KR20180050181A - Modem apparatus and system for providing static ip - Google Patents

Abstract

Provided are a modem device and a static IP provision system. The modem device comprises: a first port connected to a static IP terminal to transmit or receive data to or from the static IP terminal; a modem part which modulates data inputted through the first port to send the data to a network, and modulates the data received from the network to output the data to the first port; a processor which receives and stores a static IP address predesignated by a member from the network, checks an IP address of the static IP terminal from the data received from the first port, determines whether the checked IP address matches the received static IP address, outputs the received data to the modem part when they match each other, and blocks network transmission of the received data when they do not match each other; and a memory which stores an instruction word performed by the processor.

Description

[0001] MODEM APPARATUS AND SYSTEM FOR PROVIDING STATIC IP [0002]

The present invention relates to a technology for providing a network access service using a static IP (Static Internet Protocol).

Giga Internet is a next generation Internet that supports data transmission of gigabits per second to optical fiber subscribers. It uses access network technology such as Fiber To The Home (FTTH) or G.Hn. Such a gigabyte is a network different from the ethernet used in a terminal such as a PC, and a modem should be used for network connection.

An Internet Service Provider (ISP) uses dynamic IP (Dynamic IP) addressing method when subscribers want to receive Internet service, and typically uses DHCP (Dynamic Host Configuration Protocol).

In a dynamic IP-based network using DHCP, when a network access server (NAS) receives a DHCP message from a subscriber, it creates a session based on the message and provides subscriber authentication Then, a session is created for controlling the amount of usage, and charging and control of the session is performed.

In general, network devices such as routers are supposed to use dynamic IP, and static IP is not a normal service.

Static IP is mainly used in services such as servers, not PCs. These devices work with external peers via IP, which is fixed to the network rather than IP allocation via DHCP.

In the case of fixed IP, however, it operates in a form directly connected to the network without performing the network authentication procedure. Therefore, there is no DHCP message exchange procedure, authentication, billing and session control are impossible.

However, in some cases, a fixed IP is required for a home server or other purposes. In order to satisfy this need, Internet providers offer fixed IP products.

However, fixed IP products are difficult to operate various business models (BM) because they are configured as special exceptions in networks designed based on dynamic IP.

The biggest problem is that there is no DHCP function, so authentication and billing control can not be done and the dynamic authorization function provided by RFC 3576 etc. is not provided. In general, if a router is connected to the Ethernet port of a modem and a plurality of terminals share one authorized dynamic IP through a NAT-based private IP service, a static IP can not be allocated.

When the TWIN IP function is activated on the router, the terminal assigned to the TWIN IP port is assigned a public IP assigned by the router, and the terminal connected to the remaining ports operates on the private IP basis.

However, the public IP assigned to the terminal connected to the TWIN IP port is dynamic IP, and when the terminal desires to use the static IP, the terminal directly connects to the modem, not the router. In this case, an L2 switch is needed between the modem and the router. The terminal is directly connected to the L2 switch connected to the back of the modem, and the L2 switch is connected to the router, so that the terminal and the router are connected to the same system.

However, when a fixed IP address is used in a dynamic IP-based access network, if a network is connected and an IP is assigned, or if a public static IP address is set in a network device in advance without authentication, a fixed static IP is set in the terminal It is possible to use the network immediately. Therefore, since the session is not created in the network equipment and there is no authentication, it is impossible to control using the packet accounting or CoA (Change of Authorization) for the corresponding terminal.

SUMMARY OF THE INVENTION The present invention provides a modem apparatus and a fixed IP providing system that provide authentication, billing, and session control for a stationary IP-enabled subscriber in a dynamic IP-based network.

According to one aspect of the present invention, a modem device includes a first port connected to a fixed IP terminal and transmitting / receiving data to / from the fixed IP terminal, a second port modulating data input through the first port, A modem unit for modulating the data received from the first port and outputting the modulated data to the first port, a second port for receiving and storing a fixed IP address previously designated by the subscriber from the network, And outputs the received data to the modem unit. If the received data is not identical to the received IP address, it is determined that the received IP address is identical to the assigned static IP address. And a memory for storing instructions to be executed by the processor.

