WO2011095079A1 - 一种ip地址分配方法、装置及系统 - Google Patents

一种ip地址分配方法、装置及系统 Download PDF

Info

Publication number
WO2011095079A1
WO2011095079A1 PCT/CN2011/070454 CN2011070454W WO2011095079A1 WO 2011095079 A1 WO2011095079 A1 WO 2011095079A1 CN 2011070454 W CN2011070454 W CN 2011070454W WO 2011095079 A1 WO2011095079 A1 WO 2011095079A1
Authority
WO
WIPO (PCT)
Prior art keywords
digital television
dhcp
receiving terminal
television receiving
address
Prior art date
Application number
PCT/CN2011/070454
Other languages
English (en)
French (fr)
Inventor
易睿
Original Assignee
深圳市同洲电子股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 深圳市同洲电子股份有限公司 filed Critical 深圳市同洲电子股份有限公司
Publication of WO2011095079A1 publication Critical patent/WO2011095079A1/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/50—Address allocation
    • H04L61/5007—Internet protocol [IP] addresses
    • H04L61/5014—Internet protocol [IP] addresses using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]

Definitions

  • IP address allocation method for device and system
  • the present invention relates to a neighboring domain, and in particular, to an IP address allocation method, apparatus, and system. Background technique
  • DHCP Dynamic Hosting Protocol
  • IP Internet Protoco l
  • DHCP allows the server to dynamically assign IP (Internet Protoco l) protocols and configuration information to clients.
  • IP Internet Protoco l
  • DHCP allows network administrators to centrally manage a network system and automatically assign IP addresses to the network.
  • DHCP is divided into two parts: one is the server side and the other is the client. All IP network configuration data is centrally managed by the DHCP server and is responsible for handling the client's DHCP requirements; the client uses the IP environment data assigned from the server.
  • 0PTI0N82 is a protocol in DHCP that extends the DHCP function so that DHCP can use two parameters to distinguish which DHCP of the DHCP request is sent from the DHCP request. That is, it enables DHCP to support multiple vlan (Vi r tua l) Loca l Area Network, Virtual Local Area Network).
  • a technical problem to be solved by embodiments of the present invention is to provide an IP address allocation method, apparatus, and system.
  • an embodiment of the present invention provides an IP address allocation method, including:
  • the DHCP server receives the DHCP request sent by the digital television receiving terminal, and the DHCP request includes 0PTI0N82 information;
  • the digital television receiving terminal is divided according to the DHCP request.
  • the 0PTI0N82 information in the DHCP request is a preset value of 0PTI0N82, and if the determination is yes, the digital television receiving terminal is divided according to the DHCP request.
  • the digital television receiving terminal is assigned an external network IP address.
  • the step of the DHCP server receiving the DHCP request sent by the digital television receiving terminal includes:
  • the repeater allocates access rights to the digital television receiving terminal according to an intranet IP address or an external network IP address allocated by the DHCP server for the digital television receiving terminal.
  • the step of receiving, by the DHCP server, a DHCP request sent by the digital television receiving terminal and then being forwarded by the repeater to the DHCP server includes:
  • the digital television receiving terminal sends a DHCP request to the repeater
  • the repeater determines whether the digital television receiving terminal obtains the authentication server authentication, and if the determination is no, the repeater adds a preset 0PTI0N82 value to the DHCP request and adds the preset 0PTI0N82 The DHCP request after the value is forwarded to the DHCP server.
  • the DHCP request is directly forwarded to the DHCP server.
  • the digital television receiving terminal initiates an authentication request to the authentication server;
  • the corresponding 0PTI0N82 information sent by the authentication server according to the authentication request is received.
  • the invention also provides a DHCP server, comprising:
  • a first receiving unit configured to receive a DHCP request sent by the digital television receiving terminal, where the DHCP request includes 0PTI0N82 information;
  • the allocation determining unit is configured to determine whether the 0PTI0N82 information in the DHCP request is a preset value of 0PTI0N82, and if the determination is yes, assign an intranet IP address to the digital television receiving terminal according to the DHCP request, and determine whether When the digital television receiving terminal is allocated an external network IP address.
  • the invention also provides a repeater, comprising:
  • a second receiving unit configured to receive a DHCP request sent by the digital television receiving terminal
  • a adding determining unit configured to determine whether the digital television receiving terminal obtains an authentication server If the determination is no, the preset 0PTI0N82 value is added to the DHCP request, and the DHCP request after adding the preset 0PTI0N82 value is forwarded to the DHCP server; when the determination is yes, the second receiving is performed.
  • the DHCP request received by the unit is forwarded to the DHCP server.
  • an allocating unit configured to allocate an access right to the digital television receiving terminal according to an IP address of the digital television receiving terminal.
  • the invention also provides a digital television receiving terminal, comprising:
  • a requesting unit configured to initiate an authentication request to the authentication server or initiate a DHCP request to the DHCP server;
  • the third receiving unit is configured to receive, according to the authentication request, the corresponding 0PTI0N82 information sent by the authentication server according to the authentication request, or receive the IP information delivered by the DHCP server according to the DHCP request.
  • the present invention also provides an IP address allocation system, including:
  • the DHCP server
  • the repeater connected to the DHCP server;
  • the digital television receiving terminal connected to the repeater;
  • an authentication server connected to the digital television receiving terminal, configured to authenticate the digital television receiving terminal, and when the digital television receiving terminal passes the authentication, issue 0PTI0N82 information corresponding to the digital television terminal.
  • the effective combination of DHCP and 0PTI0N82 can be realized, and the security defects existing in the traditional enterprise network can be eliminated.
  • the repeater allocates different access rights to the digital television receiving terminals using different types of IP addresses, and further effectively implements the IP. Management, truly realizes the dual functions of network security and network management.
  • FIG. 1 is a schematic flow chart of an embodiment of an IP address allocation method according to the present invention.
