KR100856642B1 - Method of Providing Satellite Internet Service using DHCP and IP/MAC and System using the Same - Google Patents

Abstract

The present invention relates to a satellite internet service providing method and a satellite internet network and subscriber management system suitable for the same, and more particularly, to a satellite internet service providing method of dynamically allocating an official IP address to a subscriber and authenticating a user through a MAC address. . A satellite internet service providing method according to the present invention includes a first step of authenticating a subscriber through a subscriber ID in a satellite internet domain; A second step of dynamically allocating a public IP address and a PID corresponding to the subscriber ID in the satellite internet domain to establish communication between the subscriber station and the satellite internet domain; Generating, in the satellite Internet domain, a data stream including PID information assigned to the subscriber in a data packet received by the subscriber to any host on a communication network, received at a public IP address assigned to the subscriber; ; Transmitting the data stream in the satellite Internet domain to satellite receiving means of the subscriber station through a satellite; And a fifth step of the subscriber station selectively receiving data matching the PID information of the subscriber in the data stream, thereby providing a service restricted when the virtual IP address is used. There is an effect that can block the use of illegal services.

Description

Method of Providing Satellite Internet Service using DHCP and IP / MAC and System using the Same}

1 is a block diagram of a satellite Internet service network according to an embodiment of the present invention.

2 is a communication packet format diagram between a subscriber station and a subscriber management system according to an embodiment of the present invention;

3 is a communication packet format diagram between a subscriber management system and a stream encoder according to an embodiment of the present invention;

4 is a table illustrating protocol primitives between a subscriber station and a subscriber management system according to an embodiment of the invention.

5 is a table illustrating protocol primitives between a subscriber management system and a stream encoder according to an embodiment of the present invention.

6 is a flowchart illustrating a satellite Internet service method according to an embodiment of the present invention.

7 is a flowchart illustrating an abnormal termination processing method according to an embodiment of the present invention.

<Description of Symbols for Major Parts of Drawings>

110: subscriber station 111: RAS                 

112: router 113: subscriber management system

114: cache server 115: stream encoder

116: modulator 117: satellite transmission device

118: satellite

The present invention relates to a satellite Internet service technology, and more particularly, assigns a public IP address to a subscriber by using a Dynamic Host Configuration Protocol (DHCP) technique, and assigns a MAC address of a satellite receiver to the public IP address. The present invention relates to a satellite internet service technology capable of authenticating subscribers by mapping to a network.

The satellite internet service supports receiving data of about 3 Mbps (bits per seconds) to subscribers who own satellite receiver antennas using satellite data. Say that.

A domain is an area where any network policy or routing protocol is used. Satellite Internet Domain means a communication network within a satellite Internet service provider. In general, a satellite Internet domain is a gateway connecting an external network such as the Internet to a satellite Internet domain, a subscriber management system for receiving subscriber information and subscriber authentication, and a satellite. It includes a stream encoder, a modulator, and a satellite transmitting device that collects packets requested by Internet service subscribers and converts them into data streams suitable for satellite transmission.

However, the conventional satellite Internet service uses a method of accessing specific sites and services on the Internet by allocating a virtual IP address to a subscriber rather than a public IP address authorized by the NIC in order to accommodate a plurality of subscribers. Accordingly, there has been a problem in that a restriction on the use of sites and services requiring public IP addresses and errors in Internet access time have to be considered. In particular, SLIP, PPP, Telnet, remote login, HTTP, FTP, TFTP, SNMP, Usenet, Gopher, IRC, real play data transfer, network games, and real-time services are not supported or subject to restrictions.

In addition, because the virtual IP address is used, the subscriber should not connect directly to a specific host on the Internet, but rather through a system belonging to a satellite Internet domain such as a proxy server. There is a problem in that the service speed is limited even if the communication network is afforded by the bottleneck.

In addition, since the conventional satellite Internet service authenticates the subscriber by a simple method using only a PID, a subscriber ID, and a password, an illegal service of a subscriber such as receiving multiple satellite Internet services by using one ID. There is a problem that it is difficult to limit the use.

