201025934 •六、發明說明： 【發明所屬之技術領域】 本發明係有關於一種在不同私有網路上的網路裝置間 建立網路系統及其網路連線方法，藉此不同私有網路上的 各網路裝置將可順利的進行彼此間的資料封包傳輸。 【先前技術】 由於網際網路上公開IP(Public IP)的數量有限，為了 供應為數眾多的電腦可以連線上網，因而延伸出一網路位 址轉換機制（Network Address Translation ; NAT)。 NAT機制可讓私有網路上的各個電腦重複使用IPv4 (Internet Protocol version 4)之私有位址空間，例如 192· 168. X.X，並在網路傳輸時，可將私有位址空間中的各 個私有IP(Private IP)轉換成同一個公開IP(Public IP)， 以使得私有網路中的各個電腦可對於網際網路進行資料的 9 存取。如此，只要一個公開IP即可讓為數眾多的電腦達成 上網的目的，以減少IPv4公開位址空間的使用，而解決ip 位址不足的窘境。 雖然NAT機制能夠解決現有IP位址不足的問題，然， 使用NAT機制進行網際網路的連線仍存在以下問題。 (1)·在NAT機制下提供網際網路服務時’ NAT伺服器需 e又疋連接琿映射（p〇rt—mapping)，否則網際網路上的電腦 將無法與提供服務的主機連線。然而，設定連接埠映射需 要手動設定，若nat伺服器底下連接有相當多的電腦裝置， 3 201025934 -則設定或修改連接埠映射將會是非常大的工程。 % (2).許多網路應用程式會假設客戶端使用真實IP(公 開IP)，並在傳輸資料到網際網路上之遠端伺服器時，會將 IP嵌入到所傳輸的封包表頭内。當遠端伺服器收到資料而 以封包表頭内的IP位址直接回傳資訊，然，客戶端若在NAT 機制底下，則可能因為私有IP的因素，而無法直接透過網 際網路接收到遠端伺服器所回傳的資訊。 (3).網路應用程式若分別使用不同的連接埠進行傳送 • 資料及接收資料的動作，例如：連接埠X進行傳送資料， 而連接埠Y進行接收資料，則NAT伺服器亦可能首先看到 .連接埠X流出封包，而只對於連接埠X作連接埠映射，而 未將連接埠Y進行連接埠映射，則在接收封包時，將流向 連接埠Y的封包丟棄。 【發明内容】 本發明之主要目的，在於提供一種在不同私有網路上 . 的網路裝置間建立網路系統及其網路連線方法，在網際網 路上架設有一公開位址及公開埠的位置伺服器，以使得位 在不同私有網路上的各網路裝置可透過位置伺服器的協助 而建立彼此間的網路連線，並解決私有網路上的網路裝置 透過網路位址轉換器進行網路連線所產生的問題。 本發明之次要目的，在於提供一種在不同私有網路上 的網路裝置間建立網路系統及其網路連線方法，私有網路 的網路裝置將主動向位置伺服器登記為一 IGD或一 P2P連 4 201025934 - 線模式，並藉由IGD或P2P連線模式與另一私有網路上的 . 網路裝置進行網路連線。 本發明之又一目的，在於提供一種在不同私有網路上 的網路裝置間建立網路系統及其網路連線方法，若位在不 同私有網路上的各網路裝置透過IGD或P2P連線模式連線 失敗，則將改用一超節點裝置作為各網路裝置間的資料封 包轉送。 為達成上述目的，本發明提供一種在不同私有網路上 • 的網路裝置間建立網路系統，其主要結構包括有：一第一 私有網路，設置有一第一網路裝置，該第一網路裝置透過 一第一網路位址轉換器以連接一網際網路；一第二私有網 路，設置有一第二網路裝置，該第二網路裝置透過一第二 網路位址轉換器以連接該網際網路；及一位置伺服器，連 接該網際網路，具有公開位址及公開埠，用以登記該第一 網路裝置及該第二網路裝置為一網際網路閘道裝置（IGD) A 連線模式或一點對點（P2P)連線模式。 本發明提供一種應用於在不同私有網路上的網路裝置 間建立網路系統之網路連線方法，其主要包括下列步驟： 設定該第一網路位址轉換器的連接埠映射，若設定成功， 該第一網路裝置向該位置伺服器登記為該網際網路閘道裝 置（IGD)連線模式，否則，該第一網路裝置向該位置伺服器 登記為該點對點（P2P)連線模式；及該位置伺服器測試該第 一網路裝置的該網際網路閘道裝置（IGD)連線模式，若該第 一網路裝置利用該網際網路閘道裝置（IGD)連線模式連線 5 201025934 -成功’則該第一網路裝置維持為該網際網路閘道裝置（IGD) *連線模式’否則’該第一網路裝置向該位置伺服器登記為 該點對點（P2P)連線模式。 【實施方式】 請參閱第1圖，為本發明網路系統一較佳實施例之結 構示意圖。如圖所示，網路系統1〇〇包括有一第一私有網 路10、一第二私有網路20及一位置伺服器40。 第一私有網路10設置有一第一網路裝置u，第一網路 裝置11具有私有位址及私有埠（例如： 192· 168· 0· 1:2000)，第一網路裝置u透過一第一網路位 址轉換器13連接一網際網路3〇,並且第一網路位址轉換器 13將具有公開位址（例如：123. 115. 175. 181)。 第二私有網路20設置有一第二網路裝置21，第二網路 裝置21具有私有位址及私有埠（例如： 192. 168.1.2:5_)，第二網路裝置21透過—第二網路位 址轉換器23連接網際網路3Q，並且第二網路位址轉換器 23將具有公開位址（例如·· 123. 1〇1. 175. 1〇〇)。 此外，本發明第一網路位址轉換器13及第二網路位址 轉換器23具有一網路位址轉換功能（Netw〇rk a斷％ Translation ; NAT)，並可分別整合在一 Ip分 道器中。 位置伺服器4G連接網際網路3()並具有公開位址及公 開車（例如· 140. 117· 171· 181:5〇〇〇) ’位置伺服器4〇用以 6 201025934 登δ己第一網路裝置11及第二網路裝置21為一網際網路問 * 道裝置（Internet Gateway Device ; IGD)連線模式或—點 對點（Peer to Peer ; P2P)連線模式。 本發明網路系統100尚包括有一超節點裝置5〇，超節 點裝置5 0連接網際網路3 0並具有公開位址及公開埠（例 如：140· 117. 155.32:5000)，超節點裝置50用以轉送第一 網路裝置11及第二網路裝置21間的資料封包。此外，本 發明另一實施例中’位置伺服器40亦可成為該超節點裝置。 ® 又，第一網路裝置11、第二網路裝置21及超節點裝置 50可為一筆記型電腦（NB)、一桌上型電腦（pc)、一智慧型 手機（PDA)、一 WAP手機或一具有網路通訊功能的電子裝置 再者，位在第一私有網路1〇中之第一網路裝置11欲 與網際網路30上的位置伺服器40進行網路連線，第一網 路位址轉換器13將為這個網路連線建立一會議 (session) ’並分配一連接埠（p〇rt)，例如：3333。第一網 參路位址轉換器13將設定連接埠映射（p〇rt-mapping)，以將 連接埠（port 3333)映射至第一網路裝置11的私有位址及 私有埠’例如：port 3333—192. 168. 0· 1:2000。第一網路 裝置11將可利用第一網路位址轉換器13的公開位址及公 開埠（123. 1 15. 175. 181:3333)而與位置伺服器40進行網路 通訊’並且位置伺服器40將登記公開位址及公開埠 (123.115.175.181:3333)。 同理，位在第二私有網路20中之第二網路裝置21欲 與網際網路30上的位置伺服器40進行網路連線，第二網 7 201025934 -路位址轉換器23將設定連接埠映射（port-mapPing)，以將 *連接蟑（例如：port 2222)映射至第二網路裝置21的私有 位址及私有埠，例如：port 2222—192. 168. 1. 2:3〇〇〇。第 二網路裝置21將可利用第二網路位址轉換器23的公開位 址及公開埠（123. 101. 175. 100:2222)而與位置飼服器4〇進 行網路通訊，並且位置伺服器40將登記公開位址及公開蜂 (123.101.175·100:2222)。 鲁再者，若第二私有網路20之第二網路裝置21欲與第 一私有網路10之第一網路裝置11進行網路連線，將根據 位置伺服器40中所登記的第二網路裝置21之公開位址、 公開埠（123. 101. 175. 100: 2222)及第一網路裝置u之公開 位址、公開埠（123. 1 15. 175. 181:3333)並以一IGD連線模 式、一P2P連線模式或透過一超節點裝置50來進行兩者間 的網路連線。 ^ 藉此’位在不同私有網路10/20上的各網路裝置11/21 鲁不僅可透過位置伺服器40的協助而建立彼此間的網路連 線’並可解決私有網路10/20上的網路裝置11/21透過網 路位址轉換器13/23進行網路連線所產生的問題。 請參閱第2圖，為本發明網路系統之網路連線檢查流 程圖。如圖所示’網路連線檢查程序如下列步驟所述：首 先’第一網路裝置11 機後，將利用UPnP的一簡易物件 存取協定指令（Simple Object Access Protocol ; SOAP)設 疋第一網路位址轉換器13的連接埠映射（p〇rt-mapping)， 如步驟601。 8 201025934 若第一網路位址轉換器13將連接埠（P〇rt 3333)成功 .映射於第-網路裝置U的私有位址及私有埠（_ 3333— 192.168.G.1:2GGG)，如步驟6Q2，則第—網路裝置13為 IGD連線模式’如步驟6()3,並且第一網路裝置13向位置 伺服器30登記為IGD連線模式，如步驟6〇4。 反之若第網路農置Π設定第一網路位址轉換器13 的連接埠映射（p〇rt-mapping)失敗，如步驟6〇2，則第一網 路裝置11 A P2P連線模式，如步驟6〇5，並且第一網路裝 置11將向位置伺服器4〇登記為P2P連線模式，如步驟6〇6。 又，位置伺服器40會對於第一網路裝置丨丨進行IGD 連線測試，如步驟607。若位置舰II 4G以IGD連線模式 順利的與第—網路裝置Η進行網路連線，結束該網路連線 檢查程序。否則’第-網路裝置u應改變為p2p連線 如步驟605。 ' 再者，第二網路裝置21的網路連線檢查程序係與第一 φ網路裝置11相同，在此，不在重複闡述。 請參閱第3圖，為本發明網路系統之網路連線安褒流 程圖。