JP3261459B2 - Integrated information and communication system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to a personal computer, a LAN, and the like.
(Local Area Network), Telephone (including mobile phone), FA
X (Facsimile), CATV (Cable Television), the Internet and other information communication equipment or information communication systems as well as dedicated lines, ISDN (Integrated Services
gital Network), FR (Frame Relay), ATM (Asynchro
nous Transfer Mode), IPX (Integrated Packet Exch
ange), an integrated information communication system integratedly connected via satellite, wireless, and public lines. Here, the information communication device communicates with an address (for information communication) for identifying it from the others. The present invention is particularly applicable to connectionless networks (eg, RFC791 and RFC1883 IP (Intern
Integrate data transfer services based on the Internet Protocol (E. Protocol) and use a centralized addressing system to increase the overall economics of information and communication, and to ensure security and enable mutual communication between connected terminals or systems. To an integrated information communication system.

[0002]

2. Description of the Related Art With the development of computers and information and communication technologies, computer communication networks have recently become widespread within universities, research institutes, government agencies, or within or between companies. The LAN is used as a computer communication network in a company, and has a form as shown in FIG. 150 when the area is spread nationwide. FIG.
In the example of 50, LANs in each area use a common protocol and are connected by dedicated lines. Here, for example, company X has LAN-X1, LAN-X2, L
Company AN uses LAN-Y3 as LAN.
1. Using the LAN-Y2 and LAN-Y3, the companies X and Y perform computer communication using the communication address systems ADX and ADY, respectively. In such a LAN network, it is necessary to lay an individual dedicated line for each company, so that the system construction becomes expensive and the LAN of another company
When connecting to a network, it is necessary to match interfaces such as a communication address system, and there is a problem that interconnection is extremely difficult and a large cost is required.

On the other hand, in recent years, the Internet has become widespread as a computer communication network on a worldwide scale. In the Internet, TCP / IP (Transmission Co.) is used by connecting networks using a router of a provider.
The communication protocol called Internet Protocol (Internet Protocol) is used. A dedicated line or an FR network is used to connect a remote location. (F
iber Distributed Date Interface) is used as a communication path. FIG. 151 shows an example of a connection form of the Internet. In the Internet, routers in a provider exchange connections between routing tables while maintaining connection between them. Each router is connected to a plurality of networks, and next determines which router connected to which provider's network sends the received data based on the routing table. Thus, in the Internet, each IP
Destination IP attached to frame (IP datagram)
Look at the address, determine the next router to send to, and send it to that router. This operation is performed by all routers, so that IP frames are successively delivered and delivered to a target computer.

[0004] FIG. 152 is a block diagram of an I used for the Internet.
The information content of RFC791 of the P frame is shown, and is divided into a control unit and a data unit. FIG. 153 shows a similar R
It shows the information content of FC1883, which is divided into a control section and a data section, and in each case () shows the number of bits.

[0005]

However, since the Internet does not have a system for comprehensively managing communication paths, it is not possible to confirm whether or not a communication partner is an intended rightful person, and the communication information cannot be confirmed. In addition, there is a problem in terms of security such as a high risk of wiretapping, and the IP addresses inside a large number of LANs are actually determined by LAN users independently. In addition, it is necessary to replace the IP address of the LAN user with an IP address for the Internet.
The communication quality such as the communication speed and the communication error rate varies among the trunk lines constituting the Internet communication line for each LAN line, and is hardly unified. For example, a 10 Mbps TV signal is used for the communication of the TV conference. However, there is a problem that the communication speed is not achieved even if the user tries to send the message. Furthermore, there is no manager in charge of maintenance and management such as network failure countermeasures, and the entire network such as network future planning, and it is used for communications of companies and businesses of countries and research institutions where reliability is particularly important. However, there is a problem that the Internet cannot be used with security. In the LAN network and the Internet, the terminal is a personal computer (computer), and it has been difficult to integrate and use a telephone, a facsimile, a CATV, and the like.

SUMMARY OF THE INVENTION The present invention has been made in view of the above circumstances, and an object of the present invention is to increase the economics of constructing an information communication system without using a dedicated line or the Internet, and improve the communication speed and communication quality. An integrated information communication system capable of accommodating a plurality of VANs that perform data / information transfer using IP frames that secures security and reliability in communication by integrally assuring communication failure countermeasures and the like. To provide. Furthermore, a single information transfer that does not depend on the type of service such as voice, image (moving image, still image), text, etc., enables comprehensive communication services, analog and digital telephone line services, Internet provider services, fax services, and computer data exchange. An object of the present invention is to provide an integrated information communication system in which services that have been individually serviced, such as services and CATV services, are interconnected. Also, an integrated system capable of performing inter-company communication with little change in the computer communication address system conventionally used by individual companies (including universities, research institutes, government agencies, etc.) in each company. It is also an object to provide an information communication system. The IP terminal refers to a terminal or a computer having a function of transmitting and receiving an IP frame.

[0007]

SUMMARY OF THE INVENTION The present invention relates to an integrated information communication system, and an object of the present invention is to provide an access control device for individually connecting a plurality of external computer communication networks or information communication devices, and the access control device. This is achieved by providing a relay device for networking, having a function of transferring and routing information in a centralized address system, and enabling mutual communication between the plurality of computer communication networks or information communication devices. Is done. The present invention is equivalent to a computer communication network based on the IP technology in which the range of a dedicated line used for communication between companies and between companies shown in FIG. 150 shown as a conventional example is replaced by a common communication network shown by a broken line. I do.

An object of the present invention is to provide an ICS user frame having a unique ICS user address system ADX by using an address system A based on the management of a conversion table in an access control device.
DS is converted to an ICS network frame having DS, and at least one or more built-in VANs are transmitted in accordance with the rules of the address system ADS. This is achieved by converting the data into the ICS user address system ADX so as to reach another external information communication device. In addition, an ICS user frame having a unique ICS user address system ADX can be used for a user logical communication line without using an ICS user address in the ICS user frame based on management of a conversion table of an access control device. Incoming ICS registered in conversion table
The ICS network frame is converted to an ICS network frame corresponding to the network address, and the transfer destination of the ICS network frame is 1 or N, and the ICS network frame is accessed by another access via at least one VAN according to the rules of the ICS address system ADS. This is achieved by returning to the ICS user frame based on the management of the conversion table of the access control device when transferred to the control device, and reaching another external information communication device.

[0009]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS FIG. 1 schematically shows the basic principle of the present invention.
ted Information / Communication System (hereinafter abbreviated as “ICS”) 1 has an address assignment rule uniquely defined as computer information / communication address. That is, it has a unique address system ADS, and has a plurality of external computer communication networks and information communication devices such as a large number of LANs (in this example, LAN-X1 and LAN-X of company X in this example).
2, LAN-X3 and company Y's LAN-Y1, LAN-
Y2, LAN-Y3) as access points for connection (in this example, 2 to 7). The LAN-X1, LAN-X2, and LAN-X3 of the company X have the same address system ADX, and the LAN-Y1, LAN-Y2, and LAN-Y3 of the company Y have the same address system ADY. The access control devices 2, 3, and 4 have a conversion table for managing the mutual conversion between the address system ADS and the address system ADX, and the access control devices 5, 6, and 7 perform the conversion between the address system ADS and the address system ADY. It has a conversion table for managing mutual conversion. The computer communication data (ICS frame) in ICS1 is the address system ADS of ICS1.
Communication using an IP frame used in the Internet or the like is performed using an address in accordance with the above.

Here, a communication operation in the case of the same company will be described. The computer communication data (ICS frame) 80 transmitted from the LAN-X1 of the company X is given an address according to the address system ADX.
Under the management of the conversion table of the access control device 2 in the above, the address is converted into an address according to the address system ADS to become the ICS frame 81. Then, the data is transmitted in the ICS 1 according to the rules of the address system ADS, and when it reaches the target access control device 4, it is restored to the computer communication data 80 of the address system ADX under the management of the conversion table, and the same company X Sent to LAN-X3. Here, the ICS frame transmitted and received inside the ICS1 is referred to as “I
An ICS frame transmitted and received outside the ICS1 is called an “ICS user frame”.
That. The format of the ICS user frame is, in principle, the format specified by RFC791 or RFC1883 used in the Internet or the like.

The ICS network frame 81 includes a network control unit 81-1 and a network data unit 81.
The address (address system ADS) of each ICS logic terminal inside the access control devices 2 and 4 is stored in the network control unit 81-1.
The ICS user frame 80 is used as the network data section 81-2 as it is, or the data format is converted into a network data section 81-2 according to a rule defined inside the ICS 1. The conversion rules for the data format include, for example, conversion into cipher text and data compression. The access control device 2 uses the encryption means and the cipher text as the original plain text (I
(CS user frame) and a compressed data decompressor for restoring the data after data compression. In the access control device 2,
The ICS user frame 80 is an ICS network frame 81-2, and the network control unit 81-1 is an ICS network frame 81-2.
The operation added to the network frame 81-2 is referred to as "IC
In the access control device 4, the operation of removing the network control unit 81-1 from the ICS network frame 81 is referred to as “ICS decapsulation”.
Call.

The case of inter-company communication will be described in the same manner.
The computer communication data (ICS user frame) 82 transmitted from the LAN-Y2 of the company Y has an address system A
Although an address according to DY is given, the address is converted into an address according to the address system ADS under the management of the conversion table of the access control device 6 in the ICS 1 to form an ICS frame 83. Then, the data is transmitted in the ICS 1 according to the rules of the address system ADS, and when it reaches the target access control device 3, it is converted into the computer communication data 82 of the address system ADX under the management of the conversion table.
It is transmitted to LAN-X2 of company X. Although the present invention uses 32 bits and 128 bits as the address length, it is not restricted to these lengths. Even if the address length is changed to other than 32 bits or 128 bits, the essence of the address conversion, which is the basic concept of the present invention, does not change.

As described above, according to the present invention, intra-company and inter-company computer communication is enabled by the centralized address management of the ICS 1. A user terminal for computer communication, which is generally used, is accommodated in a LAN of a user's premises and is connected to a VAN (Value Added Network) via an access line.
k), and a user frame having a different data format and address system for each service type is transferred. For example, an Internet service uses an IP address, a telephone service uses a telephone number / ISDN number (E.164 address), X.25 packet service X.25 121 addresses are used. On the other hand, in the ICS 1 of the present invention, address conversion (referred to as ICS address conversion) is performed on the conversion table of the access control device based on the input ICS user frame, and data having various structures is unified into a single unified data. The transfer of information is realized by converting the data into a frame of a data format and an address system, that is, an ICS frame.

FIG. 2 shows that the ICS 1 of the present invention is connected to a plurality of VANs.
(VAN-1, VAN-2, VAN-3) is schematically shown, each VAN is managed by a VAN operator, and a user of ICS1 applies for a user communication line to the VAN operator. And the VAN operator performs the user's IC
An S user address, an ICS network address, and the like are determined, and the information is registered in a conversion table 12 in the access control device 10 as shown in FIG. I
CS1 has access control devices 10-1, 10-2, 10-3, 10-4, and 10-5 as access points of external connection elements with LANs of companies X and Y (or terminals thereof). Further, the relay devices 20-1, 20-2, 20-3, 20-4 and the ICS network servers 40-1, 40-2,
40-3, 40-4, and 40-5, and ICS address management servers 50-1 and 50-2. Each VAN
A relay device 20 as shown in FIG. 4 is provided in the internal communication path, and an inter-VAN gateway 30 as shown in FIG. 5 is provided as a connection element of VAN-2 and VAN-3. The LAN 1-1, 1-2, 1-3, 1-4 shown in FIG. 2 are access control devices 10-1, 10-5, respectively.
10-4, 10-2 are connected via user communication lines 36-1, 36-2, 36-3, 36-4.

The access control device 10 (10-1, 10-
2, 10-3, 10-4, 10-5) are devices for accommodating a user communication line from a user (company X, Y) to the ICS 1, and as shown in FIG. 11, a conversion table 12 as a database for performing address conversion and the like, a line unit 13 of the input / output interface,
And a temporary conversion table 14. Also, the relay device 20
Has a transfer function of an ICS network frame and a routing function of specifying a route, has a processing unit 21 including a CPU and the like and a relay table 22 as shown in FIG.
2 is used to determine a communication destination when an ICS network frame is transferred inside ICS1. VA
As shown in FIG. 5, the N-to-N gateway 30 has a processing device 31 composed of a CPU or the like and a relay table 32 for determining the destination of the ICS network frame between the VANs.

The ICS network server 40 comprises a processing device 41 and an ICS network database 42 as shown in FIG. 6, and the ICS network database 42 has various uses. For example, user-specific data (user name and address, etc.) corresponding to the ICS user address, data not corresponding to the ICS user address, for example, data representing a communication failure situation inside the VAN, or data not directly related to the VAN, for example, Digital library that holds and publishes digital documents, data retention such as public key of public encryption method using encryption technology used to authenticate the validity of sender and receiver, public key certification data or secret key of secret key method Used for The processing device 41 refers to the ICS network database 42, acquires corresponding data, and transmits the data to the access control device 10. ICS network database 4
2 operates independently and communicates with other ICS network servers by transmitting and receiving ICS network frames based on IP communication technology, and can acquire data from other ICS network servers. The ICS network server is provided with a unique ICS network address within the ICS.

In the present invention, an address for identifying a computer or terminal used in an ICS network frame is called an “ICS network address”, and an address for identifying a computer or terminal used in an ICS user frame is referred to as an “ICS user”. Address. " ICS
The network address is used only inside the ICS and 3
One or both of a 2-bit length and a 128-bit length are used. Similarly, the ICS user address uses one or both of the 32-bit length and the 128-bit length. An ICS network address is assigned to each of the ICS logical terminal, the relay device 20, the inter-VAN gateway 30, and the ICS network server inside the access control device 10 so as to be uniquely identified from the others. Also, IC
The S user address is composed of a VAN upper code and a VAN internal code. When the length of the VAN upper code is represented by C1 bits and the length of the VAN internal code is represented by C2 bits, C1 + C2 represents either 32 bits or 128 bits. Used.

In the present invention, the specific method of determining the VAN upper code and the VAN internal code is not specified.
In the case of 1 + C2 = 32 bits, for example, VAN upper code = area management code (4 bits) ‖country code (4 bits) ‖VAN code (8 bits) VAN internal code = VAN area code (4 bits) ‖V
AN access point code (8 bits) ‖user logical code (4 bits) may be determined. FIG. 7 illustrates an example of the ICS user address. Here, the symbol "a @ b" represents a concatenation of data a and b, that is, data obtained by arranging data a and b in this order. ICS network address
As in the case of the user network address, it can be given including the regionality. For example, ICS network address = region management code / country code / VAN code / VAN region code / user logical communication line code. By doing so, the destination is determined in consideration of the area, so that the relay device can efficiently find the destination. The same applies to the case of C1 + C2 = 128 bits.

In the present invention, C1 + C2 = 32 bits or C1 + C2 = 1 regardless of the method of partitioning the internal fields of the VAN upper code and the VAN internal code and the length of each partition field.
As long as 28 bits are protected, ICS
A frame can be configured. Further, when determining the VAN upper-level code and the VAN internal code, some of these codes may be determined unique to the user. That is, the user can have a user-specific addressing scheme. 32 While the address values of the bit representation is from address 0 to ^{(2 32} -1) address, in this address, for example, from 10 × ^{2 24} address ^{(10 × 2 24 +2 24 -1} ) address, or (17
2 × 2 ²⁴ + 16 × 2 ¹⁶ ) to (172 × 2 ²⁴⁾
+ 32 × 2 ¹⁶ -1) or (192 × 2 ¹⁶ -1)
²⁴ + 168 × 2 ¹⁶ ) to (192 × 2 ²⁴ +1)
In the section up to the address of 69 × 2 ¹⁶ -1), the present invention is implemented by assigning an address determined uniquely to the user.

A physical communication line can be logically divided into a plurality of communication lines for use.
For example, it is realized by a multiplex communication system of a frame relay (FR). In the present invention, a user's communication line is divided into a user physical communication line and one or more user logical communication lines. FIG. 8 shows this state, and is 100 Mbps.
An example is shown in which a user physical communication line 60 having a communication speed of s is divided into two user logical communication lines 61-1 and 61-2 having a communication speed of 50 Mbps. Also, separate computer communication devices 62-1, 62-2, 62-3, 62
-4 is connected to each user logical communication line, and IC
S user address “4123, 0025, 0026, 4
Reference numeral 124 "denotes each of the computer communication devices 62-1 to 62-4.
The example given to is shown. The user physical communication line 60 is connected to the access control device 63, and the connection point between them is "I
CS logic terminal ”. The ICS logic terminal includes IC
A unique ICS network address is assigned inside S. In the example of FIG. 8, the user logical communication lines 61-1 and 61-2 are connected to the access control device 63, and the connection point I
ICS is applied to each of CS logic terminals 64-1 and 64-2.
Network addresses “8710” and “8711” are assigned.

As described above, since the ICS network server 40 is also given a unique ICS network address,
The ICS network address is the ICS logic terminal or I
The CS network server can be specified as the only one in the ICS. The ICS network server can exchange information with another ICS network server by transmitting and receiving, using the IP communication technology, an ICS network frame to which each ICS network address is assigned. This communication function is called “ICS network server communication function”. The access control device also has a unique ICS network address inside the ICS, and can exchange information with the ICS network server using another ICS network server communication function as the access control device server. The ICS network server communication function is realized by using, for example, conventional TCP and UDP (User Datagram Protocol).

As described above, the ICS frame of the present invention includes an ICS network frame transmitted / received inside the ICS and an ICS user frame transmitted / received outside the ICS. As shown in FIG. 9, the network control unit, the network data unit, the user control unit, and the user data unit are used in ICS encapsulation or ICS decapsulation. That is, when the ICS user frame enters the ICS from the access control device, the ICS user frame becomes a data part of the ICS network frame, and a control unit (network control unit) of the ICS network frame is added (ICS encapsulation).
The inside of the network control unit is divided into a basic unit and an extension unit. The basic part is, for example, RFC791 or RFC183
3 is used for a prescribed header, and the extension part is used for encryption and the like. If encryption or the like is not required at all, the extension unit is not used and need not be present.

