KR100824177B1 - A internet-based application service providing system and method allocating private IP address at the user terminal - Google Patents

Abstract

The application service providing system of the present invention provides a permanent private IP address to a subscriber in an Internet-based data network in order to solve the problem that general Internet users do not receive a public IP address in a fixed manner and thus do not receive a regular service using the Internet. By allocating so that the subscriber terminal of the home is always connected to the Internet, it provides the subscriber with services such as remote detection, remote monitoring, remote control and Internet phone call. Through the Internet access method using the private IP address, subscriber terminals can always be managed in the network, and the subscriber environment from others can be protected by not using the public IP address.

Description

A system for providing Internet-based application services using a private IP address and a method thereof {a internet-based application service providing system and method allocating private IP address at the user terminal}

1 is a diagram briefly showing the overall configuration of a service network using a private IP address of the present invention;

2 is a diagram briefly showing the configuration of a private IP management system of the present invention;

3 is a flowchart illustrating a remote detection function according to a first embodiment of the present invention;

4 is a flowchart illustrating a remote monitoring and remote control of a second embodiment of the present invention;

5 and 6 are flowcharts for explaining the Internet telephone service which is the third embodiment of the present invention.

The present invention relates to a system and a method for providing an application service based on the Internet, and more particularly, to a subscriber station with a private IP address which is managed separately, and connected to a network with subscriber stations and a public IP address. The present invention relates to a system that enables communication between terminals at all times.

In order to enable two-way data communication based on the Internet, each terminal must have an IP address as a unique identifier for identifying itself. The IP addresses currently used on the Internet are 32-bit numbers.

These IP addresses can be broadly divided into fixed IP addresses that are statically assigned to one terminal and floating IP addresses that assign an arbitrary IP address only when the Internet connection is required for the terminals that want to access the Internet.

In the case of fixed IP address, due to the rapid depletion of limited IP address resources due to the exponential expansion of the Internet, IPv4 does not easily assign fixed IP address to general users, and the price itself is expensive, making it easier for general users. It is difficult to use a static IP address. Recently, IPv6 has been proposed as a solution to the problem of depletion of IP address resources, but it will take a long time before it is used as a standard.

Therefore, when general users want to use the Internet, they subscribe to the ISP's service and dial the ISP only when necessary, and randomly select one of the IP addresses that are not currently used among the IP addresses assigned by the ISP. In this case, an unspecified floating IP address that is assigned and used only when necessary by an ISP is called a floating IP address.

However, in the case of using such a dynamic IP address, the user's terminal cannot be identified from the outside until the user's terminal is separately assigned a dynamic IP address and accesses the Internet. Since the address is changed and its IP address is given arbitrarily, the user terminal cannot be accessed directly from the outside.

For this reason, general users who have not been assigned a fixed IP address cannot control home networking for cooling, heating, locking, or monitoring the home from the outside. There is a problem.

In addition, even if a fixed IP address is assigned to facilitate access from the outside, the indoor network environment may be changed regardless of the user's intention, with the fear of exposing the indoor environment easily due to security problems. Recently, many technologies for solving the security on the network have been developed, but it is not economically easy to implement these technologies in a general house.

An object of the present invention for solving the above problems is to give subscriber terminals abundantly available private IP address to communicate with the subscriber terminal using the private IP address and the fixed IP address with the external terminals on the Internet By using the communication by the subscriber terminal and the external terminal to enable direct communication between the subscriber to monitor and control their own indoor terminal using the external terminal.

Application service providing system of the present invention for achieving the above object is an external terminal connected on the Internet with a connection device and a public IP address to allow the network access of different paths to the connected terminal according to the subscription of the application service And a relaying device which gives a private IP address to a subscriber station connected through the access device and relays communication between the subscriber station and external terminals by communicating with the subscriber stations using the assigned private IP address. do.

 The method of providing an application service of the present invention comprises the steps of: assigning a private IP address to a subscriber terminal subscribed to an application service, establishing a logical private network path with the subscriber terminal using the assigned private IP address, and logical private Mapping a private IP address having a network path with a public IP address of an external terminal connected to the Internet, and relaying communication between the address mapped subscriber terminal and the external terminal.

