KR102513695B1 - System for ethernet network extending service base on internet cloud and method thereof - Google Patents

Abstract

The present invention relates to an Internet cloud-based Ethernet network extension service method, and more specifically, provides the same environment as connecting a remote computer to an internal corporate network, and connects the remote computer to the Internet through dedicated hardware without installing separate software. It relates to an Internet cloud-based Ethernet network expansion service system and method that can be controlled by simply connecting the home extension device to a computer without additional setting when working from home, so that the same network environment as the company's internal network can be provided. It works.

Description

Internet cloud-based Ethernet network extension service system and its method {SYSTEM FOR ETHERNET NETWORK EXTENDING SERVICE BASE ON INTERNET CLOUD AND METHOD THEREOF}

The present invention relates to an Internet cloud-based Ethernet network extension service method, and more specifically, provides the same environment as connecting a remote computer to an internal corporate network, and connects the remote computer to the Internet through dedicated hardware without installing separate software. It relates to an Internet cloud-based Ethernet network expansion service system and method that can be controlled by simply doing the same.

Recently, telecommuting is rapidly increasing due to changes in the social environment. Telecommuting makes it difficult to access services that need to be accessed through the company's internal network because the network configuration is different from that of commuting to work within the company. I have this lower problem.

To solve this problem, a well-known network-to-network VPN (Virtual Private Network) can be used to configure a local network of the company's internal network from a remote location.

However, in the conventional VPN technology, VPN connection software is installed on a PC, and the connection with the external Internet network is mixed, resulting in poor security. In addition, when a home Internet router (router) provides a VPN function, there is a problem that multiple PCs connected to the router are affected. In addition, this VPN connection method could have a difference in IP address configuration from that directly used inside the company, and it was difficult to determine whether the PC being accessed was a PC with access rights.

(Korea Patent No. 1686850, December 09, 2016)

An object of an embodiment of the present invention is to provide a network expansion service system and method using an existing Internet network, to provide the same environment as the internal network of the company when working from home, and the same environment means that the PC used in the company or This means that if you bring your laptop home and use it, you will be assigned the same IP address and the same security applied inside the company will be applied.

In addition, an embodiment of the present invention is aimed at not affecting the use of the Internet by other computers in the home other than the home office computer.

In addition, an embodiment of the present invention connects one device to a network hub in an enterprise and connects one device to the Ethernet communication of a work computer at home to enable simple use without additional settings, and device management is external. It aims to be done through the Internet cloud.

In order to achieve the above object, an embodiment of the present invention includes a home expansion device connected between a PC and an Internet network, and an in-house expansion device connected between the internal network and the Internet network, wherein the home expansion device includes the above Transmits and receives packets with a PC, and the in-home expansion unit encapsulates packets received from the PC to generate capsule packets. Capsule packets received from the in-home extension device are packet decapsulated to generate packets, the in-house extension device transmits and receives packets with the internal network, and the in-house extension device encapsulates the packets received from the internal network to form capsule packets. The in-home expansion unit generates a packet by packet decapsulating the capsule packet received from the in-house expansion unit, and the in-home expansion unit receives the MAC address information of the PC and transmits it to the in-house expansion unit, , The in-house expansion device is connected to the internal network through the Mac address of the PC, and the in-house expansion device is characterized in that the home expansion device forwards the packet received from the PC to the internal network as it is.

At this time, the gateway address of the PC connected to the home expansion device uses the gateway address where the in-house expansion device is located.

At this time, the Internet cloud-based Ethernet network extension service system further includes a cloud between the home extension device and the in-house extension device, and the home extension device has an Ethernet ID, which is a unique identifier, and transmits it to the cloud, and the in-house extension device has an Ethernet ID, which is a unique identifier, and transmits it to the cloud, and the cloud connects a specific home extension device among a plurality of home extension devices and a specific in-house extension device among a plurality of in-house extension devices according to the Ethernet ID through setting , The cloud transmits data link layer protocols such as Ethernet, MAC address, ARP, STP, and VLAN between the home extension device and the in-house extension device, and the cloud includes a QoS limiting function, and the cloud includes a MAC address filter function can be included.

In addition, the at-home expansion device is connected only to one PC, and can be prevented from being connected to a plurality of PCs.

In addition, the at-home expansion device may store Mac address information and allow connection only to a PC whose Mac address matches the stored Mac address information.

In addition, the home extension device collects and transmits surrounding environment information including location information, Internet IP, and an accessible SSID list to the cloud, and the cloud stores the received surrounding environment information and receives the stored surrounding environment information. Differences can be identified by comparing with environmental information.

In addition, the at-home expansion device may transmit information on whether or not the PC is connected to the cloud.

In addition, when the home extension device is disconnected from the cloud, the home extension device may notify the browser of the PC that communication with the cloud is disconnected.