如圖所示，第二私有網路2〇的第二網路裝置U欲 與第一私有網路10的第一網路裝置u進行網路連線，其 兩者間的網路連線安裝程序如下列步驟所述：首先，第二 網路裝置21從位置伺服器40查詢第一網路裝置u的連& 狀態及連線模式，如步驟611。 ' 若第一網路裝置11已經上線，並且第一網路裝置U 及第二網路裝置21皆為iGD連線模式，如步驟612，則第 9 201025934 .二網路裝置21將根據UPnP網路協定而直接連線第一網路 •裝置11 ’如步驟613。 反之，若第一網路裝置u及第二網路裝置21之其中 非IGD連線模式，如步驟612，此時第二網路裝置u將 凊求位置伺服器4G提供協助並使用p2p連線模式的一打洞 方法（UDPholepunching)嘗試連線第一網路裝置， 驟 614。 ^ 當第二網路裝置21使用P2P連線模式成功連線第—網 路裝置U，如步驟615 ’將結束網路連線安裝程序。否則， 第二網路裝置21將透過-超節點裝置5Q轉送第二網路衰 置21&與第-網路裝置n間的資料封包，如步驟_。 凊參閱第4圖’為本發明網路系統之網路裝置向位置 伺服器進行-登記程序之循序圖。如圖所示，第一網路装 置11開機後，第，路裝置n將主動傳送—登記請求封 包701至位置飼服器4〇,以向位置飼服器4〇登記第一網路 參裝置11的公開位址及公開埠（dn5」75」8^333)，而 位置伺服器40將回傳一登記回應封包7〇2至第一網路装置 11 ’以作為登記結果的確認。 接著，第一網路裝置11傳送一測試請求封包7〇3至位 置飼服器40,以向位置伺服器4G請求進行連線測試。而位 置飼服If 4G將根據登記的第—網路裝置丨丨的公開位址及 a開棒（123. 115. 175. 181:3333)傳送―連線;賴請求封包 704至第一網路裝置η。 若第一網路裝置11的公開位址及公開埠 201025934 (123. 115. 175. 181:3333)是開啟的，則第一網路裝置11將 會接收到連線賴請㈣包7〇4,並回傳—連㈣試回應封 包705至位置舰器40 ’以作為連線測試結果的相，而 位置伺服器40將記錄測試結果。201025934 • Sixth, invention description: [Technical field of invention] The present invention relates to a network system and network connection method between network devices on different private networks, thereby using different private networks The network device will be able to smoothly carry out data packet transmission between each other. [Prior Art] Due to the limited number of public IPs on the Internet, a large number of computers can be connected to the Internet, thus extending a network address translation mechanism (NAT). The NAT mechanism allows individual computers on the private network to reuse IPv4 (Internet Protocol version 4) private address space, such as 192·168.XX, and private IPs in the private address space when transmitting over the network. (Private IP) is converted into the same public IP (Public IP), so that each computer in the private network can access the data 9 for the Internet. In this way, as long as a public IP can make a large number of computers reach the goal of Internet access, to reduce the use of IPv4 public address space, and to solve the problem of insufficient IP address. Although the NAT mechanism can solve the problem of insufficient IP address, the following problems still exist in the connection of the Internet using the NAT mechanism. (1)·When the Internet service is provided under the NAT mechanism, the NAT server needs to connect and map (p〇rt-mapping), otherwise the computer on the Internet will not be able to connect to the host providing the service. However, setting the port mapping requires manual setting. If there are quite a few computer devices connected under the nat server, 3 201025934 - setting or modifying the port mapping will be a very large project. % (2). Many web applications assume that the client uses real IP (public IP) and embeds the IP into the transmitted packet header when transmitting data to a remote server on the Internet. When the remote server receives the data and directly returns the information in the IP address in the packet header, if the client is under the NAT mechanism, it may not be directly received through the Internet due to the private IP factor. The information returned by the remote server. (3). If the network application uses different ports to transmit data and receive data, for example, connect 埠X to transmit data, and connect 埠Y to receive data, the NAT server may also look at it first. When the connection 流出X flows out of the packet, and only the connection 埠X is used as the connection mapping, and the connection 埠Y is not connected and mapped, the packet flowing to the connection 埠Y is discarded when the packet is received. SUMMARY OF THE INVENTION The main object of the present invention is to provide a network system and a network connection method between network devices on different private networks, and a public address and an open location on the Internet. The server, so that the network devices located on different private networks can establish network connection with each other through the assistance of the location server, and solve the problem that the network devices on the private network are performed through the network address translator. Problems caused by network connections. A secondary object of the present invention is to provide a network system and a network connection method between network devices on different private networks, and the network device of the private