  • FIG. 2 is a schematic flowchart of still another embodiment of an IP address allocation method according to the present invention
  • FIG. 3 is a schematic flowchart of still another embodiment of an IP address allocation method according to the present invention
  • 4 is a schematic structural diagram of an embodiment of an IP address allocation system according to the present invention
  • FIG. 5 is a schematic structural diagram of an embodiment of a DHCP server in an IP address allocation system according to the present invention.
  • Figure 6 is a block diagram showing an embodiment of a repeater in an IP address distribution system according to the present invention
  • Figure 7 is a block diagram showing an embodiment of a digital television receiving terminal in an IP address distribution system according to the present invention.
  • FIG. 1 is a schematic flow chart of an embodiment of an IP address allocation method according to the present invention, which includes the following steps:
  • the DHCP server receives the DHCP request sent by the digital television receiving terminal.
  • the DHCP request contains 0PTI0N82 information.
  • the DHCP request is forwarded by the repeater to the DHCP server.
  • the DHCP server determines whether the 0PTI0N82 information in the DHCP request is a preset 0PTI0N82 value. If the determination is yes, the digital TV receiving terminal allocates an intranet IP address according to the DHCP request; At the time, the digital television receiving terminal is assigned an external network IP address.
  • the preset value of 0PTI0N82 can be set to an arbitrary value according to requirements.
  • the preset 0PTI0N82 value may be stored in the DHCP server according to the requirement, and the DHCP server determines whether the received 0PTI0N82 information in the DHCP request is the stored preset 0PTI0N82 value. To assign a corresponding IP address to the digital television receiving terminal.
  • FIG. 2 is a schematic flowchart of still another embodiment of an IP address allocation method according to the present invention, where the method includes the following steps:
  • the DHCP server receives a DHCP request sent from the digital television receiving terminal and then forwarded by the repeater to the DHCP server.
  • the DHCP request includes 0PTI0N82 information. 201.
  • the DHCP server determines whether the 0PTI0N82 information in the DHCP request is a preset value of 0PTI0N82. If the determination is yes, the internal network IP address is allocated to the digital television receiving terminal according to the DHCP request; At the time, the digital television receiving terminal is assigned an external network IP address.
  • the preset 0PTI0N82 value may be stored in the DHCP server according to requirements, and the DHCP server determines, according to whether the received 0PTI0N82 information in the DHCP request is the stored preset.
  • a value of 0PTI0N82 is set to assign a corresponding IP address to the digital television receiving terminal.
  • the repeater allocates access rights to the digital television receiving terminal according to an intranet IP address or an external network IP address allocated by the DHCP server for the digital television receiving terminal.
  • steps 202 and 200 and 201 have no necessary sequential relationship.
  • the repeater is a switch.
  • the digital television receiving terminal when the IP address of the digital television receiving terminal is an external network IP address, the digital television receiving terminal may be allocated the right to access the external network; when the IP address of the digital television receiving terminal is an intranet IP address At the time of the address, the digital television receiving terminal is limited to access only the internal local area network.
  • the digital television receiving terminal it is also possible to distinguish the allocation of the digital television receiving terminal in other rights according to the difference in the IP address.
  • the repeater may be replaced with other servers or devices within the network that have rights allocation management functions.
  • FIG. 3 is a schematic flowchart diagram of still another embodiment of an IP address allocation method according to the present invention, where the method includes the following steps:
  • the digital television receiving terminal sends a DHCP request to the repeater.
  • the repeater determines whether the digital television receiving terminal obtains an authentication server authentication, and if the determination is no, the repeater adds a preset 0PTI0N82 value to the DHCP request and adds the preset The DHCP request after the 0PTI0N82 value is forwarded to the DHCP server; when it is judged as YES, the DHCP request is directly forwarded to the DHCP server.
  • the repeater will strip the 0PTI0N82 of the digital television receiving terminal. Information, and then add a preset value of 0PTI0N82 for the DHCP request. 302.
  • the DHCP server receives a DHCP request sent by the digital television receiving terminal and then forwarded by the repeater to the DHCP server, where the DHCP request includes 0PTI0N82 information.
  • the DHCP server determines whether the 0PTI0N82 information in the DHCP request is a preset 0PTI0N82 value. If the determination is yes, the digital TV receiving terminal allocates an intranet IP address according to the DHCP request; At the time, the digital television receiving terminal is assigned an external network IP address.
  • the preset 0PTI0N82 value may be stored in the DHCP server according to requirements, and the DHCP server determines, according to whether the received 0PTI0N82 information in the DHCP request is the stored preset.
  • a value of 0PTI0N82 is set to assign a corresponding IP address to the digital television receiving terminal.
  • the repeater allocates an intranet allocated to the digital television receiving terminal according to the DHCP server.
  • the IP address or the external network IP address assigns access rights to the digital television receiving terminal.
  • step 304 there is no necessary sequential relationship between step 304 and other steps in this embodiment.
  • the repeater is a switch.
  • the digital television receiving terminal when the IP address of the digital television receiving terminal is an external network IP address, the digital television receiving terminal may be allocated the right to access the external network; when the IP address of the digital television receiving terminal is an intranet IP address At the time of the address, the digital television receiving terminal is limited to access only the internal local area network.
  • the IP address of the digital television receiving terminal when the IP address of the digital television receiving terminal is an external network IP address, the digital television receiving terminal may be allocated the right to access the external network; when the IP address of the digital television receiving terminal is an intranet IP address At the time of the address, the digital television receiving terminal is limited to access only the internal local area network.
