KR100624928B1 - Dynamic domain name service server using network certification information and a method thereof - Google Patents

Abstract

The present invention relates to a dynamic DNS service providing apparatus using network authentication information, the network authentication unit for storing the network authentication information for the user, thereby authenticating the network connection of the user; A user information unit for storing user information about the user; Dynamic DNS information DB is provided, through which the dynamic DNS unit to provide a dynamic DNS service to the user; And a service checking unit for matching the dynamic DNS information by matching the authentication information and the user information of the user connected to the network, and updating the dynamic DNS information DB according to the combined dynamic DNS information. This eliminates the need for the user to have a separate dynamic DNS agent on his system.

Description

Apparatus and method for providing dynamic DNA service using network authentication information {DYNAMIC DOMAIN NAME SERVICE SERVER USING NETWORK CERTIFICATION INFORMATION AND A METHOD THEREOF}

1 is a block diagram of an apparatus for providing dynamic DNS service using network authentication information according to the present invention.

2 is a detailed block diagram of the service checking unit 110 of FIG.

3 is a flowchart illustrating the operation of the apparatus for providing dynamic DNS service using network authentication information according to the present invention.

The present invention relates to an apparatus and method for providing dynamic DNS service using network authentication information. More particularly, the present invention provides an IP address assigned to a user from an authentication server for authenticating a user's network access, and the FQDN (for the user). By receiving the Fully Qualified Domain Name from the user information unit provided and updating the DNS information in real time, the user can be provided with the dynamic DNS service through the network connection without an agent, and the DNS service using the authenticated information. It is about a technology that can enhance the security.

The conventional dynamic domain name service (Dynamic Domain Name Service) implementation technology installs an agent on the user's system to use dynamic DNS to notify the dynamic DNS server of the IP given to them in the dynamic IP environment, and receives the dynamic The DNS server is configured to access the user's system with DNS name, not IP address, by updating the IP assigned to the system.

However, in order to inform the dynamic DNS server of the IP that changes frequently in the dynamic IP environment, the user has to install the agent on his system. In addition, when changing the server configuration or when the OS (Operation System) is changed, it is troublesome to reinstall the agent to use the service.

In addition, since it is a structure that requires update of dynamic DNS information on the unsecured Internet, additional work on authentication and transmission message confidentiality of subjects sending and receiving messages should be performed. There is a risk of tampering with.

The present invention has been made in accordance with the above-described needs, the object of the present invention is to link the user's subscription information with the data generated from the network authentication server, to find out the dynamic DNS name suitable for the user, and to the dynamic DNS entry in real time By adding or inserting, it provides a technology that can smoothly provide a dynamic DNS service without installing any program on the user's system.

Dynamic DNS service providing apparatus using the network authentication information according to the present invention for solving the above problems, and stores the network authentication information for the user, through this to authenticate the network connection (entry and exit) of the user A network authentication unit; A user information unit for storing user information about the user; A dynamic DNS unit having a dynamic DNS information DB and providing a dynamic DNS service to the user through the dynamic DNS information DB; And a service checker configured to match authentication information with the user connected to the network and the user information, combine the dynamic DNS information, and update the dynamic DNS information DB according to the combined dynamic DNS information.

In this case, preferably, the service checking unit may include: an authentication information cleansing engine extracting only necessary authentication information by removing information not related to the dynamic DNS service from the authentication information; A DNS matching engine configured to generate the dynamic DNS information by matching the extracted authentication information with the user information; And a DNS update engine updating the dynamic DNS information DB according to the dynamic DNS information.

Preferably, the authentication information extracted by the authentication information cleansing engine includes an IP address, a network connection time, a billing type, and a user name assigned during network connection. The user information includes a user name and an FQDN ( The dynamic DNS information combined by the DNS matching engine includes the assigned IP address, a fully qualified domain name (FQDN), and the dynamic DNS information for the user accessing a network. It includes the job type information indicating whether to insert or delete the IP address, and the FQDN in the DB.