Further comprising at least one second port connected to the floating IP terminal and transmitting / receiving data to / from the floating IP terminal,

The processor comprising:

Mapping the allocated static IP address to the first port, mapping the dynamic IP address allocated from the dynamic IP terminal to the second port, mapping the IP address of the IP terminal from the data received from the second port, And may block network transmission of data received from the second port if the checked IP address is not the fixed IP address or the mapped floating IP address.

The IP address of the fixed IP terminal, which is confirmed from the data received through the first port,

And may be an IP address input by the subscriber through the address setting screen of the fixed IP terminal.

The fixed IP address may be a fixed IP address,

And may be set for the connection session of the modem device created in the network connection server connecting the modem device to the network and used for billing, authentication and session control.

The processor comprising:

A dynamic IP allocation request may be made to an IP allocation server that dynamically allocates an IP address for use in the network, and the fixed IP address may be allocated from the IP allocation server.

The processor comprising:

Requesting dynamic IP allocation to a network connection server connecting the modem apparatus to the network, allocating the static IP address from the network connection server,

The network access server comprises:

The fixed IP address may be received from an authentication server that performs subscriber authentication for connection to the network and allocated to the modem apparatus.

The processor comprising:

The fixed IP address mapped to unique information of the modem apparatus is allocated from the network,

Wherein the fixed IP address and the unique information of the modem apparatus

An IP allocation server for dynamically allocating an IP address for use in the network, or an authentication server for performing subscriber authentication for connection to the network.

According to another aspect of the present invention, there is provided a fixed IP providing system including a network connection server connecting a modem device to a network, and an address allocation server allocating a dynamic IP address for use in the network,

The address assignment server,

Wherein the IP address of the modem device is mapped to the fixed IP address previously specified by the subscriber and stored in the network connection server. When the IP address allocation request is received from the modem device through the network connection server, Identifies and assigns the address to the modem device,

The network access server comprises:

And performs authentication, accounting and session control for the modem device using the fixed IP address.

Further comprising an authentication server for performing subscriber authentication for accessing the network,

The network access server comprises:

When the IP address assignment request is received from the modem apparatus, the connection session is established, and if the modem apparatus succeeds in the subscriber authentication in conjunction with the authentication server, the fixed IP address can be set in the connection session.

The network access server comprises:

Upon receipt of a first Dynamic Host Configuration Protocol (DHCP) message from the modem device, creates a connection session and forwards the first DHCP message to the address assignment server, Receives a DHCP message and forwards the DHCP message to the modem device, applies a first session policy to the connection session, applies a second session policy to the connection session if the subscriber authentication is successful,

Wherein the first session policy is a session policy defined to operate before authentication,

The second session policy may be a session policy defined for the subscriber.

Wherein the first DHCP message comprises:

A DHCP discovery message transmitted by the IP terminal to access the network,

Wherein the second DHCP message comprises:

Address assignment acknowledgment message (DHCP Ack).

The address assignment server,

A unique information of the subscriber's modem device received from the subscriber information system managing information of the subscriber of the network access service, area information in which the subscriber's modem device is installed, and a fixed IP address designated by the subscriber,

From the DHCP message received from the modem device through the network connection server, the unique information of the modem device and the installation area of the modem device, and generates a DHCP message including the unique information and the fixed IP address mapped to the installation area To the network connection server.

According to another aspect of the present invention, a fixed IP providing system includes a network connection server connecting a modem apparatus to a network, and an authentication server performing subscriber authentication for connecting to the network,

The authentication server includes:

A network connection server for storing the unique information of the modem device and a fixed IP address designated by the subscriber in advance and for storing a fixed IP address mapped to unique information of a modem device requesting subscriber authentication through the network connection server, Provide,

The network access server comprises:

And performs authentication, accounting and session control for the modem device using the fixed IP address.