The present invention is to solve the above problems, by using a public IP address to the subscriber dynamically, the satellite Internet service that can be directly connected to the Internet without receiving a service that is limited when using a virtual IP address, the satellite Internet domain The purpose of the present invention is to provide a satellite Internet system and a subscriber management system.

In addition, according to a preferred embodiment of the present invention, by authenticating the subscriber by registering the MAC address of the subscriber satellite receiving means, a satellite Internet service providing method that can block the illegal use of the service, and a satellite Internet system and subscriber management system suitable thereto There is another purpose to provide.

In order to achieve the above object, the satellite Internet service providing method according to the present invention, the first step of authenticating the subscriber through the subscriber ID in the satellite Internet domain; A second step of dynamically allocating a public IP address and a PID corresponding to the subscriber ID in the satellite internet domain to establish communication between the subscriber station and the satellite internet domain; Generating, in the satellite Internet domain, a data stream including PID information assigned to the subscriber in a data packet received by the subscriber to any host on a communication network, received at a public IP address assigned to the subscriber; ; Transmitting the data stream in the satellite Internet domain to satellite receiving means of the subscriber station through a satellite; And a fifth step in which the subscriber station selectively receives data matching the PID information of the subscriber from the data stream.                     

In addition, the satellite Internet service network according to the present invention includes a subscriber management system connected to any plurality of subscriber stations via a communication network, authenticating subscribers, and dynamically allocating a public IP address and PID for each authenticated subscriber; The data packets requested by any of the plurality of subscriber stations to any host connected to the communication network are routed by the public IP address, and the data packets include the PID information of the subscriber corresponding to the public IP address. A stream encoder for generating a data stream; And a subscriber station including satellite receiving means, and selectively receiving a data packet corresponding to its PID from a data stream received through a satellite.

In addition, the satellite Internet connected to the communication network through the RAS according to the present invention, any of a plurality of subscriber stations provided with satellite receiving means, connected to the communication network, comprising a subscriber management system, a stream encoder, and a satellite transmitting device A satellite internet service providing method in a satellite internet service network including a domain and a satellite includes: a first step of establishing a connection between the subscriber station and the RAS; Establishing a connection between the RAS and the subscriber management system through a communication network, wherein the subscriber station transmits a subscriber ID, a password, and a MAC address of the satellite receiving means of the subscriber terminal to the subscriber management system; If the subscriber ID and the password are valid, the subscriber management system dynamically allocates a public IP address and a PID corresponding to the subscriber ID, wherein the public IP address is an address belonging to the satellite Internet domain. A third step of registering mapping information between the public IP address, the PID, and the MAC address corresponding to the subscriber ID, and if it is invalid, disconnecting the connection between the subscriber station and the subscriber management system; A fourth step of the subscriber management system transmitting the public IP address and the PID corresponding to the subscriber ID to a subscriber station; A fifth step of the subscriber station requesting a data packet from any host of the communication network by designating the public IP address assigned to the subscriber station as a reception address; The sixth step, wherein the arbitrary host transmits the data packet to the satellite Internet domain according to the public IP address; The stream encoder generating a data stream including the PID information and the MAC address information corresponding to the public IP address in the data packet; An eighth step of transmitting said data stream to said subscriber station via said satellite; And a ninth step of receiving, by the subscriber station, only data in which the PID and the MAC address information of the subscriber terminal match.

In addition, the subscriber management system for subscriber authentication, which is used for satellite Internet service for transmitting data routed to subscribers via a stream encoder to a subscriber via a satellite network, dynamically authenticates a public IP address to the authenticated subscriber. And a first function of allocating a PID; And a second function of providing the stream encoder with mapping information of an authorized IP address assigned to the authenticated subscriber, a PID, and a MAC address of the satellite receiver provided from the subscriber station.

The above and other objects and features and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing the configuration of a satellite Internet service network according to an embodiment of the present invention. The satellite internet service network is composed of a satellite internet domain 120, satellite 118, subscriber terminal 110, satellite receiving antenna 119, RAS 111, the subscriber terminal 110 receives the satellite data A satellite receiving means such as a satellite receiving card and a modem for PPP communication are provided, and a data receiving channel for communication with the satellite Internet domain 120 and a transmission channel for terrestrial network communication are allocated. The subscriber station 110 and the RAS 111 are connected through a general public network including a PSTN, a cable network, and a LAN, and the RAS 111 and the satellite Internet domain 120 are connected through an internet network.

