KR100744936B1 - Method and apparatus for limiting access of subscriber line for dynamic internet protocol address service - Google Patents

Abstract

In order to provide a simpler access method for existing ADSL service subscribers using dynamic IP and to provide service providers with an improved access management system at low cost, the IP address can be released based on PVC values. Improve the control method of the NAS's DHCP relay module and install a separate access information management module to limit and manage the subscriber's connection status.

Description

METHOD AND APPARATUS FOR LIMITING ACCESS OF SUBSCRIBER LINE FOR DYNAMIC INTERNET PROTOCOL ADDRESS SERVICE}

1 is a block diagram showing a preferred embodiment of the present invention.

2 is a flowchart illustrating a method for restricting subscriber access by a relay module of a NAS according to the present invention.

3 is a view showing a data table stored in the access information management module of the NAS according to an embodiment of the present invention.

The present invention relates to a method and apparatus for controlling access of a dynamic IP service subscriber, and more particularly, to a DHCP (Dynamic Host Configuration Protocol) relay module of a network access server (hereinafter, NAS, Network Access Server) connected to a subscriber station in a PVC method. The present invention relates to a method and apparatus for restricting access of a dynamic IP service subscriber of an asymmetric digital subscriber line (hereinafter referred to as ADSL).                         

In case of individual subscriber of ADSL service that communicates by ATM using existing telephone line, dynamic IP address allocation method is applied for efficient utilization of IP (Internet Protocol) address for Internet access.

In order to dynamically assign an IP address, an Asynchronous Transfer Mode (ATM) cell requesting access from a subscriber station is provided at a subscriber station's service station to aggregate traffic on a subscriber line. The network is connected to the DSLAM and the ATM network to a network access server (hereinafter referred to as a NAS; Network Access Server) that performs a connection function to a backbone section. The NAS finds out the MAC address of the subscriber station, sends the MAC address of the subscriber station to the DHCP server of the service provider, and the DHCP server determines whether the received MAC address is subscribed to the service. Send an IP address with In the NAS, by relaying an IP address assigned by a DHCP server to a corresponding subscriber station, the subscriber has an IP address and used an IP service.

To this end, the NAS is equipped with a DHCP relay module for communication with a DHCP server, and the connection from the subscriber terminal to the NAS or the DHCP server is a private virtual circuit (PVC) such as VPI / VCI (Virtual Path / Channel Identifier). In this case, multiple virtual channels are formed on the same physical circuit and connected.

As described above, in the related art, a DHCP request packet is sent from a subscriber station to a NAS, and the DHCP relay module of the NAS only plays a role of relaying to a subscriber station after receiving an IP address by communicating with a DHCP server.

This conventional dynamic IP address allocation method requires additional software to be installed on the subscriber's terminal, which incurs a separate cost, and increases the complaints of the subscriber in the event of a software failure. The cost of maintenance has also increased because of the problem.

In the cable modem method, since an OS (Operating System) of a personal computer (PC) is basically provided so that a terminal is automatically assigned an IP address when the terminal is physically connected to the network, a separate software is not required, but the subscriber can use it. The problem is that you cannot limit the number of PCs you can.

In order to solve this problem, it was necessary to know the MAC (Media Access Control) address of the subscriber terminal, and manually registered the MAC address of the user side in the DHCP server, and set up to be connected only when it matches, which is inconvenient and additional waste of labor. In addition, there is a problem that the user can not be connected when the MAC address is changed by changing the terminal.

In addition, even if a plurality of terminals are connected to one line, there is a limitation that the number of terminals is not made separately, and only a terminal having a corresponding MAC address can be connected, so that other terminals cannot be connected.

Technical problem of the present invention to solve the above problems, a plurality of terminals can be easily connected to the network from the user's point of view, the service provider does not need to provide a separate software, so the loss caused by the failure of the terminal side The present invention provides a method and apparatus for controlling access of a subscriber to a dynamic IP service, which can reduce and conveniently achieve access restriction of a subscriber.

