KR20220151495A - System and method for supporting network connection of vessel - Google Patents

Abstract

The present invention relates to a ship network access support system and method enabling access to each piece of equipment in the ship using a floating internet protocol (IP) address from land. The network access support system according to an embodiment of the present invention stores a first table in which port numbers, first IP addresses, and second IP addresses of multiple equipment inside the ship are mapped by the platform server, stores a second table in which port numbers, third IP addresses, and fourth IP addresses of multiple equipment inside the ship are mapped by the firewall server, periodically sends tracking packets by the platform server to receive a third IP address assigned to the firewall server, and if the third IP address received by the platform server and the first IP address stored in the first table are different, updates the first table with the received third IP address, to access to multiple equipment inside the ship using the third IP address by the land server.

Description

Network connection support system and method of vessel {SYSTEM AND METHOD FOR SUPPORTING NETWORK CONNECTION OF VESSEL}

The present invention relates to a network access support system and method for a ship, and more particularly, to a ship network access support system enabling access to each equipment in the ship using a floating IP (Internet Protocol) address in a land server, and It's about how.

In general, in the network environment of ships operating in the ocean, a dynamic IP address is allocated and used to each ship due to a limitation in the number of fixed IP (Internet Protocol) addresses. A floating IP address actually assigned to a ship is mostly used for a firewall of a Very Small Aperture Terminal (VSAT) system, and as the ship moves, satellites connected through communication change. In this process, the IP address of the vessel is changed and assigned in the process of reconnection after disconnection of satellite communication. Therefore, it is possible to easily connect to a specific land site from a ship through the Internet, but it is impossible to connect from a land server to a moving ship using an IP address.

Korean Patent Laid-open Publication No. 10-2002-0029879 (Video information providing method and system using satellite communication network, 2002.02.26.)

The present invention relates to a network access support system and method for a ship enabling access to each equipment in the ship using a floating IP (Internet Protocol) address from a land server.

A network access support system for a ship according to an embodiment of the present invention stores a first table in which port numbers, first Internet Protocol (IP) addresses, and second IP addresses of multiple devices inside the ship are mapped, and periodically tracks packets. to receive a third IP address allocated to the firewall server, and when the received third IP address and the first IP address stored in the first table are different, the first table is used to receive the third IP address received platform server updating with; Storing a second table mapping the port numbers of the plurality of devices inside the ship, the third IP address and the fourth IP address, and transmitting the third IP address stored in the second table when the tracking packet is received the firewall server; and a land server capable of accessing a plurality of equipment inside the ship using the third IP address.

Also, the firewall server may discard the tracking packet after receiving the tracking packet and transmitting the third IP address.

In addition, the first IP address and the third IP address include IP addresses used by the land server to access multiple equipment inside the ship, and the second IP address and the fourth IP address are used inside the ship. You can include the virtual local area network IP address you are using.

In addition, the platform server may form the tracking packet according to Internet Control Message Protocol (ICMP), which is an IP layer protocol of a Transmission Control Protocol (TCP)/IP protocol layer model.

In addition, the platform server may transmit the third IP address to the land server when the first IP address stored in the first table is updated to the third IP address.

At this time, the platform server may transmit the tracking packet to the IP address of the land server as a destination.

A method for supporting network access of a ship according to an embodiment of the present invention is to store a first table in which port numbers, first Internet Protocol (IP) addresses, and second IP addresses of multiple devices inside the ship are mapped by a platform server. step; Storing, by a firewall server, a second table in which port numbers, third IP addresses, and fourth IP addresses of the plurality of devices inside the ship are mapped; receiving, by the platform server, the third IP address allocated to the firewall server by periodically sending a tracking packet; updating, by the platform server, the first table with the received third IP address when the received third IP address is different from the first IP address stored in the first table; and accessing, by a land server, a plurality of equipment inside the ship using the third IP address.

The method may further include, by the firewall server, discarding the tracking packet after receiving the tracking packet and transmitting the third IP address.

In addition, the first IP address and the third IP address include IP addresses used by the land server to access multiple equipment inside the ship, and the second IP address and the fourth IP address are used inside the ship. You can include the virtual local area network IP address you are using.

In addition, the tracking packet may include Internet Control Message Protocol (ICMP), which is an IP layer protocol of a Transmission Control Protocol (TCP)/IP protocol layer model.

The method may further include transmitting the third IP address to the land server when the first IP address stored in the first table is updated by the platform server to the third IP address.