  • the repeater may be replaced with other servers or devices within the network that have rights allocation management functions.
  • the digital television receiving terminal initiates an authentication request to the authentication server.
  • the authentication server authenticates the legality of the digital television receiving terminal by means of a username and a password, and when the digital television receiving terminal obtains the authentication, it will initiate DHCP to the DHCP server again. Request to get the external network IP address, so that he is given a higher access.
  • 4 is a schematic structural diagram of an embodiment of an IP address allocation system according to the present invention, including:
  • the DHCP server 1 is configured to assign a different IP address to the digital television receiving terminal 3 based on the 0PTI0N82 information transmitted from the digital television receiving terminal 3 and then forwarded by the repeater 2.
  • the repeater 2 connected to the DHCP server 1 is configured to forward the DHCP request sent by the digital television receiving terminal 3 to the DHCP server 1, and add a preset 0PTI0N82 to the 0PTI0N82 information in the DHCP request sent by the digital television receiving terminal 3 that has not passed the authentication.
  • the value is also assigned to the digital television receiving terminal 3 in accordance with the IP address of the digital television receiving terminal 3.
  • the digital television receiving terminal 3 connected to the repeater 2 is configured to send a DHCP request or an authentication request, and receive IP address information fed back according to the DHCP request or receive 0PTI0N82 information fed back according to the authentication request.
  • the authentication server 4 connected to the digital television receiving terminal 3 is configured to authenticate the digital television receiving terminal 3, and when the digital television receiving terminal 3 passes the authentication, the 0PTI0N82 information corresponding to the digital television terminal 3 is delivered.
  • FIG. 5 is a block diagram showing an embodiment of a DHCP server 1 in an IP address distribution system according to the present invention, including:
  • the first receiving unit 11 is configured to receive a DHCP request sent from the digital television receiving terminal 3 and then forwarded by the repeater 2 to the DHCP server 1.
  • the DHCP request contains 0PTI0N82 information.
  • the allocation determining unit 12 is configured to determine whether the 0PTI0N82 information in the DHCP request received by the first receiving unit 11 is a preset value of 0PTI0N82, and if the determination is yes, the digital television receiving terminal 3 according to the DHCP request.
  • the intranet IP address is assigned; when the determination is no, the digital television receiving terminal 3 is assigned an external network IP address.
  • the preset 0PTI0N82 value may be preset and stored in the DHCP server 1 according to requirements, and the allocation determining unit 12 determines, according to whether the 0PTI0N82 information in the DHCP request is a preset value.
  • the digital television receiving terminal 3 assigns a corresponding IP address.
  • FIG. 6 is a schematic structural diagram of an embodiment of a repeater 2 in an IP address distribution system according to the present invention, including:
  • the second receiving unit 21 is configured to receive the DHCP request sent by the digital television receiving terminal 3, and the adding determining unit 22 is configured to determine whether the digital television receiving terminal 3 obtains the authentication service.
  • the device 4 authenticates, and if the determination is no, the preset 0PTI0N82 value is added to the DHCP request, and the DHCP request after adding the preset 0PTI0N82 value is forwarded to the DHCP server 1;
  • the DHCP request received by the receiving unit 21 is forwarded to the DHCP server 1.
  • the adding determining unit 22 will peel off the digital television receiving terminal 3.
  • the built-in 0PTI0N82 information adds a preset 0PTI0N82 value to the DHCP request.
  • the allocating unit 23 is configured to allocate access rights to the digital television receiving terminal 3 according to the IP address of the digital television receiving terminal 3.
  • the allocating unit 23 may assign the digital television receiving terminal 3 the right to access the external network; when the digital television receiving terminal 3 When the IP address is an intranet IP address, the allocating unit 23 can define that the digital television receiving terminal 3 can only access the internal local area network. Of course, the allocating unit 23 can also distinguish the allocation of other rights of the digital television receiving terminal 3 according to the IP address according to requirements.
  • repeater 2 can be replaced with other servers or devices having rights assignment management functions within the network.
  • FIG. 7 is a schematic structural diagram of an embodiment of a digital television receiving terminal 3 in an IP address distribution system according to the present invention, including:
  • the requesting unit 31 is configured to initiate an authentication request to the authentication server 4 or initiate a DHCP request to the DHCP server.
  • the third receiving unit 32 is configured to receive the corresponding 0PTI0N82 information that is sent by the authentication server 4 according to the authentication request, or receive the IP information that is sent by the DHCP server according to the DHCP request.
  • a DHCP server in the embodiment of the present invention, a DHCP server, a repeater, a digital television receiving terminal, and the DHCP server 1, the repeater 2, and the digital television receiving terminal 3 in the system embodiment shown in FIG. 4-7 It is identical in structure and function and will not be described in detail here.
  • the implementation of the present invention can effectively combine DHCP and 0PTI0N82, and eliminate the security defects existing in the traditional enterprise network.
  • the DHCP server allocates different types according to the 0PTI0N82 information in different DHCP requests and the corresponding digital television receiving terminal.
  • IP address now by relay By assigning different access rights to digital TV receiving terminals using different types of IP addresses, the device further effectively manages IP, and truly realizes the dual functions of network security and network management.
  • the digital television receiving terminal of the present invention includes but is not limited to: a set top box, a network protocol television
  • IPTV Internet Protoco l Telev i s ion, IPTV
  • digital TV all-in-one TV mobile phone, etc. have terminals that receive digital TV functions.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)