The network access server comprises:

Upon receiving a Point-to-Point Protocol (PPP) authentication request from the modem apparatus,

If the modem device succeeds in authenticating the subscriber, receives an authentication completion message including the fixed IP address from the authentication server, sets the fixed IP address in the access session,

When the dynamic IP allocation request is received from the modem apparatus, the fixed IP address can be allocated to the modem apparatus.

The authentication server includes:

The fixed IP address may be stored in the Framed IP Address field of the Access Accept message.

The network access server comprises:

Exchange a Dynamic Host Configuration Protocol (DHCP) message with the modem device, and provide the fixed IP address to the modem device through the DHCP message.

According to the embodiment of the present invention, a fixed IP is set in a terminal, and a fixed IP is allocated in a modem connected to the terminal through a DHCP procedure. Therefore, the terminal operates as a fixed IP, but operates as a dynamic IP in the network, so that authentication, billing, and session control for a static IP can be performed in the same manner as a dynamic IP in a network. And since the terminal is implemented with the minimum operation of setting the static IP, the system change is minimized.

In addition, various business models based on dynamic IP can be provided to fixed IP subscribers.

In this way, it is possible to provide the fixed IP to the subscribers, which is conventionally available only to special equipment such as a server. In addition to the operation of inputting the fixed IP at the subscriber terminal, The subscriber can be assigned a fixed IP address.

1 is a network configuration diagram for providing a static IP according to an embodiment of the present invention.
2 is a network configuration diagram for providing a static IP according to another embodiment of the present invention.
3 is a network configuration diagram for providing a fixed IP according to another embodiment of the present invention.
4 is a network configuration diagram for providing a static IP according to another embodiment of the present invention.
5 is an example of an address setting screen of a fixed IP terminal according to an embodiment of the present invention.
6 is a flowchart illustrating a fixed IP provision process according to an embodiment of the present invention.
7 is a flowchart illustrating a fixed IP provision process according to another embodiment of the present invention.
8 is a flowchart illustrating a network access control process for a fixed IP terminal according to an embodiment of the present invention.
9 is a flowchart illustrating the operation of the modem apparatus according to the embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily carry out the present invention. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In order to clearly explain the present invention, parts not related to the description are omitted, and like parts are denoted by similar reference numerals throughout the specification

Throughout the specification, when an element is referred to as " comprising ", it means that it can include other elements as well, without excluding other elements unless specifically stated otherwise. Also, the terms " part, " " module, " and " module ", etc. in the specification mean a unit for processing at least one function or operation and may be implemented by hardware or software or a combination of hardware and software have.

In this specification, a network access service is defined as a service that allows a subscriber to receive an Internet service by allocating an IP address, which is an Internet resource owned by an Internet service provider (ISP), to a subscriber.

Here, there are two types of IP address allocation schemes, namely, a dynamic IP address scheme and a static IP address scheme.

According to the Dynamic Host Configuration Protocol (DHCP) protocol, the dynamic IP address scheme assigns an arbitrary IP address to a subscriber in the list after subscriber authentication every time a subscriber connects to the network. A dynamic IP address is allocated to a subscriber when a network is connected, and a dynamic IP address allocated is recovered to a dynamic IP address pool when a connection is disconnected. Since IP address resources are limited, Internet operators typically assign IP addresses dynamically

The fixed IP addressing method refers to an Internet access address used by an Internet Service Provider (ISP) to lend a subscriber an IP address from a pool of IP addresses it has in a particular host for a specific period of time. In other words, it is an IP address that the subscriber can always use fixedly.

In the embodiment of the present invention, such a static IP is assigned as a dynamic IP allocation scheme so that authentication, billing, and session control are possible for a static IP.

Hereinafter, a modem apparatus and a fixed IP providing system according to an embodiment of the present invention will be described with reference to the drawings.

FIG. 1 is a network configuration diagram for providing a static IP according to an embodiment of the present invention, FIG. 2 is a network configuration diagram for providing a static IP according to another embodiment of the present invention, and FIG. 4 is a network configuration diagram for providing a static IP according to another embodiment of the present invention. FIG. 5 is a block diagram of a fixed IP terminal according to an embodiment of the present invention. This is an example of the address setting screen.

