TWI385999B - And a method of accessing the connection between the user side and the network device in the network system - Google Patents

Description

Method for connecting access between user terminal and network device in network system

The present invention relates to a method for accessing data in a network system, and more particularly to a network system between a network system including a firewall, a network address converter or a router, and a network device. The method of connecting access.

In an internet system, a network interconnection device such as a firewall, a network address translation (NAT), or a router is usually installed. Among them, network address translation is a technology that rewrites the original IP address and destination IP address when the IP packet passes through the router or firewall. This technology is commonly used with multiple hosts but only through a public IP address to connect to the Internet's private network (for example, regional network). Network address translation is a solution to the shortage of IPv4 addresses to avoid the difficulty of preserving IP addresses. Therefore, it is widely used in many countries and becomes a router in the home and small office networks. Standard features.

However, although the network environment constructed by using network address translation can make up for The IP of IPv4 is insufficient, but the use of network address translation will cause the network address translation outside to directly access internal network devices. The solution in the past was to set the 埠 correspondence on the router for network address translation, but if there is no management right for network address translation, this action cannot be performed, and users in the Internet cannot connect to the network. A device under the conversion of a road address.

Accordingly, it is an object of the present invention to provide a method for connecting access between a user terminal and a network device in a network system, regardless of whether the target network device is under firewall or network address translation. Both sides can access the target network device.

The technical means adopted by the present invention to solve the problems of the known technology is a method for connecting and connecting a user terminal and a network device in a network system, and is a network system in a network system. The device sends a network device registration data to a database of a server through a firewall and an internet network, and keeps the connection.

When a user wants to connect to the target network device and access the data, an access message is sent to the server to confirm whether the target network device is registered with the server. The target network device is connected to the client through the firewall and the Internet, or transmitted through the server to transmit the target data to the user.

By means of the technical means adopted by the present invention, regardless of the target network device Under the firewall or network address translation, as long as the target network device is registered with the server, the user can access the target data from the target network device through the server. In this way, there is no need to specifically set the corresponding correspondence on the router of the network address conversion, and there is no need to worry about whether there is a management authority problem of the network address conversion. In addition, the data of the user terminal and the network device are stored in the server, and the user can conveniently query all connected network devices through the user interface (webpage), and then select a suitable and required network device. Connect.

The specific embodiments of the present invention will be further described by the following examples and the accompanying drawings.

Referring to Fig. 1, there is shown a system architecture diagram showing a method for connection access between a user terminal and a network device in the network system of the present invention. In the network system 100, there is a user terminal 1 connected to the target network device 4 through an internet 2 and a firewall 3. The target network device 4 includes two network cameras 41 and 42 and A computer device 43. Internet 2 is also connected to a server 5. Here, the firewall 3 is a generalized name, which refers to a router for network address translation, and has a built-in firewall function.

Referring to Fig. 2, there is shown a block diagram of a circuit of a server in accordance with a first embodiment of the present invention. The server 5 includes a processing unit 51 connected to an operating system 52, a database 53 and a network interface 54 respectively.

An access control module 6 is built in the processing unit 51 for being responsible for making Access control between the user terminal 1 and the network cameras 41, 42. The database 53 has a network device data table 531, a user terminal data table 532, and an associated data table 533. The web interface 54 is used by the server 5 to connect to the Internet 2 via the web interface 54. In this embodiment, the operating system 52 is a Linux system, and the database 53 is a MySQL database. Of course, other operating systems and databases can be used, depending on various situations and needs.

Referring to FIG. 3, it is a block diagram showing the access control module of the first embodiment of the present invention. The access control module 6 includes a network data transmission module 61 connected to a multipurpose Internet Mail Extension (MIME) module 62, a device control module 63, and a forwarding module. 64 and a message processing module 65.

The network data transmission module 61 is connected to the application program A for receiving the message sent by the network, and after being parsed, the message is allocated to the corresponding module. If the module is found to be uncorrelated, the message is sent. throw away. The multi-purpose network mail expansion module 62 is a multi-purpose network when the network data transmission module 61 determines that the message sent by the network is a standard hypertext transmission protocol (HTTP) message. The mail extension module 62 is responsible for replying. The device control module 63 is connected to the database 53 via a data inventory module 66 and is responsible for processing the messages transmitted by the network cameras 41 and 42.