An area for storing a source address and a destination address is provided in the network control unit of the ICS frame. The format of the ICS frame has an address length of 32.
When the address length is 32 bits, for example, the RFC shown in FIG.
The frame format according to the standard of No. 791 is adopted. If the ICS network address is insufficient with 32 bits, for example, if 64 bits are used, the insufficient 32 bits (64 bits-32 bits) are written in the option part of the ICS network frame control unit in accordance with the rules of RFC791, and the Use with a length of 64 bits. Here, the above-mentioned address specific to the user is supplemented. Many users, for example, (10 ×
Considering the case where a private address (one of ICS user addresses) is provided in a section from address 2 ²⁴ ) to address (10 × 2 ²⁴ +2 ²⁴ −1), the ICS network address corresponds to the ICS user address. Since the length of the ICS user address is 32 bits, the length of the ICS network address is insufficient with 32 bits, and requires, for example, 64 bits. In this case, as described above, the insufficient 32 bits are written in the option section of the ICS network frame control section, and the length of the network address is used as 64 bits.

The fact that communication between the same users (referred to as intra-company communication) is possible using the private address will be described in the first embodiment. If the address length is 12
In the case of 8 bits, for example, RFC188 shown in FIG.
The present invention is carried out by adopting the frame format defined by the above-mentioned rule. The addresses stored in the source address area and the destination address area in the network control unit are ICS network addresses, which are the originating ICS network address and the destination ICS network address, respectively. Further, the source address area in the user control unit and the address stored in the destination address area are ICS user addresses,
These are the sender ICS user address and the receiver ICS user address, respectively.

When implementing the present invention, the format of the ICS frame does not necessarily have to comply with the rules of RFC791 and RFC1883.
Any frame format using any of the 28 bits can be used. In general, ICS receives an ICS user frame specified by RFC791 or RFC1883 of a communication protocol from a user. Other frame formats are converted into an ICS user frame format by a conversion unit (conversion unit). It can be handled in the network.

Embodiment 1 (Basic of ICS, intra-enterprise communication and inter-enterprise communication): First Embodiment
An embodiment will be described for basic communication for determining a transfer destination in the ICS from a recipient ICS user address based on the management of a conversion table. In the figure, reference numerals 170-1, 170-2, 170-3, and 170-4 denote gateways provided inside the LANs 100-1, 100-2, 100-3, and 100-4, respectively. 170-1 to 170-4.

First, it is connected to the LAN 100-1 of the company X having the unique address system ADX, and the address system A
A terminal having an address according to DX and an LA of the same company X
Communication with a terminal connected to N100-2 and having an address according to the address system ADX will be described. That is, the ICS user address “00” on the LAN 100-1
12 "and a terminal having an ICS user address" 0034 "on the LAN 100-2. This communication is based on an address system unique to the same company (ADX in this example). The terminal to which the address is set is a typical communication mutually performed via the ICS 100. This is called an intra-company communication service (or an intra-company communication). A terminal having an address according to the address system ADX and a company Y
Communication with a terminal that is connected to the LAN 100-3 and has an address according to the address system ADY will be described. That is, the terminal having the ICS user address “0012” on the LAN 100-1 and the I
This is communication with a terminal having a CS user address “1156”. This communication is a typical terminal intercommunication performed by terminals having different address systems between different companies using an ICS address system that can be used in common with each other. Call.

<< Common Preparation >> In describing this example,
The address format and the like are determined as follows, but the specific numerical values and formats shown here are merely examples, and the present invention is not limited thereto. The ICS network address is represented by a four-digit number, and both the sender ICS user address and the receiver ICS user address are represented by a four-digit number. Then, of the sender ICS user address and the receiver ICS user address, an address whose upper two digits are not “00” is defined as an inter-company communication address.
It is the only value inside CS100. Top 2 of sender ICS user address and receiver ICS user address
The address having the digit “00” is used as the intra-company communication address. However, the intra-company communication address may overlap with the intra-company communication address of another company within the ICS 100. Further, the conversion table 113 provided in the access control device 110-1.
-1 is the source ICS network address, the destination ICS
Network address, sender ICS user address,
It contains the recipient ICS user address, request identification, speed category, etc. The request identification registered in the conversion table 113-1 is
For example, the intra-company communication service is represented by “1”, the inter-company communication service is represented by “2”, and the virtual leased line connection described in other embodiments is represented by “3”. The speed category is a line speed required for communication from the ICS network address,
It includes the throughput (for example, the number of ICS frames transferred within a certain time).

<< Preparation for Intra-Company Communication >> LAN 100
-1 and the user of the LAN 100-2 specify the terminal to the VAN operator so that the intra-company communication between the terminals connected to each LAN can communicate via the VAN-1 and VAN-3. Make an application. Then, in response to the application, the VAN operator accesses the access control devices 110-1 and 110-1 connected to the LANs 100-1 and 100-2.
In the conversion table of −5, the above-mentioned ICS network address,
While setting the ICS user address, request identification, etc.,
The data is also written and stored in the ICS address management server 150-1.

The setting items for VAN-1 are as follows. The ICS network address is determined from the ICS logical terminal of the access control device 110-1 to which the LAN 100-1 is connected.
The S network address is “7711”. The intra-company communication address of one terminal connected to the LAN 100-1 to which the application was made is "0012"
S user address. The inter-company communication address used by the terminal having this address is "2212", and this is the sender ICS user address. Then, the access control device 1 connected to the LAN 100-2 to which the application was made
The ICS network address is determined from the ICS logical terminal 10-5. Here, the ICS network address is set to “9922” and this is set as the incoming ICS network address. Further, the ICS user address of one terminal connected to the LAN 100-2 is set to “0034”, which is set as the receiver ICS user address. The value “1” indicating the company communication service for which the application has been made is set as the request identification, and the above is registered in the conversion table 113-1.

The setting items related to VAN-3 are as follows. The value required for the reverse communication (communication from the LAN 100-2 to the LAN 100-1) is set in the conversion table of the access control device 110-5 that connects the LAN 100-2 to which the application has been made. In other words, the reverse data is set for the originating ICS network address and the destination ICS network address, and at the same time, the reverse data is set for the sender ICS user address and the receiver ICS user address. It is assumed that the ICS network address of the LAN 100-2 is “9922” and is the originating ICS network address. In-house ICS of terminal connected to LAN 100-2
The user address “0034” is set as the sender ICS user address, and the ICS user address “0012” of the communication destination terminal is set as the receiver ICS user address. Further, the ICS network address “7711” of the LAN 100-1 is set as the destination ICS network address, the value of the request identification indicating the intra-company communication service is set to “1”, and this is set as the request identification. Access control device 1
Write and register in the conversion table of 10-5.

<< Internal Communication Operation >> The terminal having the ICS user address “0012” is assigned to the ICS user frame P1.
Is sent. The sender ICS user address “0012” is set in the ICS user frame P1, and the receiver I
“0034” is set in the CS user address.

Next, a description will be given with reference to the flowchart of FIG.

The ICS user frame P1 is transferred to the access control device 110-1 via the user logical communication line 180-1. The access control device 110-1 is an LA
N100-1 originating ICS network address “77
11 "(steps S100 and S101) and the received I
CS user frame receiver ICS user address “0”
034 ", the conversion table 113-1 is referred to, and from the request identification value" 1 ", it is known that this communication is an intra-company communication (step S102), which corresponds to the receiver ICS user address" 0034 ". An incoming ICS network address “9922” is obtained (step S103), and then I
CS encapsulation is performed (step S106). The above procedure is shown in the flowchart of FIG. 12, and the intra-company communication is the flow (1) therein. In addition, sender I
The CS user address may be used, for example, to identify the source of the ICS frame.

The access control device 110-1 forms an ICS network frame P2 by ICS encapsulation and transmits the frame to the relay device 120-1. Since the uniqueness of the ICS network address of the network control unit is guaranteed inside the ICS, it does not collide with other ICS frames. The ICS network frame P2 passes through the relay devices 120-1 and 120-2 based on the destination ICS network address, and reaches the access control device 110-5 of the VAN-3. Access control device 110-
5 removes the network controller from the ICS network frame P4 and decapsulates the ICS, reproduces the same ICS user frame P5 as the ICS user frame P1 from the network data part of the ICS frame, and executes LAN encapsulation.
Transfer to 100-2. ICS user frame is LAN
100-2 is routed and transferred to the terminal having the ICS user address “0034”.

<< Preparation for Inter-company Communication >> As an example of the inter-company communication service, the LAN 1 conforming to the address system ADX is used.
ICS user address “001” connected to 00-1
2 "terminal and LAN1 according to address system ADY
ICS user address “115” connected to 00-3
Communication with a terminal having 6 "will be described.
-1 and the user of the LAN 100-3 designate a terminal to each connected VAN so that communication can be performed via the VAN-1 and VAN-2, and apply to the VAN operator. The VAN operator requests the LAN 10
The necessary items are set in the conversion table of the access control device connected to the access control device 0-1 and the LAN 100-3.

The setting items for VAN-1 are as follows. The ICS network address of the LAN 100-1 is set to “7711”, and the LAN 1
The intra-company communication address of one terminal connected to 00-1 is "0012", and this is the sender ICS user address. The inter-company communication address assigned to the terminal of this ICS user address is “2212”, and this is the sender ICS user address (between companies). The ICS of the access control device 110-4 connected to the ICS network address of the LAN 100-3 to which the application was made
The ICS network address is determined from the logical terminal. Here, “8822” is used as the incoming ICS network address. The ICS user address of one terminal connected to the LAN 100-3 is set to "1156".
And this is set as the recipient ICS user address. Further, the value “2” indicating the inter-enterprise communication service for which the application has been made is set as the request identification, and the above is registered in the conversion table 113-1.

The setting items relating to VAN-2 are as follows. As a conversion table of the access control device 110-4 to which the LAN 100-3 is connected, a temporary conversion table 114- which holds data in the opposite direction for a certain period, for example, 24 hours.
Set 2. That is, regarding the ICS network address “8822” to which the LAN 100-3 using the communication service between companies is connected, the originating ICS network address, the sender ICS user address, the recipient ICS user address, the terminating ICS network address, the request identification, etc. Is provided in the access control device 110-4. However, the temporary conversion table 114
The timing of setting -2 will be described later. In the above other embodiment, the temporary conversion table 114-2 is not set.

<< Operation of Intercompany Communication >> An ICS user frame having an ICS user address “0012” set to “0012” for the sender ICS user address and “1156” for the receiver ICS user address Send F1. The ICS user frame F1 is transferred to the access control device 110-1 via the user logical communication line 180-1.

The access control device 110-1 is connected to the LAN1
The outgoing ICS network address of “00-1” “771”
1 "(steps S100, S101) and the recipient ICS
Using the user address "1156" and the conversion table 113-
1 to determine that the request identification is "2", that is, the inter-company communication service (step S102). Next, the incoming call I corresponding to the receiver ICS user address "1156"
It knows that the CS network address is "8822" (step S104) and replaces the sender ICS user address "0012" with the inter-company communication address "221".
(Step S105) The access control device 110-1 transmits the originating ICS network address "7".
711 ”, the sender ICS user address“ 2212 ”,
Recipient ICS user address "1156", incoming ICS
A network control unit is added as a network address “8822” to perform ICS encapsulation, and the ICS is transmitted to the relay device 120-1 as an ICS network frame F2 (step S106). The above procedure corresponds to the flow (2) in the flowchart of FIG.

In the above-mentioned inter-company communication, if the sender ICS user address in the ICS user frame F1 is set to the inter-company communication address "2212", the sender and the receiver communicate with each other using the inter-company communication address. Is performed (steps S102 and S104). In this case, the access control device 110-1 transmits the sender ICS user address “22”.
12 "to the inter-company communication address" 2212 "is not required because it becomes unnecessary.
(3) in the flowchart of FIG. The sender IC
The S user address may be used, for example, to specify the source of the ICS frame.

The relay device 120-1 converts the ICS network frame based on the incoming ICS network address into the relay device 120-2 in the VAN-1, the gateway 130 between VANs, and the relay device 120-3 in the VAN-2.
Through the access control device 110-4 in the VAN-2. Next, a description will be given with reference to the flowchart of FIG. The access control device 110-4 receives the ICS network frame (step S110), creates an ICS user frame F5 from the network data part (step S111: ICS decapsulation),
The ICS logical terminal to be transmitted is determined from the S network address ((1) in step S112).
-3 (step S113). Calling IC at the same time
S network address “8822” and sender ICS
The relationship between the user address “1156”, the receiver ICS user address “2212”, and the terminating ICS network address “7711” is determined by the access control device 110-4.
If they are not registered in the conversion table inside the
The kind address is set to "2" of the request identification, that is, the designation of the inter-company communication in the temporary conversion table 114-2 (step S).
112 (2)). The setting content of the temporary conversion table 114-2 is updated by performing processing such as deleting it when there is no usage for 24 hours, for example. ICS user frame is LAN1
The packet is routed through 00-3 and transferred to the terminal having the ICS user address "1156". Conversion table 114-
2 is a conversion table 113.
In the case of being divided into "intra-company" and "between companies" as in -1, for example, the sender ICS user address (intra-company)
Is "0023" and the value of the sender ICS user address (between companies) is "1159", the destination address of the user control unit of the ICS user frame immediately after the ICS decapsulation is performed. Of the ICS user frame whose address value is “1159” written in the column of “1159”, the process of rewriting the destination address value of the user control unit of this ICS user frame to “0023” is performed in the above-described step S112 (1). ). To summarize the effects of the above processing, the ICS user address “0023” for intra-company communication is used inside the LAN.
However, for other companies outside the LAN, it can be claimed that the ICS user address for inter-company communication is "1159". In the other embodiment described above, the temporary table 11
Do not set to 4-2. In the above-mentioned other embodiment, the conversion table 113-1 contains the sender ICS user address (in the company)
And does not include the sender ICS user address (between companies)
Further, the flowchart (2) of FIG.
105 is not included. In step S104, the sender ICS user address is not referred. An advantage of this embodiment is that when there are many sender ICS user addresses for one receiver ICS user address, the number of registrations in the conversion table can be reduced to only one receiver ICS user address.

Embodiment 2 (Virtual Private Line): The operation of the virtual private line connection according to the present invention will be described with reference to FIG.
Here, the virtual leased line connection is independent of the ICS user address in the user control unit of the ICS user frame.
Incoming ICS registered with ICS user frame in conversion table
This is communication that is fixedly transferred to a network address,
It takes the form of one-to-one or one-to-N. The components in FIG. 14 are almost the same as those in FIGS. 10 and 11 of the first embodiment, and the difference is the registered contents of the conversion table. In the conversion table of the access control device, the incoming ICS network address is fixedly determined from the outgoing ICS network address, so the sender ICS user address (within a company), the sender ICS user address (between companies), and the recipient ICS user The address is not registered or is ignored even if it is registered.

Company X utilizes the virtual leased line connection, and the company X's LAN connected to access control device 210-1.
A case in which communication is performed between the LAN 200-2 of the company X connected to the access control device 210-5 will be described.

<< Preparation >> The user applies for a virtual private line connection to the VAN operator. The VAN operator uses the L of company X
Access control device 210-1 for connecting AN 200-1
An ICS network address “7711” of an ICS logical terminal at a connection point between the user logical communication line 240-1 and the access control device 210-5 for connecting the LAN 200-2 of the company X, and the user logical communication line 240 ICS network address “9922” of the ICS logical terminal at the connection point with the 2-2. Next, the VAN operator stores the outgoing ICS network address “7711” and the incoming ICS in the conversion table 213-1 of the access control device 210-1.
The network address “9922” and the request type are set. FIG. 14 shows an example in which the request type “3” is a virtual private line connection. Similarly, the access control device 21
In the conversion table of 0-5, the transmission ICS network address “9922” and the reception ICS network address “77”
11 "and the information of the request type are set.

<< Procedure >> A description will be given with reference to the flowchart of FIG.

Company X LAN 200-1 is ICS200
To the ICS through the user logical communication line 240-1
The user frame F10 is transmitted. Access control device 2
10-1 is the ICS network address “7711”
ICS user frame F10 is received from the ICS logic terminal (steps S200 and S201), and the conversion table 213 is input.
Reference is made to the request identification value “3” of the outgoing ICS network address “7711” of “−1” to recognize that it is a virtual leased line connection (step S202), and the incoming ICS network address “9922” is read (step S20).
3). Next, the access control device 210-1 adds a network control unit in which the incoming ICS network address is set to "9922" and the outgoing ICS network address is set to "7711" to the ICS user frame F10 to create the ICS network frame F11. (Step S204: ICS encapsulation), the relay device 2
The data is transmitted to 20-1 (step S205). IC
The relay device 22 that has received the S network frame F11
0-1 is the incoming I of the ICS network frame F11
The destination is determined based on the CS network address, and the ICS network frame F is sent to the relay device 220-2.
12 is sent out. ICS network frame F12
Is transferred to the access control device 210-5 via the relay device 220-4 in the VAN-3.

The access control device 210-5 removes the network control unit from the ICS network frame F13 (ICS decapsulation) and stores the ICS user frame F14 in the ICS network address “992”.
2 "ICS logic terminal to user logic communication line 240-
Send to 2. The LAN 200-2 of the company X is I
The CS user frame F14 is received. In the same manner as described above, data can be transmitted from the LAN 200-2 to the LAN 200-1, so that mutual communication is possible. In the above description, since it is clear that the sender and the receiver need not be the same company X, the LAN 200-1 of the other company Y and the LAN 200-
For example, the ICS user frame can be forwarded to the third frame.

In the above description, one-to-one communication has been described as an example, but one-to-N communication is also possible. For example, FIG.
The conversion table 213-1 of the access control device 210-1 of
As indicated by “7712” of the originating ICS network address, a plurality of destination ICS network addresses may be set. In this example, two ICS network addresses “6611” and “8822” are set. Upon receiving the ICS user frame from the ICS logical terminal with the ICS network address of “7712”, the access control device 210-1 adds the first ICS network frame to which the network control unit in which the incoming ICS network address is set to “6611” is added. Then, a second ICS network frame to which a network control unit in which the incoming ICS network address is set to "8822" is created and transmitted to the relay device 220-1. As a result, one-to-two communication can be performed. Further, one-to-N communication is possible by transferring individual ICS network frames in the same manner as described above.