On the other hand, the dynamic DNS service providing method using the network authentication information according to the present invention, the first step of storing the network authentication information for the user, thereby authenticating the network connection of the user; A second step of combining dynamic DNS information by matching authentication information of the user connected to the network with the previously stored user information; And a third step of providing a dynamic DNS service according to the combined dynamic DNS information through a dynamic DNS server.

In this case, the second step may include: an authentication information cleansing step of extracting only necessary authentication information by removing information not related to the dynamic DNS service from the authentication information; DNS matching step of generating the dynamic DNS information by matching the extracted authentication information and the user information; And providing the dynamic DNS information to the dynamic DNS server.

Hereinafter, with reference to the accompanying drawings will be described in detail an embodiment of the present invention.

1 is a block diagram of a dynamic DNS service providing apparatus using network authentication information according to the present invention.

Referring to FIG. 1, the apparatus for providing dynamic DNS service using network authentication information according to the present invention includes a network authentication unit 100, a service inspection unit 110, a user information unit 120, and a dynamic DNS unit 130. .

The network authentication unit 100 authenticates the user's network entry and exit using the authentication information DB 106 and authentication information that stores the authentication time, billing type, user name, and IP address information for each subscriber. It consists of a network authentication system 103.

The user information unit 120 includes a user information DB 126 including a user name and a fully qualified domain name (FQDN) and a database management system (DBMS) 123 managing the user information DB 126.

The dynamic DNS unit 130 is a unit that provides a substantial dynamic DNS service, and is based on the contents of the DNS information DB 136 and the DNS information DB 136 which store IP addresses and FQDNs allocated to each user. It is composed of DNS entries 133 that provide dynamic DNS services.

The service inspection unit 110 combines the messages of the network authentication unit 100 and the user information unit 120 to manipulate the DNS information DB 136.

In this case, the network authentication unit 100, the service inspection unit 110, the user information unit 120, and the dynamic DNS unit 130 may be implemented in one system or separately configured in a plurality of systems.

FIG. 2 is a detailed block diagram of the service inspecting unit 110 of FIG. 1.

1 and 2, the service inspecting unit 110 according to the present invention includes an authentication information cleansing engine 112, a DNS matching engine 114, and a DNS update engine 116.

The authentication information cleansing engine 112 extracts only necessary portions by removing data not directly associated with the dynamic DNS service among the authentication information.

The DNS matching engine 114 combines the cleaned up authentication information with the user information to generate data to be updated in the DNS entry.

The DNS update engine 116 updates the data generated by the DNS matching engine 114 to the DNS information DB 136.

3 is a flowchart illustrating the operation of the apparatus for providing dynamic DNS service using network authentication information according to the present invention.

1 to 3, by monitoring the user network entry and exit (S200), when the user enters or exits the network, the network authentication unit authenticates the user (S210). At this time, the transmission format used by the authentication system and the authentication system targets the RADIUS (Remote Authentication Dial-In User Services) and the diameter (Communication Protocol). The content of transmission accepts Account-start, Account-Interim, and account-stop information on a RADIUS basis, and Account-Request, and Account-Answer information on a diameter basis.

The authentication information cleansing engine 112 of the service inspecting unit 110 receives the authentication information from the network authentication unit 100, confirms whether the message of the predefined authentication system, and confirms that the message of the predefined authentication system is correct. If necessary, unnecessary items not related to the dynamic DNS are deleted (S220), and the information is transferred to the DNS matching engine 114.

At this time, the authentication information cleaning engine 112 does not necessarily delete the authentication time, the charging type, the user name, and the assigned IP address from the authentication information.

The DNS matching engine 114 extracts a user record from the user information unit 120 that matches the user name transmitted from the cleaning engine. The extracted information includes a user name and a fully qualified domain name (FQDN).

On the other hand, the DNS matching engine 114, if a recorder that matches the received user name does not exist in the user information unit 120, it is regarded as a user who does not use the dynamic DNS service, and stops the operation.

Subsequently, the DNS matching engine 114 uses the authentication information received from the authentication information cleaning engine 112 and the extracted user information, and includes a work type (insert, delete) and an assigned IP address (received from the authentication information cleaning engine). Information), and the dynamic DNS information including the contents of the FQDN (use of the information provided from the user information unit) are combined and transmitted to the DNS update engine 116 (S230).

