KR101114921B1 - Processing apparatus and method for providing virtual private network service on mobile communication - Google Patents

Abstract

PURPOSE: A device and a method for providing a virtual private network service in a mobile network are provided to obtain an effect like the construction of a virtual private network between a user server and a mobile using a data modem for a mobile network and a VPN server. CONSTITUTION: A user server(100) is connected to a mobile communications terminal by an Ethernet. The user server sends the Ethernet frame to a mobile VPN server(200) as an IP address of the mobile communications terminal(300). The frame is transmitted to a mobile VPN server which seems like the mobile communications terminal. The mobile VPN server which received the Ethernet frame sends the connection request signals to the mobile communications service through a mobile communications service provider. The connection request signal is SMS or M2M transmitted from the mobile communications service provider. The mobile VPN server matches telephone numbers of each mobile communications terminal according to multiple mobile communications terminals and IP addresses.

Description

PROVESSING APPARATUS AND METHOD FOR PROVIDING VIRTUAL PRIVATE NETWORK SERVICE ON MOBILE COMMUNICATION}

The present invention relates to an apparatus and method for providing a virtual private network service in a mobile communication, and more particularly, to find and connect to a specific terminal in a user server using a dynamic IP pre-assigned for each terminal in a virtual private network. Field of the Invention The present invention relates to an apparatus and method for providing a virtual private network service in a mobile communication in which data communication is possible.

In the prior art, data communication between a user server and a mobile communication terminal is performed through the following process.

1 is a diagram illustrating a process of data communication between a conventional user server and a mobile communication terminal. As shown in FIG. 1, the mobile communication terminal 30 requests a connection to a user server 10 that already knows an IP address. Accordingly, the data modem 20 requests a mobile communication company (for example, SKT, KT or LG U +) server to connect to the user server, and the mobile communication company server gives the mobile terminal a dynamic IP address. . Using this floating IP address, the mobile communication terminal 30 connects to the user server and performs data communication between the user server 10 and the mobile communication terminal 30.

In the conventional technology as described above, when the user server 10 wants to perform data communication with a specific mobile communication terminal 30, the phone number of the specific mobile communication terminal is known, but the specific mobile communication terminal has not yet started data communication. Therefore, even if the carrier server is not connected to the server, even if the connection is assigned to the floating IP address because the user server does not know that there was a problem that can not start Ethernet (ethernet) communication.

In addition, there is a problem of security that data information is exposed when passing through the mobile communication network and the Internet network.

A virtual private network (VPN) is a data network in which public infrastructure is configured for the purpose of an individual company, using tunneling protocols and security procedures. In other words, the virtual private network is a contrast with the private network or private line that can be used only by one company.

VPNs begin with the idea of providing services that are almost the same as leased lines, while lowering costs by sharing the public network, rather than renting lines individually by all companies. Telephone companies share a shared resource that is secure for voice messages. Virtual private networks enable the sharing of public network resources that are also secure for data. Companies that want a virtual private network often use it for extranets or intranets between companies that span large areas.

Therefore, various devices and methods for processing the VPN service have been devised for data communication between the mobile communication terminal and the user server. For example, Application No. 10-2001-0067700, Application No. 10-2004-0016231, etc., which focus only on how to implement a VPN in a mobile communication network. There was still a problem of not presenting a method, procedure, or device for implementing a connection.

The apparatus and method for providing a virtual private network service in a mobile communication according to the present invention have been made to solve the above problems of the prior art, and have the following problems.

First, a virtual private network is established between a user server and a mobile communication terminal to provide a procedure or method for allowing a user server to access the Internet for data communication to a mobile communication terminal.

Second, to solve the above problems, it is to remove the existing simple mobile data modem for mobile communication, and to propose an apparatus and method for providing a virtual private network service using a mobile data modem and a mobile VPN server.

Third, the mobile VPN server provides a virtual private network service in mobile communication through a mobile VPN server having an address table that stores each IP address pre-assigned to phone numbers of a plurality of mobile communication terminals. An apparatus and method are provided.

Fourthly, a mobile communication terminal that receives a connection request signal from a user server through a mobile communication company is to provide an apparatus and method for providing a virtual private network service in mobile communication, which can be automatically connected to data communication to the user server.

The problem of the present invention is not limited to those mentioned above, and other problems not mentioned will be clearly understood by those skilled in the art from the following description.