Embodiment-3 (ICS Network Server): As shown in FIG. 16, the ICS network server 330 is composed of a processing device 331 and an ICS network database 332, and the data held by the ICS network database 332 is a question item, Type,
It consists of the answer content and the network address of another ICS network server. The ICS network server 330 analyzes the data portion of the ICS frame received from the access control device 310-1, refers to the ICS network database 332 based on the data, and obtains the answer content corresponding to the question item (type “ 1 "), the obtained response is stored in the access control device 310-
Send to 1. Further, when the ICS network database 332 does not hold the answer content corresponding to the question item (type “2”), the ICS network server communication function is used to enter the question item based on the ICS network address of another ICS network server. The corresponding answer is asked to another ICS network server and obtained, and the answer to the obtained question is transmitted to the access control device 310-1.

More specifically, as a preparation matter, the conversion table 3
13-1, the ICS user address “2000” of the ICS network server 330 and the ICS network address “77”
21 and the request identification “4.” Here, the request identification “4” has a common number (ICS special number) with other users such as the ICS user address “2000” such as a Japanese telephone number “119”. Number). next,
In the ICS network database 332, write that the type for the question Q1 is "1" and the answer is "A1", the type for the question Q2 is "2", the answer is blank, and the other ICs are blank.
The ICS network address “88” of the S network server 340
44 "is written.

Next, the ICS user address "0012"
Transmits an ICS user frame F20 (including the question Q1) directed to the ICS user address “2000” of the ICS network database 332, and the access control device 310-1 transmits the ICS logical terminal of the line unit 311-1 from the ICS logical terminal of the line unit 311-1. The ICS user frame F20 is received, the ICS network address “7711” is obtained, and then the conversion table 31
Referring to 3-1, an ICS network frame in which ICS frame F20 is encapsulated in ICS is sent to ICS network server 320. As shown in the flowchart of FIG. 17, the ICS network database 332 stores the ICS frame F20.
(Steps S300, S301), and finds the answer A1 corresponding to the question Q1 included in the access control device 310-.
1 and the answer A1 is returned. The access control device 310-1 is:
I including the answer A1 in the ICS user address “0012”
Transmit the CS frame.

When the user of the ICS user address “0012” is connected to the IC
The access control device 310-1 transmits the S frame F21 (including the question Q2), and refers to the conversion table 313-1 to
When the ICS network address “7721” is obtained, I
An ICS frame obtained by encapsulating the CS frame F21 in the ICS is transmitted. The ICS network database 332 recognizes the type “2” corresponding to the question Q2 of the ICS frame F21 (Step S300), and
Knowing that it does not hold the answer (A2), it uses the ICS network communication function based on the ICS network address “8844” of the other ICS network server 340 to perform ICS network communication.
Information is exchanged with the network server 340 (step S302), and an answer “A2” corresponding to the question Q2 is obtained (step S3).
03), and returns the answer A2 to the access control device 310-1. The access control device 310-1 transmits an ICS frame including the answer A2 to the ICS user address “0012”.

Embodiment-3A (when the ICS network server is connected to the relay device): As shown in FIG.
The network server 330 is connected to the access control device 310-1, but is not connected to the relay device 320-1. On the other hand, in the present embodiment, as shown in FIG.
The S network servers 340A-1 and 340A-2 are connected to the access control devices 310A-1 and 310A-2, respectively, while the ICS network server 340A-3 is connected to the relay device 320.
A-1. Also, any ICS network server 3
40A-1, 340A-2 and 340A-3 are also ICS3
00A has a unique ICS network address inside. The ICS network server 340A-3 communicates with the ICS network servers 340A-1 and 340A-2 connected to the access control device inside the same VAN-300A1 using the ICS network communication function, and only these ICS network servers are used. Can collect and hold the unique information held by. Such an ICS network server is called VAN-300A1
Is referred to as an ICS network server. As a result, the ICS network server 340A-1 communicates with the ICS network server 340A-3 representing the VAN-300A1, and obtains the unique information of the ICS network server 340A-2 connected to another access control device. can do. Also, VAN
-ICS network server 340A-3 representing 300A1
And the ICS network server 340A-6 representing another VAN-300A2 can communicate with each other using the ICS network communication function, and can exchange unique information held by each. still,
The ICS network server connected to the access control device has a VA
The information held by all the ICS network servers inside N may be collected and used as the ICS network server representing the VAN.

Embodiment-4 (ICS Address Management Server): As shown in FIG. 19, the ICS address management server 430 is connected to the access control device 410-1 via the ICS network communication line 460.
IC with ICS logic terminal on the line section 411-1 of 0-1
It holds a correspondence table 432 between the S network address and the corresponding ICS user address. For example, IC
S user addresses “2013”, “2014”, “12”
ICS network addresses “7711”, “7711”, “771” corresponding to “34” and “4500”, respectively.
2 ”and“ 7713. ”At the same time, all information described in the conversion table and address-related information such as a record regarding VAN operation may be included. It holds the ICS network address of the ICS address management server and the ICS network addresses of a plurality of ICS name servers.
Further, the ICS address management server communicates with the ICS name server described in the later-described embodiment-5 using the ICS network server communication function, and can obtain the ICS name corresponding to the ICS user address.

Processing unit 4 of access control unit 410-1
12-1 communicates with the ICS address management server 430 using the ICS network server communication function, and presents the value of the ICS network address and tells the corresponding ICS user address, or presents the value of the ICS user address. The corresponding ICS network address. This will be described with reference to the flowchart of FIG. The ICS address management server 430 checks whether the ICS network address or the ICS user address queried from the access control device server 410-1 is registered in the correspondence table 432 held by the ICS address management server 430 (step S400), and includes it in the correspondence table. If it is included, it answers (step S401), and if it is not included, it communicates with another ICS address management server 440 using the ICS network server communication function to acquire the ICS user address or ICS network address (step S402). ), And returns the result to the access control apparatus 410-1 of the question source (step S403). With such a configuration, the access control device 410-1 requests the ICS address management server 430 to request the ICS network address or I
From one of the CS user addresses, the other address can be obtained.

Embodiment-4A (when the ICS address management server is connected to the relay device): As shown in FIG. 19, the ICS address management server 430 is connected to the access control device 410-1. Apparatus 420-1
Not connected to. On the other hand, in the present embodiment, FIG.
ICS address management server 450B-3
Is connected to the relay device 420B-1, and the ICS address management server 450B-3 is the only I
Has a CS network address. The ICS address management server 450B-3 uses the ICS network server communication function to connect to the access control device inside the same VAN-400B1.
-1 and 450B-2 to collect and store ICS network addresses, ICS user addresses, and ICS address related information held by these ICS address management servers. Such an ICS address management server is provided by an ICS representing the VAN-400B1.
It is called an address management server. As a result, the ICS address management server 450B-1 communicates with the ICS address management server 450B-3 representing the VAN-400B1,
ICS address-related information possessed by the ICS address management server 450B-2 can be obtained. Also, VA
ICS address management server 4 representing N-400B1
IC representing 50B-3 and other VAN-400B2
The S address management server 450B-6 communicates with the ICS network server communication function, and can exchange ICS address related information held by each. The ICS address management server connected to the access control device may collect information held by all ICS address management servers inside the VAN, and may be used as the ICS address management server representing the VAN.

Embodiment-5 (ICS name server): IC
The S user address is, for example, a 32-bit binary number or 1
This embodiment has a drawback that it is difficult to remember because it is represented by a 28-bit binary number. Instead, this embodiment-5 uses a method that uses an "ICS name" that is easy for a person to remember. In addition, instead of “ICS name”, “ICS domain name”
The term is also used. In this case, the ICS name server is used instead of the ICS name server.

First, the ICS name will be described. 2
As shown in FIG. 7, the ICS address expressed in base numbers is, for example, a regional management code, a country code, a VAN code,
It is represented by a region code, a VAN access point code, and a user logic code. By arranging these numerical codes,
For example, regional management code‖country code‖VAN code‖VA
It is represented by N area code {VAN access point code} user logic code. The ICS name is, for example, an area management code that can be represented by a binary value as described above.
S (element of ICS name meaning Asia), JP (Japan), VAN # 1 (identifies one of VAN), DIS # 1
(Identifies one of the VAN area codes constituting VAN # 1), ACS # 1 (VAN limited by DIS # 1)
One of the access point codes), USR # 1
(Identifies one of the user logic codes). The elements of the ICS name determined above are reversed,
The points are arranged with a dot “.” Between them, that is,
1. DIS # 1. VAN # 1. JP. AS "is defined as the ICS name. In the case described above, the ICS name is divided into, for example, USR # 1 into USR # 10 and COMP # 10, and ACS # 1 into ACS # 11 and ACS # 12. As “USR # 10. COMP # 10. AC
S # 11. ACS # 12. DIS # 1. VAN # 1. J
P. AS ", for example.

An ICS name server, which is a type of ICS network server, will be described. As shown in FIG. 22, the ICS name server 550 includes a processing device 551 and an ICS name conversion table 552. The ICS name conversion table 552 includes, for example, an ICS name and a type (IC corresponding to the ICS name).
S user address) and an ICS user address. The type “2” indicates that the ICS network database 332 does not hold the ICS network address corresponding to the ICS name, and thus obtains the ICS network address corresponding to the ICS name from another ICS name server. Here, for example, IC
S name "USR # 2.ACS # 2.DIS # 2.VA"
N # 2. JP. The other ICS name server that manages the “AS” is “USR # 2. “DIS #” excluding “ACS # 2”
2. VAN # 2. JP. AS ". IC
The S name server 550 analyzes the ICS frame data portion received from the access control device 510-1, refers to the ICS name conversion table 552 based on this, acquires the ICS user address corresponding to the ICS name, and 510-1. Further, based on the ICS user dress, the corresponding ICS name is answered. IC
If the corresponding ICS user address does not exist in the S name conversion table 552, a request is made to another ICS name server holding the ICS user address being queried using the ICS network server communication function, and from there. The obtained ICS user address is transmitted to the access control device 510-1.

Sender IC connected to LAN 500-1
The terminal having the S user address “0012” is connected to the ICS name 1 “USR # 1.ACS # 1.DIS # 1.VAN #”.
1. JP. A method of obtaining an ICS user address corresponding to AS ”will be described. Here, the access control device 510 is described.
The case where -1 acquires data from the ICS name server 550 and the case where it acquires data from another ICS name server 560 will be described.

First, as a preparation matter, the access control device 5
The ICS name server 5 is added to the conversion table 513-1 of 10-1.
I corresponding to 50 ICS user addresses "1000"
The CS network address “7741” and the request identification “4” are registered. Here, the request type “4” is ICS
The user address “1000” is the telephone number “119”
ICS special number common to other users as shown in FIG. The ICS name conversion table 552 of the ICS name server 550 includes the ICS name “USR # 1.ACS # 1.D.
IS # 1. VAN # 1. JP. As a result, the receiver ICS user address “2014” corresponding to “AS” is registered, and the terminal user of the sender ICS user address “0012” of the LAN 500-1 accesses the access control device 510.
-1, the ICS user frame F40 is transmitted to the ICS name # 1 "USR # 1.ACS # 1.DIS # 1.VA".
N # 1. JP. AS "to the ICS user address. The processing unit 512-1 in the access control device 510-1 receives the ICS user frame F40 from the ICS logical terminal of the line unit 511-1 and receives the ICS.
Acquires the network address “7711” and then IC
The conversion table 513-1 is referred to based on the recipient ICS user address of the S user frame F40, and when the corresponding request identification is "4" (connect to the ICS name server of the ICS special number), the information obtained by the above operation is obtained. The ICS user frame F40 is encapsulated in the ICS using the ICS network address "7711", and the IC is sent to the ICS name server 550.
Send an ICS network frame containing the S name.

As shown in the flowchart of FIG.
The CS name server 550 analyzes the ICS name in the ICS frame received from the address control device 510-1 in the processing device 551, and refers to the ICS name conversion table 552 based on the ICS name (step S500). And
The ICS user address corresponding to the ICS name is ICS
If it exists in the name conversion table 552, it is obtained,
The ICS network frame F45 including the ICS user address “2014” is transmitted to the access control device 510-
1 (step S501). In addition, I
When the CS name does not exist in the ICS name conversion table 552, for example, the processing device 512-1 receives the ICS user frame F41, and the ICS name # 2 (that is, USR # 2.AC) described in the ICS user frame F41.
S # 2. DIS # 2. VAN # 2. JP. AS) but I
If not described in the CS name conversion table 552, IC
The S name server 550 stores the ICS name (DIS # 2.V
AN # 2. JP. AS), an ICS network address of another ICS name server is obtained from the ICS name conversion table 552, and the ICS name server 560 and the ICS name server
By exchanging information using the network server communication function, an ICS user address “1130” corresponding to the ICS name inquired is obtained (step S502), and the obtained result is transmitted to the access control device 510-1 (step S502). Step S503).

The access control device 510-1 exchanges information with the ICS address management server 570 based on the recipient ICS user address described in the ICS network frame F45 received from the ICS name server 550, and converts the information into the ICS user address. The corresponding ICS network address and the address-related information included in the correspondence table are obtained, and the data including the obtained ICS user address, ICS network address, and address-related information is written into the conversion table 513-1. Access control device 510-1
Converts the ICS user address “2014” (or “1130”) obtained from the ICS name server 550 into the LAN 5
Sent to the terminal user with the sender ICS user address “0012” of 00-1. Here, the ICS user address “0012” is written in the ICS network frame F45. The terminal user of the sender ICS user address “0012” of the LAN 500-1 receives the receiver ICS user address “2” obtained from the access control device 510-1.
014 "(or" 1130 ").

Embodiment-5A (when the ICS name server is connected to the relay device): In FIG. 22, the ICS name server 550 is connected to the access control device 510-1. Not connected.
In contrast, in the present embodiment, as shown in FIG. 24, the ICS name server 550C-3 is connected to the relay device 520C-1, and the ICS name server 550C-3 is connected to the ICS 500.
C has a unique ICS network address inside. The ICS name server 550C-3 uses the ICS network server communication function to connect to the access control devices 510C-1 and 510-C2 inside the same VAN-500C1.
2 can collect and hold unique information held only by these ICS name servers. Such an ICS name server is called an ICS name server representing VAN-500C1. As a result, the ICS name server 550C-1 can communicate with the ICS name server 550C-3 representing the VAN-500C1, and can acquire the unique information of the ICS name server 550C-2. Also, an IC representing VAN-500C1
S name server 550C-3 and other VAN-500C
And ICS name server 550C-6 representing IC
Communication can be performed using the S network server communication function, and unique information held by each can be exchanged. The ICS name server connected to the access control device stores all I
The information held by the CS name server is collected and VAN
May be used as the ICS name server representing the.

Embodiment-6 (ICS name server): In the embodiment-5 and -5A, the access control device 510-
1 writes the obtained data such as the ICS user address and the ICS network address into the conversion table 513-1.
These data obtained instead are converted to a temporary conversion table 514-1.
Write to In this case, the address data written in the temporary conversion table is deleted after 24 hours, for example.

Embodiment-7 (ICS name server): In Embodiments -5 and -5A, the access control device 510-
1 does not call the address management server 570, and
CS user address "2014" (or "1130")
Is provided only to the terminal having the ICS user address “0012”.

Embodiment -8 (charging server): The charging system includes a “network charging system” for counting and charging ICS user frames transmitted and received during communication, and information in the transmitted and received ICS user frames. And an “information charging method” in which charging is performed by counting an ICS user frame transmitted and received, and a period in which registration of an ICS user address or the like in a conversion table of an access control device is continued without charging the ICS user frame.
For example, there are three schemes, namely, a "fixed-rate billing scheme" in which a fixed fee is set for each month. Here, in the information billing method,
It counts and charges the user control unit of the ICS user frame by designating an identifier indicating information charging. In both the network charging method and the information charging method, the case where the caller bears the communication is referred to as “outgoing charging”, and the case where the receiver bears the charge is referred to as “incoming charge”. The network charging method and the information charging method are collectively referred to as a “metered charging method”.

<< Configuration >> A billing system in the ICS network of the present invention will be described with reference to FIGS. 25 and 26.

The setting information of the charging system is stored in the conversion table 813-1 and the charging server 840 in the access control device 810-1.
Is stored in the flat-rate charge definition table 843, and the conversion table 813
For -1, the setting value of whether to perform network charging or information charging, and whether to use the metered charging method (separating outgoing charging and incoming charging) or the flat-rate charging method (separating outgoing charging and incoming charging) Is set. Hereinafter, description will be made with reference to the flowchart of FIG. The access control device 810-1 is provided for the ICS user frame F50.
Is received (step S800), the type of accounting method for each ICS frame stored in the conversion table 813-1 is read based on the ICS user address included in the ICS user frame to check the accounting conditions (step S80).
1) If the read type indicates the pay-as-you-go billing method, billing information is generated, and the billing information is stored in the billing information frame F51.
Is transferred to the charging server 840, which is one of the ICS network servers (step S810), and only when the read content is a value indicating the flat-rate charging method, generation of charging information and transmission of the charging information to the charging information frame F51 are performed. As billing server 8
40 is not transferred (step S820).

The accounting server 840 receives the accounting information frame F51 sent from each access control device, and stores the accounting information included in the accounting information frame. The billing server 840 includes a billing processor 841 and a billing information database 842. The billing processor 841 includes a billing information frame F5 sent from the access controller 810-1.
1 is received, the accounting information contained in the accounting information frame F51 is analyzed and stored in the accounting information database 842. The charging information database 842 uses the ICS network address and the ICS user address as identifiers,
Store billing information as a database. In the case of the pay-as-you-go billing method, the billing information database 842 stores information by a count indicating the pay-as-you-go rate, and an upper limit value can be set for the count. Notifies the access control device 810-1 that the count has exceeded the upper limit, and stops the communication of the user in the access control device 810-1 that has received the notification.
The billing server 840 can pass the stored billing information to another VAN or user using the ICS network server communication function.