In this case, FIG. 1 shows an embodiment having only a dedicated port for providing a fixed IP to the modem device, and may be implemented as a dedicated modem device for providing a fixed IP.

2 and 3 show an embodiment in which a fixed IP dedicated port and a general modem port are provided in the modem apparatus, wherein the general modem port refers to a port implemented in the conventional modem apparatus. 2, a dynamic IP terminal may be connected to the general modem port, an L2 switch may be connected, or an IP router may be connected. Referring to FIG. 3, a plurality of general modem ports are provided, and may include an L2 switch function.

In addition, FIG. 4 illustrates an embodiment in which the modem apparatus includes a fixed IP dedicated port and a plurality of general modem ports, and may include an IP router function.

A configuration including a general modem port of the modem device, an L2 switch function, and an IP router function, a network access server (NAS), an address allocation server, and an authentication server have already been disclosed and obvious to those skilled in the art , A description thereof will be omitted, and a configuration related to provision of fixed IP will be described below.

Referring to FIG. 1, a fixed IP terminal 100 is connected to a network access server (NAS) 300 through a modem device 200.

Here, the fixed IP terminal 100 may be a terminal connected to the network 400 using IP, a smart device connected to a PC, a notebook, a tablet, and the Internet. The fixed IP terminal 100 can be any terminal by setting a fixed IP. The fixed IP terminal 100 can set the fixed IP in the same manner as in FIG.

Referring to FIG. 5, when the user desires to access the network 400, the user sets an IP address through the IP address setting screen 800. At this time, it is possible to set "receive address automatically", or the user can directly input the IP address.

 If " automatically receive address " is selected, the dynamic IP address provided by the address assignment server 500 is allocated. On the other hand, the user can input the static IP given to the user by selecting the " Use the next IP address " When the user inputs the fixed IP address and sets the IP address of the IP terminal, the corresponding IP terminal operates as the fixed IP terminal 100.

The network connection server 300 connects the modem apparatus 200 to the network 400. [ The network connection server 300 is connected to the address assignment server 500 and the authentication server 600.

The network access server 300 performs authentication, accounting and session control using the IP address.

The network access server 300 is a device for applying a service policy for subscriber network traffic, and applies a service policy to subscriber network traffic using an IP address.

The address assignment server 500 may be a DHCP server that allocates Dynamic IP according to the DHCP. The DHCP server provides the dynamic host configuration service described in IETF REC 2131. The DHCP server assigns an IP address to a specific DHCP client through (1) Discover, (2) Offer, (3) Request, and (4) ACK.

The authentication server 600 may be an AAA server that provides authentication, authorization, and accounting services to the subscriber authentication server 600 to determine whether to allow access to the network 400 . The AAA server is described in IETF RFC 2138 and is an example of a RADIUS (Remote Authentication Dial-in User Service) server.

The authentication server 600 is operated by an Internet service provider (ISP), and stores authentication information of all subscribers.

The authentication server 600 processes subscriber authentication according to an access request message transmitted from the network access server 300. [

At this time, the information of the subscriber, that is, the MAC of the modem 200, the local information such as the topology port of the network connection, and the allocated static IP address information are provisioned to the server equipment in advance.

According to one embodiment, the fixed IP address is included in the address allocation server 500, and the modem apparatus 200 can receive a fixed IP address through the DHCP message exchange with the address allocation server 500.

 When the modem 200 requests the IP address assignment to the address assignment server 500, the network access server 300 uses the DHCP Relay function to the address assignment server 500 having the authority to assign an IP address And performs an IP request. Packet accounting for the fixed IP subscriber is performed by the network access server 300.

At this time, the modem device performs a DHCP procedure according to a normal procedure to obtain a fixed IP address.

The address assignment server 500 maps the unique information of the modem device 200 and the fixed IP address designated by the subscriber in advance and stores the same. The address assignment server 500 can map the fixed IP address designated by the fixed IP subscriber (or subscriber) together with the unique information of the modem device and the area information in which the modem device is installed. Here, the unique information of the modem device may be MAC (Medium Access Control) information.

