is transmitted to the receiver terminal (step S956), and the receiver terminal receives the information stored from the ICS frame database server 960. When the processing device 961 receives a frame indicating the use request identifier and the information operation identifier (information deletion) of the ICS user frame F60 from the receiver terminal, it deletes the information from the storage information management table 962 and the BOX 963 (step S957).

Example-10 (X.25, FR, ATM,
Transmission by satellite communication and telephone line, ISDN line, CATV
Line, satellite line, accommodating IPX frame): I of the present invention
The format of data from the user in CS is RFC79
It is not limited to ICS user frames conforming to RFC 1883 or RFC1883, but can accommodate telephone lines, ISDN lines, CATV lines, satellite lines, and IPX. Further, the relay network of the ICS network frame in the ICS network is also X. 25, FR, ATM, satellite communication, etc. In the present invention, the AT
The M exchange includes a cell relay exchange, and the ATM network includes a cell relay network.

FIGS. 34 to 37 show the ICS1000 of the present invention.
Figure 3 shows an example of interface conversion in
Access control devices 1010-1 and 1010-2, IC
S frame interface network 1050; 25 nets 10
40, FR network 1041, ATM network 1042, satellite communication network 1043, X. 25 / ICS network frame converters 1031-1 and 1031-2, FR / ICS network frame converters 1032-1 and 1032-2,
ATM / ICS network frame converter 1033-
1 and 1033-2, satellite / ICS network frame converters 1034-1 and 1034-2, telephone line converters 1030-1 and 1030-2, ISDN line converters 1029-1 and 1029-1, CATV line converter 1
028-1 and 1028-2, satellite link converter 1027
-1 and 27-2, IPX conversion units 1026-1 and 10-2
26-2.

ICS frame interface network 1050
Is an IC that conforms to RFC791 or RFC1883
This is a relay network that transfers S network frames in the same format. X. 25 network 1040 is X.25. 25 is a relay network for transferring frames in the format of X.25. X.25 for converting and inverse converting to a frame of the 25 format. 25 / ICS network frame converter 10
31-1 and 1031-2 are provided in the input / output unit. F
The R network 1041 is a relay network for transferring a frame relay format frame, and is an F network for converting and inversely converting an ICS network frame into a frame relay format frame.
R / ICS network frame conversion units 1032-1 and 1032-2 are provided in the input / output unit. ATM network 10
Reference numeral 42 denotes a relay network for transferring an ATM frame.
The input / output unit has ATM / ICS network frame conversion units 1033-1 and 1033-2 for converting and inversely converting the ICS network frame into the ATM format frame. The satellite communication network 1043 is a relay network for transferring information using satellites.
34-1 and 1034-2 are provided in the input / output unit. The telephone line conversion units 1030-1 and 1030-2 convert and reverse functions corresponding to the physical layer and the data link layer (the first and second layers of the OSI communication protocol) between the telephone line and the access control device. It has a function to convert. ISD
The N line converters 1029-1 and 1029-1 are ISD
It has a function of converting and inversely converting a function corresponding to a physical layer and a data link layer between the N line and the access control device. CATV line converters 1028-1 and 1028-
Reference numeral 2 has a function of converting and inversely converting a function corresponding to a physical layer and a data link layer between the CATV line and the access control device. Satellite line converters 1027-1 and 1
No. 027-2 has a function of converting and inversely converting a function corresponding to a physical layer and a data link layer between the satellite line and the access control device. The IPX conversion units 1026-1 and 1026-1 have a function of converting and inversely converting a function corresponding to a physical layer and a data link layer between the IPX and the access control device.

(1) X. Access control device 1010-1 and access control device 1010 via the 25 network 1040
The operation in the case where communication is performed with -2 will be described. The access control device 1010-1 converts the ICS network frame into the X.110 format. 25 to the exchange 1013-11-1. X. 25
X. in the exchange 1013-1-1. 25 / ICS network frame conversion section 1031-1, the access control apparatus 1
The ICS network frame received from X.010-1 is transmitted to X.010 as shown in FIG. Convert to 25 format frames. And X. 25 switch 1013-1-1, X.25 switch. 2
X.5 format frames. 25 network 1040.
X. X.25 sent from the X.25 exchange 1013-1-1. 25
The format frame is X. 25 network 1040,
X. It reaches the 25th switch 1013-1-2. Next, X.
X.25 in the X.25 switch 10131-2. 25 / ICS network frame conversion section 1031-2 receives the received X.25.
The frame of the 25 format is inversely converted to the format of the ICS network frame and transmitted to the access control device 1010-2. The access control device 1010-2 receives the ICS network frame. Access control device 1010-2
To X. ICS sent to exchange 25
Similarly, 1000 network frames are transferred to the access control device 1010-1.

(2) Access control measures 1010-1 and access control device 1010-2 via FR network 1041
The operation when communication is performed between the server and the server will be described. The access control device 1010-1 sends out an ICS network frame. The FR / ICS network frame conversion section 1032-1 in the FR exchange 10132-1 converts the ICS network frame received from the access control device 1010-1 into a frame in the FR format as shown in FIG. Then, the FR exchange 10132-1 sends the frame in the FR format into the FR network 1041, and the FR exchange 1
The frame in the FR format sent from 0123-1 is FR
The data is transferred through the network 1041 and reaches the FR exchange 101322. FR / ICS in FR exchange 10132-2
The network frame conversion unit 1032-2 inversely converts the received FR format frame into an ICS network frame format and sends the ICS network frame format to the access control device 1010-2. The access control device 1010-2 receives the ICS network frame. Access control device 1010-
Similarly, the ICS network frame sent to FR switch 10132-2 from access control device 1
010-1.

(3) The access control device 1010-1 and the access control device 1010-
An operation in the case of performing communication with the communication device 2 will be described. The access control device 1010-1 sends the ICS network frame to the ATM switch 10133-1. The ATM / ICS network frame conversion unit 1033-1 in the ATM exchange 10133-1 is connected to the access control device 1010.
ICS network frame received from -1
0 is converted into an ATM frame. AT
The M exchange 10133-1 converts the ATM frame into an AT
The packet is sent out to the M network 1042, and the ATM switch 10133-1
The ATM frame transmitted from the ATM network 104
2 and arrives at the ATM exchange 10133-2. The ATM / ICS network frame conversion unit 1033-2 in the ATM exchange 10133-2 reversely converts the received frame in the ATM format into the ICS network frame format and sends it to the access control device 1010-2. The access control device 1010-2 receives the ICS network frame. Access control device 1010-
ICS sent from ATM 2 to ATM switch 10133-2
The network frame is similarly transferred to the access control device 1010-1.

(4) Access control measures 1010-1 and access control device 1010 via satellite communication network 1043
The operation in the case where communication is performed with -2 will be described. The access control device 1010-1 sends the ICS network frame to the satellite transceiver 1014-1. The satellite / ICS network frame converter 1034-1 in the satellite receiver / transmitter 1034-1 has an access control device 1010-
1 is converted into an interface in the satellite communication network 1043. Next, the satellite receiver / transmitter 1014-1 transmits the ICS network frame converted to the interface in the satellite communication network 1043 to the satellite communication network 1043, and
The ICS network frame transmitted from 134-1 is transferred in the satellite communication network 1043,
134-2 is reached. Satellite / ICS network frame converter 1034 in satellite receiver / transmitter 10134-2
2 reversely converts the received ICS network frame converted to the interface in the satellite communication network 1043 and sends it to the access control device 1010-2. The access control device 1010-2 receives the ICS network frame. The ICS network frame transmitted from the access control device 1010-2 to the satellite receiver / transmitter 10134-2 is similarly transferred to the access control device 1010-1.

(5) User 1060 connected to telephone line conversion section 1030-1 of access control apparatus 1010-1
-1 originates and the user 1060-2 connected to the telephone line conversion unit 1030-2 of the access control apparatus 1010-2.
The operation in the case where communication is performed with a telephone line interface between the server and the server will be described.

The user 1060-1 applies for a telephone line connection to the VAN operator. VAN operator is user 1060-1
Access control device 1010-1 that connects
CS logic terminal ICS network address "772
Next, the VAN operator determines in the conversion table 1013-1 of the access control device 1010-1 that the originating ICS network address is "7721" and the sender telephone number is "03."
-5555-1234 "and the recipient telephone number" 06-55 "
55-9876 ", the incoming ICS network address" 5521 ", and information such as the request type, etc. This example shows an example in which the request type" 5 "is a telephone line connection. -2 conversion table 1
The outgoing ICS network address “552”
1 ", the sender telephone number" 06-5555-9876 ",
Recipient telephone number "03-5555-1234", incoming call I
The information such as the CS network address “7721” and the request type is set.

The user 1060 enters the telephone number “06-555”
5-9876 ". The telephone line conversion unit 1030-
1 converts the received telephone number into a reading format of the processing device 1012-1 and sends it to the processing device 1012-1. I
The processing device 1012-1 which has received the telephone number information from the telephone line conversion unit 1030-1 of the CS network address "7721" refers to the request type of the transmission ICS network address "7721" in the conversion table 1013-1,
It recognizes that it is a telephone line connection and receives the incoming telephone number "06".
Read the incoming ICS network address "5521" from "-5555-9876".
0-1 indicates that the incoming ICS network address is "552".
1 ", the originating ICS network address is" 7721 "
And an ICS network frame having a network data section in which information for notifying that there is an incoming call is created.
It is sent out to the network in S1000. The ICS network frame transmitted from the access control device 1010-1 is transferred in the ICS1000 network,
The access control device 1010-2 is reached. The access control device 1010-2 having received the ICS network frame having the network data portion in which the information for notifying that there is an incoming call is transmitted from the telephone line conversion unit 1030-2 of the ICS network address “5521” to the user 1060-2. Sends a signal to notify the incoming call. Then, the user 1060-2 sends a response signal.

Upon receiving the response signal, the telephone line conversion unit 1030-2 converts the signal into a format that can be transferred within the ICS1000 network. Access control device 1010-2
Sets the incoming ICS network address to “7721”,
Creates an ICS network frame having a network control unit whose originating ICS network address is set to "5521" and a network data unit that describes information for notifying that a call has been answered, and sends it out to the ICS network. I do. Access control device 1010-
ICS network frame sent from ICS2
Access control device 1010
Reaches -1. Access control apparatus 1010-2 having received an ICS network frame having a network data portion describing information for transmitting a response
Sends a signal for notifying a response from the telephone line conversion unit 1030-1 of the ICS network address "7721" to the user 1060-1. As a result, the user 1060-1 and the user 1060-2 start full-duplex communication using analog signals (such as voice), and the user 1
060-1 transmits an analog signal. Upon receiving the analog signal, the telephone line conversion unit 1030-1 converts the analog signal into an analog information format that can be transferred in the ICS network.

The access control device 1010-1 transmits the incoming call I
CS network address "5521", originating ICS
An ICS network frame having a network control section whose network address is set to “7721” and a network data section describing analog information is created, and transmitted to the ICS 1000 network. The ICS network frame transmitted from the access control device 1010-1 is transferred in the network of the ICS 1000 and reaches the access control device 1010-2.
I with a network data part describing analog information
The access control device 1010-2 that has received the CS network frame transmits the ICS network address “552”.
The 1 "telephone line conversion unit 1030-2 sends the analog information to the user 1060-2 as an analog signal converted to a telephone line interface.
The analog signal transmitted from 0-2 is transferred to the user 1060-1 in the same procedure.

(6) I of access control apparatus 1010-1
User 10 connected to SDN line converter 1029-1
61-1 originates a call and the I of the access control device 1010-2.
User 10 connected to SDN line converter 1029-2
The operation in the case of performing communication with the interface 61-2 over the interface of the ISDN line will be described.

The user 1061-1 sends the IS to the VAN operator.
Application for DN line connection, VAN operator is user 1061
Access control device 1010-1 to which the ICS network terminal “7” is connected, and the ICS network address “7”
722 ". The VAN operator then adds the outgoing ICS to the conversion table 1013-1 of the access control device 1010-1.
Information such as a network address “7722”, a sender ISDN number “03-555-1111”, a receiver ISDN number “06-5555-2222”, an incoming ICS network address “5522”, and a request type is set. In this example, an example is shown in which the request type “6” is set to the ISDN line connection. Similarly, the access control device 101
In the conversion table 1013-2 of 0-2, the originating ICS network address “5522” and the sender ISDN number “06-5”
555-2222 "Recipient ISDN number" 03-555
5-1111 ", incoming ICS network address" 7
722 "and information such as a request type.

The user 1061-1 has the ISDN number "06"
−5555 2222 ″. The ISDN line conversion unit 1029-1 converts the received ISDN number into the processing device 1
To the reading format of 012-1 and processing device 1012
Send to 1. ICS network address "772
The processing apparatus 1012-1 having received the information of the ISDN number from the ISDN line conversion unit 1029-1 of "2", the originating ICS network address "77" of the conversion table 1013-1.
Recognizing that it is an ISDN line connection by referring to the request type of "22", the incoming ISDN number "06-5555-22"
22 "to the incoming ICS network address" 552
2 ". The access control device 1010-1 receives the incoming call I
CS network address "5522", originating ICS
An ICS having a network control unit in which the network address is set to "7722" and a network data unit in which information for notifying that there is an incoming ISDN is described.
A network frame is created and transmitted to the ICS 1000 network.

The ICS network frame transmitted from the access control device 1010-1 is transferred in the ICS 1000 and reaches the access control device 1010-2.
The access control device 1010-2 having received the ICS network frame having the network data portion in which the information for notifying that the incoming call has been received is sent to the ISDN line conversion unit 102 of the ICS network address “5522”.
9-2 sends a signal for notifying the user 1061-2 of the incoming call. Then, the user 1061-2 sends a response signal. ISDN line converter 1029-2
Receives the response signal and converts it into a format that can be transferred inside the ICS 1000. The access control device 1010-2 includes:
An ICS network frame having a network control unit in which the incoming ICS network address is set to "7722" and an outgoing ICS network address set to "5522", and a network data unit in which information for reporting that there is an ISDN response is described. And create
The packet is sent out to the ICS 1000 network.

The ICS network frame transmitted from the access control device 1010-2 is transferred in the ICS 1000 and reaches the access control device 1010-1.
The access control device 1010-2 having received the ICS network frame having the network data part in which the information for notifying that the response has been received is sent to the ISDN line conversion unit 10 having the ICS network address “7722”.
29-1 sends a signal for notifying the user 1061-1 of a response. Thereby, the user 1061
-1 and the user 1061-2 are digital signals (voice, etc.)
Starts, and the user 1061-1 sends out a digital signal. ISD that received analog signal
The N-line converter 1029-1 converts the analog signal into ICS1
000 is converted into a transferable digital information format.

The access control device 1010-1 communicates with the incoming call I
An ICS network frame having a network control unit with the CS network address “5522” and the originating ICS network address set to “7722” and a network data unit describing digital information is created and transmitted to the ICS 1000. The ICS network frame transmitted from the access control device 1010-1 is transferred in the ICS 1000 and reaches the access control device 1010-2. Upon receiving the ICS network frame having the network data part describing the digital information, the access control device 1010-2 converts the digital information into an ISDN line interface in the ISDN line conversion unit 1029-2 of the ICS network address “5522”. It is sent to the user 1061-2 as a digital signal. Conversely, the digital signal transmitted from the user 1061-2 is also transmitted to the user 1 by the same procedure.
061-1.

(7) C of access control apparatus 1010-1
CATV broadcasting station 1062-1 connected to ATV line conversion section 1028-1 and C of access control apparatus 1010-2.
User 10 connected to ATV line converter 1028-2
An operation in the case of performing communication with the CATV line 62-2 using a CATV line interface will be described.

The CATV broadcasting station 1062-1 applies to the VAN operator for a CATV line connection with the user 1062-2. The VAN operator specifies the access control device 1010-2 to which the user 1062-2 is connected, and determines the ICS network address “5523” of the ICS logical terminal. Next, the VAN operator sets the access control device 101
The information such as the incoming ICS network address "5523" and the request type is set in the corresponding part of the outgoing ICS network address "7723" in the conversion table 1013-1 of 0-1. This example shows an example in which the request type “7” is a CATV line connection. Similarly, the access control device 101
The information such as the originating ICS network address “5523”, the terminating ICS network address “7723”, and the request type is set in the conversion table 1013-2 of 0-2.

[0131] The CATV broadcasting station 1062-1 transmits a CATV analog signal. Upon receiving the CATV analog signal, the CATV line converter 1028-1 converts the CATV analog signal into an information format that can be transferred within the ICS 1000. The access control device 1010-1 receives the incoming call I
CS Network Address is "5523", Calling ICS
An ICS network frame having a network control section whose network address is set to “7723” and a network data section describing CATV information is created and transmitted to the ICS 1000. Access control device 1
The ICS network frame transmitted from 010-1 is transferred in the ICS 1000, and the access control device 1
010-2 is reached. Upon receiving the ICS network frame having the network data part in which the CATV information is described, the access control device 1010-2 converts the CATV line conversion unit 1 of the ICS network address “5523”.
At 028-2, the CATV information is transmitted to the user 1062-2 as a CATV analog signal converted to a CATV line interface. Conversely, user 1062-
2 is transmitted to the CATV broadcasting station 1062-1 in the same procedure.

(8) User 1063 connected to satellite channel converter 1027-1 of access control apparatus 1010-1
A description will be given of an operation in the case where communication is performed by an interface of a satellite line between -1 and a user 1063-2 connected to the satellite line conversion unit 1027-2 of the access control device 1010-2.

The users 1063-1 and 1063-2 are
Users 1063-1 and 1063- are provided to the VAN operator.
Apply for a satellite line connection between the two. The VAN operator connects the user 1063-1 to the access control apparatus 101.
0-1 is specified, and the ICS network address “7724” of the ICS logic terminal is determined. Similarly, the user 106
The access control device 1010-2 connecting the 3-2 is specified, and the ICS network address “5”
524 ". The VAN operator then transmits the ICS of the conversion table 1013-1 of the access control device 1010-1.
Incoming IC in the corresponding part of network address "7724"
The information such as the S network address “5524” and the request type is set. This example shows an example in which the request type “8” is a satellite line connection. Similarly, information such as the originating ICS network address “5524”, the terminating ICS network address “7724”, and the request type is set in the conversion table 1013-2 of the access control device 1010-2.

The user 1063-1 sends out a satellite signal. The satellite line converter 1027-1 having received the satellite signal of the satellite line interface converts the satellite signal into an ICS100.
0 is converted into a transferable information format. The access control device 1010-1 sets the incoming ICS network address to “5524” and the outgoing ICS network address to “7”.
724 ", and an ICS network frame having a network data section describing information of satellite signals is created and sent to the ICS 1000. The I / S sent from the access control device 1010-1 is created.
The CS network frame is transferred in the network of the ICS 1000 and reaches the access control device 1010-2. The access control device 1010-2 having received the ICS network frame having the network data portion in which the satellite signal information is described, the satellite control unit 1027-2 of the ICS network address “5524” converts the satellite signal information into the satellite line information. The signal is transmitted to the user 1063-2 as a satellite signal converted into an interface. Conversely, the satellite signal of the interface of the satellite line transmitted from the user 1063-2 is also transmitted to the user 1063 by the same procedure.
-1.

(9) The terminal having the IPX address “9901” of the user 1064-1 and the I
IPX between the terminal having the PX address “8801”
The operation in the case of performing communication with the interface of FIG.
The users 1064-1 and 1064-2 provide the VAN operator with a terminal having the IPX address “9901” of the user 1064-1 and the IPX address “8” of the user 1064-2.
Apply for an IPX connection with the terminal having “801”. The VAN operator connects the user 1064-1 to the access control device 1010-1 and the IPX conversion unit 1026.
1 ICS network address “7725” is determined. Similarly, the access control device 1010-2 for connecting the user 1064-2 and the IX of the IPX conversion unit 1026-2.
The CS network address “5525” is determined. Next, the VAN operator transmits the originating ICS network address “7” in the conversion table 1013-1 of the access control device 1010-1.
725 ”is added to the sender IPX address“ 990 ”.
1 ", recipient IPX address" 8801 ", incoming ICS
Information such as the network address “5525” and the request type is set. This example shows an example in which the request type “9” is set to the IPX connection. Similarly, the access control device 1
The sender IPX address “8801” and the receiver IPX address “990” are added to the corresponding part of the transmission ICS network address “5525” in the conversion table 1013-2 of 010-2.
1 ", incoming ICS network address" 7725 ", and information such as request type are set.

The IPX address “9” of the user 1064-1
The terminal having “901” sets the sender IPX address to “99”.
01 "and an IPX frame in which the recipient IPX address is set to" 8801 ". The access control apparatus 1010-1 transmits the ICS network address" 772 ".
5 "receives the IPX frame and reads the sender IPX address" 9901 "and the receiver IPX address" 8801 "in the IPX frame, and the access controller 1010-1 converts the conversion table 1013. The access control apparatus 101 reads the destination network address “5525” of the sender IPX address “8801” of the sender IPX address “9901” of the transmission ICS network address “7725” from −1.
0-1 indicates that the incoming ICS network address is "552".
5 ", the originating ICS network address is" 7725 "
And an ICS network frame having a network data section in which information of the IPX frame is described and sent to the ICS 1000.

The ICS network frame transmitted from the access control device 1010-1 is transferred in the ICS 1000 and reaches the access control device 1010-2.
Upon receiving the ICS network frame having the network data part in which the information of the IPX frame is described, the access control apparatus 1010-2 transmits the ICX frame to the IPX conversion section 1026-2 of the ICS network address “5525”.
The information of the IPX frame of the S network frame is
The converted IPX frame is transmitted to the user 1064-2 as an IPX frame. The terminal having the IPX address “8801” of the user 1064-2 receives the IPX frame. Conversely, the sender I sent from the terminal having the IPX address “8801” of the user 1064-2
The IPX frame in which the PX address is set to “8801” and the receiver IPX address is set to “9901” is also transferred to the user 1064-1 in the same procedure.

Example-11 (X.25, FR, ATM,
Transmission by satellite communication and telephone line, ISDN line, CATV
Line, satellite line): In the above embodiment-10, the X. 25 / ICS network frame converter 10
31-1 and 1031-2, FR / ICS network frame conversion units 1032-1 and 1032-2, ATM
/ ICS network frame converters 1033-1 and 1033-2, and satellite / ICS network frame converters 1034-1 and 1034-2 are respectively provided in the relay network, that is, X.100 / ICS network frame converters 1033-1 and 1034-2. 25 network 1040, FR network 1041, AT
It is located in the M network 1042 and the satellite communication network 1043.
On the other hand, in Example-11, as shown in FIG. 41 and FIG. 25 / ICS network frame converters 1131-1 and 1131-2, FR / ICS network frame converters 1132-1 and 1132-2, A
TM / ICS network frame conversion unit 1133-1
And 1133-2, and the satellite / ICS network frame conversion units 1134-1 and 1134-2 are disposed in the access control devices 1110-1 and 1110-2, respectively. That is, in Embodiment-10, each relay network (X.2
5 network 1040, the FR network 1041, the ATM network 1042, and the satellite communication network 1043) convert and reverse convert the received ICS network frame into a format that can be transferred on each relay network side. The access control device performs conversion into a format that can be transferred by each relay network and inverse conversion.

Embodiment-12 (Accommodation of access control device in relay network): 25 / I
CS network converters 1031-1 and 1031-
2, FR / ICS network converters 1032-1 and 1032-2, ATM / ICS network converter 10
33-1 and 1033-2, and the satellite communication network / ICS network conversion units 1034-1 and 1034-2 are respectively provided in the relay network, that is, in the X.33. 25 network 1040, FR network 104
1. Located in the ATM network 1042 and the satellite communication network 1043, the access control devices 1010-1 and 1010-
2 is X. 25 networks, FR networks, ATM networks, and satellite communication networks. On the other hand, in Example-12, FIG.
As shown in FIG. 3 and FIG.
-1, 1120-2, 1121-1, 1121-2, 1
122-1, 1122-2, 1123-1, 1123-
2 are in the relay network, that is, X. 25 network 1240-
1, located within the FR network 1241-1, the ATM network 1242-1, and the satellite communication network 1243-1. That is, in the embodiment-10, in the access control device installed outside each relay network, the IC card is transmitted from the ICS user frame based on the management of the conversion table.
Although the conversion to the S network frame and the inverse conversion have been performed, in the present embodiment, the conversion from the ICS user frame to the ICS network frame (I
CS encapsulation) and inverse transformation (ICS inverse encapsulation) are performed in each of the above relay networks, that is, in X.25. It is performed inside the 25 exchange, inside the FR exchange, inside the ATM network exchange, and inside the satellite receiver / transmitter.

Embodiment-13 (the relay network is connected to the relay device): 25 net 104
0, FR network 1041, ATM network 1042, satellite communication network 1
043 is connected to the access control devices 1010-1 and 1010-2, but is not connected to the relay device. On the other hand, in Example-13, as shown in FIG. 25 network 2020-1 is connected to the access control device 2010 and the relay device 2030,
21-1 is the access control device 2011 and the relay device 20
The ATM network 2022-1 is connected to the access control device 2012 and the relay device 2032; the satellite communication network 2023-1 is connected to the access control device 2013 and the relay device 2033; 25 network 2020-
2 is connected to the relay devices 2030, 2034, and 2035, and the FR network 2021-2 is connected to the relay devices 2031 and 2035.
And the ATM network 2022-2 is connected to the relay device 203.
1, 2032, 2036 and the satellite communication network 202
3-2 is connected to the relay devices 2033, 2036, and 2037. That is, in the present embodiment, X. 25 net 202
0-1, 2020-2, RF network 2021-1, 2021
-2, ATM networks 2022-1 and 2022-2, and satellite communication networks 2023-1 and 2023-2 are all connected to a relay device.

Embodiment-14 (Access control device is ICS
FIG. 46 shows the first embodiment of the present invention.
4 shows an embodiment, in which an access control device 1210-1 is shown.
Outside the ICS 1200, that is, the LAN-12 of the company X.
Placed inside 00. Correspondingly, the ICS address management server 1250-1 and the ICS network server 1260
-1 is also outside the ICS 1200, that is, the LAN 1200-1
, And the access control device general management server 1
240 is placed inside ICS 1200. The access control device general management server 1240 uses the ICS network server communication function to access control device 1210-1, ICS address management server 1250-1, and ICS network server 1260-
1 and has a function of exchanging information.
When the VAN operator makes a contract with the company X and connects the user communication line to the ICS 1200, the VAN operator uses the access control device
The data is written in the conversion table inside 210-1. Also, I
The CS address management server 1250-1 and the ICS network server 1260-1 use the respective ICS network server communication functions, and use the ICS address management server 1 in the ICS 1200.
250-2 and the ICS network server 1260-2.

With this configuration, the LAN 1200 can be used according to the same method as described in the first embodiment.
The user terminal inside can perform intra-company communication and inter-company communication. The ICS address management server 1
250-1, the ICS network server 1260-1
Even within 200, the user terminal, as described above,
Clearly, intra-enterprise communication and inter-enterprise communication can be performed. In the other embodiment described above, the ICS address management server is replaced with the ICS address name management server described in Embodiment-24.

Embodiment 15 (Non-ICS encapsulation of inter-enterprise communication): An embodiment of non-ICS encapsulation in inter-enterprise communication will be described with reference to FIGS. A method of determining a transfer destination in the ICS from a user address and performing communication will be described. This communication method is an embodiment in which ICS encapsulation is not performed only for inter-company communication despite the use of the conversion table as in the first embodiment. Further, despite the fact that ICS encapsulation is not performed in inter-company communication, intra-company communication (embodiment-1), virtual leased line connection (embodiment-2), and ICS network server using ICS special number address Communication (Example-3, 3A)
The fact that the present invention can be realized by the same method as described in the embodiments 1, 2, 3, and 3A will be described.

First, the ICS user address in this embodiment (in the case of a 32-bit length, the address is 2 from address 0).
An example of how to determine the ³² -1) will be described. The ICS user address is an intra-company communication address, an inter-company communication address,
It is classified into CS special number address and ICS operation address. As the intra-company communication address, the above-described address specific to the user is adopted. The business communication address is V
In the section from the address 0 to the address (2 ¹⁵ -1) of the AN internal code (16 bits: 0 to (2 ¹⁶ -1)), a range that does not overlap with the intra-company communication address is allocated. The ICS special number address is the VAN internal code (16
Of section up ^{(2 15 + 2} 14 -1) from address ^{2 15} bits) is assigned a range that does not overlap the communication address within the enterprise. The ICS operation address is calculated from (2 ¹⁵ +2 ¹⁴ ) address of the VAN internal code (16 bits) to (2 ¹⁶
-1) In the section up to the address, a range not overlapping with the intra-company communication address is allocated. The ICS operation address is used for ICS operation (for example, used for communication for exchanging failure information inside the VAN.) In FIGS. 47 and 48, 15170-1 and 1517.
0-2, 15170-3, 15170-4, 15170
-5 and 15170-6 are LAN 15100-
1, 15100-2, 15100-3, 15100-
4, 15100-5, and 15100-6, which are provided inside the gateway. ICS frames can pass through these gateways 15170-1 to 15170-6.

<< Common Preparation >> Access Control Unit 1511
0-1 has a conversion table 1533-1, which includes a source ICS network address, a destination ICS network address,
Includes recipient ICS user address, request identification, and speed category. The request identification described in the conversion table 15113-1 indicates, for example, “1” for the intra-company communication service, “3” for the virtual leased line connection, and “4” for the ICS network server connection. The speed category includes the speed and throughput of the line required for communication from the ICS network address (for example, the number of ICS frames transferred within a certain time).

<< Preparation for Inter-company Communication >> LA of Company X
The terminal for performing inter-company communication inside the N15100-1 is an IC
The S user address “7711” is held. In this embodiment, the ICS user address for inter-company communication is:
Use the same value as the ICS network address. The ICS address information for inter-company communication is converted into a conversion table 151.
13-1 is not written. Similarly, LA of company Y
The terminal that performs inter-company communication inside N15100-3 is IC
It holds the S user address “8822”.

<< Preparation for Intra-Company Communication >> LAN 151
00-1 and the user of the LAN 15100-2
Intra-company communication between terminals connected to the AN is performed between VAN-1 and VAN.
An application is performed by designating a terminal to the VAN operator so that communication can be performed via the AN-3. Access control device 15110
Logical communication line 15180 connected to the ICS logical terminal of -1
The ICS network address of “−1” is “7711”. The intra-company communication addresses of the terminal connected to the LAN 15100-1 to which the application was made are set to “0012” and “0”.
025 ”, and the company communication addresses of the destinations to communicate from these terminals are“ 0034 ”,“ 0036 ”,“ 004 ”.
5 "and" 0046 ".

When the intra-company communication address is “0034” or “0”
The terminal having “036” is inside the LAN 15100-2, and the ICS network address assigned to the ICS logical terminal of the access control device 15110-5 is set to “992”.
The company communication address is “0045” or “0”.
046 "is located inside the LAN 15100-6, and the ICS network address assigned to the ICS logical terminal of the access control device 15110-4 is set to" 890 ".
0. The value “1” indicating the applied intra-company communication service is set as the request identification, and the above is described in the conversion table 1513-1.
Register with. Access control devices 15110-4 and 15
110-5 is registered in each conversion table for intra-company communication in the same manner as described above. The contents of the conversion table created by the above method are stored in the ICS address management server 15.
Write to 150-1.

<< Preparation for Virtual Private Line Connection >> The principle is the same as that of the embodiment-2, and will be described below. LAN15
100-5 is connected to the access control device 15110-1 via the user logical communication line 15180-5,
The ICS network address “7712” is assigned. LAN 15110-4 is the user logical communication line 1
5180-4, and is connected to the access control device 15110-2.
1 ". User logical communication line 15180
In order to establish a virtual private line connection from -5 to the user logical communication line 15180-4, the ICS network addresses “7712” and “6611” and the request identification “ 3 "is registered. For the same purpose, the conversion table inside the access control device 15110-2 also includes these ICs.
S network addresses “6611” and “7712”
Is registered.

<< Preparation for Communication with ICS Network Server Using ICS Special Number >> The ICS user address of the ICS network server 15330-1 connected to the access control device 15110-1 is "2000" and the ICS network address is " In the case of “7721”, the respective addresses and the request identification “4” are registered in the conversion table.

Hereinafter, description will be made with reference to the flowchart in FIG. << Inter-company communication >> Inter-company communication without ICS encapsulation will be described. That is, the ICS on the LAN 15100-1
A terminal having a user address “7711” and a LAN 15
This is "inter-company communication" with a terminal having the ICS user address "8822" on 100-3.

The address “771” of the LAN 15100-1
The terminal having “1” is the sender ICS user address “77”.
11 ", and the ICS user frame F1 in which the receiver ICS user address is set to" 8822 "is sent out. The ICS user frame F1 is transmitted via the user logical communication line 15180-1 to the access control device 15110-1.
At the ICS logic terminal. Access control device 151
10-1 checks whether the ICS network address “7711” assigned to the ICS logical terminal is registered in the conversion table 151113-1 as a request identification as a virtual leased line connection (“3”) (step S1501). In this case, since it is not registered, the receiver ICS network address “882” in the ICS user frame F1 is next.
It is checked whether “2” is registered in the conversion table 151113-1 (step S1503) .In this case, since it is not registered, the receiver network address “8822” in the ICS user frame F1 is used next for the inter-company communication. It is determined whether it is in the address section (step S1504).

When the ICS user frame F1 is determined to be inter-enterprise communication according to the procedure described above, processing such as charging for inter-enterprise communication is performed (step S1505). The access control device 15110-1 does not perform ICS encapsulation, and transmits the ICS user frame F1 to the relay device 15120-
1 (step S1525). Relay device 151
20-1 is based on the incoming ICS network address.
The CS user frame is transferred to the relay device 15120-2 or 15
120-3, the access control device 15 of the VAN-2
Transfer to 110-4. Access control device 15110-
4 is transferred to the LAN 15110-3. The ICS user frame is routed through LAN 15110-3,
It is delivered to the terminal having the ICS user address “8822”.

<< Intra-Company Communication >> A description will be given of the fact that intra-company communication that performs ICS encapsulation can be realized despite non-ICS encapsulation of inter-company communication. For communication between a terminal having an ICS user address “0012” connected to the LAN 15100-1 and a terminal having an ICS user address “0034” connected to the LAN 15100-2,
An ICS user frame P1 is transmitted. In the ICS user frame P1, "0" is added to the sender ICS user address.
012 ”is“ 003 ”in the recipient ICS user address.
4 "is set for each. ICS user frame P
1 is transmitted through the user logical communication line 15180-1, and further transferred to the access control device 15110-1. The access control device 15110-1 checks whether the ICS network address “7711” assigned to the ICS logical terminal is registered in the conversion table 151113-1 as a request type as a virtual private line connection (“3”). (Step S1501) Since it is not registered in this case, it is next checked whether or not the receiver network address “0034” in the ICS user frame P1 is registered in the conversion table 151113-1 (Step S1503). In the case of the present embodiment, “0034” is registered, and the request identification is read as intra-company communication “1” (step S15).
10), the receiving ICS network address “9922” corresponding to the transmitting ICS network address “7711” is acquired from the conversion table, and processing such as accounting for inter-company communication is performed (step S1511). The above procedure is also shown in the flowchart of FIG.

The access control device 15110-1 stores the obtained calling ICS network address “7711”,
Using the incoming ICS network address "9922", a network controller is added to perform ICS encapsulation (step S1520), and an ICS network frame P2 is formed and transmitted to the relay device 15120-1 (step S1525).

<< Communication Using Virtual Dedicated Line >> Despite the non-ICS encapsulation of inter-enterprise communication, it will be described that communication using a virtual dedicated line that performs ICS encapsulation can be realized. L
The AN 15100-5 sends an ICS user frame to the ICS 15100 via the user logical communication line 15180-5. ICS network address "771
The access control device 15110-1 that has received the ICS user frame from the ICS logical terminal of “2” has the ICS network address “771” assigned to the ICS logical terminal.
"2" is checked in the conversion table 151113-1 to see if the request type is registered as a virtual leased line connection ("3") (step S1501). It can be confirmed that the connection is a virtual private line connection of “6611”, and processing such as charging is performed (step S1502).
-1 indicates an IC encapsulated by adding a network control unit that sets the incoming ICS network address to “6611” and the outgoing ICS network address to “7711” to the received ICS user frame.
Create an S network frame (step S152)
0), and transmits it to the relay device 15120-1 (step S1525).

<< Communication with ICS Network Server Using ICS Special Number >> Despite the non-ICS encapsulation of inter-enterprise communication,
The fact that communication with an ICS network server that performs CS encapsulation is possible will be described. In other words, LAN 1510 of company X
A terminal (address “0012”) connected to 0-1 is
The fact that communication with the ICS network server 15330-1 connected to the access control device 15110-1 is possible will be described.

An ICS user frame G1 is transmitted from the terminal having the sender ICS user address “0012” on the LAN 15100-1 to the access control device 15110-1.
Requests communication with the ICS network server 15330-1 whose recipient ICS user address is "2000". The access control device 15110-1 checks whether the ICS network address “7711” assigned to the ICS logical terminal is registered in the conversion table 151113-1 as a request identification as a virtual leased line connection (“3”). (Step S1501) Since it is not registered in this case, it is checked next whether the recipient network address “2000” in the ICS user frame G1 is registered in the conversion table 151113-1 (Steps S1503 and S151).
0). In this case, the request identification of the conversion table 151113-1 is read as the communication (“4”) with the ICS network server 15330-1 (step S1512). Next, the conversion table 151
An ICS network address “7721” of the ICS network server 15330-1 is acquired from 13-1 and processing such as charging is performed (step S1513). Next, the ICS user frame is converted into an ICS packet (step S152).
0), and transmits it to the ICS network server 15330-1 (step S1525).

Embodiment 16 (Another Embodiment Using ATM Network): Another embodiment in which the network inside the ICS of the present invention is formed using an ATM network will be described. In this embodiment,
(1) Supplementary explanation of the prior art relating to ATM, (2) Description of components, (3) Flow of frame using SVC, (4) PV
Frame flow using C, (5) 1: N using PVC
Communication or N to 1 communication, (6) N to N communication using PVC,
Will be described in this order. In the embodiment described here, the ICS
Since the technology for address conversion between a network frame and an ATM network is mainly disclosed, the intra-enterprise communication service and the inter-enterprise communication service described in the first embodiment, and the virtual leased line service described in the second embodiment are used. This embodiment can be applied to any of them.

(1) Supplementary Description of Prior Art Related to ATM: First, a supplementary description will be given of the prior art related to ATM required for describing this embodiment. In the ATM network, a plurality of non-fixed logical lines that can flexibly set a communication speed and the like can be set on a physical line. This logical line is called a virtual channel (VC). Depending on the setting method of the virtual channel, SVC (Switched V
irtual Channel) and PVC (Permanent Virtual Channel)
l) is specified. SVC is for setting up a virtual channel when necessary, and is necessary for a required time between an arbitrary ATM terminal (a communication device generally connected to the ATM network and performing communication using the ATM network). A logical line having the following speed can be secured. The call setting of the virtual channel is performed by the ATM terminal which starts the communication,
Regarding this method, the signaling method (Signali
ng). The call setup requires an address (hereinafter referred to as an "ATM address") for identifying the ATM terminal to which the call setup is to be performed.
The system is structured so that it can be uniquely identified in the ATM network so that the TM terminal can be identified.
E.164 format specified in Recommendation Q.2931, or ATM
As shown in Fig. 50 according to the ForumUNI 3.1 specification
There are different types of NSAP ATM addresses. ICS
Then, which of the above ATM address systems is used is AT
Since the M network is used depending on the specific configuration, it is described in this embodiment using an ATM address.