In a method of providing a virtual private network service in a mobile communication according to the present invention, in a method of providing a virtual private network service between a user server and a mobile communication terminal through a mobile VPN server, the user server is connected to the mobile VPN server by the IP of the mobile communication terminal. Transmitting an Ethernet frame to an address; When the mobile VPN server is confirmed that the mobile communication terminal is not connected to the mobile VPN server, the mobile VPN server instructs to access the mobile VPN server by using the telephone number of the mobile communication terminal corresponding to the IP address of the mobile communication terminal. Transmitting a connection request signal; The mobile communication terminal receiving the connection request signal, transmitting a connection request signal for requesting connection to the mobile VPN server; And receiving the connection request signal from the mobile communication terminal, assigning an IP address to the mobile communication terminal.

In the method of providing a virtual private network service in a mobile communication according to the present invention, the mobile VPN server receiving the Ethernet frame from the user server has an address table in which telephone numbers and IP addresses of respective mobile communication terminals are matched. The method may further include checking a phone number of the mobile communication terminal corresponding to the IP address, and determining that the mobile communication terminal is not connected to the mobile VPN server.

In the method for providing a virtual private network service in a mobile communication according to the present invention, the connection request signal may be a signal instructing the mobile communication terminal to connect to the mobile communication terminal via SMS or M2M through a server of a mobile communication company.

The method for providing a virtual private network service in a mobile communication according to the present invention may be characterized in that the mobile communication terminal receives the connection request signal and automatically transmits a connection request signal to the mobile VPN server.

In the method for providing a virtual private network service in a mobile communication according to the present invention, the mobile VPN server receiving a connection request signal from the mobile communication terminal authenticates whether the mobile communication terminal is a mobile communication terminal registered with the mobile VPN server, The method may further include assigning an IP address A1 to the mobile communication terminal.

In a method of providing a virtual private network service in a mobile communication according to the present invention, a method of providing a virtual private network service between a mobile terminal and the other mobile terminal through a mobile VPN server, wherein the mobile terminal is connected to the mobile VPN server. Transmitting an Ethernet frame to an IP address of the other mobile communication terminal; If it is confirmed that the other mobile communication terminal is not connected to the mobile VPN server, the mobile VPN server accesses the mobile VPN server with the telephone number of the other mobile communication terminal corresponding to the IP address of the other mobile communication terminal. Transmitting a connection request signal instructing a message to be sent; The other mobile communication terminal receiving the connection request signal, transmitting a connection request signal requesting a connection to the mobile VPN server; And receiving the connection request signal from the other mobile communication terminal, assigning an IP address to the other mobile communication terminal.

In accordance with another aspect of the present invention, an apparatus for providing a virtual private network service in a mobile communication is provided. The apparatus for providing a virtual private network service between a user server and a mobile communication terminal through a mobile VPN server, the apparatus comprising: a user server; A mobile VPN server receiving an Ethernet frame from the user server to an IP address of a mobile communication terminal and transmitting an access request signal requesting to access the mobile communication terminal; And a mobile communication terminal receiving a connection request signal from the mobile VPN server and transmitting a connection request signal requesting a connection to the mobile VPN server.

In the apparatus for providing a virtual private network service in a mobile communication according to the present invention, the mobile VPN server includes an address table in which telephone numbers and IP addresses of respective mobile communication terminals are matched, and the mobile table is connected to the mobile terminal through the address table. The VPN server may match the IP address of the mobile communication terminal received from the user server with the telephone number of the mobile communication terminal, and determine whether the mobile communication terminal is connected to the mobile VPN server.

The apparatus for providing a virtual private network service in a mobile communication according to the present invention may be characterized in that the connection request signal comprises SMS or M2M transmitted through a mobile communication company.

In the apparatus for providing a virtual private network service in a mobile communication according to the present invention, the connection request signal may be automatically transmitted from the mobile communication terminal.

The apparatus for providing a virtual private network service in mobile communication according to the present invention may be characterized in that the mobile VPN server receiving the connection request signal includes an authentication processing unit for authenticating the mobile communication terminal that has made the connection request.

The apparatus and method for providing a virtual private network service in a mobile communication according to the present invention having the above configuration have the following effects.

First, a virtual private network is established between the user server and the mobile communication terminal, so that the user server can access the Internet from the mobile communication terminal that is in a connection waiting state.