When the IP address assignment request is received from the modem device 200 through the network connection server 300, the address assignment server 500 checks the static IP address mapped to the unique information and the local information of the modem device 200, To the device (200).

Here, the fixed IP address may be a form directly input or selected by the subscriber, or a form set by the Internet service provider for each subscriber.

According to another embodiment, the fixed IP address is included in the authentication server 600, and the network access server 300 receives the fixed IP address mapped to the MAC information of the modem 200 in the authentication process, And assigns the fixed IP address to the modem apparatus 200.

The authentication server 600 maps the fixed IP designated by the fixed IP subscriber (or subscriber) together with the MAC information of the modem apparatus 200 and the area information in which the modem apparatus 200 is installed.

The address allocation server 500 or the authentication server 600 searches the fixed IP addresses stored in advance based on the MAC information of the modem 200 and the registered local information of the modem 200 to select a corresponding fixed IP address .

The address assignment server 500 and the authentication server 600 may be connected to the subscriber information system 700.

The subscriber information system 700 manages subscriber information subscribed to a network access service provided by an Internet service provider (ISP). Subscriber information stored in the subscriber information system 700 is provided to the address allocation server 500 and the authentication server 600. [

Here, the subscriber information includes Medium Access Control (MAC) information of the subscriber's modem device 200, area information in which the modem device 200 is installed, and a fixed IP address designated by the subscriber.

The configuration of the modem device 200 will be described below with reference to an embodiment.

1, the modem apparatus 200 includes a first port 201, a modem unit 203, a memory 205, and a processor 207. [

2 and 3, the modem apparatus 200 includes a first port 201, a second port 209, a modem unit 203, a memory 205, and a processor 207.

4, the modem apparatus 200 includes a first port 201, a plurality of second ports 209, a modem unit 203, a memory 205, and a processor 207. [

The first port 201 is connected to the fixed IP terminal 100 and transmits / receives data to / from the fixed IP terminal 100. The first port 201 is configured to operate as an Super DMZ or Twin IP function.

At least one second port 209 is connected to the floating IP terminal 900 or the IP sharer 1000 to transmit and receive data to and from the floating IP terminal 900 or the IP sharer 1000.

At least one second port 209, which is a port other than the first port 201, may be connected to the IP terminal including the dynamic IP terminal 900, i.e., a DHCP client.

At least one second port 209 may operate the same as an existing L2 hub. The modem device 200 physically includes an L2 hub, and the functions thereof may be separated on a module basis.

The modem unit 203 performs modulation and demodulation of the signals. The modem unit 203 modulates data input through the first port 201 or the second port 209 and transmits the modulated data to the network connection server 300. The modem unit 203 modulates the data received from the network connection server 300 And outputs the modulated signal to the first port 201 or the at least one second port 209.

The memory 205 stores instructions and programs to be executed by the processor 207. [

The processor 207 performs a DHCP operation in advance and is always assigned the same fixed IP address.

The processor 207 performs port control. That is, when the fixed IP address set in the first port 201 is the same as the IP address of the IP terminal 100 connected to the first port 201, the first port 201 operates as a TWIN IP or Super DMZ function .

The processor 207 allocates a fixed IP address mapped to the MAC information of the modem apparatus 200 from the address assignment server 500 or the authentication server 600 and maps the fixed IP address to the first port 201. The IP address of the fixed IP terminal is checked from the data received through the first port 201, and it is determined whether the IP address matches the fixed IP address mapped to the first port 201. If they match, the received data is output to the modem unit 203, and if they do not match, the network transmission of the received data is blocked.

If the IP terminal set to an IP address other than the fixed IP address assigned by the processor 207 is connected to the first port 201, even if the modem device 200 acquires a fixed IP address through a normal process, And the IP address are different from each other, the network service can not be provided.

According to one example, the processor 207 may request a dynamic IP allocation to the address allocation server 500 and receive a static IP address through a dynamic IP allocation response.

According to another example, the processor 207 may request a dynamic IP allocation to the network access server 300 and receive a static IP address through a dynamic IP allocation response. At this time, the network access server 300 receives the fixed IP address from the authentication server 600 and allocates the fixed IP address to the modem apparatus 200. In this embodiment, the authentication server 600 can have its own processing capability without burdening the address assignment server 500.