At this time, if the billing type is Account-start based on the RADIUS standard of authentication information, it is determined to insert as a work type. If the billing type is Account-stop, it is determined to be deleted as a work type.

If the billing type is Account-Request on the basis of the metric, the work type is determined to be inserted, and the billing type is determined to be deleted as the Account-Answer work type.

At this time, the charging information of the RADIUS and the diameter can be replaced with other information according to the method of the actual implementation system.

Meanwhile, the DNS update engine 116 updates DNS information of the dynamic DNS unit according to the dynamic DNS information combined by the DNS matching engine 114 (S240). That is, when the work type is insert, the user inserts the IP address and the FQDN of the user into the DNS information DB 136, so that the user can be provided with the dynamic DNS service. Deletion prevents the unnecessary provision of dynamic DNS services without the user entering the network.

By the above-described method, the user can use the dynamic DNS service without installing a separate program in his system.

Therefore, according to the present invention, since the user can automatically use the dynamic DNS service without installing a separate program on his system, the user can flexibly cope with an environment change such as an OS reinstallation or a server move. .

In addition, because it receives only the information produced by a few closed systems, such as a predetermined authentication server, rather than receiving a message from an unspecified number of the Internet, there is an effect that security is improved compared to the conventional method.

In addition, a preferred embodiment of the present invention is for the purpose of illustration, those skilled in the art will be able to various modifications, changes, substitutions and additions through the spirit and scope of the appended claims, such modifications and changes are the following claims It should be seen as belonging to a range.

Claims (6)

A network authentication unit configured to store network authentication information of a user and thereby authenticate the user's network access; A user information unit for storing user information about the user; A dynamic DNS unit having a dynamic DNS information DB and providing a dynamic DNS service to the user through the dynamic DNS information DB; And And a service checker configured to update the dynamic DNS information DB according to the combined dynamic DNS information after combining the dynamic DNS information by matching the authentication information and the user information with respect to the user connected to the network. Dynamic DNS service providing device using authentication information. The method of claim 1, wherein the service inspection unit, An authentication information cleansing engine that extracts only necessary authentication information by removing information not related to the dynamic DNS service from the authentication information; A DNS matching engine configured to generate the dynamic DNS information by matching the extracted authentication information with the user information; And And a DNS update engine for updating the dynamic DNS information DB according to the dynamic DNS information. The method of claim 2, The authentication information extracted by the authentication information cleansing engine includes an IP address allocated to a network connection, a network connection time, a billing type, and a user name. The user information includes a user name and a fully qualified domain name (FQDN), The dynamic DNS information combined by the DNS matching engine includes the assigned IP address, a fully qualified domain name (FQDN) for the user accessing a network, the IP address in the dynamic DNS information DB, and the FQDN. Dynamic DNS service providing apparatus using the network authentication information comprising the job type information indicating whether to insert or delete. A first step of storing network authentication information for the user, thereby authenticating the user's network connection; A second step of combining dynamic DNS information by matching authentication information of the user connected to the network with the previously stored user information; And And a third step of providing a dynamic DNS service according to the combined dynamic DNS information through a dynamic DNS server. The method of claim 4, wherein the second step, An authentication information cleansing step of extracting only necessary authentication information by removing information not related to the dynamic DNS service from the authentication information; DNS matching step of generating the dynamic DNS information by matching the extracted authentication information and the user information; And Dynamic DNS service providing method using the network authentication information, characterized in that it comprises the step of providing the dynamic DNS information to the dynamic DNS server. The method of claim 5, The extracted authentication information includes an IP address allocated to a network connection, a network connection time, a billing type, and a user name. The user information includes a user name and a fully qualified domain name (FQDN), The combined dynamic DNS information includes the assigned IP address, a fully qualified domain name (FQDN) for the user accessing a network, the IP address, and the FQDN in a dynamic DNS information DB provided in the dynamic DNS server. Dynamic DNS service providing method using the network authentication information comprising the job type information indicating whether to insert or delete.

Images