network actively registers with the location server as an IGD or A P2P connection 4 201025934 - line mode, and through the IGD or P2P connection mode to network connection with the network device on another private network. Another object of the present invention is to provide a network system and a network connection method between network devices on different private networks, if each network device located on a different private network is connected through an IGD or P2P. If the mode connection fails, a super-node device will be used instead as a data packet transfer between the network devices. In order to achieve the above object, the present invention provides a network system between network devices on different private networks, and the main structure thereof comprises: a first private network, and a first network device, the first network is provided. The circuit device is connected to an internet network through a first network address converter; a second private network is provided with a second network device, and the second network device is configured to pass through a second network address converter To connect to the Internet; and a location server to connect to the Internet, having a public address and an open port for registering the first network device and the second network device as an internet gateway Device (IGD) A connection mode or point-to-point (P2P) connection mode. The invention provides a network connection method for establishing a network system between network devices on different private networks, which mainly comprises the following steps: setting a connection mapping of the first network address converter, if setting Successfully, the first network device registers with the location server as the Internet gateway device (IGD) connection mode, otherwise the first network device registers with the location server as the peer-to-peer (P2P) connection a line mode; and the location server tests the Internet gateway device (IGD) connection mode of the first network device, if the first network device is connected using the Internet gateway device (IGD) Mode connection 5 201025934 - successful 'The first network device is maintained as the Internet gateway device (IGD) * connection mode 'otherwise' the first network device registers with the location server as the point-to-point ( P2P) connection mode. [Embodiment] Please refer to FIG. 1 , which is a schematic structural diagram of a network system according to a preferred embodiment of the present invention. As shown, the network system 1 includes a first private network 10, a second private network 20, and a location server 40. The first private network 10 is provided with a first network device u. The first network device 11 has a private address and a private address (for example, 192·168·0·1:2000), and the first network device The first network address translator 13 is connected to an internet network 3, and the first network address translator 13 will have a public address (for example: 123.115.175.181). The second private network 20 is provided with a second network device 21, the second network device 21 has a private address and a private address (for example: 192.168.1.2:5_), and the second network device 21 transmits the second The network address translator 23 is connected to the Internet 3Q, and the second network address translator 23 will have a public address (for example, 123.1〇1.175. 1〇〇). In addition, the first network address converter 13 and the second network address converter 23 of the present invention have a network address translation function (Netw〇rk a % Translation; NAT), and can be integrated into an Ip respectively. In the divider. The location server 4G is connected to the Internet 3() and has a public address and a public car (for example, 140.117.171.181:5). The location server 4 is used for 6 201025934. The network device 11 and the second network device 21 are an Internet Gateway Device (IGD) connection mode or a Peer to Peer (P2P) connection mode. The network system 100 of the present invention further includes a super node device 5, which is connected to the Internet 30 and has a public address and a public address (for example, 140·117.155.32:5000), and the super node device 50 The data packet between the first network device 11 and the second network device 