The PVC is for semi-fixed call setting, and can be regarded as a virtual dedicated line from the viewpoint of the ATM terminal. For the established virtual channel, an ID for identifying the virtual channel (hereinafter referred to as “virtual channel ID”) is assigned to both the SVC and the PVC. The virtual channel ID is, specifically, the VPI of the cell header portion of the ATM cell format (53 bytes) shown in FIG.
(Virtual Path Identifier) and VCI
(Virtual Channel Identifier).

Since information communication within the ATM network is performed in units of information in the ATM cell format shown in FIG. 51, to transfer an ICS network frame via the ATM network,
This needs to be converted to an ATM cell. This conversion is
The CPCS (Common Part Convergence Subla
yer) frame, and a two-stage process of decomposing the CPCS frame into ATM cells shown in FIG. When a communication frame is divided into ATM cells, it usually becomes a plurality of ATM cells. Therefore, a series of a plurality of ATM cells related to one communication frame is called an ATM cell sequence. A
When the TM cell sequence is received, the inverse conversion is performed.
Assembling of an ATM cell sequence into a CPCS frame shown by, and a communication frame from the CPCS frame shown in FIG.
Extract and restore (ICS network frame) 2
Step processing is performed. The conversion into the CPCS frame and the disassembly / assembly of the ATM cell are known techniques,
This is a standardized technology according to the UT recommendation. Also, C
The protocol header in the PCS frame user information is standardized in IETF RFC1483.

(2) Description of components: FIGS. 54 and 55
Is the ATM network 1042 from FIG.
In addition to the description of FIG.
4 to 36 correspond to a simplified description of the access control devices 1010-2 and 1010-1. In this embodiment, the basic principle of the internal configuration of the access control device or the operation of the processing device in the access control device is the same as that described in the first embodiment.

Access control device 1010-5 in FIG.
Is the connection point between companies X and A who are users of ICS905
ICS network addresses “7711” and “7722” are assigned as (ICS logic terminals), respectively. The access control device 1010-7 is similarly provided with ICS network addresses “7733” and “7744” as connection points of the companies W and C, respectively. In FIG. 55, the access control device 1010-6 is similarly provided with ICS network addresses “9922” and “9933” as connection points between the companies Y and B, respectively. ICS network addresses “9944” and “9955” are assigned as connection points of Z and D, respectively. Here, in the embodiment of the ATM network, companies X, Y, etc. used as examples of users may be different bases of the same company performing intra-company communication, or different companies performing inter-company communication. It does not matter.

An interface unit 1133-5 is provided in a conversion unit 1033-5 inside the ATM exchange 10133-5, and the interface unit 1133-5 connects the access control device 1010-5 and the ATM exchange 10133-5. Responsible for matching the interface (physical layer, data link layer protocol) with the communication line. The conversion unit 1033-5 includes a processing unit 1233-
5 in addition to an ATM address conversion table 1533-5 for call setting by SVC and a VC address conversion table 1433-5 for address conversion from an ICS network address used for both SVC and PVC to a virtual channel. Have been. Note that the ATM switch 10133-5
Is an ATM address management server 1633-5 as an information processing device for storing an ATM address conversion table;
In the case where VC is used, information processing related to address conversion is performed by connecting to a PVC address management server 1733-5 as an information processing apparatus that stores a VC address conversion table. The components related to the ATM switch 10133-6 are the same as the description of the ATM switch 10133-5. In FIGS. 54 and 55, the access control device 1010-5 is connected to the ATM switch 10133-5 via the communication line 1810-5, and the access control device 1010-7 is connected to the ATM switch 10133-5 via the communication line 1810-7. The access control device 1010-6 has a communication line 1810.
-6, the access control device 1010-8 is connected to the ATM switch 1013 via the communication line 1810-8.
3-6. ATM switch 10133-5
Has the only AT in the network
The M address “3977” is set, and the internal conversion unit 1033-6 is provided in the ATM switch 10133-6.
Is set to the only ATM address "3999" in the network. ATM switch 10133-5 and ATM switch 1
0133-6 is an ATM switch 10133 in this embodiment.
Connected via -7.

(3) Flow of frame using SVC: Referring to FIG. 54 and FIG. 55, an SV is used as a communication path in the ATM network.
An embodiment to which C is applied will be described with an example of an ICS user frame emitted from a company X terminal to a company Y terminal.

<< Preparation >> ATM address conversion table 1533-
5 includes a destination ICS network address indicating the destination of the ICS network frame, a destination ATM address indicating the destination for setting up a virtual channel on the ATM network, and a channel such as a communication speed required for the virtual channel. Register the performance. The same registration is also made for the ATM address conversion table 1533-6. As an example, the value set in the ATM address conversion table 1533-5 is, as an incoming ICS network address, an ICS network address assigned to an ICS logical terminal of the access control device 1010-6 as a communication address with the company Y. “9922” is set, and the ATM address “3999” uniquely assigned in the ATM network is registered to the conversion unit 1033-6 as the incoming ATM address. In this embodiment, the channel performance is 64 Kbps.
Set the communication speed of ATM address conversion table 1533
-5 is registered in the ATM address management server 16.
Write it in 33-5 and keep it.

The value set in the ATM address conversion table 1533-6 is an incoming ICS network address, an ICS network address “7711 assigned to the ICS logical terminal of the access control device 1010-5 as an address for communication with the company X, Is set as the incoming ATM address, and the conversion unit 1033 inside the ATM switch 10133-5 to which the access control device 1010-5 is connected.
ATM assigned to -5 only within the ATM network
The address “3977” is registered. Channel performance includes
In this embodiment, a communication speed of 64 Kbps is set. ATM
The contents registered in the address conversion table 1533-6 are ATM
It is also written and stored in the address management server 1633-6.

<< ICS Network Frame Transfer from Access Control Apparatus >> As described in Embodiment-1, a terminal of company X is connected to access control apparatus 1010-6 via access control apparatus 1010-5. The ICS user frame issued to the terminal of the company Y is encapsulated in the ICS when passing through the access control device 1010-5, and the originating ICS network address “7711”
And the incoming ICS network address "9922"
The ICS network frame F1 has a CS frame header. The ICS network frame F1 is transmitted from the access control device 1010-5 to the ATM switch 10133-.
5 and reaches the converter 1033-5. Less than,
This will be described with reference to the flowchart in FIG.

<< Acquisition of Virtual Channel ID >> Conversion Unit 103
3-5 receives the ICS network frame F1 (step S1601), and converts the received frame F1 into an AT.
In order to transfer data correctly to the M exchange 10133-5, the IC
It is necessary to find the virtual channel ID of the SVC virtual channel determined by the correspondence between the outgoing ICS network address “7711” and the incoming ICS network address “9922” inside the S frame header. In the case of the communication based on the SVC, at the time of receiving the ICS network frame, the virtual channel corresponding to this communication path may be established or not yet established. The processing device 1233-5 first determines whether or not a virtual channel has been established, by calling the originating ICS network address “7”.
711 ”and the incoming ICS network address“ 992 ”
A search is performed to determine whether the virtual channel corresponding to the pair with “2” is registered in the VC address conversion table 1433-5 (step S1602), and the virtual channel to be obtained when the virtual channel is registered is established. That is, VC
From the address conversion table 1433-5, the virtual channel I corresponding to the pair of the source ICS network address “7711” and the destination ICS network address “9922”
It is acquired that D is “33”, and from the channel type value “11” acquired at the same time, it is known that this virtual channel is communication based on SVC. If VC
If there is no registration on the address conversion table 1433-5,
A virtual channel to be obtained is established by performing << call setting >> described below, and a virtual channel ID is obtained from information registered on the VC address conversion table 1433-5 at that time (step S1603).

<< Call Setup >> The virtual channel ID corresponding to the communication path determined by the correspondence between the originating ICS network address and the terminating ICS network address in the above description
Is not registered in the VC address conversion table 1433-5 ", that is, if the virtual channel corresponding to this communication path has not yet been established, the following call setting is performed.
It is necessary to establish a virtual channel in the ATM network constituting the ICS 905, and an operation example of this call setup will be described.

Processing unit 1233 of conversion unit 1033-5
5 refers to the VC address conversion table 1433-5, and
The source ICS network address “7711” and the destination ICS inside the header of the CS network frame F1
When it is found that there is no registration of the virtual channel ID corresponding to the pair with the network address "9922" (step S
1602) With reference to the ATM address conversion table 1533-5, find the incoming ICS network address "9922" registered in the ATM address conversion table 1533-5 that matches the incoming ICS network address "9922", and receive the corresponding incoming call. The ATM address "3999" and the corresponding channel performance "64K" are obtained (step S1605). The processing device 1233-5 issues a call setting request to the ATM switch 10133-5 by using the acquired incoming ATM address "3999".
It also requests the channel performance such as the communication speed of the virtual channel acquired simultaneously from the ATM address conversion table 1533-5. When the ATM switch 10133-5 receives the call setup request, the ATM switch 10133-5 uses a signaling method that is provided as a standard in the ATM switch itself as a virtual system in an ATM switching network that reaches the ATM switch 10133-6 from the ATM switch 10133-5. A channel is established (step S1606).
Virtual channel I assigned to identify virtual channel
D is a conversion unit 1 provided inside each of the ATM exchanges.
033-5 or 1033-6, but if it is based on the signaling scheme of the prior art, the value notified from the ATM switch 10133-5 on the calling side (for example, "33").
And the value (for example, “44”) notified from the called ATM switch 10133-6 are not necessarily the same value.
In the conversion unit 1033-5, the ATM exchange 10133-5
The virtual channel ID “33” notified from the ICS network frame F1 together with the outgoing ICS network address “7711” and the incoming ICS network address “9922” in the ICS network frame F1 is converted to a VC address conversion table 1433-5.
(Step S1607), and while the connection of this virtual channel is established, the VC address conversion table 1433-
5 above. When the virtual channel connection is no longer required, the conversion unit 1033-5 sets the virtual channel call release to AT
A request is made to the M exchange 10133-5, and at the same time, the virtual channel ID “33” is obtained from the VC address conversion table 1433-5.
Delete the registration corresponding to. The registration in the VC address conversion table 1433-6 in the conversion unit 1033-6 will be described later.

<< Transmission of Frame >> The processing unit 1233-5 of the conversion unit 1033-5 converts the access control unit 1010- with respect to the virtual channel (virtual channel ID "33") established according to the description so far. IC received from 5
The S network frame F1 is converted into the CPCS frame shown in FIG. 52, and is further decomposed into ATM cells shown in FIG. 53 and transferred to the relay ATM switch 10133-7 (step S1604).

<< Transfer of ATM Cell >> The ATM cell sequence S1 composed of a plurality of cells obtained by converting the ICS network frame F1 by the method described above is transmitted from the ATM switch 10133-5 to the relay ATM switch 10133-.
5 is transferred to the ATM switch 10133-6 as the ATM cell sequence S2. Hereinafter, description will be made with reference to the flowchart in FIG.

<< Operation after Arrival of Frame >> When the ATM cell sequence S2 reaches the ATM switch 10133-6 (step S1610), the ATM cell sequence S2 is transferred from the ATM switch 10133-6 to the conversion section 1033-6. You. The conversion unit 1033-6 assembles the received ATM cell into a CPCS frame as shown in FIG. 53, and restores the ICS network frame from the CPCS frame as shown in FIG. 52 (step S1611). In FIG. 55, the restored ICS network frame is
Although shown as an S network frame F2, the frame content is the same as the ICS network frame F1. The ICS network frame F2 has an incoming ICS network address “992” of the frame header.
2 "access control device, ie ICS
ICS with network address "9922"
The data is transferred to the access control device 1010-6 having a logical terminal (step S1612).

At this time, the conversion unit 1033-6 performs ICS
The originating ICS network address “7711” of the network frame F2, the terminating ICS network address “9922”, the channel type “11” indicating the SVC known at the time of the incoming call, and the SVC virtual channel are assigned at the time of call setup. Virtual channel ID “4
4 "is registered in the VC address conversion table 1433-6 (step S1614). At this time, the originating ICS network address" 7 "of the ICS network frame F2 is registered.
711 ”is the incoming IC of the VC address conversion table 1433-6.
Incoming ICS network address "9922" of ICS network frame F2 to S network address
Is written in the VC address conversion table 1433-6 in a position opposite to the originating ICS network address. However, if the same content as the content to be registered has already been registered in the VC address conversion table 1433-6 at the time of this registration, the registration is not performed. VC address conversion table 1433-6
Is held on the VC address conversion table 1433-6 while the connection of the virtual channel having the corresponding virtual channel (virtual channel ID “44” in this example) is maintained ( Step S1613).

<< Flow in the reverse direction of the frame >> Next, the ICS
The flow of the frame in the reverse direction, that is, the flow from the company Y to the company X, is based on the assumption that the SVC virtual channel has been set up according to the description so far.
This will be described with reference to FIG. IC issued from company Y to company X
When the S user frame passes through the access control device 1010-6, the source ICS network address “9”
922 ”and the incoming ICS network address“ 771 ”
ICS network frame F3 with 1 "in the header
The processing in accordance with the flow of FIG. 56 described above is performed by the processing device 1233-6 of the conversion unit 1033-6 inside the ATM exchange 10133-6. In this case, the VC address conversion table 1433-6 of the conversion unit 1033-6 has already described << the operation after the frame arrives >>
Since the virtual channel ID “44” corresponding to the source ICS network address “9922” and the destination ICS network address “7711” is registered as the channel type “11”, that is, SVC, the virtual channel ID “44” follows the flow of (1) in FIG. ICS network frame F3 is converted into a plurality of ATM cells (ATM sequence S3) for virtual channel ID "44" and transferred. The ATM cell sequence S3 is relay-transferred through the relay ATM exchange 10133-5, and becomes an ATM cell sequence S4.
133-3, and is received by the conversion unit 1033-6 via the virtual channel having the virtual channel ID "33", and is restored as the ICS network frame F4 having the same content as the ICS network frame F3.
In the conversion unit 1033-5, the outgoing ICS network address “9922” and the incoming ICS network address “77” held in the header of the ICS network frame F4
Since the pair with "11" is already registered in the VC address conversion table 1433-5 in a form in which transmission and reception are reversed, registration in the VC address conversion table is not performed, and the ICS network frame F4 is transmitted to the access control device 1010-5. Transfer to

<< Application Example to Half Duplex Communication >>
905 internal network is composed of ATM network, IC
Regarding the case where the S frame is transferred from the company X to the company Y and the case where the S frame is transferred from the company Y to the company X in the reverse direction,
The implementation using one SVC virtual channel has been described. The transfer and the reverse transfer are performed, for example, from the client terminal of the company X connecting to the ICS to the company Y
When applied to a request frame (transfer) to the server terminal of the company Y and a response frame (reverse transfer) from the server terminal of the company Y to the client terminal of the company X to the request frame, only one-way communication is performed at a time, This is an application example of half-duplex communication that realizes bidirectional communication by switching the communication direction for each band.

<< Application Example to Full-Duplex Communication >> The virtual channel itself set in the ATM network is capable of full-duplex communication, that is, two-way communication at the same time, according to the rules of the ATM. A transfer using one SVC virtual channel and a reverse transfer are performed on an ATM network.
For example, a request frame (transfer) from a plurality of client terminals of the company X connected to the ICS to a plurality of server terminals of the company Y connected to the ICS, and a request frame from the plurality of server terminals of the company Y to the plurality of client terminals of the company X in response to the request frame When applied to the response frame (reverse transfer), the frame between the client terminal and the server terminal is transferred asynchronously, so that two-way communication is simultaneously performed on one SVC virtual channel serving as a communication path. ,
This is an application example of full-duplex communication.

(4) Flow of frame using PVC: As shown in FIGS. 54 and 55, an embodiment in which the internal network of the ICS 905 is constituted by an ATM network and PVC is applied as a communication path in the ATM network is described below. An ICS user frame issued from the terminal of the company W to the terminal of the company Z will be described as an example.

<< Preparation >> In the VC address conversion table 1433-5 in the conversion unit 1033-5, the originating ICS network address, the destination ICS network address, and the AT
M network (ATM exchange 10133-5 and ATM exchange 1
P13 fixedly set to a communication path between 0133-6)
VC virtual channel ID and virtual channel ID are PVC
Is registered. This registration is different from the case of the SVC, and is an ATM exchange (10133-5, 10133-7, 10133-6) serving as a communication path.
Is set in the VC address conversion table 1433-5 at the same time when a PVC virtual channel is set, and is fixedly held during a period when a communication path is required, that is, until the setting of the PVC virtual channel is canceled. Also, it is similarly registered and held in the VC address conversion table 1433-6. The PVC virtual channel ID is assigned to each ATM exchange when the PVC is fixedly connected between the ATM exchanges.

The value set in the VC address conversion table 1433-5 is an address for communication with the company W as an originating ICS network address, that is, an ICS network assigned to an ICS logical terminal of the access control apparatus 1010-7. Set the address “7733” and set the incoming ICS
A communication address with the company Z as a network address,
That is, the ICS network address “9944” assigned to the ICS logical terminal of the access control device 1010-8.
Set. Further, the ID “55” of the PVC virtual channel assigned to the ATM switch 10133-5 is set as the virtual channel ID, and the value “22” indicating PVC is set as the channel type. VC address conversion table 1
The setting registered in 433-5 is also written and stored in the PVC address management server 1733-5.

Similarly, the VC address conversion table 143 in the conversion unit 1033-6 inside the ATM exchange 10133-6 is used.
In 3-6, the same setting is performed in a manner that the originating ICS network address and the terminating ICS network address are reversed. In this case, even if the same PVC is indicated, the virtual channel ID is stored in the VC address conversion table 1433-
The value may be different from 5. At this time, the settings registered in the VC address conversion table 1433-6 are also written and stored in the PVC address management server 1733-6.

The value set in the VC address conversion table 1433-6 is an address for communication with the company Z as the originating ICS network address, that is, the ICS network assigned to the ICS logical terminal of the access control device 1010-8. Set the address "9944" and set the incoming ICS
The communication address with the company W as the network address, that is, the ICS network address “773 assigned to the ICS logical terminal of the access control device 1010-7.
3 ". Further, the virtual channel ID includes ATM.
"66" is set as the ID of this PVC virtual channel allocated to the exchange 10133-6, and the value "22" indicating PVC is set in the channel type.

<< ICS Network Frame Transfer from Access Control Device >> Issued from the terminal of company W to terminal of company Z connected to access control device 1010-5 via access control device 1010-7. When the ICS user frame passes through the access control device 1010-7, the ICS is encapsulated in an ICS and has an outgoing ICS network address “7733” and an incoming ICS network address “9944” in the ICS frame header.
This is the network frame F5. The ICS network frame F5 is transmitted from the access control device 1010-7 to the AT.
It is transmitted to the M exchange 10133-5, and reaches the conversion unit 1033-5 via the interface unit 1133-5.

<< Acquisition of Virtual Channel ID >> Processing Unit 12
33-5 is the received ICS network frame F5
Originating ICS network address “77” in the header of
33 "and the terminating ICS network address" 994 "
4 "using the VC address conversion table 1433-5, the conversion unit 1033-5 and the access control device 1010- having the ICS logical terminal to which the incoming ICS network address" 9944 "is assigned as a connection point. 8 is connected to the conversion unit 103 inside the ATM switch 10133-6.
It is acquired that the virtual channel ID for identifying the set virtual channel is “55” with respect to 3-6. At the same time, the acquired channel type value “2”
From 2 ", it is known that this virtual channel is PVC.

<< Transmission of Frame >> Processing Unit 1233-5
Responds to the PVC virtual channel “55” acquired as described above,
The CS network frame F5 is converted into an ATM cell sequence and transmitted to the ATM switch 10133-7. This AT
The method of M cell conversion is the same as that described in the embodiment of SVC. The processing procedure of the above conversion unit 1033-5 is shown in FIG.
6 and the flow is always (1) in PVC.

<< Transfer of ATM Cell >> A composed of a plurality of cells obtained by converting the ICS network frame F1.
The TM cell sequence S1 is transferred from the ATM switch 10133-5 to the relay ATM switch 10133-7,
The data is transferred as an ATM cell sequence S2 to the M exchange 10133-6, and this operation is the same as that in the case of SVC.

<< Operation after Arrival of Frame >> When the ATM cell sequence S2 reaches the ATM switch 10133-6, the AT
The M cell sequence S2 is transmitted from the ATM switch 10133-6 to the AT
The data is transferred to the conversion unit 1033-6 inside the M exchange 10133-6. The conversion unit 1033-6 restores the ICS network frame from the received ATM cell sequence, but this operation is the same as in the case of SVC. Restored ICS
The network frame is described as an ICS network frame F6 in FIG.
This is no different from the CS network frame F5. The ICS network frame F6 is the incoming ICS of the header part.
The access control device identified by the network address “9944”, that is, the access control device 1010-8 having the ICS logical terminal to which the ICS network address “9944” is assigned is transferred. The above conversion unit 1
The processing procedure of 033-6 is as shown in FIG. 57, and the flow is always (1) in PVC.

<< Flow in the Reverse Direction of Frame >> Next, the ICS
The flow of the frame in the opposite direction, that is, the flow from the company Z to the company W, will be described with reference to FIGS. 54 and 55, using the PVC virtual channel as a communication path. The ICS user frame issued from the company Z to the company W passes through the access control device 1010-8 and, at the stage where the ICS user frame is transmitted, has an outgoing ICS network address “9944” and an incoming ICS network address “7733” in the header section of the ICS network frame F7. The conversion unit 1033-6 which is encapsulated in the ICS and installed inside the ATM exchange 10133-6
The processing according to the flow of FIG. 56 is performed by the processing device 1233-6. In this case, V of conversion section 1033-6
The C address conversion table 1433-6 includes virtual channel IDs corresponding to the outgoing ICS network address “9944” and the incoming ICS network address “7733”.
Since “66” is registered, the virtual channel ID “6”
6 ", the ICS network frame F7 is converted into a plurality of ATM cell sequences and transmitted. The ATM cell sequence transferred through the ATM network reaches the conversion unit 1033-5 of the ATM switch 10133-5. Next, virtual channel ID
It is received from the virtual channel having “55” and is restored as an ICS network frame F8 having the same contents as the ICS network frame F7. However, in the conversion unit 1033-5, the originating ICS network address “994” held in the header of the ICS network frame F8 is set.
4 ”and the incoming ICS network address“ 7733 ”are already in the VC address conversion table 1
433-5-5, and the virtual channel ID "55" for this transmission / reception address pair is obtained from the channel type value "22" as a PVC. Transfer to device 1010-7.

<< Example of Application to Half-Duplex Communication >>
Although the internal network of the CS 905 is configured using the ATM network and the embodiment of transferring the ICS frame using the PVC has been described, the PVC and the above-mentioned SVC set up a call when a virtual channel is fixedly set or required. There is no difference in the operation itself of transferring the frame to the set virtual channel. Therefore, the ICS of the present invention
On the other hand, an application example of the ATM network to half-duplex communication using a PVC virtual channel is equivalent to an application example to half-duplex communication using an SVC virtual channel.

<< Application Example to Full-Duplex Communication >> For the same reason as the application example to the half-duplex communication, the application example to the full-duplex communication of PVC is the application example to the full-duplex communication in SVC. Is equivalent to

(5) One-to-N communication or N-to-one communication using PVC: In the above description, one virtual channel of PVC is used as a communication channel connecting one company (base) and one company (base). Although the embodiment in which one ICS logical terminal and one ICS logical terminal are used as a communication path in the ICS has been described, one virtual channel of PVC is used as a communication path between one ICS logical terminal and a plurality of ICS logical terminals. It is possible to share. With reference to FIG. 58, an example of such one-to-N communication or N-to-I communication will be described.

<< Description of Constituent Elements >> In FIG. 58, the access control device 1010-10 is configured such that the company X connects the ICS logical terminal provided with the ICS network address “7711” in the access control device 1010-10 to the connection point. Is connected to the ATM exchange 10133-10. Company X
Company A to Company D
Is a connection point to an ICS logical terminal provided with the ICS network address “9922” in the access control device 1010-20, and the company B is the access control device 1010-2.
An ICS logical terminal to which an ICS network address “9923” in 0 is assigned is a connection point. Similarly, company C
Is a connection point with an ICS logical terminal provided with an ICS network address “9944” in the access control device 1010-40, and the company D has the access control device 1010-4.
An ICS logical terminal to which an ICS network address “9955” in 0 is assigned is defined as a connection point. The access control devices 1010-20 and 1010-40 are the ATM switch 1
0133-20 and the ATM switch 10133-
10 and the ATM switch 10133-20 are connected via a relay network.

<< Preparation >> The ATM exchanges 10133-10 and 10133-20 are connected to the ATM exchange 10133.
-10 Internal Conversion Unit 1033-10 and ATM Switch 10
One PVC virtual channel connecting the conversion unit 1033-20 inside the 133-20 is set, the virtual channel ID given to the virtual channel conversion unit 1033-10 is “33”, and the virtual channel conversion unit 1033 is set. The virtual channel ID given to −20 is “44”. Conversion unit 10
The VC address conversion table 1433-1 in the conversion unit 33-10 and the VC address conversion table 1433-1 in the conversion unit 1033-20.
The registration as shown in FIG.

<< Flow of Frame for One-to-N Communication >> The flow of the frame for one-to-N communication will be described with reference to frames transmitted from company X to companies A to D, respectively. The originating ICS network address "771" from company X to company A
1 "and the incoming ICS network address" 9922 "
The ICS network frame having
By referring to the VC address conversion table 1433-10 in 3-10, the data is transmitted to the PVC virtual channel of the virtual channel ID “33”. The originating ICS network address “7711” directed from company X to company B,
ICS with CS network address "9933"
Similarly, the network frame has the virtual channel ID “3”.
3 ”. The originating ICS network address“ 7 ”directed from company X to company C
711 ”and the receiving ICS network address“ 994 ”
Similarly, the ICS network frame having the originating ICS network address “7711” and the receiving ICS network address “9955” directed from the company X to the company D have the virtual channel ID “ 33 "PVC virtual channel. This indicates that one-to-N (enterprise X-enterprise A-D) communication is being performed by sharing one PVC virtual channel. , That is, the case where the frame is transferred from the companies A to D to the company X will be described in the next section.

<< Flow of N-to-One Communication Frame >> The flow of one-to-N communication frames will be described using frames transmitted from companies A to D to company X, respectively. The originating ICS network address “992” directed from company A to company X
2 "and incoming ICS network address" 7711 "
The ICS network frame having
By referring to the VC address conversion table 1433-20 in 3-20, it is transmitted to the PVC virtual channel of the virtual channel ID “44”. The originating ICS network address “9933” directed from Company B to Company X, and the incoming I
ICS with CS network address "7711"
Similarly, the network frame has the virtual channel ID “4”.
4 is transmitted to the PVC virtual channel. The originating ICS network address “9” directed from company C to company X
944 "and the incoming ICS network address" 771 "
Similarly, the ICS network frame having the originating ICS network address “9955” and the receiving ICS network address “7711” directed from the company D to the company X also have the virtual channel ID “ The transmission is performed on the 44 "PVC virtual channel. This indicates that the N-to-1 (company A to D vs. company X) communication is performed by sharing one PVC virtual channel.

(6) N-to-N communication using PVC: 1: N
By the same method as the communication, one virtual channel of the PVC can be shared as a communication path between a plurality of ICS logical terminals. Referring to FIG.
An example of N-to-N communication will be described.

<< Description of Components >> Company X sets the ICS logical terminal address “771” of the access control device 1010-11.
1 "is a connection point, and the company Y
The access control device 1010-11 is connected to the ATM switch 10133-11 with the ICS logical terminal address “7722” of −11 as a connection point. The partner to be connected from the company X or the company Y is the company A or the company C, the company A uses the ICS logical terminal address “9922” of the access control device 1010-21 as a connection point, and the company C uses the access control device 1010− The ICS logical terminal address “9944” of 41 is a connection point. Access control device 101
0-21 and 1010-4 are ATM exchanges 10133-
21 and ATM exchanges 10133-11 and 10133-11.
0133-21 is connected via a relay network.

<< Preparation >> For ATM exchanges 10133-11 and 10133-21, ATM exchange 10133
-11 Internal Conversion Unit 1033-11 and ATM Switch 10
One PVC virtual channel connecting the conversion unit 1033-21 inside the 133-21 is set, and the virtual channel ID given to the conversion unit 1033-11 of this virtual channel is set.
To “33”, the conversion unit 1033-21 of this virtual channel.
Is set to "44". VC address conversion table 1433-1 in conversion section 1033-11
1 and VC address conversion table 1 in conversion section 1033-21
For 433-21, registration as shown in FIG. 59 is performed.

<< Frame Flow of N-to-N Communication >> The flow of a frame for N-to-N communication will be described first with reference to frames transmitted from company X to companies A and C, respectively. The originating ICS network address “77” from company X to company A
11 "and the terminating ICS network address" 992 "
The ICS network frame having "2" is
By referring to the VC address conversion table 1433-11 in 33-1, the data is transmitted to the PVC virtual channel of the virtual channel ID "33". The originating ICS network address “7711” and the incoming call I from company X to company C
Similarly, the ICS network frame having the CS network address “9944” has the virtual channel ID “3”.
3 "PVC virtual channel. Next, company Y
Will be described with frames transmitted to companies A and C, respectively. The ICS network frame having the outgoing ICS network address “7722” and the incoming ICS network address “9922” directed from the company Y to the company A can be obtained by referring to the VC address conversion table 1433-11 in the conversion unit 1033-11. , Virtual channel ID
It is transmitted to the PVC virtual channel of “33”. The originating ICS network address “7722” and the terminating ICS network address “9” directed from company Y to company C
Similarly, the ICS network frame with 944 "
Sent to the PVC virtual channel with virtual channel ID “33”.

Next, the flow of the frame in the reverse direction will be described with reference to frames transmitted from company A to companies X and Y, respectively. The ICS network address having the outgoing ICS network address “9922” and the incoming ICS network address “7711” directed from the company A to the company X can be obtained by referring to the VC address conversion table 1433-21 in the conversion unit 1033-2. , Virtual channel ID
It is transmitted to the PVC virtual channel of “44”. The originating ICS network address “9922” and the terminating ICS network address “7” directed from company A to company Y
The ICS network frame having “722” is transmitted to the PVC virtual channel with the virtual channel ID “44” by referring to the VC address conversion table 1433-2 in the conversion unit 1033-2. ICS with directed outgoing ICS network address "9944" and incoming ICS network address "7711"
The network frame is transmitted to the PVC virtual channel with the virtual channel ID “44”. The originating ICS network address “994” directed from company C to company Y
4 "and incoming ICS network address" 7722 "
Is also transmitted to the PVC virtual channel with the virtual channel ID “44”. As described above, one PVC virtual channel is shared and N-to-N
Communication takes place.

Embodiment 17 (Another Embodiment Using FR Network): Another embodiment in which a network inside an ICS of the present invention is formed using an FR network will be described. In this embodiment,
(1) Supplementary explanation of prior art related to FR, (2) Description of components, (3) Flow of frame using SVC, (4) PVC
(5) One-to-N communication or N-to-one communication using PVC, and (6) N-to-N communication using PVC will be described in this order. In this embodiment, the SVC or PV
It is possible to use either of the two types using C, or to use both types in combination.
Each case using is described. The intra-enterprise communication service and inter-enterprise communication service described in the first embodiment, and the virtual leased line service described in the second embodiment are realized by the access control device of the present invention. It is not necessary to consider frame communication separately, and in this embodiment, these communication services will be integrated and described.

(1) Supplementary explanation of prior art related to FR:
A supplementary description will be given of the conventional technology related to FR necessary for describing a method of configuring the inside of the ICS of the present invention using the FR network. Frame relay uses a variable-length communication information unit called a frame to perform communication, and designates a communication path in units of a frame to store and exchange frames in a circuit network and perform logical multiplexing (one physical communication). This is a conventional technology standardized by the ITU.TI.233 recommendation or the like, which realizes a technology of multiplexing a line into a plurality of logical lines. A communication service using this technology is called a frame mode bearer service (Frame Mod
e Bearer Service: "FMBS")
In FMBS, Frame Switch Bearer Service (Frame Switch Bearer Ser.
vice: hereafter referred to as “FSBS”) and a frame relay bearer service on the premise of Permanent Permanent Connection (PVC)
(Frame Relay Bearer Service: hereinafter referred to as “FRBS”). The term "frame relay" may generally refer only to the FRBS ("frame relay" in a narrow sense), but in the ICS of the present invention,
"Frame Relay" FM including FSBS and FRBS
It is used as a name that refers to the entire BS ("frame relay" in a broad sense). In particular, "frame relay using SVC" when only FSBS is specified, and "frame using PVC" especially when only FRBS is specified. Relay ". Hereinafter, “frame relay in a broad sense (F
MBS) is abbreviated as FR, and a frame transferred on the FR network is particularly called an "FR frame" to distinguish it from an ICS frame.

In the FR network, a plurality of logical lines can be set on a physical line as described above, and this logical line is called a logical channel. In order to identify a logical channel, identifiers respectively assigned to FR terminals connected to both ends of the logical channel (commonly referred to as communication devices connected to the FR network and performing communication using the FR network) are referred to as data link connection identifiers (Data link connection identifiers). Link Connection Identifier:
LCI ")). The logical channels include:
SVC and PVC are defined by the setting method. The SVC sets up a logical channel when necessary, and can establish a logical line with an arbitrary FR terminal at a required speed for a required time. The call setting of the logical channel is performed by the FR terminal that intends to start communication, and this method is standardized as a signaling method in ITU-T. To set up the call, the partner F who sets up the call
An address for identifying the R terminal (hereinafter, referred to as “FR address”) is required, and the FR address is systematized so that each FR terminal can be uniquely identified in the FR network. The PVC sets call settings fixedly in the FR exchange and can be regarded as a virtual dedicated line from the viewpoint of the FR terminal.

For the established logical channel, the SV
C and PVC are assigned a DLCI for identifying a logical channel, and when transferring an FR frame, a DLCI is added to the DLCI bit portion of the FR frame address portion shown in FIG.
Set the CI. The format of the FR frame address part is 3
Although there is a definition of the type, FIG. 60 shows an address part in a 2-byte format. The performance (channel performance) of the logical channel of the FR network includes a committed information rate (Committed Information Rate; hereinafter referred to as “CIR”), which is an information transfer rate guaranteed in a normal state (a state in which no congestion occurs).
And so on).

In order to transfer a communication frame such as an ICS network frame via the FR network, it is necessary to convert the communication frame into an FR frame as shown in FIG. When the FR frame is received, the reverse conversion is performed. As shown in FIG. 61, a communication frame (ICS network frame) is extracted from the FR frame and restored. This FR frame conversion is a standardized technology according to the ITU-T recommendations. The protocol header in the user data of the FR frame is standardized in RFC1490 of IETF.

(2) Description of components: FIGS. 62 and 63
Focusing on the FR network 1041 from FIG. 35 of FIGS. 34 to 36, the conversion unit 1032-1 described inside the FR exchange 1013-1 and the conversion unit described inside the FR exchange 101132-2 The internal structure of the unit 1032-2 is described and the access control devices 1010-2 and 1010-1 described in FIGS. 34 to 36 are simplified. In the method of configuring the inside of the ICS using the FR network, the basic structure of the internal configuration of the access control device or the operation of the processing device in the access control device is the same as that described in the first embodiment.

The access control device 1010-5 is ICS9
ICS network addresses “7711” and “7722” are assigned as connection points (ICS logical terminals) between companies X and A, which are 25 users. The access control device 1010-7 is similarly provided with ICS network addresses “7733” and “7744” as connection points between the companies W and C, respectively. The access control device 1010-6 is similarly provided with ICS network addresses “9922” and “9933” as connection points of the companies Y and B, respectively, and the access control device 1010-8 is similarly assigned to the companies Z and D. As the connection points, the ICS network addresses “99
44 "and" 9955 ". Here, in the embodiments shown in FIGS. 62 and 63, companies X and Y shown as examples of users are the same company that performs intra-company communication. May be different bases or different companies performing inter-company communication.

Conversion unit 1 inside FR exchange 10132-5
032-5 has an interface unit 1132-5, and the interface unit 1132-5 has the access control device 101.
Communication line 1812-5 connecting the F.0-5 to the FR exchange 10132-5, and the access control device 1010-7 and the F
Communication line 1812 for connecting to R exchange 10132-5
Responsible for matching the interface (physical layer, data link layer protocol) with -7.
The conversion unit 1032-5 includes an SV unit in addition to the processing unit 1232-5.
FR address conversion table 1532- for call setup by C
5 and a DLC address conversion table 1432-5 for converting addresses from an ICS network address used for both SVC and PVC to a logical channel. The FR exchange 10132-5 includes an FR address management server 1632-5 as an information processing device for storing an FR address conversion table, and a DL in the case of using PVC.
By connecting to a DLC address management server 1732-5 as an information processing device for storing a C address conversion table,
Performs processing related to address translation. FR exchange 1013
Also regarding the components related to 2-6, the FR exchange 101
Same as 32-5. In this embodiment, the access control device 1010-5 is connected to the FR exchange 10132-5 via the communication line 1812-5, and the access control device 1010-7 is connected to the FR exchange 10132-5 via the communication line 1812-7. 6 via a communication line 1812-6,
The access control device 1010-8 is connected to the communication line 181.
Each is connected to the FR exchange 10132-6 through 2-8. The FR exchange 10132-5 provides the internal conversion unit 1032-5 with the only FR address “297” in the network.
7 "is set, and the FR exchange 10132-6 is
A unique FR address “2999” in the network is set in the internal conversion unit 1032-6. FR exchange 1013
2-5 and 10132-6 are connected via the FR relay network, but in this example, they are connected via the FR exchange 10132-7 representing the FR relay network.

(3) Flow of frame using SVC: As shown in FIGS. 62 and 63, the network inside the ICS is composed of an FR network, and the SVC is used as a communication path in the FR network.
Will be described with reference to an example of an ICS user frame issued from a terminal in company X to a terminal in company Y.

<< Preparation >> FR address conversion table 1532 in conversion section 1032-5 inside FR exchange 10132-5
-5, the destination ICS indicating the destination of the ICS network frame to be transferred from the conversion unit 1032-5 to the FR network.
A network address, an incoming FR address indicating a destination for setting up a logical channel in the FR network, and a channel performance such as an authorized information rate required for the logical channel are registered. Also, the FR address conversion table 153 in the conversion unit 1032-6 inside the FR exchange 10132-6.
The same registration is made for 2-6.

As an embodiment, the FR address conversion table 1532
The values to be set in -5 are: an incoming ICS network address; an address for communication with the company Y;
The ICS network address “9922” assigned to the ICS logical terminal of the access control device 1010-6 is set, and the access control device 101 is set as the incoming FR address.
The FR address “2999” assigned only in the FR network is registered in the conversion unit 1032-6 inside the FR exchange 10132-6 to which 0-6 is connected. In the present embodiment, a certified information rate of 64 Kbps is set for the channel performance. The content registered in the FR address conversion table 1532-5 is also written and stored in the FR address management server 1632-5.

The values set in the FR address conversion table 1532-6 are the incoming ICS network address, the address for communication with the company X, and the ICS assigned to the ICS logical terminal of the access control device 1010-5.
Set the network address “7711” and set the incoming FR
The conversion unit 1032 inside the FR exchange 10132-5 to which the access control device 1010-5 is connected as an address
Register the FR address "2977" uniquely assigned in the FR network for -5. In the present embodiment, a certified information rate of 64 Kbps is set for the channel performance. The content registered in the FR address conversion table 1532-6 is also written and stored in the FR address management server 1632-6.

<< ICS Network Frame Transfer from Access Control Device >> Issued from the terminal of company X to the terminal of company Y connected to access control device 1010-6 via access control device 1010-5. The ICS user frame is encapsulated in ICS when passing through the access control device 1010-5, and becomes an ICS network frame F1 having an originating ICS network address “7711” and an incoming ICS network address “9922” inside the ICS frame header. . The ICS network frame F1 is transmitted from the access control device 1010-5 to the FR exchange 10132-5, and the interface unit 113 which processes electric signal conversion / matching of a communication path and the like.
Through 2-5, it reaches the conversion unit 1032-5. Hereinafter, description will be made with reference to the flowchart of FIG.