A series of processes for providing a static IP address based on the above-described configuration will be described in accordance with the embodiments.

FIG. 6 is a flowchart illustrating a process of providing a static IP address according to an embodiment of the present invention, which corresponds to an embodiment in which static IP address information is stored in an address assignment server.

Referring to FIG. 6, the address allocation server 500 stores MAC information of the modem device 200 registered by the fixed IP service subscriber at the time of subscription or subscription, and area information of the modem device 200 with a fixed IP address (S101).

The modem device 200 performs a DHCP procedure in a normal manner. That is, the modem device 200 transmits a DHCP discovery message to the network connection server 300 to access the network 400 (S103).

The network connection server 300 creates a connection session (S105). The DHCP discovery message received in step S103 is transmitted to the address assignment server 500 (S107).

The address assignment server 500 confirms the MAC information and the local information of the modem apparatus 200 (S109). At this time, the MAC information and the local information of the modem device 200 may be included in the DHCP Discovery message or may be confirmed from the authentication server 600. [

The address assignment server 500 assigns the fixed IP address mapped to the information checked in step S109 to the modem apparatus 200 (S111). And transmits a DHCP Offer message including the allocated static IP address to the network connection server 300 (S113).

The network connection server 300 delivers the received DHCP offer message to the modem device 200 (S115).

The modem device 200 transmits a DHCP request message requesting use of the fixed IP address confirmed from the DHCP offer message to the network access server 300 in step S117. The modem device 200 displays the acceptance of using the address by transmitting the fixed IP address provided from the address assignment server 500 in the DHCP request message together with the fixed IP address. The network access server 300 transmits a DHCP request message to the address assignment server 500 (S119).

The address assignment server 500 transmits an address assignment confirmation message (DHCP Ack) to the network connection server 300 (S121).

The network access server 300 applies the fixed IP address setting and the unauthenticated session policy to the connection session generated in step S105 (S123).

Here, the unverified session policy may include a captive portal output. Here, a dependent portal is a web page that is automatically displayed when a URL is accessed when accessing the public wireless network for the first time. In the dependent portal, the user must input login information or agree to the purpose of using the network before using the wireless network.

The network access server 300 transmits an address allocation confirmation message (DHCP Ack) to the modem apparatus 200 (S125). Thereafter, the modem apparatus 200 becomes ready to use the fixed IP address.

The modem device 200 transmits an authentication request (Access Request) to the authentication server 600 through the network access server 300 (S127, S129) for subscriber authentication.

The authentication server 600 authenticates the modem device 200 using the MAC information of the modem device 200 and transmits an authentication response including an authentication result to the network connection server 300. [ To the modem device 200 (S131, S133).

The network access server 300 transmits an authentication response to the modem apparatus 200, and then applies an authentication session policy to the connection session (S135).

FIG. 7 is a flowchart illustrating a process of providing a fixed IP according to another embodiment of the present invention, which corresponds to an embodiment in which fixed IP address information is stored in an authentication server.

The address allocation server 500 stores the MAC information of the modem 200 registered by the subscriber or subscription by the fixed IP service subscriber and the area information in which the modem 200 is installed by mapping the IP address with the fixed IP address at step S201.

The modem apparatus 200 transmits a PPP authentication request including a PPP (Peer-to-Peer Protocol) connection ID and a password provided at the time of subscription to the network access server 300 (S203).

The network connection server 300 creates a connection session (S205). In step S203, the authentication server 600 transmits an authentication request including the embedded PPP authentication information to the authentication server 600 (S207).

The authentication server 600 performs an authentication process (S209) to confirm that the information included in the authentication request is valid. If the authentication is successful, the MAC information and the local information of the modem apparatus 200 are checked and the fixed IP address mapped to the checked information is confirmed (S211).

The authentication server 600 includes the confirmed fixed IP address in the authentication response and transmits it to the network connection server 300 (S213).