In addition, the in-house extension device stores the MAC address of the PC and the IP address assigned to the PC, and when the internal extension device receives the stored Mac address or IP address of the PC being used in the company from the internal network, it sends an abnormal signal to the cloud. It is possible to transmit and release the connection of the home extension device.

.

Embodiments of the present invention have the effect of being able to receive the same network environment as the internal network of the company by connecting the home extension device to the computer without additional setting by the telecommuter during telecommuting. In addition, it has the effect of maintaining the same security level as that used in the company's internal network. In addition, there is an advantage that there is no need to set the device for the use of the home expansion device and the in-house expansion device. Since the connection between the home extension device and the in-house extension device is controlled through the cloud, when replacing the home extension device and the in-house extension device, if only the Ethernet ID is registered and set in the cloud, it has the advantage of being connected without additional settings. In addition, it has the advantage of being able to maintain security by allowing only a specific PC to connect to the internal network through the Mac address of the PC.

The effects of the present invention are not limited to the effects mentioned above, and other effects not mentioned will be clearly understood by those skilled in the art from the description below.

1 is a diagram schematically showing the configuration of an embodiment of the present invention.
Figure 2 is a diagram schematically showing the configuration of one embodiment of the present invention.
3 is a diagram schematically showing the configuration of an embodiment of the present invention.
4 is a diagram schematically showing the configuration of an embodiment of the present invention.
5 is a flow chart showing the flow of one embodiment of the present invention.
6 is a flow chart showing the flow of one embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. At this time, it should be noted that in the accompanying drawings, the same components are indicated by the same reference numerals as much as possible. Detailed descriptions of well-known functions and configurations that may obscure the subject matter of the present invention will be omitted. For the same reason, in the accompanying drawings, some components are exaggerated, omitted, or schematically illustrated.

Throughout the specification, when a certain component is said to "include", it means that it may further include other components without excluding other components unless otherwise stated. In addition, throughout the specification, "on" means to be located above or below the target part, and does not necessarily mean to be located on the upper side with respect to the direction of gravity.

1 to 4 are views schematically showing an embodiment of the present invention. 5 to 6 are flow charts showing the flow of one embodiment of the present invention.

1 to 6, the embodiment of the present invention includes a home expansion device 100, an in-house expansion device 200, and may further include a cloud 300.

As shown in Figure 1, in the embodiment of the present invention, a plurality of home expansion devices (100a, 100b) and a plurality of in-house expansion devices (200a, 200b, 200c, 200d) are connected through the cloud 300 via the Internet.

At this time, as shown in FIG. 3, the home expansion device 100 and the in-house expansion device 200 may be directly connected without a cloud.

When the worker works inside the company, he works through the PC 10 to which the internal network 20 is directly connected.

However, when a worker works from home, since the PC is located outside the company, it is connected through the system of the embodiment of the present invention. The PC 10 is connected to the home extension device 100, and the home extension device 100 is connected to the Internet. It is connected to the cloud 300 through, the cloud 300 is connected to the in-house extension device 200, and the in-house extension device 200 is connected to the internal network 20.

That is, one embodiment of the present invention is a system that mediates the connection between the PC 10 and the internal network 20 through the Internet when working from home.

The home extension device 100 is a part connected between the PC and the Internet network and transmits and receives packets with the PC, encapsulates the packets 101 to generate capsule packets or decapsulates the capsule packets to generate packets, and generates packets by encapsulating the packets. Mac address information is received and transmitted to the outside again. The home extension device 100 has an Ethernet ID, which is a unique identifier.

At this time, the home extension device 100 can be connected to only one PC and prevented from being connected to multiple PCs to prevent security from being breached by the access of other PCs, and the connection method with the PC is a wired method or a wireless Wi-Fi method It can be, and the connection method with the Internet network can also be a wired method or a wireless Wi-Fi method.

In addition, the home expansion device 100 can store Mac address information and allow connection only to a PC whose Mac address matches the stored Mac address.

In addition, the home extension device may collect location information, Internet IP, and surrounding environment information including a list of accessible SSIDs, and may transmit them to the cloud below.

In addition, the home extension device may transmit information on whether or not the PC is connected to the cloud, and when communication with the cloud is disconnected, it may notify the browser of the PC that communication with the cloud is disconnected. Through this, the cloud can monitor whether the PC is connected, and the worker can recognize a situation where the home extension device cannot communicate with the outside due to a firewall.

The in-house expansion device 200 is a part connected between the internal network of the company and the Internet network, transmits and receives packets with the internal network, encapsulates the packets to create capsule packets, or decapsulates the capsule packets (201) to generate packets. It receives the Mac address information of the PC and is connected to the internal network through the Mac address. The in-house expansion device 200 has an Ethernet ID, which is a unique identifier.