Abstract

一种IP地址分配方法，包括：DHCP服务器接收数字电视接收终端发送的DHCP请求，所述DHCP请求包含OPTION82信息；所述DHCP服务器判断所述DHCP请求中的OPTION82信息是否为预先设定的OPTION82值，判断为是时，根据所述DHCP请求为所述数字电视接收终端分配内网IP地址，判断为否时，为所述数字电视接收终端分配外网IP地址。实施本发明，可实现DHCP与option82有效结合，消除传统企业网存在的安全缺陷，同时还可进一步对IP进行有效的管理，真正实现网络安全和网络管理双重功能。

Description

一种 IP地址分配方法、 装置及系统
本申请要求于 2010 年 2 月 8 日提交中国专利局、 申请号为 201010111474. 5、 发明名称为 "一种 IP地址分配方法、 装置及系统" 的中国 专利申请的优先权， 其全部内容通过引用结合在本申请中。
技术领域
本发明涉及通邻域， 尤其涉及一种 IP地址分配方法、 装置及系统。 背景技术
DHCP ( Dynamic Hos t Conf igurat ion Protocol , 动态主机分酉己十办议）允 许服务器向客户端动态分配 IP ( Internet Protoco l , 网络之间互连的协议） 地址和配置信息。 DHCP使网络管理员可以集中管理一个网络系统， 对网络中 的 IP地址进行自动分配。 DHCP分为两个部份： 一个是服务器端， 而另一个是 客户端。所有的 IP 网络设定数据都由 DHCP服务器集中管理， 并负责处理客 户端的 DHCP要求； 而客户端则会使用从服务器分配下来的 IP环境数据。
0PTI0N82是 DHCP中的一个协议， 它扩展了 DHCP功能， 使 DHCP可以借助 两个参数来分辨 DHCP 请求是从哪个交换机的哪个 DHCP发出的， 也就是说， 它使 DHCP支持多 vlan ( Vi r tua l Loca l Area Network, 虚拟局域网）。
现有技术中， DHCP与 0PTI0N82并未有效结合， 无法消除传统企业网存在 的安全缺陷， 同时也未实现对网络的 IP的有效管理。 发明内容
本发明实施例所要解决的技术问题在于， 提供一种 IP地址分配方法、 装 置及系统。
为了解决上述技术问题， 本发明实施例提供了一种 IP地址分配方法， 包 括：
DHCP服务器接收数字电视接收终端发送的 DHCP请求， 所述 DHCP请求包 含 0PTI0N82信息；
所述 DHCP服务器判断所述 DHCP请求中的 0PTI0N82信息是否为预先设定 的 0PTI0N82值， 判断为是时，根据所述 DHCP请求为所述数字电视接收终端分 配内网 IP地址，
判断为否时， 为所述数字电视接收终端分配外网 IP地址。
其中，所述 DHCP服务器接收数字电视接收终端发送的 DHCP请求的步骤包 括：
所述 DHCP 服务器接收自数字电视接收终端发送再由中继器转发至所述
DHCP服务器的 DHCP请求。
其中， 还包括步骤：
所述中继器根据 DHCP服务器为所述数字电视接收终端分配的内网 IP地址 或外网 IP地址为所述数字电视接收终端分配访问权限。
其中， 所述 DHCP服务器接收自数字电视接收终端发送再由中继器转发至 所述 DHCP服务器的 DHCP请求的步骤包括：
所述数字电视接收终端发送 DHCP请求到中继器；
所述中继器判断所述数字电视接收终端是否获得认证服务器认证，判断为 否时，所述中继器为所述 DHCP请求添加预先设定的 0PTI0N82值并将添加所述 预先设定的 0PTI0N82值后的 DHCP请求转发至 DHCP服务器，
判断为是时， 直接将所述 DHCP请求转发至所述 DHCP服务器。
其中， 还包括步骤：
所述数字电视接收终端向所述认证服务器发起认证请求；
当认证通过时， 接收所述认证服务器根据所述认证请求下发的相应的 0PTI0N82信息。
本发明还提供一种 DHCP服务器， 包括：
第一接收单元， 用于接收数字电视接收终端发送的 DHCP请求， 所述 DHCP 请求包含 0PTI0N82信息；
分配判断单元，用于判断所述 DHCP请求中的 0PTI0N82信息是否为预先设 定的 0PTI0N82值， 判断为是时，根据所述 DHCP请求为所述数字电视接收终端 分配内网 IP地址， 判断为否时， 为所述数字电视接收终端分配外网 IP地址。
本发明还提供一种中继器， 包括：
第二接收单元， 用于接收所述数字电视接收终端发送的 DHCP请求； 添加判断单元， 用于判断所述数字电视接收终端是否获得认证服务器认 证， 判断为否时， 为所述 DHCP请求添加预先设定的 0PTI0N82值并将添加所述 预先设定的 0PTI0N82值后的 DHCP请求转发至 DHCP服务器； 判断为是时， 将 所述第二接收单元接收的 DHCP请求转发至 DHCP服务器。
其中， 还包括：
分配单元， 用于根据所述数字电视接收终端的 IP地址为所述数字电视接 收终端分配访问权限。
本发明还提供一种数字电视接收终端， 包括：
请求单元， 用于向认证服务器发起认证请求或向 DHCP服务器发起 DHCP 请求；
第三接收单元， 用于当认证通过时，接收所述认证服务器根据所述认证请 求下发的相应的 0PTI0N82信息， 或接收所述 DHCP服务器根据所述 DHCP请求 下发的 IP信息。
本发明还提供一种 IP地址分配系统， 包括：
所述的 DHCP服务器；
所述的连接 DHCP服务器的中继器；
所述的连接中继器的数字电视接收终端；
以及连接数字电视接收终端的认证服务器，用于认证所述数字电视接收终 端， 当所述数字电视接收终端通过认证时， 下发与所述数字电视终端相应的 0PTI0N82信息。
实施本发明实施例， 具有如下有益效果：