<Acquisition of DLCI> Upon receiving the ICS network frame F1 (step S1701), the conversion unit 1032-5 converts the frame into the FR exchange 10132.
In order to transfer data to -5, the S realizes the FR network communication path in the ICS 925 determined by the correspondence between the outgoing ICS network address “7711” and the incoming ICS network address “9922” in the ICS frame header.
It is necessary to find the DLCI of the VC logical channel. SV
In the case of communication based on C, at the time of receiving an ICS network frame, there may be a case where a logical channel corresponding to this communication path has been established and a case where it has not been established yet. The processing device 1232-5 first checks whether the logical channel corresponding to the pair of the source ICS network address “7711” and the destination ICS network address “9922” is DLC in order to know whether the logical channel has been established.
It is searched whether it is registered in the address conversion table 1432-5 (step S1702).
It knows that the desired logical channel has been established. That is, from the DLC address conversion table 1432-5, the transmission I
DL corresponding to the pair of CS network address “7711” and incoming ICS network address “9922”
It obtains that the CI is “16” and, from the simultaneously obtained channel type value “10”, knows that this logical channel is communication based on SVC. If D
If there is no registration on the LC address conversion table 1432-5, the logical channel to be obtained is established by performing << call setting >> described later, and at that time the DLC address conversion table 1432 is established.
The DLCI is obtained from the information registered on -5 (step S1703).

<< Call setting >> In the above, "when the DLCI corresponding to the communication path determined by the correspondence between the originating ICS network address and the terminating ICS network address is not registered in the DLC address conversion table 1432-5" ,
That is, if the logical channel corresponding to the communication channel has not been established, the call setting described below is performed, and the ICS 925 is set.
, It is necessary to establish a logical channel in the FR network, and an operation example of this call setup will be described.

Processing unit 1232- of conversion unit 1032-5
5 refers to the DLC address conversion table 1432-5,
The originating ICS network address "771" inside the ICS frame header of the ICS network frame F1
When it is found that there is no DLCI corresponding to the pair of the incoming ICS network address "9922" and the destination ICS network address "9922", F
With reference to the R address conversion table 1532-5, an incoming ICS network address “9922” registered in the FR address conversion table 1532-5 that matches the incoming ICS network address “9922” is found, and the corresponding incoming FR address “2999” is found. , And the corresponding channel performance “64K” are obtained (step S1705). As described in the << Preparation >> section, the incoming FR address “2999” is used as the incoming ICS network address “9”.
The conversion unit 1032-6 inside the FR exchange 10132-6 to which the access control device 1010-6 having the ICS logical terminal to which 922 ”is assigned as a connection point is connected.
This address is set to be unique in the FR network.

[0219] The processing device 1232-5 receives the incoming call F
Using the R address "2999", the FR exchange 10132
A request for call setting is made to -5, and at this time, a channel performance such as an authorized information rate of the logical channel simultaneously obtained from the FR address conversion table 1532-5 is also requested (step S1706). When the FR exchange 10132-5 receives the call setup request, the FR exchange 10132-5 uses a signaling method that is provided as a standard in the FR exchange itself as a conventional technique.
, And establishes a logical channel connecting the conversion units 1032-5 and 1032-6 in the FR exchange network reaching the FR exchange 10132-6. The DLCIs assigned to identify the established logical channels are converted from the FR exchanges into conversion units 1032-5 and 1032
6, the value is notified from the calling side FR exchange 10132-5 (for example, "16") and the value is notified to the called side FR exchange 10
The value notified from 132-6 (for example, “26”)
They are not necessarily the same value. In conversion section 1032-5, FR
DLCI "16" notified from exchange 10132-5
With the originating ICS network address “7711” and the terminating ICS network address “9922” of the ICS network frame F1.
432-5 (step S1707), and holds it on the DLC address conversion table 1432-5 while the connection of this logical channel is established. When the logical channel connection is no longer required, the conversion unit 1032-5 requests the FR exchange 10132-5 to release the logical channel, and together with the DLC address conversion table 1432-5, the DLCI
The registration corresponding to “16” is deleted. The conversion unit 103
The registration in the DLC address conversion table 1432-6 in 2-6 will be described later.

<< Transmission of Frame >> The processing unit 1232-5 of the conversion unit 1032-5 receives the logical channel (DLCI "16") established according to the above description from the access control unit 1010-5. The converted ICS network frame F1 is converted into an FR frame as shown in FIG. 61 and transferred to the FR exchange 10132-5 (step S1704).

<< Transfer of FR Frame >> The FR frame S1 obtained by converting the ICS network frame F1 by the above-described method is transferred from the FR exchange 10132-5 to the relay FR exchange 10132-5, and further, the FR frame is exchanged. The data is transferred from the exchange 10132-5 to the FR exchange 10132-6 as an FR frame S2. Hereinafter, description will be made with reference to the flowchart in FIG.

<< Operation after Arrival of Frame >> FR Frame S
2 arrives at the FR exchange 10132-6 (step S1710), the FR frame is
2-6 to conversion unit 1 inside FR exchange 10132-6
032-6. The conversion section 1032-6 restores the ICS network frame from the FR frame as shown in FIG. 61 (step S1711). Although the restored ICS network frame is described as ICS network frame F2 in FIG. 63, the contents of the frame are the same as ICS network frame F1.
The ICS network frame F2 has an incoming ICS network address “99” inside the ICS frame header.
22 "access control device, ie IC
IC with S network address "9922"
The data is transferred to the access control device 1010-6 having the S logical terminal (step S1712).

At this time, the conversion unit 1032-6 uses the ICS
The originating ICS network address "7711" of the network frame F2, the terminating ICS network address "9922", the channel type "10" indicating the SVC known at the time of the incoming call, and the SVC logical channel are assigned at the time of call setup. And the obtained DLCI "26",
It is registered in the DLC address conversion table 1432-6 (step S1714). At this time, the outgoing ICS network address “7711” of the ICS network frame F2 is sent to the incoming ICS network address of the DLC address conversion table 1432-6, and the incoming ICS network address “9922” of the ICS network frame F2 is sent to the DLC.
Write in the address translation table 1432-6 in the reverse location to the originating ICS network address. However, at the time of this registration, if the same content as the content to be registered has already been registered in the DLC address conversion table 1432-6,
No registration is performed. The address conversion information registered in the DLC address conversion table 1432-6 is held on the DLC address conversion table 1432-6 while the connection of the corresponding logical channel (DLCI “26” in this example) is maintained. You.

<< Frame Reverse Flow >> Next, the reverse flow of the ICS frame, that is, the flow from company Y to company X, is based on the assumption that the SVC logical channel is set up. 62 and 63 will be described in the same manner. When the ICS user frame issued from the company Y to the company X is transmitted through the access control device 1010-6,
S encapsulated, the originating ICS network address “9922”, the destination ICS network address “77”
11 ″ is converted into the ICS network frame F3 having the ICS frame header inside the ICS frame header.
-6 is transferred to the conversion unit 1032-6 inside. Conversion unit 1
The processing device 1232-6 of 032-6 performs processing according to the flow of FIG. 64, but the DLC address conversion table 1432-6 of the conversion section 1032-6 already has the outgoing ICS network address “9922” and the incoming ICS Since the DLCI “26” corresponding to the network address “7711” is registered as the channel type “10”, that is, the SVC, the DLCI operates according to the flow (1) of FIG.
ICS network frame F3 for "26"
It is converted into an R frame (FR frame S3) and transferred.

[0225] The FR frame S3 is relay-transferred through the FR network, and becomes an FR frame S4.
5 and the conversion unit 1032-5 outputs the DLCI "1"
6 ”, and is restored as an ICS network frame F4 having the same content as the ICS network frame F3.
In -5, the source ICS network address “9922” and the destination ICS network address “7
Since the pair with “711” is already registered in the DLC address conversion table 1432-5 in the opposite form, registration in the DLC address conversion table is not performed, and the ICS network frame F4 is transmitted to the access control device 1010-5. Transfer to

<< Application Example to Half-Duplex Communication >> As described above,
The internal network of CS925 is composed of FR network,
When transferring a CS frame from company X to company Y,
Conversely, with regard to the transfer from company Y to company X, 1
The implementation using the SVC logical channel has been described. Such a transfer in the reverse direction is performed by, for example, ICS.
Frame (transfer) from the client terminal of the company X connecting to the ICS to the server terminal of the company Y connecting to the ICS
When this is applied to a response frame (reverse transfer) from the server terminal of company Y to the client terminal of company X in response to this request frame, only one-way communication is performed temporarily, but the communication direction is switched for each time zone. This is an application example of half-duplex communication that realizes two-way communication.

<< Application Example to Full-Duplex Communication >> The logical channel itself set in the FR network conforms to the full-duplex communication,
That is, simultaneous two-way communication is possible. In the FR network, a transfer using one SVC logical channel and a reverse transfer are performed by, for example, request frames (transfer) from a plurality of client terminals of the company X connected to the ICS to a plurality of server terminals of the company Y connected to the ICS. When applied to a response frame (reverse transfer) from the plurality of server terminals of the company Y to the plurality of client terminals of the company X in response to the request frame, the frame between the client terminal and the server terminal is asynchronously transferred. Becomes the communication path 1
The two SVC logical channels are simultaneously subjected to two-way communication, which is an application example of full-duplex communication.

(4) Flow of frame using PVC: IC
The internal network of S925 is constituted by the FR network,
An embodiment in which PVC is applied as a communication path in the R network will be described using an ICS user frame emitted from a terminal of a company W to a terminal of a company Z as an example.

<< Preparation >> DLC address conversion table 143 in conversion section 1032-5 inside FR exchange 10132-5
2-5, an FR network (FR network) is used as a communication path between the transmission ICS network address of the ICS network frame transferred from the conversion unit 1032-5 to the FR network, the destination ICS network address, and the transmission / reception ICS network address pair. Exchange 10132-5 and FR exchange 1
The DLCI of the PVC fixedly set to the communication channel with 0132-6) and the channel type indicating that the logical channel is PVC are registered. This registration is different from the case of the SVC, and the FR exchange (1013
2-5, 10132-5, and 10132-6), when setting the PVC logical channel, simultaneously register in the DLC address conversion table 1432-5,
That is, the PVC logical channel is fixedly held until the setting is released. The DLC address conversion table 1432-6 in the conversion unit 1032-6 inside the FR exchange 10132-6.
It is registered and held in the same way. The DLCI of PVC
Is assigned to each FR exchange when the PVC is fixedly connected between the FR exchanges.

The value to be set in the DLC address conversion table 1432-5 is, as the originating ICS network address, the address for communication with the company W, that is, the IC assigned to the ICS logical terminal of the access control apparatus 1010-7.
S network address “7733” is set,
The communication address with the company Z as the CS network address, that is, the ICS network address “994 assigned to the ICS logical terminal of the access control device 1010-8.
4 ”. Further, as the DLCI, the FR exchange 1
PVC logical channel ID assigned to 0132-5
“18” is set, and a value “20” indicating PVC is set in the channel type. DLC address conversion table 14
The settings to be registered in 32-5 are also written and stored in the DLC address management server 1732-5. Also, D in conversion section 1032-6 inside FR exchange 10132-6 is
Similar settings are made in the LC address conversion table 1432-6 in a manner that the originating ICS network address and the destination ICS network address are reversed. In this case, even if the same PVC is indicated, the DLCI may have a different value from the DLC address conversion table 1432-5.

The value set in the DLC address conversion table 1432-6 is an address for communication with the company Z as an originating ICS network address, that is, the ICS assigned to the ICS logical terminal of the access control apparatus 1010-8.
Set the network address "9944" and set the incoming IC
Address for communication with the company W as the S network address, that is, the ICS network address “773 assigned to the ICS logical terminal of the access control device 1010-7.
3 "is set. Further, the FR exchange 101 is set in the DLCI.
"28" is set as the ID of the PVC logical channel allocated to 32-6, and "20" indicating PVC is set as the channel type. DLC address conversion table 14
The settings to be registered in the 32-6 are also written and stored in the DLC address management server 1732-6.

<< ICS Network Frame Transfer from Access Control Device >> As described in Embodiment-1, a company connected to the access control device 1010-8 from the terminal of the company W via the access control device 1010-7. The ICS user frame issued to the terminal of Z is encapsulated in the ICS when passing through the access control device 1010-7, and the source ICS network address “7733” and the destination ICS network address “9944” are stored in the IC.
This is the ICS network frame F5 inside the S frame header. The ICS network frame F5 is transmitted from the access control device 1010-7 to the FR exchange 10132-.
5 and reaches the conversion unit 1032-5 via the interface unit 1132-5.

<< Acquisition of DLCI >> Processing Unit 1232-5
Uses the outgoing ICS network address “7733” and the incoming ICS network address “9944” in the header of the received ICS network frame F5, refers to the DLC address conversion table 1432-5, and communicates with the ICS network address pair. Is obtained that the DLCI of the logical channel set as “18” is “18”. At the same time, it is known from the acquired channel type value “20” that this logical channel is PVC.

<< Transmission of Frame >> Processing Unit 1232-5
Is the PVC logical channel “1” obtained as described above.
8 ", the ICS network frame F5 received from the access control device 1010-7 is converted into an FR frame and transmitted to the FR exchange 10132-5.
The method of R frame conversion is the same as that described in the example of SVC. FIG. 64 is a flowchart showing the processing procedure of the conversion unit 1032-5, and the flow of (1) is always performed in PVC.

<< Transfer of FR Frame >> FR frame S1 obtained by converting ICS network frame F5
Indicates that the relay FR exchange 10
132-5, and then the FR exchange 10132-5.
Is transferred to FR exchange 10132-6 as FR frame S2, but this operation is the same as in the case of SVC.

<< Operation After Arriving at Frame >> FR Frame S
2 arrives at the FR exchange 10132-6, the FR frame S2 is transmitted from the FR exchange 10132-6 to the FR exchange 1
It is transferred to the conversion unit 1032-6 inside 0132-6. The conversion unit 1032-6 restores the ICS network frame from the received FR frame, but this operation is the same as in the case of SVC. Although the restored ICS network frame is described as ICS network frame F6 in FIG. 63, the contents of the frame are the same as ICS network frame F5. The ICS network frame F6 receives the incoming call I inside the ICS frame header.
The data is transferred to the access control device identified by the CS network address “9944”, that is, the access control device 1010-8 having the logical terminal assigned the ICS network address “9944”. The above conversion unit 103
FIG. 65 is a flowchart showing the processing procedure of 2-6, and the PVC always passes the flow (1).

<< Flow in the Reverse Direction of Frame >> Next, the flow in the reverse direction of the ICS frame, that is, the flow from the company Z to the company W, will be described using a PVC logical channel as a communication path. The ICS user frame issued from the company Z to the company W is transmitted through the access control device 1010-8.
S encapsulated, the originating ICS network address “9944” and the terminating ICS network address “7”
733 "is converted into an ICS network frame F7 having an ICS frame header inside the ICS frame header.
The data is transferred to the conversion unit 1032-6 inside the 32-6. The processing unit 1232-6 of the conversion unit 1032-6 performs processing according to the flow of FIG. 64. In this case, the conversion unit 1032-6
The DLC address conversion table 1432-6 of FIG.
DLCI corresponding to S network address "9944" and terminating ICS network address "7733"
Since “28” is registered, the ICS network frame F7 is converted into an FR frame and transmitted to DLCI “28”. The FR frame transferred in the FR network is converted by the conversion unit 1032-5 of the FR exchange 10132-5.
Received from the logical channel having DLCI "18",
I having the same contents as the ICS network frame F7
It is restored as CS network frame F8. However, the conversion unit 1032-5 outputs the outgoing ICS network address “9944” and the incoming ICS network address “77” held in the header of the ICS network frame F8.
33 is already registered in the DLC address conversion table 1432-5 in the form of reverse transmission and reception, and the DLCI “18” for this transmission and reception address pair is converted from the channel type value “20” to PVC. Since there is a certain fact, the registration process is not performed, and the ICS network frame F8 is transferred to the access control device 1010-7.

<< Application Example to Half Duplex Communication >> As described above,
Although the internal network of the CS 925 is configured using the FR network, and the embodiment of the transfer of the ICS frame using the PVC has been described, the PVC and the SVC may determine whether the logical channel is fixedly set or call setting when necessary. The operation itself for transferring the FR frame to the set logical channel is not different. Therefore, when the ICS is configured using the FR network and the PVC network is used for the FR network, an example of application to half-duplex communication is an example of application to half-duplex communication using the SVC logical channel. Are equivalent.

<< Application Example to Full-Duplex Communication >> For the same reason as the application example to the half-duplex communication, the application example to the full-duplex communication of PVC is the application example to the full-duplex communication in SVC. Is equivalent to

(5) One-to-N communication or N-to-one communication using PVC: In the above description, one logical channel of PVC is a communication path connecting one company (base) and one company (base). In the ICS, the embodiment in which one ICS logical terminal is used as a communication path for connecting one ICS logical terminal has been described. It is possible to share as. With reference to FIG. 66, an example of such one-to-N communication or N-to-one communication will be described.

<< Description of Constituent Elements >> Company X uses the ICS logical terminal provided with the ICS network address “7711” in the access control device 1010-52 as a connection point, and the access control device 1010-52 is a FR exchange. 10
132-52. The partners to be connected from the company X are the companies A to D, and the company A is the access control device 1
ICS network address “992” in 010-62
The ICS logic terminal assigned “2” is a connection point, and the company B
Is an ICS logical terminal provided with an ICS network address “9923” in the access control device 1010-62 as a connection point. Similarly, company C has access control device 1
ICS network address “994-010”
The ICS logic terminal assigned 4 "is set as a connection point, and the company D
Is an ICS logical terminal to which the ICS network address “9955” in the access control device 1010-82 is assigned as a connection point. The access control devices 1010-62 and 1010-82 are connected to the FR exchange 10132-62, and the FR exchanges 10132-52 and 10132-62.
Are connected via an FR relay network.

<< Preparation >> For FR exchanges 10132-52 and 10132-62, FR exchange 10132-5
2 internal conversion unit 1032-52 and FR exchange 10132
One PVC logical channel is set to connect the conversion unit 1032 to the conversion unit 1032 in the −62. DLC given to
Let I be "26". DLC in conversion unit 1032-52
Address conversion table 1432-52 and conversion unit 1032-6
6 for the DL address conversion table 1432-62 in FIG.
Registration as shown in FIG.

<< Flow of Frame for One-to-N Communication >> The flow of a frame for one-to-N communication will be described with reference to frames transmitted from company X to companies A to D, respectively. Outgoing ICS network address "7711" from company X to company A
And the ICS network frame having the incoming ICS network address “9922” is converted by the conversion unit 1032-5.
By referring to the DLC address conversion table 1432-52 at 2, the data is transmitted to the PVC logical channel of DLCI “16”. The ICS network frame having the originating ICS network address “7711” and the terminating ICS network address “9933” directed from the company X to the company B is also transmitted to the DLCI “16” PVC logical channel. Outgoing call I from company X to company C
CS network address "7711" and incoming ICS
An ICS network frame having a network address "9944", an originating ICS network address "7711" directed from company X to company D, and an incoming IC
Similarly, the ICS network frame having the S network address “9955” also has a PVC of DLCI “16”.
Sent to a logical channel. This indicates that one-to-N (company X-company A-D) communication is performed by sharing one PVC logical channel. Reverse flow of the frame,
That is, the case where the frame is transferred from the companies A to D to the company X will be described below.

<< Flow of N-to-1 Communication Frame >> The flow of the 1-to-N communication frame will be described with reference to frames transmitted from companies A to D to company X, respectively. Outgoing ICS network address "9922" from company A to company X
And the ICS network frame having the incoming ICS network address “7111” is converted by the conversion unit 1032-6.
By referring to the DLC address conversion table 1432-62 at 2, the data is transmitted to the PVC logical channel of DLCI "26". Similarly, the ICS network frame having the originating ICS network address “9933” and the terminating ICS network address “7711” directed from the company B to the company X is transmitted to the PVC logical channel of DLCI “26”. Outgoing call I from company C to company X
CS network address "9944" and incoming ICS
ICS network frame with network address "7711", origination I from company D to company X
CS network address "9955" and incoming ICS
The ICS network frame having the network address “7711” is also transmitted to the DLCI “26” PVC logical channel. This means that N to 1 (Company A)
ＤD vs. company X) indicates that communication is performed by sharing one PVC logical channel.

(6) N to N communication using PVC: 1 to N
By the same method as the communication, it is possible to share one logical channel of the PVC as a communication path between a plurality of ICS logical terminals. Referring to FIG.
An embodiment of the N-to-N communication will be described.

<< Description of Constituent Elements >> Company X sets the ICS logical terminal address “771” of access control apparatus 1010-13.
1 "is a connection point, and the company Y
-13, the ICS logical terminal address “7722” is used as a connection point, and the access control device 1010-13 is connected to the FR exchange 1
0132-13. The partner to be connected from the company X or the company Y is the company A or the company C, and the company A
Uses the ICS logical terminal address “9922” of the access control device 1010-23 as a connection point, and the company C sets the ICS logical terminal address “992” of the access control device 1010-43.
44 "is a connection point. The access control device 1010
-23 and 1010-43 are FR exchanges 10132-2
3 and FR exchanges 10132-13 and 101
32-23 are connected via an FR relay network.

<< Preparation >> For the FR exchanges 10132-13 and 10132-23, the FR exchange
3 internal conversion unit 1032-13 and FR exchange 1013
One PVC logical channel connecting the conversion units 1032-23 inside the 2-23 is set, the DLCI given to the conversion unit 1032-13 of this logical channel is set to "16", and the conversion unit 1032-23 of the logical channel is set. DLC given to
Let I be "26". DLC in converter 1032-13
Address conversion table 1432-13 and conversion unit 1032-2
3 is registered in the DLC address conversion table 1432-23 in FIG.

<< Flow of N-to-N Communication Frame >> The flow of N-to-N communication frame will be described first with reference to frames transmitted from company X to companies A and C, respectively. The originating ICS network address “7” from company X to company A
711 ”and the terminating ICS network address“ 992 ”
The ICS network frame having "2" is
By referring to the DLC address conversion table 1432-13 at 32-13, the data is transmitted to the PVC logical channel of DLCI "16". Also, an ICS having a source ICS network address “7711” and a destination ICS network address “9944” directed from company X to company C
Similarly, the network frame has a P of DLCI "16".
Sent to VC logical channel. Next, a description will be given using frames transmitted from the company Y to the companies A and C, respectively. An ICS network frame having a sending ICS network address “7722” and a receiving ICS network address “9922” directed from company Y to company A is
DLC address conversion table 143 in conversion section 1032-13
2-13, the PVC of DLCI "16"
Sent to a logical channel. Also, the originating ICS network address “772” directed from company Y to company C
2 "and incoming ICS network address" 9944 "
ICS network frame with
Sent to the "16" PVC logical channel.

Next, the flow of the frame in the reverse direction will be described with reference to frames transmitted from company A to companies X and Y, respectively. For the ICS network address having the outgoing ICS network address “9922” and the incoming ICS network address “7711” directed from the company A to the company X, refer to the DLC address conversion table 1432-23 in the conversion unit 1032-23. And DLCI
Sent to the "26" PVC logical channel. Also, an ICS network frame having a sending ICS network address “9922” and a receiving ICS network address “7722” directed from company A to company Y is as follows:
DLC address conversion table 143 in conversion section 1032-23
2-23, the PVC of DLCI "26"
Sent to a logical channel. Similarly, the originating ICS network address “9” directed from company C to company X
944 ”and the incoming ICS network address“ 771 ”
An ICS network frame with "1" is a DLCI
Sent to the "26" PVC logical channel. The originating ICS network address “9944” and the terminating ICS network address “7” directed from company C to company Y
The ICS network frame with “722” is also D
Sent to the PVC logical channel of LCI "26". According to the above description, one PVC logical channel is shared and N
It is indicated that communication with N is performed.

Embodiment-18 (telephone line, ISDN line,
CATV line, satellite line, IPX line, accommodating mobile telephone line): The connection to the access control device, which is the access point to the ICS of the present invention, is performed by the LAN as described in the first and second embodiments. Communication line (exclusive line, etc.), telephone line, ISDN line, C
An ATV line, a satellite line, an IPX line, and a mobile phone line can be accommodated, and another embodiment different from the tenth embodiment will be described.

FIGS. 68 to 71 show a telephone line, an ISDN line, a CATV line, a satellite line,
This shows an example of a system for accommodating a PX line and a mobile telephone line, and line units 6011-1 and 6011-2 are telephone line conversion units 6030-1 and 6030-, respectively.
2. ISDN line conversion units 6029-1 and 6029-
2. CATV line conversion units 6028-1 and 6028-
2. Satellite link converters 6027-1 and 6027-2, I
It is composed of PX converters 6026-1 and 6025-2 and mobile phone converters 6025-1 and 6025-2.
The telephone line conversion units 6030-1 and 6030-2 are provided with a physical layer and a data link layer (OSI (Open Systems Interconnection)) between the telephone lines 6160-1 and 6160-2 and the access control devices 601O-1 and 601O-2. It has a function of conversion and reverse conversion of functions corresponding to the first and second layers of the communication protocol). Further, the ISDN line conversion units 6029-1 and 6029-2 are connected to the ISDN line 6
161-1 and 6161-2 and the access control device 601
It has a function of conversion and reverse conversion of a function corresponding to a physical layer and a data link layer between 0-1 and 6010-2, and CATV line conversion units 6028-1 and 6028-2.
Has a function of conversion and reverse conversion of functions corresponding to the physical layer and the data link layer between the CATV lines 6162-1 and 6162-2 and the access control devices 6010-1 and 6010-2. Further, the satellite link converter 6027-
1 and 6027-2 are satellite lines 6163-1 and 616-1.
63-2 and access control device 6010-1 or 601
It has a function of conversion and reverse conversion of a function corresponding to a physical layer and a data link layer between the IPX conversion unit 6 and the IPX conversion unit 6.
026-1 and 6026-2 are IPX lines 6164
1 and 6164-2 and a function of conversion and reverse conversion of functions corresponding to a physical layer and a data link layer between the access control devices 6010-1 and 6010-2. The mobile phone conversion units 6026-1 and 6026-2 have functions corresponding to a physical layer and a data link layer between the mobile phone wireless lines 6165-11 and 6165-2 and the access control devices 6010-1 and 6010-2. It has conversion and inverse conversion functions.

ICS frame interface network 6050
Is the ICS frame interface network 10 shown in FIG.
This is a network of the same type as 50, and transfers an ICS network frame in accordance with RFC791 or RFC1883 in the same format. X. 25 network 6040 is also the X.25 network of FIG. This is the same type of network as the X.25 network 1040. The frame is converted into a frame of 25 format and transferred, and finally converted back to the format of the ICS network frame and output. The FR network 6041 is also the same type of network as the FR network 1041 in FIG. 35, accepts an ICS network frame, converts it into a frame relay format frame, transfers it, and finally converts it back into an ICS network frame format and outputs it. I do. The ATM network 6042 is also shown in FIG.
This is a network of the same type as the ATM network 1042, which accepts an ICS network frame, converts it into an ATM format frame, transfers it, and finally converts it back into an ICS network frame format and outputs it. The satellite communication network 6043 is the same type of network as the satellite communication network 1043 in FIG.
The S network frame is accepted, the information is transferred using a satellite, and finally the data is converted back to the ICS network frame format and output. Also, the CATV network 6044
Accepts ICS network frames and CATV
After converting the frame into a frame, transfer the frame inside
The data is converted back to the CS network frame format and output.

<< Common Preparation >> Access Control Unit 6010
The conversion table 6013-1 in -1 includes the originating ICS network address, the sender ICS user address, and the receiver IC.
S user address, incoming ICS network address,
Contains request identification. This request identification represents, for example, “1” for the intra-company communication service, “2” for the inter-company communication service, “3” for the virtual leased line connection, and “4” for the ICS network server connection. The conversion table 6013-1 includes Example-1 and Example-2.
The registered address is described in the same manner as the above. I
The CS network server 670 has the ICS user address “2000” and the ICS network address “782”.
1 ", which is connected to the access control device 6010-1 via the ICS network communication line 6081-1.
013-1 includes the recipient ICS of the ICS network server 670.
The user address “2000”, the incoming ICS network address “7821”, and the request identification “4” are registered.

The operation will be described with reference to the flowchart in FIG. << Communication from telephone line to ISDN line >> User 6060
-1 sends the ICS user frame F110 having the sender ICS user address "3400" and the receiver ICS user address "2500" to the access control device 6010-1 via the telephone line 6160-1. The access control device 6010-1 transmits the ICS network address “77
The ICS user frame F110 is received from the 21 "telephone line conversion unit 6030-1 (step S1800).
ICS network address “7721” is converted to conversion table 60
In 13-1, it is checked whether or not the request identification is registered as the virtual leased line connection "3" (step S180)
1). In this case, since it has not been registered,
Recipient ICS written on user frame F110
The user address “2500” is registered on the conversion table 6013-1 (step S1803), and it is checked whether the request identification is registered as inter-company communication “2” (step S1804). In this case, since the registration has been made, the terminal acquires the incoming ICS network address “5522” from the conversion table 6013-1 and performs processing such as charging for inter-company communication (step S1805).
The user frame F110 is encapsulated in the ICS (step S1820), and the ICS network frame F120 is encapsulated.
To ICS via the ICS network communication line 6080-1
Transmission to the frame transfer network 6030 (step S182)
5). The ICS network frame F120 is, for example, X.100. 25 network 6040 and ICS network communication line 6080-2
To the access control device 6010-2, where the ICS decapsulated and the ICS user frame F11
0 is restored and the recipient ICS user address "250
The user 6061-2 of "0" is reached.

<< Communication from ISDN Line to CATV Line
>> The user 6061-1 has the sender ICS user address “3500” and the receiver ICS user address “260”
An ICS user frame Fll of "0" is transmitted to the access control device 6010-1 via the ISDN line 6161-1. The access control device 6010-1 transmits the ISDN line converter 6 of the ICS network address "7722".
The ICS user frame Flll is received from 029-1 (step S1800), and it is checked whether or not the request identification is registered as the virtual leased line connection "3" in the conversion table 6013-1 (step S1800). Step S1801). In this case, since the virtual leased line connection “3” is registered, the destination ICS network address “5523” is acquired from the conversion table 6013-1, and processing such as charging for the leased line connection is performed (step S1802). User frame Fllll IC
S (Step S1820), converts the packet into an ICS network frame F121,
The data is transmitted to the ICS frame transfer network 6030 via 080-1 (step S1825).

In connection with the virtual leased line, the sender ICS user address and the receiver ICS user address written in the ICS network frame Fll need not be used inside the access control device. Next, the ICS network frame F121 is, for example, F
The access control device 6010-2 reaches the access control device 6010-2 via the R network 6041 and the ICS network communication line 6080-2, and is decapsulated by the ICS to restore the ICS user frame F11l.
Via the CATV line unit 6028-2 to which
User 6 connected from CATV line 6162-2
062-2 is reached.

<< Communication from the CATV Line to the Satellite Line >> The user 6062-1 receives the sender ICS user address "3".
600 ”and the ICS user frame F112 of the receiver ICS user address“ 2700 ”are transmitted to the CATV line 616.
The data is sent to the access control device 6010-1 via 2-1. The access control device 6010-1 transmits the CAT network address “7723” to the CATV line conversion unit 602.
8-1 is received from the ICS user frame F112 (step S1800), and it is checked whether or not this ICS network address “7723” is registered in the conversion table 6013-1 as the request identification as the virtual leased line connection “3”. (Step S1801). In this case, since it is not registered, the receiver ICS user address “2700” written on the ICS user frame F112 is next.
Are registered in the conversion table 6013-1 (step S
1803) Further, it is checked whether or not the request identification is registered as inter-company communication "2" (step S180).
4). In this case, since the inter-company communication “2” is registered, the incoming ICS network address “5524” is acquired from the conversion table 6013-1, and processing such as charging for the inter-company communication is performed (step S1805). ICS encapsulation of the frame F112 (step S
1820), it is converted into an ICS network frame F122, and transmitted to the ICS frame transfer network 630 via the ICS network communication line 6080-1 (step S1825).
The ICS network frame F120 is, for example, an ATM.
The access control device 6010-2 reaches the access control device 6010-2 via the network 6042 and the ICS network communication line 6080-2, and is decapsulated by the ICS to restore the ICS user frame frame F112. To reach.

<< Communication from Satellite Line to IPX Line >> The user 6063-1 has the sender ICS user address "37".
00 ”and the ICS user frame F113 of the receiver ICS user address“ 2800 ”
1 to the access control device 6010-1. The access control device 6010-1 receives the ICS user frame F113 from the satellite channel conversion unit 6027-1 of the ICS network address “7724” (step S
1800), ICS network address “7724”
It is checked whether or not the request identification is registered as the virtual leased line connection “3” on the conversion table 6013-1 (step S1801). In this case, since it has not been registered, the receiver ICS user address “2800” written on the ICS user frame F113 is converted to the conversion table 6013-
1 (step S1803), and checks whether the request identification is registered as inter-company communication "2" (step S1804). In this case, since the inter-company communication “2” is registered, the incoming ICS network address “5525” is acquired from the conversion table 6013-1, and processing such as charging for the inter-company communication is performed (step S1805). IC with frame F113
S (Step S1820), converts the packet into an ICS network frame F123,
The data is transmitted to the ICS frame transfer network 6030 via 080-1 (step S1825). The ICS network frame F123 reaches the access control device 6010-2 via, for example, the ICS frame interface network 6050 and the ICS network communication line 6080-2, and is decapsulated with the ICS to restore the ICS user frame F113.
User 60 of recipient ICS user address "2800"
64-2 is reached.

<< Communication from IPX Line to Cellular Phone Line >>
The user 6064-1 has a sender ICS user address “0012” and a receiver ICS user address “290”.
ICS user frame F114 of IPX line 6
The data is transmitted to the access control device 6010-1 via 164-1. The access control device 6010-1 transmits the IPX line conversion unit 602 of the ICS network address “7725”.
The ICS user frame F114 is received from the 6-1 (step S1800), and it is checked whether or not the request identification is registered as the virtual leased line connection "3" in the conversion table 6013-1 in the conversion table 6013-1 (step S1800). Step S1801). In this case, since it is not registered, the receiver ICS user address “2900” written on the ICS user frame F114 is registered on the conversion table 6013-1 (step S18).
03) Further, it is checked whether or not the request identification is registered as inter-company communication “2” (step S1804). In this case, since “2” is not registered, it is checked whether the request identification is registered as intra-company communication “1” (step S1810). In this case, inter-company communication "1"
Is registered, the incoming call I is obtained from the conversion table 6013-1.
It acquires the CS network address “5526” and performs processing such as charging for intra-company communication (step S18).
11), the ICS user frame F114 is encapsulated in ICS (step S1820), converted into an ICS network frame F124, and the ICS network communication line 6080-
Then, the packet is transmitted to the ICS frame transfer network 6030 through the step 1 (step S1825). ICS network frame F1
24 is an access control device 6010- via a CATV line network 6044 and an ICS network communication line 6080-2, for example.
2, the ICS is decapsulated to restore the ICS user frame F114, and reaches the user 6065-2 having the recipient ICS user address "2900".

<< Communication from Cellular Phone Line to Telephone Line >> The user 6065-1 uses the sender ICS user address “3”.
800 "and the recipient ICS user address" 2400 "
ICS user frame F115 of the mobile phone line 61
The data is sent to the access control device 6010-1 via the line 65-1. The access control device 6010-1 is connected to the mobile phone line conversion unit 603 of the ICS network address “7726”.
The ICS user frame F115 is received from 5-1 (step S1800), and it is checked whether or not the request identification is registered as the virtual leased line connection "3" in the conversion table 6013-1 in the conversion table 6013-1 (step S1800). Step S1801). In this case, since it is not registered, the receiver ICS user address “2400” written on the ICS user frame F115 is converted to the conversion table 6
013-1 (step S180).
3) It is further checked whether or not the request identification is registered as inter-company communication "2" (step S1804). In this case, since the request identification is registered as the inter-company communication “2”, the incoming ICS network address “5521” is acquired from the conversion table 6013-1, and processing such as charging for the inter-company communication is performed (step S1805). , ICS user frame F115 is encapsulated in ICS (step S1820), converted to ICS network frame F125, and transmitted to ICS frame transfer network 6030 via ICS network communication line 6080-1 (step S182).
5). The ICS network frame F120 includes, for example, a satellite network 6043 and an ICS network communication line 6080-2.
Arrives at the access control device 6010-2 via the
The ICS user frame F115 is restored by decapsulation, and reaches the user 6060-2 having the receiver ICS user address "2400".

<< Communication from Cellular Phone Line to ICS Network Server >> The user 6066-1 has the sender ICS user address “3980” and the receiver 1CS user address “20”.
An ICS user frame F116 of “00” is transmitted to the access control device 6010-1 via the mobile phone line 6166-1. Receives the ICS user frame F116 (step S1800), and checks whether the ICS network address “7726” is registered in the conversion table 6013-1 as the request identification as the virtual leased line connection “3” (step S1801). In this case, since it is not registered, the receiver ICS user address “2000” written on the ICS user frame F116 is registered on the conversion table 6013-1 (step S180).
3) It is further checked whether or not the request identification is registered as inter-company communication "2" (step S1804). In this case, since it is not registered, it is checked whether or not the request identification is registered as intra-company communication "1" (step S1810). In this case, since it is not registered, it is checked whether the request identification is registered as communication "4" with the ICS network server (step S1812). In this case, since the registration has been made, the incoming ICS is obtained from the conversion table 6013-1.
The network address “7821” is acquired, and processing such as charging for intra-company communication is performed (step S181).
3), the ICS user frame F116 is encapsulated in ICS (step S1820), converted into an ICS network frame, and transmitted to the ICS network server 670 (step S1825). The method in which the ICS network server 670 returns a reply to the transmission source user 6066-1 is the same as the method described in the third embodiment.

In the various transmission methods of the ICS user frame described above, the transmitting user changes the receiver ICS user address written in the ICS user frame so that the transmitting side can change the telephone line, the ISDN line, the CATV line.
Line, satellite line, IPX line, mobile phone line, telephone line on receiving side, ISDN line, CATV
Any of a line, a satellite line, an IPX line, and a mobile phone line can be selected.

Example-19 (Dial Apple Computer):
An example using a dial applet will be described with reference to FIGS. User 740 inside LAN 7400
0-1 has an ICS user address "2500", and similarly, a user 7410-1 inside the LAN 7410 has an IC
It has an S user address “3601”. The person who manages the dial-up router 7110 inputs the telephone numbers designated corresponding to the receiver ICS user addresses and their priorities from the router table input unit 7018-1 to the router table 713-1 of the dial-up router 7110. here,
Referring to FIG. 76, the registered contents of the router table 713-1 will be described. When the receiver ICS user address “3601” is designated, the first priority is the telephone number “03-11”.
11-1111 ", and the second priority is the telephone number" 0 "
3-2222-2222 ", and the third priority is the telephone number" 03-3333-3333 ". Receiver IC
The S user addresses "3602" and "3700" are also registered. Then, from the sender ICS user address “2500” to the receiver ICS user address “360”
An example of communication to "1" will be described with reference to the flowchart of FIG.

