KR20010054841A - Method of providing multicasting with security at internet - Google Patents

Abstract

PURPOSE: A multicasting providing method with security in the Internet is provided to allow a user to use a secured multicasting service as well as a simple virtual private network service according to a term by adding a multicasting function to a virtual private network function. CONSTITUTION: An information provider(1) distributes information to a designated user. An Internet service provider(2) provides an Internet access service to the user. A plurality of information users(3) receive the distributed information. An information provider terminal(4) transmits information. An information user terminal(5) receive the information. An information provider network gateway(6) provides functions of secured connection establishing and multicasting. An information user network gateway(7) provides functions of a secured connection establishing and multicasting. A secured path(8) is set between the information provider network gateway(6) and the information user network gateway(7). A multicasting path(9) is set between the information provider terminal(4) and the information user terminal(5).

Description

How to provide secure multicasting on the Internet {Method of providing multicasting with security at internet}

The present invention relates to a method for providing secure multicasting on the Internet, and more particularly, to a method for providing a secure multicasting function to a network gateway having a virtual private network function. .

In the conventional virtual private network, as shown in FIG. 1, an information provider 1 for distributing information to a designated user, an Internet service provider 2 for providing an Internet access service to a user, and an information user for receiving the distributed information (3), an information provider terminal device (4) for transmitting information, an information user terminal device (5) for receiving information, an information provider network gateway (6) for providing secure connection establishment and multicasting functions, security An information user network gateway 7 providing a connection establishment and a multicasting function, a secure path 8 established between the information provider network gateway 6 and the information user network gateway 7, and the information provider And a unicasting path 10 set between the terminal device 4 and the information user terminal device 5.

The conventional virtual private network configured as described above establishes a secure path 8 between the information provider network gateway 6 and the information user network gateway 7 and then uses the information user as the destination IP address in the information provider terminal device 4. It provides only a simple unicast connection method of designating a terminal device 5 to transfer data.

On the other hand, MBONE (Multicast Backbone), which is implemented to enable multicasting through the Internet, can expose information through intentional access of illegal users due to the characteristics of the open network of the Internet.

Accordingly, the present invention has been made to solve the above-mentioned conventional problems, and adds a multicasting function to the virtual private network function so that a user can use a secure multicasting service together with a simple virtual private network service according to a predetermined condition. The purpose is to provide a method.

According to a preferred embodiment of the present invention, a method for providing security with multicasting in the Internet includes setting a virtual private network function and a packet replication function in an information provider network gateway, and a virtual private network function, a user registration function, and an IP in an information user network gateway. Setting an address translation function;

Checking, by the information provider network gateway, a destination address of a packet input from an information provider terminal device;

If the destination address is a multicasting address, the information provider network gateway replicating the packet to be delivered to the information user network gateway and encapsulating it through a virtual private network function;

As the encapsulated packet is delivered to the information user network gateway, the information user network gateway inspecting a destination address after decapsulating the received packet through a virtual private network function; And

And if the destination address after the capsule release is a multicasting address, the information user network gateway converts the destination address into an IP address of the information user terminal by referring to a table created through a user registration function.

1 is a configuration diagram for providing a unicasting service in a conventional virtual private network,

2 is a configuration diagram for providing a secure multicasting service by adding a multicasting function in a virtual private network to which the present invention is applied;

3 is a configuration diagram of replicating a single IP packet into a plurality of IP packets according to an embodiment of the present invention;

4 is a configuration diagram of adding a multicasting user to a user registration table according to an embodiment of the present invention;

5 is a configuration diagram of translating a destination address of an IP packet according to an embodiment of the present invention.