The satellite internet domain 120 generally includes a router 112, a subscriber management system 113, a web cache server 114, a stream encoder 115, a modulator 116, and a satellite transmission device 117. . The router 112 is responsible for routing the data that the subscriber requests to any host on the Internet to the stream encoder 115 of the satellite Internet domain 120, and the stream encoder 115 sends the routed data to the satellite. Encoding is performed in the form of a data stream such as the following MPEG-2 standard. In this case, the receiving terminal 110 encodes the PID by encapsulating a packet identifier (PID) in the form of a header so as to identify the data requested by the subscriber station 110. The modulator 116 modulates the encoded data stream by a method such as QPSK to be suitable for wireless communication, and the satellite transmitter 117 transmits the modulated data stream to the satellite. The subscriber management system 113 sets up communication between the subscriber and the satellite internet domain 120 to perform the subscriber's authentication function and the subscriber database's management function so as to use the satellite Internet service for the authenticated subscriber. , The subscriber management system 113 has a first function of dynamically assigning an authorized IP address and PID to the authenticated subscriber and the public IP address assigned to the authenticated subscriber, the PID, and the MAC address of the satellite receiving means provided from the subscriber terminal. A second function of providing mapping information of the to the stream encoder is performed. Preferably, a third function of managing subscriber log records and subscriber information may be further performed. This operation of the subscriber management system 113 will be described later.

In the satellite Internet service network, the upstream and downstream data streams for subscriber authentication are transmitted and received with the satellite Internet domain 120 through a terrestrial network through a communication means such as a modem or a LAN card of the subscriber station 110, and the subscriber authentication is successful. The upstream data stream is transmitted using a modem or a LAN card of the subscriber station 110, and the downlink data stream is transmitted to the satellite receiver card mounted on the subscriber station 110 through the satellite 118 and the satellite receiving antenna 119. To receive.

The satellite internet service providing method through the above system is as follows.

First, the satellite internet domain 120 undergoes a first step of authenticating the subscriber through the subscriber ID. When the subscriber connected to the RAS 111 through the public network accesses the subscriber management system 113 of the satellite Internet domain 120 via the Internet, the subscriber station 110 transmits the subscriber's ID and password to the subscriber management system 113. ), The subscriber management system 113 queries the ID and password information stored in the subscriber database to determine whether the subscriber is authenticated.

Preferably, in order to prevent the ID and password from leaking to the non-subscriber in the authentication process, the authentication process is performed between the subscriber station 110 and the subscriber management system 113 using an encryption scheme such as an MD5 algorithm. Communication can be made. More preferably, the ID and password can be searched through a pool of IP addresses to determine if the authenticated subscriber is already using the satellite Internet, and if so, can prompt the user to terminate the existing connection and reconnect. have. If the user does not want to reconnect, the authentication process is terminated. If the user wants to reconnect, the existing connection may be terminated and the following process may be executed using the user information that has already been transmitted.

2 is a protocol format diagram of a subscriber station 110 and a subscriber management system 113 according to an embodiment of the present invention. The subscriber management system 113 communicates with the subscriber station 110 using a transmission control protocol supported by the international standard. The type shown in FIG. 2 distinguishes types of protocol packets between the subscriber management system 113 and the subscriber station 110. The subscriber management system 113 and the user terminal 110 as shown in FIG. It can have protocol primitives. The length represents the length excluding the header of the protocol packet and indicates the actual length of the message following the type and the length. Using this protocol, the subscriber management system 113 operates as a user terminal 110 and a client / server model.

Next, the satellite internet domain 120 performs a second step of dynamically allocating a public IP address and PID corresponding to the subscriber ID to establish communication between the subscriber station 110 and the satellite internet domain 120. The allocation of the public IP address and PID is performed in the subscriber management system 113. The subscriber management system 113 notifies the subscriber station 110 of the assigned IP address, and transmits the subscriber ID and the public to the stream encoder 115. Notify mapping data of IP address and PID. At this time, the subscriber management system 113 reserves an unused PID and IP address from the internally managed satellite PID pool and the IP address pool, to ensure the sameness between the satellite PID pool and the IP address.

