1258277 __案號92114247 ^ ^ g 條正__ 五、發明說明（1) 【發明所屬之技術領域】 本發明「一種可穿透防火牆之雙向訊號傳輸裝置」旨 在提供一可由被要求通訊端即時確認要求通訊端之實體IP 位址，即由要求通訊端送出其實體1?位址、可開放通訊的 防火牆PORT以及相關網路連接資訊，由被要求通訊端選擇 連線權力以讓要求通訊端與被要求通訊端可穿透防火牆進 行雙向訊號傳輸之裝置，以解決防火牆造成網路點對點連 結之限制’尤適用於用戶端主機與伺服器主機進行即時影 像語音通訊以及數位資料傳送。 【先前技術】 按，在一般網路傳輸之間，提供網路服務之伺服器主 機一端’多會利用防火牆之架，以預防別人來存取伺服器 主機内部之網路，進而管制網路上資料的進出，防火牆一 端連接外部用戶端的網路經由真實的I P，另一端則連接伺 服器主機内部内部的網路虛擬的I P，將你内部的網路與外 部的網路給隔離開，防火牆成了進入你内部網路的唯一通 道’因此任何進出的資料都要經過防火牆，再經由防火牆 來決定是否能夠通行，因此對於安全性更多加了一份保障 〇 具體而言，防火牆只允許一些特定的資料通過，不論 是從外面進入内部網路亦或是内部網路傳輸到外界的資料 ’都必須經過防火牆的確認手續才能放行，而這些確認手 續，由一些事先設定的安全規則和政策來完成的，而防火 牆管理人員也應能可視風險程度對於安全控制的程度作彈 性調適。1258277 __Case No. 92114247 ^ ^ g Article __ V. Description of the Invention (1) Technical Field of the Invention The present invention "a two-way signal transmission device that can penetrate a firewall" aims to provide a communication terminal that can be requested Instant confirmation requires the physical IP address of the communication terminal, that is, the communication terminal is required to send out its entity 1 address, the firewall PORT of the open communication and related network connection information, and the required communication terminal selects the connection authority to request the communication. The device and the required communication terminal can penetrate the firewall for two-way signal transmission to solve the limitation of the firewall causing the network point-to-point connection, which is particularly suitable for real-time image voice communication and digital data transmission between the client host and the server host. [Prior Art] Press, between the general network transmission, the server host that provides the network service will use the firewall shelf to prevent others from accessing the network inside the server host, thereby controlling the data on the network. In and out, the network connected to the external client on one end of the firewall passes the real IP, and the other end connects to the virtual IP of the internal network of the server host, which isolates your internal network from the external network. The firewall becomes The only way to enter your internal network' is therefore any incoming and outgoing data going through the firewall, and then through the firewall to decide whether it can pass, so there is more protection for security. Specifically, the firewall only allows some specific Once the data is passed, whether it is from the outside to the internal network or the internal network to the outside world's data must be cleared by the firewall, and these confirmation procedures are completed by some pre-set security rules and policies. And the firewall manager should also be able to visualize the degree of risk to the extent of security control Adjustment.