At this time, according to one embodiment, the authentication server 600 may include a static IP address in a specific field of the authentication response message. This particular field may use the 'Framed-IP-Address' entry in RADIUS as defined in RFC 2865.

The network access server 300 sets a fixed IP address in the connection session created in step S205 and applies the authentication session policy (S215).

The network connection server 300 receives the DHCP discovery message from the modem 200 in step S217 and allocates the fixed IP address obtained in step S213 to the modem 200 in step S219. Then, the allocated IP address is included in the DHCP offer message and transmitted to the modem 200 (S221).

The modem device 200 transmits a DHCP request message requesting use of the fixed IP address from the DHCP offer message to the network access server 300 in step S223. The network access server 300 transmits an address assignment confirmation message (DHCP Ack) to the modem apparatus 200 (S225).

FIG. 8 is a flowchart illustrating a network access control process for a fixed IP terminal according to an embodiment of the present invention, and is performed after the steps of FIGS. 6 and 7. FIG.

Referring to FIG. 8, the fixed IP terminal 100 sets a fixed IP (S301), and then transmits the traffic to the modem 200 (S303).

The modem apparatus 200 transmits the traffic received from the fixed IP terminal 100 to the network connection server 300 (S305).

At this time, the network access server 300 transmits an accounting start message (acct-status-type = START) to the authentication server 600 (S307).

At this time, the network connection server 300 performs packet accounting. When the predetermined time comes, the network connection server 300 periodically transmits an account interinformation message to the authentication server 600 (S307).

Thereafter, when the fixed IP terminal 100 transmits the termination of connection to the modem apparatus 200 (S309), the modem apparatus 200 transmits the connection termination to the network connection server 300 (S311). Then, the network access server 300 transmits a message (Account Stop) for terminating the packet accounting to the authentication server 600 (S313).

9 is a flowchart illustrating the operation of the modem apparatus according to the embodiment of the present invention.

9, when data is received (S401), the processor 207 of the modem device 200 confirms a port to which data is input (S403).

The processor 207 of the modem device 200 determines whether the port identified in step S403 is the first port 201 (S405).

If it is not the first port 201, the step ends. That is, if it is the second port 209, the operation of the general modem is performed.

If it is the first port 201, the IP address of the IP terminal included in the received data is confirmed (S407).

At this time, it is determined whether the confirmed IP address matches the fixed IP address allocated by the modem apparatus 200 (S409).

If they match, it transmits the received data to the network connection server 300 (S411).

If they do not match, the network transmission of the received data is blocked (S413).

According to the above description, the network access server 300 operating on the floating IP can also perform authentication, billing, and session control for the static IP.

The embodiments of the present invention described above are not implemented only by the apparatus and method, but may be implemented through a program for realizing the function corresponding to the configuration of the embodiment of the present invention or a recording medium on which the program is recorded.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, It belongs to the scope of right.

Claims (16)