In this case, the transmitting of the third IP address to the land server may include transmitting, by the platform server, the tracking packet to the IP address of the land server as a destination.

According to the embodiments of the present invention, even when the IP address assigned to the ship changes due to the movement of the ship, it is possible to enable access to various equipment inside the ship from the land server.

In addition, the firewall server receives the tracking packet and transmits the third IP address to the platform server, discards the received tracking packet without transmitting it to the outside through the communication unit, and consumes bandwidth by the tracking packet generated by the platform server. can prevent

1 is an exemplary view showing the configuration of a network connection support system for a ship according to an embodiment of the present invention.
2 and 3 are examples of IP address management inside a vessel for supporting network access of a vessel according to an embodiment of the present invention.
4 is a flowchart showing a procedure of a method for supporting network access of a ship according to an embodiment of the present invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily carry out the present invention. This invention may be embodied in many different forms and is not limited to the embodiments set forth herein.

1 is an exemplary view showing the configuration of a network connection support system for a ship according to an embodiment of the present invention.

As shown in FIG. 1, the ship's network connection support system 100 includes a communication unit 111, a firewall server 112, a main network switch 113, a first network 114, a platform server 115, It may include a first equipment 116, a second equipment 117, a second network 118, a subnetwork switch 119, a third equipment 120, a fourth equipment 121 and a land server 130. can According to an embodiment, a virtual local area network (VLAN) may be implemented regardless of the physical network configuration inside the ship 110. The virtual local area network uses a LAN switch or an asynchronous transfer method (ATM) switch to arbitrarily divide the range in which communication packets are delivered regardless of physical wiring, and even if they are connected to different networks, they are included in the same virtual local area network. Terminals can be provided with the same service as those physically connected to the same local area network. The IEEE 802.1Q standard is standardized to configure a virtual local area network using a plurality of LAN switches. For example, the virtual local area network inside the vessel 110 includes a first network 114 including a platform server 115, first equipment 116 and second equipment 117, and a subnetwork switch 119 ), the second network 118 including the third equipment 120 and the fourth equipment 121, but is not limited thereto.

The communication unit 111 may be installed in the ship 110 operating in the ocean and perform communication between the ship 110 and the land server 130 located on land using a satellite communication method. According to one embodiment, the communication unit 111 may include a Very Small Aperture Terminal (VSAT) antenna, but is not limited thereto. As the ship 110 moves, the satellite connected to the communication unit 111 is changed, and in this process, an IP address is changed and assigned in a reconnection process after disconnection of satellite communication. According to another embodiment, the communication unit 111 may include a mobile communication module that performs communication using a mobile communication network.

The platform server 115 may store a first table in which port numbers, first Internet Protocol (IP) addresses, and second IP addresses of the plurality of devices 116, 117, 120, and 121 inside the ship 110 are mapped. . According to one embodiment, the platform server 115 may store the first table in the form of Table 1. For example, the first IP address includes a public IP address used to access multiple equipment inside the ship 110 from the land server 130 outside the ship 110, and the second IP address includes the ship 110 It can include the internal IP address of the virtual local area network used internally.

Equipment name public IP:port number internal IP:port number platform server 11.1.1.1:100 192.10.1.2:100 equipment 1 11.1.1.1:200 192.10.1.3:200 equipment 2 11.1.1.1:300 192.10.1.4:300 equipment 3 11.1.1.1:400 192.10.2.2:400 equipment 4 11.1.1.1:500 192.10.2.3:500

The platform server 115 is connected to a network inside the ship, and may periodically transmit a tracking packet (IP Trace packet) to receive a third IP address assigned to the firewall server 112 . According to an embodiment, the platform server 115 may form a tracking packet according to Internet Control Message Protocol (ICMP), which is an IP layer protocol of a Transmission Control Protocol (TCP)/IP protocol layer model. Platform server 115 ) may form a tracking packet periodically and transmit the tracking packet to the IP address (eg, 10.1.1.1) of the land server 130 as a destination.

The platform server 115 may update the first table with the received third IP address when the received third IP address and the first IP address stored in the first table are different. According to one embodiment, the platform server 115 may perform management and update of the stored first table using a machine learning algorithm such as deep learning.

The firewall server 112 communicates with the platform server 115 included in the first network 114 through the main network switch 113 and communicates with the second network 118 through the sub network switch 119. communication can be performed.