Hereinafter, with reference to the accompanying drawings will be described embodiments of the present invention;

1 is a diagram briefly showing a configuration of an entire system for providing an application service using a private IP address according to the present invention.

Terminal A 11 and terminal B 12 are subscriber terminals installed in a subscriber's premises, and terminal A 11 represents a terminal using a public Internet service without subscribing to an application service according to the present invention. B (12) represents a terminal that receives a private IP by subscribing to an application service according to the present invention and uses the Internet-based service through it. The terminals A and B 11 and 12 include all terminals capable of data communication with other communication devices such as personal PCs, terminals installed in the home for home networking, terminals for Internet telephony, and the like.

The modem 20 is a network matching device for allowing the terminal A 11 and the terminal B 12 to be connected to the network.

The connection device 30 is similar to a kind of routing separation function. Whether the terminal A, B (11, 12) has a private IP address or the hardware address of the terminal A, B (11, 12) (eg, MAC) Address) so that the terminals 11 and 12 can access the Internet through different paths (virtual connection A or virtual connection B) according to whether the terminals 11 and 12 are not subscribed to the service according to the present invention or subscribed terminals. Do it.

That is, in the case of the terminal A 11, the access device 30 is connected to the server 50 on the Internet through the path A for the public Internet service, and has a private IP address or a hardware address is registered in the access device. In the case of the terminal B 12 connected to the relay device 40 to be described later through the path B to use the application service of the present invention, the terminal B 12 and the relay device 40 is a logical private dedicated network. The (dedicated line) is connected to the external terminal 50, 60 connected to the relay device 40 so that the terminal B 12 can be controlled and managed at any time.

In FIG. 1, terminal A 11 is for comparing and explaining a network configuration of an application service using a private IP address according to the present invention, and the contents of terminal A 11 are not included in the scope of the present invention. Therefore, the description about the terminal A 11 will be omitted later.

The relay device 40 assigns a unique private IP address to the terminal B 12 connected through the virtual path B by the connection device 30 using the modem 20, and the private IP address and the terminal assigned thereto. The hardware addresses of B 12 are stored in match with each other.

After the private IP address is assigned and the private IP address is set in the terminal B 12, the terminal B 12 and the relay device 40 use the private IP address through the virtual path B, which is a logical dedicated line. Will communicate with each other. The relay device 40 manages the state of the terminal B 12 and a failure in connection through communication with the terminal B 12 using the private IP address.

In addition, the relay device 40 temporarily stores the information generated by the terminal B 12, the application service providing system 40 has a public IP address to communicate with the external terminals (50, 60) terminal A relay is performed to enable mutual communication between the B 12 and other terminals 50 and 60 on the Internet.

The external terminals 50 and 60 are terminals connected to the Internet with a public IP address and communicate with the terminal B 12 through the relay device 40 or by connecting to the relay device 40 to the terminal B ( 12) the terminal to search for information related to. The external terminals 50 and 60 collectively refer to all devices capable of communicating through a public network (wired and wireless Internet) such as PDAs, portable telephones, personal PCs, and other servers on the Internet.

2 is a view showing the configuration of the relay device of the present invention using the relay device 40 will be described in more detail.

The authentication management module 41 is a module for authenticating a subscriber who wants to access the relay device 40. In the present invention, the authentication management module 41 is not limited to any specific authentication method, and any authentication method conventionally used may be used. Hereinafter, the present invention will be described using a basic authentication method using a subscriber's ID and password, but it is obvious that more steps can be taken for security.

The private IP address module 42 is a module for assigning a private IP address to the terminal B 12 connected through the path B and managing the assigned private IP addresses, and maintaining the profile of the subscriber and the service contents of the subscriber. Manages information on change, termination, etc. to control subscriber's service authority when service request occurs.

