KR20050076962A - Apparatus and method for setting network address - Google Patents

Abstract

The present invention relates to a network address setting device, and in particular, by having a separate IGD CP for the Internet application that does not include the IGD CP to perform the NAT setting instead, even ordinary users without expertise can easily use the NAT setting. The goal is to make the application run. The present invention for this purpose is to obtain the UPnP IGD 210 and the address information necessary for the port mapping existing in the home network to provide a connection service between the Internet application 230 in the home and the Internet application 240 outside the home It comprises a port mapping CP 220 for setting the port mapping to the UPnP IGD (210).

Description

Apparatus and method for setting network address {APPARATUS AND METHOD FOR SETTING NETWORK ADDRESS}

The present invention relates to network services, and more particularly, to an apparatus and method for setting a network address.

Recently, as computing power is applied to small and various devices, cheap and universal networking media technologies are emerging or commercialized. For example, a variety of devices such as refrigerators, TVs, washing machines, PCs, and audio devices used in homes are connected by networking and given the computing power, so that they can be easily used and set up so that people can enjoy a higher quality of life. It became possible.

For this purpose, a function of UPnP ^™ (hereinafter abbreviated as UPnP) has been proposed.

Since the Plug and Play (PnP) feature has been added to the current operating system, installing and configuring PC peripherals has become much easier, but Universal Plug and Play (UPnP) brings these convenient features to the Internet, such as TCP / IP, HTTP, and XML. It is a technology that allows network devices such as home appliances, network printers, and Internet gates to be networking, especially home networking, by extending to the entire network based on standard technology.

In particular, the UPnP Device Architecture 1.0 specification is based on distributed and open networking architectures, enabling each appliance in a home network to be seamlessly peer-to-peer instead of centrally managed.

At this time, UPnP defines standard networking technology such as IP, HTTP, etc. as a technical component of distributed and open networking structure to operate independently of an operating system, a platform, and a transmission medium.

In addition, the UPnP Internet Gateway Device (hereinafter, abbreviated as "IGD") is a standard established at a boundary between a LAN and a WAN constituting a home network, aiming at convenient configuration and use of a home gateway. In particular, UPnP IGD is characterized by automatically setting the network address translation (NAT).

UPnP IGD's NAT configuration is achieved by sending external host address for application connection, public port, protocol, internal port, internal host address information for application connection through SOAP-based UPnP action.

1 illustrates a port mapping process using a conventional UPnP IGD CP. The application 130 includes an IGD CP 120.

The application 130 is configured to include the port mapping information that it needs.

The IGD CP 120 is configured to call the UPnP action to the UPnP IGD 110 to set up port mapping.

Referring to the operation of the prior art as follows.

Port mapping in FIG. 1 illustrates the case of inbound / incoming traffic.

When the external Internet application 140 is trying to connect to the Internet application 130 in the home through the UPnP IGD 110, since the Internet application 130 knows the port mapping information that it needs, the Internet application 130 The included IGD CP 120 sets the desired port mapping to the UPnP IGD 110.

That is, since the application 130 includes the IGD CP 120, the necessary port mapping may be set in the UPnP IGD 110 through an action call.

Accordingly, the UPnP IGD 110 provides port information set by the UPnP CP 120 to the application 140 so that the application 140 can connect to the application 130 in the home.

However, the conventional method has a limitation that the IGD CP should be included in the corresponding application using the NAT for NAT setting.

Accordingly, an object of the present invention is to provide an apparatus and method for establishing a network address so that the NAT autoconfiguration function of UPnP IGD can be used in a general Internet application that does not include an IGD CP in order to solve the conventional limitation.

That is, the present invention provides a separate IGD CP for the Internet application that does not include the IGD CP to perform the NAT setting instead, so that ordinary users without expertise can easily perform the Internet application using the NAT setting. There is a purpose.

The present invention is characterized in that it is configured to support an application without an IGD CP having a CP (hereinafter referred to as "port mapping CP") dedicated to performing NAT port mapping to achieve the above object.

The port mapping CP is configured to identify the application selected by the user and extract information on the port mapping of the application from the website.

The port mapping CP is configured to obtain port mapping information by using a firewall of IGD. That is, since the firewall function intelligently determines the incoming connection attempt and records the port mapping information, the port mapping CP accesses and acquires the port mapping information to set up the port mapping in the UPnP IGD. It is.

In addition, the present invention to determine the traffic generated inside the home in order to achieve the above object, and if the traffic generated from the inside of the step of obtaining port mapping information for the corresponding application, and obtaining And performing port mapping setting on the UPnP IGD by using the port mapping information.

The port mapping information may be external host information, an authorized port to be used for external connection, a protocol, an internal port, and an internal host address.

Hereinafter, the present invention will be described in detail with reference to the drawings.

Since the present invention is a concept of separating the UPnP IGD CP from a general Internet application, an embodiment of the present invention assumes an application having no address information in an application layer payload of the Internet application.

2 is a block diagram of an apparatus for setting a network address according to an embodiment of the present invention. As shown in FIG. 2, the present invention provides a connection service between an Internet application 230 in a home and an Internet application 240 outside a home while present in a home network. The UPnP IGD 210 and a port mapping CP 220 for acquiring address information necessary for port mapping from the outside and setting port mapping to the UPnP IGD 210 are configured.

Referring to the operation and effect of the embodiment of the present invention configured as described above are as follows.

When the external internet application 240 connects to the home internet application 230 through the UPnP IGD 210, the port mapping CP 220 extracts the port mapping information for the internet application 230 and the UPnP IGD. Port mapping is set at 210. At this time, the Internet application 230 does not know the existence of the port mapping CP (220).