At this time, the gateway address of the PC connected to the home expansion device uses the gateway address where the in-house expansion device is located. That is, the in-house extension device transmits the gateway address information to the home extension device so that the gateway address of the PC connected to the home extension device remains the same as that located in the company. Since the gateway address is the same, the PC is assigned the same fixed IP address from the gateway or a dynamic IP address within the assigned range.

On the other hand, the in-house expansion device stores the MAC address of the PC and the IP address assigned to the PC through the internal network, and sends an abnormal signal to the cloud when the stored PC's MAC address or IP address being used in the company is received from the internal network. And, it is possible to maintain security by disconnecting the home extension device. This has the effect of preventing external connection in the case of double access by means of Mac address duplication, etc., and maintaining security by notifying an abnormal situation.

At this time, the home expansion device 100 and the in-house expansion device 200 transmit and receive capsule packets to each other.

The cloud 300 is a part connected between the home extension device 100 and the in-house extension device 200, and receives the Ethernet ID of the home extension device and the in-house extension device and selects a specific home extension device and a number of home extension devices among a plurality of home extension devices. Among the in-house expansion devices, a specific in-house expansion device is connected through setting. At this time, the cloud transmits data link layer protocols such as Ethernet, MAC address, ARP, STP, and VLAN between the home extension device and the in-house extension device, and the cloud includes a QoS limiting function, and the cloud includes a MAC address filter has a function

In addition, the cloud receives and stores the surrounding environment information from the home extension device, and compares the stored surrounding environment information with the received surrounding environment information to identify a difference. You can disconnect the home extension device.

An embodiment of the present invention also provides an Internet cloud-based Ethernet network extension service method.

An embodiment of the present invention consists of the following steps as shown in FIGS. 5 and 6 .

The home expansion device receives the MAC address and the packet from the PC (S10);

The home extension device encapsulates the received MAC address and the packet to generate a capsule packet (S20);

The home expansion unit transmits the capsule packet to the in-house expansion unit through the Internet (S30);

The in-house expansion device decapsulates the capsule packet and generates a MAC address and packet (S40);

The service can be provided by the step (S50) of the in-house expansion device forwarding the MAC address and the packet to the internal network.

At this time, the step S30 may be different by including the cloud in the middle.

The home extension device transmits the capsule packet and the Ethernet ID, which is a unique identifier, to the cloud through the Internet (S31);

The in-house expansion device transmits the Ethernet ID, which is a unique identifier, to the cloud through the Internet network (S32);

The cloud connects a specific home extension device among a plurality of home extension devices and a specific in-house extension device among a plurality of in-house extension devices according to the Ethernet ID (S33);

The cloud performs MAC address filtering (S34);

Instead, a step (S35) of the cloud transmitting the capsule packet to the in-house expansion device through the Internet network is included.

On the other hand, prior to step (S31), the home expansion device determines whether or not it is connected to the PC and generates connection information, and the home expansion device transmits the connection information to the PC to the cloud or the home expansion device determines whether or not the computer is connected to the cloud. The method may further include determining whether communication with the device is disconnected and notifying the browser of the PC when the communication is disconnected.

In addition, after the last step (S50), the in-house expansion device stores the MAC address;

The step of receiving and storing the IP address of the PC from the internal network by the in-house expansion device;

Receiving from an internal network that the MAC address or IP address of the PC where the in-house expansion device is stored is being used in the company;

sending an abnormal signal to the cloud by the in-house expansion device;

The in-house expansion device may further include disconnecting the home expansion device.

On the other hand, the embodiments of the present invention disclosed in this specification and drawings are only presented as specific examples to easily explain the technical content of the present invention and help understanding of the present invention, and are not intended to limit the scope of the present invention. In addition to the embodiments disclosed herein, it is obvious to those skilled in the art that other modifications based on the technical idea of the present invention can be implemented.

10 : PC
20: internal network
100: home expansion device
200: in-house expansion device
300: cloud
101: packet encapsulation
201: Ethernet ID assignment
301: packet decapsulation

Claims (13)