1258277 — ----MM 92114247 _年月 a — 五、發明說明（2) 也因此，防火牆所設定之確認手續 用戶端之身份加以確認，以限制非經過 利於網路之資料（如利用大量的封包來 頻寬’使得伺服器主機因為負荷過重而 主機造成破壞；惟，如此亦同樣會造成 至伺服器主機之限制，如此將不利雙向 而將對網路之正常使用（如即時影像、 造成限制。 【發明内容】 本發明「一種可穿透防火牆之雙向 在一般網路兩通訊端（要求通訊端及被 設有防火牆，其間另連接有一 pSTN線路 別透過兩端之控制模組之間另連接有一 線路並分別透過兩端之控制模組單元與 要求通訊端内部之網路模組聯結，以利 被要求通訊端之電話號碼，在通話後即 PSTN線路送出其實體Ip位址、可開放通 及相，網路連接資訊，並由被要求通訊 連線權力’藉以形成要求通訊端與被要 線’而達到要求通訊端與被要求通訊端 雙向訊號傳輸之目的。 以及’可配合在要求通訊端與被要 服器主機内部網路各主機處）架設一影 [以分別將所攝得之訊號透過網路模組 送至另端之要求通訊端與被要求通訊端 一 條正_ ^1" r 晒 _ 將大都係主要針對 認可之用戶端將不 攻擊網路，以消耗 當機）而對伺服器 用戶端將資料上傳 安全訊號之傳輪， 監控網頁之傳送） 訊號傳輸裝置」即 要求通訊端）間架 ，該PSTN線路並分 PSTN線路，該PSTN 要求通訊端以及被 由要求通訊端撥打 由要求通訊端透過 訊的防火牆PORT以 端的控制模組選擇 求通訊端兩者之連 可穿透防火牆進行 求通訊端（包括伺 像擷取、顯示組件 單元將影像訊號傳 ’並將所接收之影 12582771258277 — ----MM 92114247 _Year month a — V. Description of invention (2) Therefore, the identity of the user terminal of the confirmation procedure set by the firewall is confirmed to limit non-network-friendly information (such as utilizing a large number of The bandwidth of the packet is such that the server host is damaged due to excessive load; however, this also causes a limitation to the server host, which will adversely affect the normal use of the network (such as real-time video, causing restrictions). [Invention] The present invention "is a two-way through the firewall in the general network two communication terminals (requires the communication terminal and is equipped with a firewall, and another pSTN line is connected between the two control modules of the two ends) There is a line and the control module unit at both ends is connected with the network module of the communication terminal, so as to facilitate the telephone number of the required communication terminal, and the PSTN line sends the physical IP address after the call, and can be opened. And phase, network connection information, and by the required communication connection power 'to form the required communication terminal and the required line' to reach the required communication end It is required to transmit the two-way signal transmission of the communication terminal, and 'can be matched with the required communication terminal and each host of the internal network of the main server of the server to provide a shadow [to separately send the captured signal through the network module to the network module The other end requires that the communication end and the requested communication end have a positive _ ^1" r _ _ will be mostly for the approved user side will not attack the network to consume the crash) and upload the data to the server client security The transmission of the signal, the transmission of the monitoring webpage) The signal transmission device requires the communication terminal to be placed between the PSTN lines and the PSTN line. The PSTN requires the communication terminal and the firewall that is requested by the communication terminal to be transmitted by the requesting communication terminal. The port of the PORT control module selects the connection between the two terminals to penetrate the firewall to obtain the communication end (including the servo image capture, the display component unit transmits the image signal) and receives the shadow 1258277
五、發明說明（3) 像訊號呈現，而使要求通訊端與被要求通訊端間具有雙向 即時影像撥放之功能。 【實施方式】 為能使貴審查委員清楚本發明之結構組成，以及整 體運作方式，茲配合圖式說明如下： 本發明「一種可穿透防火牆之雙向訊號傳輪裝置」， 其整體傳輸裝置之基本結構組成如第一圖所示，係整體裝 置應用在被要求通訊端设有防火牆’但要求通訊端未設置 防火牆之狀態示意圖，其中整體裝置基本上係包括有： 網路模組單元（30)，分別建構於要求通訊端（1〇)以及 被要求通訊端（2 0 )内部，並由網路線路（4 〇 )加以聯結，用 以進行要求通訊端（10)以及被要求通訊端（20)間之訊號傳 輸；其中’網路線路（40)在被要求通訊端（2〇)之一端係透 過防火牆（B)與要求通訊端（10)相聯結。 一 PSTN線路（50)，設於要求通訊端（1〇)以及被要求通 訊端（20)之間，係為一般市話線路，具有撥號及訊號傳輸 功能。 控制模組單元（6 0 )，分別建構於要求通訊端（1 〇 )以及 被要求通訊端（2 〇)内部，用以構成主機内部之網路模組單 7〇(30)與PSTN線路（50)之聯結，以在要求通訊端（10)以及 被要求通訊端（20)間之PSTN線路（50)通話後，得以透過 PSTN線路（5〇)進行資料之傳送。 