The address mapping module 43 is configured to enable communication between the terminal B 12 assigned the private IP address and the external terminals 50 and 60 having the public IP address used in the public network. This module converts addresses. As an address translation method of the address mapping module 43, a method of mapping a private IP address and a public IP address in the form of a network address translation (NAT) or a method of allocating information of a private IP address to a port of a public IP address may be used. have.

The terminal management module 44 analyzes the information received from the terminal B 12 through periodic communication with the terminal B 12 and monitors the state of the terminal B 12 and whether the environment is changed, and the terminal B 12 ) Manages various information received from the terminal B (12) when the event occurs.

The encryption module 45 is a module for encrypting the information when encryption is required for the information transmitted in communication with the external terminals 50 and 60, and may also use the encryption technique conventionally used.                     

The call processing module 46 is an address mapping module when receiving a call connection request from the terminal B 12 or the external terminals 50 and 60 so as to enable an internet phone call between the terminal B 10 and the external terminals 50 and 60. 43 is a module that completes the voice traffic session between the terminal B 10 and the external terminals 50 and 60 through the address mapping.

The control module 47 is a module for controlling the relay device 40 as a whole so that the corresponding service can be provided in response to a request for a service (remote detection, remote monitoring, remote control, etc.) using the subscriber's private IP address. That is, by providing a user interface screen (GUI) to a subscriber connected to the relay device 40, the subscriber controls the modules for providing the corresponding service when the subscriber requests a specific service.

The database 48 stores data for operating the relay device 40 such as private IP address related information, information received from the terminal B 12, subscriber related information, and the like. In FIG. 2, one database 48 is shown for convenience of description, but in actual operation, a separate database may be constructed and operated for each module of the relay device 40.

First embodiment

3 is a flow chart for explaining the first embodiment of the present invention. In the first embodiment, when the terminal B 12 is a detection terminal, a specific event occurs in the terminal B 10 when the specific event occurs. 40 is a function for notifying the specific external terminal 50 previously registered.

The terminal B 10, which has been assigned a unique private IP address from the private IP address module 42, notifies the terminal management module 44 of an event occurring in the home, such as a fire, an outside visit, or illegal intrusion. Step 301). Since the function of the terminal B 12 used as the detection terminal is similar to those of the conventional security system, the description of the function of detecting an event occurrence and informing it is omitted. In this case, when the terminal B 12 includes a surveillance camera, the terminal B 12 may transmit the image information together with the event generation signal to the terminal management module 44.

The terminal management module 44 temporarily stores the information from the terminal B 12 in the database 48 and controls the private IP address of the terminal B 12 together with a signal that an event occurrence signal has been received from the terminal B 12. The control module 47 receives the public IP address corresponding to the private IP address received through the private IP address module 42 and notifies it to the address mapping module 43. (Step 302).

The address mapping module 43 maps the private IP address and the retrieved public IP address and notifies the control module 47 of the completion of the mapping (step 303).

The control module 47 notified of the completion of mapping notifies the fact that the event has occurred to the external terminal 50 having the corresponding public IP address through the Internet (step 304). At this time, several public IP addresses may be set to correspond to one private IP address. In such a case, an event is generated in a different transmission form (SMS, voice message, e-mail, etc.) to a plurality of external terminals simultaneously. Can be notified.

The subscriber who has been notified of the occurrence of the event can be dispatched directly to the premises where the terminal B 12 where the event occurred is installed or connected to the relay device 40 to monitor the circumstance of the premises. In addition, according to the importance of the event, the subscriber sets a function such as immediate notification or related information storage, and if the event is not important, the subscriber stores the contents in the database 48 without notifying the relevant event immediately. The subscriber can be connected to the relay device 40 to confirm.

In addition, the terminal management module 44 periodically checks the communication status with the terminal B 12, and if it does not communicate for a predetermined time, regards it as an error of the terminal B 12 and notifies the control module 47 of the error. The control module 47 notifies the external terminal 50 of the preset occurrence of an error of the terminal B 12 as the event occurs.

Second embodiment

Figure 4 is a flow chart for explaining the second embodiment according to the present invention, the subscriber connected to the relay device 40 using the external terminal 60 to monitor the situation of the home or the state of the terminal B (12), etc. It relates to a function that allows to control the indoor terminal B (12) for home networks.