The firewall server 112 may store a second table in which port numbers, third IP addresses, and fourth IP addresses of multiple devices inside the ship are mapped. According to an embodiment, the firewall server 112 may store the second table in the form of Table 2. For example, the third IP address includes a public IP address used to access multiple equipment inside the ship 110 from the land server 130 outside the ship 110, and the fourth IP address includes the ship 110 It can include the internal IP address of the virtual local area network used internally.

Equipment name public IP:port number internal IP:port number platform server 11.1.1.1:100 192.10.1.2:100 equipment 1 11.1.1.1:200 192.10.1.3:200 equipment 2 11.1.1.1:300 192.10.1.4:300 equipment 3 11.1.1.1:400 192.10.2.2:400 equipment 4 11.1.1.1:500 192.10.2.3:500

When receiving the tracking packet from the platform server 115, the firewall server 112 may transmit the third IP address (eg, 11.1.1.1) stored in the second table to the platform server 115. Firewall After receiving the tracking packet and transmitting the third IP address to the platform server 115, the server 112 may discard the received tracking packet without transmitting it to the outside through the communication unit 111. Accordingly, it is possible to prevent bandwidth consumption by tracking packets generated by the platform server 115 . According to an embodiment, the firewall server 112 may manage and update the stored second table using a machine learning algorithm such as deep learning.

The main network switch 113 may relay communication between the first network 114 to which the platform server 115 belongs and the firewall server 112 .

When the first table is updated from the platform server 115 inside the ship 110, the land server 130 receives the third IP address, that is, the updated first IP address, and updates the third table stored in the internal database. can do. According to an embodiment, the land server 130 may receive the third IP address from the platform server 115 in a satellite communication method using the communication unit 111 inside the ship 110 and artificial satellites, but the land server The communication method between the 130 and the ship 110 is not limited thereto, and various wireless communication methods, such as a mobile communication method using a mobile communication network and a short-distance communication method when the ship 110 is located close to the land, are used to land server Communication between (130) and vessel (110) can be performed.

The land server 130 may perform communication with the vessel 110 using an IP address table (third table) stored in an internal database.

2 and 3 are examples of IP address management inside a ship for network access support according to an embodiment of the present invention.

As shown in FIG. 2 , the platform server 115 and the firewall server 112 may respectively store a first table and a second table corresponding to a port forwarding table. The land server 130 may access a plurality of devices 116, 117, 120, and 121 inside the ship 110 using an IP address table stored in an internal database.

The platform server 115 may periodically form a tracking packet and transmit the tracking packet to the IP address (eg, 10.1.1.1) of the land server 130 as a destination.

The firewall server 112 checks the IP address (eg, 192.10.1.2) of the platform server 115 by referring to the second table, and discards the received tracking packet without transmitting it to the land server 130 as the destination. can do.

The platform server 115 receives the IP address of the firewall server 112 (eg, 11.1.1.1) and the IP address of the main network switch 113 (eg, 192.10.1.1) through the tracking packet. can

The platform server 115 discards the same IP address (192.10.1.1) as the band (eg, 192) of the virtual local area network inside the ship 110 among the received IP addresses, and discards the remaining IP address (11.1.1.1). ) may be recognized as the third IP address of the firewall server 112. The platform server 115 compares the first IP address stored in the first table with the newly received third IP address 11.1.1.1 of the firewall server 112 to determine whether the first IP address has been changed. As an embodiment, when there is no change in the third IP address of the firewall server 112, the platform server 115 may not change the first table.

As shown in FIG. 3 , the platform server 115 and the firewall server 112 may respectively store a first table and a second table corresponding to a port forwarding table. The land server 130 may access a plurality of devices 116, 117, 120, and 121 inside the ship 110 using an IP address table stored in an internal database.

The platform server 115 may periodically form a tracking packet and transmit the tracking packet to the IP address (eg, 10.1.1.1) of the land server 130 as a destination.

The firewall server 112 checks the IP address (eg, 192.10.1.2) of the platform server 115 by referring to the second table, and discards the received tracking packet without transmitting it to the land server 130 as the destination. can do.

The platform server 115 receives the IP address of the firewall server 112 (eg, 100.10.10.1) and the IP address of the main network switch 113 (eg, 192.10.1.1) through the tracking packet. can

The platform server 115 discards the same IP address (192.10.1.1) as the band (eg, 192) of the virtual local area network inside the ship 110 among the received IP addresses, and discards the remaining IP address (100.10.10.1). ) may be recognized as the third IP address of the firewall server 112. The platform server 115 compares the first IP address (11.1.1.1) stored in the first table with the newly received third IP address (100.10.10.1) of the firewall server 112 to determine whether the first IP address has been changed. can be checked. As an embodiment, the platform server 115 is different from the first IP address (11.1.1.1) stored in the first table and the newly received third IP address (100.10.10.1) of the firewall server 112 so that the firewall server 115 is different from each other. When there is a change in the IP address of the server 112, the platform server 115 may change the first IP address stored in the first table to the newly received third IP address (100.10.10.1) of the firewall server 112. have.