The user 7400-1 transmits the ICS user frame F200 via the gateway 7400-2 and the user logical communication line 7204 to the dial-up router 711.
Send to 0. The dial-up router 7110 is a processing device 7
It operates under the control of 112-1 and receives the ICS user frame F200 (step S190).
1) The receiver ICS user address “3601” included in the ICS user frame F200 is read, and the router table 711 is used with the address “3601” as a search keyword.
3-1 is searched (step S1902), and a telephone number having a higher priority is found. In this case, the telephone number with the highest priority is "03-1111-" as shown in the router table of FIG.
1111 ", the dial-up router 7110
Calls the telephone number “03-1111-1111” via the telephone network 7215-1 as a first attempt (step S1910). As a result, the telephone number "03-
A telephone communication path 7201 is established with the line unit 7011-1 of the access control device 7010-1 called by "1111-1111", that is, the dial-up router 7110 and the line unit 7011-1 are connected by a telephone line. . If the dial-up router 7110 and the line unit 7011-1 are not connected by a telephone line in the above-mentioned telephone calling procedure, the dial-up router 7110 next determines the telephone number “03” having the second highest priority according to the router table 7113-1.
-2222-2222 ", and as a second attempt, the telephone number" 03-22 "via the telephone network 7215-1.
22-2222 "(step S191).
1). As a result, the telephone number “03-2222-222”
Access control device 7010-1 called by "2"
A telephone communication path 7202 is established with the line unit 7011-1. If the dial-up router 7110 and the line section 7011-1 are not connected by a telephone line in the above-mentioned telephone calling procedure, the dial-up router 7110 next determines the telephone number of the third highest priority according to the router table 713-1. “03-3333-3333” was found, and as a third attempt, the telephone number “03” was entered via the telephone network 7215-3.
-3333-3333 "(step S1).
912). As a result, the telephone number “03-3333-33”
33 "called by the access control device 7010-
A telephone communication path 7203 is established with the third line unit 7011-3. Note that when a telephone communication path is not established from the dial-up router to the access control device even after a plurality of attempts, the dial-up router 7110 receives the received ICS.
The frame F200 is stored in the storage unit 7117-1 (step S1913), and after a predetermined time (step S1914).
Then, the router table is indexed again (step S1902), and an attempt is made to establish telephone communication paths 7201, 7202, 7203 and the like.

Next, the dial-up router 7110
The operation after the connection between the and the line unit 7011-1 via the telephone line will be described. The dial-up router 7110 enters an authentication procedure to determine whether or not the user is a legitimate user registered as a user in the access control device 701O-1 (step S1920). The authentication procedure may be any procedure that can achieve the purpose of the authentication. For example, the dial-up router 7110
Sends an ID and a password for identifying the dial-up router 7110 to the line unit 7011-1 through the telephone line 7201, and sends the access control device 7010-1
The authentication unit 7016-1 checks whether the received ID and password are correct, and if correct, the user is correct,
That is, the notification data for notifying “affirmation” is transmitted to the telephone communication path 7.
By transmitting the data to the dial-up router 7110 via 201, the authentication procedure is completed. The received ID
If any of the passwords is incorrect, the communication via the telephone communication path 7201 is interrupted.

When dial-up router 7110 receives the notification of the positive confirmation in the user authentication from telephone line 7201, it transmits ICS user frame F200 to telephone communication line 7201.
201 (step S1930), and confirms that the access control device 7010-1 has received the ICS user frame F200, releases the telephone communication path 7201 and disconnects the telephone (step S1931). Is terminated.

Upon receiving the ICS user frame F200, the access control device 7010-1
ICS encapsulation is performed using the conversion table 7013-1 under the management of the ICS network frame F301.
Is generated, and the ICS network communication line 73 inside the ICS 7100 is generated.
01. In the present embodiment, the originating ICS network address of the ICS network frame F301 is “7501” of the network address assigned to the ICS logical terminal in the line unit 7011-1, and the terminating IC
The S network address is the access control device 7010-
"8601" assigned to the ICS logic terminal No. 2.
ICS network frame F301 is ICS7100
To reach the access control device 7010-2,
Here, the ICS is decapsulated and the user logical communication line 7
After passing through 601, the user reaches the user 7410-1 having the ICS user address “3601”.

In the above description, dial-up router 7110 and line unit 70 of access control device 7010-1
11-1 and the telephone number "03-2222-222"
When the telephone communication path 7202 called in “2” is established, the ICS user frame F200 is transmitted to the telephone communication path 720.
2 is transferred from the dial-up router 7110 to the line unit 7011-1. Also in this case, similarly to the above, when receiving the ICS user frame F200, the access control device 7010-1 performs ICS encapsulation, and
The CS network frame F302 is generated and the ICS7
100 to the ICS network communication line 7301 inside. Here, the ICS user frame F302 has the originating ICS user address “7502” and the terminating ICS user address “8601”.

When a telephone communication path 7203 called by telephone number “03-3333-3333” is established between dial-up router 7110 and line section 7011-3 of access control apparatus 7010-3, an ICS user frame F200 passes through the telephone communication path 7203,
From dial-up router 7110 to line section 7011-3
Is forwarded to In this case, the access control device 7010-
3 receives the ICS user frame F200, performs ICS encapsulation, and performs ICS network frame F303.
Is generated, and the ICS network communication line 73 inside the ICS 7100 is generated.
03. In this case, the originating ICS network address of the ICS network frame F303 is the network address “7800” given to the ICS logical terminal in the line unit 7011-3, and the terminating ICS network address is the I / O address of the access control device 7010-2.
“8601” given to the CS logic terminal. ICS
The network frame F303 is transferred through the ICS 7100 and reaches the access control device 7010-2, where the ICS is decapsulated and the user logical communication line 7601 is transmitted.
To the user 7410-1 at the ICS user address "3601".

Embodiment-20 (Speed Class and Priority) << Configuration >> As shown in FIGS. 78 to 80, the ICS8000-
1 is an access control device 8010-1, 8010-2,
801O-3, 8010-4, relay device 8020-1,
An ICS address management server 8025-1 and an ICS network server 8027-1 are provided.
1,8030-2,8030-3,8030-4,80
30-5 and 8030-6. Line section 801
1-1, the processing device 8012-1, and the conversion table 8013-1 are all provided inside the access control device 8010-1. The ICS logical communication lines 8051-1, 8051-2,
8051-3 and 8051-4 are connected, respectively, and IC
S network addresses “7721”, “7723”,
“7724” and “7725” are respectively assigned. The ICS network communication line in ICS8000-1 is IC
A speed class representing the standard of the speed at which the S network frame is transferred is given. Line 8030
-3 and 8030-5 have a speed class of "3", and the ICS network communication line 8030-4 has a speed class of "2". The speed class is defined based on the same standard as the speed class registered in the conversion table 8013-1. IC address management server 8025-1 has IC
The S network address “7811”, the ICS network server 8027-1 has the ICS network address “782”
1 "is assigned to each of the ICS network communication lines 8054-
1 and 8054-2 are connected to the access control device 8010-1.

User 8400 as ICS Communication Terminal
1 has an ICS user address "2500",
A user 8400-2 as an ICS communication terminal is connected to a line unit 8011-1 via a logical communication line 8051-1.
Has an ICS user address "2510", and has access control device 801 via ICS logical communication line 8052-1.
0-2, the user 84 as an ICS communication terminal
00-3 has an ICS user address "3600",
The user 8400-4 has the ICS user address “36”.
10 ", and are connected to the access control device 8010-3 via the gateway 8041-1 and the ICS logical communication line 8053-1, respectively.
The method for registering the ICS network address and the ICS user address in the first embodiment is the same as that in the first embodiment and the second embodiment.
80, the speed class and the priority are registered as shown in FIG. 80, and the speed class and the priority are registered in the address management server 8025-1.
In the corresponding IC as a part of the address related information
It is stored together with the S user address.

The speed class is expressed by a numerical value or the like instead of the speed unit. For example, the communication speed is 64K.
bps is represented by speed class 1, communication speed 128 Kbps is represented by speed class 2, and similarly, communication speed 500 Mbps is represented by speed class 7. The numerical value of the speed class is determined to be higher as the numerical value is larger. FIG. 81 shows an example of the correspondence between the communication speeds and the speed classes.
It is not necessary to use the seven stages, and the number may be subdivided into, for example, approximately 20 stages in accordance with the progress of communication technology. Further, the communication speed does not need to exactly match the physical communication speed of the ICS network communication line in the ICS8000-1. For example, 25% of the physical communication speed corresponds to allow a margin in the communication speed. You may do so. The priority is expressed by a numerical value, for example, in eight stages, and indicates the priority when the ICS network frame is transmitted from the access control device or the relay device to the ICS network communication line when compared in the same speed class. The numerical value of the priority is set to a higher priority as the numerical value is larger. For example, the relay apparatus receives two ICS network frames F510 and F511 at almost the same time, and the speed class of these two frames is the same value “3”.
And the priority of the ICS network frame F510 is “3”, and the ICS network frame F511
If the priority is "5", the ICS network frame F511 having the higher priority is transmitted earlier in time.

In the present embodiment, for example, the ICS network communication lines 8030-3 and 8030-4
-1 to the access control device 8010-3, "in the same communication route", and the ICS network communication line 8030-
5 and 8030-6 are said to be "in the same communication route" from the relay device 8020-1 to the access control device 8010-4. The communication route may be directed from the access control device to the relay device, or from one relay device to another relay device connected by the ICS network communication line. A plurality of ICS network communication lines of the same speed class may exist on the same communication path, and in this case, the same speed class may be on the same ICS network communication line.

<< Operation >> The operation will be described with reference to the flowcharts of FIGS. 82 and 83. User 8400-
1 sends an ICS user frame F500 having a sender ICS user address “2500” and a receiver ICS user address “3600” to the ICS logical communication line 8051-1. Processing device 80 of access control device 8010-1
12-1 receives the ICS user frame F500 from the ICS logical terminal of the ICS network address “7721” of the line unit 8011-1, and acquires the ICS network address “7721” (step S200).
1) It is checked whether the address “7721” is registered in the conversion table 8013-1 as the request identification as the virtual leased line connection “3” (step S2002). In this case, since the ICS user frame F5 has not been registered, the ICS user frame F5 corresponds to the ICS network address “7721”.
00, the receiver ICS user address “3”
600 ”(step S2004), it is checked whether the address“ 3600 ”is registered in the conversion table and the request identification is registered as inter-company communication“ 2 ”(step S2005). The conversion table 8013 is prepared as preparation for performing ICS encapsulation.
-1 to incoming ICS network address "5522"
Is acquired, and information relating to charging of the speed class “3” and the priority “3” is acquired from the conversion table 8013-1 (step S2006). Next, the speed class “3” and the priority “3” are given to the ICS network frame control unit.
ICS encapsulation is performed by generating an ICS network frame F510 in which is written (step S2).
020), and sends it out to the ICS network communication line 8030-1 (step S2021).

In the above description, the ICS network frame is for inter-enterprise communication with a request identification of “2”. However, for a virtual line connection with a request identification of “3”, the conversion table 8013-1 ICS network address, speed class, priority, etc. are obtained from the ICS, and information related to billing is obtained (step S2003). For example, in the case of intra-company communication "1", the conversion 8013-1 Get address, speed class, priority, etc.
Further, information related to charging is acquired (step S201).
1) In the case of communication "4" to the ICS network server, the destination ICS network address and the like are acquired from the conversion table 8013-1, and information related to charging is acquired (step S).
2013), after the ICS encapsulation, the ICS network server 80
27-1.

The ICS network frame F510 generated according to the above-described procedure is the ICS network communication line 8030-
1 to the relay device 8020-1. At this time,
At about the same time, another ICS network frame F51
1 is the relay device 80 via the ICS network communication line 8030-2.
Suppose that it reached 20-1. The ICS network frame F511 is transmitted from the user 8400-2 as the ICS user frame F501, and is sent to the ICS logical communication line 80.
The access control device 8010-2 reaches the access control device 8010-2 via the 52-1, where it is encapsulated into an ICS network frame F511.
2 is transmitted and reaches the relay device 80201-11. Relay apparatus 8020-1 receives ICS network frames F510 and F511 (step S2).
030), under the control of the processing device 8021-1, first examine the relay table 8022-1 to find out which of the ICS network frames F510 and F511 is the ICS network communication line, that is, find the communication route (step S2031). ,
It is divided for each communication route (step S2032). In the case of the present embodiment, the two ICS network frames F5
10 and F511, the transmission destination is the relay device 802.
0-1 to the access control device 8010-3, which are communication routes of the ICS network communication lines 8030-3 and 8030.
-4, there are two ICS network communication lines. Next, in both of the ICS network frames F510 and F511, the speed class described in the control unit is read and divided for each speed class (step S2041), and thereafter, the procedure for each divided speed class is performed. In the case of this embodiment, the IC
The speed classes of the S network frames F510 and F511 are both “3”. Next, ICS of the same speed class
As for the frames, the priorities described in the respective control units are read, and transmitted from the ICS frame having the higher priority (step S2042). In the case of the same priority, any may be transmitted first. As a result of the above processing, the relay device 8
020-1 sends the ICS network frame F511 to the ICS network communication line 8030-3 first, and then sends the ICS network frame F511.
The network frame F510 is transferred to the ICS network communication line 80.
30-3. In the above procedure, if there is only an ICS network communication line with a lower speed than the speed class described in the control unit of the ICS network frame F510, information on the decrease in the communication service due to the speed decrease, that is, the corresponding ICS network The sender ICS user address and the receiver user address described in the frame, the time (year, month, day, hour, minute, second) of the communication service and the like are recorded in the relay operation file 8023-1. The contents of the relay operation file are notified to the user of the ICS 8000-1 in response to a request.

According to the above procedure, the two ICS network frames F511 and F510 have the higher priority I
CS user frame F511 precedes in time,
The data is transferred through the S network communication line 8030-3 and reaches the access control device 8010-3. The ICS network frame F511 is decapsulated by ICS to become an ICS user frame F501, and the ICS logical communication path 8053-1.
Through the user 84 of the ICS user address “3610”
00-4 is reached. ICS network frame F5
10 is decapsulated by the ICS to become the ICS user frame F500, and the user 8400 having the ICS user address “3600” is transmitted via the ICS logical communication path 8053-1.
Reach 3

Next, options for using the priority are shown. At the time of ICS encapsulation, the conversion table 8013-
When the speed class and priority registered in No. 1 are transferred to the ICS network frame, the processing device 8012-
1 checks the length written in the ICS user frame control unit to be processed, and sets the priority value only when, for example, the ICS user frame is equal to or less than a predetermined value (for example, 256 bytes). Is transferred to the ICS network frame. In this way, a short ICS user free
A service that transfers the inside of the ICS 8000-1 preferentially only for the system can be realized. With this method, the ICS800
The 0-1 operator can easily realize a communication service that raises the priority of a short ICS user frame, that is, increases the communication fee. If the ICS user frame is short for the user, the throughput is more reliable. Whether or not to adopt the priority option is achieved by, for example, determining for each access control device. It should be noted that the above method may be implemented by executing only the speed class and excluding the priority, that is, as the same priority. In another embodiment, the conversion table 8013-1 does not include the sender ICS user address (intra-company and inter-company). Even in this case, the flowchart of FIG. 82 does not change because it does not originally refer to the sender ICS user address.

Embodiment 21 (Addition of Electronic Signature to ICS User Frame): An embodiment will be described in which an ICS user frame is electronically signed to prove that the ICS user frame has passed through the access control device. An embodiment for encrypting an ICS user frame when requested will be described. First, a technique of an electronic signature (electronic signature) used in the present embodiment will be described. In using an electronic signature, there are a signer who creates the electronic signature and a verifier of the signature. The signer a simultaneously generates a pair of the signing key KSa and the verification key KPa of the signer a, holds the signature key KSa in secret, and discloses only the verification key KPa by some means. The signer a is a secret signing key KSa of only the signer a.
Is used to generate an electronic signature σ depending on the data m and the signature key KSa. When expressed by an equation, the following equation 1 is obtained.

[0280]

Σ = SIGN (KSa, h (m)) where SIGN is a signature function representing a signature function, and a function y = h (m) is an electronic function having a function of compressing data m into short data. This is a hash function for signature. Verifier b uses publicly available verification key KPa,

The validity of the digital signature σ is verified by ν = TEST (σ, KPa, h (m)). If ν = 1, the digital signature σ and the data m are both correct, and the digital signature σ
Indicates that both the digital signature σ and the data m have not been rewritten and have not been tampered with. Also, ν =
If 0, one or both of the digital signature σ and the data m are incorrect. The verification key KPa is widely disclosed by an appropriate means, for example, through a public key guidance service center that provides a gazette or a public key guidance service, a general advertisement, or the like. Even if the verification key KPa is made public, the signature key KS
Techniques for creating a signature function SIGN that makes the calculation of a virtually impossible are known.

Next, a procedure for adding an electronic signature to an ICS user frame will be described. "Time / location parameters" indicating conditions relating to the time and place at which the electronic signature is applied, that is, the time including the date, month, day, hour, minute, and second at which the electronic signature is applied, the person in charge of the operation of the access control apparatus, and the identification symbol of the access control apparatus. P1 "and the signature function SIGN or the hash function h (m)
"Signature function parameter P2", which indicates the type of signature and the length of the signature key, is also a target of the electronic signature. This is expressed by the following equation (3).

[0282]

Σ = SIGN (KSa, h (m)) where m = UF‖P1‖P2. Here, the UF is the ICS user frame before the ICS encapsulation, or the restored IC after the ICS decapsulation.
Represents the S user frame. The receiving user is ICS
The user frame UF, the time / location parameter P1, the signature function parameter P2, and the digital signature σ are received as UF‖P1‖P2‖σ in the receiving-side ICS user frame.
This is illustrated in FIG. Further, there is a method in which the writing area of the parameters P1 and P2 and the electronic signature σ is made an empty area inside the ICS user frame UF as shown in FIG. In this case, the ICS user frame U
When the empty area of F is represented by Data, the digital signature σ is

Σ = SIGN (KSa, h (m)) where m = Data‖P1‖P2. And the signature verification is

Ν = TEST (σ, KPa, h (m)) where m = Data‖P1‖P2. Do as.

Further, for example, the length of the ICS user frame UF is 2048 bytes, and the length of UF {P1} P2} σ is 2448 bytes (2048 bytes + 400 bytes)
, A field representing the length of the frame inside the control unit of the ICS user frame UF (for example, FIG. 1)
00 total length field) from 2048 bytes to 2448 bytes. By this method, the ICS user frame whose length field has been rewritten is represented by UF '. When employing such an embodiment, the digital signature σ is

Σ = SIGN (KSa, h (m)) where m = UF′‖P1‖P2. And the signature verification is

Ν = TEST (σ, KPa, h (m)) where m = UF′‖P1‖P2. Do as.

In this embodiment, the order in which UF, P1 and P2 are arranged may be changed. For example, m = Pl‖P2‖U
An electronic signature σ = SIGN (KSa, h (m)) may be calculated as F, and P1‖P2‖UF‖σ may be set inside the ICS user frame on the receiving side. In this embodiment,
The function of encryption is represented by y = ENC (K1, x), and the function of decryption is represented by x = DEC (K2, y). Here, x is plaintext data, y is ciphertext data, ENC is an encryption function, and DE is
C represents a decryption function, K1 represents an encryption key, and K2 represents a decryption key. The digital signature technique is also called a digital signature. For example, W. Diffie, ME Hell
man's dissertation "New Direction in Cryptography" IEEE, I
T. Vol.IT-22, No.6, p.644-654, 1976, published by Shokodo 1990, Shigeo Tsujii, "Cryptography and Information Security," p.127-
138.

<< Configuration >> As shown in FIGS. 86 and 87,
The ICS 9000-1 is an access control device 9010-1,
9010-2, 9010-3 and relay device 9120-1
ICS network communication lines 9030-1 and 9030- for transferring ICS network frames.
2,9030-3. The line unit 9011-11, the processing device 9012-1, the conversion table 9013-1, and the digital signature unit 9017-1 are all provided in the access control device 90.
10-1 is provided inside. Electronic signature unit 9017
Inside -1, a signature key KSa, a verification key KPa, a program module for realizing an electronic signature function SIGN and a hash function h (m), a time / location parameter P1, and a signature function parameter P2 are included. Here, Ken Ken
“a” is a secret value held by the access control device 9010-1. Since the digital signature unit internally holds a secret signature key, it is necessary to prevent the secret signature key from leaking outside. For example, the electronic signature unit is stored in a physically strong box so that the signature key cannot be read from outside. A plurality of ICS logic terminals of the line unit 9011-1 include:
ICS network addresses “7721”, “772”
2 "," 7725 "," 7726 "," 7727 ",
“7728” is assigned. Encryption / decryption means 9
018-1 includes an encryption function and holds an encryption key K1 and a decryption key K2. When the ICS user frame UF1 is input, the encrypted text UF2 is converted to UF2 = ENC (K
1, UF1), and when the ciphertext UF2 is input, the plaintext is obtained as UF1 = DEC (K2, UF2).

<< Operation >> The operation will be described with reference to the flowchart of FIG. The user 9400-1 has an ICS user frame F90 having a sender ICS user address “2500” and a receiver ICS user address “3600”.
0 is sent to the ICS logical communication line 9051-1. Processing device 9012-1 of access control device 9010-1
Receives the ICS user frame F900 from the ICS logical terminal of the ICS network address “7721” of the line unit 9011-1, acquires the ICS network address “7721” (step S2001), and converts the address “7721” into the conversion table 9013−. Then, it is checked whether or not the request identification is registered as the virtual leased line connection "3" (step S2002). In this case, since it is not registered, the ICS network address "77
The receiver ICS user address “3600” written on the ICS user frame F900 corresponding to “21” is acquired (step S2004), and this address “360” is obtained.
It is checked whether "0" is registered in the conversion table and whether the request identification is registered as inter-company communication "2" (step S2005).
In preparation for performing the CS encapsulation, the conversion table 9013-1
And obtains the incoming ICS network address “5522” from the server. Next, information relating to the charging of the speed class and the priority is acquired from the conversion table 9013-1 (Step S).
2006). Since “1” is specified in the signature column of the conversion table 9013-1 and “YES” is registered in the transmission electronic signature column at the same time, the processing device 9012-1 stores the electronic signature in the electronic signature unit 9017-1. Electronic signature function SIGN
Module that implements a hash function h (m), time / location parameter P1, signature function parameter P
2 to generate a digital signature of the ICS user frame F900 by the above-mentioned digital signature technique,
Create a user frame (represented by UF2) (step S
2019). When expressed by an equation, the following equation 8 is obtained.

[0287]

UF2 = m‖σ where m = F900‖P1‖P2, σ = SIGN (K
Sa, h (m)). In the above procedure, even if “1” is specified in the signature field of the conversion table 9013-1, if “NO” is registered in the transmission electronic signature field, the electronic signature unit 9017
-1 does not work and no electronic signature is given. Next, since the encryption class is designated as “1”, the ICS user free
UF2 is encrypted by the encryption / decryption means 9018-1 and a new ICS user frame UF3 (= ENC
(K1, UF2)). When the encryption class is “0”, no encryption is performed.

Next, the ICS in which the speed class, the priority, and the encryption class are written in the ICS network frame control unit.
By generating a network frame F901, I
CS encapsulation is performed (step S2020), and ICS
The packet is sent to the ICS network communication line 9030-1 inside the 9000-1 (step S2021). In the above description, I
The CS network frame is an example of inter-enterprise communication with a request identification of “2”. For example, in the case of a virtual line connection with a request identification of “3”, the conversion table 9013-1 relates to an incoming ICS network address, charging, and the like. Information is acquired (step S2003), and in the case of intra-company communication with the request identification "1", information on the incoming ICS network address, billing, etc. is acquired from the conversion table 90131-1 (step S2003).
2011), in the case of communication to the ICS network server with the request identification “4”, information on the destination ICS network address, billing, etc. is acquired from the conversion table 9013-1 (step S2013).

The ICS network frame F901 generated by the above-described procedure is the ICS network communication line 9030-
1 and the access control device 9010-2 via the relay device 9120-1.
It becomes CS user frame F902, and ICS user address “3600” via ICS logical communication path 9051-3.
Reaches user 9400-2. Here, F902 =
m‖σ, m = UF1‖P1‖P2, where UF1 is I before transmission
CS user frame F900, P1 is time / location parameter, P2 is digital signature parameter, σ is digital signature, σ =
SIGN (KSa, h (m)).

<< Electronic Signature and Decryption in ICS Decapsulation >> The user 9400-3 has the sender ICS user address “3610” and the receiver ICS user address “2”.
A 510 "ICS user frame F930 is transmitted to the ICS logical communication line 9051-4. The access control device 9
010-3 receives the ICS user frame F930, performs ICS encapsulation using the internal conversion table,
A CS network frame F931 is generated and transmitted to the ICS network communication line 9030-3. The ICS network frame F931 is composed of the media device 9120-1 and the ICS.
Access control device 901 via network communication line 9030-1
0-1 and the IC under the management of the conversion table 9013-1
S is inversely encapsulated to become an ICS user frame UF1. Since the encryption class is specified as "1" in the control unit of the ICS network frame F931, the ICS user frame (UF1) obtained by decapsulation is encrypted by the encryption / decryption means 9018-1. Decoding is performed to obtain an ICS user frame UF1 '. UF1 '= DEC (K2, UF
1), and if the encryption class is “0”, no decryption is performed.

Next, “1” is designated in the signature column of the conversion table 9013-1, and at the same time, “Y” is entered in the reception electronic signature column.
ES ”, the electronic signature unit 901 is registered here.
7-11 operate, parameters P1 and P2 and an electronic signature σ are added in the same manner as described above, and a new ICS
The user frame becomes F932. Expressed as a symbol, F9
32 = m‖σ, m = UF1‖P1‖P2, digital signature ＝=
SIGN (KSa, h (m)), which is UF1 'instead of UF1 when the decoding is performed. In the above procedure, even if “1” is specified in the signature field of the conversion table 9013-1, if “NO” is registered in the reception electronic signature field, no electronic signature is given. . The ICS user frame F932 receives the ICS user address 25 via the line unit 9011-1 and the logical communication line 9051-4.
Reach ten users 9400-4.

<< Signature Request >> Sender ICS user address "2800", Receiver ICS user address "3
700 ”ICS user frame F940
When input from 11-1, the request identification is "2" corresponding to the ICS network address "7728" and the signature column of the conversion table 9013-1 corresponding to the receiver ICS user address "3700" “0” and “YES” are registered in the transmission electronic signature field at the same time. Since “1” is specified in the “signature request” field written at a predetermined position in the ICS user frame F940, the electronic signature unit 9017-1 operates, and the parameters P1, P2 and A new ICS user frame is provided with the electronic signature σ. The conversion table 9013-1
In the field of the signature of “0” or “1”, if “NO” is registered in the field of the electronic signature upon transmission, even if “1” is specified in the field of the signature request of the ICS user frame, the ICS No digital signature is given prior to encapsulation. Similarly, if “0” or “1” is registered in the signature column of the conversion table 9013-1 and “NO” is registered in the electronic signature upon reception column, the ICS
Even if “1” is specified in the signature request field of the user frame, no electronic signature is given after the ICS is decapsulated.

On the other hand, in the case where the ICS user frame is digitally signed at the time of transmission by the transmission-side access control device and further digitally signed at the time of reception by the reception-side access control device, FIG.
As shown in (1), an electronic signature at the time of transmission and an electronic signature at the time of reception are added. Also, the verification key KPa is included in the signature function parameter P2.
There are other examples that include the value of In this way, ICS
This eliminates the need for the recipient of the user frame to obtain the verification key KPa from the public key guidance service center or the like. Furthermore, I
When the content of the CS user frame is an electronic slip (order slip, receipt, etc.), an electronic signature is added to the electronic slip along with the identification name of the access control device through which the electronic slip has passed. If either the sender (creator) of the electronic slip or the receiver (recipient) of the electronic slip modifies the electronic slip,
The tampering can be found by the principle of electronic signature. Therefore, as long as the electronic signature key is a secret value, that is, as long as the operator of the access control device holding the signature key inside guarantees the signature key as a secret value, the electronic signature cannot be falsified. It can be used as

Embodiment 22 (Electronic signature server and encryption server)
B): As shown in FIG. 86 of the embodiment-21, the electronic signature unit 9017-1 and the encryption / decryption means 9018-1 are inside the access control device 9010-1. On the other hand, in the present embodiment, as shown in FIG.
310-1, 9310-2, 9310-3, 9310-
Reference numeral 4 denotes an embodiment in which each does not include a digital signature unit. Instead, the digital signature servers 9340-1 and 9340-
2, 9340-3, 9340-4 and ICS network communication line 9
341-1, 9341-2, 9341-3, 9341-
4 and 4 respectively. Each digital signature server includes the function of the digital signature unit of the embodiment-21, and gives an electronic signature before ICS encapsulation or gives an electronic signature after ICS decapsulation in cooperation with the access control device. This is the same as the function of the electronic signature unit 9017-1 in the embodiment-21, and includes a signature key, a verification key, an electronic signature function, a program module for realizing a hash function, a time / location parameter, and a signature function parameter. The electronic signature servers 9342-1 and 9342-2 are connected to relay devices 9320-1 and 9320-2 via ICS network communication lines 9344-1 and 9344-2, respectively. All the electronic signature servers have a unique ICS network address inside the ICS network, communicate with other electronic signature servers and access control devices using the ICS network server communication function, and exchange information held by each other with each other. Has functions. The electronic signature server 9342-1 is a digital signature server representing the VAN 9301-1, communicates with the electronic signature servers 9340-1 and 9340-2 inside the VAN 9301-1 using the ICS network server communication function, and performs these electronic signatures. The information held by the server can be obtained. The electronic signature server 9
340-1 can obtain information (for example, a verification key) on the electronic signature held by the electronic signature server 9340-12 via the electronic signature server 9342-1. The electronic signature server 9342-1 communicates with the electronic signature server 9342-2 representing another VAN 9301-2 by using the ICS network server communication function, and can exchange information on the electronic signature held by each of them. Note that the electronic signature server does not exchange the secret signature key held therein with another electronic signature server, and strictly keeps the secret of the signature key.

Further, in this embodiment, as shown in FIG. 90, the access control devices 9310-1, 9310-2, 9310
Reference numerals -393 and 9310-4 denote examples in which encryption / decryption means are not included in each unit.
343-2, 9343-3, and 9343-4 are connected by ICS network communication lines, respectively. Each encryption server includes the function of the encryption / decryption means 9018-1 and cooperates with an access control device connected thereto to encrypt the ICS user frame before ICS encapsulation, or The decryption of the ICS user frame encrypted at the transmission source after the ICS decapsulation is the same as that of the encryption / decryption means 9018-1. And an encryption key and a decryption key. The encryption servers 9343-5 and 9343-6 are connected to the relay devices 9320-1 and 9320-2 via ICS network communication lines, respectively. Each cryptographic server has a unique ICS network address inside the ICS network, communicates with other cryptographic servers using the ICS network server communication function, and exchanges information held by each of them. It has a function to do. The encryption server 9343-5 has V
VAN is a cryptographic server representing AN9301-1.
Cryptographic servers 9343-1 and 93 inside 9301-1
43-2 using the ICS network server communication function to obtain information held by these cryptographic servers. Also, the encryption server 9343-1 stores information (for example, an encryption key) related to encryption held by the encryption server 9343-2 in the encryption server.
It is available through Bus 9342-5. The cryptographic server 9343-5 communicates with the cryptographic server 9343-6 representing another VAN 9301-2 by using the ICS network server communication function, and can exchange information relating to cryptography held by the cryptographic server 9343-5. it can.

Embodiment 23 (Open Connection): An ICS open connection, that is, a preparation procedure performed by a user and a VAN operator to perform inter-company communication by changing a partner will be described.

<< User Application >> The user applies for the ICS name and the ICS user address to the VAN operator, and at the same time, the ICS connection conditions, the user identity and the payment method (address,
Company name, payment bank account number, etc.). Also,
If there is an ICS user address for intra-company communication determined by the user, it is presented, but if not, it is not presented. The VAN operator determines an ICS name and an ICS user address according to a common rule predetermined with other VAN operators, and notifies the user. The item of ICS connection condition is ICS
Name condition, communication band condition, billing condition, digital signature condition,
Including the encryption condition, the open condition, the dynamic change condition, etc., the contents of these conditions are as follows.

[0298] The ICS name condition is that the left side of the ICS name, for example, the ICS name is "USR # 1.ACS #".
1. DIS # 1. VAN # 1. JP. In the case of "AS", the user designates only the leftmost "USR # 1" (the VAN operator determines the remaining right part) .The communication band condition is a speed class and a priority. Supports communication band conditions, electronic signature conditions, encryption conditions, etc. for fixed-rate charges for a fixed period, charges for network use (network charges), and charges for information sent and received in electronically signed communications (information charges). The electronic signature condition specifies whether to give an electronic signature that can prove the fact that the ICS user frame has passed through the access control device together with the date and time, and the encryption condition is that the ICS user frame is transferred. When the open condition is the inter-company communication service, that is, when the request identification of the conversion table is “2”, the unknown condition that is not registered in the conversion table is specified. When the ICS frame is received from the sender, the access control device specifies whether to reject the reception, or creates a temporary conversion table and receives the ICS frame. A function that can change various conditions in response to a user request through the ICS frame is specified by an open class.A method of specifying the value of the open class will be described later. Signing conditions and encryption conditions can be changed, but important conditions for VAN operation such as ICS address and charging are not changed.

<< ICS Address Management Server and ICS Name Server >> Referring to FIG. 91 and FIG. 92, in this embodiment, the access control devices 11110-1, 11110-2, and 11110 are provided inside the ICS 11000-1. −
3, relay device 11116-1, ICS address management servers 11150-1, 11150-2, ICS name servers 11160-1, 11160-2, ICS conversion table servers 11170-1, 11170-2, user 11132
11, 111132-2. The ICS address management server 11150-2 stores the user 11132 in an internal correspondence table.
-2 ICS network address "8210", IC
The ICS name server 11160-2 includes the S user address “4200” and the address related information of the user.
In the internal ICS name conversion table, the ICS name “USR # 3.ACS # 3.DIS #” of the user 111132-2 is stored.
3. VAN # 3. JP. AS "and the ICS user address" 4200. "
The ICS network address (“777” used in association with the ICS user address “3333” of 32-1
7 ") and the IC of the access control device 11110-1
S logical terminal 11111-2 and user 11132
-1 connected via gateway 11000-2
The S logical communication channel 11133-1 is connected. Since the ICS network address “7777” is a user private value, the user is not notified.

Next, the VAN operator checks the correspondence table 11152-1 inside the ICS address management server 11150-1.
The ICS network address “7777” and the ICS user address (between companies) “33”
33 ", the ICS user address (within the company)" 1111 "presented by the user and the address related information of the user, that is, the communication band condition, the charging condition, the electronic signature condition, the encryption condition, the open condition, the dynamic change condition, the user identity And payment method
Data path 11153-1 and processing unit 11151-1
Is written directly into the conversion table 11152-1 via the. VAN
The operator further stores the ICS name “USR # 1.ACS # 1.DIS #” in the ICS name conversion table 11162-1 inside the ICS name server 11160-1.
1. VAN # 1. JP. AS ", ICS user address" 3333 ", type" 1 "(ICS user address" 3
333 "is written in the ICS name conversion table 11162-1) directly into the ICS name conversion table 11162-1 via the data path 11163-1 and the processing device 11161-11. The result is represented by a correspondence table 11152-1 or an ICS name conversion table 111.
62-1.

[0301] ICS address management server 11150-1
When the ICS name server 11160-1 finishes writing the above-described various information on the new user,
Using the respective ICS network addresses “8910” and “8920” and the ICS network communication function, the ICS for the new user is stored in the ICS conversion table server 11170-1.
Notify that the information of the address and the ICS connection condition has been obtained. Here, the ICS conversion table server 11170-1 is an IC
In this example, the ICS network address “8100” and the ICS user address “21”
00 ".

<< ICS Conversion Table Server >> The ICS conversion table server 11170-1 is the ICS address management server 111
The information described in the correspondence table 11152-1 of 50-1 is
Read using CS network communication function, conversion table prototype 11172
Write to -1. That is, “7777” is written in the column of the originating ICS network address, “1111” is written in the column of the sender ICS user address (within the company), and “3333” is written in the column of the sender ICS user address (between companies).
If there is no ICS user address for intra-company communication, the column of the sender ICS user address (within the company) is blank. The request identification is "2" indicating inter-company communication. The communication band condition is an example in which the speed class is “3” and the priority is “3”. The digital signature condition is that the signature specification is “1”, the transmission signature specification is “YES”, and the reception signature is “YES”. This is an example in which the designation is “NO”. The charging condition is “4” of the charging class, and in this example, represents charging based on a flat-rate system. The encryption condition is “1” of the encryption class, and in this example, it specifies that the ICS network frame is encrypted inside the ICS. The open class in this example is “0”. In the dynamic change class “6”, the signature at the time of transmission can be changed by a user request in this example.

<< Use of ICS Conversion Table Server (User) >>
The user 111132-1 writes “3333” as the sender ICS user address, writes the ICS user address “2100” of the ICS conversion table server 11170-1 as the receiver ICS user address, and writes the receiver ICS in the user data section of the ICS user frame. An ICS user frame F1200 in which information (a recipient ICS user address or a recipient ICS name) is written is transmitted. The ICS conversion table server 11170-1 receives the ICS user frame F1200 via the access control device 11110-1, and determines whether the recipient information in the user data part is the recipient ICS user address or the recipient ICS name. In response, an incoming ICS network address for inter-enterprise communication is obtained by the following method. When the receiver ICS name is specified, the receiver ICS user address is further obtained.

(When the recipient ICS user address is specified) The recipient information is the recipient ICS user address “3”.
800 ", the ICS conversion table server 11170-
1 is an I connected to the access control device 11110-1.
The CS address management server 11150-1 is inquired using the ICS network communication function, and the ICS user address "38"
ICS network address “760” corresponding to “00”
If the receiver ICS user address is not included in the correspondence table 11152-1 (the search of the ICS network address has failed), the ICS conversion table server 11170 is obtained.
-1 receives the “notification of ICS network address search failure” from the ICS address management server 11150-11.

(When the recipient ICS name is specified) The recipient information is the “USR # 3.ACS” of the recipient ICS name.
# 3. DIS # 3. VAN # 3. JP. AS ", the ICS conversion table server 11170-1 provides the ICS name server 11160-1 connected to the same access control device 11110-1 to the ICS name" USR # 3. ACS # 3. DIS # 3.
VAN # 3. JP. AS ". The ICS name server 11160-1 transmits the IC of another ICS name server.
The S network address is held corresponding to the ICS name (the part excluding the leftmost part USR # n of the ICS name), and in this case, the ICS name server 1116
0-1 searches the ICS name conversion table 11162-1,
"ACS # 3.DIS # 3.VAN # 3.JP.AS"
Of the ICS name server 11160-2 that manages
The CS network address “8930” is found, an inquiry is made to the address “8930” using the ICS network communication function, and the ICS name “USR # 3.ACS #”
3. DIS # 3. VAN # 3. JP. ICS user address “4200” (receiver ICS user address) and ICS network address “821” corresponding to “AS”
0 ”(incoming ICS network address). In this procedure, the ICS name server 111
60-2 is an ICS address management server 11150-2
Is inquired about the ICS network address of the user 111132-2 to obtain the address “8210”.

(Completion of Conversion Table 11113-1) Recipient I
For CS user address designation, ICS conversion table server 1
1170-1 is the recipient ICS user address "380
0 "and incoming ICS network address" 7600 "
Is added to the conversion table 11113-1 and the conversion table 11113-
1 is completed for the receiving user. In the case of specifying the recipient ICS name, the ICS conversion table server 11170-1
Recipient ICS user address "4200" and incoming IC
The conversion table 1111 converts the S network address “8210” into
In addition to 3-1, the part corresponding to the receiving user of the conversion table 11113-1 is completed. The ICS address management server 11150-1 and the ICS name server 11160
-1 from the ICS conversion table server 11170-
1 transmits an ICS frame indicating that the conversion table addition has failed to the requesting user 111132-1.