、 據以’整體雙向訊號傳輸裝置在實際運作時，係由要 求通訊端撥打被要求通訊端之電話號碼，在通話後即由要 求通訊端送出其IP位址，當要求通訊端IP為真實IP位置，V. Description of the invention (3) Like the signal presentation, it requires the function of two-way instant image playback between the communication terminal and the requested communication terminal. [Embodiment] In order to enable the reviewing committee to understand the structural composition of the present invention and the overall operation mode, the following description is given as follows: The present invention "a two-way signal transmission device capable of penetrating a firewall", the overall transmission device thereof The basic structure is as shown in the first figure. The overall device is applied to the state where the required communication terminal is provided with a firewall, but the communication terminal is not provided with a firewall. The overall device basically includes: a network module unit (30) ), respectively constructed on the request communication end (1〇) and the required communication end (20), and connected by the network line (4 〇) for requesting the communication end (10) and the required communication end ( 20) Signal transmission between the two; wherein the 'network line (40) is connected to the required communication terminal (10) through one of the required communication terminals (2) through the firewall (B). A PSTN line (50), located between the required communication end (1〇) and the required communication end (20), is a general local line, and has dialing and signal transmission functions. The control module unit (60) is respectively constructed inside the required communication terminal (1 〇) and the required communication terminal (2 〇) to form a network module single 7〇(30) and PSTN line inside the host ( 50) The connection is made to transmit data through the PSTN line (5〇) after the PSTN line (50) between the communication terminal (10) and the required communication terminal (20) is called. According to the 'integral two-way signal transmission device in actual operation, the communication terminal is required to dial the telephone number of the requested communication terminal, and the communication terminal is required to send out its IP address after the call, when the communication terminal IP is required to be a real IP address. position,
1258277 -----案號―領 14247_年 月 a___ 五、發明說明(4) 則要求通訊端機透過PSTN傳送要求通訊端IP及port位置給 银要求通訊端，並由被要求通訊端的控制模姐選擇連線權 力’藉以形成要求通訊端與被要求通訊端兩者之連線，而 達到要求通訊端與被要求通訊端可穿透防火牆進行雙向訊 號傳輸之目的，以解決防火牆造成網路點對點連結之限制 ’尤適用於用戶端主機與伺服器主機進行即時影像語音通 訊以及數位資料傳送。 因此，如第二圖所示，其整體雙向訊號傳輸裝置可進 —步在要求通訊端（1 0 )與被要求通訊端（20)包括被要求通 訊端内部網路各主機處架設一影像擷取、顧示組件（7〇 ); 其中，影像擷取、顯示組件（70 )係具有數位影像感應器 (71)，以及影像顯示器（72)，且數位影像感應器（71)可以 為CCD感光元件或CMOS感光元件所構成，至於影像顯示器 係可以直接由LCD液晶顯示器所構成，藉以，可分別將所 攝得之訊號透過網路模組單元（3 0 )將影像訊號傳送至另端 之要求通訊端（10)與被要求通訊端（20)，並將所接收之影 像訊號呈現，而使要求通訊端（1 0 )與被要求通訊端（20 )間 具有雙向即時影像播放之功能。 再者，如第三圖所示係為本發明之裝置所應用之被要 求通訊端（20)及要求通訊端（10)皆有防火牆，且要求通訊 端防火牆（A)本身已開可通訊的連接埠W(80)，由要求通訊 端（10)撥打被要求通訊端（20)號碼接通後，再由要求通訊 端（1 0)透過PSTN線路（50)回傳其防火牆（A)之可通訊連接 埠W( 80 )及要求通訊端之實體IP、相關網路資訊給被要求 通訊端（20)，再由被要求通訊端（20)發出網路連線（4〇)至1258277 -----Case number-Lead 14247_Year month a___ V. Invention description (4) requires the communication terminal to transmit the IP address and port location of the communication terminal to the silver request communication terminal through the PSTN, and is controlled by the required communication terminal. The model sister chooses the connection power to form a connection between the communication terminal and the requested communication terminal, and achieves the purpose of requiring the communication terminal and the required communication terminal to penetrate the firewall for two-way signal transmission to solve the problem caused by the firewall. The restriction of point-to-point connection is especially suitable for real-time image voice communication and digital data transmission between the client host and the server host. Therefore, as shown in the second figure, the overall two-way signal transmission device can further set up an image at the requesting communication end (1 0 ) and the required communication end (20) including the host of the internal network of the requested communication end. The image capturing and displaying component (70) has a digital image sensor (71) and an image display (72), and the digital image sensor (71) can be a CCD photosensitive device. The component or the CMOS sensor component is formed. The image display system can be directly composed of the LCD liquid crystal display, so that the captured signal can be