<Description of Symbols for Major Parts of Drawings>

1: Information Provider

2: Internet service provider

3: Information User

4: information provider terminal device

5: information user terminal device

6: information provider network gateway

7: information consumer network gateway

8: secure path

9: Multicasting Path

10: Unicasting Path

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 2 is a block diagram illustrating a secure multicasting service by adding a multicasting function in a virtual private network to which the present invention is applied. The information provider 1 distributes information to designated users, and provides an Internet access service to a user. Internet service provider 2, a plurality of information users (3) for receiving the distributed information, information provider terminal device (4) for transmitting information, information user terminal device (5) for receiving information, secure An information provider network gateway 6 providing connection establishment and multicasting functions, an information user network gateway 7 providing secure connection establishment and multicasting functions, the information provider network gateway 6 and an information user network gateway (7) a secure path (8) established between the information provider terminal device (4) and the information user terminal device (5) Is set to be provided with a multi-cast path (9).

The packet replication function is applied to the information provider network gateway 6, and the user registration function and IP address translation function are applied to the information user network gateway 7.

Referring to the packet replication function of the information provider network gateway 6, as shown in FIG. 3, the information provider network gateway 6 multicasts the destination address of the IP packet input from the information provider terminal device 4; In case of address (224.0.0.0), duplicate IP packet.

The user registration function in the information user network gateway 7 will be described. As shown in FIG. 4, the information user network gateway 7 has an IP address (e.g., an information user terminal device 5 provided with a multicasting service). , 210.123.226.210) is registered in the user registration table.

The IP address translation function of the information user network gateway 7 will be described. As shown in Fig. 5, the information user network gateway 7 has a multicasting address (224.0.0.0) as the destination address of the IP packet released from the tunnel. In this case, the information is converted to an IP address (for example, 210.123.226.210) of the user terminal device 5.

Next, a description will be given of a security multicasting providing method in the Internet according to an embodiment of the present invention.

First, a virtual private network function and a packet replication function are set in the information provider network gateway 6, and a virtual private network function, a user registration function, and an IP address translation function are set in the information user network gateway 7.

Then, the information provider network gateway 6 checks the destination address of the packet input from the information provider terminal device 4, and if the destination address is the multicasting address 224.0.0.0, the information provider network gateway 6 ) Duplicates the packet to be delivered to the information user network gateway 7 and then performs a packet encapsulation process through the virtual private network function.

Thereafter, the information user network gateway 7 performs the decapsulation process on the received packet through the virtual private network function, and then checks the destination address, and if the checked destination address is a multicasting address (224.0.0.0). The information user network gateway 7 refers to the table created through the user registration function.

The information user network gateway 7 then converts the destination address (224.0.0.0) of the packet into the IP address (210.123.226.210) of the information user terminal device (5).

Through the above process, the information user 3 is provided with a secure multicasting service from the information provider 1. If it is assumed that the information provider 1 and the information user 3 are businesses, an example of using the present invention described above is as follows.

The enterprise uses the Internet of the Internet service provider 2 to connect the head office network, which is the information provider 1, and the branch network, which is the information user 3, and applies a virtual private network for information security on the Internet. In such an environment, a company may use a safe and efficient service by applying the above-described present invention for the purpose of simultaneously delivering a specific information from a main office network to a plurality of branch office networks.

According to the present invention as described above, it is possible to solve the security problem of the existing multicasting service through the Internet, and to supplement the simple unicasting service of the network gateway that provides the virtual private network function.

According to the present invention, an information provider and an information user can use a security multicasting service through an Internet service provider.

In addition, preferred embodiments of the present invention are disclosed for the purpose of illustration, those skilled in the art will be able to various modifications, changes, additions, etc. within the spirit and scope of the present invention, such modifications and modifications belong to the following claims You will have to look.

Claims (1)

Setting a virtual private network function and a packet replication function in the information provider network gateway, and setting a virtual private network function, a user registration function, and an IP address translation function in the information user network gateway; Checking, by the information provider network gateway, a destination address of a packet input from an information provider terminal device; If the destination address is a multicasting address, the information provider network gateway replicating the packet to be delivered to the information user network gateway and encapsulating it through a virtual private network function; As the encapsulated packet is delivered to the information user network gateway, the information user network gateway inspecting a destination address after decapsulating the received packet through a virtual private network function; And If the destination address after the capsule release is a multicasting address, the information user network gateway converting the destination address into an IP address of the information user terminal by referring to a table created through a user registration function. How to provide secure multicasting on the Internet.