A first port connected to the fixed IP terminal and transmitting / receiving data to / from the fixed IP terminal,
A modem unit for modulating data input through the first port and transmitting the modulated data to a network, modulating data received from the network and outputting the modulated data to the first port,
The IP address of the fixed IP terminal is determined from the data received through the first port, and if the checked IP address matches the allocated static IP address, A processor for outputting the received data to the modem unit, and if not, interrupting the network transmission of the received data; and
A memory for storing instructions to be executed by the processor,
Lt; / RTI > The method of claim 1,
Further comprising at least one second port connected to the floating IP terminal and transmitting / receiving data to / from the floating IP terminal,
The processor comprising:
Mapping the allocated static IP address to the first port,
The dynamic IP terminal maps the dynamic IP address allocated from the network to the second port,
Wherein the control unit checks the IP address of the IP terminal from the data received from the second port and transmits the network transmission of the data received from the second port when the checked IP address is not the fixed IP address or the mapped floating IP address The modem device to block. The method of claim 1,
The IP address of the fixed IP terminal, which is confirmed from the data received through the first port,
And the IP address input by the subscriber through the address setting screen of the fixed IP terminal. The method of claim 1,
The fixed IP address may be a fixed IP address,
And is set for a connection session of the modem apparatus created in a network connection server connecting the modem apparatus to the network, and is used for charging, authentication and session control. The method of claim 1,
The processor comprising:
Wherein the dynamic IP address assignment unit requests dynamic IP allocation to an IP allocation server for dynamically allocating an IP address for use in the network and allocates the fixed IP address from the IP allocation server. The method of claim 1,
The processor comprising:
Requesting dynamic IP allocation to a network connection server connecting the modem apparatus to the network, allocating the static IP address from the network connection server,
The network access server comprises:
The modem device receives the fixed IP address from an authentication server that performs subscriber authentication for connection to the network and allocates the fixed IP address to the modem device. The method of claim 1,
The processor comprising:
The fixed IP address mapped to unique information of the modem apparatus is allocated from the network,
Wherein the fixed IP address and the unique information of the modem apparatus
An IP allocation server for dynamically allocating an IP address for use in the network or an authentication server for performing subscriber authentication for connection to the network. A network access server connecting the modem device to the network, and
And an address allocation server for allocating a dynamic IP address for use in the network,
The address assignment server,
Wherein the IP address of the modem device is mapped to the fixed IP address previously specified by the subscriber and stored in the network connection server. When the IP address allocation request is received from the modem device through the network connection server, Identifies and assigns the address to the modem device,
The network access server comprises:
And performs authentication, accounting and session control for the modem device using the fixed IP address. 9. The method of claim 8,
Further comprising an authentication server for performing subscriber authentication for accessing the network,
The network access server comprises:
A fixed IP providing system for creating an access session when an IP address allocation request is received from the modem apparatus and establishing the fixed IP address in the access session when the modem apparatus succeeds in authenticating the subscriber in cooperation with the authentication server, . The method of claim 9,
The network access server comprises:
Upon receipt of a first Dynamic Host Configuration Protocol (DHCP) message from the modem device, creates a connection session and forwards the first DHCP message to the address assignment server, Receives a DHCP message and forwards the DHCP message to the modem device, applies a first session policy to the connection session, applies a second session policy to the connection session if the subscriber authentication is successful,
Wherein the first session policy is a session policy defined to operate before authentication,
Wherein the second session policy is a session policy defined for the subscriber. 11. The method of claim 10,
Wherein the first DHCP message comprises:
A DHCP discovery message transmitted by the IP terminal to access the network,
Wherein the second DHCP message comprises:
A static IP provisioning system that is an address assignment confirmation message (DHCP Ack). 11. The method of claim 10,
The address assignment server,
A unique information of the subscriber's modem device received from the subscriber information system managing information of the subscriber of the network access service, area information in which the subscriber's modem device is installed, and a fixed IP address designated by the subscriber,
From the DHCP message received from the modem device through the network connection server, the unique information of the modem device and the installation area of the modem device, and generates a DHCP message including the unique information and the fixed IP address mapped to the installation area To the network connection server. A network access server connecting the modem device to the network, and
And an authentication server for performing subscriber authentication for accessing the network,
The authentication server includes:
A network connection server for storing the unique information of the modem device and a fixed IP address designated by the subscriber in advance and for storing a fixed IP address mapped to unique information of a modem device requesting subscriber authentication through the network connection server, Provide,
The network access server comprises:
And performs authentication, accounting and session control for the modem device using the fixed IP address. The method of claim 13,
The network access server comprises:
Upon receiving a Point-to-Point Protocol (PPP) authentication request from the modem apparatus,
If the modem device succeeds in authenticating the subscriber, receives an authentication completion message including the fixed IP address from the authentication server, sets the fixed IP address in the access session,
And allocates the fixed IP address to the modem apparatus when a dynamic IP allocation request is received from the modem apparatus. The method of claim 14,
The authentication server includes:
Wherein the fixed IP address is stored in a framed IP address field of an Access Accept message. The method of claim 14,
The network access server comprises:
Exchanges a Dynamic Host Configuration Protocol (DHCP) message with the modem apparatus, and provides the fixed IP address to the modem apparatus via the DHCP message.

Images