When the first IP address stored in the first table is changed, the platform server 115 may transmit the third IP address, that is, the changed first IP address to the land server 130 through the firewall server 112 .

4 and 5 are flowcharts showing procedures of a method for supporting network access of a vessel according to an embodiment of the present invention. Although process steps, method steps, algorithms, etc. are described in a sequential order in the flowcharts of FIGS. 4 and 5 , such processes, methods and algorithms may be configured to operate in any suitable order. In other words, the steps of the processes, methods and algorithms described in the various embodiments of the invention need not be performed in the order described herein. Also, although some steps are described as being performed asynchronously, in other embodiments some of these steps may be performed concurrently. Further, illustration of a process by depiction in the drawings does not mean that the illustrated process is exclusive of other changes and modifications thereto, and that any of the illustrated process or steps thereof may be one of various embodiments of the present invention. It is not meant to be essential to one or more, and it does not imply that the illustrated process is preferred.

As shown in FIG. 4, in step S410, a first table mapping port numbers, first IP (Internet Protocol) addresses, and second IP addresses of multiple equipment inside the ship is stored. For example, referring to FIGS. 1 to 3, the platform server 115 of the network access support system 100 includes port numbers of a plurality of equipment 116, 117, 120, and 121 inside the ship, a first IP (Internet A first table in which a protocol) address and a second IP address are mapped may be stored. According to one embodiment, the platform server 115 may store the first table in the form of Table 1 described above.

In step S420, a second table in which port numbers, third IP addresses, and fourth IP addresses of multiple equipment inside the vessel are mapped is stored. For example, referring to FIGS. 1 to 3, the firewall server 112 of the network access support system 100 includes port numbers, third IP addresses, and A second table to which the fourth IP address is mapped may be stored. According to an embodiment, the firewall server 112 may store the second table in the form of Table 2 described above.

In step S430, a third IP address assigned to the firewall server is received by periodically sending a tracking packet. For example, referring to FIGS. 1 to 3 , the platform server 115 of the network access support system 100 periodically transmits a tracking packet to receive a third IP address assigned to the firewall server 112. can

In step S440, when the received third IP address is different from the first IP address stored in the first table, the first table is updated with the received third IP address. For example, referring to FIGS. 1 to 3 , the platform server 115 of the network access support system 100, when the third IP address received in step S430 and the first IP address stored in the first table are different. The first IP address of the first table may be updated with the received third IP address.

As shown in Fig. 5, in step S510, tracking packets are periodically transmitted from the platform server to the firewall server. For example, referring to FIGS. 1 to 4 , the platform server 115 of the network access support system 100 periodically transmits a tracking packet (IP Trace packet) to the firewall server 112 . According to an embodiment, the platform server 115 may form a tracking packet according to Internet Control Message Protocol (ICMP), which is an IP layer protocol of a Transmission Control Protocol (TCP)/IP protocol layer model.

In step S520, the firewall server 112 returns its own IP address to the platform server 115 that sent the received tracking packet, and the tracking packet is discarded. For example, referring to FIGS. 1 to 4 , the firewall server 112 of the network access support system 100 returns its own IP address to the platform server 115 that sent the received tracking packet, and tracks the tracking packet. Packets can be discarded.

In step S530, the received IP address of the firewall server is compared with the previously stored IP address of the firewall server. For example, referring to FIGS. 1 to 4, the platform server 115 of the network access support system 100 includes the received IP address of the firewall server 112 and the previously stored IP address of the firewall server 112. can be compared.

In step S540, when the IP address is changed, each equipment public IP/port number mapping table stored in the platform server is updated. For example, referring to FIGS. 1 to 4, the platform server 115 of the network access support system 100, when the IP address of the firewall server 112 is changed as a result of comparison in step S530, each stored in the platform server The equipment public IP/port number mapping table (first table) may be updated.