Second, by presenting an apparatus and method for providing a virtual private network service using a data modem for a mobile communication and a mobile VPN server, a virtual private network is established between a user server and a mobile communication terminal.

Third, through a user VPN virtual private network to a plurality of mobile communication terminal through a mobile VPN server having an address table that stores each IP address pre-assigned to the phone number of the plurality of mobile communication terminals This has a possible effect.

Fourth, the mobile communication terminal receiving the access request signal from the user server through the mobile communication company has an effect that can be automatically connected to the data communication to the user server.

Fifth, through the mobile VPN server, data communication between mobile communication terminals can also be possible.

1 is a diagram illustrating a process of data communication between a conventional user server and a mobile communication terminal.
2 is a diagram illustrating a process of performing data communication between a user server and a mobile communication terminal by the apparatus and method for providing a virtual private network service in a mobile communication according to the present invention.

As used herein, the singular forms "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It is to be understood that the present invention means that there is a part or a combination thereof, and does not exclude the presence or addition possibility of one or more other features or numbers, step operation components, parts or combinations thereof.

2 is a diagram illustrating a process of performing data communication between a user server and a mobile communication terminal by the apparatus and method for providing a virtual private network service in a mobile communication according to the present invention.

Next, a method for providing a virtual private network service in a mobile communication according to the present invention will be described in detail with reference to FIG. 2.

First, when the user server 100 is connected to the mobile communication terminal by Ethernet (ethernet) to occur data communication, the user server 100 to the mobile VPN server 200 IP address of the mobile communication terminal 300 Send an Ethernet frame (such as a TCP connection request) to (assuming 192.168.33.10). This frame is forwarded locally to the mobile VPN server (assuming a fixed IP address: 200.200.200.10) that looks like a mobile communication terminal (IP address: 192.168.33.10), and the mobile VPN server 200 that receives the Ethernet frame Confirm that the mobile terminal with the IP address 192.168.33.10 is not connected on the data communication network and send a connection request signal to the mobile terminal through the mobile company (e.g., SKT, KT, LG U +). .

Here, the access request signal may be a message such as SMS or M2M transmitted by the mobile communication company. The mobile VPN server acquires the phone numbers of the mobile communication terminals corresponding to the IP addresses through an address table in which the phone numbers and IP addresses of the mobile communication terminals according to the plurality of mobile communication terminals are matched. You can check it.

The mobile communication terminal 300 receiving the access request signal through the mobile communication company requests the server of the mobile communication company to connect to the mobile VPN server (200.200.200.10). In this case, the mobile communication company gives the mobile communication terminal an IP address (for example, 192.168.0.10), and the mobile communication company connects to the mobile VPN server (IP address: 200.200.200.10). In this case, the mobile communication terminal may receive a connection request signal and automatically perform a connection request to the mobile VPN server to the mobile communication company.

Next, through the mobile communication company, the mobile VPN server receiving the connection request authenticates whether the mobile terminal 300 is a mobile communication terminal registered in the user server 100 and the mobile VPN server 200, and if authentication passes, The communication terminal 300 is assigned an IP address 192.168.33.10.

When the above process is completed, the user server 100 and the mobile communication terminal 300 is established as being connected to the virtual private network through the mobile VPN server 200, in which the mobile communication terminal is a mobile VPN server Will appear to exist with the IP address 192.168.33.10. As a result, the user server performs a process for allowing the mobile communication terminal to access data communication.

The following describes a method for data communication between the mobile communication terminal 300a and another mobile communication terminal 300b through a mobile VPN server.

The mobile communication terminal 010-1234-5678 transmits an Ethernet frame to the mobile VPN server together with the phone number information of another mobile communication terminal 010-5678-1234 to which data is to be communicated. The mobile VPN server receiving the connection request signal checks that the IP address (eg, 192.168.33.20) of the 010-5678-1234 terminal is not connected by referring to the address table, and then attempts to connect through the mobile communication company. Sends a connection request signal to communication terminal 010-5678-1234. The 010-5678-1234 terminal receiving the access request signal transmits a connection request signal to the mobile VPN server manually or automatically, and then the mobile VPN server authenticates whether the 010-5678-1234 mobile communication terminal is a registered terminal and registers it. In the case of a mobile communication terminal, a local IP address 192.168.33.20 is assigned to the mobile communication terminal (telephone number: 010-5678-1234).