<< Other Use of ICS Conversion Table Server (User) >> The user 111132-1 sets the conversion table 111113-1.
That wrote a request to notify the contents of individual user
S user frame is converted to ICS conversion table server 11170-1
Requesting the user to be notified of the user-specific contents. Further, the user can request rewriting of a part of the conversion table 11113-1 by using the dynamic change class previously agreed with the VAN operator by the above method. The dynamic change class is determined, for example, as 1, 2,..., The dynamic change class 1 designates that the priority of the individual application user is increased by 1, and the dynamic change class 2 designates the priority as 1. For the designation to be reduced and the dynamic change class 3, the signature at the time of transmission is set to “Y
In addition to "ES", it is specified that the encryption class is changed to "2".

<< Utilization of Conversion Table >> The usage of the conversion table created by the above procedure has been described in the first embodiment and the like. Example-
1 describes a method of creating a temporary conversion table, that is, a method of creating a temporary conversion table when the access control device receives an ICS network frame and decapsulates the ICS when there is no conversion table. Use the open class of the conversion table. That is, when the access control device receives the ICS network frame and decapsulates the ICS, the received “pair of the incoming ICS network address and the outgoing ICS network address included in the network control unit of the ICS network frame” is converted. If the table is not registered as a “pair of originating ICS network address and destination ICS network address” in the table, and the designation of the open area class is “2”, the temporary conversion table is set in the same manner as in the previous embodiment. Area class specification is "1"
If so, do not set a temporary conversion table. Further, if the designation of the open area class is "0", the temporary conversion table is not set, and the received ICS network frame is discarded. In this case, the ICS user frame is not delivered to the user. That is, when the designation of the open area class is "0", reception from an unknown sender not registered in the conversion table is rejected, and a so-called closed area connection is realized. In the above, in the case of the request identification “4”, it is always treated as the specification “1” of the open area class. That is, it is not set in the temporary conversion table. << Extraction of closed network using open area class >> Company A, B
When communication between companies is performed between company C and company C, all the designations of the open classes of the IP terminals of these companies registered in the conversion table are set to “0”. Then, all ICS user frames from unknown senders that are not registered in the conversion table are discarded by the access control device, so that ICS user frames can be transmitted and received only between companies A, B, and C. become. In this sense, it is possible to configure a virtual closed network closed to these three companies, that is, to cut out the closed network. If one of the IP terminals of Company A specifies the open area class in its conversion table as “2”, only this terminal receives ICS user frames from unknown senders. It will be placed outside the closed network.

<< Partial Modification of the Embodiment (Variation) >>
In the embodiment described above, the VAN operator sets the data path 11
153-1 and data path 11163-1, IC
The method of inputting the ICS address and the ICS connection conditions to the S address management server 11150-1 and the ICS name server 11160-1 has been described. The VAN operator creates a special ICS network server inside the ICS 11000-1 without using these data paths, and from this special ICS network server, the ICS address management server 11150-11 or the ICS network management function is used. ICS name server 1116
The ICS address, the ICS connection condition, and the like may be directly input to 0-1, and the contents of the conversion table 11152-1 and the ICS name conversion table may be rewritten.

Embodiment 24 (ICS address name management server): As shown in FIGS. 91 and 92 of the embodiment 23, the ICS address management server and the ICS name server are independent of each other, and It is connected to the access control device via a line. On the other hand, in this embodiment, as shown in FIG.
-1 ICS address name management server 1300
0-1,13000-2,13000-3,13000
-4 are access control devices 13010-1 and 13010, respectively.
010-2, 13010-3, and 13010-4. ICS address name management server 13000
-1 has a processing unit 130001-1.
The correspondence table 13002-1 having the same function as that included in the ICS address management server and the ICS name conversion table 1303- having the same function as that included in the ICS name server
1 and also uniquely distinguishable from others within the ICS
The CS network address “9801” is assigned.

[0311] Another ICS address name management server 13
000-2,13000-3,13000-4 also ICS
It has the same function as the address name management server 13000-1, includes a processing device, a correspondence table, and an ICS name conversion table, respectively, and further has ICS network addresses “9802”, “9803”, and “9804”, respectively.
It is possible to communicate with each other using the CS network communication function and exchange information held by other ICS address / name management servers. ICS address name VAN representative management server 13
020-1 is the ICS network address "9805"
The other ICS address name VAN representative management server 13020-2 has an ICS network address “9806”, and uses the ICS network communication function to perform multiple ICS address name management servers and other ICS address name VANs. It can communicate with the representative management server and exchange information possessed by each of them. ICS address name VAN representative management server 13020-1
031-1 and a database 13032-1.
Exchange information such as ICS address and ICS name with all ICS address and name management servers inside AN13000-1. Collected data on ICS address and ICS name is stored in database 13032-1 and perform the above procedure. VAN13030-1
To represent. The ICS address name management server includes:
Although the processing device, the correspondence table, and the ICS name conversion table are included, as another embodiment, the correspondence table and the ICS name conversion table may be combined into one table, and are included in both of these two types of tables. Only one of the ICS user addresses to be used.

Embodiment-25 (Separation of functions of access control device): As shown in FIGS.
ICS address management server 11150-1, ICS name server 11160-1, ICS conversion table server 1117
0-1 are respectively connected to the access control device 11110-1. ICS encapsulation and ICS decapsulation are performed by the conversion table 11 inside the access control device 11110-1.
113-1. On the other hand, in the present embodiment, the functions of the access control device 11110-1 are the same as the aggregation access control device 14110-1 and the plurality of simple access control devices 14210-1, 14210-2, 1421.
0-3. That is, as shown in FIGS. 94 and 95, the access control device 11110-1 is connected to the ICS network communication lines 14190-1, 14190-2, and 14190.
-3 via the simple access control device 1421
0-1, 14210-2, and 14210-3. ICS address management server 14150-1, ICS
Name server 14160-1, ICS conversion table server 14
170-1, an ICS charging server 14180-1, an electronic signature server 14181-1, an encryption server 14182-1,
Operation management server 14183-1, ICS network server 141
84-1 is an ICS network communication line 14191-
1,14191-2, 14191-3, 14191-
4,14191-5,14191-6,14191-
7, 14191-8, the centralized access control device 141
10-1 and the access control device 11
The conversion table 11113-1 inside the 110-1 is composed of an aggregation conversion table 141113-1, and simple conversion tables 142131-1 and 1421.
13-2 and 14213-3. However, these aggregation conversion tables and simplified conversion tables partially overlap. That is, the four items of the originating ICS network address, request identification, speed class, and priority are included in both of these conversion tables. The temporary partial conversion table 142214-1 is not essentially different from the temporary conversion table described in the first embodiment or the like, but the items included in the temporary partial conversion table 142214-1 are included in the simple conversion table 142213-1. Same as item.
Line section 14 inside simple access control apparatus 14210-1
211-1 has the same function as the line unit 11111-1 inside the access control device 11110-1.

The simple access control device 14210-1 uses the simple conversion table 142213-1 to perform ICS encapsulation at the time of transmission and ICS decapsulation at the time of reception. 141
The processing related to the electronic signature and the billing described above is performed by using 13-1. In addition, the plurality of simple access control devices 14210-1, 14210-2, 14210-3
The function of both the access control device 11110-1 and that of the centralized access control device 14110-1 work together. The user 1432-1 has an ICS user frame F13 having a sender ICS user address “3333” and a receiver ICS user address “4200”.
00 to the ICS logical communication line 14133-1.
Processing device 142 of simple access processing device 14210-1
As shown in the flowchart of FIG. 96, the ICS network address "7-1"
777 "ICS logic terminal to ICS user frame F
1300, the ICS network address “7777” is obtained (step S2501), and the address “7777” is registered in the simple conversion table 14213-1 as to whether the request identification is registered as the virtual leased line connection “3”. Is checked (step S2502). In this case, since it is not registered, the ICS user frame F130 corresponding to the ICS network address "7777" is registered.
0, the receiver ICS user address “42”
00 ”(step S2504), it is checked whether or not this address“ 4200 ”is registered in the simple conversion table 142213-1, and whether the request identification is registered as inter-company communication“ 2 ”(step S2505). In this case, since it is registered, in preparation for performing ICS encapsulation, the incoming ICS network address “8210” is acquired from the simple conversion table 14213-1 (step S).
2506).

The simple access control device 14210-1 is
Next, ICS encapsulation is performed by generating an ICS network frame F1301 in which the speed class and the priority are written based on the information obtained from the simple conversion table 142213-1 in the ICS network frame (step S2520). It is sent to the centralized access control device (step S2521). Here, as described above, the information of the speed class “3”, the priority “3”, and the encryption class “0”, which are the items of the simple conversion table 142213-1, are written in the extension unit of the ICS network control unit.

The aggregation access control device 14110-1 is
The ICS network frame F1301 is received from the simple access controller 14210-1.
110-11, based on the fact that the charging information frame F
K01 is created and sent to billing server 14180-1.
The information such as the request identification and the speed class, the priority, the charging class, the encryption class, and the like of the items registered in the aggregation conversion table 1413-1 are referred to in order to create the charging information frame FK01. The signature, the transmission signature, and the reception signature of the items in the aggregation conversion table 1413-1 are used for adding a digital signature, and as described in the other embodiments, the digital signature server 14181- 1 and a digital signature is performed. Similarly, if the specification of the encryption class is "1" which means encryption, the request is made to the encryption server 14182-1. When the above processing is completed, the aggregation access control device 14110-1 sets the ICS network frame F1
302 is transmitted to another access control device 14110-2 or an integrated access control device via the ICS network communication line 14190-4. The ICS network frame F13
In the format 02, when the digital signature server or the cryptographic server operates, the contents have been changed by the addition of the digital signature or the conversion into the ciphertext as described above.
This is equivalent to the CS network frame F1301. The simple access control device 14210-1 can be realized with almost no change in the function of the existing router. In addition, when the number of users accommodated in the simple access control device 14210-1 is small and users are widely distributed in regions. Has an economic advantage that the total number of ICS address management servers, ICS name servers, ICS conversion table servers, billing servers, electronic signature servers, and encryption servers can be reduced. The operation management server 14183-1 has been given an ICS network address, and has an access control device 14110-
1 and a relay device, and communicates with other operation management servers, access control devices, ICS address management servers, and other ICSs using the ICS network communication function. Exchange of information on the operation of

Incidentally, the simple access control device 1421
The open class of the item included in the simple conversion table 142213-1 in 0-1 is used for the same processing as the treatment of the open class registered in the conversion table inside the access control device, as described above. . That is, the simple access control device 142
10-1 receives an ICS network frame and receives an IC
When performing S decapsulation, the received “pair of the incoming ICS network address and the outgoing ICS network address included in the ICS network frame control unit”
If the simple conversion table 14213-1 does not register the “pair of the originating ICS network address and the destination ICS network address”, that is, if the source of the received frame is not registered in the simple conversion table, If the designation is "2", the temporary partial conversion table 14
214-1 is set, but if the designation of the open area class is "1", the temporary partial conversion table is not set. Further, if the designation of the open area class is "0", the temporary partial conversion table is not set, and the received ICS network frame is discarded. In this case, no ICS user frame is transmitted to the user. The open class designation “0” rejects reception from an unknown transmission source that is not registered in the simple conversion table, and realizes a so-called closed connection.

As described in the above embodiment, the IC
The S address management server and the ICS name server may be integrated, that is, realized as a single ICS address name management server.
The address name management server is connected to the ICS network communication line for use. In the above embodiment, the simple conversion table 1
No item of speed class or priority is set in 4213-1.
At the time of CS encapsulation, the speed class and priority “0” are written in the extension of the ICS network control unit,
It may indicate that there is no designation. Similarly, an example in which the open conversion class is not specified in the simple conversion table 142131-1 may be used.
In this case, "0" of the speed class or the priority is written in the extension of the ICS network control unit to indicate that there is no designation.

Embodiment-26 (Access Control Device Including Server and Aggregated Access Control Device): As shown in FIG.
The ICS 15000-1 includes access control devices 15110-1, 15110-2, 15110-3 including a server,
Aggregate access control device 15210-1,1 including server
5210-2, 15210-3, simple access control devices 15213-1, 15213-2, and 15213-3. In the examples of FIGS. 91 and 92, the ICS address management server 11150-1 and the ICS name server 111
94-1, the ICS conversion table server 11170-1 is connected to the access control device 11110-1.
In the example of FIG. 95, the ICS address management server 141
50-1, ICS name server 14160-1, ICS
Conversion table server 1417O-1, billing server 14180-
1, electronic signature server 14181-11, encryption server 141
82-1 is an integrated access control device 14110-
1 connected. On the other hand, in this embodiment, FIG.
As shown in the figure, the access control device 15110-1 has an ICS address management server 15115-1 and an ICS name server 15115 inside the same physically independent housing.
-2, ICS conversion table server 15115-3, ICS frame database server 15115-4, billing server 1
5115-5, an operation management server 15115-6, an electronic signature server 15115-7, and an encryption server 15115-8. However, these servers have the ICS network addresses “6701”, “6702”, and “670”.
3 "," 6704 "," 670 "," 6706 "," 6
707 "and" 6708 "respectively.
With the CS network server communication function, information can be exchanged with an ICS network server outside the access control device 15110-1 including the server. The processing device 15112-1 is connected to the servers 15115-1 through 15115-1 via the data line 15117-1.
Information can be exchanged with 115-8. Furthermore, these servers 15
115-1 to 15115-8 are data lines 15117
Information can be mutually exchanged via -1.

Similarly, the centralized access control device 15210-1 including the server includes the ICS address management server 15215-1 and the ICS in the same physically special housing.
Name server 15215-2, ICS conversion table server 15
215-3, ICS frame database server 152
15-4, an accounting server 15215-5, an operation management server 15215-6, an electronic signature server 15215-7, and an encryption server 15215-8. However, these servers have the ICS network address “7001”,
“7002”, “7003”, “7004”, “700
5 "," 7006 "," 7007 ", and" 7008 ", respectively, and an integrated access control device 15210-1 including a server by the ICS network server communication function.
Information can be exchanged with an ICS network server outside the server. The processing device 152212-1 can exchange information with the servers 15215-1 to 15215-8 via the data line 15217-1. Further, the servers 15215-1 to 15215-8 can exchange information with each other via the data line 15217-1. In the above description, the same physically independent housing means, for example, a stand-alone computer, a single electronic board, or an LSI. In the case of an LSI, an integrated access device including a server is realized as a system on an LSI chip. It should be noted that the present invention may be implemented by excluding the ICS frame database server or other servers from the “access control device including a server”.
Similarly, from “Aggregated access control device including server”,
The present invention may be implemented without the ICS frame database server or other servers. In each of these embodiments, for example, an ICS frame database server and an access control device including the server, or an integrated access control device including the server are connected via an ICS network communication line.

Embodiment-27 (Full Duplex Communication Including Satellite Communication Path: Part 1): << Arrangement of Users, Data Providing Companies, Communication Satellites, etc. >> In this embodiment, a satellite transmission function and an IP communication function are used. Are combined to perform a kind of full-duplex communication. In this embodiment, the “IP terminal” refers to a terminal or a computer having a function of transmitting and receiving an IP frame. This will be described with reference to FIG. ICS 16000-1, access control devices 16100-1, 16110-1, 16120-
1, data provider 16200-1, data provider IP terminal 16210-1, data provider database 16220-1, satellite transmitter 16300-1, satellite transmitter IP terminal 16310-1, satellite transmitter database 16320-1, satellite transmission equipment 16330-1 of a satellite transmission company, communication satellite 16400-1, user 1
6500-1, 16510-1, 16520-1, IP terminals 16501-1 and 16511 of each user
1,16521-1, user's respective satellite receiver 16
502-1, 16512-1, 16522-1, satellite radio communication lines 16600-1, 16610-1, 1662
0-1, 16630-1, user logical communication line 1671
0-1, 16720-1, 16730-1, 16740
-1. IP terminals 16210-1, 16501
−1, 16511-1, and 16521-1 are I
CS user address "3000", "2300", "2
400 "and" 2500 ", and the respective access control devices 16100-1 and 16100-1 through the user logical communication line.
6120-1, 16120-1, and 16110-1. The IP terminal 16310-1 can be classified as an ICS network server, has an ICS special number “4300”, and has
It is connected to the access control device 16100-1 via an ICS network communication line inside 16000-1. The radio wave transmitted from the satellite transmitting device 16330-1 transfers information via the satellite radio communication channel 16600-1, and the satellite receivers 16502-1, 16512-1, 16522
1 and the received data is transmitted to each of the IP terminals 16
501-1, 16511-1, and 16521-1. In this embodiment, the satellite transmission company 16300-
1 has a satellite transmission function.

<< Preparation: Explanation of Conventional Technique >> In order to explain this embodiment, first, a known TCP and UDP communication technique will be described. FIG. 99 is an example of full-duplex communication by TCP,
Communicating party-1 sends synchronization frame # 1 and communicating party-2 returns confirmation frame # 2 when it receives it. Such a communication procedure for transmitting and receiving frames # 1 and # 2 is called a TCP connection establishment phase. Next, both communicating parties communicate frames # 3-1, # 3-2,
# 3-3 and # 3-4 are transmitted and received. A communication procedure for transmitting and receiving such a frame is called a TCP data transfer phase. At the end, an end frame # 4 and a confirmation frame # 5 for confirming reception of this frame are returned. Such a communication procedure for transmitting and receiving frames # 4 and # 5 is called a TCP connection termination phase. In addition to the above-described TCP-based communication procedure, there is a UDP-based communication procedure including only data transfer, and FIG. 99 shows an example. UDP is T
The feature is that there is no TCP connection establishment and connection termination phase when compared with the CP.

The communication procedure of this embodiment will be described with reference to FIGS. 98 and 100. In the following procedure,
Transmission instruction to satellite transmission equipment (# 6 and # 1 in FIG. 100)
4) and "Data transmission" by radio waves from satellite transmitters
In the case of (# 7 and # 15 in FIG. 100), the above-described full-duplex communication of the TCP technique is adopted. However, only the TCP data transfer phase is described in FIG. 100, and the TCP connection establishment phase and the TCP connection The display and description in the figure for the end phase are omitted.

The IP terminal 16210-1 of the data providing company 16200-1 obtains “provided data” from the database 16220-1 and identifies the IP terminal of the satellite transmitting network 16300-1 which can be identified by the ICS special number “4300”. The transmission is performed using the ICS IP frame transfer function to 16310-1 (# 1: in FIG. 100; the same applies hereinafter). The satellite transmitting company 16300-1 stores the received “provided data” in its database 16320-1. User 1
The 6500-1 IP terminal 16501-1 is an IP terminal 1621 that can be identified by the ICS user address "3000".
The “query frame” is transmitted to 0-1 (# 2). IP terminal 16210-1 returns a "response frame"(# 3),
IP terminal 16501-1 receives this "response frame", and then transmits a "request frame" to IP terminal 16210-1 (# 4). Upon receiving the “request frame”, IP terminal 16210-1 transmits a “transmission instruction frame” to IP terminal 16310-1 (# 5). IP terminal 163
10-1 receives the "transmission instruction frame" and instructs the satellite transmitter 16330-1 to transmit the "provided data" held in the database 16220-1.
(# 6). Satellite transmitter 16330-1 is "provided data"
To the communication satellite 16400-1
(First half of # 7), the communication satellite 16400-1 amplifies the intensity of the received "provided data" and emits it as a radio wave (#
7), the satellite receiver 16502-1 receives the "provided data" in the form of radio waves and passes it to the IP terminal 16501-1. In this way, the IP terminal 16501-1 obtains “provided data” via the communication satellite 16400-1,
“Reception acknowledgment frame” is transmitted to IP terminal 16210-1 of company 16200-1 which provided “provided data”
(# 8). Next, the IP terminal 16210-1 transmits the acknowledgment frame to the IP terminal 16 of the satellite transmission company 16300-1.
It is transmitted to 310-1 (# 9). In the above procedure,
# 1, # 2, # 3, # 4, # 5, # 8, and # 9 adopt the above-described TCP communication technology, and only the TCP data transfer phase is illustrated and described.

Next, steps # 10 and # 1 of the procedure shown in FIG.
1, # 12, # 13, # 14, # 15, # 16 and # 1
7 is almost the same as the procedure described above, and the difference is that the user 16
500-1, IP terminal 16501-1, satellite receiver 16
Instead of 502-1, another user 16510-1, I
This is an example of a P terminal 16511-1, a satellite receiver 16512-1, and this embodiment shows that "provided data" can be transferred to a plurality of users. The communication procedure described above will be described with reference to FIG. Transmission of “query frame” in FIG. 101 (# 2), return of “response frame” (#
3), transmission of "request frame"(# 4), "data transmission"(# 7) by satellite communication, transmission of "acknowledgment frame"
(# 8) is transmission of an "inquiry frame"(# 2), return of a "response frame"(# 3), transmission of a "request frame"(# 4), and "data transmission" by satellite communication in FIG. (# 7), and transmission of a "reception acknowledgment frame"(# 8). From the above description, the satellite communication company 16300
-1 and the data providing company 16200-1 as a unit of a communication function (hereinafter referred to as an integrated communication entity). As shown in FIG. And full-duplex communication.

<< Variation of the Embodiment >> Next, a variation of the embodiment in which only the communication procedure is partially changed will be described with reference to FIGS. 98 and 102. First, the IP terminal 16501-1 of the user 16500-1 is
IP terminal 16 that can be identified by user address "3000"
A “query frame” is transmitted to 210-1 (FIG. 102).
# 1: the same applies hereinafter). IP terminal 16210-1 returns a "response frame"(# 2), and IP terminal 16501-1 receives this "response frame" and then "request frame"
Is transmitted to the IP terminal 16210-1 (# 3). Upon receiving the “request frame”, the IP terminal 16210-1 transmits “provided data” from its database 16220-1.
IP terminal 1 that can be identified by ICS special number "4300"
6310-1 (# 4), and also transmits a "transmission instruction frame"(# 5).

The satellite transmitting company 16300-1 temporarily stores the received "provided data" in its database 16320-1 and instructs the satellite transmitter 16330-1 to transmit the "provided data"(# 6) The satellite transmitter 16330-1 emits the "provided data" as a radio wave to the communication satellite 16400-1 (the first half of # 7), and the communication satellite 16400-1 amplifies the strength of the received "provided data". Emitted as radio waves (the latter half of # 7), the satellite receiver 16502-1 receives the "provided data" in the form of radio waves and passes it to the IP terminal 16501-1. Thus, IP terminal 16501-1 is connected to communication satellite 16400-1.
"Provided data" is obtained via "Receive confirmation frame"
Is the IP of the company 16200-1 that provided the "Provided Data"
The message is transmitted to the terminal 16210-1 (# 8). Next, IP terminal 16210-1 transmits an “acknowledgment frame” to IP terminal 16310-1 of satellite transmission company 16300-1.
(# 9). Next, # 10 and # 1 of the procedure shown in FIG.
1, # 12, # 13, # 14, # 15, # 16, # 1
7 and # 18 are almost the same as the above-mentioned procedure, except for the user 16500-1, the IP terminal 16501-1, and the other user 16510 in place of the satellite receiver 16502-1.
-1, IP terminal 16511-1, satellite receiver 16512
-1 is provided.

<< Other Variations of the Embodiment >> In both of the above-described embodiments, the transmission and reception of frames employ full-duplex communication of TCP technology, and only the TCP data transfer phase is shown in the figure. Connection establishment phase and TC
The description of the P connection termination phase is omitted. In the embodiment described here, the UDP communication technique described with reference to FIG. 99 is partially or entirely adopted, and part or all of the transmission and reception of frames by the TCP data transfer phase technique is performed by UDP data transfer. It is replaced by transmission and reception of frames by the phase technique.

<< Other Variations of the Embodiment >> FIG.
Other variations will be described using 03. In FIG. 98, the satellite transmission company 16300-1, the IP terminal 16310-1 of the satellite transmission company, the database 16320-1 of the satellite transmission company, the satellite transmission device 163 of the satellite transmission company
30-1 are inside the ICS 16000-1, and the IP terminal 16310-1 is the ICS special number "430".
On the other hand, in the example of FIG. 103, the satellite transmission company 16300-2 and the satellite transmission company I
P terminal 16310-2, satellite transmission company database 1
6320-2, satellite transmission equipment 16330 of the satellite transmission company
-2 are outside ICS 16000-2, respectively, and I
The P terminal 16310-2 has the ICS user address "39"
00 ". The data provider 16200-
1, users 16500-1, 16510-1, 1652
0-1 indicates that the communication partner is the ICS user address,
As described in the fifth embodiment, it is possible to transmit and receive an IP frame without discrimination even with an ICS special number.
Can transmit and receive IP frames in combination with satellite communication as in FIG.

Embodiment 28 (Full-Duplex Communication Including a Satellite Communication Path: Part 2): This embodiment is another variation of the embodiment 27, and will be described with reference to FIGS. 98 and 104.
Data provider 16200-1, satellite transmitter 1630
0-1 and user 16500-1 are the same, and only the communication procedure is different. Although full-duplex communication of the TCP technology is adopted, FIG. 104 shows only the TCP data transfer phase.

The IP terminal 16210-1 of the data providing company 16200-1 obtains the "provided data" from the database 16220-1 and the IP terminal 16310 of the satellite transmitting company 16300-1 which can be identified by the ICS special number "4300". -1 using the IP frame transfer function of the ICS (# 1: FIG. 104; the same applies hereinafter). The satellite transmitting company 16300-1 holds the received “provided data” in its database 16320-1. Next, IP terminal 16210-1 of data providing company 16200-1 transmits a "transmission notification frame" to IP terminal 16501-1 of user 16500-1 (# 2). When the IP terminal 16501-1 receives the “transmission notification frame”,
The “transmission acknowledgment frame” is returned to IP terminal 16210-1 (# 3). Upon receiving the "transmission acknowledgment frame", IP terminal 16210-1 transmits a "transmission instruction frame" to IP terminal 16310-1 (# 4). Satellite transmission company 1
Receiving the “transmission instruction frame”, the IP terminal 16310-1 of 6300-1 transmits the “transmission instruction frame” to the satellite transmitter 16330-1.
The transmission of the "provided data" stored in the database 16200-1 is instructed (# 5). Satellite transmitter 16
330-1 is a communication satellite 16 using "provided data" as radio waves.
Launched toward 400-1 (first half of # 6), communication satellite 1
6400-1 amplifies the intensity of the received "provided data" and emits it as radio waves (the latter half of # 6).
502-1 receives the "provided data" in the form of radio waves and
Hand over to P terminal 16501-1. In this way, IP terminal 16501-1 obtains “provided data” via communication satellite 16400-1, and transmits “reception acknowledgment frame” to IP terminal 16210-1 of data provider 16200-1 (# 7). ).

The communication procedure described above will be described with reference to FIG. Transmission of “transmission notification frame” in FIG. 105 (# 2)
The transmission of the "transmission acknowledge frame"(# 3), the data transmission by satellite communication "(# 6), and the transmission of the" acknowledgment frame "(# 7) are respectively performed by transmitting the" transmission notification frame "of FIG. 2), return “transmission acknowledge frame” (#
3) corresponding to "data transmission"(# 6) and "reception confirmation frame" transmission (# 7) by satellite communication. From the above description, the communication function unit (hereinafter, referred to as “the communication function unit”) integrating the satellite communication company 16300-1 and the data providing company 16200-1
As shown in FIG. 105, it can be considered that the user 16500-1 is performing full-duplex communication with the integrated communication entity.

<< Variation of the Embodiment >> Next, a variation of the embodiment in which only the communication procedure is partially changed will be described with reference to FIGS. 98 and 106. The IP terminal 16210-1 of the data providing company 16200-1 transmits a “transmission notification frame” to the IP terminal 16501-1 of the user 16500-1 (# 1: in FIG. 106; the same applies hereinafter). Upon receiving the “transmission notification frame”, IP terminal 16501-1 transmits “transmission acknowledgment frame” to IP terminal 1
Returned to 6210-1 (# 2). IP terminal 16210-
1 receives the “transmission acknowledgment frame”, obtains “provided data” from the database 16220-1 and
Satellite transmission company 16 that can be identified by special number "4300"
The ICS IP address is assigned to the IP terminal 16310-1 of the 300-1.
It transmits using the frame transfer function (# 3), and further transmits a "transmission instruction frame" to IP terminal 16310-1.
(# 4). The satellite transmitting company 16300-1 temporarily stores the received “provided data” in its database 16320-1. Upon receiving the “transmission instruction frame”, IP terminal 16310-1 instructs satellite transmitter 16330-1 to transmit “provided data” held in database 16200-1 (# 5). The following is the same as the above communication procedure.

<< Other Variations of the Embodiment >> In both of the above-described embodiments, the transmission and reception of frames employ full-duplex communication of the TCP technology, and only the TCP data transfer phase is shown in the drawing. Connection establishment phase and TC
The description of the P connection termination phase is omitted. In the embodiment described here, the UDP communication technique described with reference to FIG. 99 is partially or entirely adopted, and part or all of the transmission and reception of frames by the TCP data transfer phase technique is performed by the UDP data transfer phase technique. This is replaced with the transmission and reception of frames by.

<< Other Variations of the Embodiment >> FIG.
Other variations will be described using 03. In FIG. 98, the satellite transmitting company 16300-1, the IP terminal 16310-11 of the satellite transmitting company, the database 16320-1 of the satellite transmitting company, the satellite transmitting device 163 of the satellite transmitting company
30-1 are inside the ICS 16000-1, and the IP terminal 16310-1 has the ICS special number "430".
0 ". On the other hand, in FIG. 103, the satellite transmitting company 16300-2 and the IP of the satellite transmitting company are provided.
Terminal 16310-2, satellite transmission company database 16
320-2, satellite transmission equipment 16330-
2 are outside the ICS 16000-2,
The terminal 16310-2 has the ICS user address “390”
0 "is assigned.

Embodiment 29 (Full-Duplex Communication Including a Satellite Communication Path: Part 3): This embodiment is another variation of the embodiment 27, and will be described with reference to FIGS. 98 and 107. Data provider 16200-1, satellite transmitter 16
300-1 and user 16500-1 are the same and differ only in the communication procedure. Although full-duplex communication of the TCP technology is employed, FIG. 107 shows only the TCP data transfer phase. IP of data provider 16200-1
The terminal 16210-1 receives the ICS user address “230
"Schedule notification frame" is transmitted to each of the IP terminal 16501-1 of "O", the ICS user address "2400" (16511-1), and the ICS user address "2500" (16521-1) (# in FIG. 107). 1: The same applies to the following.) Next, the IP terminal 16210-1 obtains “provided data” from the database 16220-1 and
Satellite transmission company 16 that can be identified by special number "4300"
The data is transmitted to the IP terminal 16310-1 of the 300-1 using the ICS IP frame transfer function (# 2). The satellite transmitting company 16300-1 transmits the received “provided data”
Is temporarily stored in the database 16320-1 and transmission of “provided data” is instructed (# 3). The satellite transmitter 16330-1 emits the "provided data" as a radio wave to the communication satellite 16400-1 (the first half of # 4), and the communication satellite 16400-1 amplifies the intensity of the received "provided data". The satellite receiver 16502-1 receives the "provided data" in the form of a radio wave and passes it to the IP terminal 16501-1.

Thus, IP terminal 16501-1
Acquires the "provided data" via the communication satellite 16400-1, and transmits the "individual report frame" to the IP terminal 16210-1 (# 5-1). IP terminal 16511-1 also obtains “provided data” by the same communication procedure and transmits “individual report frame” to IP terminal 16210-1 (# 5
-2). The IP terminal 16521-1 also acquires the "provided data" and transmits the "individual report frame" to the IP terminal 16210-1 (# 5-3). IP terminal 16210-1 transmits “individual inquiry frame” to IP terminal 16511-1 of user 16510-1 (# 6), and IP terminal 16511-
1 returns an "individual response frame" to IP terminal 16210-1 (# 7).

The communication procedure described above will be described with reference to FIG. Transmission of “schedule notification frame” in FIG. 108 (# 1)
, "Data transmission"(# 4), "Individual report frame" transmission (# 5-2), "Individual inquiry frame" transmission (# 6), and "Individual response frame" return (#
6) are the transmission of the “schedule notification frame” in FIG. 107 (# 1), the “data transmission” by satellite communication (# 4),
It corresponds to transmission of an "individual report frame"(# 5-2), transmission of an "individual inquiry frame"(# 6), and return of an "individual response frame"(# 6). From the above description, the satellite communication company 16300-1 and the data provider 16200-1
As shown in FIG. 104, the user 1
6500-1 can be regarded as performing full-duplex communication with the integrated communication entity.

<< Other Variations of the Embodiment >> Each of the above-described embodiments employs full-duplex communication of the TCP technology for transmission and reception of a frame. Only the TCP data transfer phase is shown in the figure, and the TCP connection establishment phase is described. The description of the TCP connection termination phase is omitted. In the embodiment described here, the UDP communication technique described with reference to FIG. 99 is partially or entirely adopted, and part or all of the transmission and reception of frames by the TCP data transfer phase technique is performed by the UDP data transfer phase technique. This is replaced with the transmission and reception of frames by.

<< Other Variations of the Embodiment >> FIG.
Other variations will be described using 03. In FIG. 98, the satellite transmission company 16300-1, the IP terminal 16310-1 of the satellite transmission company, the database 16320-1 of the satellite transmission company, the satellite transmission device 163 of the satellite transmission company
30-1 are inside the ICS 16000-1, and the IP terminal 16310-1 has the ICS special number "430".
0 ". On the other hand, in FIG. 103, the satellite transmitting company 16300-2,
Terminal 16310-2, satellite transmission company database 16
320-2, satellite transmission equipment 16330-
2 are outside the ICS 16000-2,
The terminal 16310-2 has the ICS user address “390”
0 "is assigned.

Embodiment 30 (Full-duplex communication including a satellite communication path: part 4): This embodiment is another variation of the embodiment 27, and will be described with reference to FIGS. 98 and 109. Data provider 16200-1, satellite transmitter 16
300-1 and user 16500-1 are the same and differ only in the communication procedure. Although full-duplex communication of the TCP technique is employed, FIG. 109 shows only the TCP data transfer phase. IP of data provider 16200-1
The terminal 16210-1 has its database 16220-1
"Provided data" from ICS special number "4300"
Is transmitted to the IP terminal 16310-1 of the satellite transmission company 16300-1 that can be identified by the ICS using the IP frame transfer function of the ICS (# 1 in FIG. 109). The satellite transmitting company 16300-1 holds the received “provided data” in its database 16320-1.

Next, IP terminal 1 of user 16500-1
The 6501-1 transmits an "inquiry frame" to the IP terminal 16310-1 that can be identified by the ICS special number "4300"(# 2). IP terminal 16310-1 returns a "response frame"(# 3), and IP terminal 16501-1 receives this "response frame" and then transmits "request frame" to I
It transmits to P terminal 16310-1 (# 4). IP terminal 1
Upon receiving the “request frame”, the 6310-1 instructs the satellite transmitter 16330-1 to transmit “provided data” held in the database 16300-1 (#
5). The satellite transmitter 16330-1 emits “provided data” as radio waves to the communication satellite 16400-1 (# 6).
), The communication satellite 16400-1 amplifies the intensity of the received “provided data” and emits it as a radio wave (the latter half of # 6). And passes it to the IP terminal 16501-1.
Thus, IP terminal 16501-1 is connected to communication satellite 1
The “provided data” is acquired via 6400-1, and the “acknowledgment frame” is transmitted to the IP terminal 16310-1 (#
7). In the above procedure, # 1, # 2, # 3, # 4,
# 7 employs the above-described TCP communication technology. next,
# 8, # 9, # 10, # 11, # of the procedure shown in FIG.
Steps # 12 and # 13 are almost the same as those described above, except for the user 16500-1, the IP terminal 16501-1, and the satellite receiver 16502-1.
-1, IP terminal 16511-1, satellite receiver 16512
-1.

The communication procedure described above will be described with reference to FIG. Transmission of “query frame” in FIG. 101 (# 2),
Return of “response frame” (# 3), transmission of “request frame” (# 4), “data transmission” by satellite communication (# 7)
, The transmission of the “acknowledgment frame” (# 8), the transmission of the “query frame” (# 2), the return of the “response frame” (# 3), and the transmission of the “request frame” in FIG.
(# 4), "Data transmission" by satellite communication (# 6),
It corresponds to the transmission (# 8) of the “acknowledgment frame”.
From the above description, FIG. 1 shows that the satellite communication company 16300-1 and the data providing company 16200-1 are viewed as an integrated communication function unit (hereinafter, referred to as an integrated communication entity).
01, it can be considered that the user 16500-1 is performing full-duplex communication with the integrated communication entity.

<< Other Variations of the Above Embodiment >> In both of the above embodiments, the TCP
The technology adopts full-duplex communication and only the TCP data transfer phase is shown in the figure.
The description of the CP connection end phase is omitted. In the embodiment described here, the UDP communication technology described in FIG.
A part or all of the transmission and reception of frames by the data transfer phase technique is replaced with the transmission and reception of frames by the UDP data transfer phase technique.

<< Other Variations of the Embodiment >> FIG.
Other variations will be described using 03. In FIG. 98, the satellite transmitting company 16300-1, the IP terminal 16310-11 of the satellite transmitting company, the database 16320-1 of the satellite transmitting company, the satellite transmitting device 163 of the satellite transmitting company
30-1 are inside the ICS 16000-1, and the IP terminal 16310-1 has the ICS special number "430".
0 ". On the other hand, in FIG. 103, the satellite transmitting company 16300-2 and the IP of the satellite transmitting company are provided.
Terminal 16310-2, satellite transmission company database 16
320-2, satellite transmission equipment 16330-
2 are outside the ICS 16000-2,
The terminal 16310-2 has the ICS user address “390”
0 "is assigned.

Embodiment-31 (Full-Duplex Communication Including Satellite Communication Path: Part 5): This embodiment has a feature of performing a kind of full-duplex communication by combining the transmission function of a satellite and the IP communication function. The major difference from the twenty-seventh embodiment is that the satellite receiver is inside the access control device. This will be described with reference to FIG. ICS 16000-3, access control devices 16100-3, 16110-3, 16120-3, satellite receivers 16102-3, 16112-3, 16122
-3, data provider 16200-3, data provider's IP terminal 16210-3, data provider's database 16220-3, satellite transmitter 16300-3, satellite transmitter's IP terminal 16310-3, satellite transmitter Forest database 16320-3, satellite transmitting party Forest transmitting equipment 16330-3, communication satellite 16400-3, users 16500-3, 16510-3, 16520-3, IP terminals 16501-3 and 16511 of each user
3,16521-3, satellite radio communication line 16600-
3, 16610-3, 16620-3, user logical communication lines 16710-3, 16720-3, 16730-
3,16740-3. IP terminal 16210-
3,16501-3,16511-3,16521-3
Are the ICS user addresses “3000” and “23”, respectively.
00 "," 2400 ", and" 2500 ", and each of the access control devices 16 via the user logical communication line.
100-3, 16120-3, 16120-3, 161
10-3. The IP terminal 16310-3 can be classified as an ICS network server, and the ICS special number “4300”
And is connected to the access control device 16100-3 via an ICS network communication line inside the ICS 16000-3. The radio wave transmitted from the satellite transmission device 16330-3 transfers information via the satellite radio communication channel 16600-3, and the satellite receivers 16112-3 and 16122-3.
Is received.

<< Example 1 of Communication Procedure >> FIGS. 110 and 111
The communication procedure according to this embodiment will be described with reference to FIG. In the following procedure, the transmission instruction to the satellite transmitter is
(# 5 and # 12 in FIG. 111) and the case of “data transmission” by radio waves from satellite transmitting equipment (# 6 and # 1 in FIG. 111)
Except for 3), the above-described full-duplex communication of the TCP technology is employed, but FIG. 111 shows only the TCP data transfer phase.