The public IP address in the present invention does not mean the address of the subscriber station 110, but is an address of an arbitrary point belonging to the satellite Internet domain 120, and typically means the stream encoder 115, so that the subscriber may Directly connects to any host on the Internet via the public IP address without passing through the satellite internet domain 120, and the host transmits data requested by the user to the satellite internet domain 120 based on the public IP address assigned to the user. do.

Next, the satellite internet domain 120 generates a data stream including PID information assigned to the subscriber in a data packet received by the subscriber to any host on the communication network, received at a public IP address assigned to the subscriber. Go through 3 steps This step is performed at the stream encoder 115, where the data stream may follow the MPEG-2 standard. When data is received using the IP address assigned to the subscriber as the reply address to the satellite Internet domain 120, the stream encoder 115 uses the mapping information of the subscriber's IP address and PID to correspond to the PID corresponding to the IP address. Creates a data stream by encapsulating information in data.

Next, a fourth step of transmitting the data stream in the satellite Internet domain 120 to the satellite receiving means 119 of the subscriber station 110 through the satellite 118 and the subscriber terminal matches the PID information of the subscriber in the data stream. The subscriber is provided with a satellite Internet service through a fifth step of selectively receiving data. Since the process of the fourth step and the fifth step is the same as the general method for providing satellite Internet service, detailed description thereof will be omitted.

However, according to a preferred embodiment of the present invention for restricting illegal use of subscribers, the MAC address of the subscriber satellite receiving means is registered in the satellite Internet domain 120, and information about the MAC address is transmitted to the data transmitted to the subscriber. Is encapsulated in a header and transmitted to the subscriber, and upon reception, the subscriber station 120 can enhance subscriber authentication by selectively receiving only data that matches the MAC address of the satellite receiver.

In order to perform such enhanced subscriber authentication, the second step further includes registering the MAC address of the satellite receiving means of the subscriber station in the satellite internet domain. For example, in the first step, the subscriber station 110 transmits the MAC address information of its satellite receiver 119 to the subscriber management system 113 together with the user ID and password. The management system 113 generates a mapping database of the IP addresses and PIDs dynamically assigned to the authenticated subscriber and the MAC address received at the subscriber terminal 110 and transmits the mapping database to the stream encoder 115.

The third step further includes generating MAC data, wherein the data requested by the subscriber to any host is routed to the IP address of the satellite Internet domain 120 assigned to the subscriber. The encoder 115 encodes the data stream in such a manner that the information on the PID and MAC address mapped to this IP address is included in the header of the data requested by the subscriber.

In addition, in the fifth step, the subscriber station 110 selectively receives data in which PID information and the MAC address information match. Accordingly, conventionally, since the subscriber receives his information only with PID information, the subscriber could illegally use the satellite Internet service by using multiple terminals. However, the satellite Internet service method according to the present invention can only match the PID when the subscriber receives the data. Rather, it requires the MAC address to be matched, thereby preventing illegal use of the service by the subscriber.

3 is a protocol format for communication between the subscriber management system 113 and the MPEG-2 stream encoder 115 according to an embodiment of the present invention. The subscriber management system 113 uses this format to register and delete the MAC address of the satellite receiver of the user who has requested the stream encoder 115 to authenticate for the IP path change. The type shown in FIG. 3 distinguishes the types of protocol packets between the subscriber management system 113 and the stream encoder 115. The protocol between the subscriber management system 113 and the stream encoder 115 as shown in FIG. Primitives can be defined. The length represents the length excluding the header of the protocol packet and is the actual length of the message following the type and the length. The subscriber management system 113 operates with a stream encoder 115 and a client / server model.