21 is forwarded. Further, in another embodiment of the present invention, the position server 40 may also be the super node device. In addition, the first network device 11, the second network device 21, and the super node device 50 can be a notebook computer (NB), a desktop computer (PC), a smart phone (PDA), and a WAP. The mobile phone or an electronic device having a network communication function, the first network device 11 located in the first private network 1 is intended to be connected to the location server 40 on the Internet 30, A network address translator 13 will establish a session for this network connection and assign a connection (p〇rt), for example: 3333. The first network path address translator 13 will set a port mapping (p〇rt-mapping) to map the port (port 3333) to the private address of the first network device 11 and a private port 'for example: port 3333—192. 168. 0· 1:2000. The first network device 11 will be able to communicate with the location server 40 by using the public address of the first network address translator 13 and the public port (123. 1 15. 175. 181:3333). The server 40 will register the public address and the public address (123.115.175.181: 3333). Similarly, the second network device 21 located in the second private network 20 is to be networked with the location server 40 on the Internet 30. The second network 7 201025934 - the road address converter 23 will A port-mapPing is set to map the * port (eg, port 2222) to the private address and private port of the second network device 21, for example: port 2222-192. 168. 1. 2: 3〇〇〇. The second network device 21 will be able to communicate with the location feeder 4 by using the public address of the second network address translator 23 and the public address (123.101.175.100:2222), and The location server 40 will register the public address and the public bee (123.101.175.100:2222). Further, if the second network device 21 of the second private network 20 wants to connect to the first network device 11 of the first private network 10, it will be registered according to the location server 40. The public address of the second network device 21, the public address (123.101. 175.100: 2222) and the public address of the first network device u, public (埠 123. 1 15. 175. 181: 3333) and The network connection between the two is performed in an IGD connection mode, a P2P connection mode, or through a super node device 50. ^ By means of the network devices 11/21 located on different private networks 10/20, not only can the network connection between the two can be established through the assistance of the location server 40, and the private network 10/ can be solved. The network device 11/21 on 20 performs network connection problems through the network address translator 13/23. Please refer to FIG. 2, which is a flow chart of the network connection check of the network system of the present invention. As shown in the figure below, the network connection check procedure is as follows: First, after the first network device 11 is used, a Simple Object Access Protocol (SOAP) command using UPnP is set. A port mapping (p〇rt-mapping) of a network address translator 13 is as shown in step 601. 8 201025934 If the first network address translator 13 successfully connects the port (P〇rt 3333). It is mapped to the private address and private port of the network device U (_ 3333 - 192.168.G.1: 2GGG) As in step 6Q2, the first network device 13 is in the IGD connection mode as in step 6()3, and the first network device 13 registers with the location server 30 as the IGD connection mode, as in step 6〇4. On the other hand, if the network farmer fails to set the port mapping (p〇rt-mapping) of the first network address converter 13, as in step 6〇2, the first network device 11 A P2P is connected to the mode. As in step 6〇5, the first network device 11 will register the location server 4〇 as the P2P connection mode, as in step 6〇6. Moreover, the location server 40 performs an IGD connection test for the first network device, as in step 607. If the location ship II 4G is successfully connected to the first network device in the IGD connection mode, the network connection check procedure is terminated. Otherwise, the 'network-device u should be changed to the p2p connection as in step 605. Further, the network