When the above procedure is completed, the mobile communication terminal (010-1234-5678) and the other mobile communication terminal (010-5678-1234) are established as being connected to the virtual private network through the mobile VPN server 200, In the mobile communication terminal 010-1234-5678, another mobile communication terminal 010-5678-1234 appears to exist with the IP address 192.168.33.20 through the mobile VPN server. As a result, a process for allowing a mobile terminal user to access data communication with another mobile communication terminal is performed.

Next, a virtual private network service providing apparatus for mobile communication according to the present invention will be described in detail with reference to FIG.

The user server 100 has a local IP address (for example, 192.168.33.2), and a mobile communication terminal (for example, phone number: 010-1234-5678, IP address: 192.168.33.10) to which data is to be communicated. Has information. The user server 100 is a mobile VPN server that looks like a mobile communication terminal (IP address 192.168.33.10) for data communication in order to perform data communication with the IP address 192.168.33.10 of the mobile communication terminal to perform data communication. Send a TCP connection request.

The mobile VPN server 200 is projected with respect to the user server 100 like the mobile communication terminal to which the user server 100 wants to communicate data. When the user server 100 receives an Ethernet frame from the user server, the user server 100 attempts to communicate data. Check that the telephone number 010-1234-5678 of the mobile communication terminal corresponding to the IP address 192.168.33.10 of the mobile communication terminal is connected. Thereafter, the mobile VPN server sends a connection request signal to the mobile communication terminal (010-1234-5678) through the mobile communication company. In this case, the access request signal may be SMS or M2M provided by the mobile communication company.

When there are a plurality of mobile communication terminals, the mobile VPN server may include an address table in which phone numbers and IP addresses of the mobile communication terminals match.

The mobile VPN server receives the connection request signal from the mobile communication terminal 300 through the mobile communication company, determines whether the mobile communication terminal that transmits the connection request signal is registered, and if so, the mobile communication terminal ( 010-1234-5678) to give the local IP address 192.168.33.10. However, the mobile communication terminal 300 may be a plurality of mobile communication terminals connected by Ethernet. In other words, it will be referred to as a generic term for the equipment that communicates with Ethernet over a VPN constructed in a mobile communication network, such as a programmable logic controller (PLC), a sensor, an actuator, and other controllers. It is not limited.

The mobile communication terminal 010-1234-5678 receives a connection request signal from the mobile VPN server 200, and automatically or manually transmits a connection request signal to the mobile VPN server through the mobile communication company. In this case, the mobile communication terminal receives an IP address (for example, 192.168.0.10) from a server of the mobile communication company. When the connection request signal is transmitted and authenticated with the registered mobile communication terminal from the mobile VPN server, the local IP address 192.168.33.10 is finally obtained from the mobile VPN server.

The user server 100 may allow data communication to the mobile communication terminal 300 to communicate data through the mobile VPN server 200, the user server 100, the mobile VPN server 200 and the mobile communication terminal 300 ) Is constructed as one connected by a virtual private network (VPN) (400).

Hereinafter, exemplary embodiments of the present invention have been described in detail with reference to the accompanying drawings. However, the present invention is not limited to the embodiments described herein but may be embodied in other forms. Rather, the embodiments introduced herein are provided so that the disclosed contents can be thorough and complete, and enough to convey the technical spirit of the present invention to those skilled in the art.

1: router
10: conventional user server
20: data modem for mobile communication
25: server of the mobile carrier
30: mobile communication terminal
100: your server
200: mobile VPN server
300: mobile communication terminal
400: virtual private network in mobile communication

Claims (12)

