KR20010035612A - Method for checking client for security in PABX - Google Patents

Abstract

PURPOSE: A client checking method for security in an exchange is provided to decide whether a connection of a corresponding device is allowable by referring to an IP(Internet Protocol) address table registered in a database of inside exchange. CONSTITUTION: A controller registers determined information on external devices to a data base of the exchange(S100). The controller decides whether the external devices perform a connection to the exchange(S200). If so, the controller retrieves whether information in accord with the determined information exist(S300). If so, the controller connects specific services performed by the external devices to the exchange, and supplies the specific services(S500). The external devices request a connection release to the exchange(S600). The connections of the external devices are released(S700).

Description

Method for checking client for security in PABX}

The present invention relates to a method for checking a client at an exchange. More specifically, the present invention relates to a client check in which an exchange determines whether a counterpart is suitable for connection when an additional device in a client mode attempts to connect to an additional function that acts as a server. It is about a method.

First of all, PBX stands for Private Branch Exchange.

An internal exchange is an exchange which performs exchange connection between the extension telephones of the premises (local telephone line) telephones or between the extension telephones and the trunk lines (telephone telephone telephone lines) at workplaces such as government offices, companies, factories and hotels.

The branch exchange system is a revolving premises exchanger that performs all connections such as incoming / outgoing connections from trunk lines to stations, outgoing connections from stations to trunk lines, and interconnections between stations. After the change, it has evolved and developed into an electronic branch exchange (EPBX) of accumulated program control method using a microprocessor or IC memory.

The Electronic Branch Exchange (EPBX) has the ability to perform more than 100 different services, such as timed calls and simultaneous data transfer, and has become an indispensable device in the establishment of local area networks, as well as ISDN. .

There are two types of currency path methods: the spatial division currency path method and the time division currency path method. A digital PBX, which encodes and exchanges an audio signal (analog signal) in several forms of electric signals, is called a digital PBX.

Digital PBX connects OA devices such as PCs, word processors, and facsimile machines used in the premises to convert and multiply data and voice into digital signals so that multiple signals can be simultaneously transmitted and communicated on a single line (transmission path). .

Therefore, the digital PBX is a key device of the digital network, which is a higher communication means, and occupies a very important position for effective LAN construction and ISDN construction.

Such an exchange system has a function of providing a call processing service to a user, and additionally, provides services such as billing, statistics, diagnosis, and computer telephony integration (CTI).

Some of these additional functions may be implemented only by the exchange itself, but most of them may be implemented through an external additional device for more efficient operation, and some functions may be implemented only through an external additional device.

In order for these external devices to function properly, they must be connected to the alternator and exchange information required for each function with the exchange.

On the other hand, the local area network (LAN) may be used only by building its own local network due to its characteristics, but may also be used by connecting to the Internet.

If the network is connected to the Internet, there may be a connection request that is not secured from the outside, in which case there is a disadvantage that serious security problems may occur.

In addition, when the additional device attempts to connect to the exchange, the exchange side unconditionally accepts the connection or checks the password to determine whether to provide the additional function.

However, this method has the disadvantage of exchanging important information on the exchange side when the fax word is leaked or the password is unreasonably obtained from the outside, and in serious cases, the exchange can be arbitrarily malfunctioned from the outside.

Accordingly, the present invention has been made to solve the above problems, and an object of the present invention is to provide a connection request for an additional device that requires a specific function while the switch is connected to the Internet and is running a server having various functions. When there is, the exchange side determines whether to allow the other party's connection to provide a method for smoothly operating the exchange.

1 is a block diagram showing the connection of the exchanger and the additional device,

2 is a block diagram of a client database of an exchange for performing a client check method for security in an exchange according to the present invention;

3 is a flow chart illustrating a client check method for security at an exchange, in accordance with the present invention.

<Description of the code | symbol about the principal part of drawing>

10 exchanger 20 first attachment

30: second additional device 40: third additional device

50: I / O port 60: TCP / IP

70: the Internet

In order to achieve the above object, the present invention provides a method for checking a client for security, comprising: registering predetermined information about an external device that can be connected to a switch in a database of the switch; Determining, by the external device, whether the connection is performed to the exchange after the registration; As a result of the determination, when the external device connects to the exchange, searching whether there is information that matches the predetermined information registered in the database; And if there is information that matches the predetermined information as a result of the search, disconnecting the external device after providing a service performed by the external device.