The subscriber who wants to remotely monitor or remotely control the terminal B 12 accesses the relay device 40 using the external terminal 60 (step 401). Application service providing system 40 has a unique public IP address it is possible to connect directly from the external terminal (60).

The authentication management module 41 requests the visitor to input an ID and password, and when the subscriber inputs his ID and password, the authentication management module 41 authenticates whether the accessor is a legitimate subscriber (step 402).

When the authentication is completed, the control module 47 sends the ID of the authenticated subscriber to the private IP address module 42 to search for the corresponding private IP address (step 403).

The control module 47 transmits the public IP address of the external terminal 60 connected to the retrieved private IP address to the address mapping module 43, and the address mapping module 43 maps the private IP address and the public IP address. (Step 404).

When the mapping is completed, the control module 47 displays a GUI for remote monitoring and remote control to the connected external terminal 60 to selectively use a desired service (step 405).

When the subscriber selects the remote monitoring mode, the control module 26 allows the subscriber to monitor the status information, pre-stored image information, or current image information of the terminal B 12 through the GUI (step 406). Pre-stored image information is image information that the relay device 40 receives from the terminal B 12 and stores it in the database 48 when an event occurs in the terminal B 12 or for a predetermined time set by the subscriber. You can monitor your home situation at any time.

If you want to monitor the current indoor situation, the control module 47 transmits a detection command to the private IP terminal 12 through the mapped private IP address and displays the image information received from the private IP terminal 10 according to the detection command. It transmits in real time to the external terminal 30 connected through the mapped public IP address. In this case, when security is required for the transmitted information, the information is encrypted through the encryption module 22 and then transmitted.                     

When the subscriber finishes monitoring and logs out (step 407), the control module 47 notifies the address mapping module 43 to release the address mapping relationship (step 408).

If the subscriber wants to finish the monitoring and remote control, go to step 405 to select the remote control mode through the GUI.

When the subscriber selects the remote control mode, the control module 26 provides a GUI to control the terminal B 12 and receives the control command from the subscriber. 12), and transmits the operation result of the terminal B 12 according to the control command to the external terminal 60 (step 409). At this time, the GUI for control may be differently provided according to the type of the terminal B (12). This is then the same as steps 407 and 408 described above.

In addition to remote monitoring or remote control, when the subscriber changes the subscriber information, the information of the terminal B 12, etc. through the GUI, the information can be transmitted to the private IP address module 42 to update the corresponding information stored in the database 48. It is self-evident.

In the first embodiment, the public IP address of the external terminal must be registered in advance in the relay device 40, but in the second embodiment, an unspecified external terminal can be used.

Third embodiment

5 and 6 illustrate a case of providing an Internet outgoing call service and an Internet incoming call service, respectively, in a flowchart for explaining a third embodiment of the present invention.

When the terminal B 12 requests the call connection to the relay device 40 using the Internet telephony protocol (step 501), the control module 47 analyzes the outgoing message from the terminal B 12 to the terminal B (12). In step 502, the private IP address and the public IP address of the telephone connection target are found and transmitted to the address mapping module 43.

The address mapping module 43 maps a private IP address and an IP address of a Voice over Internet Protocol (VoIP) gateway (not shown) for Internet telephony (step 503). The VoIP gateway may be any one of the external terminals 50 and 60 in FIG. When the mapping is completed, the call processing module 46 transmits the IP address of the external terminal 60 to be dialed to the VoIP gateway to complete the voice traffic session between the terminal B 12 and the external terminal 60 (step 504).

When the session is completed, mutual phone calls can be made directly through the address mapping between the external terminal 60 and the terminal B 12 (step 505).

When the call connection request is received from the external terminal 60 to the terminal B 12 from the external terminal 60 to the call processing module 46 (step 601), the control module 47 receives the received message. Analyze the public IP address of the external terminal 60 as the caller and the private IP address of the terminal B (12) to be called, and transmits it to the address mapping module 43 (step 602).