delete delete In the virtual private network service providing method between a user server and a mobile communication terminal through a mobile VPN server,
Transmitting, by the user server, an Ethernet frame to the mobile VPN server at an IP address of the mobile communication terminal;
When the mobile VPN server is confirmed that the mobile communication terminal is not connected to the mobile VPN server, the mobile VPN server instructs to access the mobile VPN server by using the telephone number of the mobile communication terminal corresponding to the IP address of the mobile communication terminal. Transmitting a connection request signal;
The mobile communication terminal receiving the connection request signal, transmitting a connection request signal for requesting connection to the mobile VPN server; And
The mobile VPN server receiving the connection request signal from the mobile communication terminal, comprising the step of assigning an IP address to the mobile communication terminal,
The connection request signal,
Method for providing a virtual private network service in a mobile communication, characterized in that the signal for commanding the mobile communication terminal to connect to the mobile communication terminal via SMS or M2M.
In the virtual private network service providing method between a user server and a mobile communication terminal through a mobile VPN server,
Transmitting, by the user server, an Ethernet frame to the mobile VPN server at an IP address of the mobile communication terminal;
When the mobile VPN server is confirmed that the mobile communication terminal is not connected to the mobile VPN server, the mobile VPN server instructs to access the mobile VPN server by using the telephone number of the mobile communication terminal corresponding to the IP address of the mobile communication terminal. Transmitting a connection request signal;
The mobile communication terminal receiving the connection request signal, transmitting a connection request signal for requesting connection to the mobile VPN server; And
The mobile VPN server receiving the connection request signal from the mobile communication terminal, comprising the step of assigning an IP address to the mobile communication terminal,
The mobile communication terminal,
And receiving the connection request signal and automatically transmitting a connection request signal to the mobile VPN server.
In the virtual private network service providing method between a user server and a mobile communication terminal through a mobile VPN server,
Transmitting, by the user server, an Ethernet frame to the mobile VPN server at an IP address of the mobile communication terminal;
When the mobile VPN server is confirmed that the mobile communication terminal is not connected to the mobile VPN server, the mobile VPN server instructs to access the mobile VPN server by using the telephone number of the mobile communication terminal corresponding to the IP address of the mobile communication terminal. Transmitting a connection request signal;
The mobile communication terminal receiving the connection request signal, transmitting a connection request signal for requesting connection to the mobile VPN server;
The mobile VPN server receiving a connection request signal from the mobile communication terminal, assigning an IP address to the mobile communication terminal; And
The mobile VPN server receiving the connection request signal from the mobile communication terminal authenticates whether the mobile communication terminal is a mobile communication terminal registered in the mobile VPN server, and gives an IP address A1 to the mobile communication terminal. Method of providing a virtual private network service in a mobile communication comprising a.
The method according to any one of claims 3 to 5, wherein the virtual private network service in the mobile communication is provided.
The mobile VPN server, which has received the Ethernet frame from the user server, of the mobile communication terminal corresponding to the IP address through an address table in which telephone numbers and IP addresses of respective mobile communication terminals are matched. And checking a phone number and determining whether the mobile communication terminal is connected to the mobile VPN server.
delete delete In the virtual private network service providing device between the user server and the mobile communication terminal through a mobile VPN server,
User server;
A mobile VPN server receiving an Ethernet frame from the user server to an IP address of a mobile communication terminal and transmitting an access request signal requesting to access the mobile communication terminal; And
Receiving a connection request signal from the mobile VPN server, and includes a mobile communication terminal for transmitting a connection request signal for requesting a connection to the mobile VPN server,
The access request signal is a virtual private network service providing device in a mobile communication, characterized in that consisting of SMS or M2M transmitted through a mobile communication company.
In the virtual private network service providing device between the user server and the mobile communication terminal through a mobile VPN server,
User server;
A mobile VPN server receiving an Ethernet frame from the user server to an IP address of a mobile communication terminal and transmitting an access request signal requesting to access the mobile communication terminal; And
Receiving a connection request signal from the mobile VPN server, and includes a mobile communication terminal for transmitting a connection request signal for requesting a connection to the mobile VPN server,
And the connection request signal is automatically transmitted from the mobile communication terminal.
In the virtual private network service providing device between the user server and the mobile communication terminal through a mobile VPN server,
User server;
A mobile VPN server receiving an Ethernet frame from the user server to an IP address of a mobile communication terminal and transmitting an access request signal requesting to access the mobile communication terminal; And
Receiving a connection request signal from the mobile VPN server, and includes a mobile communication terminal for transmitting a connection request signal for requesting a connection to the mobile VPN server,
The mobile VPN server receiving the connection request signal,
And an authentication processing unit for authenticating the mobile communication terminal that has made the connection request.
12. The method according to any one of claims 9 to 11,
The mobile VPN server,
It includes an address table that matches the phone numbers and IP addresses of each mobile terminal,
The mobile VPN server matches the IP address of the mobile communication terminal received from the user server with the telephone number of the mobile communication terminal through the address table, and determines whether the mobile communication terminal is connected to the mobile VPN server. Apparatus for providing a virtual private network service in a mobile communication, characterized in that.

Images