A method for controlling access of a subscriber to a dynamic IP service according to the present invention includes controlling an access according to an access request of a subscriber station and limiting the number of connections within an allowed range to relay an IP address assignment corresponding to the subscriber station from a DHCP server. A method for controlling access of a dynamic IP service subscriber, the method comprising: receiving an access request packet from the subscriber station; And determining whether to allocate a dynamic IP of the subscriber station that has transmitted the access request packet, based on the access information including the PVC number of the subscriber station which has transmitted the access request packet.

In addition, the access information may include the number of connected terminals, the number of accessible terminals, the MAC address of the connected terminal, or the allocated IP address for each subscriber.

The determining of whether to allocate the dynamic IP may include comparing the number of connected terminals and the number of accessible terminals maintained in the access information management module corresponding to the PVC number of the subscriber station transmitting the access request packet. step; As a result of the comparison, if the number of connected terminals of the subscriber is less than the number of connectable terminals, allocating a predetermined IP address from a DHCP server to the subscriber terminal, and increasing the number of connected terminals in the access information management module. ; And discarding the access request packet if the number of connected terminals of the subscriber is equal to or greater than the number of accessible terminals.

If the subscriber station sends a cancellation packet or there is no packet received for a predetermined time, the subscriber station terminates the connection, deletes the MAC address of the subscriber station from the access information management module, and accesses the The method may further include reducing the number of terminals.

As another aspect of the present invention, the access control apparatus for a floating IP service subscriber according to the present invention is a access control apparatus for a floating IP service subscriber, which controls a floating IP address assignment in accordance with an access request of a subscriber station, wherein each subscriber is PVC. Access information management means for maintaining access information including a number and continuously modifying the access information; And IP address relay means for relaying the floating IP address from the DHCP server based on the connection information stored in the connection information management means.

Further, the IP address relay means compares the number of accessible terminals of the corresponding PVC number stored in the connection information management module with the number of connected terminals, and if the number of connected terminals is less than the number of accessible terminals, from a DHCP server. Relaying an IP address corresponding to the subscriber station of the subscriber station, increasing the number of connected terminals of the access information management module, and discarding the access request packet when the number of connected terminals is equal to or greater than the number of accessible terminals.

That is, in the present invention, a separate connection information management module 32 is added to the NAS 30 to improve the operation of the conventional DHCP relay module 31 and to allocate a floating IP number based on the PVC number. .

Hereinafter, preferred embodiments of the present invention will be described with reference to FIGS. 1 and 2.

1 is a block diagram for providing an ADSL service according to the present invention, Figure 2 is a flow chart of the operation of the DHCP relay module 31 of the NAS 30 showing an embodiment according to the present invention.

The connection between the subscriber station 10 and the NAS 30 is a logical line connection using the PVC number in the normal ATM method. The PVC number may be VPI / VCI included in the ATM cell, and correspond to 1: 1 with the subscriber modem so that the NAS 30 may grasp the subscriber information by using the PVC number.

First, the number of terminals accessible by the corresponding PVC number of each subscriber is set in the access information management module 32. Alternatively, the number of terminals which can be connected collectively can be set to, for example, two. The access information management module 32 may be information stored in the storage device in the form of a table for each subscriber, such as a PVC number, the number of accessible terminals, the MAC address to which the subscriber is connected, and the number of terminals currently connected.

An embodiment of the table-type data stored in the access information management module 32 is shown in FIG. 3.

As shown in Figs. 1 and 2, a connection request packet is sent from the subscriber's access means 10 and 20, which are sent to the NAS 30 through the DSLAM 50, which aggregates the traffic of the subscriber line.

The DHCP relay module 31 of the NAS 30 checks whether the DHCP request packet is received from the subscriber station 10 (201), and when the subscriber transmits the DHCP request packet, the DSLAM 50 is transmitted. In step 202, the access information management module 32 is searched to determine whether the corresponding subscriber is accessible by comparing the number of accessible terminals with the number of terminals actually connected (203).

If the actual number of connected terminals is less than the number of accessible terminals, it communicates with the DHCP server 40 to allocate an IP address to the subscriber station 10 (203), and increases the number of currently connected terminals by one to access information. The management information of the management module 32 is corrected (205). In addition, the MAC address of the subscriber station may be registered.

If the actual number of connected terminals is greater than or equal to the number of accessible terminals, the subscriber cannot be connected by discarding the connection request packet.