The address mapping module 43 maps the public IP address and the private IP address (step 603). When the mapping is completed, the call processing module 46 completes the voice traffic session between the terminal B 12 having the corresponding private IP address and the external terminal 60 as the originator (step 604).

When the session is completed, it is possible to directly make a mutual telephone call through the address mapping between the external terminal 60 and the terminal B 12 (step 605).

As described above, the present invention allows the subscriber terminal to be always connected to the Internet by using a private IP address, so that the subscriber can be remotely detected, remotely monitored, remotely controlled, and internet-phoned without being assigned a unique public IP address. It is possible to provide services such as incoming and outgoing calls. Through the Internet access method using such private IP address, subscriber terminals can always be managed in the network, and the subscriber environment from others can be protected by not using public IP address. It has an effect.

Claims (14)

delete In a system for providing an Internet-based application service, A connection device for allowing network access of different paths to the connected terminal according to the subscription of the service; And Communicate with external terminals connected to the Internet with a public IP address, assign a private IP address to a subscriber terminal connected through the access device, and communicate with the subscriber terminals using the assigned private IP address. It includes a relay device for relaying communication between the terminal and the external terminal, The relay device is an application service providing system, characterized in that for temporarily storing the information received from the subscriber terminal and provides the stored information when requested by an external terminal. The method of claim 2, wherein the relay device An authentication module for authenticating an external terminal user connected to the relay device to use the application service; A private IP address module for assigning and managing a private IP address to a subscriber station connected to the relay device through the access device; An address mapping module for mapping a private IP address and a public IP address to mediate communication between a subscriber station assigned a private IP address and an external terminal having a public IP address; A terminal management module for monitoring a state of subscriber stations assigned a private IP address and managing information received from the subscriber terminals; A database storing information necessary for operation of the relay device; And General control of the relay device to relay the communication between the address-mapped subscriber station and the external terminal, and includes a control module for allowing the authenticated subscriber to monitor the status of the subscriber station and information received from the subscriber station Application service provision system. The method of claim 3, wherein When a call connection request from a subscriber station or an external terminal receives a call connection module further comprises a call processing module for completing the voice traffic session between the subscriber station and the external terminal through the address mapping to enable mutual voice communication Application service provision system. The method according to claim 3 or 4, Application service providing system, characterized in that it further comprises an encryption module for encrypting information between the subscriber station and the external terminal. The method of claim 3, wherein The address mapping module is an application service providing system, characterized in that for mapping the private IP address and public IP address in the form of NAT (Network Address Translation). The method of claim 3, wherein The address mapping module is configured to map a private IP address and a public IP address by assigning information of a private IP address to a port of a public IP address and assigning information of a public IP address to a port of a private IP address. Providing system. The method of claim 3, wherein The control module, when receiving the event occurrence signal from the subscriber station application service providing system characterized in that notifying the event occurrence to at least one external terminal having a public IP address corresponding to the IP address of the subscriber station. The method of claim 2, And the access device determines whether to access the relay device by using a hardware address of a subscriber station connected or a private IP address granted from the relay device. In the method for providing an Internet-based application service, A first step of assigning a private IP address to a terminal of a subscriber subscribed to the application service; A second step of establishing a logical private network path with the subscriber station using the private IP address granted in the first step; A third step of mapping a private IP address having a network path set in the second step and a public IP address of an external terminal connected to the Internet; And Relaying communication between the subscriber station mapped to the address-mapped terminal and the external terminal in the third step. The method of claim 10, The third step is an application service providing method characterized in that when the external terminal is connected to use the service after mapping the connected external terminal private IP address and public IP address. The method of claim 11, In the fourth step, the communication between the external terminal and the subscriber station is a communication service for remote monitoring or remote control of the subscriber station using the external terminal. The method of claim 10, In the fourth step, the communication between the external terminal and the subscriber station provides the application service, characterized in that for transmitting the event signal generated in the subscriber terminal to the external terminal. The method of claim 10, The method of claim 4, wherein the communication between the external terminal and the subscriber station is Internet telephone communication between the subscriber station and the external terminal.

Images