(1) Example of communication of pay-as-you-go billing method of outgoing billing by network billing: Company X and company Y
A case where communication between companies is performed using S800 will be described. In this case, LAN800-1 and LAN800-
The charging method in the communication 3 is a case where the network charging is a pay-per-use method, all charges are borne by the LAN 800-1, and information charging is not performed.

<< Preparations for Communication >> LAN 80
0-1 and LAN 800-3 are connected to respective access control devices 810-1 and 810-4.

<< Preparation for Charging >> LA for Communication
Conversion table 8 for charging conditions of N800-1 and LAN800-3
13-1. As the registration in the conversion table 813-1, charging conditions are set based on the originating ICS network address, the sender ICS user address, the terminating ICS network address, and the recipient ICS user address. "1" is set as a value for outgoing billing for network billing in a metered billing system. Also, “1” is set as the charging unit price. Since information billing is not performed, conversion table 8
As the charging condition in the information charging condition of 13-1, "0" indicating non-charging is set. The conversion table for the access control device 810-4 accommodating the LAN 800-3 includes the access control device 81 because the charge is for the LAN 800-1.
In order to prevent 0-4 from performing the charging process, "0" indicating the flat-rate charging method is set.

<< Explanation of Charging Operation >> The ICS user frame F50 transmitted from the terminal having the ICS network address “0012” connected to the LAN 800-1 is processed by the processing device 812-1 in the access control device 810-1 ( (Steps S800 and S801), and specifies a charging condition field from the sender ICS user address and the receiver ICS user address in the ICS user frame (step S8).
10), refer to charging conditions to specify a charging method for network charging from the field. As the set value in this case, “1”, which is the setting for outgoing billing in the metered billing system, is set, the billing unit is referred to (step S811), and billing information is generated (for example, billing unit price “1”). Is generated as one-time charge information) (step S8).
12), the accounting information is transferred to the accounting server 840 as the accounting information frame F51 (step S813). In the accounting processing device 841 of the accounting server 840, according to the accounting information in the accounting information frame F51 received from the access control device 810-1, the accounting information database 8
The network charging counter of 42 is added (step S814). If the conditions for charging are not any of the charging examples described later, the charging described here is performed.

(2) Example of communication of fixed-rate billing system for outgoing billing by network billing: Company X uses ICS800 of the present invention
A case in which communication within the company X is performed by using the communication will be described. In this case, the charging method in the communication between the LAN 800-1 and the LAN 800-2 is a case where the network charging is a fixed-rate charging method, all charges are borne by the LAN 800-1, and information charging is not performed.

<< Preparations for Communication >> LAN80
0-1 and the LAN 800-2 are connected to the respective access control devices 810-1 and 810-5.

<< Preparation for Charging >> LA for Communication
The accounting conditions for N800-1 and LAN 800-2 are registered in conversion table 813-1. The registration in the conversion table 813-1 includes the originating ICS network address, the sender ICS
Charging conditions are set based on the user address, the incoming ICS network address, and the recipient ICS user address. “0” is set as a value for the network charging to be the flat-rate charging method, and “1” indicating calling charging is set to the charging burden in the flat-rate charging definition table 843 to indicate the charging burden. Since no billing for information is performed, the conversion table 813-
In the charging condition of the information charging condition of 1, "0" indicating non-charging is set. In the conversion table for the access control device 810-5 accommodating the LAN 800-2, "0" indicating the flat-rate charging method is set.

<< Explanation of Charging Operation >> The ICS user frame transmitted by the terminal having the ICS network address “0012” connected to the LAN 800-1 is processed by the processing device 812-1 in the access control device 810-1 (step S8
00, S801), the sender I in the ICS user frame
A charging condition field is specified from the CS user address and the receiver ICS user address (step S81).
0), refer to charging conditions to specify a charging method for network charging from the field. Since the set value in this case is “0” indicating the flat-rate billing method,
No accounting process such as generation of accounting information is performed (step S8).
20). The charge processing is performed in the flat-rate charge definition table 84.
3 is performed. That is, since “0” indicating the outgoing billing is set in the flat-rate fee definition table 843, the fee is charged to the LAN 800-1.

(3) Example of communication based on pay-as-you-go billing system with network billing and incoming billing: A case where company X and company Y perform communication between companies will be described. In this case, LAN800
The charging method in the communication between the LAN-1 and the LAN 800-3 is a case where the network charging is a pay-as-you-go method, all charges are borne by the LAN 800-3, and no information charging is performed.

<< Preparations for Communication >> LAN80
0-1 and LAN 800-3 are connected to respective access control devices 810-1 and 810-4.

<< Preparation for Charging >> LA for Communication
The accounting conditions for N800-1 and LAN 800-3 are registered in conversion table 813-1. The registration in the conversion table 813-1 includes the originating ICS network address, the sender ICS
Charging conditions are set based on the user address, the incoming ICS network address, and the recipient ICS user address. "2" is set as the value for terminating the network charging in the pay-as-you-go charging method, and "1" is set as the charging unit price. Since the information billing is not performed, the billing condition in the information billing condition of the conversion table 813-1 indicates “0” indicating no billing.
Set. The conversion table for the access control device 810-4 accommodating the LAN 800-3 includes a charge for the LAN 80-3.
Since it is 0-3, “2” is set as a value for network billing to be called party billing in the metered billing system.

<< Explanation of Accounting >> The ICS user frame transmitted by the terminal having the ICS network address “0012” connected to the LAN 800-1 is processed by the processing device 812-1 in the access control device 810-1 (step S8
00, S801), the sender I in the ICS user frame
A charging condition field is specified from the CS user address and the receiver ICS user address (step S81).
0), refer to charging conditions to specify a charging method for network charging from the field. Since the set value in this case is “2” indicating incoming billing in the metered billing method, the billing process is interrupted in the access control device 810-1 in which the LAN 800-1 is accommodated (step S820). The access control device 810-4, in which the LAN 800-3 is accommodated, refers to the conversion table when receiving the ICS frame. In this case, since “2” is set for the network charging to be the incoming charging in the pay-as-you-go charging method, charging information is generated (for example, charging unit price “1” is generated as two-time charging information), and charging is performed. The information is transmitted to the accounting server 840 as an information frame. Billing server 8
The access control device 810-
In accordance with the billing information of the billing information frame received from 4, the network billing counter of LAN 800-3 of billing information database 842 is added.

(4) Example of communication of fixed-rate billing system for incoming billing by network billing: A case in which company X performs communication within company X will be described. In this case, the charging method in the communication between the LAN 800-1 and the LAN 800-2 is such that the network charging is a flat-rate charging method, and all charges are
This is a case where the charge is placed on 800-2 and information billing is not performed.

<< Preparations for Communication >> LAN 80
0-1 and the LAN 800-2 are connected to the respective access control devices 810-1 and 810-5.

<< Preparation for Charging >> LA for Communication
The accounting conditions for N800-1 and LAN 800-2 are registered in conversion table 813-1. The registration in the conversion table 813-1 includes the originating ICS network address, the sender ICS
Charging conditions are set based on the user address, the incoming ICS network address, and the recipient ICS user address. The network billing is set to “0” as a value indicating the flat-rate billing method, and “2” of the incoming billing is set to the fee burden in the flat-rate fee definition table 843 to indicate the billing burden. Since charging for information is not performed, the charging condition in the information charging condition of the conversion table 813-1 is "0" indicating non-charging.
Set. In the conversion table for the access control device 810-5 accommodating the LAN 800-2, "0" indicating the flat-rate charging method is set.

<< Explanation of Charging Operation >> The ICS user frame transmitted by the terminal having the ICS network address “0012” connected to the LAN 800-1 is processed by the processing device 812-1 in the access control device 810-1 (step S8
00, S801), the sender I in the ICS user frame
A charging condition field is specified from the CS user address and the receiver ICS user address (step S81).
0), refer to charging conditions to specify a charging method for network charging from the field. In this case, since "0" indicating the flat-rate billing method is set, billing processing such as billing information generation is not performed (step S).
820). The charge processing is the flat rate charge definition table 8
43. That is, the flat-rate charge definition table 843
Is set to "2", which indicates an incoming charge, so the fee is charged to the LAN 800-2.

(5) Communication example of pay-as-you-go billing method for information billing and outgoing billing: A case where company X communicates with company Y will be described. The accounting method in the communication between the LAN 800-1 and the LAN 800-3 is a case where information accounting is performed without charging the network. The charge is for the case where the sender is the LAN 800-1.

<< Preparations for Communication >> LAN80
0-1 and LAN 800-3 are connected to respective access control devices 810-1 and 810-4.

<< Preparation for Charging >> For the charging condition in the network charging condition, "0" indicating non-charging is set in the conversion table 813-1. Because we don't charge you,
No billing unit is set. As information billing conditions, “3” indicating caller billing is set by pay-as-you-go billing, and the billing unit price is set to “2”.

<< Explanation of Charging Operation >> The ICS user frame transmitted by the terminal having the ICS network address “0012” connected to the LAN 800-1 is processed by the processing device 812-1 in the access control device 810-1 (step S8
00, S801), the sender I in the ICS user frame
A charging condition field is specified from the CS user address and the receiver ICS user address (step S81).
0). In order to specify a charging condition for network communication from the field, the charging condition is referred to. In this case, since "0" indicating non-charging is set, the charging process for the network is not performed (step S82).
0). Next, in order to specify a charging condition relating to information charging, the charging condition of the information charging condition is referred to. in this case,
Since "1" indicating the pay-as-you-go billing of the sender is set, the pay-as-you-go billing is performed. In addition, a charging unit price indicating the weighting of the metered charging is referred to. In this case, the set value of the charging unit price is “2”. Next, billing information for each ICS user frame is generated based on the obtained information (for example, a billing unit price “2” is generated as two billing information).
Then, the accounting information is transferred to the accounting server 840 as an accounting information frame F51. The billing processing device 841 in the billing server 840 that has received the billing information sends the ICS network address and the sender I from the billing information frame F51.
The information storage field of the charging information database 842 is specified based on the CS user address, the receiving ICS network address, and the recipient ICS user address, and the network charging counter there is added according to the charging information of the charging information frame F51.

(6) Communication example of pay-as-you-go billing system of information billing and incoming billing: A case where company X communicates with company Y will be described. The billing method in the communication between the LAN 800-1 and the LAN 800-3 indicates a case where information billing is performed without network billing. The charge burden is L
This is the case of AN800-3.

<< Preparations for Communication >> LAN80
0-1 and LAN 800-3 are connected to respective access control devices 810-1 and 810-4.

<< Preparation for Charging >> For the charging condition in the network charging condition, "0" indicating non-charging is set in the conversion table 813-1. Because we don't charge you,
No charge unit price is set. As information billing conditions, "2" indicating payee billing by pay-as-you-go billing is set, and the billing unit price is set to "2".

<< Explanation of Charging Operation >> The ICS user frame transmitted by the terminal having the ICS network address “0012” connected to the LAN 800-1 is processed by the processing device 812-1 in the access control device 810-1 (step S8
00, S801), the sender I in the ICS user frame
A charging condition field is specified from the CS user address and the receiver ICS user address (step S81).
0). In order to specify a charging condition for network communication from the field, the charging condition is referred to. In this case, since "0" indicating non-charging is set, the charging process for the network is not performed (step S82).
0). Next, a billing condition of the information billing condition is referred to in order to specify a billing condition relating to the information billing. In this case, since "2" indicating the pay-per-use charge of the called party is set, the metered billing is performed. . In addition, reference is made to a charging unit price indicating the weight of the pay-as-you-go charging. In this case, “2” is set. Next, based on the obtained information, I
Billing information for each CS user frame is generated (for example, a billing unit price “2” is generated as two billing information), and the billing information is stored as a billing information frame F51 in the billing server 84.
Transfer to 0. The billing processing device 841 in the billing server 840 that has received the billing information sends the calling ICS network address, the sender ICS user address, the called ICS network address, and the receiver I from the billing information frame F51.
Charging information database 842 based on CS user address
Is specified, and a network charging counter there is added according to the charging information of the charging information frame.

(7) An example in which a charge condition is not registered in a conversion table in advance in a pay-as-you-go communication method of information charge and outgoing charge: A case where a company X communicates with a company Y will be described. The billing conditions for the communication between the LAN 800-1 and the LAN 800-4 are the same as described above, but in this case, the value defining the billing condition is a conversion table 813- of the access control 810-1 to which the LAN 800-1 is connected. The difference is that they are not registered in 1.

<< Preparations for Communication >> LAN80
0-1 and the LAN 800-4 are connected to the respective access control devices 810-1 and 810-2.

<< Preparation for performing charging >> In this case, since there is no registration of the charging condition in the conversion table 813-1, the LAN 8
There is no need for advance preparation in the access control device 810-1 that accommodates 00-1. The conversion table of the access control device 810-2 accommodating the LAN 800-4 includes LAN80
Set the billing conditions when 0-4 is received. As the charging condition in the network charging condition, “0” indicating non-charging is set in the conversion table. Because we don't charge you,
The billing unit price is not set. The information billing condition is set to "3" indicating caller billing by pay-as-you-go billing, and the billing unit price is set to "1".

<< Explanation of Charging Operation >> The ICS user frame transmitted by the terminal having the ICS network address “0012” connected to the LAN 800-1 is processed by the processing device 812-1 in the access control device 810-1 (step S8
00), an attempt is made to specify a charging condition field using the sender ICS user address and the receiver ICS user address in the ICS user frame from the conversion table 813-1 (step S801). Since there is no field indicating the condition, an inquiry is made to the access control device 810-4 accommodating the called user based on the called party's ICS user address of the called user (step S802). Access control device 810-4
The access control device 8
With reference to the conversion table in 10-4, the accounting condition is returned to the access control device 810-1. Access control device 81
The billing condition acquired by 0-1 from the access control device 810-4 is registered in the temporary conversion table 814-1 (step S803). After that, the processing device 812-1 refers to the charging condition in order to specify the charging condition for the network communication from the charging condition (step S810).
In this case, since "0" indicating that the network charging is non-charging is set, the charging processing for the network is not performed (step S820).

Next, in order to specify a charging condition relating to information charging, the charging condition of the information charging condition is referred to. In this case, since "1" indicating the pay-as-you-go billing of the sender is set, the pay-as-you-go billing is performed. In addition, a reference is made to the charging unit price indicating the weighting of the pay-as-you-go charging. Based on the obtained information, billing information for each ICS user frame is generated (for example, the billing unit price “1” is changed to 1).
The accounting information is generated as accounting information of the frequency), and the accounting information is transferred to the accounting server 840 as an accounting information frame F51.
The billing processing device 841 in the billing server 840 that has received the billing information specifies the information storage field of the billing information database 842 from the billing information frame F51 based on the originating ICS network address and the receiver ICS user address, and charges the information there. Set the counter to the charging information frame F
51 is added according to the accounting information.

Embodiment 9 (ICS Frame Database Server): FIGS. 28 and 29 show ICS frame database servers 950 and 9 which are one of ICS network servers.
60 is an example of the ICS 900 including the ICS frame database servers 950 and 960. The ICS frame database servers 950 and 960 store data based on a request timing of a terminal using the ICS 900 (hereinafter, referred to as an “ICS using terminal”) or retrieve stored data. To the requester. The ICS frame database servers 950 and 960 respectively include the processing devices 951 and 961, the storage information management tables 952 and 962,
BOX 953 and 963. Processing unit 9
51 and 961 receive the ICS user frame from the ICS using terminal, refer to the use request of the ICS frame database server explicitly indicated by the ICS using terminal, and
An instruction to store the S user frame is issued to the storage information management tables 952 and 962, and an instruction to store information is sent to the boxes 953 and 963. The storage information management tables 952 and 962 receive the instructions of the processing devices 951 and 961, and
The items to be managed, such as the communication partner address and the index number of the stored information, are stored for each CS using terminal. BOX95
3 and 963 receive an instruction from the processing devices 951 and 961, and store a management number, user information, and the like of information stored for each ICS using terminal to be accommodated. Hereinafter, preparation items for using the ICS frame database servers 950 and 960 and communication examples thereof will be described. << Preparations >> The VAN-1 operator is the LAN 90 of company X.
001 of the ICS user address connected to 0-1
In order to enable information storage of a terminal having "2", information on the user (such as the ICS user address "0012" in this example) is registered in the storage information management table 952 and the BOX 953. In addition, the VAN-3 operator also registers the information. Similarly, in order to enable information storage of the terminal having the ICS user address “0034” connected to the LAN 900-2 of the company X, information on the user (ICS in this example) is stored in the storage information management table 962 and the BOX 963 in advance. User address “00”
34 "). The ICS user enters an ICS user frame F60 as shown in FIG.
Send to The ICS user frame F60 includes, in the user control unit, a use request identifier (an identifier explicitly indicating that the ICS frame database server is used) and an information operation identifier (in the ICS frame database server, (An identifier that explicitly indicates the operation of the stored information). In this embodiment, the user implements the user's ICS frame database server use request by adding the use request identifier and the information operation identifier to the user control unit of the ICS user frame F60.
A use request identifier and an information operation identifier can be added to the user data portion.

<< Communication Example >> (1) Communication Example-1 (Operation of ICS Frame Database Server on Sending Side): A terminal having an ICS user address “0012” connected to the company 900's LAN 900-1
The communication using the ICS frame database server is performed to the terminal having the ICS user address “0034” connected to the LAN 900-2 of the company X. FIG. 31 is a flowchart showing the operation.

The originator terminal is a user control unit that uses a ICS frame database server 950 and has a use request identifier (calling side storage user management number: a code arbitrarily assigned by a user using the ICS. ICS user frame F6 to which an index number for operating the existing information is added and an information operation identifier (scheduled transfer time, information storage, information transfer, information deletion, information end, etc.) are added.
0 is sent to the ICS 900. The received access control device 910-1 (step S900) receives the processing device 912
The use request identifier of the ICS user frame F60 is referred to by -1 (step S901). The processing device 951 that has received the ICS user frame F60 refers to the use request identifier and the information operation identifier (step S91).
0), perform the operation indicated by the information operation identifier.