According to a preferred embodiment of the present invention, in steps 3 to 5, the subscriber station 110 periodically transmits a connection confirmation signal to the satellite internet domain 120, and the satellite internet domain 120 during the set time. If the access confirmation signal is not received, the limited internet address service can be stopped and the IP address and PID assigned to the subscriber can be recovered, thereby making it possible to efficiently use limited IP address resources. In this case, when the satellite Internet service is performed using the MAC address, when the subscriber's service is stopped, the satellite Internet domain 120 stops the service by deleting the registered subscriber's MAC address.

Preferably, in order to efficiently manage service information for a subscriber, the subscriber management system 113 may further include a log recording function and a subscriber management function. Subscriber log record function includes user access information including service IP address, service start time, service end time, allocated IP address, netmask, satellite repeater, and satellite PID information, service failure information. It also includes a recording function for precautions. The service provider can use the subscriber log record to understand the system's situation and easily prepare a recovery plan in case of a failure. The subscriber management function includes subscriber registration information, subscriber opinion, and subscriber status information management function, so that subscriber registration, modification, deletion, and other customer related work can be performed.                     

More preferably, the subscriber management system 113 is a plurality of subscriber management system 113 is installed in the satellite Internet domain 120, when the authentication function of one subscriber management system 113 is abnormal, the user's request to the other subscriber management system 113 It can guarantee the continuity of satellite internet service by having the function to accept the service.

6 is a diagram illustrating communication between each component according to an embodiment of the present invention. A plurality of subscriber stations 110 and subscriber management systems 113, stream encoders 115, and satellite transmitters 117, which are connected to a communication network via the RAS 111 and are provided with satellite reception means, are constituted. The satellite internet service providing method according to the present invention in a satellite internet service network including a satellite internet domain 120 and a satellite 118 connected to a communication network is as follows.

First, a first step (401, 402) to establish a connection between the subscriber station 110 and the RAS (111). At this time, the connection is made by the user making a PPP connection by calling the RAS 111 using dial-up networking provided by the operating system (401, 402).

Next, a connection is established between the RAS 111 and the subscriber management system 113 through a communication network such as the Internet, and the subscriber station 110 has a subscriber ID, a password, and a MAC of the satellite receiver of the subscriber station 110. The second step 403 is performed to send an address to the subscriber management system 113 to request an authentication. The authentication procedure at this time follows the interface protocol format between the subscriber management system 113 and the subscriber station 110.

Next, when the subscriber ID and the password are valid, the subscriber management system 113 dynamically allocates a public IP address and a PID corresponding to the subscriber ID, but the public IP address is an address belonging to the satellite Internet domain 120. The stream encoder 115 registers mapping information between the public IP address, the PID and the MAC address corresponding to the subscriber ID (404), and if it is invalid, releases the connection between the subscriber station 110 and the subscriber management system 113. Go through the third step. The subscriber management system 113 checks whether the ID exists in the database according to the authentication request, and if there is, compares the transmitted password with the password in the database. Preferably, in order to prevent password theft in the authentication request step between the subscriber terminal 110 and the subscriber management system 113, the encryption is performed using the MD5 algorithm. Since the original value cannot be found, the subscriber management system 113 can also change the information obtained from the database through the MD5 algorithm and directly compare the converted values with each other.

 Next, the subscriber management system 113 passes through a fourth step 405 of transmitting the public IP address and PID corresponding to the subscriber ID to the subscriber terminal 110, thereby authenticating the subscriber, assigning an IP address, and registering a MAC address. This is done.

Next, the subscriber station 110 designates a public IP address assigned to itself as a receiving address to request a data packet from any host of the communication network, and any host requests a user according to the public IP address. The sixth step of transmitting the data packet to the satellite Internet domain 120, the stream encoder 115 goes through a seventh step of generating a data stream including the PID information and MAC address information corresponding to the public IP address in the data packet. (407).

 Next, an eighth step of transmitting the data stream to the subscriber station 110 via the satellite 118, and the subscriber station 110 selectively receives only data that matches the PID and MAC address information of its own from the data stream In the ninth step, satellite Internet service is provided.