实施本发明， 可实现 DHCP与 0PTI0N82有效结合， 消除传统企业网存在的 安全缺陷， 同时中继器通过对使用不同类型 IP地址的数字电视接收终端分配 不同的访问权限， 进一步对 IP进行了有效的管理， 真正实现了网络安全和网 络管理双重功能。 附图说明
图 1是本发明一种 IP地址分配方法的一实施例的流程示意图；
图 2是本发明一种 IP地址分配方法的又一实施例的流程示意图； 图 3是本发明一种 IP地址分配方法的又一实施例的流程示意图； 图 4是本发明一种 IP地址分配系统的一实施例结构示意图；
图 5是本发明一种 IP地址分配系统中 DHCP服务器的一实施例的结构示意 图；
图 6是本发明一种 IP地址分配系统中中继器的一实施例的结构示意图； 图 7是本发明一种 IP地址分配系统中数字电视接收终端的一实施例的结 构示意图。 具体实施方式 为使本发明的目的、技术方案和优点更加清楚， 下面将结合附图对本发明 作进一步地详细描述。
图 1是本发明一种 IP地址分配方法的一实施例的流程示意图， 该方法包 括以下步骤：
100、 DHCP服务器接收数字电视接收终端发送的 DHCP请求。
所述 DHCP请求包含 0PTI0N82信息。
具体地， 该 DHCP请求由中继器转发至所述 DHCP服务器。
101、所述 DHCP服务器判断所述 DHCP请求中的 0PTI0N82信息是否为预先 设定的 0PTI0N82值， 判断为是时，根据所述 DHCP请求为所述数字电视接收终 端分配内网 IP地址；判断为否时，为所述数字电视接收终端分配外网 IP地址。
需要说明的是， 所述预先设定的 0PTI0N82值可根据需求设置为任意值。 可根据需求预先将所述预先设定的 0PTI0N82值存储于所述 DHCP服务器中， DHCP服务器根据判断接收到的所述 DHCP请求中的 0PTI0N82信息是否为所存 储的所述预先设定的 0PTI0N82值， 来为所述数字电视接收终端分配相应的 IP 地址。
图 2是本发明一种 IP地址分配方法的又一实施例的流程示意图， 该方法 包括以下步骤：
200、 DHCP 服务器接收自数字电视接收终端发送再由中继器转发至所述 DHCP服务器的 DHCP请求。
所述 DHCP请求包含 0PTI0N82信息。 201、所述 DHCP服务器判断所述 DHCP请求中的 0PTI0N82信息是否为预先 设定的 0PTI0N82值， 判断为是时，根据所述 DHCP请求为所述数字电视接收终 端分配内网 IP地址；判断为否时，为所述数字电视接收终端分配外网 IP地址。
需要说明的是， 可根据需求预先将所述预先设定的 0PTI0N82值存储于所 述 DHCP服务器中， DHCP服务器根据判断接收到的所述 DHCP请求中的 0PTI0N82 信息是否为所存储的所述预先设定的 0PTI0N82值， 来为所述数字电视接收终 端分配相应的 IP地址。
202、 所述中继器根据所述 DHCP 服务器为数字电视接收终端分配的内网 IP地址或外网 IP地址为所述数字电视接收终端分配访问权限。
需要说明的是， 步骤 202与 200及 201没有必然的先后关系。
优选实施时， 所述中继器为交换机。
优选实施时， 当所述数字电视接收终端的 IP地址为外网 IP地址时， 可为 所述数字电视接收终端分配访问外网的权限； 当所述数字电视接收终端的 IP 地址为内网 IP地址时， 则限定所述数字电视接收终端只可访问内部局域网。 当然， 还可应需求根据所述 IP地址的不同为所述数字电视接收终端在其它权 限的分配进行区别。
还需要说明的是，在其它实施例中， 所述中继器可替换为网络内部具有权 限分配管理功能的其它服务器或装置。
图 3是本发明一种 IP地址分配方法的又一实施例的流程示意图， 该方法 包括以下步骤：
300、 所述数字电视接收终端发送 DHCP请求到中继器。
301、 所述中继器判断所述数字电视接收终端是否获得认证服务器认证， 判断为否时，所述中继器为所述 DHCP请求添加预先设定的 0PTI0N82值并将添 加所述预先设定的 0PTI0N82值后的 DHCP请求转发至 DHCP服务器； 判断为是 时， 直接将所述 DHCP请求转发至所述 DHCP服务器。
需要说明的是， 若所述数字电视接收终端未通过认证，且所述数字电视接 收终端发送的 DHCP请求中包含 0PTI0N82信息时，所述中继器将剥离所述数字 电视接收终端自带的 0PTI0N82 信息， 再为所述 DHCP 请求添加预先设定的 0PTI0N82值。 302、 DHCP 服务器接收自数字电视接收终端发送再由中继器转发至所述 DHCP服务器的 DHCP请求， 所述 DHCP请求包含 0PTI0N82信息。
303、所述 DHCP服务器判断所述 DHCP请求中的 0PTI0N82信息是否为预先 设定的 0PTI0N82值， 判断为是时，根据所述 DHCP请求为所述数字电视接收终 端分配内网 IP地址；判断为否时，为所述数字电视接收终端分配外网 IP地址。
需要说明的是， 可根据需求预先将所述预先设定的 0PTI0N82值存储于所 述 DHCP服务器中， DHCP服务器根据判断接收到的所述 DHCP请求中的 0PTI0N82 信息是否为所存储的所述预先设定的 0PTI0N82值， 来为所述数字电视接收终 端分配相应的 IP地址。
304、 所述中继器根据所述 DHCP 服务器为数字电视接收终端分配的内网
IP地址或外网 IP地址为所述数字电视接收终端分配访问权限。
需要说明的是， 步骤 304与本实施例其它步骤间没有必然的先后关系。 优选实施时， 所述中继器为交换机。
优选实施时， 当所述数字电视接收终端的 IP地址为外网 IP地址时， 可为 所述数字电视接收终端分配访问外网的权限； 当所述数字电视接收终端的 IP 地址为内网 IP地址时， 则限定所述数字电视接收终端只可访问内部局域网。 当然， 还可应需求根据所述 IP地址不同为所述数字电视接收终端在其它权限 的分配是进行区别。