When the information storage is indicated, the processing unit 95
1 receives the use request identifier (calling side storage user management number) and information operation identifier (information storage) of the ICS user frame F60 sent from the caller terminal, and corresponds to the sender ICS user address of the frame. Then, the receiver ICS user address and the use request identifier are stored in the storage information management table 952, and the ICS user frame is stored in the BOX 953 (step S911). The ICS user frame to be stored depends on a plurality of I
This operation is performed until the last frame of the ICS user frame to be stored is indicated by the information operation identifier (end of information) indicated in the ICS user frame F60 because the operation is divided into CS user frames and transmitted (step S).
912).

If the scheduled transfer time is indicated (step S 913), the processing device 951 transmits the use request identifier (calling side stored user management number) and the information operation identifier of the ICS user frame F 60 transmitted from the caller terminal. (Scheduled transfer time), the designated time is stored in the storage information management table 952 (step S914), and the processing device 951 constantly monitors the scheduled transfer time to determine that the time has come. Transfers the information stored from the BOX 953 to the recipient terminal (step S
915).

When the information transfer is indicated, the processing unit 95
1 receives the use request identifier (calling side stored user management number) and information operation identifier (transfer request) of the ICS user frame F60 sent from the caller terminal,
The information (ICS user frame) stored in the BOX 953 is transmitted to the receiver terminal (step S916).
When the information erasure is indicated, the processing device 951
ICS user frame F60 sent from the sender terminal
Receiving the use request identifier and the information operation identifier (information deletion) of the storage information management table 952 and the BOX
953 to delete the stored information (step S
917).

(2) Communication example-2 (operation of ICS frame database server on receiving side): LAN 900 of company X
The terminal having the ICS user address “0034” connected to the LAN-2 is connected to the LAN 900-1 of the company X.
The information from the terminal having the CS user address “0012” is received using the user BOX. FIG. 32 is a flowchart showing the operation.

[0108] The sender terminal sends a message to the user control unit to the receiver I
A use request identifier using the CS frame database server 960 (called-side storage user management number: a code arbitrarily assigned by the user using the ICS, which is an index number when the ICS user operates the stored information. ) And an ICS user frame F60 to which an information operation identifier is added
To the ICS 900. The corresponding ICS user frame F60 is transferred through the ICS 900 to the access control device 910-5 accommodating the receiver terminal (step S60).
920), the processing device 912-5 refers to the use request identifier of the ICS user frame F60 (step S92).
1) If the number of the use request identifier set by the sender terminal exists, the ICS user frame F60 is transferred to the processing device 961.

The processing device 961 that has received the ICS user frame F60 receives the information operation identifier (information storage, information transfer, information deletion, information end) of the ICS user frame F60.
Is checked (step S930). If the information is stored, the sender ICS user address of the corresponding frame and the receiver ICS
The use request identifier is stored in the storage information management table 962 in association with the user address, and the ICS user frame is stored in the BOX.
963 (step S931). I to be stored
Since the CS user frame is transmitted after being divided into a plurality of ICS user frames from the sender, this operation is performed by the information operation identifier (information end) indicated in the ICS user frame F60.
Is executed until the last frame of the ICS user frame to be stored is indicated (step S932). The processing device 962 attaches the receiving side stored user management number to the ICS frame database server 960 at the timing agreed with the receiver terminal in advance (for example, at 12:00), indicating that the information addressed to the receiver terminal exists in the ICS frame database server 960. Is notified (step S933). Upon receiving the notification, the receiver terminal transmits the ICS user frame F60 in which the use request identifier and the information operation identifier (information transfer) are set, to the access control device 91.
0-5 to the ICS frame database server 9
60 transmits the user information stored in the BOX 963 to the receiver terminal (step S936), and the receiver terminal
The information (ICS user frame) stored in the CS frame database server 960 is received. The processing device 961 receives an ICS user frame F60 from the receiver terminal.
When a frame indicating the use request identifier and the information operation identifier (information deletion) is received, the information is deleted from the storage information management table 962 and the BOX 963 (step S93).
7).

(3) Communication example-3 (when the receiving side cannot temporarily receive): A terminal having the ICS user address “0012” connected to the company X LAN 900-1 is connected to the company X LAN 900-2. When communication with the terminal having the ICS user address “0034” is performed, the information addressed to the receiver terminal is stored in the ICS frame database even if the connection to the receiver terminal or the LAN 900-2 of the company X cannot be temporarily established. The information is temporarily stored in the server 960, and communication is performed in a state where connection is possible. The operation is shown in FIG.
This will be described with reference to the flowchart of FIG.

The sender terminal stores the information in the ICS frame database server 960 once, even if communication with the receiver terminal is not possible, in the user control unit, so that the information operation identifier for executing the distribution of the information (stored once) I)
The CS user frame F60 is sent to the ICS 900.
The corresponding ICS user frame F60 is transmitted to the access control device 910-5 accommodating the receiver terminal by the ICS900.
The access control device 910-5 receives the ICS user frame F60 (step S940), and the processing device 912-5 checks the presence of the use request identifier inside the ICS user frame F60 (step S941).
With reference to the information operation identifier (stored once) of the CS user frame F60 (step S942), if there is a request for storage once, it is determined whether the receiving terminal is in a communicable state,
If possible, the corresponding ICS user frame F60 is transmitted to the receiving terminal (step S950). If not possible, the corresponding ICS user frame F60 is transferred to the processing device 961 of the ICS frame database server 960.
Next, the processing device 961 sends the corresponding ICS user frame F
The sender ICS address, the receiver ICS address, and the use request identifier of the 60 are stored in the storage information management table 962, and
The CS user frame is stored in the BOX 963 (step S951).

Since the ICS user frame to be stored is divided into a plurality of ICS user frames and transmitted from the sender, this operation is to be stored according to the information operation identifier (information end) indicated in the ICS user frame F60. IC
The processing is executed until the last frame of the S user frame is indicated (step S952). The processing device 912-5 constantly monitors the communication state with the receiver terminal, and when the receiver terminal becomes able to receive, notifies the processing device 961 that the corresponding receiver communication state is possible. Processing unit 96 that has been notified
1 notifies the receiver terminal that there is information addressed to the receiver terminal to the ICS frame database server 960 at a timing agreed with the receiver terminal in advance (for example, after 5 minutes) (step S953). Upon receiving the notification, the receiver terminal transmits an ICS user frame F60 in which a use request identifier (ICS storage user management number) and an information operation identifier (information transfer) are set to the access control device 910-5,
The ICS frame database server 960 has a BOX 9
The user information stored in 63 is transmitted to the receiver terminal (step S956), and the receiver terminal receives the information stored from the ICS frame database server 960.

The processing device 961 sends an ICS from the receiver terminal.
When a frame indicating the use request identifier and the information operation identifier (information deletion) of the user frame F60 is received, the information is deleted from the stored information management table 962 and the BOX 963 (step S957).

Example-10 (X.25, FR, ATM,
Transmission by satellite communication and telephone line, ISDN line, CATV
Line, satellite line, accommodating IPX frame): I of the present invention
The format of data from the user in CS is RFC79
It is not limited to the ICS user frame conforming to RFC 1883 or RFC1883, but can accommodate telephone lines, ISDN lines, CATV lines, satellite lines, and IPX. Further, the relay network of the ICS network frame in the ICS network is also X. 25, FR, ATM, satellite communication, etc. In the present invention, the AT
The M exchange includes a cell relay exchange, and the ATM network includes a cell relay network.

FIGS. 34 to 37 show the ICS1000 of the present invention.
Figure 3 shows an example of interface conversion in
Access control devices 1010-1 and 1010-2, IC
S frame interface network 1050; 25 nets 10
40, FR network 1041, ATM network 1042, satellite communication network 1043, X. 25 / ICS network frame converters 1031-1 and 1031-2, FR / ICS network frame converters 1032-1 and 1032-2,
ATM / ICS network frame converter 1033-
1 and 1033-2, satellite / ICS network frame converters 1034-1 and 1034-2, telephone line converters 1030-1 and 1030-2, ISDN line converters 1029-1 and 1029-1, CATV line converter 1
028-1 and 1028-2, satellite link converter 1027
-1 and 27-2, IPX conversion units 1026-1 and 10-2
26-2.

ICS frame interface network 1050
Is an IC that conforms to RFC791 or RFC1883
This is a relay network that transfers S network frames in the same format. X. 25 network 1040 is X.25. 25 is a relay network for transferring frames in the format of X.25. X.25 for converting and inverse converting to a frame of the 25 format. 25 / ICS network frame converter 10
31-1 and 1031-2 are provided in the input / output unit. F
The R network 1041 is a relay network for transferring a frame relay format frame, and is an F network for converting and inversely converting an ICS network frame into a frame relay format frame.
R / ICS network frame conversion units 1032-1 and 1032-2 are provided in the input / output unit. ATM network 10
Reference numeral 42 denotes a relay network for transferring an ATM frame.
The input / output unit has ATM / ICS network frame conversion units 1033-1 and 1033-2 for converting and inversely converting the ICS network frame into the ATM format frame. The satellite communication network 1043 is a relay network for transferring information using satellites. The satellite / ICS network frame converter 10 converts and reverse converts an ICS network frame into an interface of a satellite communication network.
34-1 and 1034-2 are provided in the input / output unit. The telephone line conversion units 1030-1 and 1030-2 convert and reverse functions corresponding to the physical layer and the data link layer (the first and second layers of the OSI communication protocol) between the telephone line and the access control device. It has a function to convert. ISD
The N line converters 1029-1 and 1029-1 are ISD
It has a function of converting and reverse converting functions corresponding to the physical layer and the data link layer between the N line and the access control device. CATV line converters 1028-1 and 1028-
Reference numeral 2 has a function of converting and inversely converting a function corresponding to a physical layer and a data link layer between the CATV line and the access control device. Satellite line converters 1027-1 and 1
No. 027-2 has a function of converting and inversely converting a function corresponding to a physical layer and a data link layer between a satellite line and an access control device. The IPX conversion units 1026-1 and 1026-1 have a function of converting and inversely converting a function corresponding to a physical layer and a data link layer between the IPX and the access control device.

(1) X. Access control device 1010-1 and access control device 1010 via the 25 network 1040
The operation in the case where communication is performed with -2 will be described.

The access control device 1010-1 converts the ICS network frame into the X.110 format. 25 to the exchange 1013-11-1. X. X.25 in the X.25 switch 10131-1. 25
/ ICS network frame conversion unit 1031-1
The ICS network frame received from the access control device 1010-1 is transmitted as an X.30 frame as shown in FIG. Convert to 25 format frames. And X. 25 exchange 101
31-1 is X.31. X.25 format frames. 25 nets 10
Send out within 40. X. X.25 sent from the X.25 exchange 1013-1-1. X.25 format frames 25 net 104
0. It reaches the 25th switch 1013-1-2. Next, X. X.25 in the X.25 switch 10131-2. 2
5 / ICS network frame conversion unit 1031-2
X. received Access control device 1 by inversely converting a 25-frame format into an ICS network frame format
010-2. Access control device 1010-2
Receives an ICS network frame. X. Access control device 1010-2 25 exchange 1031-2
Is transmitted to the access control device 1010-1 in the same manner.

(2) Access control measures 1010-1 and access control device 1010-2 via FR network 1041
The operation when communication is performed between the server and the server will be described.

The access control device 1010-1 sends out an ICS network frame. FR exchange 10132
-1 FR / ICS network frame converter 10
The 32-1 converts the ICS network frame received from the access control device 1010-1 into a frame in the FR format as shown in FIG. And FR exchange 1
0132-1 sends a frame in the FR format into the FR network 1041, and sends the F frame sent from the FR exchange 1032-1.
The frame in the R format is transferred in the FR network 1041,
It reaches the exchange 101322. FR exchange 1013
FR / ICS network frame converter 1 in 2-2
032-2 indicates the received FR format frame as an ICS
The data is inversely converted into a network frame format and transmitted to the access control device 1010-2. Access control device 101
0-2 receives the ICS network frame. Access control device 1010-2 to FR exchange 10132-
The ICS network frame sent to the access control device 1010-1 is similarly transferred to the access control device 1010-1.

(3) The access control device 1010-1 and the access control device 1010-
The operation in the case of performing communication with the communication device 2 will be described.

The access control device 1010-1 is connected to the ICS
The network frame is sent to the ATM switch 10133-1. ATM / I in ATM switch 10133-1
The CS network frame conversion unit 1033-1 converts the ICS network frame received from the access control device 1010-1 into an ATM format frame as shown in FIG. ATM switch 10133-1 is an ATM
Format frame into the ATM network 1042,
The frame in the ATM format transmitted from the exchange 10133-1 is transferred in the ATM network 1042, and the ATM exchange 1
It reaches 0133-2. ATM switch 10133-2
ATM / ICS network frame converter 103 within
3-2, reversely converts the received frame in the ATM format into the format of the ICS network frame and sends it to the access control device 1010-2. Access control device 1010
-2 receives an ICS network frame. Access control device 1010-2 to ATM switch 10133-
The ICS network frame sent to the access control device 1010-1 is similarly transferred to the access control device 1010-1.

(4) The access control device 1010-1 and the access control device 1010 via the satellite communication network 1043
The operation in the case where communication is performed with -2 will be described.

The access control device 1010-1 sends the ICS network frame to the satellite transceiver 1014-1. Satellite / ICS in satellite receiver / transmitter 101134-1
The network frame conversion unit 1034-1 converts the ICS network frame received from the access control device 1010-1 into an interface in the satellite communication network 1043. Next, the satellite receiver / transmitter 101413-1 converts the ICS converted to the interface in the satellite communication network 1043.
The network frame is transmitted into the satellite communication network 1043, and the ICS transmitted from the satellite transmitter / receiver 1014-1 is transmitted.
The network frame is transferred within the satellite communication network 1043 and reaches the satellite receiver / transmitter 10134-2. The satellite / ICS network frame converter 1034-2 in the satellite receiver / transmitter 10134-2 receives the satellite communication network 10
Inversely converts the ICS network frame converted to the interface in the access control device 43 into the access control device 1010-2.
To send to. The access control device 1010-2 receives the ICS network frame. Access control device 10
The ICS network frame transmitted from 10-2 to the satellite receiver / transmitter 10134-2 is similarly transferred to the access control device 1010-1.

(5) User 1060 connected to telephone line conversion section 1030-1 of access control apparatus 1010-1
-1 originates and the user 1060-2 connected to the telephone line conversion unit 1030-2 of the access control apparatus 1010-2.
The operation in the case where communication is performed with the interface of the telephone line between the communication device and the telephone line will be described.

The user 1060-1 applies for a telephone line connection to the VAN operator. VAN operator is user 1060-1
Access control device 1010-1 that connects
CS logic terminal ICS network address "772
Next, the VAN operator determines in the conversion table 1013-1 of the access control device 1010-1 that the originating ICS network address is "7721" and the sender telephone number is "03."
-5555-1234 "and the recipient telephone number" 06-55 "
55-9876 ", the incoming ICS network address" 5521 ", and information such as the request type, etc. This example shows an example in which the request type" 5 "is a telephone line connection. -2 conversion table 1
The outgoing ICS network address “552”
1 ", the sender telephone number" 06-5555-9876 ",
Recipient telephone number "03-5555-1234", incoming call I
The information such as the CS network address “7721” and the request type is set.

The user 1060 enters the telephone number “06-555”
5-9876 ". The telephone line conversion unit 1030-
1 converts the received telephone number into a reading format of the processing device 1012-1 and sends it to the processing device 1012-1. I
The processing device 1012-1 which has received the telephone number information from the telephone line conversion unit 1030-1 of the CS network address "7721" refers to the request type of the transmission ICS network address "7721" in the conversion table 1013-1,
It recognizes that it is a telephone line connection and receives the incoming telephone number "06".
Read the incoming ICS network address "5521" from "-5555-9876".
0-1 indicates that the incoming ICS network address is "552".
1 ", the originating ICS network address is" 7721 "
And an ICS network frame having a network data section in which information for notifying that there is an incoming call is created.
It is sent out to the network in S1000. The ICS network frame transmitted from the access control device 1010-1 is transferred in the ICS1000 network,
The access control device 1010-2 is reached. The access control device 1010-2 having received the ICS network frame having the network data part in which the information for notifying that there is the incoming call is transmitted from the telephone line conversion unit 1030-2 of the ICS network address “5521” to the user 1060-2. Sends a signal to notify the incoming call. Then, the user 1060-2 sends a response signal.

Upon receiving the response signal, the telephone line conversion unit 1030-2 converts the response signal into a format that can be transferred within the ICS1000 network. Access control device 1010-2
Sets the incoming ICS network address to “7721”,
Creates an ICS network frame having a network control unit whose originating ICS network address is set to "5521" and a network data unit that describes information for notifying that a call has been answered, and sends it out to the ICS network. I do. Access control device 1010-
ICS network frame sent from ICS
Access control device 1010
Reaches -1. Access control apparatus 1010-2 having received an ICS network frame having a network data portion describing information for transmitting a response
Sends a signal for notifying a response from the telephone line conversion unit 1030-1 of the ICS network address "7721" to the user 1060-1. As a result, the user 1060-1 and the user 1060-2 start full-duplex communication using analog signals (such as voice), and
060-1 transmits an analog signal. Upon receiving the analog signal, the telephone line conversion unit 1030-1 converts the analog signal into an analog information format that can be transferred in the ICS network.

The access control device 1010-1 transmits the incoming call I
CS network address "5521", originating ICS
An ICS network frame having a network control section whose network address is set to “7721” and a network data section in which analog information is described is created, and transmitted to the ICS 1000 network. The ICS network frame transmitted from the access control device 1010-1 is transferred in the network of the ICS 1000 and reaches the access control device 1010-2.
I with a network data part describing analog information
The access control device 1010-2 that has received the CS network frame transmits the ICS network address “552”.
The 1 "telephone line conversion unit 1030-2 transmits the analog information to the user 1060-2 as an analog signal converted to a telephone line interface.
The analog signal transmitted from 0-2 is transferred to the user 1060-1 in the same procedure.