transmitted to the other end through the network module unit (30). The communication terminal (10) and the requested communication terminal (20) present the received image signal, so that the communication terminal (10) and the requested communication terminal (20) have the function of two-way instant image playback. Furthermore, as shown in the third figure, the required communication terminal (20) and the required communication terminal (10) applied to the device of the present invention have a firewall, and the communication terminal firewall (A) itself is required to be open for communication. Connect 埠W (80), after the communication terminal (10) is required to dial the requested communication terminal (20) number, and then the communication terminal (10) is required to transmit its firewall (A) through the PSTN line (50). The communication port 埠W(80) and the physical IP of the communication end and the related network information are required to be sent to the requested communication end (20), and then the network connection (4〇) is issued by the required communication end (20) to
第8頁 1258277 案號 92114247 年月曰 修正 五、發明說明（5) 要求通訊端（1 〇)。 如第四圖所示，係為本發明之裝置所應用之要求通訊 端亦設置有防火牆之架構圖，用要求通訊端（1〇) 一端係設 有防火牆（A) ’則在準備通訊前，跟防火牆（A)之管理程式 要求開一個外部可連線通訊的連接埠γ ( 9 〇 )，其連接埠γ (90)可為固定及隨機，並以psTN線路（5〇)回傳其防火牆 (A)之可通訊之連接埠Y(9Q)及要求通訊端之實體ip、網路 相關資訊給被要求通訊端（2 0 )，再由被要求通訊端（2〇 )發 出連線至要求通訊端（丨〇 )，且在通話結束，關閉可通訊位 置。 :上：述’本發明「一種可穿透防火牆之雙向訊號傳 輸裝置」k供一可解決防火牆對被要求通訊端所造 iCt裝ί，尤適用於要求通訊端與被要求通訊 通訊以及數位資料傳·，爰依法提呈 發月專利之申請；惟，以上之實施說明及圖式所 發明較佳實施例之-者’ 1非以此侷限本發日】，：、係： 凡與本發明之構造、裝置、特徵等近似、 疋， 本發明之創設目的及申請專利範圍之内。β ，句應屬Page 8 1258277 Case No. 92114247 Year Month Amendment V. Invention Description (5) Requires communication terminal (1 〇). As shown in the fourth figure, the communication terminal used in the device of the present invention is also provided with a firewall architecture diagram, and the firewall (A) is provided at one end of the communication terminal (1), before the communication is prepared. The management program of the firewall (A) requires an externally connectable communication connection 埠 γ ( 9 〇), the connection 埠 γ (90) can be fixed and random, and the firewall is returned by the psTN line (5 〇). (A) The communicable connection 埠Y(9Q) and the physical ip and network related information of the communication end are required to be sent to the requested communication end (2 0 ), and then the required communication end (2〇) is sent to the request. The communication terminal (丨〇), and at the end of the call, close the communicable position. :上: The present invention "a two-way signal transmission device that can penetrate a firewall" k can solve the problem that the firewall is required to manufacture the iCt device, especially for the communication terminal and the required communication communication and digital data.传 ·, 提 提 提 提 提 ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; Approximations, structures, features, etc., are intended to be within the scope of the invention and the scope of the patent application. β, sentence should belong to
12582771258277
修正 第圖係為本發明之基本组成架$音圖。 - n Z 實施例之組成架構示意圖。 = 置所應用之被要求通訊端及要求通 連接埠W之架構圖。 通訊端防火牆本身已開可通訊的 第四圖係為本發明之裝置 火牆之架構圖。 〜用之要求通訊端亦設置有防 【元件代表符號說明】 (A ) 防火牆 (B) 防火牆 (10)要求通訊端 (20)被要求通訊端 (3 0 )網路模組單元 (4 0 )網路線路 (80)連接埠w (9 0 )連接埠γ (50) PSTN線路 (6 0 )控制模組單元 (7 0 )影像操取、顯示組件 (7 1)數位影像感應器 (72)顯示器The first figure is the basic composition of the invention. - n Z Schematic diagram of the composition of the embodiment. = The architecture of the required communication terminal and the required connection. The communication diagram of the communication side firewall itself is open. The fourth picture is the architecture diagram of the fire wall of the device of the present invention. ~Use the communication terminal to also set the anti-[component symbol description] (A) firewall (B) firewall (10) requires the communication terminal (20) to be required to communicate (3 0) network module unit (4 0) Network line (80) connection 埠w (9 0 ) connection 埠 γ (50) PSTN line (6 0 ) control module unit (7 0 ) image manipulation, display component (7 1) digital image sensor (72) monitor