Accordingly, the UPnP IGD 210 provides the port information set by the port mapping CP 220 to the Internet application 240 so that the Internet application 240 can connect to the Internet application 230 in the home.

Meanwhile, in the embodiment of the present invention, a method of obtaining port mapping information for an application is as follows.

First, the process of using an external port mapping website as shown in FIG.

In this case, the communication between the port mapping website 350 and the port mapping CP 320 must be defined in advance.

If the manufacturer of the port mapping CP 320 maintains the port mapping website 350, the communication between the port mapping CP 320 and the port mapping website 350 is solved without any problem regardless of the communication method. Will be.

Thus, the port mapping CP 320 registers the ports and connections used by the internet application 330 with the port mapping website 350 so that the port mapping CP 320 assumes the Internet application 330 irrespective of UPnP. It will be made available on the private network.

First, when port mapping using the port mapping CP 320, the user puts the corresponding information if the application 330 knows the internal host address that is operating, and if the address acquisition is not available, the broadcast address is entered. Put it in.

As an external host address, wildcards are usually used to request a 1: 1 allocation of the public port to be used for external connection without restricting the other host to a specific host.

Accordingly, if the UPnP IGD 310 additionally provides a function for arbitrarily granting the available authorized ports, the port mapping CP 320 uses wildcard as the authorized port value.

Second, as shown in FIG. 4, the port mapping is configured by using inbound traffic required by an external peer Internet application.

In FIG. 4, the firewall 430 includes port mapping information for the application 440.

Accordingly, the UPnP IGD 410 informs the port mapping CP 420 of information of a port requested by one IP address within a specific time.

At this time, the port mapping CP 420 obtains the necessary port mapping information from the firewall 430 and executes port mapping configuration in the UPnP IGD 410.

Accordingly, communication between the Internet application 440 in the home and the external Internet application 450 is possible.

However, since the port informed by the firewall 430 may be an authorized port used for an external connection, the port mapping CP 420 assigns the same internal port value as the authorized port to be used for an external connection when performing port mapping.

Therefore, since the firewall 430 does not know the internal host address for the connection, it uses a broadcast address for the internal host address.

On the other hand, according to the embodiment of the present invention, due to the use of the same internal port and broadcast internal host address for one authorized port, there is a restriction that only one corresponding application exists in the private network.

In this case, there may be a security problem by using the internal port value of the same value as the public port, by allowing only inbound traffic requests arriving within a short time after checking the IP address of the Internet application 450 Try to reduce possible security issues.

As described in detail above, the present invention has a port mapping CP of a concept separate from an application, and thus, the NAT setting for the Internet application that does not include the IGD CP is performed instead, thereby expanding the utilization of UPnP IGD. .

That is, the present invention provides a convenient port mapping setting function even for an Internet application that does not include UPnP IGD CP, so that a user without expert knowledge can easily use the Internet application using NAT setting.

1 is a diagram illustrating a port mapping process using a conventional UPnP IGD CP.

2 is a block diagram of a network address setting apparatus proposed in an embodiment of the present invention.

FIG. 3 is a first exemplary diagram of a process of obtaining port mapping information in FIG. 2; FIG.

4 is a second exemplary diagram of a process of obtaining port mapping information in FIG. 2;

Explanation of symbols on the main parts of the drawings

210,310,410: UPnP IGD 220,320,420: Port mapping CP

430 firewall

Claims (13)

A UPnP gateway means existing in a home network and providing a connection service between an Internet application in the home and an Internet application outside the home; And port mapping setting means for acquiring address information necessary for port mapping from the outside and setting port mapping to the UPnP gateway means. The method of claim 1, wherein the port mapping information is External host address, network port setting device, characterized in that the public port, protocol, internal port, internal host address to be used for external connection. The method of claim 1, wherein the port mapping setting means And configured to identify the application selected by the user and extract port mapping information of the application from the website. The method of claim 3, wherein the port mapping information is A network address setting device comprising: assigning an internal host address to corresponding information or a broadcast address, an external host address to a wildcard value, and an authorized port to be used for an external connection with an internal port. The method of claim 4, wherein the authorized port value The network address setting device, characterized in that to use a wildcard value when the gateway port is arbitrarily assigned. The method of claim 1, wherein the port mapping setting means And a port mapping information is obtained by using a firewall mounted in the gateway means. The method of claim 6, wherein the port mapping information is Network address setting device, characterized in that the internal address assigned to the broadcast address, the internal port to the same value as the external port used for the external connection. The method of claim 1 or 6, wherein the port mapping setting means Network address setting device, characterized in that it is configured to allow only traffic requests to the internal arriving at the point of confirming the IP address of the external application to enable security. In the network address setting method of a system having a separate CP for port mapping, Checking whether there is traffic inside the home, Acquiring port mapping information for the corresponding application when it is confirmed that the traffic from the inside is generated; And performing port mapping setting to UPnP IGD using the obtained port mapping information. 10. The method of claim 9, wherein the port mapping information is A method of setting a network address, characterized in that the external host address obtained from a website or a firewall, a public port to be used for an external connection, a protocol, an internal port, and an internal host address. 10. The method of claim 9, wherein traffic generation is A method for setting a network address, characterized in that only allowing traffic that arrives at the point in time at which the IP address of the external application is checked. 10. The method of claim 9 wherein the step of setting port mapping Entering the information or broadcast address into the internal host address, Entering a wildcard value in the external host address, Network address setting method characterized in that the process consisting of assigning a 1: 1 public port to be used for the external connection with the internal port. 10. The method of claim 9 wherein the step of setting port mapping Entering the broadcast address in the internal host address, Network address setting method comprising the step of assigning the same value as the external port used for the external connection to the internal port.