(6) I of access control apparatus 1010-1
User 10 connected to SDN line converter 1029-1
61-1 originates a call and the I of the access control device 1010-2.
User 10 connected to SDN line converter 1029-2
The operation in the case of performing communication with the interface 61-2 over the interface of the ISDN line will be described.

The user 1061-1 sends the IS to the VAN operator.
Application for DN line connection, VAN operator is user 1061
Access control device 1010-1 to which the ICS network terminal “7” is connected, and the ICS network address “7
722 ". Next, the VAN operator adds the originating ICS to the conversion table 1013-1 of the access control device 1010-1.
Information such as a network address “7722”, a sender ISDN number “03-555-1111”, a receiver ISDN number “06-5555-2222”, an incoming ICS network address “5522”, and a request type is set. In this example, an example is shown in which the request type “6” is set as the ISDN line connection. Similarly, the access control device 101
In the conversion table 1013-2 of 0-2, the originating ICS network address “5522” and the sender ISDN number “06-5”
555-2222 "Recipient ISDN number" 03-555 "
5-1111 ", the incoming ICS network address" 7
722 "and information such as the request type.

The user 1061-1 has the ISDN number "06"
−5555 2222 ″. The ISDN line converter 1029-1 converts the received ISDN number into the processing device 1
To the reading format of 012-1 and processing device 1012
Send to 1. ICS network address "772
The processing device 1012-1 that has received the information of the ISDN number from the ISDN line conversion unit 1029-1 of "2" transmits the ICS network address "77" of the conversion table 1013-1.
Recognizing that the connection is an ISDN line connection by referring to the request type of "22", the incoming ISDN number "06-5555-22"
22 "to the incoming ICS network address" 552
2 ". The access control apparatus 1010-1 receives the incoming call I
CS network address "5522", originating ICS
An ICS having a network control unit having a network address set to “7722” and a network data unit describing information for notifying that an ISDN has been received.
A network frame is created and transmitted to the ICS 1000 network.

The ICS network frame transmitted from the access control device 1010-1 is transferred in the ICS 1000 and reaches the access control device 1010-2.
The access control device 1010-2 having received the ICS network frame having the network data portion in which the information for notifying that the incoming call has been received is sent to the ISDN line conversion unit 102 of the ICS network address “5522”.
9-2 sends a signal for notifying the user 1061-2 of the incoming call. Then, the user 1061-2 sends a response signal. ISDN line converter 1029-2
Converts the response signal into a format that can be transferred within the ICS 1000 when it receives the response signal. The access control device 1010-2 includes:
An ICS network frame having a network control unit in which the incoming ICS network address is set to "7722" and an outgoing ICS network address set to "5522", and a network data unit in which information for reporting that there is an ISDN response is described. And create
The packet is sent out to the ICS 1000 network.

The ICS network frame transmitted from the access control device 1010-2 is transferred in the ICS 1000 and reaches the access control device 1010-1.
The access control device 1010-2 having received the ICS network frame having the network data part in which the information for notifying that the response has been received is sent to the ISDN line conversion unit 10 having the ICS network address “7722”.
29-1 sends a signal for notifying a response to the user 1061-1. Thereby, the user 1061
-1 and the user 1061-2 are digital signals (voice, etc.)
Starts, and the user 1061-1 sends out a digital signal. ISD that received analog signal
The N line converter 1029-1 converts the analog signal into ICS1
000 is converted into a transferable digital information format.

The access control apparatus 1010-1 transmits the incoming call I
An ICS network frame having a network control unit with the CS network address “5522” and the originating ICS network address set to “7722” and a network data unit describing digital information is created and transmitted to the ICS 1000. The ICS network frame transmitted from the access control device 1010-1 is transferred in the ICS 1000 and reaches the access control device 1010-2. Upon receiving the ICS network frame having the network data part describing the digital information, the access control device 1010-2 converts the digital information into an ISDN line interface in the ISDN line conversion unit 1029-2 of the ICS network address “5522”. It is sent to the user 1061-2 as a digital signal. Conversely, the digital signal transmitted from the user 1061-2 is also transmitted to the user 1 by the same procedure.
061-1.

(7) C of access control apparatus 1010-1
CATV broadcasting station 1062-1 connected to ATV line conversion section 1028-1 and C of access control apparatus 1010-2.
User 10 connected to ATV line converter 1028-2
An operation in the case of performing communication with the CATV 62-2 using the interface of the CATV line will be described.

The CATV broadcasting station 1062-1 applies to the VAN operator for a CATV line connection with the user 1062-2. The VAN operator specifies the access control device 1010-2 to which the user 1062-2 is connected, and determines the ICS network address “5523” of the ICS logical terminal. Next, the VAN operator sets the access control device 101
The information such as the incoming ICS network address “5523” and the request type is set in the corresponding part of the outgoing ICS network address “7723” in the conversion table 1013-1 of 0-1. This example shows an example in which the request type “7” is a CATV line connection. Similarly, the access control device 101
The information such as the originating ICS network address “5523”, the terminating ICS network address “7723” and the request type is set in the conversion table 1013-2 of 0-2.

The CATV broadcasting station 1062-1 transmits a CATV analog signal. Upon receiving the CATV analog signal, the CATV line converter 1028-1 converts the CATV analog signal into an information format that can be transferred in the ICS 1000. The access control device 1010-1 receives the incoming call I
CS Network Address is "5523", Calling ICS
An ICS network frame having a network control section with a network address set to “7723” and a network data section describing CATV information is created and sent to the ICS 1000. Access control device 1
The ICS network frame transmitted from 010-1 is transferred in the ICS 1000, and the access control device 1
010-2 is reached. Upon receiving the ICS network frame having the network data part describing the CATV information, the access control device 1010-2 receives the ICS network address “5523” and sets the CATV line converter 1
At 028-2, the CATV information is transmitted to the user 1062-2 as a CATV analog signal converted to a CATV line interface. Conversely, user 1062-
2 is transmitted to the CATV broadcasting station 1062-1 in the same procedure.

(8) The user 1063 connected to the satellite channel converter 1027-1 of the access controller 1010-1
A description will be given of an operation in the case where communication is performed by an interface of a satellite line between -1 and a user 1063-2 connected to the satellite line conversion unit 1027-2 of the access control device 1010-2.

The users 1063-1 and 1063-2 are
Users 1063-1 and 1063- are provided to the VAN operator.
Apply for a satellite line connection between the two. The VAN operator connects the user 1063-1 to the access control apparatus 101.
0-1 is specified, and the ICS network address “7724” of the ICS logic terminal is determined. Similarly, the user 106
The access control device 1010-2 connecting the 3-2 is specified, and the ICS network address “5”
524 ". The VAN operator then determines the originating ICS of the conversion table 1013-1 of the access control device 1010-1.
Incoming IC in the corresponding part of network address "7724"
The information such as the S network address “5524” and the request type is set. This example shows an example in which the request type “8” is a satellite line connection. Similarly, information such as the originating ICS network address “5524”, the terminating ICS network address “7724”, and the request type is set in the conversion table 1013-2 of the access control device 1010-2.

The user 1063-1 sends out a satellite signal. The satellite line converter 1027-1 having received the satellite signal of the satellite line interface converts the satellite signal into the ICS100.
0 is converted into a transferable information format. The access control device 1010-1 sets the incoming ICS network address to “5524” and the outgoing ICS network address to “7
724 ", and an ICS network frame having a network data part describing information of satellite signals is created and sent to the ICS 1000. The I / S sent from the access control device 1010-1
The CS network frame is transferred in the network of the ICS 1000 and reaches the access control device 1010-2. The access control device 1010-2 having received the ICS network frame having the network data portion in which the satellite signal information is described, the satellite control unit 1027-2 of the ICS network address “5524” converts the satellite signal information into the satellite line information. The signal is transmitted to the user 1063-2 as a satellite signal converted into an interface. Conversely, the satellite signal of the interface of the satellite line transmitted from the user 1063-2 is also transmitted to the user 1063 by the same procedure.
-1.

(9) The terminal having the IPX address “9901” of the user 1064-1 and the I
IPX between the terminal having the PX address “8801”
The operation in the case of performing communication with the interface of FIG.

The users 1064-1 and 1064-2 are
A terminal having the IPX address “9901” of the user 1064-1 and the IP of the user 1064-2
An application for an IPX connection with a terminal having the X address “8801” is made. The VAN operator is the user 1064-1
ICS network address "77" of the access control device 1010-1 and the IPX conversion unit 1026-1 for connecting
25 ". Similarly, the access control device 1010-2 and the IPX conversion unit 10 for connecting the user 1064-2
The ICS network address “5525” of 26-2 is determined. Next, the VAN operator sets the access control device 101
Information such as the sender IPX address “9901”, the receiver IPX address “8801”, the destination ICS network address “5525”, and the request type are stored in the corresponding part of the conversion table 1013-1 of “0-1” corresponding to the originating ICS network address “7725”. Make the settings for This example shows an example in which the request type “9” is set to the IPX connection. Similarly, the transmission ICS of the conversion table 1013-2 of the access control device 1010-2
The sender IPX address “8801”, the receiver IPX address “9901”, and the incoming ICS network address “77” are stored in the corresponding part of the network address “5525”.
25 "and information such as a request type.

The IPX address “9” of the user 1064-1
The terminal having “901” sets the sender IPX address to “99”.
01 ", and an IPX frame in which the recipient IPX address is set to" 8801 ".The access control apparatus 1010-1 transmits the ICS network address" 772 "
5 "receives the IPX frame and reads the sender IPX address" 9901 "and the receiver IPX address" 8801 "in the IPX frame, and the access controller 1010-1 converts the conversion table 1013. The access control apparatus 101 reads the destination network address “5525” of the sender IPX address “8801” of the sender IPX address “9901” of the transmission ICS network address “7725” from −1.
0-1 indicates that the incoming ICS network address is "552".
5 ", the originating ICS network address is" 7725 "
And an ICS network frame having a network data section in which information of the IPX frame is described and sent to the ICS 1000.

The ICS network frame transmitted from the access control device 1010-1 is transferred in the ICS 1000 and reaches the access control device 1010-2.
The access control device 1010-2 having received the ICS network frame having the network data portion in which the information of the IPX frame is described, the access control device 1010-2 in the IPX conversion unit 1026-2 of the ICS network address "5525"
The information of the IPX frame of the S network frame is
The converted IPX frame is transmitted to the user 1064-2 as an IPX frame. The terminal having the IPX address “8801” of the user 1064-2 receives the IPX frame. Conversely, the sender I sent from the terminal having the IPX address “8801” of the user 1064-2
The IPX frame in which the PX address is set to “8801” and the receiver IPX address is set to “9901” is also transferred to the user 1064-1 in the same procedure.

Example-11 (X.25, FR, ATM,
Transmission by satellite communication and telephone line, ISDN line, CATV
Line, satellite line): In the above embodiment-10, the X. 25 / ICS network frame converter 10
31-1 and 1031-2, FR / ICS network frame conversion units 1032-1 and 1032-2, ATM
/ ICS network frame converters 1033-1 and 1033-2, and satellite / ICS network frame converters 1034-1 and 1034-2 are respectively provided in the relay network, that is, X.100 / ICS network frame converters 1033-1 and 1034-2. 25 network 1040, FR network 1041, AT
It is located in the M network 1042 and the satellite communication network 1043.
On the other hand, in Example-11, as shown in FIG. 41 and FIG. 25 / ICS network frame converters 1131-1 and 1131-2, FR / ICS network frame converters 1132-1 and 1132-2, A
TM / ICS network frame conversion unit 1133-1
And 1133-2, and the satellite / ICS network frame conversion units 1134-1 and 1134-2 are disposed in the access control devices 1110-1 and 1110-2, respectively. That is, in Embodiment-10, each relay network (X.2
5 network 1040, the FR network 1041, the ATM network 1042, and the satellite communication network 1043) convert and reverse convert the received ICS network frame into a format that can be transferred on each relay network side. The access control device performs conversion into a format that can be transferred by each relay network and inverse conversion.

Embodiment-12 (Accommodation of access control device in relay network): 25 / I
CS network converters 1031-1 and 1031-
2, FR / ICS network converters 1032-1 and 1032-2, ATM / ICS network converter 10
33-1 and 1033-2, and the satellite communication network / ICS network conversion units 1034-1 and 1034-2 are respectively provided in the relay network, that is, in the X.33. 25 network 1040, FR network 104
1. Located in the ATM network 1042 and the satellite communication network 1043, the access control devices 1010-1 and 1010-
2 is X. 25 network, FR network, ATM network and satellite communication network. On the other hand, in Example-12, FIG.
As shown in FIG. 3 and FIG.
-1, 1120-2, 1121-1, 1121-2, 1
122-1, 1122-2, 1123-1, 1123-
2 are in the relay network, that is, X. 25 network 1240-
1, located within the FR network 1241-1, the ATM network 1242-1, and the satellite communication network 1243-1. That is, in the embodiment-10, in the access control device installed outside each relay network, the IC card is transmitted from the ICS user frame based on the management of the conversion table.
Although the conversion to the S network frame and the inverse conversion have been performed, in the present embodiment, the conversion from the ICS user frame to the ICS network frame (I
CS encapsulation) and inverse transformation (ICS inverse encapsulation) are performed in each of the above relay networks, that is, in X.25. It is performed inside the 25 exchange, inside the FR exchange, inside the ATM network exchange, and inside the satellite receiver / transmitter.

Embodiment-13 (the relay network is connected to the relay device): 25 net 104
0, FR network 1041, ATM network 1042, satellite communication network 1
043 is connected to the access control devices 1010-1 and 1010-2, but is not connected to the relay device. On the other hand, in Example-13, as shown in FIG. 25 network 2020-1 is connected to the access control device 2010 and the relay device 2030,
21-1 is the access control device 2011 and the relay device 20
The ATM network 2022-1 is connected to the access control device 2012 and the relay device 2032; the satellite communication network 2023-1 is connected to the access control device 2013 and the relay device 2033; 25 network 2020-
2 is connected to the relay devices 2030, 2034, and 2035, and the FR network 2021-2 is connected to the relay devices 2031 and 2035.
And the ATM network 2022-2 is connected to the relay device 203.
1, 2032, 2036 and the satellite communication network 202
3-2 is connected to the relay devices 2033, 2036, and 2037. That is, in the present embodiment, X. 25 net 202
0-1, 2020-2, RF network 2021-1, 2021
-2, ATM networks 2022-1 and 2022-2, and satellite communication networks 2023-1 and 2023-2 are all connected to a relay device.

Embodiment-14 (Access control device is ICS
FIG. 46 shows the first embodiment of the present invention.
4 shows an embodiment, in which an access control device 1210-1 is shown.
Outside the ICS 1200, that is, the LAN-12 of the company X.
Placed inside 00. Correspondingly, the ICS address management server 1250-1 and the ICS network server 1260
-1 is also outside the ICS 1200, that is, the LAN 1200-1
, And the access control device general management server 1
240 is placed inside ICS 1200. The access control device central management server 1240 uses the ICS network server communication function to access control device 1210-1, ICS address management server 1250-1, and ICS network server 1260-
1 and has a function of exchanging information.
When the VAN operator makes a contract with the company X and connects the user communication line to the ICS 1200, the VAN operator uses the function of the access control device general management server 1240 to access the first access control device.
The data is written in the conversion table inside 210-1. Also, I
The CS address management server 1250-1 and the ICS network server 1260-1 use the respective ICS network server communication functions, and use the ICS address management server 1 in the ICS 1200.
250-2 and the ICS network server 1260-2.

With this configuration, the LAN 1200 is operated in the same manner as described in the first embodiment.
The user terminal inside can perform intra-company communication and inter-company communication. The ICS address management server 1
250-1, the ICS network server 1260-1
Even within 200, the user terminal, as described above,
Clearly, intra-enterprise communication and inter-enterprise communication can be performed. In the above other embodiment, the ICS address management server is replaced with the ICS address name management server described in the embodiment-24.

Embodiment 15 (Non-ICS encapsulation of inter-enterprise communication): An embodiment of non-ICS encapsulation in inter-enterprise communication will be described with reference to FIGS. A method of determining a transfer destination in the ICS from a user address and performing communication will be described. This communication method is an embodiment in which ICS encapsulation is not performed only for inter-company communication despite the use of the conversion table as in the first embodiment. Further, despite the fact that ICS encapsulation is not performed in inter-company communication, intra-company communication (embodiment-1), virtual leased line connection (embodiment-2), and ICS network server using ICS special number address Communication (Example-3, 3A)
A description will be given of how the present invention can be realized by the same method as described in the embodiments 1, 2, 3, and 3A.

First, the ICS user address in this embodiment (in the case of a 32-bit length, the address is 2 from address 0).
An example of how to determine the ³² -1) will be described. The ICS user address is an intra-company communication address, an inter-company communication address,
It is classified into CS special number address and ICS operation address. As the intra-company communication address, the above-mentioned user-specific address is adopted. The business communication address is V
In the section from the address 0 to the address (2 ¹⁵ -1) of the AN internal code (16 bits: 0 to (2 ¹⁶ -1)), a range that does not overlap with the intra-company communication address is allocated. The ICS special number address is the VAN internal code (16
Of section up ^{(2 15 + 2} 14 -1) from address ^{2 15} bits) is assigned a range that does not overlap the communication address within the enterprise. ICS operational address, VAN internal code (16 bits) ⁽² 15 ^{+2 14)} from the address ^{(2 16}
-1) In the section up to the address, a range that does not overlap with the intra-company communication address is allocated. The ICS operation address is used for ICS operation (for example, used for communication for exchanging failure information inside the VAN). In FIGS. 47 and 48, 15170-1, 15170-2, and 15170
-3, 15170-4, 15170-5, 15170-
6 are LANs 15100-1, 15100-, respectively.
2, 15100-3, 15100-4, 15100-
5 and 15100-6, and the ICS frame is provided by these gateways 15170-6.
-1 to 15170-6.

<< Common Preparation >> Access Control Unit 1511
0-1 has a conversion table 1533-1, which includes a source ICS network address, a destination ICS network address,
Includes recipient ICS user address, request identification, and speed category. The request identification described in the conversion table 15113-1 indicates, for example, “1” for the intra-company communication service, “3” for the virtual leased line connection, and “4” for the ICS network server connection. The speed category includes the speed and throughput of the line required for communication from the ICS network address (for example, the number of ICS frames to be transferred within a certain time).