See also Figures 4 and 5, and in conjunction with Figures 1 through 3 above. Fig. 4 is a view showing the operation of the system of the first embodiment of the present invention; and Fig. 5 is a flow chart showing the control of the first embodiment of the present invention. The first embodiment of the present invention is executed in a certain program flow to F1.

First, the webcam 41 sends a registration request message to the server 5 (step 101). After receiving the registration request message, the server 5 returns an authentication message to the network camera 41 (step 102). In this embodiment, the authentication message is a random number generated by the system. When the network camera 41 receives the authentication message, it returns a reply authentication message to the server according to the random number (step 103), and the reply authentication message is also a random number, and the confirmation action by using the random number is performed. Can increase the security on the transmission.

When the server 5 receives the reply authentication message, it returns a confirmation reply message to the network camera 41 (step 104), and confirms that the reply message includes the IP address, connection port and the like for connection. Next, the network camera 41 sends a network device registration data S1 to the server through the firewall 3 and the Internet 2 (step 105).

Although in the present embodiment, the network camera 41 performs only one registration operation. However, in actual application, the network camera 41 can also be periodically registered to enable the server 5 to keep abreast of the latest information of the network camera 41.

In the access control module 6, the network device registration data S1 is transmitted from the application program A to the network data transmission module 61 of the access control module 6 under the network data transmission protocol P. After the network data transmission module 61 analyzes and determines that the network device registration data S1 belongs to the network camera 41, the network device registration data S1 is assigned to the device control module 63.

The device control module 63 processes the registration operation of the network camera 41 according to the network device registration data S1, and stores the network device registration data S1 in the network device data table 531 of the database 53 through the data inventory retrieval module 66. The registration action is completed (step 106). The information stored in the network device data table 531 includes network device identification code, registration time, IP location, port, physical IP location, physical port, alias of the network device, network device feature description and the like.

Before the user terminal 1 wants to connect to the network camera 41, a user terminal registration data is sent to the server 5 to perform registration (step 107). The server 5 stores the client registration data in the client data table 531 of the database 53 of the server 5 (step 108). The content stored in the user data table 531 includes the user identification code, the user's name, the user's password, the user's mailbox, the user's phone number, and the address where the user lives.

After the registration of the client 1 is completed, an access message S2 is sent to the server 5 indicating that the network camera 41 is to be connected (step 109). The access message S2 is transmitted from the application program A to the network data transmission module 61 of the access control module 6 under the network data transmission protocol P. After the network data transmission module 61 analyzes and determines that the access message S2 belongs to the user terminal 1, the access message S2 is assigned to the message processing module 65.

After receiving the access message S2, the message processing module 65 transmits the request via the access message S2 and transmits it through the transfer module 64 to confirm whether the network camera 41 has been registered in the server 5, that is, in the query database 53. Whether or not there is data exists (step 110).

In practical applications, the server 5 itself provides a user interface (web page) to the user terminal 1, so the step of confirming the network camera 41 can directly query the network camera 41 from the user interface. In addition, the user terminal 1 and the network camera The association action between the cameras 41 (also like the action of requesting a connection) is recorded in the associated profile 533 of the database 53. The information stored in the associated data table 533 includes a data number, a user identification code, and a network device identification code for recording association data between different users and the network devices to which they are connected.

Since the network camera 41 has been registered in the server 5 first, after the server 5 confirms, a notification connection message is sent to the network camera 41 (step 111). If the request from the user terminal 1 is to be connected to the network camera 42 that has not been registered, the server 5 will not accept this request.

Finally, after receiving the notification connection message, the network camera 41 connects to the user terminal 1 through the firewall 3 and the Internet 2, and transmits the target data S3 to the user terminal 1 under the network data transmission protocol P. (Step 112). The target data S3 represents the sound and image data of the network camera 41 in this embodiment, that is, by the above method, the user terminal 1 can directly view the image taken by the network camera 41.