还需要说明的是，在其它实施例中， 所述中继器可替换为网络内部具有权 限分配管理功能的其它服务器或装置。
305、 所述数字电视接收终端向所述认证服务器发起认证请求。
306、 当认证通过时， 接收所述认证服务器根据所述认证请求下发的相应 的 0PTI0N82信息。
需要说明的是， 步骤 305、 306与本实施例其它步骤间没有必然的先后关 系。
还需要说明的是，优选实施时，认证服务器通过用户名及密码的形式认证 所述数字电视接收终端的合法性， 当所述数字电视接收终端获取认证后，将再 次向所述 DHCP服务器发起 DHCP请求， 以获取外网 IP地址， 从而他配获得再 高的访问权限。 图 4是本发明一种 IP地址分配系统的一实施例结构示意图， 包括：
DHCP服务器 1 ,用于根据自数字电视接收终端 3发送再由中继器 2转发的 DHCP请求中的 0PTI0N82信息为所述数字电视接收终端 3分配不同的 IP地址。
连接 DHCP服务器 1的中继器 2 ,用于转发数字电视接收终端 3发送的 DHCP 请求至 DHCP服务器 1 , 为未通过认证的数字电视接收终端 3发送的 DHCP请求 中的 0PTI0N82信息添加预设的 0PTI0N82值， 还根据数字电视接收终端 3的 IP地址为数字电视接收终端 3分配访问权限。
连接中继器 2的数字电视接收终端 3 , 用于发送 DHCP请求或认证请求， 并接收根据所述 DHCP请求反馈的 IP地址信息或接收根据所述认证请求反馈的 0PTI0N82信息。
连接数字电视接收终端 3的认证服务器 4 , 用于认证所述数字电视接收终 端 3 , 当所述数字电视接收终端 3通过认证时， 下发与所述数字电视终端 3相 应的 0PTI0N82信息。
图 5是本发明一种 IP地址分配系统中 DHCP服务器 1的一实施例的结构示 意图， 包括：
第一接收单元 11 , 用于接收自数字电视接收终端 3发送再由中继器 2转 发至所述 DHCP服务器 1的 DHCP请求。
所述 DHCP请求包含 0PTI0N82信息。
分配判断单元 12 , 用于判断所述第一接收单元 11接收的 DHCP请求中的 0PTI0N82信息是否为预先设定的 0PTI0N82值， 判断为是时， 根据所述 DHCP 请求为所述数字电视接收终端 3分配内网 IP地址； 判断为否时， 为所述数字 电视接收终端 3分配外网 IP地址。
需要说明的是， 可根据需求预先设定所述预先设定的 0PTI0N82值存储于 所述 DHCP服务器 1中，分配判断单元 12根据判断所述 DHCP请求中的 0PTI0N82 信息是否为预设的值来为所述数字电视接收终端 3分配相应的 IP地址。
图 6是本发明一种 I P地址分配系统中中继器 2的一实施例的结构示意图， 包括：
第二接收单元 21 , 用于接收所述数字电视接收终端 3发送的 DHCP请求； 添加判断单元 22 , 用于判断所述数字电视接收终端 3是否获得认证服务 器 4认证， 判断为否时， 为所述 DHCP请求添加预先设定的 0PTI0N82值并将添 加所述预先设定的 0PTI0N82值后的 DHCP请求转发至 DHCP服务器 1 ; 判断为 是时将所述第二接收单元 21接收的 DHCP请求转发至 DHCP服务器 1。
需要说明的是， 若所述数字电视接收终端 3未通过认证，且所述数字电视 接收终端 3发送的 DHCP请求中包含 0PTI0N82信息时， 所述添加判断单元 22 将剥离所述数字电视接收终端 3 自带的 0PTI0N82信息，再为所述 DHCP请求添 加预先设定的 0PTI0N82值。
分配单元 23 , 用于根据所述数字电视接收终端 3的 IP地址为所述数字电 视接收终端 3分配访问权限。
优选实施时， 当所述数字电视接收终端 3的 IP地址为外网 IP地址时， 分 配单元 23可为所述数字电视接收终端 3分配访问外网的权限； 当所述数字电 视接收终端 3的 IP地址为内网 IP地址时， 分配单元 23则可限定所述数字电 视接收终端 3只可访问内部局域网。 当然， 分配单元 23还可应需求根据所述 IP地址不同为所述数字电视接收终端 3在其它权限的分配是进行区别。
还需要说明的是，在其它实施例中， 所述中继器 2可替换为网络内部具有 权限分配管理功能的其它服务器或装置。
图 7是本发明一种 IP地址分配系统中数字电视接收终端 3的一实施例的 结构示意图， 包括：
请求单元 31 , 用于向认证服务器 4发起认证请求或向 DHCP服务器发起 DHCP请求。
第三接收单元 32 , 用于当认证通过时， 接收所述认证服务器 4根据所述 认证请求下发的相应的 0PTI0N82信息， 或接收所述 DHCP服务器 4根据所述 DHCP请求下发的 IP信息。
需要说明的是， 本发明实施例中一种 DHCP服务器、 中继器、 数字电视接 收终端与图 4-图 7所示系统实施例中的 DHCP服务器 1、 中继器 2、 数字电视 接收终端 3在结构与功能上相同， 在此不再详述。
由上可知， 实施本发明， 可实现 DHCP与 0PTI0N82的有效结合， 消除传统 企业网存在的安全缺陷， 同时， 由 DHCP 服务器根据不同的 DHCP 请求中的 0PTI0N82信息与相应的数字电视接收终端分配不同类型的 IP地址， 现由中继 器通过对使用不同类型 IP地址的数字电视接收终端分配不同的访问权限， 进 一步对 IP进行了有效的管理， 真正实现了网络安全和网络管理双重功能。
本发明的数字电视接收终端包括但不限于： 机顶盒、 网络协议电视
( Internet Protoco l Telev i s ion, IPTV )、 数字电视一体机、 电视手机等具 有接收数字电视功能的终端。
以上所述是本发明的优选实施方式，应当指出，对于本技术领域的普通技 术人员来说， 在不脱离本发明原理的前提下， 还可以做出若干改进和润饰， 这 些改进和润饰也视为本发明的保护范围。