The IP terminal 16210-3 of the data transmission company 16200-3 obtains the "provided data" from the database 16220-3 and identifies the IP terminal 16310 of the satellite transmission company 16300-3 by the ICS special number "4300". -3, using the IP frame transfer function of the ICS (# 1: FIG. 111). The satellite transmitting company 16300-3 holds the received “provided data” in its database 16320-3. Next, the IP terminal 16501-3 of the user 16500-3 is identified by the ICS special number "4300".
To transmit an "inquiry frame"(# 2). IP terminal 1
6310-3 returns a "response frame"(# 3),
The terminal 16501-3 receives this "response frame",
Next, a “request frame” is transmitted to IP terminal 16310-3 (# 4). Upon receiving the “request frame”, the IP terminal 16310-3 converts the “provided data” held in the database 16320-3 into an ICS frame format and instructs transmission (# 5). Here, the data part of the ICS frame is “provided data”, and the destination ICS user address is the address “23” of the IP terminal 16501-3.
00. The satellite transmitter 16330-3 emits the ICS frame including the “provided data” created as described above as radio waves to the communication satellite 16400-3 (#).
6), the communication satellite 16400-3 amplifies the intensity of the received "provided data" and emits it as radio waves (the latter half of # 6), and the satellite receivers 16102-3, 16112-3, 16122-3. Receives the ICS frame including the “provided data” in the form of radio waves, respectively, checks the destination of the “provided data”, and since the destination of the “provided data” is the IP terminal 16501-3, the access control device 16122 -3 returns the "provided data" to the form of the ICS user frame and transmits it to IP terminal 16501-3 (# 7). When receiving the “provided data”, the IP terminal 16501-3 transmits the “reception confirmation frame” to the IP terminal 1
It is transmitted to 6310-3 (# 8). In the above procedure, # 1, # 2, # 3, # 4, # 7, and # 8 correspond to the aforementioned T
The CP communication technology is adopted, and only the TCP data transfer phase is shown and described.

Next, in steps # 9 and # 1 of the procedure shown in FIG.
0, # 11, # 12, # 13, # 14, and # 15 are almost the same as the above-described procedure, and the difference is that the user 16500-
3. IP terminal 16501-3, satellite receiver 16502-
In place of 3, another company 16510-3, IP terminal 16
511-3, a satellite receiver 16512-3 is provided, and this embodiment indicates that "provided data" can be transferred to a plurality of users. The communication procedure described above will be described with reference to FIG. Transmission of “query frame” in FIG. 101 (# 2), return of “response frame”
(# 3), transmission of a "request frame"(# 4), "data transmission" by satellite communication (# 7), and transmission of an "acknowledgment frame" are transmission of an "inquiry frame" in FIG. 111, respectively.
(# 2), return of "response frame"(# 3), transmission of "request frame"(# 4), "data transmission" by satellite communication
(# 6), and transmission of "acknowledgment frame"(# 8). From the above description, the satellite communication company 16300-3
When viewed as a communication function unit (hereinafter, referred to as an integrated communication entity) in which the user 16500-3 and the data providing company 16200-3 are integrated, the user 16500-3, as shown in FIG. It can be considered that communication is being performed.

<< Other Variations of the Embodiment >> In both of the above-described embodiments, the transmission and reception of frames employ full-duplex communication of the TCP technology, and only the TCP data transfer phase is shown in FIG. Connection establishment phase and TCP
The description of the connection termination phase is omitted. In the embodiment described here, the UDP communication technique described with reference to FIG. 99 is partially or entirely adopted, and part or all of the transmission and reception of frames by the TCP data transfer phase technique is performed by the UDP data transfer phase technique. This is replaced with the transmission and reception of frames by.

<< Another variation of the above embodiment >> FIG.
12, other variations will be described. Figure 110
, The satellite transmitting company 16300-3, the satellite transmitting company's IP terminal 16310-3, the satellite transmitting company's database 16320-1, the satellite transmitting company's satellite transmitting device 16
330-3 are inside the ICSI 6000-3, and the IP terminal 16310-3 has the ICS special number "430".
0 ". On the other hand, in FIG. 112, the satellite transmitting company 16300-4 and the IP of the satellite transmitting company are provided.
Terminal 16310-4, satellite transmission company database 16
320-2, satellite transmission equipment 16330-
4 are outside the ICS 16000-4, respectively,
The terminal 16310-4 has the ICS user address “390”
0 "is assigned.

Embodiment-32 (Termination Priority Control): FIG.
The control unit in the IP frame shown in FIG. 7 has a source IP address and a destination IP address in addition to the “protocol type”.
In the UDP frame shown in FIG. 4, a source port number and a destination port number are defined respectively. 48-bit data in which an IP address (32 bits) and a port number (16 bits) are arranged is called a socket number.
That is, socket number = IP address‖port number. In this embodiment, source socket number = source IP addressＩＰsource port number, destination socket number = destination I
It is called P address Ｐdestination port number. In this embodiment, I
An ICS user frame obtained by arriving at the access control device from the CS network communication line and being decapsulated is converted to an external ICS using the “protocol type” and the socket number displayed inside the ICS user frame. This is an example in which the priority is controlled for the order of transmission to the.

<< Configuration >> As shown in FIGS. 115 and 116, the ICS 17000-1
0-1, 17110-1, 17120-1, 17130
-1, 17140-1, 17150-1, 17160-
1 and the access control device 17100-1
7111-1, processing unit 17112-1, conversion table 171
13-1. 17200-1,17210-1,1
7220-1,17230-1,17240-1,17
250-1, 17260-1, 17270-1, 172
80-1 are the LA @ of the respective companies, and the respective gateways 17201-1, 1721-1, 1722
1-1, 17231-1, 17241-1, 17251
-1,17261-1,17271-1,17281-
1 is connected to ICS17000-1. Each LAN includes two or three terminals having a function of transmitting and receiving IP user frames. These ICS user addresses are “2600” and “2610” inside the LAN 17200-1 and “1600” inside the LAN 17210-1.
230 ”and“ 1240 ”, and LAN17220−
1 is "2700", "2710" and "2720"
And “2800” and “2810” inside the LAN17230-1 and “2800” inside the LAN17230-1.
100 "and" 2110 ", and the LAN 17250-
1 is “1200”, “121O” and “1220”
And “2200” and “2210” inside the LAN 1726O-1 and “2200” inside the LAN 17270-1.
300 "and" 2310 ", and the LAN 17280-
1 is “2400” and “2410”. Furthermore, terminals 17291-1 and 17292-1 are terminals having a function of transmitting and receiving IP user frames, respectively, have ICS user addresses "2500" and "1250", respectively, and are connected to ICS 17000-1.

<Conversion Table> Access control device 17100-
1 will be described with reference to FIG. 117. The function of the conversion table is the same as that of the other embodiments. In this embodiment, the incoming call priority symbol, the protocol priority,
It is characterized in that the priority is controlled using a partial table which is a component of the conversion table 1713-1 named TCP socket priority and UDP socket priority. Transmission of conversion table I
If the CS network address is “7821”, the incoming call priority symbol is defined as “pr-7821”. That is, the incoming call priority is determined by the access control device as I
The parameter is determined so as to be a parameter depending on the ICS network address assigned to the ICS user logical terminal to be transmitted after CS decapsulation. Conversion table 17113-
Looking at the other sub-tables, for example, corresponding to "pr-7821", the protocol priority is "p-1", the TCP socket priority is "t-1", and the UDP socket priority is "N".
Here, “NULL” represents no designation, and the protocol priority “p−1” is “TCP”, “UDP”, “ICMP”,
It is defined as “IGMP”.

Looking at the other partial tables, the TCP socket priority "t-1" indicates the socket symbol "
"Sk-1" and "sk-7" are defined. Looking at the other partial tables, the UDP socket priority "u-1" defines "sk-3" and "sk-8" in descending order of priority.
Furthermore, the socket symbol "sk-
In the content of “1”, “To” represents a destination socket number, and its destination IP address is “2100”,
Indicates that the destination port number is "30",
Similarly, in the content of the socket symbol “sk-2”, “Fr
"om" indicates a source socket number, and indicates that the source IP address is "1240" and the source port number is "32".

<< Individual Description of ICS Frame >> The ICS network frame NF01 has the ICS user address “2”.
After being transmitted from the terminal 17291-1 of "500", the access control device 17110-1 encapsulates the ICS as the originating ICS network address "7200" and the destination ICS network address "7821".
The data is transferred inside the ICS 17000-1 and reaches the access control device 17100-1, where the ICS is decapsulated to become the ICS user frame UF01, and the ICS user address “2100” is transmitted via the user logical communication line 17821-1. Reach the terminal. User frame UF0 inside ICS network frame NF01
The "protocol type" of the control unit 1 is TCP, and T
This is an example in which the “destination port number” of the CP frame is “30”. Hereinafter, from the ICS network frame NF02,
NF03, NF04, NF05, NF06, NF07,
NF08, NF09, NF10 and NF11 are all shown in FIG.
This is the same as shown in FIG.

The frame NF02 has the address “2600”
Outgoing ICS network address “7300”, incoming ICS network address “78”
21 ", which is encapsulated in the ICS. After the transfer inside the ICS, the ICS is decapsulated and the frame UF0 is transferred.
2 and reaches the terminal having the ICS user address “2110” via the user logical communication line 17821-1. "Protocol type" of frame UF02 is TCP
And the “destination port number” is “30”.

The frame NF03 has the address “1230”
Outgoing ICS network address “7400” and incoming ICS network address “78”
22 ", which is encapsulated as ICS. After the transfer inside the ICS, the ICS is decapsulated and the frame UF0 is transferred.
3 and reaches the terminal having the ICS user address “1200” via the user logical communication line 17822-1. "Protocol type" of frame UF03 is TCP
In this example, the “source port number” is “30”.

The frame NF04 has the address “1240”.
Outgoing ICS network address “7400” and incoming ICS network address “78”
22 ", and after being transferred inside the ICS, the ICS is decapsulated and the frame UF0 is transferred.
4 and reaches the terminal having the ICS user address “1210” via the user logical communication line 17822-1. "Protocol type" of frame UF04 is TCP
In this example, the “source port number” is “32”.

The frame NF05 has the address “1250”.
Outgoing ICS network address “7500”, incoming ICS network address “78”
22 ", which is encapsulated as ICS. After the transfer inside the ICS, the ICS is decapsulated and the frame UF0 is transferred.
5, and reaches the terminal having the ICS user address "1220" via the user logical communication line 17822-2. "Protocol type" of frame UF05 is TCP
And “transmission source port number” is “32”.

The frame NF06 has the address “2610”
Outgoing ICS network address “7300”, incoming ICS network address “78”
23 "is encapsulated as ICS. After the transfer inside the ICS, the ICS is encapsulated in reverse and the frame UF0
6 and reaches the terminal having the ICS user address “2200” via the user logical communication line 17823-1. "Protocol type" of frame UF06 is UDP
And the “destination port number” is “40”. The frame NF07 is transmitted from the terminal having the address “2700”, and the originating ICS network address “7600”.
Incoming ICS network address "7823" as I
CS-encapsulated. After transfer inside ICS, I
The frame is decapsulated into CS and becomes a frame UF07, and reaches the terminal having the ICS user address “2210” via the user logical communication line 17823-1. Frame UF
07 is an example in which the “protocol type” is UDP and the “destination port number” is “40”. The frame NF08 is transmitted from the terminal at the address “2710”, and the transmission ICS
ICS encapsulated as a network address “7600” and an incoming ICS network address “7824”. After the transfer inside the ICS, the ICS is decapsulated to become a frame UF08, and the user logical communication line 1
The ICS user address "230"
In this example, the “protocol type” of the frame UF08 is UDP, and the “source port number” is “40”.

The frame NF09 has the address “2800”
Outgoing ICS network address “7700” and incoming ICS network address “78”
24 ”, which is encapsulated as ICS. After the transfer inside the ICS, the ICS is encapsulated and the frame UF0
9 and reaches the terminal having the ICS user address “2310” via the user logical communication line 17824-1. "Protocol type" of frame UF09 is UDP
In this example, the “source port number” is “42”.
The frame NF10 is transmitted from the terminal having the address “2720”, and has the originating ICS network address “760”.
0 ”, ICS-encapsulated as the incoming ICS network address“ 7825 ”. After the transfer inside the ICS, the ICS is de-encapsulated to become the frame UF10, and the IC is transmitted via the user logical communication line 17825-1.
The terminal reaches the terminal having the S user address “2400”. The "protocol type" of the frame UF10 is TCP,
This is an example in which “destination port number” is “60”. Frame N
F11 is sent from the terminal having the address “2810”, and the sending ICS network address “7700” and the receiving IC
ICS encapsulated as the S network address “7825”. After the transfer inside the ICS, the ICS is decapsulated to become a frame UF11. The terminal having the ICS user address “2410” is transmitted via the user logical communication line 17825-1. To reach. In this example, the “protocol type” of the frame UF11 is UDP, and the “source port number” is “70”.

<< Example 1 of Determination of Priority >> A method of determining the priority will be described with reference to the flowchart in FIG. The access control device 17100-1 receives the ICS network frames NF01 and NF02 from the ICS network communication line at substantially the same time (step S1000), and decapsulates the respective network frames to obtain ICS user frames UF01 and UF02 (step S1000). S1
010). According to the conversion table 1713-1, these ICSs
Incoming ICS of ICS logic terminal transmitting user frame
The network addresses are both "7821", indicating that they match (step S1020). The incoming call priority symbol of both the ICS network frames NF01 and NF02 is "pr-7821".
According to the partial table 113-1, the protocol priority corresponding to “pr-7821” is “p−1”, the TCP socket priority is “t−1”, and the UDP socket priority is “NUL”.
L "is specified. When the other parts which are the components of the conversion table 1713-1 are examined, the protocol priority is determined.
From the breakdown of "p-1", TCP, UDP, ICMP, IG
For the TCP with the highest priority in the order of MP and the highest priority, the socket symbols “sk-1” and “sk-7” have the highest priority in the order of the TCP socket priority “t−1”, and the socket From the breakdown of the symbol "sk-1", it can be seen that the IP address forming the destination socket number is "2100" and the destination port number is "30". The protocol type displayed inside the ICS network frame NF01 is “TCP”, and the destination IP address is “2”.
100 ", and the destination port number is" 30 ".
The protocol type displayed inside the CS network frame NF02 is “TCP”, the destination IP address is “2110”, and the destination port number is “30”. In the present embodiment, it can be seen that the ICS network frame NF01 whose protocol type and destination socket number match the specification of the above-mentioned socket symbol “sk-1”. By the above procedure, the IC to send out with priority
It is determined that the S network frame is NF01 (step S1030). Next, the ICS network frame NF01 is transmitted to the user logic terminal via the ICS logic terminal (step S1040).

<< Example 2 of Determination of Priority >> Access control apparatus 17100-1 receives ICS network frames NF03, NF04 and NF05 from the ICS network communication line at substantially the same time (step S1000), and reverses each network frame. Encapsulation to obtain ICS user frames UF03, UF04, UF05 (step S
1010). According to the conversion table 1713-1, these ICs
Incoming IC of ICS logic terminal transmitting S user frame
The S network addresses are both "7822", which indicates that they match (step S1020). The incoming call priority symbols of the ICS network frames NF03, NF04 and NF05 are all "pr-7822",
"P-1" is designated as the protocol priority, "t-2" is designated as the TCP socket priority, and "NULL" is designated as the UDP socket priority. From the breakdown of the protocol priority "p-1", the TCP priority is high, and the TCP socket priority "t-
2), the socket symbol “sk-2” has a higher priority, and the socket symbol “sk-2” has an IP address of “2100” and a source port number of “30” which constitute the source socket number. ICS.
The protocol type displayed inside the network frame NF03 is “TCP”, the source IP address is “1230”, and the source port number is “30”. I
The protocol type displayed inside the CS network frame NF04 is “TCP”, the source IP address is “1240”, and the source port number is “32”. Further, the protocol type displayed inside the ICS network frame NF05 is “TCP”, the source IP address is “1250”, and the source port number is “32”. In this embodiment, the protocol type and the source socket number are the same as the socket symbol "sk-
It can be seen that what matches the designation of “2” is the ICS network frame NF04.
The ICS network frame transmitted with priority is NF
04 (step S1030). Next, this ICS network frame NF04 is
Transmission to the user logic terminal via the logic terminal (step S
1040).

<< Example 3 of Priority Determination >> The access control device 17100-1 receives the ICS network frames NF06 and NF07 from the ICS network communication line at substantially the same time (step S1000), and decapsulates each network frame. ICS user frame UF0
6, UF07 is obtained (step S1010). Conversion Table 1
According to 7113-1, the incoming ICS network addresses of the ICS logical terminals that transmit these ICS user frames are both "7823", which indicates that they match.
(Step S1020). The incoming priority symbol of the ICS network frames NF06 and NF07 is "pr
−7823 ”, the protocol priority is“ p−2 ”,
"NULL" is designated as the TCP socket priority, and "u-1" is designated as the UDP socket priority. From the breakdown of the protocol priority "p-2", UDP, TCP, ICMP, I
For the UDP with the highest priority in the order of GMP and the highest priority, the socket symbols “sk-3” and “sk-8” have the highest priority from the breakdown of the UDP socket priority “t−1”, and further the socket. From the breakdown of the symbol “sk-3”, the IP address forming the destination socket number is “2200”,
It can be seen that the destination port number is “40”. ICS
The protocol type displayed inside the network frame NF06 is “UDP”, the destination IP address is “2200”, and the destination port number is “40. On the other hand, the protocol displayed inside the ICS network frame NF07 is The type is “UDP”, the destination IP address is “2110”, and the destination port number is “40.” In this embodiment, the protocol type and the destination socket number match the specification of the socket symbol “sk-3”. Is determined to be the ICS network frame NF06.By the above procedure, it is determined that the ICS network frame to be transmitted with priority is NF06 (step S1030). Send to user logic terminal via logic terminal (Step S1040).

<< Example 4 of Determining Priority >> The access control apparatus 17100-1 sets the ICS network frame NF08
And NF09 are received at substantially the same time (step S10
00), the respective network frames are decapsulated to obtain ICS user frames UF08 and UF09.
(Step S1010). According to the conversion table 1713-1, the incoming ICS network addresses of the ICS logical terminals transmitting these ICS user frames are both "78".
24 ", which indicates that they match (step S10).
20). ICS network frames NF08 and NF
09, the incoming call priority symbol is "pr-7824", the protocol priority is "p-2", the TCP socket priority is "NULL", and the UDP socket priority is "u-
The priority of the socket symbol "sk-4" is high from the breakdown of the protocol priority "p-2", and the source socket number is formed from the breakdown of the socket symbol "sk-4". It can be seen that the IP address to be transmitted is “2710” and the source port number is “40.” The protocol type displayed inside the ICS network frame NF08 is “UDP” and the source IP address is “2.
710 ", and the source port number is" 40 ".
The protocol type displayed inside the ICS network frame NF09 is “UDP”, the source IP address is “2800”, and the source boat number is “42”. In the present embodiment, it is understood that the ICS network frame NF08 in which the protocol type and the transmission source socket number match the designation of the socket symbol “sk-4”. By the above procedure, it is determined that the ICS network frame to be transmitted with priority is NF08 (step S1030). Next, the ICS network frame NF01 is transmitted to the user logic terminal via the ICS logic terminal (step S1040).

<< Example 5 of Determining Priority >> The access control device 17100-1 transmits the ICS network frame NF10
And NF11 at substantially the same time (step S100
0), decapsulate each network frame to obtain ICS user frames UF10, UF11
(Step S1010). According to the conversion table 1713-1, the destination ICS network addresses of the ICS logical terminals transmitting these ICS user frames are both "782".
5 ", indicating that they match (step S102).
0). ICS network frames NF10 and NF1
1, the incoming call priority symbol is "pr-7825", the protocol priority is "p-1", the TCP socket priority is "t-3", and the UDP socket priority is "u-3". I have. From the breakdown of the protocol priority “p−1”, the priority of TCP is higher than that of UDP. However, the protocol type displayed inside the ICS network frame NF10 is "TCP", and the protocol type displayed inside the ICS network frame NF11 is "UDP". By the above procedure, it is determined that the ICS network frame to be transmitted with priority is NF10 (step S1030). Next, this IC
The S network frame NF10 is sent to the user logic terminal via the ICS logic terminal (step S1040).

Embodiment-33 (transmission priority control): ICS
An embodiment will be described in which, after a user IP frame arriving from the outside of the system is encapsulated in an ICS by an access control device, the order of transmission to an ICS network communication line is determined.

<< Structure >> As shown in FIG.
7000-2 is an access control device 17100-2, 17
The access control device 17100-2 includes a line unit 17111-2, a processing device 17112-2, and a conversion table 17113-2. 1
724O-2,..., 17280-2 are corporate LANs
, Respectively, via the ICS user logical communication line.
S17000-2. Each LAN
Includes a plurality of IP terminals, 1741-2 to 17411
-2 are IP terminals.

<< Conversion Table >> Conversion table 1711 shown in FIG.
The function of 3-2 is the same as that of the other embodiments. In this embodiment, a conversion table 1711 named outgoing priority symbol, protocol priority, TCP socket priority, and UDP socket priority.
It is characterized by using a partial table which is a constituent element of 3-2. If the outgoing ICS network address in the conversion table 17113-2 is “7821”, the outgoing priority symbol is “p”
s-7821 ". That is, the transmission priority is a parameter depending on the network address assigned to the ICS logical terminal that receives the user IP frame arriving at the access control device from the user logical communication line. Conversion table 17113-
Looking at the other partial tables of FIG. 2, for example, corresponding to “ps-7821”, the protocol priority is “p-21”, the TCP socket priority is “t-21”, and the UDP socket priority is “NULL”. It has been described. Protocol priority, TC
Notations such as P socket priority and UDP socket priority are the same as those in the thirty-second embodiment.

<< Example 1 of Priority Determination >> A method of determining a priority will be described with reference to the flowchart in FIG. The access control device 17100-2 has a line unit 17111 to which the ICS network address “7821” is assigned.
-2 ICS logical terminal, ICS user frame F0
1 and F02 are received at substantially the same time, and the ICS network address assigned to the ICS logic terminal is obtained (step S2700). Next, the procedure of transmission priority control is performed as follows. ICS user frame F01
And F02, the transmission priority symbol of which is "ps-782"
1 ", then, according to the partial table of the conversion table 17113-2, the protocol priority corresponding to" ps-7821 "is" p-21 ", the TCP socket priority is" t-21 ",
"NULL" is designated as the UDP socket priority. Further examination of other parts that are components of the conversion table 17113-2 reveals that TCP, UDP, ICMP, and IGMP have the highest priority in the order of the protocol priority “p-21”, and the TCP with the highest priority. , TCP
From the breakdown of the socket priority “t-21”, the priority is higher in the order of the socket symbols “sk-21” and “sk-27”,
Further, from the breakdown of the socket symbol “sk-21”, it can be seen that the IP address forming the source socket number is “2100” and the source port number is “30”. ICS
The protocol type displayed inside the user frame F01 is “TCP”, and the source IP address is “210”.
0 "and the source port number is" 30 ".
The protocol type displayed inside the S user frame F02 is “TCP”, and the source IP address is “21”.
10, the source port number is "30." In this embodiment, the protocol type and the source socket number match the specification of the socket symbol "sk-21" in the ICS user frame F01. I understand.
As described above, the ICS encapsulation and the I
It is determined that the CS user frame is F01 (step S2710).

Next, is the ICS network address “7721” assigned to the logical terminal receiving the ICS user frame F01 registered in the conversion table 17113-2 as the request identification as the virtual leased line connection “3”? It is checked whether or not it is (step S2720). The following is a series of steps S2730,... Similar to those described in the other embodiments.
At the end, ICS encapsulation is performed (step S2780), and the ICS network frame NF01 obtained by the encapsulation is preferentially transmitted to the ICS 17000-2 (step S2).
790).

<Another Example of Priority Determination> The access control device 17100-2 sets the ICS network address "78".
ICS of the line unit 17111-2 to which "22" is assigned
From the logic terminals, the ICS user frames F03 and F0
4. Also in the second example of the priority determination for receiving F05 at substantially the same time, the access control
In the third example of the priority determination for receiving the ICS user frames F06 and F07 at almost the same time from the ICS logical terminal of the line section 17111-2 to which the network address “7823” is assigned, the access control device 1
7100-2 is the ICS network address “782”
In the fourth example of the priority determination of receiving the ICS user frames F08 and F09 at substantially the same time from the ICS logical terminal of the line unit 17111-2 to which "4" is assigned, the access control device 17100-2 further sets the ICS Line unit 17 to which network address "7825" is assigned
Example 5 of priority determination for receiving the ICS user frames F10 and F11 from the ICS logical terminal 111-2 at substantially the same time is the same as Example 1 of priority determination, and is a component of the conversion table 17113-2. As shown in a partial table, the description is omitted.

Embodiment-34 (Plurality of Communication): This embodiment is a new embodiment constructed by combining the above-described Embodiments-2, -10, and -18.
This will be described with reference to FIG. ICS 18000-1 is an access control device 18140-1, 18141-1, 18142.
1, 18143-1, 18144-1 and the conversion table inside the access control device 18140-1 is 18195-
1, the conversion table inside the access control device 18141-1 is 1.
8196-1. Conversion Table 18195-1 is Conversion Table 6.
Similarly to 013-1, the specified value of the request identification is “1”,
Including "2", "3", and "4", correspondingly, intra-enterprise communication, inter-enterprise communication, virtual leased line connection, and ICS network server connection can be implemented within one access control device. . The conversion table 18196-1 has a specified value "3" for the request identification.
Only, and a virtual leased line connection is possible. ICS
The network server 18160-1 is connected to the access control device 18140-1 via an ICS network communication line. 1818
Reference numeral 4-1 denotes an FR network or an ATM network.
When 1 is an FR network, it corresponds to the FR network 1041 shown in FIG. 35, and when 18184-1 is an ATM network, it corresponds to the ATM network 1042 shown in FIG. Conversion unit 18181
-1 and 18182-1 correspond to the FR / ICS network frame conversion unit 1032-1 shown in FIG. 35 when 18184-1 is an FR network. The conversion unit 18
For 181-1 and 18182-1, 18184-1 is A
The combination of the TM network corresponds to the ATM / ICS network frame conversion unit 1033-1 shown in FIG.

LAN 18110-1, 18130-1
Are access control devices 18140-1 and 181 respectively.
42-1 is connected via an ICS user logical communication line. Gateway 18171- of LAN 18120-1
1 and 18172-1 are connected to an access control device 18140-1 or 18141-1 via an ICS user logical communication line, respectively. LAN18120-1
Are a plurality of IP terminals 18121-1, 18122-1,
18123-1. Here, the IP terminal refers to a terminal having a function of transmitting and receiving an IP user frame. IP terminals 18150-1 and 18151-1 are connected to access control devices 18143-1 and 18144-1, respectively, and
It is connected via an S-user logical communication line. The ICS network communication line 18191-1 connects the conversion unit 18181-1 and the access control device 18141-1 and connects the ICS network communication line 18191-1.
192-1 connects the conversion unit 18182-1 and the access control device 18142-1. LAN18120-1 and LA
When the ICS user frame transmitted from N18110-1 reaches the access control device 18140-1, the request identification value “1” described in the conversion table 18195-1 is transmitted.
According to the control of "2", "3", and "4", ICS is encapsulated to receive any of the communication services of intra-enterprise communication, inter-enterprise communication, virtual leased line, and ICS network server. As described in the embodiment, the description is omitted. The ICS user frame transmitted from the gateway 18172-1 is stored in the access control device 18141.
When the value reaches -1, the ICS is encapsulated to receive the communication service of the virtual leased line according to the control of the request identification value "3" described in the conversion table 18196-1, and via the ICS network communication line 18191-1. After passing through the conversion unit 18181-1, further through the FR network or the ATM network 18184-1, through the conversion unit 18182-1, the ICS network communication line 18
It is delivered to the access control device 1842-1 via 192-1. Here, FR network to ATM network 18184-1
Uses a function of a permanent connection (PVC), which is a known technique as a function of an FR network or an ATM network. By the procedure described above, the transfer of the ICS user frame is realized.

<< Partial Modification of the Above Embodiment: Variation
>> A description will be given with reference to FIG. ICS18000-2
Includes a plurality of access control devices as in 18000-1, and is connected to a LAN or an IP terminal through the access control devices. FR network to ATM network 18 in FIG.
184-1 is replaced by an FR network or an ATM network 18200-2, and the access control device 18141-1-1 is converted to a conversion unit 181.
81-1, the ICS network communication line 18191-1 is replaced with a PVC interface conversion unit 18210-2, and the access control device 18142-1, the conversion unit 18182-1, I
The CS network communication line 18192-1 is replaced with a PVC interface conversion unit 18220-2, and the gateways 18171-1 and 18172-1 are replaced with a new gateway 18230-2. Where 1
When the 8200-2 is an FR network, the PVC interface converters 18210-2 to 18220-2 have a function of converting and inversely converting the ICS user frame into the FR frame format. As described in When 18200-2 is an ATM network, the PVC interface converters 18210-2 to 18220-2 have a function of converting and reverse converting an ICS user frame into an ATM frame format. This is as described in FIG. The transfer of the ICS user frame by the variation is realized by using the function of the fixed connection (expressed by PVC) by the FR network or the ATM network.

Embodiment-35 (Operation of Integrated Information Communication System): This will be described with reference to FIGS. 126 and 127. IC
S19000-1 is VAN19010-1, VAN1
9020-1, access control device 19300-1, 19
310-1, 19320-1, 19330-1, relay devices 19400-1, 19410-1, 1942O-1,
19430-1, Inter-VAN gateway 19490-
1. Server devices 19500-1, 19510-1, 19
520-1, 19530-1, and 19540-1.
Each server device is assigned an ICS network address, and includes a plurality of ICS network servers inside each server device. These multiple ICS network servers are distinguished by port numbers used in the TCP communication protocol and the UDP communication protocol. Access control device 19300-1, 19
310-1, 19320-1, and 19330-1 are conversion tables 19301-1, 19311-1, and 1932, respectively.
1-1, 19331-1, and conversion table servers 19731-1, 19732-1, 19733-1, 1 respectively.
9734-1 and domain name servers 19741-1, 19742-1, 19743-1, 1 respectively.
9744-1, each of which includes a resource management server 19
751-1,19752-1,19753-1,197
54-1. The relay device 19400-1 includes the path information server 19761-1 and the resource management server 19755-
1 and the relay device 19410-1 is connected to the route information server 1
9742-1, the relay device 19420-1 includes the path information server 19763-1, and the relay device 19430-
1 includes a route information server 19764-1, and the server device 19500-1 includes a user service server 19711-
1. The ICS authority server 19721-1 is included, and the server device 19510-1 is provided with a general resource management server 19750.
-1, an integrated route information server 19760-1 and the server device 19520-1 is a user service server 1971
2-1 includes an ICS authority server 19722-1, and the server device 19530-1 has an ICS user address "120".
ICS network server 19980-1 which carries out digital library service with "0" and ICS user address "1300"
ICS network server 19 that provides a travel guidance service with
981-1, and the server device 19540-1 includes a general ICS authority server 19720-1, a general domain name server 19740-1, a general conversion table server 19730-1,
And an integrated user service server 19710-1. Note that the domain name server is the same as the one described in the other embodiments.
This server has functions similar to those of the CS address management server and the ICS name server. There are also different functions, and details of the functions are determined in this embodiment.

The access control device, relay device,
The server device and the gateway between VANs are ICS network communication lines 19040-1, 19041-1, 19042-1,
19043-1 and the like, and can exchange information with each other using the ICS network communication function. The server device is made, for example, by giving a computer an ICS network communication function,
A program for executing a server function runs therein. Reference numeral 19110-1 denotes an FR network, and a conversion unit 19111
-1 and 19112-1 are communication lines of the FR exchange network and I
The interface conversion with the ICS network communication line for transferring the CS network frame is performed, which is the same as that described in the other embodiments. Also, 1
Reference numeral 9900-1 denotes an ATM network, and a conversion unit 19901-1
And 19902-1 describe communication lines and ICs of ATM switching networks.
The interface conversion with the ICS network communication line for transferring the S network frame is performed, and this is the same as that described in the other embodiments. ICS19
LANs 19600-1 and 1960 outside the 000-1
1-1, 19602-1, 19603-1, 19604
-1 and 19605-1, and IP terminals 19606-1 and 19606-1 having a function of transmitting and receiving an ICS network frame.
607-1 is an embodiment connected.

<< Hierarchical Structure of ICS Network Server >> Description will be made with reference to FIGS. 128 to 133. The general user service server 19710-1 is a user service server 19711.
-1 and 19712-1 have higher control rights in the sense of giving an instruction or reporting individual information. The higher control rights are shown in a tree structure in FIG. 128. 1981
1-1 is a communication path for exchanging information between the general user service server 19710-1 and the user service server 19711-1 and comprises an ICS network communication line and a relay device. General ICS authority server 19720-1, general conversion table server 19730-1, general domain name server 19
740-1, an integrated resource management server 19750-1,
The same applies to the general route information server 19760-1, which is shown in FIGS. 129 to 133, respectively. In this embodiment, the tree structure of the server has two hierarchies.
The number of access control devices, relay devices, server devices, and the like installed inside can be increased to three or more layers.
The routing information server has a routing table used by the relay device and the access control device with a function of transmitting and receiving inside the ICS. The resource management server contains relay devices, access control devices,
Provide management functions such as grasping the installation state of server devices and failure information.

<ICS19000- by ICS operator>
Operation 1 >> ICS Operator 19960-1 and 19961-
1 gives an instruction such as operation start to the general user service server 19710-1, the general conversion table server 19730-1, the general resource management server 1950-1, and the general route information server 19760-1, or reports individual information. Thus, the operation of the ICS19000-1 can be easily performed.

<< ICS19000- by ICS officials >>
Management of 1 >> ICS official 19950-1 is the supervising ICS authority server 19720-1, supervising domain name server 197
It is possible to easily manage the address and the like used in the ICS19000-1 by giving an instruction such as the start of operation to the 40-1 or by reporting individual information.

<< Socket Number and Server >> Each ICS network server has an ICS user address and an ICS network address. In addition to the ICS network address, each server has a port defined by TCP or UDP communication protocol. Having a number is a matter added to other embodiments. That is, each of the servers is 32
It is identified by a total of 48 bits of ICS network address and 16 bits of port number (this is called a socket number). Each server has an ICS 190
00-1 includes programs each having a unique function, and some servers have an "operation interface" as described later. Here, the “operation interface” is a function of transmitting and receiving instructions such as information exchange with an operator via a keyboard or the like, operation of each server function, start of operation, and the like. Each server assigns an ICS network address to, for example, an access control device or a relay device, assigns different port numbers to a plurality of programs (that is, servers) inside these devices, and distinguishes them by socket numbers. Each server has an ICS network communication function as described in the other embodiments, and can exchange information with each other using the ICS network address and the port number.

<< Registration of User to ICS-1: Inter-Company Communication and ICS Network Server >> A description will be given with reference to FIGS. 126, 127 and 134. ICS19000-1 use applicant 19200-1 is given ICS receptionist 19940-1 by ICS
Apply for participation (procedure P100). “Application reception data”
Is an ICS usage item excluding an ICS user address, an ICS network address, and an ICS name. For example, request identification (intra-company communication, inter-company communication, virtual private line connection, ICS network server classification), speed class, priority, etc. Communication bandwidth conditions, billing conditions, open connection conditions, fee payment methods, user name and address (identification data), signature conditions,
These are encryption conditions and the like, and the meanings of these use items are described in other embodiments. ICS Recipient 19940-1
Stores the "application reception data" in the user service server 1
9711-1 through the “operation interface” and “application reception data” is stored in the user database 1961.
1-1 is stored (procedure P110). Next, the user service server 19711-1 is connected to the ICS authority server 1972.
The ICS user address, ICS network address and ICS name are requested using the ICS network communication function (step P120). ICS Authority Server 19
721-1 is the requested ICS address or ICS
The ICS network address assignment record table 1962 holding the name inside the database 19621-1
2-1 (Fig. 135), ICS user address assignment record table 1
9623-1 (FIG. 136).
0), the allocation result is recorded in the allocation table, and the allocation result is returned to the user service server 19711-1 (procedure P140). User service server 19711-
11 stores the assignment result obtained from the ICS authority server 19721-1 in the user database 19611-1.
(Procedure P150). FIG. 135 is an example of the ICS network address assignment record table 19622-1, and the first line of the table shows the ICS network address “770”.
0 "is assigned to the ICS logical terminal identification code LT-001 of the node identification code ACU-1, the allocation identification code is user-1, and the allocation date is an example of April 1, 1998. The node identification symbol ACU-1 is the access control device 19
It is predetermined to point to 300-1. In the third row of the table, the ICS network address “963
0 is the port number “620” of the node identification symbol SVU-1
And the assignment destination identification symbol is Sv-001, the assignment date is an example of February 1, 1998, and it is predetermined that the node identification symbol SVU-1 points to the server device 19530-1. .

FIG. 136 shows an example of the ICS user address assignment record table. The first line of the table contains the ICS user address “4610” and the ICS name (also called the ICS domain name) “ddl.ccl.bbl”. .Aal.j
"p" is assigned, the request identification value is "2", the assignment destination identification symbol is user-1, and the assignment date is April 1, 1998.
It is an example of the day. Further, in the fourth row of the table, the ICS user address “1200” is added to the ICS name “rrl.
qq. pp. jp ", the request identification value is" 4 ", the allocation destination identification code is Sv-001, and the allocation date is February 1, 1998. The user service server 19711-1 is Provide information to the conversion table server 19731-1 via the ICS network communication function so as to write the application content of the use applicant 19200-1 and the acquired ICS network address to the conversion table 1931-1 in the access control device 19300-1. (Procedure P160) The contents to be provided are described in other embodiments, such as the originating ICS network address, sender ICS user address, request identification, speed class, priority, signature condition, encryption condition, and open class. The ICS network address and the ICS user address described above have a request identification value of “2”, For inter-Mari enterprise communications originating ICS network address and sender ICS
Register as a user address. If the value of the request identification is "4", that is, the ICS network server, it is registered as the destination ICS network address and the recipient ICS user address. The conversion table server 19731-1 adds the above contents to the conversion table 1931-1-1 (procedure P17).
0). Incoming ICS network address and recipient ICS
At this time, the user address is in the conversion table 1931-1.
Is registered in the conversion table 1931-1 in "Registration of communication partner" described later in this embodiment.

Next, the conversion table server 19731-1 executes the IC
It notifies the S domain name server 19641-1 of the ICS network address, ICS user address and ICS name (procedure P180). ICS domain name server 19
741-1 is an internal database 19641-1.
The ICS network address, the ICS user address and the ICS name received are written and stored (procedure P190), and the completion of the writing is indicated by the conversion table server 19731.
-1 (procedure P200). Conversion table server 197
31-1 confirms this report (procedure P210), and notifies the user service server 19711- of completion of the series of procedures.
1 (procedure P220), and the user service server 1
9711-1 confirms this report (procedure P230), and notifies the ICS user address and ICS name which are the allocation results to the use applicant (procedure P240). Since the ICS network address is used only inside the ICS, the use applicant is not notified. In the case of the ICS network server, that is, when the value of the request identification is “4”, the user service server 19711-1 returns to the ICS 190 in the procedure P 160.
It notifies all conversion table servers inside 00-1 and requests registration in the conversion tables of all access control devices.