<< Preparation for Inter-company Communication >> LA of Company X
The terminal for performing inter-company communication inside the N15100-1 is an IC
The S user address “7711” is held. In this embodiment, the ICS user address for inter-company communication is:
Use the same value as the ICS network address. The ICS address information for inter-company communication is converted into a conversion table 151.
13-1 is not written. Similarly, LA of company Y
The terminal that performs inter-company communication inside N15100-3 is IC
It holds the S user address “8822”.

<< Preparation for Intra-Company Communication >> LAN 151
00-1 and the user of the LAN 15100-2
Intra-company communication between terminals connected to the AN is performed between VAN-1 and VAN.
An application is performed by designating a terminal to the VAN operator so that communication can be performed via the AN-3. Access control device 15110
Logical communication line 15180 connected to the ICS logical terminal of -1
The ICS network address of “−1” is “7711”. The intra-company communication addresses of the terminal connected to the LAN 15100-1 to which the application was made are set to “0012” and “0”.
025 ”, and the company communication addresses of the destinations to communicate from these terminals are“ 0034 ”,“ 0036 ”,“ 004 ”.
5 "and" 0046 ".

When the intra-company communication address is “0034” or “0”
The terminal having “036” is inside the LAN 15100-2, and the ICS network address assigned to the ICS logical terminal of the access control device 15110-5 is set to “992”.
The company communication address is “0045” or “0”.
046 "is inside the LAN 15100-6, and the ICS network address assigned to the ICS logical terminal of the access control device 15110-4 is set to" 890 ".
0. The value “1” indicating the applied intra-company communication service is set as the request identification, and the above is converted in the conversion table 1513-1.
Register with. Access control devices 15110-4 and 15
110-5 is registered in each conversion table for intra-company communication in the same manner as described above. The contents of the conversion table created by the above method are stored in the ICS address management server 15.
Write to 150-1.

<< Preparation for Virtual Private Line Connection >> The principle is the same as that of the embodiment-2, and will be described below. LAN15
100-5 is connected to the access control device 15110-1 via the user logical communication line 15180-5,
The ICS network address “7712” is assigned. LAN 15110-4 is the user logical communication line 1
5180-4, and is connected to the access control device 15110-2.
1 ". User logical communication line 15180
In order to connect a virtual leased line from -5 to the user logical communication line 15180-4, the ICS network addresses “7712” and “6611” and the request identification “ 3 "is registered. For the same purpose, these ICs are also included in the conversion table inside the access control device 15110-2.
S network addresses “6611” and “7712”
Is registered.

<< Preparation for Communication with ICS Network Server Using ICS Special Number >> The ICS user address of the ICS network server 15330-1 connected to the access control device 15110-1 is "2000" and the ICS network address is " In the case of “7721”, the respective addresses and the request identification “4” are registered in the conversion table.

Hereinafter, description will be made with reference to the flowchart in FIG.

<< Intercompany Communication >> Intercompany communication without ICS encapsulation will be described. That is, the LAN 15100-
1 between the terminal having the ICS user address “7711” on the LAN 15100-3 and the terminal having the ICS user address “8822” on the LAN 15100-3.

The address “771” of the LAN 15100-1
The terminal having “1” is the sender ICS user address “77”.
11 ", and the ICS user frame F1 in which the receiver ICS user address is set to" 8822 "is sent out.
At the ICS logic terminal. Access control device 151
10-1 checks whether the ICS network address “7711” assigned to the ICS logical terminal is registered in the conversion table 151113-1 as a request identification as a virtual leased line connection (“3”) (step S1501). In this case, since it is not registered, the receiver ICS network address “882” in the ICS user frame F1 is next.
It is checked whether “2” is registered in the conversion table 151113-1 (step S1503) In this case, since it is not registered, the receiver network address “8822” in the ICS user frame F1 is used next for the inter-company communication. It is determined whether it is in the address section (step S1504).

When the ICS user frame F1 is determined to be inter-enterprise communication according to the procedure described above, processing such as charging for inter-enterprise communication is performed (step S1505). The access control device 15110-1 does not perform ICS encapsulation, and transmits the ICS user frame F1 to the relay device 15120-
1 (step S1525). Relay device 151
20-1 is based on the incoming ICS network address.
The CS user frame is transferred to the relay devices 15120-2 and 15120-2.
120-3, the access control device 15 of the VAN-2
Transfer to 110-4. Access control device 15110-
4 is transferred to the LAN 15110-3. The ICS user frame is routed through LAN 15110-3,
It is delivered to the terminal having the ICS user address “8822”.

<< Intra-Company Communication >> A description will be given of the fact that intra-company communication that performs ICS encapsulation can be realized despite non-ICS encapsulation of inter-company communication. For communication between a terminal having an ICS user address “0012” connected to the LAN 15100-1 and a terminal having an ICS user address “0034” connected to the LAN 15100-2,
An ICS user frame P1 is transmitted. In the ICS user frame P1, "0" is added to the sender ICS user address.
012 ”is“ 003 ”in the recipient ICS user address.
4 "is set. ICS user frame P
1 is transmitted through the user logical communication line 15180-1, and further transferred to the access control device 15110-1. The access control device 15110-1 checks whether the ICS network address “7711” assigned to the ICS logical terminal is registered in the conversion table 151113-1 as a request type as a virtual private line connection (“3”). (Step S1501) Since it is not registered in this case, it is next checked whether or not the receiver network address “0034” in the ICS user frame P1 is registered in the conversion table 151113-1 (Step S1503). In the case of this embodiment, since “0034” is registered and the request identification is read as intra-company communication “1” (step S15)
10), the receiving ICS network address “9922” corresponding to the transmitting ICS network address “7711” is acquired from the conversion table, and processing such as accounting for inter-company communication is performed (step S1511). The above procedure is also shown in the flowchart of FIG.

The access control device 15110-1 stores the obtained calling ICS network address “7711”,
Using the incoming ICS network address "9922", a network control unit is added to perform ICS encapsulation (step S1520), and an ICS network frame P2 is formed and transmitted to the relay device 15120-1 (step S1525).

<< Communication Using Virtual Dedicated Line >> Despite the non-ICS encapsulation of inter-enterprise communication, description will be given of the fact that communication using a virtual dedicated line that performs ICS encapsulation can be realized.

LAN15100-5 is ICS15100
, Through the user logical communication line 15180-5.
Send a CS user frame. The access control device 15110-1 that has received the ICS user frame from the ICS logical terminal of the ICS network address “7712”
Checks whether the ICS network address "7712" assigned to the ICS logical terminal is registered in the conversion table 151113-1 as a request type as a virtual private line connection ("3") (step S1501). In this case, since it is registered, it can be confirmed that the incoming ICS network address is a virtual private line connection of "6611", and processing such as charging is performed (step S1502). The access control device 15110-1 sets the incoming ICS network address to “6611” in the received ICS user frame,
An ICS-encapsulated ICS network frame is created by adding a network control unit in which the originating ICS network address is set to “7711” (step S1520), and transmitted to the relay device 15120-1 (step S1525).

<< Communication with ICS Network Server Using ICS Special Number >> Despite the non-ICS encapsulation of inter-enterprise communication,
The fact that communication with an ICS network server that performs CS encapsulation is possible will be described. In other words, LAN 1510 of company X
The terminal (address “0012”) connected to 0-1 is
The fact that communication is possible with the ICS network server 15330-1 connected to the access control device 15110-1 will be described.

The terminal having the sender ICS user address “0012” on the LAN 15100-1 transmits the ICS user frame G1 to the access control device 15110-1.
Requests communication with the ICS network server 15330-1 whose recipient ICS user address is "2000". The access control device 15110-1 checks whether the ICS network address “7711” assigned to the ICS logical terminal is registered in the conversion table 151113-1 as a request identification as a virtual leased line connection (“3”). (Step S1501) Since it is not registered in this case, it is next checked whether or not the recipient network address “2000” in the ICS user frame G1 is registered in the conversion table 151113-1 (Steps S1503 and S151).
0). In this case, the request identification in the conversion table 151113-1 is read as the communication (“4”) with the ICS network server 15330-1 (step S1512). Next, the conversion table 151
An ICS network address “7721” of the ICS network server 15330-1 is acquired from 13-1 and processing such as billing is performed (step S1513). Next, the ICS user frame is converted into an ICS packet (step S152).
0), and transmits it to the ICS network server 15330-1 (step S1525).

Embodiment 16 (Another Embodiment Using ATM Network): Another embodiment in which the network inside the ICS of the present invention is formed using an ATM network will be described. In this embodiment,
(1) Supplementary explanation of the prior art relating to ATM, (2) Description of components, (3) Flow of frame using SVC, (4) PV
Frame flow using C, (5) 1: N using PVC
Communication or N to 1 communication, (6) N to N communication using PVC,
Will be described in this order. In the embodiment described here, the ICS
Since the technology for address conversion between the network frame and the ATM network is mainly disclosed, the intra-enterprise communication service and the inter-enterprise communication service described in the first embodiment and the virtual leased line service described in the second embodiment are used. This embodiment can be applied to any of them.

(1) Supplementary Description of Prior Art Related to ATM: First, a supplementary description will be given of the prior art related to ATM necessary for describing this embodiment. In the ATM network, a plurality of non-fixed logical lines that can flexibly set a communication speed and the like can be set on a physical line. This logical line is called a virtual channel (VC). Depending on the setting method of the virtual channel, SVC (Switched V
irtual Channel) and PVC (Permanent Virtual Channel)
l) is specified. SVC is for setting up a virtual channel when necessary, and is necessary for a required time between an arbitrary ATM terminal (a communication device generally connected to the ATM network and performing communication using the ATM network). A logical line having the following speed can be secured. The call setting of the virtual channel is performed by the ATM terminal which starts the communication,
Regarding this method, the signaling method (Signali
ng). The call setup requires an address (hereinafter referred to as "ATM address") for identifying the ATM terminal to which the call setup is to be performed.
The system is structured so that it is unique within the ATM network so that TM terminals can be identified. This address system includes ITU-T
E.164 format specified in Recommendation Q.2931, or ATM
As shown in Fig. 50 according to the ForumUNI 3.1 specification
There are different types of NSAP ATM addresses. In addition, ICS
Then, which of the above ATM address systems is used is AT
Since the M network is used depending on the specific configuration, it is described in this embodiment by using an ATM address.

[0171] The PVC is for semi-fixed call setting, and can be regarded as a virtual dedicated line from the viewpoint of the ATM terminal. To the established virtual channel, an ID for identifying the virtual channel (hereinafter referred to as “virtual channel ID”) is assigned to both the SVC and the PVC. The virtual channel ID is, specifically, the VPI of the cell header portion of the ATM cell format (53 bytes) shown in FIG.
(Virtual Path Identifier) and VCI
(Virtual Channel Identifier).

Since information communication within the ATM network is performed in units of information in the ATM cell format shown in FIG. 51, to transfer an ICS network frame via the ATM network,
This needs to be converted to an ATM cell. This conversion is
The CPCS (Common Part Convergence Subla
yer) frame, and the two-stage process of decomposing the CPCS frame into ATM cells shown in FIG. When a communication frame is divided into ATM cells, it usually becomes a plurality of ATM cells. Therefore, a series of a plurality of ATM cells related to one communication frame is called an ATM cell sequence. A
When the TM cell sequence is received, the inverse conversion is performed.
Assembling of an ATM cell sequence into a CPCS frame shown in FIG.
(ICS network frame) to extract and restore 2
Step processing is performed. The conversion into the CPCS frame and the disassembly / assembly of the ATM cell are known techniques.
This is a standardized technology according to the UT recommendation. Also, C
The protocol header in the PCS frame user information is standardized in IETF RFC1483.

(2) Description of components: FIGS. 54 and 55
Is the ATM network 1042 from FIG.
In addition to the description of the internal structure of the conversion unit 1033-1 inside the ATM exchange 10133-1 and the conversion unit 1033-2 inside the ATM exchange 10133-2, FIG.
4 to 36 correspond to a simplified description of the access control devices 1010-2 and 1010-1. In this embodiment, the basic principle of the internal configuration of the access control device or the operation of the processing device in the access control device is the same as that described in the first embodiment.

Access control device 1010-5 in FIG.
Is the connection point between companies X and A who are users of ICS905
ICS network addresses “7711” and “7722” are assigned as (ICS logic terminals), respectively. The access control device 1010-7 is similarly provided with ICS network addresses “7733” and “7744” as connection points of the companies W and C, respectively. In FIG. 55, the access control device 1010-6 is similarly provided with ICS network addresses “9922” and “9933” as connection points between the companies Y and B, respectively. ICS network addresses “9944” and “9955” are assigned as connection points of Z and D, respectively. Here, in the embodiment of the ATM network, companies X, Y, etc. used as examples of users may be different bases of the same company performing intra-company communication, or different companies performing inter-company communication. It does not matter.

An interface unit 1133-5 is provided in a conversion unit 1033-5 inside the ATM exchange 10133-5, and the interface unit 1133-5 connects the access control device 1010-5 and the ATM exchange 10133-5. It is responsible for matching the interface (physical layer, data link layer protocol) with the communication line. The conversion unit 1033-5 includes a processing unit 1233-
5 in addition to an ATM address conversion table 1533-5 for call setting by SVC and a VC address conversion table 1433-5 for address conversion from an ICS network address used for both SVC and PVC to a virtual channel. Have been. In addition, the ATM switch 10133-5
Is an ATM address management server 1633-5 as an information processing device for storing an ATM address conversion table;
In the case of using a VC, the information processing apparatus 1003 connects to a PVC address management server 1733-5 as an information processing device that stores a VC address conversion table, and performs information processing related to address conversion. The components related to the ATM switch 10133-6 are the same as the description of the ATM switch 10133-5. In FIGS. 54 and 55, the access control device 1010-5 is connected to the ATM switch 10133-5 via the communication line 1810-5, and the access control device 1010-7 is connected to the ATM switch 10133-5 via the communication line 1810-7. The access control device 1010-6 has a communication line 1810.
-6, the access control device 1010-8 is connected to the ATM switch 1013 via the communication line 1810-8.
3-6. ATM switch 10133-5
Has the only AT in the network
The M address “3977” is set, and the internal conversion unit 1033-6 is provided in the ATM switch 10133-6.
Is set to the only ATM address "3999" in the network. ATM switch 10133-5 and ATM switch 1
0133-6 is an ATM switch 10133 in this embodiment.
Connected via -7.

(3) Flow of frame using SVC: Referring to FIG. 54 and FIG. 55, SV is used as a communication path in the ATM network.
An embodiment to which C is applied will be described by taking an ICS user frame emitted from a company X terminal to a company Y terminal as an example.

<< Preparation >> ATM address conversion table 1533-
5, a destination ICS network address indicating the destination of the ICS network frame, a destination ATM address indicating the destination for setting up a virtual channel in the ATM network, and a channel such as a communication speed required for the virtual channel. Register the performance. The same registration is also made for the ATM address conversion table 1533-6. As an example, the value set in the ATM address conversion table 1533-5 is an incoming ICS network address, an ICS network address assigned to an ICS logical terminal of the access control device 1010-6 as an address for communication with the company Y, “9922” is set, and the ATM address “3999” uniquely assigned in the ATM network is registered to the conversion unit 1033-6 as the incoming ATM address. In this embodiment, the channel performance is 64 Kbps.
Set the communication speed of ATM address conversion table 1533
-5 is registered in the ATM address management server 16.
Write it in 33-5 and keep it.

The value to be set in the ATM address conversion table 1533-6 is, as an incoming ICS network address, an ICS network address “7711 assigned to the ICS logical terminal of the access control device 1010-5 as an address for communication with the company X. "" To set the incoming ATM
The conversion unit 103 in the ATM exchange 10133-5 to which the access control device 1010-5 is connected is used as an address.
AT assigned to 3-5 only in ATM network
The M address “3977” is registered. In this embodiment, a communication speed of 64 Kbps is set for the channel performance. A
The contents to be registered in the TM address conversion table 1533-6 are as follows:
It is also written and stored in the ATM address management server 1633-6.

<< ICS Network Frame Transfer from Access Control Apparatus >> As described in Embodiment-1, a terminal of company X is connected to access control apparatus 1010-6 via access control apparatus 1010-5. The ICS user frame issued to the terminal of the company Y is encapsulated in the ICS when passing through the access control device 1010-5, and the originating ICS network address “7711”
And the incoming ICS network address "9922"
The ICS network frame F1 has a CS frame header. The ICS network frame F1 is transmitted from the access control device 1010-5 to the ATM switch 10133-.
5 and reaches the converter 1033-5. Less than,
This will be described with reference to the flowchart in FIG.

<< Acquisition of Virtual Channel ID >> Conversion Unit 103
3-5, upon receiving the ICS network frame F1 (step S1601), sets the received frame F1 to AT
In order to transfer data correctly to the M exchange 10133-5, IC
It is necessary to find the virtual channel ID of the SVC virtual channel determined by the correspondence between the outgoing ICS network address “7711” and the incoming ICS network address “9922” inside the S frame header. In the case of the communication based on the SVC, at the time of receiving the ICS network frame, the virtual channel corresponding to this communication path may be established or not yet established. The processing device 1233-5 first determines whether or not a virtual channel has been established.
“7711” and incoming ICS network address “9”
A search is performed to determine whether a virtual channel corresponding to the pair with 922 "is registered in the VC address conversion table 1433-5 (step S1602), and a virtual channel to be obtained when the virtual channel is registered is established. Know that
From the VC address conversion table 1433-5, it is acquired that the virtual channel ID corresponding to the pair of the originating ICS network address "7711" and the terminating ICS network address "9922" is "33", and is acquired at the same time. From the value “11” of the channel type, it is known that this virtual channel is communication based on SVC. if,
If there is no registration in the VC address conversion table 1433-5, the virtual channel to be obtained is established by performing << call setting >> described later, and at that time, the VC address conversion table 1433-
Then, a virtual channel ID is obtained from the information registered in Step 5 (Step S1603).