In step S550, the public IP/port number mapping table of each device reflecting the changed IP address of the firewall is transmitted to the land server, and the land server updates it. For example, referring to FIGS. 1 to 4, the platform server 115 of the network access support system 100 has a public IP/port number mapping table of each device reflecting the IP address of the firewall changed in step S540. 1 table) to the land server 130, and the land server 130 may update the third table stored therein.

In step S560, the port forwarding table of the firewall server is updated using the public and internal IP/port number mapping tables of each device reflecting the changed IP address of the firewall. For example, referring to FIGS. 1 to 4, the platform server 115 of the network access support system 100 has a public and internal IP/port number mapping table (first Table) may be used to update the port forwarding table (second table) of the firewall server 112 .

Although the method has been described through specific embodiments, the method can also be implemented as computer readable code on a computer readable recording medium. A computer-readable recording medium includes all types of recording devices in which data readable by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, and optical data storage devices. In addition, the computer-readable recording medium is distributed in computer systems connected through a network, so that computer-readable codes can be stored and executed in a distributed manner. In addition, functional programs, codes, and code segments for implementing the above embodiments can be easily inferred by programmers in the technical field to which the present invention belongs.

In the above, the present invention has been described with reference to the embodiments shown in the drawings. However, the present invention is not limited thereto, and various modifications or other embodiments belonging to the scope equivalent to the present invention can be made by those skilled in the art. Therefore, the true scope of protection of the present invention will be defined by the following claims.

100: network access support system 110: ship
111: communication unit 112: firewall server
113: main network switch 114: first network
115: platform server 116: first equipment
117 second equipment 118 second network
119: sub network switch 120: third equipment
121: fourth equipment 130: land server

Claims (12)

Stores a first table mapping port numbers, first Internet Protocol (IP) addresses, and second IP addresses of multiple devices inside the vessel, periodically transmits tracking packets to receive a third IP address assigned to the firewall server, , a platform server that updates the first table with the received third IP address when the received third IP address and the first IP address stored in the first table are different;
Storing a second table mapping the port numbers of the plurality of devices inside the ship, the third IP address and the fourth IP address, and transmitting the third IP address stored in the second table when the tracking packet is received the firewall server; and
Including a land server that can access multiple equipment inside the ship using the third IP address,
Ship's network access support system. According to claim 1,
The firewall server,
discarding the tracking packet after receiving the tracking packet and transmitting the third IP address;
Ship's network access support system. According to claim 1,
The first IP address and the third IP address include IP addresses used by the land server to access multiple equipment inside the ship,
The second IP address and the fourth IP address include virtual local area network IP addresses used inside the ship.
Ship's network access support system. According to claim 1,
The platform server,
Forming the tracking packet according to Internet Control Message Protocol (ICMP), which is an IP layer protocol of a Transmission Control Protocol (TCP) / IP protocol layer model,
Ship's network access support system. According to claim 1,
The platform server,
transmitting the third IP address to the land server when the first IP address stored in the first table is updated to the third IP address;
Ship's network access support system. According to claim 5,
The platform server,
sending the tracking packet to the IP address of the land server as a destination;
Ship's network access support system. Storing, by a platform server, a first table in which port numbers, first IP (Internet Protocol) addresses, and second IP addresses of a plurality of equipment inside the ship are mapped;
Storing, by a firewall server, a second table in which port numbers, third IP addresses, and fourth IP addresses of the plurality of devices inside the ship are mapped;
receiving, by the platform server, the third IP address allocated to the firewall server by periodically sending a tracking packet;
updating, by the platform server, the first table with the received third IP address when the received third IP address is different from the first IP address stored in the first table; and
Accessing, by a land server, a plurality of equipment inside the ship using the third IP address,
How to support ship's network access. According to claim 7,
Further comprising, by the firewall server, discarding the tracking packet after receiving the tracking packet and transmitting the third IP address.
How to support ship's network access. According to claim 7,
The first IP address and the third IP address include IP addresses used by the land server to access multiple equipment inside the ship,
The second IP address and the fourth IP address include virtual local area network IP addresses used inside the ship.
How to support ship's network access. According to claim 7,
The tracking packet is
Including Transmission Control Protocol (TCP) / Internet Control Message Protocol (ICMP), which is an IP layer protocol of the IP protocol layer model,
How to support ship's network access. According to claim 7,
Further comprising, by the platform server, transmitting the third IP address to the land server when the first IP address stored in the first table is updated to the third IP address.
How to support ship's network access. According to claim 11,
The step of transmitting the third IP address to the land server,
Transmitting, by the platform server, the tracking packet to the IP address of the land server as a destination.
How to support ship's network access.

Images