connection check procedure of the second network device 21 is the same as that of the first φ network device 11, and will not be repeatedly described herein. Please refer to FIG. 3, which is a flow chart of the network connection installation of the network system of the present invention. As shown in the figure, the second network device U of the second private network 2 is to be connected to the first network device u of the first private network 10, and the network connection between the two is installed. The procedure is as follows: First, the second network device 21 queries the location server 40 for the connection state and connection mode of the first network device u, as in step 611. If the first network device 11 is online, and both the first network device U and the second network device 21 are in the iGD connection mode, as in step 612, the 9th 201025934. The second network device 21 will be based on the UPnP network. The first network • device 11 ' is directly connected to the path protocol as in step 613. On the other hand, if the first network device u and the second network device 21 are not in the IGD connection mode, as in step 612, the second network device u will assist the location server 4G and use the p2p connection. The mode of UDP hole punching attempts to connect to the first network device, step 614. ^ When the second network device 21 successfully connects the first-network device U using the P2P connection mode, the network connection installation procedure will be terminated as in step 615'. Otherwise, the second network device 21 forwards the data packet between the second network fading 21 & and the first network device n through the super-node device 5Q, as in step _. Referring to Fig. 4' is a sequence diagram of a network device of the network system of the present invention performing a registration procedure with a location server. As shown in the figure, after the first network device 11 is powered on, the first device n will actively transmit a registration request packet 701 to the position feeder 4 to register the first network parameter device with the position feeder 4 The public address of the 11 and the public address (dn5 "75" 8^333), and the location server 40 will return a registration response packet 7〇2 to the first network device 11' as a confirmation of the registration result. Next, the first network device 11 transmits a test request packet 7〇3 to the position feeder 40 to request the location server 4G to perform the connection test. The location feed service If 4G will be transmitted according to the registered public address of the network device and the open bar (123.115.175.181:3333); the request packet 704 to the first network Device η. If the public address of the first network device 11 and the public address 201025934 (123.115.175.181:3333) are turned on, the first network device 11 will receive the connection request (four) package 7〇4 And returning - even (four) try to respond to packet 705 to position ship 40' as the phase of the connection test result, and location server 40 will record the test results.
當第二網路裝置21想使用第一網路裝置u上伺服器 的服務功能時，第二網路裝置21將傳送一查詢請求封包 7〇6至位置伺服器40,以向位置伺服詢第一網路裝 置11的公開位址及公開埠（123.115.175 181:3333)、連線 模式及連線狀態等連線資訊，而位置伺服器4()將回傳一具 有第一網路裝置11之連線資訊的查詢回應封包7〇7至第二 網路裝置2卜致使第二網路裝置21將與第一網路裝置“ 建立網路連線。 又，第一網路裝置11在每一工作週期（例如：1〇秒） 中傳送一更新請求封包708至位置伺服器40，以向位置伺 服器40表示連線狀態是良好的，而位置飼服器4〇回傳一 糝^新回應封包709至第-網路裝£11以作為接收更新請求 封包708的確認。 枝當然，本發明所述之更新請求封包7〇8亦可使用登記 求5ί·ζ_* 701來取代，如此不僅簡化第一網路裝置η中的 程式設計’並在第-網路裝置u的公開位址、公開璋改變 時:位置伺服器4可藉由週期性的登記請求封包7〇1而立 即件知’藉此以確實掌控第—網路裝置u的連線狀態。 再者，第二網路裝置21向位置伺服器40進行登記的 程序係與第一網路裝置11相同，在此，不在重複闡述。 201025934 - 請參閱第5圖，為本發明網路系統之IGD連線方法之 . 循序圖。如圖所示，本實施例之第一網路位址轉換器13及 /或第二網路位址轉換器23將符合一通用即插即用 (Universal Plug and Play ; UPnP)標準規格，致使第一網 路裝置11可使用UPnP協定的一連接埠映射指令751以替 第一網路位址轉換器13的連接埠映射進行設定的動作，並 且該連接埠映射指令751係可包括有一得到連接埠映射輸 入數量指令（Get Port Mapping Number of Entries)及一 謇加入連接埠映射指令（Add Port Mapping)。 本發明第一網路裝置11可提供伺服器的服務功能，以 供另一私有網路20之第二網路裝置21使用。當第一網路 位址轉換器13的連接埠映射設定成功，第二網路裝置21 可根據第一網路裝置 11的公開位址及公開埠 (123. 1 15. 175. 181:3333)將外部網路（例如：網際網路30) 的資料封包752傳送至位置伺服器40，接著，位置伺服器 ® 40在根據連接埠（3333)所映射的私有位址及私有埠 (192. 168. 0. 1:2000)，將接收到的資料封包753轉送至内 部網路（例如：第一私有網路10)的第一網路裝置11。如此， 第二網路裝置21將與第一網路裝置11建立連線，並使用 第一網路裝置11的伺服器功能。 請參閱第6圖，為本發明網路系統之P2P連線方法之 循序圖。如圖所示，第二網路裝置21想使用第一網路裝置 11上伺服器的服務功能，若採用P2P連線模式建立兩者間 的網路連線，將包括有一邀請階段81、一連線建立階段83 12 201025934 及一連線結束階段85等三個操作階段。 