<< Rewrite management of conversion table by overall conversion table server >> Procedures P800 to 960 at the lower side of FIG. 134, FIG.
This will be described with reference to FIGS. The general conversion table server 19730-1 is a conversion table server 19731-
1 is instructed to rewrite the contents of the conversion table 19301-1, for example, speed class priority, originating ICS network address, and some or all items of the conversion table (procedure P800). According to this instruction, the contents of the conversion table 19301-1 are changed (procedure P810). Also, the domain name server 19741
-1 is instructed to rewrite the ICS network address and the like (procedure P820), and the domain name server 19741-1
Updates the internal table according to this instruction (procedure P83).
0), the result is reported to the conversion table server 19731-1 (procedure P840), the conversion table server 19731-1 confirms (procedure P850), and the overall conversion table server 19730-1.
(Procedure P860). The general conversion table server 19730-1 is a user service server 19711-1.
Is instructed to rewrite the contents of the user database 19611-1 such as the speed class, the ICS network address, and other items (procedure P900).
The user service server 19711-1 updates the contents of the user database 19611-1 according to the instruction (procedure P910). ICS Authority Server 1972
1-1 ICS network address and I no longer needed
Returns the CS user address and the ICS name or transmits a new request (procedure P920), and the ICS authority server 19
The 721-1 updates the ICS network address assignment record table 19622-1 and the ICS user address assignment record table 19623-1 according to this instruction (procedure P93).
0), and the result is stored in the user service server 19711-1.
To the user service server 1 (order P940).
9711-1 confirms (procedure P950) and reports to the overall conversion table server 19730-1 (procedure P960).

In the above description, the overall conversion table server 1
9730-1 is the first user service server 197
It is also possible to execute the procedures P900 to P960 by calling 11-1 and secondly invoke the conversion table server 19731-1 to execute the procedures P800 to P860. Because of this, the ICS operator 199
60-1 instructs the general conversion table server 19730-1 to request a rewriting of the contents of the access control table, and thereby a domain name server or an ICS that manages the conversion table inside the access control device and address information associated with the conversion table. By exchanging information with the authority server, it is possible to easily manage the rewriting of the contents of the consistent conversion table, that is, update management of all the conversion tables of the access control device inside the ICS19000-1.

<< User Communication Partner Registration >> This will be described with reference to FIG. ICS19000-1 use applicant 1920
0-1 applies to ICS receiver 19940-1 for communication partner registration with the domain name of the communication partner (procedure P30
0). The ICS receiver 19940-1 receives the domain name of this communication partner (procedure P310), and converts the conversion table server 1973.
1-1 is transmitted (procedure P320). Conversion table server 19
731-1 is a domain name server 19740-1, 197
Information exchange with 42-1 etc. (procedures P330, P331),
ICS corresponding to the domain name of the contacted communication partner
The network address and the ICS user address are acquired, and the contents of the conversion table 1931-1 are updated (procedure P3
40), and report the result (procedures P350, P360). The updated result is shown in a conversion table 1931-2. The obtained ICS network address is the incoming ICS network address, and the ICS user address is the recipient IC.
As the S user address, they are registered in a conversion table as shown in FIG. 141. It should be noted that the ICS network server, the incoming ICS network address and the recipient ICS
The user address column is left blank.

<< Registration of User to ICS-2: Intra-Company Communication and Virtual Private Line >> A description will be given with reference to FIG. The difference between the intra-company communication and the above-mentioned inter-company communication is that the ICS user address is submitted and the ICS name cannot be used. Therefore, there is no ICS name assigned, and the ICS name is used. Procedure (P180, P19
0, P200). First, the ICS19000-1 user 19200-1
Apply for ICS subscription to ICS receptionist 19940-1
(Procedure P400). The “application acceptance data” is an ICS usage item excluding the ICS network address and the ICS name, and is, for example, an ICS user address, for example, a request identification (intra-company communication, inter-company communication, virtual leased line connection,
Network server classification), speed class, priority, etc. are the same as in the inter-company communication. As the ICS user address, at least one set of the sender ICS user address and the receiver ICS user address is presented. In the case of a virtual leased line connection, the sender ICS user address and the receiver IC
Not presenting the S user address is different from the case of intra-company communication.

The ICS receiver 19940-1 stores the “application reception data” in the user service server 19711-1.
Is input through the “operation interface”, and the “application reception data” is stored in the user database 19611-1 (procedure P410). Next, the user service server 19
The 711-1 requests the ICS authority server 19721-1 for its ICS user address, ICS network address and ICS name using the ICS network communication function.
(Procedure P420). The ICS authority server 19721-1 allocates only the ICS network address in the same manner as the above-mentioned procedure P130 (procedure P430), records the result of the assignment in the above-mentioned assignment table, and returns the result of the assignment to the user service server 19711-1. (Procedure P440). The user service server 19711-1 stores the assignment result obtained from the ICS authority server 19721-1 in the user database 19611-1 (procedure P450). The user service server 19711-1 converts the contents of the application and the acquired ICS network address into the conversion table server 19
7373-1 (procedure P460), the conversion table server 19731-1 registers it in the conversion table 19301 (procedure P460).
370), and report the completion of registration (procedures P480, P49)
5). FIG. 143 illustrates an example in which intra-company communication and registration of a virtual leased line are performed in the conversion table 19301.

<< Description of Domain Name Server >> Procedures P330 and P331 relating to the domain name server in the description of FIG.
With reference to FIG. 144, an example of four layers will be described.
The ICS network address of the internal table 19600-1 of the domain name server for the domain name "root" is "9500", and the domain name "a" is located below the ICS network address.
l ”,“ a2 ”,“ a3 ”..., for example, an IC in which a domain name server handling a domain name“ a1 ”is located
S network address is "9610" and port number is
"440". Domain name "a1"
Internal table 19610-1 of domain name server targeting
ICS network address is "9610",
The domain names “bl”, “b2”, “b3”
Exists, for example, indicating that the ICS network address where the domain name server handling the domain name "b2" is located is "9720" and the port number is "440". The ICS network address of the internal table 19620-1 of the domain name server for the domain name "b2" is "9720", and the domain names "c4", "c5", "c6", etc. exist below the ICS network address. However, for example, in the domain name "c5", since the display of the end point column is "YES", no domain name exists below the domain name. In this example, the I name corresponding to the ICS name "c5.b2.al."
CS network address is "9720" and IC
This indicates that the S user address is “4510”. Note that a record in the internal table 19620-1 of the domain name server, that is, a set of data including a combination of the ICS name (ICS domain name), the ICS network address, and the ICS user address "4610" is written in the "name of the domain name server". Resource record ".

<< Calling Domain Name Server >> FIG. 148
, The conversion table server 19630-1 converts the domain name server 19640-1, 19650-1, 19660-
A procedure for calling an ICS network address and an ICS user address corresponding to the domain name "c5.b2.al." Conversion table server 19
630-1 is a resolver 19635 inside the conversion table.
-1 is input with the domain name "c5.b2.al."
The resolver 19635-1 uses the ICS network communication function to convert the ICS frame 19641-1 including “al” into the ICS frame 19641-1.
When sent to the domain name server 19640-1, an ICS frame 19642-1 including the ICS network address "9610" of the ICS domain name server for "a1" is returned. Next, the resolver 19635-1 sets “b2”
Is sent to the ICS domain name server 19650-1 and the ICS network address “972” of the ICS domain name server for “b2” is sent.
ICS frame 19652-1 containing a reply “0” is returned.
When the CS frame 19661-1 is sent to the ICS domain name server 19660-1, the ICS network address “9820” of “c5” and the ICS user address “45”
An ICS frame 19662-1 containing 20 "is returned. According to the above procedure, the conversion table server 19630-1 is returned.
Is the IC corresponding to the domain name "c5.b2.al."
An S network address “9820” and an ICS user address “4520” are acquired.

<< Rewriting Conversion Table from IP Terminal >> FIG.
This will be described with reference to FIGS. Domain name "c5.
The ICS user frame including “b2.al” is transmitted to the IP terminal 1
It transmits from 9608-1 to the conversion table server 19731-1 (procedure P500). The conversion table server 19731-1 is
Inquiry to the domain name server (procedure P510), and the domain name server returns the I corresponding to the domain name "c5.b2.al".
The CS network address “9820” and the ICS user address “4520” are searched and acquired (procedure P52).
0), when replying to the conversion table server 19731-1 (procedure P53O), the conversion table server writes in the conversion table 1931-1 (procedure P540) and reports it to the IP terminal 19608-1 (procedure P550). In this procedure, the ICS network address “9820” is the destination network address, and the ICS user address “4520” is the recipient I address.
FIG. 1 shows the rewritten conversion table as the CS user address.
38. 138 omits the description contents of the conversion table corresponding to the request identification included in FIG. 137. Next, from the IP terminal 19608-1, the conversion table 19301-
For the registered content of 1X, the conversion table server 19 converts the ICS user frame including the designation of changing the speed class to “2”.
731-1 (Step P600). The conversion table server 19731-1 rewrites the registered contents of the conversion table 1931-1X to the speed class “2” according to the designation (procedure P61).
0), and reports it to IP terminal 19608-1 (procedure P62).
0). The conversion table rewritten by this procedure is 193
01-Y (FIG. 139).

<< Moving Terminal Between Access Control Devices >> IC
As can be seen from the example of the S user address assignment record table 19623-1, the first row of the table indicates that the ICS user address "4610" has the ICS name (also called the ICS domain name) "dd1.cc1.bb1". .Aa1.j
p ”is assigned, and the ICS user address and ICS
It is characterized by holding a name. For example, IC
Terminal 19608 with S-user address "4610"
-1 (FIG. 126) to the access control device 19300-1.
To the access control device 19320-1 (FIG. 127), for example, when a new ICS network address “7821” is assigned to this terminal, the conversion table 19321
-1, the originating ICS network address "78"
21 and the sender ICS user address "4610" are registered as a pair, in this case, the ICS name "dd1. cc1. bb1. aa1. jp "
As specified by the ICS user address assignment record table 19623-1, the ICS user address "461"
0 and the ICS name is not changed.The ICS name “dd” inside the domain name server is not changed.
1. cc1. bb1. aa1. jp ", the ICS network address" 7700 ", and the ICS user address" 4610 ".
S name “dd1.cc1.bb1.aa1.jp”
ICS network address “7821” and IC
The address is changed to the S user address “4610”. That is, the ICS network address “7700” is rewritten to another address “7821”, but the ICS name “dd1.cc1.bb1.aa1.jp” and the ICS user address “4610” are not rewritten. In summary, the ICS user address assignment management table of the ICS authority server and the resource record of the domain name server
It holds the user address and the ICS name, and does not change only one of them. Thus, when the terminal is moved between the access control devices, the ICS of this terminal is
There is no need to change the user address and ICS name. (Another Embodiment: Determination of ICS User Address by User) In the above embodiment, a modification is made so that the user determines the ICS user address. That is, the user (application applicant 19200-1) is
When subscribing to -1, the ICS user address is added. The ICS receiver 19940-1 newly includes the ICS user address in the application reception data. Also,
The ICS authority server 19711-1 stores the I
CS user address to ICS user address assignment table 19
623-1. By the above method, the user can determine his / her own ICS user address by himself, and the degree of freedom is improved.

Embodiment 36 (Calling a communication partner by telephone number): In this embodiment, an ICS user IP frame can be transmitted to and received from a communication partner by using a telephone number as an ICS domain name. An example is shown in which digitized voice is stored in the inside, and this allows public communication by telephone. In the present embodiment, the telephone number “81-3-1234-56” of Tokyo, Japan
78 "to the domain name" 5678.334.12.3.8.
The example will be described assuming 1 ". Here," 3 "represents Tokyo and" 81 "represents Japan, which will be described with reference to Fig. 151. The ICS 2000-1 is the access control device 20
010-1,1002-12-10030-1, relay apparatus 2008-1 and 20090-1, domain name servers 20110-1 and 20120-1 and 20130-1 and 2
0140-1 and 20150-1, the access control device 2009-1 is the line unit 2011-1 and the processing device 2
0012-1, conversion table 20013-1, conversion table server 2
0040-1. The conversion table server 20040-1 is inside the access control device 20010-1, and the ICS network address is "7800" and the port number is "6".
00 ". The conversion table server 20040-1
Is provided with an ICS user address "4600" from the outside of the ICS 2000-1. When a domain name is entered, the ICS user address is converted to an ICS user address and returned.
It looks like an ICS server having the function of registering in the conversion table 20013-1 inside 0010-1. 20210-1 is a LAN, 20211-1 and 20300-1 are I
IP terminals having a function of transmitting / receiving a CS user frame, each having an ICS user user address “452”
0 "and" 1200 ", and is connected to the ICS 2000-1 through the ICS user logical communication line.
Since P terminal 20300-1 can be used as a telephone,
Call it a P telephone. IP telephone 20300-1 has telephone number input section 20310-1, IP address storage section 20320
-1, voice data transmission / reception unit 20330-1, input button 2
0340-1, and an audio input / output unit 20350-1.

<< Acquisition of ICS User Address by Phone Number >> Enter Phone Number "1234-5678" Button 2
Input from 0340-1 to telephone number input section 20310-1. The telephone number input unit 20310-1 generates the ICS user frame P1201 and delivers it to the access control device 2001-1 via the ICS user logical communication line.
Here, the ICS user frame P1201 is the sender IC
The S user address is “1200” and the receiver ICS user address is “4600”, and its data portion has the telephone number “1234-input from the input button 20340-1”.
5678 ". The processing device 2001-1 looks at the conversion table 2001-1 and checks the ICS user frame P12.
01 is sent to the conversion table server 20040-1 indicated by the ICS user address “4600”. In the case of this embodiment,
Conversion table server 20040-1 is access control device 200
Since it is located inside 10-1, the ICS network communication function need not be used. The conversion table server 20040-1 converts the domain name server 2 based on the telephone number “1234-5678” included in the data section of the ICS user frame P1201.
0130-1, 20140-1 and 20150-1 are successively inquired, and the terminal 20211 of the communication partner when the telephone number "1234-5678" is regarded as the domain name
-1 ICS network address "7920" and I
Acquire the CS user address “4520”.

Next, the conversion table server 20040-1 obtains the two addresses “7920” and “452” obtained here.
0 "is used to create a conversion table new item 20030-1,
For the ICS user address “4520”, an ICS user frame P1202 is generated, the ICS user address “4520” is written therein, and the IP telephone 2030 is written.
Send to 0-1. IP telephone 20300-1 transmits the ICS included in received ICS user frame P1202.
Combining the user address "4520" with the telephone number "1234-5678" initially queried,
The P-address is stored in the P-address storage unit 20320-1, and is used when the ICS user address “4520” corresponding to the telephone number “1234-5678” is required later. The conversion table new item 20030-1 includes the ICS network address “7820” and the ICS user address “1”.
IP phone 20300-1 having a telephone number "200" and a terminal 20 designated as a telephone number "1234-5678"
211-1. Conversion table new item 20030
-1 is used as a new element of the conversion table 20013-1.

<< Communication Using ICS User Address >> A voice is input from the voice input / output unit 20350-1, and the voice is converted into digital data in the voice data transmission / reception unit 20330-1, and the ICS user frame P1210
And transmitted to the destination specified by the telephone number “1234-5678”, that is, the terminal 20211-1 of the destination determined by the ICS user address “4520”, according to the same principle as described in the other embodiments. You. After that, 2
Between two terminals 20211-1 and 20211-1
Telephone communication is performed by sending and receiving CS user frames.

<< Detailed Description of Domain Name Server >> In the above description, the conversion table server presents the telephone number “1234-5678” to the domain name server, and sets the ICS network address “7920” and the ICS user address “4”.
The method for acquiring 520 "will be described in detail.
Is a diagram showing an embodiment of a "domain name tree" having a hierarchical number of 6 based on an international telephone number, in which a root domain name "root-tel" is provided at level 1 of the tree, and a lower level tree is provided. Domain level "1"
There are "44", "81", "90" ...
Next, for example, a level 3 domain name "3"... "6"... Exists below the domain name "81", and then a level 4 domain name exists below the domain name "3".・
・ “11”, “12”, “13”...
For example, a level 5 domain name "33", "34", "35", ... exists below the domain name "12",
Next, for example, a domain name of level 6 below the domain name "34", "5677", "5678", "5679"
Indicates that... Exists. FIG. 153 shows the internal table 20131-1 of the domain name server 20131-1 that handles the domain name “3”. For example, the domain table 20140-1 that handles the domain name “12” below the domain name “3” is shown. If the ICS network address is "8
720 ”and the port number is“ 440. ”FIG. 154 shows an internal table 20141-1 of the domain name server 20140-1 that handles the domain name“ 12 ”. ICS of the domain server 20150-1 which handles the domain name "34" under ""
This indicates that the network address is “8820” and the port number is “440”. FIG.
Is the domain name server 201 that handles the domain name “34”
50-1 shows the internal table 20151-1. For example, for the domain name "5678", since the display of the end point column of the internal table 20151-1 is "YES", the lower domain name does not exist. In this example, the domain name "567
8.34.12.3.18. The ICS network address corresponding to "" is "8920", and the ICS user address is "4520".

<< Calling Domain Name Server >> FIG. 156
, The conversion table server 20040-1 converts the domain name servers 20130-1, 20140-1 and 20150-
1 is called and the domain name "567.34.12.
3.81. A description will now be given of a procedure for searching for an ICS network address and an ICS user address corresponding to “. The resolver 20041-1 is an ICS network address of a domain name server that handles the level 1 domain“ root-tel ”shown in FIG. In the case where communication is frequently performed with a domain name server that handles level 2 or level 3 domains, the ICS network address of the higher-level domain name server is stored inside the resolver 20041-1. The conversion table server 20040-1 has an internal resolver 2004.
Enter the domain name “5678.34.12.” In 1-1. The resolver 20041-1 holds the ICS network address “8610” of the server that has the domain name “3.81.” Indicating the Tokyo “3” of “81” in Japan, and uses the ICS network communication function to First name "3"
The ICS frame 20135-1 including the domain name “12” under the ICS domain name server 20130-
1, an ICS frame 20136-1 containing the ICS network address "8720" of the ICS domain name server 20140-1 handling the domain name "12" is returned. Next, the resolver 20041-1 creates an ICS frame 20145-1 including the domain name “34” in the ICS.
When sent to the domain name server 20140-1, the ICS frame 20 including the ICS network address "8820" of the ICS domain name server handling the domain name "34"
146-1 is returned. Next, the resolver 20041-1
Is the ICS frame 20 containing the domain name “5678”
When 155-1 is sent to the ICS domain name server 20150-1, an ICS frame 20156-1 including the ICS network address "7920" and the ICS user address "4520" corresponding to the domain name "5678" is returned. By the above procedure, the conversion table server 2004
0-1 is the domain name "5678.34.13.2.3.8"
1. ICS network address "792" corresponding to "
0 "and the ICS user address" 4520 ".

<< Telephone line connection >> Line section 200011-1
The telephone line conversion unit 20510-1 is connected to the telephone line conversion unit 20510-1 via the telephone line 20530-1. The telephone line conversion unit 20510-1 has the same function as that described in the other embodiments, converts the voice transmitted from the telephone line 20530-1 into digitized voice, and stores the voice in the data unit. Generate an ICS user frame. Also,
The ICS user frame transmitted in the opposite transmission direction, that is, transmitted from the inside of the ICS network and passing through the access control line section, is obtained by converting the digitized voice stored in the data section into analog voice in the telephone line conversion section 20510-1. It is converted or, in the case of an ISDN line, converted into its digitized voice. Because of this, IC
IP terminal 20300-1 to which the S domain name is assigned
And the telephone 20520-1 can perform communication by telephone voice. (Connection to public telephone network) Further, telephone line conversion unit 205
10-1 and the private branch exchange 20600-1 are connected to the telephone line 20.
530-2. Private branch exchange 2060
Telephones 20520-2 and 20520-3 are connected from a private telephone line 20540-1 exiting from 0-1,
For example, a telephone 20520-2 and an IP telephone 20300-
1 can communicate with the telephone. The private branch exchange 20600-1 can be connected to a public telephone network or an international telephone network 20680-1 via a telephone line 20670-1. Because of this, the telephone 2052
Communication by telephone can be performed between 0-4 and IP telephone 20300-1.

Embodiment 37 (IP terminal that can be connected to a plurality of access control devices): In this embodiment, the ICS user IP
Rather than fixing an IP terminal having a function of transmitting and receiving frames to a specific access control device, use of a mobile IP terminal that can be used by connecting to another access control device;
That is, roaming is realized. Roaming is IP
This is realized based on the ICS domain name assigned to the terminal. In the following description, a‖b represents data (concatenated data) obtained by combining data a and data b.

<< Password Transmission Technique by Encryption >> The present embodiment includes a procedure for encrypting a secret password PW and transmitting it from the sender (encryption side) to the receiver (decryption side). First, the encryption function Ei and the decryption function Di
Will be described. The encryption function Ei is represented by y = Ei (k1, x), and the decryption function Di is represented by x = Di (k2, y). Here, y is ciphertext, x is plaintext, kl, k
2 is an encryption key, and i is an encryption number (i = 1, 2,...) That determines how to use the secret key encryption or the public key encryption, including the value of the encryption key. In the above, plaintext x 'is encrypted as x' = x‖r (where r is a random number) instead of plaintext x, and random number r is discarded from plaintext x 'obtained at the time of decryption to obtain plaintext x. Is also good. By doing so, it is said that even if the same plaintext is encrypted, a different ciphertext is generated for the random number, and the ciphertext is resistant to breaking.

(Example of Encryption Number i = 1) << Preparation >> The sender m publishes its domain name (represented by DNm) including the receiver. The receiver uses the secret data compression function Hash-1 to obtain Km = Hash-1.
(DNm) is calculated, and only the encryption key Km is handed over to the sender in a secure manner not to be known to a third party. This example is DE
This is an example in which S encryption is adopted, and the sender uses an encryption function Ei
Holds the “encryption module DES-e” and the encryption key Km. The encryption key Km is a secret value shared by the sender and the receiver. The receiver holds a “decoding module DES-d” for realizing the decoding function Di and a data compression function Hash-1. What is used as the data compression function Hash-1 is determined for each value of the encryption number. The data compression function is also called a hash function.

<< Encryption by Sender >> The sender sets the secret password PW to x = PW and sets the encryption module DE
By using Se and the held encryption key Km, y = DES−
The encrypted text is transmitted as e (Km, x), and the encrypted text y and the domain name DNm are transmitted.

<< Decryption by Recipient >> Recipient is ciphertext y
And the domain name DNm, and using the secret data compression function Hash-1 of the recipient, Km = Hash-1 (D
Nm), the secret encryption key Km is calculated, and then the receiver uses the decryption module to obtain x = DES-d (Km,
Obtain plaintext x as y). The plain text x is the password PW, and the recipient can obtain the secret password PW. Since the third party does not know the data constriction function Hash-1, it cannot calculate the encryption key Km.
W cannot be calculated. In the above embodiment, the encryption function and the decryption function can be changed to another encryption function and decryption function other than the DES encryption as the definition of the encryption number i = 3.

(Example of Encryption Number i = 2) << Preparation >> This example is an example employing RSA encryption, and the receiver has an encryption function y = x ^e modn and a decryption function y = x ^d
Generate mod n. Here, e ≠ d and the key d are secret values. The receiver is able to publish the encryption keys e and n, and the encryption module RS that realizes the encryption function y = x ^e modn.
Ae is given to the sender. The sender holds the encryption key and the encryption module RSA-e. The sender has no secret encryption module or secret data. On the other hand, the receiver receives n, a secret key d, and a decryption function y =
Decoding module RSA-d that realizes x ^e mod n
Holding.

<< Encryption by Sender >> The secret password PW to be transmitted, its own domain name DNm, and the date and time of transmission (year, month, day, hour, minute, second) are represented by x = PW {x1} x2 (where,
xl: as, hour, minute, and second) time domain name DNm, x2 = date, by the encryption module ^{RSA-e, y = x e} mo
Encrypt as dn and transmit the ciphertext y.

<< Decryption by Recipient >> Recipient is ciphertext y
Is received, and the decryption module RSA-
calculating the ^x = y d mod n with d and the decoding key.
Since x = PW‖x1‖x2, data at a predetermined position from the head of x is used as PW. In the above encryption, x1 of the domain name and x2 of the year, month, day, hour, minute, and second are used as random numbers. Since the third party does not know the secret key d, the third party cannot calculate the secret password PW.
In the above-described embodiment, the values of the encryption keys e, d, and n can be changed as the definition of the encryption number i = 4. Further, the RSA encryption technique can be used as another public key encryption technique as a rule for the encryption number i = 5.

<< Terminal authentication technique using password and random number
>> Password PW used on the roaming terminal is
A description will be given of a terminal authentication technique for checking whether or not the password matches a password registered in the authentication server. As a prerequisite, the authentication server of the authentication subject and the terminal of the authentication subject are provided with an encryption function E (where y = E (k, x), y is a ciphertext, k
Is the encryption key, x is the plaintext) and the secret password P to the third party
W and own it. A specific procedure of terminal authentication will be described. The terminal to be authenticated determines the random number R by appropriate means, calculates Y1 = F (PW, R) using the password PW and the function y = F (PW, R), and calculates both the random numbers R and Y1. Sent to the authenticating subject. The authentication subject is a random number R and Y
1 and the received random number R, the password FW held by itself, and the function F, Y2 = F (FW,
R) is calculated, and it is checked whether or not Y1 = Y2 holds.
If they match, the terminal owner as the authenticatee uses the correct password PW, that is, the terminal can be authenticated. In the above technique, the random number R is limited to a time-dependent random number (referred to as a time random number) so that the person to be authenticated cannot freely select it, which makes it more difficult for a third party to calculate the password PW. . Using a secret data compression function Hj instead of the encryption function used above,
1, Y2 = Hj (PW, R).

<< Overall Configuration >> FIGS. 157 and 158 show an outline of the entire roaming technique according to the present embodiment.
0-1, 21020-1, 21030-1, 21040
-1, 21050-1, 21060-1, relay apparatus 21
080-1, 2108I-1, 21082-1, 210
83-1, authentication server 21100-1, 21101-
1, 21102-1, 21103-1, domain name server 21130-1, 21131-1, 21132-1,
21133-1, user service server 21250-
1. Includes ICS Authority Server 21260-1. The access control device 21010-1 converts the conversion table 21013-1, the conversion table server 21016-1, the registration server 21017-1,
Access control device 2 including connection server 21018-1
10720-1 includes a conversion table 21023-1, a conversion table server 21026-1, a registration server 21027-1, and a connection server 21028-1. The registration server 21017-1 or 21027-1 has the ICS user address “6300”
Is given. Connection server 21018-1 or 210
The ICS user address “6310” is assigned to 28-1, and the roaming IP terminal outside the ICS 21000-1 registers the access control device determined according to the necessity in the IP terminal, or Has the function of connecting. The conversion table server 21016-1 converts the conversion table 21
It has the function of rewriting the contents of 013-1, and the conversion table server 21026-1 has the function of rewriting the contents of the conversion table 21023-1, as in the case of the other embodiments. The LAN 21150-1 includes an IP terminal 21151-1, the LAN 21160-1 includes an IP terminal 21161-1, and 21170-1 denotes an IP terminal. 21200-1 is a mobile roaming terminal, which is identified by an ICS domain name “cl.bl.al.” uniquely assigned as ICS21000-1.

<< Application for Using Roaming Terminal >> The owner of the roaming terminal 21200-1 is the ICS user 2
The user service server 212 specifies the method of paying the fee of the roaming terminal 21200-1 as 1270-1.
Apply the ICS domain name (same as the ICS name) and the ICS user address to the ICS authority server 21260-1 via 50-1. The fee payment method is represented by a charging category “MNY”. For example, when MNY = 1, the fee is paid by the home IP terminal (that is, the IP terminal fixedly connected to the access control device), and when MNY = 2, the fee is Specifies to pay according to the record of the authentication server. I
The CS authority server 21260-1 communicates with the roaming terminal 21
ICS domain name "cl.b" for using 200-1
l. al. "And the ICS user address" 1200. "
P terminal 21200-1 is connected to access control device 21010-
ICS authority server 21260 via the user service server 21250-1 for use by being fixedly connected to
Apply for an ICS network address at -1. Upon acquiring the ICS network address, the user service server 21250-11 requests the conversion table server 21016-1 to send the ICS network address "8115" and the I
Conversion of CS user address “1200” into conversion table 21013−
Set to 1. This procedure is described in another embodiment. The ICS receiver 21271-1 has the roaming terminal 2
The ICS domain name “cl.bl.al.” and the ICS user address “1”
200 ", a special ICS user address for roaming terminal (referred to as roaming special number)" 1000 ", ICS user address of registration server" 6300 ", ICS user address of connection server" 6310 "are embedded, and roaming terminal 21200-1 is further embedded. The cryptographic function Ei and the encryption-related data RP1 are embedded in the inside 21202-1 of the .The hash function is not embedded.
j), and the domain name is “cl.bl.al.”, M
NY is the above-described charging category, "i" is an encryption number for classifying the encryption Ei, and "j" is a type of the hash function Hj. The data compression function Hj is a secret dedicated function used only by the authentication server and the user service server. Since the user does not have the data compression function Hj and does not know Hj, the encryption-related data RP1 cannot be generated.

<< Registration Procedure from Home IP Terminal >> FIG.
This will be described with reference to FIG. The roaming terminal user connects the roaming terminal 21200-1 to the home IP terminal 2115.
Connect to position 1-1. Next, the roaming terminal user determines a password (PW) and inputs the password from the input unit 21204-1, and also generates the ICS user frame PK01 using the encryption function and the phonetic-related data stored inside the 21202-1. Generate and ICS user logical communication line 2
Access control device 21010-
1 (step T10). ICS user frame PK
01 is “6300” indicating the roaming registration server
And own ICS domain name "cl.bl.a
l. ”, Encryption parameter RP1, ICS user address
“1200”, expiration date “98-12-31”, encrypted text “y”, “tg” (however, tg = 1 to indicate the registration procedure), and “ "Yes" or "No" is included. Here, a method for generating the ciphertext “y” employs the above-described encryption technique. For example, when the encryption number = 2, y = x ^e mod n (however,
x = PW‖c1. bl. a1 @ year / month / day / hour / minute / second)
Generate a ciphertext “y”. Access control device 21010
-1 refers to the conversion table 21013-1 and sets the ICS user frame PK01 to the registration server 2101 of the destination "6300".
Transfer to 7-1 (procedure T15). Registration server 21017
-1 calls the authentication server 21100-1 using the domain name "c1.b1.a1" (procedure T20). Note that the method by which the registration server 21017-1 calls the authentication server 21100-1 using the domain name is such that the connection server 21028-1 uses the domain name to execute the authentication server 211100-1.
The method is the same as that for calling 00-1, and the details will be described later. The authentication server 21100-1 checks the content of PK01 of the received ICS user frame, and decrypts the ciphertext "y" by the above-described technique to calculate the password PW.
For example, when the cryptographic number = ^2, as ^x = y d mod n, decrypts the ciphertext "y". Then, x = PW‖c
1. bl. Since a1‖year / month / day / hour / minute / second, the password PW can be obtained.

Next, the content of the encryption parameter PP1 is RP
1 = Hj (domain name @ RPO) @RPO (however, RP
O = MNY‖i‖j), the authentication server 2
The secret hash function H held by 1100-1 itself
j and the obtained domain name “cl.bl.al” are used to calculate t = Hj (domain name‖RP0) ‖RP0), and it is checked whether or not t = RP1 holds for the received RP1. If it is established, the domain name “cl.bl.a
The authentication server 21100-1 determines whether there is no falsification in the registered contents, and determines whether the registered contents are normal or not. This state is indicated in the row of the management number 1 in the authentication table 21100-2, and the domain name is “cl. bl. a
l. , The encryption number is “2”, the charging category (MNY) is “1”, and the calculated password PW value “22469”
1, "98-12-31", indicating that the roaming connection is "Yes", that is, accepting the roaming connection.When the PK01 is generated in the procedure T10, the value of the tg is set to tg = 2. The roaming connection may be designated as “No.” By applying the above-described encryption technique, the password will not be leaked to a third party.A report of the roaming registration is sent via the registration server 21017-1 to ( Procedure T30), then access control apparatus 21010-1
(Procedure T35), and is reported to the roaming IP terminal
(Procedure T40). In addition, the terminal 21200-1 sends
Via the user logical communication line 21152-1, tg =
An ICS user frame that changes the value of the password PW as 3, or changes the value of the expiration date as tg = 4,
It can be transmitted after the above procedure T40 is completed.
It should be noted that the password may be changed by a method of designating the password used before that.

<< User IP Frame Transmission / Reception at Destination >>
The roaming terminal 21200-1 is connected to the access control device 21.
020-1 and roaming terminal 21200-1
An example of inter-enterprise communication in which an IP frame is transmitted and received between the domain name “cl.bl.al.” and the domain name “c2.b2.a2.” Of the communication partner will be described. The user sets the communication partner's domain name to “c2.b2.a2.” And sets “tg” to “tg” to specify transmission / reception of an IP frame.
, The password PW of the user, and “5” days of the designation (expressed by TTL) of the roaming connection period are input to the input unit 212.
04-1. For this, roaming terminal 2
21201-1 and 21202-1 inside 1200-1 are used. In addition, the IP frame unit 210203-1
ICS user IP frame PK01, PK02, PK0
3. Used to generate and transmit and receive PK04 and the like. Next, the roaming terminal 21200-1 generates the user IP frame PK02 and sends the ICS user logical communication line 212
The data is transmitted to the access control device 21020-1 via 10-1 (procedure T50). User IP frame PK02
Is the sender domain name “cl.bl.al.”, the receiver domain name “c2.b2.a2.”, The encryption parameter R
P2, including the connection period (represented by TTL). The encryption parameter RP2 is data calculated inside the password PW and 21202-2. That is, the date "yy-m
m-dd-sssss ”to generate a time random number TR.
(TR = yy-mm-dd-sssss), 21202
-2, using the internal clock and the cryptographic function Ei, RP2 = E
i (PW, TR) ‖TR is calculated. The access control device 21020-1 receives the user IP frame PK02, obtains the ICS network address “7800” assigned to the ICS logical terminal thereof, and obtains the conversion table 21023.
Since the request identification is “4” by −1 and the sender ICS user address written in the user IP frame PK02 is “1000” (that is, the roaming special number), the ICS network address “7800”
And sends it to the connection server 21028-1 indicated by the receiver ICS user address “6310” together with the ICS user frame PK02 (procedure T60). The ICS network address “7800” held in this procedure
Is used after a procedure T130 described later.

<< Connection Server Function >> Next, Connection Server 2
1028-1 calls the authentication server 21100-1 using the domain name "c1.b1.a1",
l. bl. al. "And the encryption parameter RP2 to the authentication server (step T70).
1 is the password P written in the authentication table 21100-2.
The values of W and the encryption number are read, and the encryption function Ei is selected to read the password PW. Next, the encryption parameter R
Since P2 is such that RP2 = Ei (PW, TR) ‖TR, using the time random number TR in the latter half of RP2, t =
Ei (PW, TR) is calculated. The value of the temporary variable t calculated here is equal to the first half Ei (PW, PW,
If the password matches T), it can be confirmed that the password PW input to the terminal 21200-1 is correct. Since the time function TR includes the date (that is, TR = yy-mm-dd)
-Sssss), when the received date is different from the processing time, it is possible to detect fraud. Next, the authentication server 21100-1 reports to the connection server 21028-1 the roaming-registered, charging category, and authentication server call information described in the authentication table 21100-2 (procedure T80).
. In this embodiment, the charging category is MNY = 1, and the authentication server call information is the ICS of the authentication server 21100-1.
Network address “7981”, port number “71”
0 "and the management number" 1 "of the authentication management table.The connection server 21028-1 has the domain name" cl. bl. a
l. Is presented to the domain name server, and an ICS user address and an ICS network address attached to the domain name are requested (procedure T90). The ICS user address "1200" and the ICS network address "811
5 ”(procedure T100). Similarly, the domain name“ c2. b2. a2. "to the domain name server to request an ICS user address and an ICS network address associated with the domain name (procedure T11
0), the ICS user address “2500” and the ICS network address “8200” are obtained (procedure T12).
0). Access to the domain name server described above is the same as that described in detail in the other embodiments.

Next, the connection server 21028-1 operates as an IC
The ICS network address “7800” of the ICS logical terminal to which the S user frame was input (retained in step T60), the ICS user address “1200” obtained immediately before from the domain name server, and the ICS user address “250”
0, the ICS network address "8200" and the roaming-registered, charging category, and authentication server call information transmitted from the authentication server 21100-1 are transmitted to the conversion table server 21026-1 (procedure T130). No. 6 writes the transmitted four kinds of addresses into the conversion table 21023-11.The value of the request identification is "10", which indicates inter-company communication by roaming. ICS network address "811 acquired from name server
5 "and ICS user address" 1200 "conversion table 2
It is transcribed to the accounting notification destination of 1023-1. When the charging category is MNY = 2, the authentication server call information is converted into the conversion table 21.
It is transcribed to the charge notification destination of 013-1. Further, the designated “5” days of the roaming connection period included in the ICS user frame PK02 are also written in the conversion table 21013-1. Upon completion of writing the conversion table 21023-1, the conversion table server 21026-1 reports the result to the connection server 21028-1 (procedure T140). This completion report is sent via the access control device 21020-1 (procedure T150), and the ICS user frame PK03 is transmitted to the roaming terminal 21200-1.
(Step T160). Here, the ICS user frame PK03 has the domain name “cl.bl.a” of the roaming terminal 21200-1.
l. ICS user address "1200" attached to "
And the ICS user address “2500” accompanying the domain name “c2.b2.a2.” Of the communication partner. The operating company of the access control device uses the connection server 21028-1 described above, that is, a series of procedures from receiving the ICS user frame PK02 to returning the ICS user frame PK03, and specifying the roaming connection period. A usage fee can be charged to the owner of the roaming terminal 21200-1 for 5 "days.

<< Use of Roaming Terminal >> The roaming terminal 21200-1 uses the conversion table 21023-1 created according to the above-described procedure to perform inter-company communication in the same manner as described in the other embodiments. (Step T17)
0 to T220). Also, conversion table server 21026-1
Can delete the roaming connection described in the conversion table 21023-1 after the designated “5” of the roaming connection period.

<< Notification of Billing >> Access Control Unit 2102
0-1 notifies the communication charge to the charging notification destination registered in the conversion table 21023-1 (procedure T300 or T31).
0). << Method of Accessing Authentication Server >> In the above description, the connection server 21028-1 gives the plurality of authentication servers including the authentication server 21100-1 the domain name “cl.bl.a”.
l. And whether the authentication request included in the ICS network frame PK02 generated by the roaming terminal 21200-1 is correct, that is, the roaming terminal 2120
A method of checking whether or not the domain name “c1.bl.al.” of 0-1 has been registered in the authentication server will be described in detail. FIG. 160 is a diagram showing an example of a domain name tree having four levels.
.oo ", and domain names" al "," a2 "," a3 ",... exist at level 2 of the lower tree, and then, for example, a domain name" level 3 "below the domain name" al ". bl ”,“ b2 ”, and“ b3 ”, and then, for example, the domain name“ c ”of level 4 below the domain name“ bl ”
1 "," c2 "," c3 ",...

[0419] Fig. 161 shows an internal table 211102-2 of the authentication server 210102-1 that handles the domain name "root". For example, below the domain name "root",
Domain server 21101- handling the domain name "al"
1 indicates that the ICS network address is “7971” and the port number is “710”. FIG. 162 illustrates an authentication server 211 that handles the domain name “al”.
For example, below the domain name “a1”, the ICS network address of the domain server 21100-1 handling the domain name “b1” is “7981” and the port number is “710” below the domain name “a1”. ". FIG. 163 shows the domain name "bl"
Table 21100- of the authentication server 21100-1 handling the
2, for example, the domain name “cl” corresponds to the internal table 2
Since the display in the column of the end point of 1100-2 is "YES", there is no lower domain name. In this example, the domain name "cl.bl.al." is registered in the authentication server, and the password is registered. PW is recorded as "224691", and expiration date is recorded as "98-12-31".