Claims

权 利 要 求
1、 一种 IP地址分配方法， 其特征在于， 包括：
DHCP服务器接收数字电视接收终端发送的 DHCP请求， 所述 DHCP请求包 含 0PTI0N82信息；
所述 DHCP服务器判断所述 DHCP请求中的 0PTI0N82信息是否为预先设定 的 0PTI0N82值， 判断为是时，根据所述 DHCP请求为所述数字电视接收终端分 配内网 IP地址，
判断为否时， 为所述数字电视接收终端分配外网 IP地址。
2、 如权利要求 1所述的方法， 其特征在于， 所述 DHCP服务器接收数字电 视接收终端发送的 DHCP请求的步骤包括：
所述 DHCP 服务器接收自数字电视接收终端发送再由中继器转发至所述 DHCP服务器的 DHCP请求。
3、 如权利要求 2所述的方法， 其特征在于， 还包括步骤：
所述中继器根据 DHCP服务器为所述数字电视接收终端分配的内网 IP地址 或外网 IP地址为所述数字电视接收终端分配访问权限。
4、 如权利要求 3所述的方法， 其特征在于， 所述 DHCP服务器接收自数字 电视接收终端发送再由中继器转发至所述 DHCP服务器的 DHCP请求的步骤包 括：
所述数字电视接收终端发送 DHCP请求到中继器；
所述中继器判断所述数字电视接收终端是否获得认证服务器认证，判断为 否时，所述中继器为所述 DHCP请求添加预先设定的 0PTI0N82值并将添加所述 预先设定的 0PTI0N82值后的 DHCP请求转发至 DHCP服务器，
判断为是时， 直接将所述 DHCP请求转发至所述 DHCP服务器。
5、 如权利要求 4所述的方法， 其特征在于， 还包括步骤：
所述数字电视接收终端向所述认证服务器发起认证请求； 当认证通过时， 接收所述认证服务器根据所述认证请求下发的相应的
0PTI 0N82信息。
6、 一种 DHCP服务器， 其特征在于， 包括：
第一接收单元， 用于接收数字电视接收终端发送的 DHCP请求， 所述 DHCP 请求包含 0PTI 0N82信息；
分配判断单元，用于判断所述 DHCP请求中的 0PTI 0N82信息是否为预先设 定的 0PTI0N82值， 判断为是时，根据所述 DHCP请求为所述数字电视接收终端 分配内网 IP地址， 判断为否时， 为所述数字电视接收终端分配外网 IP地址。
7、 一种中继器， 其特征在于， 包括：
第二接收单元， 用于接收所述数字电视接收终端发送的 DHCP请求； 添加判断单元， 用于判断所述数字电视接收终端是否获得认证服务器认 证， 判断为否时， 为所述 DHCP请求添加预先设定的 0PTI0N82值并将添加所述 预先设定的 0PTI0N82值后的 DHCP请求转发至 DHCP服务器； 判断为是时， 将 所述第二接收单元接收的 DHCP请求转发至 DHCP服务器。
8、 如权利要求 7所述的中继器， 其特征在于， 还包括：
分配单元， 用于根据所述数字电视接收终端的 IP地址为所述数字电视接 收终端分配访问权限。
9、 一种数字电视接收终端， 其特征在于， 包括：
请求单元， 用于向认证服务器发起认证请求或向 DHCP服务器发起 DHCP 请求；
第三接收单元， 用于当认证通过时，接收所述认证服务器根据所述认证请 求下发的相应的 0PTI0N82信息， 或接收所述 DHCP服务器根据所述 DHCP请求 下发的 IP信息。
1 0、 一种 IP地址分配系统， 其特征在于， 包括： 如权利要求 6所述的 DHCP服务器；
如权利要求 7-8任一项所述的连接 DHCP服务器的中继器；
如权利要求 9所述的连接中继器的数字电视接收终端；
以及连接数字电视接收终端的认证服务器，用于认证所述数字电视接收终 端， 当所述数字电视接收终端通过认证时， 下发与所述数字电视终端相应的 0PTI 0N82信息。
PCT/CN2011/070454 2010-02-08 2011-01-21 一种ip地址分配方法、装置及系统 WO2011095079A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201010111474A CN101800783A (zh) 2010-02-08 2010-02-08 一种ip地址分配方法、装置及系统
CN201010111474.5 2010-02-08