邀請階段81包括有下列步驟：首先，第二網路裝置21 傳送一邀請請求封包811至位置伺服器4〇，位置伺服器4〇 將根據邀請請求封包811傳送—邀請封包812至第一網路 裝置11，以協助第二網路裝置21邀請第一網路裝置u建 立網路連線。 ❹ 若第一網路裝置11同意連線，第一網路裝置11將回 傳具有YES Θ容的邀請答覆封& 813至位置伺服器 40,而位置伺服器40將分別傳送一邀請確認封包814至第 網路裝置11及第二網路裝置21，以通知第一網路裝置 11與第二網路裝置21可以開始建立網路連線。 連線建立階段83包括有下列步驟：第一網路裝置n 及第一網路裝置21分別傳送一打洞請求封包831至位置伺 服器40，以通知位置飼服器4〇準備開始一打洞程序（_ punching)。接著，位置伺服器4〇分別傳送一具有第一網 路裝置11及第二網路裝置21之公開位址、公開璋資料 (123. 115. 175. 181:3333)、（123. 101 175 1〇〇:2222)的打 洞確認封包832至第-網路裝置u及第二網路裝置21。 在第-網路裝置11及第二網路裝置21接收到打洞確 認封包832後’第―網路裝置η及第二網路裝置21將根 據公開位址、公開埠互傳一 UDP封包833至雙方，以 UDP連線。 若第一網路裝置11 方互傳的UDP封包833， 及第二網路裝置21確實接收到雙 即表示第一網路裝置11與第二網 13 201025934 立網路連線，兩者將分別傳送-打洞結束封 至位置舰器40,以通知位置伺服器4〇結束打洞程 =^且’位置飼服器40將回傳一打洞結束確認封包咖 束❶ 』略瑕置2丨以確認打洞程序結 連線結束階段85包括訂列步驟：#第—晴 或第二網路裝置21任何一方亜由此， 7方要中斷網路連線，將傳送一掛 # ❿ 線凊求封包851至位置侗服哭^ n 饼 门播^ 们服器40,而位置伺服器40將分別 回傳一掛線封包852至第一網^ 也 01 ^ 罘，、码路裝置11及第二網路裝置 21，以中斷兩者間的網路連線。 之循：t閱Γ7圖’為本發明網路系統之超節點連線方法 模式皆益法Μ㈣震置21使用1GD連線模式或P2P連線 、飞旁，、，、法與第一網路裝置1 1 裝置21將透過一超節 、、連、、良’則第二網路 ，周路裝置11間的資料封包。 將傳逆主田超卽點裝置50開機後，超節點裝置50When the second network device 21 wants to use the service function of the server on the first network device u, the second network device 21 will transmit a query request packet 7〇6 to the location server 40 to query the location server. a network device 11 public address and public network (123.115.175 181:3333), connection mode and connection status and other connection information, and the location server 4 () will return a first network device The query response packet of the connection information of 11 to the second network device 2 causes the second network device 21 to "establish a network connection with the first network device. Further, the first network device 11 is An update request packet 708 is transmitted to the location server 40 in each duty cycle (for example, 1 second) to indicate to the location server 40 that the connection state is good, and the location feeder 4 returns a message. The new response packet 709 to the network-loaded £11 is used as an acknowledgement for receiving the update request packet 708. Of course, the update request packet 7〇8 of the present invention can also be replaced by the registration request 5ί·ζ_* 701, Not only simplifying the programming in the first network device η but also in the first network device u When the public address and the public address change: the location server 4 can immediately know by the periodic registration request packet 7〇1 to thereby control the connection state of the first network device u. The procedure for registering the two network devices 21 to the location server 40 is the same as that of the first network device 11, and is not repeated here. 201025934 - Please refer to FIG. 5, which is an IGD connection method for the network system of the present invention. Step by step. As shown, the first network address translator 13 and/or the second network address translator 23 of the present embodiment will conform to a Universal Plug and Play (UPnP). a standard specification that causes the first network device 11 to use a connection mapping command 751 of the UPnP protocol to perform the set action for the connection mapping of the first network address translator 13, and the connection mapping instruction 751 is The method includes a Get Port Mapping Number of Entries and an Add Port Mapping. The first network device 11 of the present invention can provide a server service function for providing another The second network device 21 of the network 20 is used. When the connection mapping of the first network address converter 13 is successfully set, the second network device 21 can be publicized according to the public address of the first network device 11.埠 (123. 1 15. 175. 181:3333) transmits the data packet 752 of the external network (for example, the Internet 30) to the location server 40, and then the location server® 40 is connected according to the port (3333). The mapped private address and private port (192.168. 0. 