The service suspension request (B) process is also accompanied by a series of authentication processes. The procedure is as follows. The user who is using the satellite Internet service requests the service termination request using the ID and password to the subscriber management system 113 to stop the current service (408). Using the transmitted information, the subscriber management system 113 performs an ID and password verification procedure, and then resets all of the user's service information in the IP address pool so that other users can use it. Next, record information necessary for subscriber management, such as service termination time and service usage time of the user, respond to the service termination request 409, and delete the MAC address of the corresponding satellite receiving means registered from the stream encoder 115. Request 410. The subscriber management system 113 receives the response from the stream encoder 115 (411) and records the information about it so that the administrator can take appropriate action when it is not normal. The user terminal 110 terminates the PPP connection with the RAS 111 after receiving a positive response 409 to the termination of the service (412).

7 is a flowchart illustrating a periodic signal corresponding to user abnormal termination according to an embodiment of the present invention. When the PPP connection is terminated without going through the service interruption procedure (B) such as abnormal termination of the subscriber station 110, the subscriber management system 113 automatically terminates the service for such a user for efficient use of a limited IP address. Will go through. Once the satellite internet service path assignment is determined through the authentication process for changing the IP path as described above, the subscriber station 110 periodically accesses the subscriber management system 113 to confirm that the IP address is still being used. The signal is transmitted (501). Upon receipt of the confirmation signal, the subscriber management system 113 confirms whether the user has successfully registered with the stream encoder 115 (502, 503), and responds (504) to the user terminal. At this time, the subscriber management system 113 may record the current time for the user who sent the confirmation signal to the IP address pool. If the user does not receive the confirmation signal within the designated time (t), it is regarded as abnormal termination and randomly terminates the service.

As described above, according to the method and system for providing satellite Internet service according to the present invention, since the subscriber can be assigned a public IP address instead of a virtual IP address, the subscriber can use a site and a service requiring a public IP address. The Internet can be used without any error in time. In addition, since the subscriber of the satellite Internet service accesses the Internet without passing through the proxy server, the subscriber can directly access and communicate with the host on the Internet without the bottleneck in the proxy server.

In addition, according to a preferred embodiment of the present invention, since the subscriber can only receive data packets that match the MAC address of the satellite receiving means when using the satellite Internet service, using a service in a plurality of terminals using one ID This can increase the profitability of the satellite internet service provider.

In addition, preferred embodiments of the present invention are disclosed for the purpose of illustration, those skilled in the art will be able to make various modifications, changes, additions, etc. within the spirit and scope of the present invention, such modifications and modifications belong to the scope of the claims You will have to look.

Claims (18)