Preferably, the external device includes any one of a billing device, a computer for a computer telephony integration (CTI), and a printer that can be used by being connected to the exchange.

Preferably, the predetermined information is a model of the external device; A port to which the external device is connected to the exchange; And an IP address of the external device.

Hereinafter, the objects, features, and advantages of the present invention described above will be described in more detail with reference to the preferred embodiments of the present invention shown in the accompanying drawings.

1 is a block diagram showing the connection of the exchanger and the attachment.

As shown, the exchanger 10 represents a general exchanger system, and the first attachment 20, the second attachment 30, and the third attachment 40 are as attachments connected to the exchanger 10. Generally, this includes a billing device, a computer for a computer telephony integration (CTI), a printer, and the like.

The I / O port 50 is an I / O port for connecting the exchanger 10 and an external device, and there are RS-232, RS-422, Ethernet, and the like according to a connection method.

The TCP / IP 60 refers to a TCP / IP protocol capable of transmitting and receiving information on an Ethernet port, and the Internet 70 is used to connect a local network to the outside.

2 is a block diagram of a client database of an exchange for performing a client check method for security in an exchange according to the present invention.

As shown in the figure, a specific port number is assigned according to each additional function and is used to store the IP address of a client (accessory) allowed to access.

Hereinafter, a method of checking a client for security in the present inventor's exchange will be described in detail with reference to FIGS. 1 to 3.

First, predetermined information about external devices 20, 30, and 40 that can be connected to the exchange 100 is registered in the database of the exchange (step S100).

Here, the external device includes any one of a charging device, a computer for a computer telephony integration (CTI), and a printer that can be used by being connected to the exchanger 100.

After the registration, the external device determines whether the connection to the exchange 100 is performed (step: S200).

In this case, the determination may be performed by determining whether or not a signal input to the I / O port 50 of the exchange 100 is performed by a controller (not shown) of the exchange 100.

As a result of the determination, when the external device is connected to the switchboard 100, it is searched whether there is information that matches the predetermined information registered in the database (step S300).

Here, the predetermined information includes a model of the external device, a port to which the external device is connected to the exchange, and an IP (Internet Protocol) address of the external device, as shown in FIG. 2.

As a result of the search, when there is information that matches the predetermined information (step: S400), that is, when there is the same information in the database, a unique service performed by the external device is connected to the exchange 100 and provided. After (step: S500), the external device is requested to disconnect from the switch 100 (step: S600) to disconnect the external device (step: S700).

Although the preferred embodiments of the present invention have been described in detail above, those skilled in the art will appreciate that the present invention may be modified without departing from the spirit and scope of the invention as defined in the appended claims. It will be appreciated that modifications or variations may be made. Therefore, changes in the future embodiments of the present invention will not be able to escape the technology of the present invention.

As described above, according to the present invention, when an external additional device requests a connection to an exchange, by determining whether to allow the connection of the corresponding device by referring to an IP (Internet Protocol) address table registered in a database inside the exchange. Therefore, any external device that is not already registered in the exchange can be connected to the exchange to prevent the possibility of malfunction.

Claims (3)

Registering predetermined information on an external device that can be connected to an exchange in a database of the exchange; Determining, by the external device, whether the connection is performed to the exchange after the registration; As a result of the determination, when the external device connects to the exchange, searching whether there is information that matches the predetermined information registered in the database; And If there is information that matches the predetermined information as a result of the search, providing a service performed by the external device, and then disconnecting the external device. Check way. The method of claim 1, wherein the external device The client check method for security in the switch, characterized in that it comprises any one of a charging device, a computer for CTI (Computer Telephony Integration), a printer connected to the switch. The method of claim 1, wherein the predetermined information A model of the external device; A port to which the external device is connected to the exchange; And Client check method for security in the exchange, characterized in that it comprises an IP (Internet Protocol) address of the external device.