1:2000), the first network device 11 that forwards the received data packet 753 to the internal network (for example, the first private network 10) . Thus, the second network device 21 will establish a connection with the first network device 11 and use the server function of the first network device 11. Please refer to FIG. 6 , which is a sequence diagram of a P2P connection method for a network system of the present invention. As shown, the second network device 21 wants to use the service function of the server on the first network device 11. If the network connection between the two is established by using the P2P connection mode, an invitation phase 81 and a The connection establishment phase 83 12 201025934 and a connection end phase 85 and other three operational phases. The invitation phase 81 includes the following steps: First, the second network device 21 transmits an invitation request packet 811 to the location server 4, and the location server 4 transmits the invitation packet 811 to the first network. The device 11 is configured to assist the second network device 21 to invite the first network device u to establish a network connection. ❹ If the first network device 11 agrees to connect, the first network device 11 will return an invitation reply & 813 with YES content to the location server 40, and the location server 40 will transmit an invitation confirmation packet respectively. 814 to the network device 11 and the second network device 21 to notify the first network device 11 and the second network device 21 that the network connection can be established. The connection establishment phase 83 includes the following steps: the first network device n and the first network device 21 respectively transmit a dozen hole request packet 831 to the location server 40 to notify the location feeder 4 that it is ready to start a dozen holes Program (_ punching). Then, the location server 4 transmits a public address with the first network device 11 and the second network device 21, and public information (123.115.175.181:3333), (123.101 175 1 The punching confirmation packet 832 of 〇〇: 2222) is connected to the first network device u and the second network device 21. After the first network device 11 and the second network device 21 receive the hole confirmation packet 832, the 'th network device η and the second network device 21 will mutually transmit a UDP packet 833 according to the public address and the public address. To both parties, connect to UDP. If the first network device 11 transmits the UDP packet 833, and the second network device 21 does receive the dual, the first network device 11 and the second network 13 201025934 are connected to each other. The transfer-hole end seal is sealed to the position player 40 to notify the position server 4 to end the hole-passing process = ^ and the 'position feeder 40 will return a hole and end the confirmation packet coffee ❶ 』 In order to confirm the hole punching program, the ending phase 85 includes a step of ordering: #第晴, or any of the second network devices 21, whereby the 7 party wants to interrupt the network connection, and will transmit a hanging #❿ line request The packet 851 to the position 侗 哭 ^ n 饼 饼 饼 饼 饼 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们 们The network device 21 interrupts the network connection between the two. The following: t read 图7 picture 'the super node connection method mode of the network system of the invention is the same method Μ (4) the shock 21 uses 1GD connection mode or P2P connection, flying side,,,, and the first network Device 1 1 The device 21 will block the data between the peripheral devices 11 through a second network, a connection, and a second network. After the transmission of the reverse main field super point device 50 is turned on, the super node device 50
St，求封包9〇1至位置飼服器4〇,以向位置飼 服器40登έ己超節既胜 (140 "7 m 〇 裝5〇❸公開位址及公開埠 U4(J. 117. 155. 32.50i)m 二， 回應封勺石如，）， 置伺服器4〇將回傳一登記 ^ 。即點裝置5〇，以作為登記結果的確認。 模式與第-網路^ \無净法使用IGD連線模式或P2P連線 將傳送-超節點請ΐ二=網路連線，第二網路裝置21St, for the package 9〇1 to the position feeding device 4〇, to the position of the feeding device 40 登 έ 超 super superb (140 " 7 m 〇❸ 5 〇❸ public address and public 埠 U4 (J. 117. 155. 32.50i) m II, in response to the sealing stone, as in the case, the server 4 will return a registration ^. The point device is 5 〇 to confirm the registration result. Mode and the first network ^ \ no net method using IGD connection mode or P2P connection will be transmitted - super node please = 2 = network connection, the second network device 21