Although not shown, as another embodiment, if the disconnected packet is sent from the connected terminal 10, or if no packet is received for a predetermined time, the IP address of the terminal is returned to the DHCP server 40, and the MAC address. May be deleted from the access information management module 32, and the value of the number of terminals currently connected may be reduced.

That is, the present invention is to control the user's access control by using the PVC number in the DHCP relay module 31 of the NAS 30, and installed a separate access information management module 32 for access information management It is characterized by.

It is apparent that the configuration of the DHCP relay module 31 and the connection information management module 32 can be variously employed to achieve the object of the present invention.

It is apparent that such a configuration may be made in the DSLAM 50.                     

By connecting as described above, the subscriber can connect a plurality of terminals, and even if the MAC address is changed by changing the terminals, the subscriber can access without additional procedures, the service provider can easily achieve the user's access restriction.

According to the present invention, since the service provider can control the maximum number of terminals that the subscriber can access by designating the number of accessible terminals, and determines whether the connection is possible by the number of terminals connected with the PVC number, not the MAC address, For convenience, the service can be used even if the MAC address changes.

After the timeout time, other terminals can be connected and used, and there is no need to install additional software to provide services, and there is no need to determine the accessibility by entering the subscriber's MAC address into the DHCP server. Installation and operation costs can be reduced.

Claims (8)

Dynamic IP service subscriber that relays Internet Protocol (IP) address assignment corresponding to the subscriber station from DHCP (Dynamic Host Configuration Protocol) server by limiting the number of connections within the allowed range while controlling the connection according to the access request of the subscriber station. In the connection control method of, Receiving an access request packet from the subscriber station; And And determining whether to allocate a dynamic IP of the subscriber station that has transmitted the access request packet, based on the access information including a private virtual circuit (PVC) number of the subscriber station which has transmitted the access request packet. A method of controlling access of a subscriber to a dynamic IP service. The method of claim 1, The access information may include the number of connected terminals, the number of accessible terminals, a media access control (MAC) address of the connected terminal, or an allocated IP address for each subscriber. . The method of claim 2, Determining whether the dynamic IP allocation, Comparing the number of connected terminals and the number of connectable terminals maintained in the connection information management module corresponding to the PVC number of the subscriber station transmitting the connection request packet; As a result of the comparison, if the number of connected terminals of the subscriber is less than the number of connectable terminals, allocating a predetermined IP address from a DHCP server to the subscriber terminal, and increasing the number of connected terminals in the access information management module. ; And And discarding the access request packet if the number of connected terminals of the subscriber is greater than or equal to the number of accessible terminals. The method of claim 3, wherein If the subscriber station sends a cancellation packet or there is no packet received for a predetermined time, the subscriber station is terminated, the MAC address of the subscriber station is deleted from the access information management module, and the number of connected terminals The method of controlling the access of a dynamic IP service subscriber, characterized in that it further comprises the step of reducing. An access control apparatus for a floating IP service subscriber that controls allocation of a floating IP address according to an access request of a subscriber station, Access information management means for maintaining access information including a PVC number for each subscriber and continuously modifying the access information; And And IP address relay means for relaying a dynamic IP address from a DHCP server based on the access information stored in said access information management means. The method of claim 5, The access information, the access control device for a dynamic IP service subscriber, characterized in that for each subscriber's modem includes the number of accessible terminals, the number of connected terminals, the MAC address of the connected terminal, or the assigned IP address. The method of claim 6, The IP address relay means compares the number of accessible terminals of the PVC number stored in the connection information management module with the number of connected terminals, and if the number of connected terminals is less than the number of accessible terminals, the IP address from the DHCP server. Dynamic IP, characterized in that for relaying the IP address corresponding to the subscriber station and increasing the number of connected terminals of the access information management module, and discarding the access request packet when the number of connected terminals is more than the number of accessible terminals. Access control device of service subscriber. The method of claim 7, wherein If the subscriber station sends a cancellation packet or there is no packet received for a predetermined time, the subscriber station is terminated, the MAC address of the subscriber station is deleted from the access information management module, and the number of connected terminals Access control device for a dynamic IP service subscriber, characterized in that for reducing.

Images