<< Calling of Authentication Server >> Referring to FIG. 164, connection server 21028-1 sets domain name "c1.
b1. a1 ", the authentication server 21100-1 is called, and the domain name" cl. bl. al. 160. Here, a method of checking whether or not “.” Has been registered in the authentication server will be described. Here, the connection server 21028-1 uses the ICS of the authentication server that handles the level 1 domain “root” shown in FIG.
Has a network address inside. Also, in the case where communication is frequently performed with authentication servers that handle level 2 and level 3 domains, the ICS network addresses of these authentication servers are similarly held. The connection server 21028-1 inputs the domain name “c1.bl.al” to the internal resolver 21029-1. The resolver 21029-1 uses the ICS network communication function to set the ICS frame 21335-1 including the domain name “al” under the domain name “root” and the encryption parameter RP2.
Is sent to the authentication server 211102-1, the domain name "a
ICS frame 213 including the ICS network address “7971” of the authentication server 210101-1 handling “1”
36-1 is returned. Next, the resolver 21029-1
Is an ICS frame 2134 containing the domain name “bl”
When 5-1 is sent to the authentication server 21101-1, the ICS frame 21346-1 including the ICS network address "7981" of the authentication server handling the domain name "bl" is sent.
Reply. Next, the resolver 21029-1 sends the ICS frame 21355-1 including the domain name “cl” to the authentication server 21100-1.
l ", in this case, the column of the end point of 21100-2 is" Ye ".
s ", it can be determined that the authentication information has been registered.
As described above, “root”, “a1.”, “Bl”
, And the authentication information for the domain name “cl.bl.al.
It can be seen that it is registered in 1100-2. The authentication server 21100-1 checks the received encryption parameter RP2 and checks that the expiration date “98-12-31” has not passed. Next, the authentication server 21100-1 sets the authentication table 21
The password PW and the value of the encryption number written in 100-2 are read, and the encryption function Ei is selected. Since the encryption parameter RP2 satisfies RR2 = Ei (PW, TR) ‖TR, t = Ei (PW, TR) is calculated using the time random number TR in the latter half of RP2. The value of the temporary variable t calculated here is the value of Ei in the first half of the received RP2.
If (PW, TR) matches, it is confirmed that the password PW input to terminal 21200-1 is correct. The above result is reported to the connection server 21028-1. As a result, the connection server 21028-1 knows the authentication result (pass or fail) of the roaming terminal and the charging category MNY.

<< Another Embodiment of Roaming without Home IP Terminal >> In the above embodiment, the ICS receiver 2127
If 1-1 does not set a home IP terminal,
The “registration procedure from the home 1P terminal” is performed via the user service server 21250-1. This exchange is made by the accounting record “120” inside the authentication table 21100-2 inside the authentication server 21100-1 and the information “7981-71” of the authentication server shown in the accounting notification destination inside the conversion table 21023-1.
0-1 "is used.

<< Another Embodiment of Roaming Including Authentication Server in Domain Name Server >> The domain name tree shown in FIG. 160 which is a target of the authentication server 21110-1 is shown in another embodiment and is a target of the domain name server. Has the same structure as the domain name tree. Therefore, each domain server
It is possible to store the data of the authentication server described in the present embodiment and include the function of the authentication server. That is, another method of performing roaming is to integrate the authentication server described in the present embodiment with the domain name server described in the other embodiment.

<< Access Control Device and IP Terminal Connected to Wireless Transceiver >> Wireless transceiver 21620-1 is connected to ICS2
1000-1 is installed inside the wireless transceiver 2
1620-1 and the wireless transceiver 21640-1 can exchange information with each other via the wireless communication path 21625-1.
The terminal 21630-1 includes a wireless transceiver 21640-1, and the terminal 21200-2 is the IP terminal 21200-
As in the first embodiment, it has a function of inter-company communication using the ICS domain name. An information communication path 21620- between the access control device 21020-1 and the wireless transceiver 21620-1
There is one. The information communication path 21610-1 is similar to the ICS user logical communication line in having a function of transmitting and receiving an IC user frame.
1 is inside ICS21000-1. Wireless transceiver 21620-1 and wireless transceiver 21640-
2 receives the ICS user frame, converts the internal information of the ICS user frame into ICS user frame information in a radio wave format and transmits the ICS user frame information, and vice versa, that is, receives the ICS user frame information in a radio wave format, It has the function of inverting and sending out the ICS user frame format. Because of this, the IP terminal 21200-
2 is transmitted to the access control device 21020-1 via the wireless transceiver 21640-1, the wireless communication path 21625-1, the wireless transceiver 21620-1, and the information communication path 21610-1. The ICS user frame transmitted from the access control device 21020-1 in the reverse direction is
610-1, a wireless transceiver 21620-1, a wireless communication path 21625-2, and a wireless transceiver 21640-1.
It is sent to P terminal 21200-2.

[0424]

As described above, according to the present invention, a high-priced dedicated line is not required, and a high-speed communication line used for moving image communication such as a TV is not provided, or a communication line equipment is provided. A relatively inexpensive large-scale communication system can be constructed without using the Internet where the person in charge of the expansion plan is absent. In addition, the private address system for computer communication of individual companies (including government agencies, universities, etc.), which had been individually serviced in the past, was hardly changed,
There is an advantage that inter-company communication can be performed together with intra-company communication.
In addition, since the network administrator has the control of the network, management such as troubleshooting of the entire network becomes clear, and reliability is easily secured.
Eavesdropping prevention measures are possible by means of encrypted communication inside the ICS. Further, since the network itself can add an electronic signature to the ICS frame as an option, tampering of the ICS frame can be detected, and information security can be significantly improved. According to the present invention, a single information transfer (transfer of IP datagrams) independent of services such as voice, image, text, etc., enables services that have been conventionally implemented individually such as telephone line services and Internet provider services to be exchanged. , An integrated information communication system connected to the system can be realized.

[Brief description of the drawings]

FIG. 1 is a block diagram schematically showing a basic principle of the present invention.

FIG. 2 is a block diagram showing an example of a network in which the ICS of the present invention is configured by a plurality of VANs.

FIG. 3 is a block diagram illustrating a configuration example of an access control device.

FIG. 4 is a block diagram illustrating a configuration example of a relay device.

FIG. 5 is a block diagram illustrating a configuration example of an inter-VAN gateway.

FIG. 6 is a block diagram illustrating a configuration example of an ICS network server.

FIG. 7 is an array diagram showing an example of an ICS user address used in the present invention.

FIG. 8 is a connection diagram showing a connection relationship between an ICS logic terminal and a user communication line.

FIG. 9 shows an ICS user frame and an IC used in the present invention.
It is a figure showing the relation with S network frame.

FIG. 10 is a part of a block diagram showing a first embodiment (intra-company communication, inter-company communication) of the present invention.

FIG. 11 is a part of a block diagram showing a first embodiment of the present invention.

FIG. 12 is a flowchart illustrating an operation example of the access control device;

FIG. 13 is a flowchart illustrating an operation example of an access control device in inter-company communication.

FIG. 14 is a block diagram showing a second embodiment (virtual dedicated line) of the present invention.

FIG. 15 is a flowchart illustrating an operation example of an access control device in a virtual leased line connection.

FIG. 16 is a block diagram showing a third embodiment (ICS network server) of the present invention.

FIG. 17 is a flowchart showing an operation example in an access control device in server connection in an ICS network;

FIG. 18 is a block diagram for explaining a modification of the third embodiment.

FIG. 19 is a block diagram showing a fourth embodiment (ICS address management server) of the present invention.

FIG. 20 is a flowchart illustrating an operation example of the ICS address management server.

FIG. 21 is a block diagram for explaining a modification of the fourth embodiment.

FIG. 22 is a diagram showing a fifth embodiment of the present invention (ICS name server);
FIG. 3 is a block diagram showing the configuration.

FIG. 23 is a flowchart showing an operation example of the ICS name server.

FIG. 24 is a block diagram for explaining a modification of the fifth embodiment.

FIG. 25 is a part of a block diagram showing an eighth embodiment (billing server) of the present invention.

FIG. 26 is a part of a block diagram showing an eighth embodiment of the present invention.

FIG. 27 is a flowchart illustrating an operation example of a charging process.

FIG. 28 is a part of a block configuration diagram showing a ninth embodiment (ICS frame database server) of the present invention.

FIG. 29 is a part of a block diagram showing a ninth embodiment of the present invention.

FIG. 30 is a diagram showing an example of an ICS user frame used in the ICS frame database server.

FIG. 31 is a flowchart illustrating an operation example of communication example-1 of the ICS frame database server;

FIG. 32 is a flowchart illustrating an operation example of communication example-2 of the ICS frame database server.

FIG. 33 is a flowchart illustrating an operation example of communication example-3 of the ICS frame database server;

34 shows a tenth embodiment (X.25, FR, A) of the present invention.
TM, transmission by satellite communication and telephone line, ISDN line, C
FIG. 2 is a part of a block diagram showing an ATV line, a satellite line, and an IPX frame.

FIG. 35 is a part of a block diagram showing a tenth embodiment of the present invention.

FIG. 36 is a part of a block diagram showing a tenth embodiment of the present invention.

FIG. 37 is a part of a block diagram showing a tenth embodiment of the present invention.

FIG. 38 shows an ICS network frame and X.40. It is a figure which shows a mode of the frame conversion of 25 format.

FIG. 39 is a diagram showing how an ICS network frame and FR format frame are converted.

FIG. 40 is a diagram showing how an ICS network frame and an ATM format frame are converted.

FIG. 41 shows an eleventh embodiment (X.25, FR, A) of the present invention.
TM, transmission by satellite communication and telephone line, ISDN line, C
FIG. 2 is a part of a block diagram showing an ATV line, a satellite line, and an IPX frame.

FIG. 42 is a part of a block diagram showing an eleventh embodiment of the present invention.

43 is a part of a block diagram showing a twelfth embodiment of the present invention (the access control device is accommodated in an X.25 network or an FR network).

FIG. 44 is a part of a block diagram showing a twelfth embodiment of the present invention.

FIG. 45 is a part of a block diagram showing a thirteenth embodiment of the present invention (the access control device is connected to a relay network).

FIG. 46 is a block diagram showing a fourteenth embodiment of the present invention (when the access control device is installed outside the ICS).

FIG. 47 shows a fifteenth embodiment of the present invention (non-IC
FIG. 2 is a part of a block diagram showing S encapsulation.

FIG. 48 is a part of a block diagram showing a fifteenth embodiment of the present invention.

FIG. 49 is a flowchart showing an operation example of non-ICS encapsulation of inter-company communication.

FIG. 50 is a diagram illustrating a format example of an NSAP format ATM address.

FIG. 51 is a diagram illustrating an information unit in an ATM cell format.

FIG. 52 is a diagram for describing conversion / restoration between an ICS network frame and a CPCS frame.

FIG. 53 is a diagram for describing disassembly / assembly between a CPCS frame and a cell.

FIG. 54 is a part of a block diagram showing a sixteenth embodiment (another embodiment using an ATM network) of the present invention.

FIG. 55 is a part of a block diagram showing a sixteenth embodiment of the present invention.

FIG. 56 is a flowchart showing an example of the flow of a frame using SVC and PVC.

FIG. 57 is a flowchart illustrating an example of the flow of a frame using SVC and PVC.

FIG. 58 is a block diagram illustrating an example of one-to-N communication or N-to-one communication using PVC.

FIG. 59 is a block diagram illustrating an example of N-to-N communication using PVC.

FIG. 60 is a diagram showing an example of an FR frame address section.

FIG. 61 is a diagram showing a modification between the ICS network frame and the FR frame.

FIG. 62 is a part of a block diagram showing a seventeenth embodiment (another embodiment using an FR network) of the present invention;

FIG. 63 is a part of a block diagram showing a seventeenth embodiment of the present invention.

FIG. 64 is a flowchart showing an example of the flow of a frame using SVC and PVC.

FIG. 65 is a flowchart showing a flow example of a frame using SVC and PVC.

FIG. 66 is a block diagram illustrating an example of one-to-N communication or N-to-one communication using PVC.

FIG. 67 is a block diagram illustrating an example of N-to-N communication using PVC.

FIG. 68 shows an eighteenth embodiment (telephone line, ISDN) of the present invention.
FIG. 2 is a part of a block configuration diagram illustrating a line, a CATV line, a satellite line, an IPX line, and a mobile phone line).

FIG. 69 is a part of a block diagram showing an eighteenth embodiment of the present invention;

FIG. 70 is a part of a block diagram showing an eighteenth embodiment of the present invention;

FIG. 71 is a part of a block diagram showing an eighteenth embodiment of the present invention.

FIG. 72 is a flowchart showing the operation of the eighteenth embodiment.

FIG. 73 is a part of a block diagram showing a nineteenth embodiment of the present invention;

FIG. 74 is a part of a block diagram showing a nineteenth embodiment of the present invention;

FIG. 75 is a part of a block diagram showing a nineteenth embodiment of the present invention;

FIG. 76 is a diagram showing an example of description contents of a router table in the dial-up router.

FIG. 77 is a flowchart showing the operation of the nineteenth embodiment.

FIG. 78 is a part of a block diagram showing a twentieth embodiment of the present invention.

FIG. 79 is a part of a block diagram showing a twentieth embodiment of the present invention.

FIG. 80 is a part of a block diagram showing a twentieth embodiment of the present invention;

FIG. 81 is a diagram illustrating an example of correspondence between a communication speed and a speed class.

FIG. 82 is a flowchart showing the operation of the twentieth embodiment.

FIG. 83 is a flowchart showing the operation of the twentieth embodiment.

FIG. 84 is a diagram illustrating an ICS user frame after an electronic signature is added.

FIG. 85 is a diagram illustrating an ICS user frame before an electronic signature is added.

FIG. 86 is a part of a block diagram showing a twenty-first embodiment (electronic signature and encryption) of the present invention;

FIG. 87 is a part of a block diagram showing a twenty-first embodiment of the present invention.

FIG. 88 is a flowchart showing the operation of the twenty-first embodiment.

FIG. 89 is a view for explaining an electronic signature at the time of transmission and at the time of reception.

FIG. 90 is a block diagram showing a twenty-second embodiment (electronic signature server and encryption server) of the present invention;

FIG. 91 is a part of a block diagram showing a twenty-third embodiment (open connection) of the present invention;

FIG. 92 is a part of a block diagram showing a twenty-third embodiment of the present invention.

FIG. 93 is a block diagram showing a twenty-fourth embodiment (ISC address name management server) of the present invention;

FIG. 94 is a part of a block configuration diagram showing a twenty-fifth embodiment (separation of functions of an access control device) of the present invention.

FIG. 95 is a part of a block diagram showing a twenty-fifth embodiment of the present invention.

FIG. 96 is a flowchart showing an operation of the twenty-fifth embodiment.

FIG. 97 is a block diagram showing a twenty-sixth embodiment (an access control device including a server and an integrated access control device) of the present invention;

FIG. 98 is a block diagram showing a twenty-seventh embodiment (full-duplex communication including a satellite communication path) of the present invention.

FIG. 99 is a timing chart showing an operation example of full-duplex communication by TCP.

FIG. 100 is a timing chart for explaining the twenty-seventh embodiment.

FIG. 101 is a timing chart for explaining the twenty-seventh embodiment.

FIG. 102 is a timing chart for explaining the twenty-seventh embodiment.

FIG. 103 is a block diagram showing a modification of the twenty-seventh embodiment.

FIG. 104 is a timing chart showing an operation example of the twenty-eighth embodiment (full-duplex communication including a satellite communication path) of the present invention.

FIG. 105 is a timing chart for explaining the twenty-eighth embodiment.

FIG. 106 is a timing chart for explaining the twenty-eighth embodiment.

FIG. 107 is a timing chart for explaining the twenty-eighth embodiment.

FIG. 108 is a timing chart for explaining the twenty-eighth embodiment.

FIG. 109 is a timing chart for explaining the twenty-eighth embodiment.

FIG. 110 is a block diagram showing a thirty-first embodiment (full-duplex communication including a satellite communication path) of the present invention.

FIG. 111 is a timing chart showing an operation example of the thirty-first embodiment.

FIG. 112 is a block diagram showing a modification of the thirty-first embodiment.

FIG. 113 is a diagram illustrating an example of a TCP frame.

Fig. 114 is a diagram illustrating an example of a UDP frame.

FIG. 115 is a 32nd embodiment of the present invention (incoming call priority control).
Is a part of a block configuration diagram showing

FIG. 116 shows a thirty-second embodiment (incoming call priority control) of the present invention;
Is a part of a block configuration diagram showing

FIG. 117 is a figure for explaining the 32nd embodiment;

FIG. 118 is a flowchart illustrating an operation example of priority determination.

Fig. 119 is a thirty-third embodiment of the present invention (transmission priority control).
FIG. 3 is a block diagram showing the configuration.

FIG. 120 is a diagram illustrating an example of a conversion table used in the 33rd embodiment.

FIG. 121 is a flowchart showing an operation example of priority determination in the 33rd embodiment.

FIG. 122 is a block diagram showing a thirty-fourth embodiment (a plurality of communications) of the present invention.

FIG. 123 is a diagram illustrating an example of a conversion table used in the 34th embodiment.

FIG. 124 is a diagram illustrating an example of a conversion table used in the 34th embodiment.

FIG. 125 is a block diagram showing a modification of the thirty-fourth embodiment.

FIG. 126 is a part of a block configuration diagram showing a 35th embodiment (operation of an integrated information communication system) of the present invention.

Fig. 127 is a part of a block configuration diagram showing a 35th embodiment (operation of an integrated information communication system) of the present invention.

FIG. 128 is a figure for explaining the 35th embodiment;

FIG. 129 is a view for explaining a 35th embodiment;

FIG. 130 is a figure for explaining the 35th embodiment;

FIG. 131 is a view for explaining a 35th embodiment;

FIG. 132 is a figure for explaining the 35th embodiment;

FIG. 133 is a figure for explaining the 35th embodiment;

FIG. 134 is a figure for explaining the 35th embodiment;

FIG. 135 is a diagram illustrating an example of an ICS network address assignment record table used in the thirty-fifth embodiment;

FIG. 136 is a diagram illustrating an example of an ICS user address assignment record table used in the 35th embodiment;

FIG. 137 is a diagram illustrating an example of a conversion table used in the 35th embodiment.

FIG. 138 is a diagram illustrating an example of a conversion table used in the 35th embodiment.

FIG. 139 is a diagram illustrating an example of a conversion table used in the 35th embodiment.

FIG. 140 is a sequence diagram for explaining the 35th embodiment;

FIG. 141 is a diagram illustrating an example of a conversion table used in the 35th embodiment.

FIG. 142 is a view for explaining a 35th embodiment;

FIG. 143 is a diagram illustrating an example of a conversion table used in the 35th embodiment.

FIG. 144 is a diagram for describing a domain name server.

FIG. 145 is a diagram for describing a domain name server.

FIG. 146 is a diagram for describing a domain name server.

FIG. 147 is a diagram for describing a domain name server.

FIG. 148 is a diagram for describing calling of a domain name server.

FIG. 149 is a diagram for describing rewriting of a conversion table from an IP terminal.

FIG. 150 is a diagram for describing rewriting of a conversion table from an IP terminal.

FIG. 151 is a block diagram showing a thirty-sixth embodiment of the present invention (calling a communication partner by telephone number).

FIG. 152 is a figure for explaining the 36th embodiment;

FIG. 153 is a diagram illustrating an example of an internal table used in the 36th embodiment.

FIG. 154 is a diagram illustrating an example of an internal table used in the 36th embodiment.

FIG. 155 is a diagram illustrating an example of an internal table used in the 36th embodiment.

FIG. 156 is a diagram for describing calling of a domain name server.

FIG. 157 is a part of a block diagram showing a 37th embodiment (an IP terminal capable of connecting to a plurality of access control devices) of the present invention;

FIG. 158 is a part of a block diagram showing a thirty-seventh embodiment (IP terminal connectable to a plurality of access control devices) of the present invention;

FIG. 159 is a timing chart for explaining a registration procedure from a home IP terminal.

FIG. 160 is a diagram for describing an access method of the authentication server.

FIG. 161 is a diagram illustrating an example of an internal table used in the thirty-seventh embodiment.

FIG. 162 is a diagram illustrating an example of an internal table used in the thirty-seventh embodiment.

FIG. 163 is a diagram illustrating an example of an internal table used in the thirty-seventh embodiment.

FIG. 164 is a diagram for describing calling of the authentication server.

FIG. 165 is a block diagram for explaining a conventional LAN network.

Fig. 166 is a diagram illustrating an example of the form of the Internet.

Fig. 167 is a diagram illustrating an IP frame defined by RFC791.

FIG. 168 is a diagram illustrating an IP frame defined by RFC1883.

[Explanation of symbols]

 1, 100 Integrated information communication system (ICS) 2, 3, 4, 5, 10 Access control device 20 Relay device 30 Gateway between VAN 40 ICS network server 50 ICS network address management server 60 User physical communication line

Claims (88)

[Claims] 1. A unique ICS user address system ADX
ICS having an address system ADS based on the management of the conversion table in the access control device
The IC card is converted into a network frame, and at least one or more built-in VANs are transmitted according to the rules of the address system ADS. When the VAN reaches another target access control device, the IC is managed based on the conversion table.
An integrated information communication system characterized by being converted into an S-user address system ADX and reaching another external information communication device. 2. When an ICS user frame having the ICS user address system ADX is sent to a network having another address system ADY, the conversion table of the access control device includes a service identification of intra-company communication / inter-company communication. 2. The integrated information communication system according to claim 1, wherein an address system is converted for each transmission destination under the management of the access control device, and a conversion mode can be selected for each user frame. 3. A unique ICS user address system ADX
An ICS user frame having an ICS is stored in an ICS user frame based on the management of the conversion table of the access control device.
Without using the S user address, the conversion is made to the ICS network frame corresponding to the incoming ICS network address registered in the conversion table in correspondence with the user logical communication line, and the transfer destination of the ICS network frame is 1
Or N and I via at least one VAN
When the ICS network frame is transferred to another access control device according to the rules of the CS address system ADS, the ICS user frame is returned to the ICS user frame based on the management of the conversion table of the access control device, and reaches another external information communication device. An integrated information communication system, characterized in that: 4. A method comprising: a processing device and an ICS network database, when returning a result held by itself in response to a request from the access control device, or when not holding an answer to a question from the access control device, 3. The ICS network server according to claim 2, wherein the ICS network server has a function of communicating with another ICS network server using the ICS network server communication function to obtain an answer and returning the result to the access control device of the query source. Integrated information and communication system. 5. The integrated information communication system according to claim 2, further comprising: a processing device; and an address management server having a correspondence table for associating an ICS network address with the ICS network address. 6. An ICS name conversion table including a processing device and an ICS name conversion table, receiving an ICS name from the access control device, obtaining an ICS user address corresponding to the ICS name from the ICS name conversion table, and obtaining the obtained result as the access control device. And the access management server notifies at least the I
The integrated information communication according to claim 5, further comprising an ICS name server having a function of writing a CS user address and the ICS network address in the conversion table and returning an ICS user address corresponding to the ICS name to the user. system. 7. An ICS name conversion table including a processing device and an ICS name conversion table, receiving an ICS name from the access control device, obtaining an ICS user address corresponding to the ICS name from the ICS name conversion table, and obtaining a result obtained by the access control device. And the access management server notifies at least the I
The integrated information communication system according to claim 5, further comprising a function of writing a CS user address and the ICS network address in a temporary conversion table and returning an ICS user address corresponding to the ICS name to the user. 8. An ICS name conversion table including a processing device and an ICS name conversion table, receiving an ICS name from the access control device, obtaining an ICS user address for the ICS name from the ICS name conversion table, and obtaining a result obtained by the access control device. 6. The integrated information communication system according to claim 5, further comprising a function of notifying the user of the ICS name and returning an ICS user address corresponding to the ICS name to the user. 9. When the access control device receives an ICS user frame, the access control device reads and reads the type of the charging method for each ICS frame held in the conversion table based on the ICS user address included in the ICS user frame. If the type is a value indicating a metered billing method, billing information is generated, and the billing information is transmitted to a billing server as a billing information frame. The integrated information communication system according to claim 2 or 3, wherein the integrated information communication system has a function of not generating the accounting information and transmitting the accounting information to the accounting server as an accounting information frame. 10. The integrated information communication according to claim 9, wherein the charging server receives the charging information frame sent from each of the access control devices, and stores the charging information included in the charging information frame. system. 11. The charging server receives a charging information frame sent from the access control device, analyzes charging information included in the charging information frame, and can store the charging information in a charging information database. The integrated information communication system according to claim 10. 12. The charging information database includes an ICS.
The integrated information communication system according to claim 11, wherein the accounting information is stored as a database using the network address and the ICS user address as identifiers. 13. The billing server and the access control device store information in a count indicating the metered amount in the case of a metered billing method, and can set an upper limit value for the count, and the count value exceeds the set upper limit value. 11. The method according to claim 10, wherein, when the notification is made, the accounting server notifies the access control device that the count has exceeded the upper limit value, and the access control device that received the notification stops communication of the corresponding user. Integrated information and communication system. 14. The integrated information communication system according to claim 9, wherein said charging server can transfer the stored charging information to another VAN or a user using an ICS network server communication function. 15. A user data part in the ICS user frame is stored, and a notification is received from a user using the user control part or the user data part in the ICS user frame,
4. The integrated information communication system according to claim 2, further comprising an ICS frame database server capable of deleting, transmitting, and receiving the stored user data portion. 16. The ICS frame database server temporarily stores a user data portion in an ICS user frame according to a notification of the originating user using the ICS user frame, and notifies the originating user of the notification by using the ICS user frame. 16. The integrated information communication system according to claim 15, wherein the user data part stored in the communication information is transmitted to a receiving user. 17. The ICS frame database server according to claim 15, wherein the user data portion in the ICS user frame is stored, and can be deleted by notification of the originating user and the receiving user using the ICS user frame. Integrated information and communication system. 18. The ICS frame database server stores a user data portion in an ICS user frame by a notification of the receiving user using the ICS user frame, and receives a notification that information addressed to the receiving user is stored. 16. The notification according to claim 15, wherein by notifying the receiving side user, the receiving side user receives the user data portion stored at a desired timing by the notification using the ICS user frame of the receiving side user. Integrated information and communication system. 19. The ICS frame database server temporarily stores a user data portion in an ICS user frame when communication between users cannot be performed in a communication between users, so that the receiving user can communicate. 16. The integrated information communication system according to claim 15, wherein when the transition is made, notification that the information addressed to the receiving user is stored is sent. 20. The ICS network frame according to X.25 for converting and inverse converting to a frame of the 25 format. X.25 having an ICS network frame conversion unit as an input / output unit. 2. A system having 25 networks as a relay network.
Or the integrated information communication system according to 3. 21. A relay network having a FR / ICS network frame conversion unit for converting and inversely converting the ICS network frame into a frame relay format frame as an input / output unit.
3. The integrated information communication system according to 1. 22. The ICS network frame is denoted by A
ATM for converting and reverse converting to TM format frames
4. The integrated information communication system according to claim 2, further comprising an ATM network having a / ICS network frame conversion unit as an input / output unit as a relay network. 23. A satellite network having a satellite / ICS network frame converter for converting and inverting the ICS network frame into a satellite communication network interface as an input / output unit as a relay network. 3. The integrated information communication system according to 3. 24. The access control device, comprising: a telephone line conversion unit or a mobile telephone line conversion unit having a function of converting and reverse converting an interface of a telephone line or a mobile telephone line into an ICS network frame that can be transferred in an ICS network. The integrated information communication system according to claim 2, further comprising: 25. The access control device has a dial-up router, and the dial-up router has a built-in router table in which telephone numbers and priorities are designated, and connects the telephone line or the mobile telephone line according to the router table. 25. The integrated information communication system according to claim 24, wherein 26. The access control device according to claim 2, wherein the access control device includes an ISDN line conversion unit having a function of converting and reverse converting an interface of the ISDN line into an ICS network frame that can be transferred in an ICS network. Integrated information and communication system. 27. The CATV line conversion unit according to claim 2, wherein the access control device includes a CATV line conversion unit having a function of converting and reverse converting a CATV line interface into an ICS network frame that can be transferred in an ICS network. Integrated information and communication system. 28. The access control device according to claim 1, wherein said interface capable of transferring a satellite line interface within an ICS network.
The integrated information communication system according to claim 2 or 3, further comprising a satellite channel conversion unit having a function of converting and inversely converting to a CS network frame. 29. The access control device, wherein the access control device is an IC capable of transferring an IPX interface within an ICS network.
The integrated information communication system according to claim 2 or 3, further comprising an IPX conversion unit having a function of converting into an S network frame and performing an inverse conversion. 30. The ICS network frame according to X.25 for converting and inverse converting to a frame of the 25 format. 4. The integrated information communication system according to claim 2, wherein the 25 / ICS network frame conversion unit is provided in a relay network side input / output unit in the access control device. 31. A relay network-side input / output unit in the access control device, which has a FR / ICS network frame conversion unit for converting and inversely converting the ICS network frame into a frame relay format frame. Or the integrated information communication system according to 3. 32. The ICS network frame may be A
ATM for converting and reverse converting to TM format frames
4. The integrated information communication system according to claim 2, wherein an / ICS network frame conversion unit is provided in a relay network side input / output unit in the access control device. 33. A relay network side input / output unit in the access control device, which has a satellite / ICS network frame conversion unit for converting and inverting the ICS network frame into a satellite communication network interface.
Or the integrated information communication system according to 3. 34. The access control device, comprising: The integrated information communication system according to claim 2 or 3, wherein the integrated information communication system is included in 25 exchanges. 35. The integrated information communication system according to claim 2, wherein the access control device is included in an FR exchange. 36. The integrated information communication system according to claim 2, wherein the access control device is included in an ATM switch. 37. The integrated information communication system according to claim 2, wherein the access control device is included in a satellite receiver / transmitter. 38. The access control device, comprising: 25
4. The integrated information communication system according to claim 2, wherein the integrated information communication system is included in any one of a network, an FR network, an ATM network, and a satellite communication network. 39. The integrated information communication system according to claim 2, wherein at least an access control device is provided outside, and an intra-company communication or an inter-company communication is performed by providing an access control device general management server inside. . 40. The integrated information communication system according to claim 4, wherein said ICS network server is connected to a relay device. 41. The integrated information communication system according to claim 5, wherein the address management server is connected to a relay device. 42. The integrated information communication system according to claim 3, wherein the inter-company communication is executed without using the conversion table. 43. The integrated information communication system according to claim 6, wherein the ICS name conversion table converts an ICS name from an ICS name server, and the ICS name server is connected to a relay device. 44. The access control device has an encryption unit and a decryption unit, and when performing ICS encapsulation, the I
The CS user frame is converted into a cipher text by the encryption means and transmitted inside the ICS. In the case of ICS decapsulation, the ICS user frame converted into the cipher text is converted into the original ICS user frame by the decryption means. The integrated information communication system according to claim 2 or 3, wherein the integrated information communication system is configured to return to (1). 45. The access control device according to claim 1, wherein
It is connected to SDN line, CATV line, satellite line, IPX line and mobile phone line. Even if the transmitting side is telephone line, ISDN line, CATV line, satellite line, IPX line or mobile phone line, the telephone on the receiving side 4. The integrated information communication system according to claim 2, wherein any one of a line, an ISDN line, a CATV line, a satellite line, an IPX line, and a mobile phone line can be selected. 46. The integrated information communication system according to claim 2, wherein a speed class and a priority are registered in the conversion table, and communication is performed according to the speed class and the priority. 47. The apparatus according to claim 2, wherein the access control device has an electronic signature unit, and the electronic control unit adds an electronic signature to the ICS user frame when the ICS user frame passes through the access control device. An integrated information communication system according to claim 1. 48. A unique ICS user address system AD
An ICS user frame having X is an IC having an address system ADS based on the management of a conversion table in the access control device.
S is converted into an S network frame and transmitted through a built-in ATM exchange network according to the rules of the address system ADS. When the packet reaches another target access control device, the ICS user is managed based on the conversion table. An integrated information communication system characterized by being converted to an address system ADX and reaching another external information communication device. 49. Each AT forming the ATM exchange network
49. The integrated information communication system according to claim 48, wherein the M exchange has an ATM address conversion table and a VC address conversion table. 50. The integrated information communication system according to claim 49, wherein each of said ATM switches is further connected to an ATM address management server and a PVC address management server. 51. The communication path of the ATM exchange network is SVC
49. The integrated information communication system according to claim 48, wherein the integrated information communication system is a PVC. 52. A communication path of the ATM exchange network is a PVC.
49. The integrated information communication system according to claim 48, wherein one-to-N, N-to-one, or N-to-N communication is performed. 53. A unique ICS user address system AD
An ICS user frame having X is an IC having an address system ADS based on the management of a conversion table in the access control device.
S is converted to an S network frame and transmitted through a built-in FR exchange network according to the rules of the address system ADS. When the packet reaches another target access control device, the ICS user is managed based on the conversion table. An integrated information communication system characterized by being converted to an address system ADX and reaching another external information communication device. 54. The integrated information communication system according to claim 53, wherein each FR exchange forming the FR exchange network has an FR address conversion table and a DLC address conversion table. 55. The integrated information communication system according to claim 54, wherein each of said FR exchanges is further connected to an FR address management server and a DLC address management server. 56. The integrated information communication system according to claim 2, wherein an electronic signature server is connected to the access control device or the relay device, and information can be mutually exchanged by an ICS network server communication function. 57. An encryption server is connected to the access control device or the relay device, and information can be mutually exchanged by an ICS network server communication function.
3. The integrated information communication system according to 1. 58. The conversion table server according to claim 2, wherein a part of the conversion table can be shown to the user or a part of the conversion table can be rewritten in response to a user request. 3. The integrated information communication system according to 3. 59. When an address described in a network control unit of the received ICS network frame is not described in the conversion table, whether the ICS network frame is accepted or discarded by designating an open area class 4. The integrated information communication system according to claim 2, wherein an open connection or a closed connection can be selected. 60. The integrated information communication system according to claim 2, wherein the address management server and the name management server have the same ICS network address and function as an address / name management server. 61. The access control device is separated into a centralized access control device and a simple access control device, and a user is connected to the simple access control device, and converts the conversion table into a centralized conversion table and an internal conversion table inside the centralized access control device. Divided into a simple conversion table inside the simple access control device,
4. The integrated information communication system according to claim 2, wherein encapsulation and ICS inverse encapsulation are performed by the simple access control device, and accounting and electronic signature are performed by the centralized access control device. 62. The integrated information communication system according to claim 2, wherein the access control device includes a network server such as an address management server and a name server inside a physically independent housing. 63. A second IP terminal that operates in association with a first IP terminal used by a user and an IP terminal or a satellite transmission device that provides data, and is provided with an ICS special number.
An integrated information communication system comprising: a terminal; and performing full-duplex communication using a satellite communication path and a ground ICS communication path provided by the ICS, starting from the user's inquiry. 64. The integrated information communication system according to claim 63, wherein said full-duplex communication is started from said second IP terminal. 65. The integrated information communication system according to claim 63 or 64, wherein a schedule notification is made from an IP terminal that provides the data, and an individual report of the user can be made. 66. The integrated information communication system according to claim 63, wherein data transmission is performed from an IP terminal that provides the data before inquiring of the user. 67. The integrated information communication system according to claim 63, wherein the satellite transmitting device is built in an access control device having a conversion table for address management. 68. An upper layer protocol in an IP frame is referred to, and an ICS corresponding to the type of the upper layer protocol is referred to.
2. The system according to claim 1, wherein a priority of a next stage of the IP frame received from the inside to the access control device is selected.
Or the integrated information communication system according to 3. 69. The integrated information communication system according to claim 68, wherein when said higher-level protocol is TCP, said priority is selected for each higher-level port number. 70. The integrated information communication system according to claim 68, wherein when the upper layer protocol is UDP, the priority is selected for each upper port number. 71. A higher-level protocol in an IP frame is referred to, and a priority of a next stage of an IP frame transmitted from the access control device to the ICS is selected according to a type of the higher-level protocol. Claim 1
Or the integrated information communication system according to 3. 72. The integrated information communication system according to claim 71, wherein when said higher-level protocol is TCP, said priority is selected for each higher-level port number. 73. The integrated information communication system according to claim 71, wherein when the upper layer protocol is UDP, the priority is selected for each upper port number. 74. The intra-company communication / inter-company communication and IC
The S network server communication is collectively performed by one first user logical communication line, and the virtual leased line connection is performed by LA or another second user logical communication line linked to the fixed connection of the ATM.
2. The system of claim 2, wherein the gateway is connected to N gateways.
3. The integrated information communication system according to 1. 75. A user service server, an ICS authority server, and a plurality of conversion table servers, each of which receives an application for ICS subscription at the user service server,
4. The integrated information communication system according to claim 1, wherein a CS authority server assigns an ICS user address, an ICS network address, and an ICS name, and the conversion table server rewrites a conversion table in the access control device. 76. The conversion table server, the ICS user address, the ICS network address, and the ICS
76. The integrated information communication system according to claim 75, wherein the name is notified to a domain name server. 77. The ICS user address assignment management table of the ICS authority server and the resource record of the domain name server hold the ICS user address and the ICS name as a pair, without changing one of them. 77. The integrated information communication system according to claim 76, wherein when the terminal is moved between the access control devices, the ICS user address and the ICS name of the terminal are not changed. 78. An ICS user address and an ICS network address of a communication partner are obtained by using a telephone number as an ICS domain name, and the ICS network address is stored in a conversion table in a call-side access control device. The integrated information communication system according to claim 75. 79. The integrated information communication system according to claim 75, wherein an ICS user address and an ICS network address of a communication partner are obtained by using a telephone number as an ICS domain name, and voice is added to an ICS user frame. 80. The ICS operator according to claim 1, wherein the ICS operator gives instructions to the general user service server, the general resource management server, and the general route information server, and performs an individual report. Integrated information and communication system. 81. The ICS operator gives an instruction to the general conversion table server, and the general conversion table server instructs the conversion table server to rewrite the conversion table, and the conversion table server rewrites the address and the like to the domain name server according to the instruction. Or the ICS operator gives an instruction to the general conversion table server, and the general conversion table server instructs the user service server to rewrite its database, and the user service server returns an address or the like in response to this instruction. 81. The integrated information communication system according to claim 80, wherein the integrated information communication system is configured to be operated. 82. The integrated information communication system according to claim 80, wherein the integrated information communication system is operated by an ICS official giving an instruction to a supervising ICS authority server or a supervising domain name server to make an individual report. 83. The integrated information communication system according to claim 1, wherein the integrated information communication system can be connected to a telephone via a telephone line from a telephone line conversion unit inside the access control device, and can perform communication by telephone voice. 84. The integrated information communication according to claim 1, wherein the ICS receiver embeds an encryption function and encryption-related data in the roaming terminal, wherein the encryption function can be selected by changing a parameter. system. 85. An authentication server for authenticating a roaming terminal that can be connected to a plurality of access control devices.
5. The integrated information communication system according to 4. 86. The authentication server includes charging management information (charging category, charging record), and based on the charging management information,
85. The integrated information communication system according to claim 84, wherein a CS usage fee is charged. 87. The integrated information communication system according to claim 84, further comprising a domain name server having a function of integrating a function of managing a domain name and a function of authenticating a roaming terminal. 88. A function of converting internal information of an ICS user frame into an ICS user frame in a radio wave format and transmitting the ICS user frame in a radio wave format, and
A first wireless transceiver having a function of inversely converting the information to the internal information of the S user frame is connected to an access control device, and further, between an IP terminal incorporating a second wireless transceiver having the same function as above. 85. The integrated information communication system according to claim 84, wherein communication is performed.