Publications (1)

Publication Number Publication Date
WO2011095079A1 true WO2011095079A1 (zh) 2011-08-11

Family

ID=42596274

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2011/070454 WO2011095079A1 (zh) 2010-02-08 2011-01-21 一种ip地址分配方法、装置及系统

Country Status (2)

Country Link
CN (1) CN101800783A (zh)
WO (1) WO2011095079A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115883515A (zh) * 2022-12-23 2023-03-31 广州市保伦电子有限公司 可分离会议终端ip配置方法、装置、计算机设备及介质

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101800783A (zh) * 2010-02-08 2010-08-11 深圳市同洲电子股份有限公司 一种ip地址分配方法、装置及系统
CN104301452B (zh) * 2014-10-21 2018-01-30 中国联合网络通信集团有限公司 一种区分主机访问位置的方法、系统及内层网关设备
CN104580516B (zh) * 2015-01-24 2018-10-30 陈为人 基于web网站家庭网关系统的内外网切换方法和装置
CN109120957A (zh) * 2017-06-23 2019-01-01 中兴通讯股份有限公司 一种机顶盒建立连接方法、装置及系统
CN111405075B (zh) * 2019-01-02 2023-03-28 中国移动通信有限公司研究院 一种网络地址分配方法、装置和存储介质

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1859407A (zh) * 2006-02-17 2006-11-08 华为技术有限公司 一种保障专线用户上网的方法
CN101159758A (zh) * 2007-10-30 2008-04-09 中兴通讯股份有限公司 一种分类关联的动态主机配置协议选项分配方法及装置
CN101800783A (zh) * 2010-02-08 2010-08-11 深圳市同洲电子股份有限公司 一种ip地址分配方法、装置及系统

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1859407A (zh) * 2006-02-17 2006-11-08 华为技术有限公司 一种保障专线用户上网的方法
CN101159758A (zh) * 2007-10-30 2008-04-09 中兴通讯股份有限公司 一种分类关联的动态主机配置协议选项分配方法及装置
CN101800783A (zh) * 2010-02-08 2010-08-11 深圳市同洲电子股份有限公司 一种ip地址分配方法、装置及系统

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
"Recommended Operation for Switches Running Relay Agent and Option 82 Version 1.0", ETHERNET/IP IMPLEMENTOR WORKSHOPS ODVA, 7 September 2004 (2004-09-07), Retrieved from the Internet <URL:http://www.odva.org/Portals/0/Library/Publications_Numbered/PUB0088R0_ODVA_DHCP_Option_82v2.pdf> *
"The DHCP Address Allocation Using Option 82", CISCO SYSTEMS, 2003, SAN JOSE, CA 95134-1706 USA, pages 8,20 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115883515A (zh) * 2022-12-23 2023-03-31 广州市保伦电子有限公司 可分离会议终端ip配置方法、装置、计算机设备及介质
CN115883515B (zh) * 2022-12-23 2023-09-08 广东保伦电子股份有限公司 可分离会议终端ip配置方法、装置、计算机设备及介质

Also Published As

Publication number Publication date
CN101800783A (zh) 2010-08-11

Similar Documents

Publication Publication Date Title
US9210124B2 (en) Method, apparatus, and system for allocating public IP address
WO2016179950A1 (zh) 互联网协议ip地址的分配方法及装置
US11343224B2 (en) Method for renewing IP address and apparatus
CN105245629B (zh) 基于dhcp的主机通信方法及装置
EP3119047A1 (en) Load balancing method, apparatus and system
WO2011095079A1 (zh) 一种ip地址分配方法、装置及系统
WO2013097067A1 (zh) 一种虚拟机迁移后实现通信的方法、设备和系统
CN102957759B (zh) 一种IPv6地址前缀的分配方法和系统
TW201244426A (en) Gateway and attack avoiding method thereof
US10104134B2 (en) Automatic configuration of endpoint communication devices to set up a VOIP network
WO2015196755A1 (zh) 一种身份位置分离网络中的地址分配方法及接入服务节点
CN102404293A (zh) 一种双栈用户管理方法及宽带接入服务器
US9697173B2 (en) DNS proxy service for multi-core platforms
WO2015184853A1 (zh) 一种IPv6无状态自动配置的认证方法及装置
CN106790734B (zh) 一种网络地址分配方法及装置
WO2014110984A1 (zh) 用户终端接入网络的认证方法及装置
WO2017124965A1 (zh) 多操作系统终端接入网络的方法及多操作系统终端
WO2009079895A1 (fr) Procédé permettant d&#39;attribuer une adresse ip secondaire sur la base d&#39;une authentification d&#39;accès dhcp
US20050238029A1 (en) Electronic apparatus having communication function and control method
CN103039059B (zh) Ip地址分配方法和系统以及设备
US20030147421A1 (en) Method and apparatus for dynamic host configuration protocol lease time determination
US20080259941A1 (en) System and apparatus for managing ip addresses
CN101997931A (zh) 位置信息获取方法和设备
CN115278373A (zh) 互联网电视组网方法及系统
WO2021190029A1 (zh) 实现运营商级网络地址转换的方法、装置和系统

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 11739358

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 30/11/2012)

122 Ep: pct application non-entry in european phase

Ref document number: 11739358

Country of ref document: EP

Kind code of ref document: A1