Referring to Figure 6, there is shown an architectural diagram of an access control module in accordance with a second embodiment of the present invention. Since the system architecture of the second embodiment of the present invention is identical to the circuit of the server and the first embodiment. Only the structural design of the access control module 6' is different, so the same components are labeled with the same component numbers. The difference is that the access control module 6' of the second embodiment has a User Datagram Protocol (UDP) transmission module 67. The user data packet transmission module 67 is connected to the message processing module 65 for use in performing UDP transmission.

Referring to FIG. 7 and FIG. 8 again, it shows a transmission timing diagram and a control flow chart of the second embodiment of the present invention. The second embodiment of the present invention is executed in a certain program flow to F2.

Similar to the first embodiment, the webcam 41 transmits a registration request message to the server 5 (step 201). The server 5 receives an authentication request message and returns an authentication message to the network camera 41 (step 202). When the network camera 41 receives the authentication message, it returns a reply authentication message to the server 5 according to the random number (step 203). After receiving the reply authentication message, the server 5 returns a confirmation reply message to the network camera 41 (step 204). The network camera 41 transmits a network device registration data S1 to the server 5 through the firewall 3 and the Internet 2 (step 205).

In the access control module 6', the network device registration data S1 is sent from the application program A under the network data transmission protocol P, and then through the network data transmission module 61, the device control module 63, and the data inventory modulo The group 66 is stored in the network device data table 531 of the database 53 (step 205).

Before the user terminal 1 wants to connect to the network camera 41, a user terminal registration data is sent to the server 5 (step 206). The server 5 stores the user side registration data in the user side data table 531 of the database 53 of the server 5 (step 207). After the registration is completed, the client 1 sends an access message S2 to the server 5 (step 208). The server 5 receives the access message S2 sent by the user terminal 1, and confirms the network according to the request of the access message S2. Whether or not the road camera 41 has been registered with the server 5 (step 209). After confirming that the network camera 41 has been registered, the server 5 transmits a notification connection message to the network camera 41 (step 210).

After receiving the notification connection message, the network camera 41 connects to the server 5 through the firewall 3 and the Internet 2, and under the network data transmission protocol P, first transmits the target data S3 to the server 5 (step 211). ). The target data S3 is forwarded by the transfer control module 64 of the access control module 6' and the user data packet transmission module 67 in the server 5, and then the forwarded data S4 is sent from the server 5 to the user end. 1 (step 212).

Although the first embodiment and the second embodiment are separately described, in practice, since the server 5 itself provides a user interface to the user terminal 1, the user terminal 1 can freely utilize the user interface. The action of the connection transmission using the method of the first embodiment or the second embodiment is selected.

It can be seen from the above embodiments that the method for connecting and accessing the user end and the network device in the network system provided by the present invention has industrial utilization value, and therefore the present invention has met the requirements of the patent. The above description is only for the preferred embodiment of the present invention, and those skilled in the art can make other various improvements according to the above description, but these changes still belong to the inventive spirit of the present invention and the following definitions. In the scope of patents.