Wl η 40 ^ 細 903至位置伺服器40，而位置伺 服益刊傳送一超節合 ··、、3 4封包904至超節點裝置50,以請 201025934 -求超節點裝置50轉送第二網路裝置21與第一網路農 間的貢料封包。 若超節點裝置50可提供資料封包轉送的服務， 裝置50將回傳-具有” YES”内容的超節點會議轉句 905至位置伺服器40’而位置伺服器4〇將傳送一具 點裝置50之公開位址、公開埠資^ (140· 117· 155· 32:5_) ’之超節點確認封包9()6至第 路裝置11及第二網路裝置2卜以表示超節點裝置5〇會提 。網路農置U與第二網路裝置21間資料封包轉送的 在第—網路裝置u及第二網路裝置Η接收到 At =包9G6後’第—網路裝置11及第二網路裝置21將 建立連線。當第二網路裝置。欲 裝置50轉送第至第一網路襄置11 ’將透過超節點 當第—m封包908至第一網路裝置11;反之， 籲 路裝置11欲傳送第二資料封包909至第-絪敗驻 置21，將透過趔諮駐壯班 貝了十钌匕川y至第一網路裝 網路裝置21。 裝置50轉送第二資料封包至第二 當第一網路萝番丨 超節點裝置5〇 "" 或第二網路裝置21任何一方要與 至超節點裝置^斷網路連線，將傳送一掛線請求封包911 912至第—網 而超卽點裝置5 0將分別回傳一掛線封包 路裝置1卜肩第路裝置11及第二網路裝置21，以中斷第f網 線。 一網路裝置21及超節點裝置50間的網路連 15 201025934 以上所述者，僅為本發明之較佳實施例而已，並非用 •來限定本發明實施之範圍，即凡依本發明申請專利範圍所 述之形狀、構造、特徵及精神所為之均等變化與修飾，均 應包括於本發明之申請專利範圍内。 【圖式簡單說明】 第1圖：為本發明網路系統一較佳實施例之結構示意圖。 第2圖.為本發明網路系統之網路連線檢查流程圖。 第3圖.為本發明網路系統之網路連線安裝流程圖。 第4圖：為本發明網路系統之網路裝置向位置伺服器進行 一登記程序之循序圖。 第5圖：為本發明網路系統之IGD連線方法之循序圖。 第6圖：為本發明網路系統之p2p連線方法之循序圖。 第7圖.為本發明網路系統之超節點連線方法之循序圖。Wl η 40 ^ is fine 903 to the location server 40, and the location servo is transmitted by a super-communication ···, 3 4 packet 904 to the super-node device 50, so that 201025934 - the super-node device 50 is transferred to the second network The tribute package of the device 21 and the first network farmer. If the supernode device 50 can provide the data packet forwarding service, the device 50 will return a super-node conference with the "YES" content to the location server 40' and the location server 4 will transmit a pointing device 50. The super-node confirmation packet 9() 6 to the first device 11 and the second network device 2 of the public address, the public address (140·117·155·32:5_) 'to indicate the super node device 5〇 Will mention. The first network device u and the second network device receive the At = packet 9G6 after the data packet transfer between the network farmer U and the second network device 21, the first network device 11 and the second network Device 21 will establish a connection. When the second network device. The device 50 is to be forwarded to the first network device 11' to pass the super-node as the first-m packet 908 to the first network device 11; otherwise, the call device 11 is to transmit the second data packet 909 to the first-defective Resident 21, will be through the 趔 驻 壮 了 了 了 了 了 了 至 至 至 至 至 至 至 至 至 至 至 至The device 50 forwards the second data packet to the second when the first network of the Luopanyu super-node device 5〇"" or the second network device 21 is to be disconnected from the network to the super-node device, Sending a hanging line request packet 911 912 to the first network and the super-point device 50 will respectively return a hanging line packet device 1 and a second network device 21 to interrupt the f network cable . Network connection between a network device 21 and a super-node device 50 201025934 The above is only a preferred embodiment of the present invention, and is not intended to limit the scope of the present invention, that is, the application according to the present invention. Equivalent changes and modifications to the shapes, structures, features and spirits of the patents are intended to be included within the scope of the invention. BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a schematic structural view of a preferred embodiment of a network system of the present invention. Fig. 2 is a flow chart of the network connection check of the network system of the present invention. Fig. 3 is a flow chart showing the installation of the network connection of the network system of the present invention. Figure 4 is a sequential diagram of a registration procedure performed by the network device of the network system of the present invention to the location server. Figure 5: A sequence diagram of the IGD connection method of the network system of the present invention. Figure 6 is a sequence diagram of the p2p connection method of the network system of the present invention. Fig. 7 is a sequence diagram of a super node connection method for the network system of the present invention.
100 11 13 21 23 【主要元件符號說明】 網路系統 第一網路裝置 第一網路位址轉換器 第二網路裝置 第一網路位址轉換器 位置伺服器 10 第 一私有網路 12 第 —閘道裝置 20 第 二私有網路 22 第 二閘道裝置 30 網際網路 50 超 節點裝置 16 40100 11 13 21 23 [Description of main component symbols] Network system First network device First network address converter Second network device First network address converter Location server 10 First private network 12 First - gateway device 20 second private network 22 second gateway device 30 internet 50 super node device 16 40