A first step of authenticating the subscriber via the subscriber ID in the satellite internet domain; A second step of dynamically allocating a public IP address and a PID (Packet IDentifier) corresponding to the subscriber ID in the satellite internet domain to establish communication between the subscriber station and the satellite internet domain; In the satellite internet domain, generating a data stream including PID information and MAC address assigned to the subscriber in a data packet received by the subscriber to any host on a communication network, received at a public IP address assigned to the subscriber. Third step; Transmitting the data stream in the satellite Internet domain to satellite receiving means of the subscriber station through a satellite; And a fifth step of the subscriber station selectively receiving data in which the PID information of the subscriber and the MAC address information match among the data streams, The second step is And registering the MAC address of the satellite receiving means of the subscriber station in the satellite internet domain. How to provide satellite internet service. delete The method of claim 1, The satellite internet domain includes a router, a subscriber management system, a stream encoder, a modulator, a satellite transmitter, The first step and the second step are performed in the subscriber management system; In the third step, a data packet is routed by the router to the stream encoder to generate a data stream by the stream encoder; The fourth step, the satellite Internet service providing method characterized in that the modulator and the satellite transmission device. The method of claim 3, wherein And the MAC address of the satellite receiving means of the subscriber station is registered in the stream encoder. The method according to any one of claims 1 to 4, The third to fifth steps, The subscriber station periodically transmits an access confirmation signal to the satellite internet domain, and if the satellite internet domain does not receive the access confirmation signal for a set time, it stops the satellite internet service for the subscriber. And recovering the allocated IP address and the PID. The method of claim 3, wherein The third to fifth steps, The subscriber station periodically transmits an access confirmation signal to the satellite internet domain, and if the satellite internet domain does not receive the access confirmation signal for a set time, it stops the satellite internet service for the subscriber. And recovering the allocated IP address and the PID. The method of claim 4, wherein And when the service is suspended, the satellite internet domain deletes the registered MAC address of the subscriber. The method of claim 7, wherein The third to fifth steps, The subscriber station periodically transmits an access confirmation signal to the satellite internet domain, and if the satellite internet domain does not receive the access confirmation signal for a set time, it stops the satellite internet service for the subscriber. And recovering the allocated IP address and the PID. A subscriber management system connected to any of a plurality of subscriber stations via a communication network, authenticating a subscriber, and dynamically allocating a public IP address and PID for each authenticated subscriber; Data packets requested by the plurality of subscriber stations are routed by the public IP address to any of a plurality of hosts connected through a communication network, and the data packets include the PID information of the subscriber corresponding to the public IP address. A stream encoder for generating a data stream; And And a subscriber station including satellite receiving means, and selectively receiving a data packet corresponding to its PID from a data stream received through a satellite. The method of claim 9, The stream encoder requests the MAC address of the satellite receiving means of the subscriber terminal only for an authenticated subscriber to register mapping data between the public IP address information, the PID information, and the MAC address information of the subscriber, and the MAC address. Further comprising address information to generate a data stream; And the satellite receiving means selectively receives data packets corresponding to the PID and the MAC address of the satellite. The method of claim 10, The stream encoder, And deleting the corresponding MAC address information when the service to the subscriber is terminated. The method according to any one of claims 9 to 11, The subscriber station periodically transmits an access confirmation signal to the subscriber management system; And the subscriber management system terminates the service of the subscriber station which has not received the access confirmation signal for a set time. The method according to any one of claims 9 to 11, The subscriber management system, And a log recording function and a subscriber management function of the subscriber. The method of claim 12, The subscriber management system, And a log recording function and a subscriber management function of the subscriber. The method of claim 13, The subscriber's log records include the user's access information including the IP address, service start time, service end time, allocated IP address, netmask, satellite repeater, and satellite PID, service failure information, and precautions. It includes; The subscriber management function includes subscriber registration information, subscriber opinions, and information on subscriber status. Any of a plurality of subscriber stations connected to a communication network via RAS and having satellite receiving means, a satellite internet domain connected to the communication network and comprising a subscriber management system, a stream encoder, and a satellite transmitting device, and a satellite In the satellite internet service providing method in the configured satellite internet service network, Establishing a connection between the subscriber station and the RAS; Establishing a connection between the RAS and the subscriber management system through a communication network, wherein the subscriber station transmits a subscriber ID, a password, and a MAC address of the satellite receiving means of the subscriber terminal to the subscriber management system; If the subscriber ID and the password are valid, the subscriber management system dynamically allocates a public IP address and a PID corresponding to the subscriber ID, wherein the public IP address is an address belonging to the satellite Internet domain. Registering mapping information between the public IP address, the PID, and the MAC address corresponding to the subscriber ID, and if it is invalid, disconnecting the connection between the subscriber station and the subscriber management system; A fourth step of the subscriber management system transmitting the public IP address and the PID corresponding to the subscriber ID to a subscriber station; A fifth step of the subscriber station requesting a data packet from any host of the communication network by designating the public IP address assigned to the subscriber station as a reception address; The sixth step, wherein the arbitrary host transmits the data packet to the satellite Internet domain according to the public IP address; The stream encoder generating a data stream including the PID information and the MAC address information corresponding to the public IP address in the data packet; An eighth step of transmitting said data stream to said subscriber station via said satellite; And a ninth step of the subscriber station selectively receiving only data in which the PID and the MAC address information of the subscriber terminal match. In the subscriber management system responsible for subscriber authentication, which is used for a satellite Internet service for transmitting data routed to a subscriber to a subscriber through a satellite network through a stream encoder, A first function of dynamically allocating a public IP address and PID to the authenticated subscriber; And a second function of providing the stream encoder with mapping information of the authorized IP address, PID, and MAC address of the satellite receiving means provided from the subscriber station. The method of claim 17, The subscriber management system, And a third function of managing subscriber logging and subscriber information.

Images