100‧‧‧Network System

1‧‧‧User side

2‧‧‧Internet

3‧‧‧Firewall

4‧‧‧Target network device

41, 42‧‧‧ webcams

43‧‧‧Computer equipment

5‧‧‧Server

51‧‧‧Processing unit

52‧‧‧Operating system

53‧‧‧Database

531‧‧‧Network Device Data Sheet

532‧‧‧User Data Sheet

533‧‧‧Related Information Sheet

54‧‧‧Web interface

6, 6'‧‧‧ access control module

61‧‧‧Network Data Transmission Module

62‧‧‧Multipurpose Internet Mail Expansion Module

63‧‧‧Device Control Module

64‧‧‧Transfer module

65‧‧‧Message Processing Module

66‧‧‧Data Inventory Module

67‧‧‧User Data Packet Transmission Module

A‧‧‧App

F1, F2‧‧‧ timing flow

P‧‧‧Network Data Transfer Protocol

S1‧‧‧Network Device Registration Information

S2‧‧‧Access message

S3‧‧‧ Subject information

S4‧‧‧Subscribed information

1 is a system architecture diagram showing a method for connection access between a user terminal and a network device in the network system of the present invention; and FIG. 2 is a circuit block diagram showing a server according to the first embodiment of the present invention; Figure 3 is a block diagram showing an access control module of the first embodiment of the present invention; 4 is a schematic diagram showing the transmission timing of the first embodiment of the present invention; FIG. 5 is a flowchart showing the control of the first embodiment of the present invention; and FIG. 6 is a diagram showing the access control module of the second embodiment of the present invention; FIG. 7 is a schematic diagram showing the transmission timing of the second embodiment of the present invention; and FIG. 8 is a flowchart showing the control of the second embodiment of the present invention.

Claims (10)

A method for connecting between a user end and a network device in a network system includes: at least one user end and at least one target network device in a network system, and the user end is transmitted through An Internet and a firewall are connected to the target network device, and the Internet connection has a server. The method includes the following steps: (a) the target network device sends a network through the firewall and the Internet. (b) after receiving the registration information of the network device, the server stores the network device registration data in a database of the server and keeps the connection; (c) The user terminal sends an access message to the server when the user wants to connect to the target network device and accesses the data; (d) the server receives the access message sent by the user terminal, and according to The request for accessing the message confirms whether the target network device is registered with the server; (e) the target network device is connected to the user terminal through the firewall and the Internet, in a predetermined network Under the data transmission agreement The underlying data to the end user. The method for accessing a connection between a user end and a network device in the network system according to the first aspect of the patent application, wherein the step (a) further comprises the following steps: (a1) the target network device sends a registration request message to the server; (a2) the server receives the registration request message, and returns an authentication message to the target network device; (a3) the target network After receiving the confirmation message, the device returns a reply authentication message to the server; (a4) after receiving the authentication message, the server returns a confirmation reply message to the target network device. The method for accessing a connection between a user end and a network device in the network system described in claim 1, wherein the step (c) further comprises the following steps: (b1) the user end sends a user registration information is sent to the server; (b2) the server stores the received user registration data in the database of the server. The method for accessing a connection between a user end and a network device in the network system according to claim 1, wherein the step (e) further comprises the server sending a notification connection message to the The steps of the target network device. The method for accessing a connection between a user end and a network device in a network system according to claim 1, wherein the target network device in the step (a) periodically transmits the network Device registration information to the server. A method for connecting between a user end and a network device in a network system includes: at least one user end and at least one target network device in a network system, and the user end is transmitted through An Internet and a firewall are connected to the target network device, and the Internet connection has a server. The method includes the following steps: (a) the target network device sends a network through the firewall and the Internet. (b) after receiving the registration information of the network device, the server stores the network device registration data in a database of the server; (c) the user desires Sending an access message to the server when the target network device is connected and the data access is performed; (d) the server receives the access message sent by the user terminal, and according to the access message Requesting to confirm whether the target network device is registered with the server; (e) transmitting, by the target network device, the firewall and the Internet and the server under a predetermined network data transfer protocol Target data to the servo ; (F) receiving the subject of the server data forwarded to the end user. The method for accessing a connection between a user end and a network device in a network system according to claim 6, wherein the step (a) further comprises the following steps: (a1) the target network device Sending a registration request message to the server; (a2) after receiving the registration request message, the server returns an authentication message to the target network device; (a3) the target network device receives the confirmation message and returns a reply authentication message to the server; (a4) After receiving the authentication message, the server returns a confirmation reply message to the target network device. The method for accessing a connection between a user end and a network device in the network system described in claim 6, wherein the step (c) further comprises the following steps: (b1) the user end sends a user registration information is sent to the server; (b2) the server stores the received user registration data in the database of the server. The method for accessing a connection between a user end and a network device in a network system according to claim 6, wherein the step (e) further comprises the server sending a notification connection message to the The steps of the target network device" The method for accessing a connection between a user end and a network device in a network system according to claim 6, wherein the target network device in the step (a) periodically transmits the network Device registration information to the server.