A system in which a PC and an internal network of a company are connected and serviced through an Internet network, comprising: an in-home extension device connected between the PC and an Internet network; and an in-house extension device connected between the internal network and the Internet network. The extension device transmits and receives packets with the PC, the home extension device encapsulates packets received from the PC to generate capsule packets, the home extension device transmits and receives capsule packets to and from the in-house extension device, and the in-house extension device transmits and receives capsule packets. The expansion unit decapsulates capsule packets received from the home expansion unit to generate packets, the in-house expansion unit transmits and receives packets to and from the internal network, and the in-house expansion unit converts packets received from the internal network into packets. encapsulation to generate a capsule packet, and the home extension device decapsulates the capsule packet received from the in-house extension device to generate a packet, and the home extension device receives the MAC address information of the PC and transmits it to the in-house extension device. The in-house expansion unit is connected to the internal network through the Mac address of the PC, and the in-house expansion unit forwards the packet received by the home expansion unit from the PC to the internal network as it is,
The Internet cloud-based Ethernet network extension service system further includes a cloud between the home extension device and the in-house extension device, and the home extension device has an Ethernet ID, which is a unique identifier, and transmits it to the cloud, and the in-house extension device has a unique identifier. It has an Ethernet ID, which is an identifier of, and transmits it to the cloud, and the cloud connects a specific home extension device among a plurality of home extension devices and a specific in-house extension device among a plurality of in-house extension devices according to the Ethernet ID through setting, and the The cloud transmits data link layer protocols such as Ethernet, MAC address, ARP, STP, and VLAN between the home extension device and the in-house extension device, the cloud includes a QoS limiting function, and the cloud has a MAC address filter function Internet cloud-based Ethernet network expansion service system, characterized in that it comprises. delete According to claim 1,
The home expansion device is connected only to one PC, Internet cloud-based Ethernet network expansion service system, characterized in that not connected to a plurality of PCs.
According to claim 1,
The home extension device stores Mac address information,
An Internet cloud-based Ethernet network expansion service system, characterized in that allowing connection only to a PC whose Mac address matches the stored Mac address information.
The method of claim 1, wherein the home expansion device collects and transmits surrounding environment information including location information, Internet IP, and an accessible SSID list to a cloud, and the cloud stores the received surrounding environment information and stores the stored surrounding environment information. Internet cloud-based Ethernet network expansion service system, characterized in that to identify the difference by comparing the information with the received surrounding environment information. The Internet cloud-based Ethernet network extension service system according to claim 1, wherein the at-home extension device transmits information on whether or not the PC is connected to the cloud. The Internet cloud-based Ethernet network extension service system according to claim 1, wherein the home extension device notifies the browser of the PC that communication with the cloud is disconnected when communication with the cloud is disconnected. The method of claim 1, wherein the in-house extension device stores the Mac address of the PC and the IP address assigned to the PC, and the in-house extension device receives the stored Mac address or IP address of the PC being used in the company from an internal network. Internet cloud-based Ethernet network extension service system, characterized in that for transmitting an abnormal signal to the cloud, and disconnecting the home extension device. In a service in which a PC and an internal network of a company are connected through an Internet network, Home expansion device receiving a MAC address and a packet from a PC;
generating a capsule packet by encapsulating the received MAC address and the packet, by the home expansion device;
Step of the home extension device transmitting the capsule packet and the Ethernet ID, which is a unique identifier, to the cloud through the Internet network;
Transferring the Ethernet ID, which is a unique identifier of the in-house expansion device, to the cloud through the Internet network;
The cloud connecting a specific home extension device among a plurality of home extension devices and a specific in-house extension device among a plurality of in-house extension devices according to an Ethernet ID;
performing MAC address filtering on the cloud;
The cloud transmitting the capsule packet to the in-house expansion device through the Internet network;
Step of the home expansion device forwarding the capsule packet to the in-house expansion device through the Internet network;
generating a MAC address and a packet by decapsulating the capsule packet, by the in-house expansion device;
Internet cloud-based Ethernet network extension service method comprising the step of forwarding the MAC address and the packet to the internal network by the in-house expansion device. delete 10. The method of claim 9, Before the home extension device transmits the capsule packet and the Ethernet ID, which is a unique identifier, to the cloud through the Internet network, the home extension device determines whether or not the home extension device is connected to the PC and generates connection information. Internet cloud-based Ethernet network expansion service method, characterized in that the step of transmitting; and the step of transmitting the information whether the home extension device is connected to the PC to the cloud. 10. The method of claim 9, Prior to the step of the home extension device transmitting the capsule packet and the Ethernet ID, which is a unique identifier, to the cloud through the Internet network, the home extension device determines whether communication with the cloud is disconnected, and if the communication is disconnected, Internet cloud-based Ethernet network extension service method, characterized by adding a step of notifying the browser of the PC. 10. The method of claim 9, wherein the in-house expansion unit transfers the MAC address and the packet to the internal network, followed by the in-house expansion unit storing the MAC address, and the in-house expansion unit providing the IP address of the PC in the internal network. Step of receiving and storing the address, Step of receiving from the internal network that the MAC address or IP address of the PC where the in-house extension device is stored is being used in the company, Step of the in-house extension device sending an abnormal signal to the cloud , Internet cloud-based Ethernet network extension service method further comprising the step of the in-house expansion device disconnecting the home expansion device.

Images