<< Call Setup >> The virtual channel ID corresponding to the communication path determined by the correspondence between the originating ICS network address and the terminating ICS network address in the above description
Is not registered in the VC address conversion table 1433-5 ", that is, if the virtual channel corresponding to this communication channel has not been established yet, the call setting described below is performed.
It is necessary to establish a virtual channel in the ATM network constituting the ICS 905, and an operation example of this call setup will be described.

Processing unit 1233 of converter 1033-5
5 refers to the VC address conversion table 1433-5, and
The source ICS network address “7711” and the destination ICS inside the header of the CS network frame F1
When it is found that the virtual channel ID corresponding to the pair with the network address “9922” has not been registered (step S
1602) With reference to the ATM address conversion table 1533-5, find the incoming ICS network address "9922" registered in the ATM address conversion table 1533-5 that matches the incoming ICS network address "9922", and receive the corresponding incoming call. ATM address "3999"
And the corresponding channel performance "64K" is obtained (step S1605). The processing device 1233-5 issues a call setting request to the ATM switch 10133-5 by using the acquired incoming ATM address "3999".
It also requests the channel performance such as the communication speed of the virtual channel acquired simultaneously from the ATM address conversion table 1533-5. When the ATM switch 10133-5 receives the call setup request, the ATM switch 10133-5 uses a signaling method that is provided as a standard in the ATM switch itself as a virtual system in an ATM switching network that reaches the ATM switch 10133-6 from the ATM switch 10133-5. A channel is established (step S1606).
Virtual channel I assigned to identify virtual channel
D is a conversion unit 1 provided inside each of the ATM exchanges.
033-5 or 1033-6, but if it is based on the signaling scheme of the prior art, the value notified from the ATM switch 10133-5 on the calling side (for example, "33").
And the value (for example, “44”) notified from the called ATM switch 10133-6 are not necessarily the same value.
In the conversion unit 1033-5, the ATM exchange 10133-5
The virtual channel ID “33” notified by
The VC address conversion table 1433-5 together with the outgoing ICS network address “7711” and the incoming ICS network address “9922” of the network frame F1.
(Step S1607), and while the connection of this virtual channel is established, the VC address conversion table 1433-
5 above. When the virtual channel connection is no longer required, the conversion unit 1033-5 sets the virtual channel call release to AT
A request is made to the M exchange 10133-5, and at the same time, the virtual channel ID “33” is obtained from the VC address conversion table 1433-5.
Delete the registration corresponding to. The registration in the VC address conversion table 1433-6 in the conversion unit 1033-6 will be described later.

<< Transmission of Frame >> The processing unit 1233-5 of the conversion unit 1033-5 converts the access control unit 1010- IC received from 5
The S network frame F1 is converted into the CPCS frame shown in FIG. 52, and is further decomposed into ATM cells shown in FIG. 53 and transferred to the relay ATM switch 10133-7 (step S1604).

<< Transfer of ATM Cell >> The ATM cell sequence S1 composed of a plurality of cells obtained by converting the ICS network frame F1 by the method described above is transmitted from the ATM switch 10133-5 to the relay ATM switch 10133-.
5 is transferred to the ATM switch 10133-6 as an ATM cell sequence S2. Hereinafter, description will be made with reference to the flowchart in FIG.

<< Operation after Arrival of Frame >> When the ATM cell sequence S2 reaches the ATM switch 10133-6 (step S1610), the ATM cell sequence S2 is transferred from the ATM switch 10133-6 to the conversion section 1033-6. You. The conversion unit 1033-6 assembles the received ATM cell into a CPCS frame as shown in FIG. 53, and further restores the ICS network frame from the CPCS frame as shown in FIG. 52 (step S1611). In FIG. 55, the restored ICS network frame is
Although illustrated as an S network frame F2, the frame content is the same as the ICS network frame F1. The ICS network frame F2 has an incoming ICS network address “992” of the frame header.
2 "access control device, ie ICS
ICS with network address "9922"
The data is transferred to the access control device 1010-6 having a logical terminal (step S1612).

At this time, the conversion unit 1033-6 uses the ICS
The originating ICS network address "7711" of the network frame F2, the terminating ICS network address "9922", the channel type "11" indicating that the SVC is known at the time of the incoming call, and the SVC virtual channel are assigned at the time of call setup. Virtual channel ID “4
4 "is registered in the VC address conversion table 1433-6 (step S1614). At this time, the originating ICS network address" 7 "of the ICS network frame F2 is registered.
711 ”is the incoming IC of the VC address conversion table 1433-6.
Incoming ICS network address "9922" of ICS network frame F2 to S network address
Is written in the VC address conversion table 1433-6 in a position opposite to the originating ICS network address. However, if the same content as the content to be registered has already been registered in the VC address conversion table 1433-6 at the time of this registration, the registration is not performed. VC address conversion table 1433-6
Is held on the VC address conversion table 1433-6 while the connection of the virtual channel having the corresponding virtual channel (virtual channel ID “44” in this example) is maintained ( Step S1613).

<< Flow in the reverse direction of the frame >>
The flow of the frame in the reverse direction, that is, the flow from the company Y to the company X, is based on the assumption that the SVC virtual channel is set up according to the description so far, and FIG.
This will be described with reference to FIG. IC issued from company Y to company X
The S user frame is transmitted from the access control apparatus 1010-6 at the stage where the ICS network address “9
922 ”and the incoming ICS network address“ 771 ”
ICS network frame F3 having 1 "in the header section
The processing in accordance with the flow of FIG. 56 described above is performed by the processing device 1233-6 of the conversion unit 1033-6 inside the ATM exchange 10133-6.

In this case, the VC address conversion table 1433-6 of the conversion unit 1033-6 already has the outgoing ICS network address “9922” and the incoming ICS network address as described in << Operation after frame arrival >>. Since the virtual channel ID “44” corresponding to “7711” is registered as the channel type “11”, that is, SVC, the operation is performed according to the flow of (1) in FIG. Then, the ICS network frame F3 is converted into a plurality of ATM cells (ATM sequence S3) and transferred. The ATM cell sequence S3 is relay-transferred through the relay ATM exchange 10133-5, becomes an ATM cell sequence S4, arrives at the ATM exchange 10133-5, and its conversion unit 1033-6 has a virtual channel having a virtual channel ID "33". And is restored as an ICS network frame F4 having the same contents as the ICS network frame F3. In the conversion unit 1033-5, the IC
Outgoing ICS in the header of S network frame F4
Since the pair of the network address “9922” and the terminating ICS network address “7711” are already registered in the VC address conversion table 1433-5 in a form in which sending and receiving are reversed, registration in the VC address conversion table is not performed. ICS
The access control device 1010
Transfer to -5.

<< Example of application to half-duplex communication >>
905 internal network is composed of ATM network, IC
Regarding the case where the S frame is transferred from the company X to the company Y and the case where the S frame is transferred from the company Y to the company X in the reverse direction,
The implementation using one SVC virtual channel has been described. The transfer and the reverse transfer are performed, for example, from the client terminal of the company X connecting to the ICS to the company Y
When applied to a request frame (transfer) to the server terminal of the company Y and a response frame (reverse transfer) from the server terminal of the company Y to the client terminal of the company X to the request frame, only one-way communication is performed at a time, This is an application example of half-duplex communication that realizes bidirectional communication by switching the communication direction for each band.

<< Application Example to Full-Duplex Communication >> The virtual channel itself set in the ATM network is capable of full-duplex communication, that is, two-way communication at the same time, according to the rules of ATM. A transfer using one SVC virtual channel and a reverse transfer are performed on an ATM network.
For example, a request frame (transfer) from a plurality of client terminals of the company X connected to the ICS to a plurality of server terminals of the company Y connected to the ICS, and a request frame from the plurality of server terminals of the company Y to the plurality of client terminals of the company X in response to the request frame When applied to the response frame (reverse transfer), the frame between the client terminal and the server terminal is transferred asynchronously, so that two-way communication is simultaneously performed on one SVC virtual channel serving as a communication path. ,
This is an application example of full-duplex communication.

(4) Flow of frame using PVC: As shown in FIGS. 54 and 55, an embodiment in which the internal network of the ICS 905 is constituted by an ATM network and PVC is applied as a communication path in the ATM network is described below. An ICS user frame issued from the terminal of the company W to the terminal of the company Z will be described as an example.

<< Preparation >> In the VC address conversion table 1433-5 in the conversion unit 1033-5, the source ICS network address, the destination ICS network address, and the AT
M network (ATM exchange 10133-5 and ATM exchange 1
P13 fixedly set to a communication path between 0133-6)
VC virtual channel ID and virtual channel ID are PVC
Is registered. This registration is different from the case of the SVC, and is an ATM exchange (10133-5, 10133-7, 10133-6) serving as a communication path.
Is set in the VC address conversion table 1433-5 at the same time when a PVC virtual channel is set, and is fixedly held during a period when a communication path is required, that is, until the setting of the PVC virtual channel is canceled. Also, it is similarly registered and held in the VC address conversion table 1433-6. The PVC virtual channel ID is assigned to each ATM switch when the PVC is fixedly connected between the ATM switches.

The value set in the VC address conversion table 1433-5 is an address for communication with the company W as the originating ICS network address, that is, the ICS network assigned to the ICS logical terminal of the access control apparatus 1010-7. Set the address “7733” and set the incoming ICS
A communication address with the company Z as a network address,
That is, the ICS network address “9944” assigned to the ICS logical terminal of the access control device 1010-8.
Set. Further, the ID “55” of the PVC virtual channel assigned to the ATM switch 10133-5 is set as the virtual channel ID, and the value “22” indicating PVC is set as the channel type. VC address conversion table 1
The setting registered in 433-5 is also written and stored in the PVC address management server 1733-5.

Similarly, the VC address conversion table 143 in the conversion unit 1033-6 in the ATM switch 10133-6 is used.
In 3-6, the same setting is performed in a manner that the originating ICS network address and the terminating ICS network address are reversed. In this case, even if the same PVC is indicated, the virtual channel ID is stored in the VC address conversion table 1433-
The value may be different from 5. At this time, the settings registered in the VC address conversion table 1433-6 are also written and stored in the PVC address management server 1733-6.

The value set in the VC address conversion table 1433-6 is an address for communication with the company Z as an originating ICS network address, that is, the ICS network assigned to the ICS logical terminal of the access control device 1010-8. Set the address "9944" and set the incoming ICS
The communication address with the company W as the network address, that is, the ICS network address “773 assigned to the ICS logical terminal of the access control device 1010-7.
3 ". Further, the virtual channel ID includes ATM.
"66" is set as the ID of this PVC virtual channel allocated to the exchange 10133-6, and the value "22" indicating PVC is set in the channel type.

<< ICS Network Frame Transfer from Access Control Device >> Issued from the terminal of company W to terminal of company Z connected to access control device 1010-5 via access control device 1010-7. When the ICS user frame passes through the access control device 1010-7, the ICS is encapsulated in an ICS and has an outgoing ICS network address “7733” and an incoming ICS network address “9944” in the ICS frame header.
This is the network frame F5. The ICS network frame F5 is transmitted from the access control device 1010-7 to the AT.
It is transmitted to the M exchange 10133-5, and reaches the conversion unit 1033-5 via the interface unit 1133-5.

<< Acquisition of Virtual Channel ID >> Processing Unit 12
33-5 is the received ICS network frame F5
Originating ICS network address “77” in the header of
33 "and the terminating ICS network address" 994 "
By using the VC address conversion table 1433-5 using the "4. 8 is connected to the conversion unit 103 inside the ATM switch 10133-6.
It acquires that the virtual channel ID for identifying the set virtual channel is “55” with respect to 3-6. At the same time, the acquired channel type value “2”
From 2 ", it is known that this virtual channel is PVC.

<< Transmission of Frame >> Processing Unit 1233-5
Responds to the PVC virtual channel “55” acquired as described above,
The CS network frame F5 is converted into an ATM cell sequence and transmitted to the ATM switch 10133-7. This AT
The method of M cell conversion is the same as that described in the embodiment of SVC. The processing procedure of the above conversion unit 1033-5 is shown in FIG.
6 and the flow is always (1) in PVC.

<< Transfer of ATM Cell >> A composed of a plurality of cells obtained by converting the ICS network frame F1.
The TM cell sequence S1 is transferred from the ATM switch 10133-5 to the relay ATM switch 10133-7,
The data is transferred as an ATM cell sequence S2 to the M exchange 10133-6, and this operation is the same as that in the case of SVC.

<< Operation after Arrival of Frame >> When the ATM cell sequence S2 reaches the ATM switch 10133-6, the AT
The M cell sequence S2 is transmitted from the ATM switch 10133-6 to the AT
The data is transferred to the conversion unit 1033-6 inside the M exchange 10133-6. The converter 1033-6 restores the ICS network frame from the received ATM cell sequence, but this operation is the same as in the case of SVC. Restored ICS
The network frame is described as an ICS network frame F6 in FIG.
This is no different from the CS network frame F5. The ICS network frame F6 is the incoming ICS of the header part.
The access control device identified by the network address “9944”, that is, the access control device 1010-8 having the ICS logical terminal assigned with the ICS network address “9944” is transferred. The above conversion unit 1
The processing procedure of 033-6 is as shown in FIG. 57, and the flow is always (1) in PVC.

<< Flow in the reverse direction of the frame >>
The flow of the frame in the reverse direction, that is, the flow from the company Z to the company W will be described with reference to FIGS. 54 and 55, using the PVC virtual channel as a communication path. The ICS user frame issued from the company Z to the company W passes through the access control device 1010-8 and, at the stage where the ICS user frame is transmitted, has an outgoing ICS network address “9944” and an incoming ICS network address “7733” in the header section of the ICS network frame F7. The conversion unit 1033-6 which is encapsulated in the ICS and installed inside the ATM switch 10133-6
The processing according to the flow in FIG. 56 is performed by the processing device 1233-6. In this case, V of conversion section 1033-6
The C address conversion table 1433-6 includes virtual channel IDs corresponding to the outgoing ICS network address “9944” and the incoming ICS network address “7733”.
Since “66” is registered, the virtual channel ID “6”
6 ", the ICS network frame F7 is converted into a plurality of ATM cell sequences and transmitted.

The ATM cell sequence transferred through the ATM network reaches the conversion unit 1033-5 of the ATM exchange 10133-5, and is received from the virtual channel having the virtual channel ID “55”, and the ICS network frame F7 It is restored as an ICS network frame F8 having equivalent contents. However, the conversion unit 1033-5 uses the ICS
The pair of the source ICS network address “9944” and the destination ICS network address “7733” in the header of the network frame F8 has already been registered in the VC address conversion table 1433-5 in a form in which sending and receiving are reversed. Virtual channel ID for the destination address pair
Since “55” is obtained as a PVC from the channel type value “22”, the registration process is not performed, and the ICS network frame F8 is transferred to the access control device 1010-7.

<< Example of Application to Half-Duplex Communication >>
Although the internal network of the CS 905 is configured using the ATM network and the embodiment of the transfer of the ICS frame using the PVC has been described, the PVC and the SVC set up the call when the virtual channel is fixedly set or necessary. There is no difference in the operation itself of transferring the frame to the set virtual channel. Therefore, the ICS of the present invention
On the other hand, an application example of the ATM network to half-duplex communication using a PVC virtual channel is equivalent to an application example to half-duplex communication using an SVC virtual channel.

<< Application Example to Full-Duplex Communication >> For the same reason as the application example to the half-duplex communication, the application example to the full-duplex communication of PVC is the application example to the full-duplex communication in SVC. Is equivalent to

(5) One-to-N communication or N-to-one communication using PVC: In the above description, one virtual channel of PVC is used as a communication path connecting one company (base) and one company (base). Although the embodiment in which one ICS logical terminal and one ICS logical terminal are used as a communication path in the ICS has been described, one virtual channel of PVC is used as a communication path between one ICS logical terminal and a plurality of ICS logical terminals. It is possible to share. With reference to FIG. 58, an example of such one-to-N communication or N-to-I communication will be described.

<< Description of Constituent Elements >> In FIG. 58, the access control device 1010-10 is configured such that the company X connects the ICS logical terminal provided with the ICS network address “7711” in the access control device 1010-10 to the connection point. Is connected to the ATM exchange 10133-10. Company X
Company A to Company D
Is a connection point to an ICS logical terminal to which an ICS network address “9922” in the access control device 1010-20 is assigned.
An ICS logical terminal to which an ICS network address “9923” in 0 is assigned is a connection point. Similarly, company C
Is a connection point with an ICS logical terminal provided with the ICS network address “9944” in the access control device 1010-40, and the company D is the access control device 1010-4.
The ICS logical terminal to which the ICS network address “9955” in 0 is assigned is set as a connection point. The access control devices 1010-20 and 1010-40 are the ATM switch 1
0133-20 and the ATM switch 10133-
10 and the ATM switch 10133-20 are connected via a relay network.

<< Preparation >> The ATM exchanges 10133-10 and 10133-20 are connected to the ATM exchange 10133.
-10 Internal Conversion Unit 1033-10 and ATM Switch 10
One PVC virtual channel connecting the conversion unit 1033-20 inside the 133-20 is set, the virtual channel ID given to the virtual channel conversion unit 1033-10 is “33”, and the virtual channel conversion unit 1033 is set. The virtual channel ID given to −20 is “44”. Conversion unit 10
The VC address conversion table 1433-1 in the conversion unit 33-10 and the VC address conversion table 1433-1 in the conversion unit 1033-20.
The registration as shown in FIG.

<< Flow of Frame for One-to-N Communication >> The flow of the frame for one-to-N communication will be described with reference to frames transmitted from company X to companies A to D, respectively. The originating ICS network address “771” directed from company X to company A
1 "and the incoming ICS network address" 9922 "
The ICS network frame having
By referring to the VC address conversion table 1433-10 in 3-10, it is transmitted to the PVC virtual channel of the virtual channel ID “33”. The originating ICS network address “7711” directed from company X to company B,
ICS with CS network address "9933"
Similarly, the network frame has the virtual channel ID “3”.
3 ”. The originating ICS network address“ 7 ”from company X to company C is transmitted.
711 ”and the terminating ICS network address“ 994 ”
Similarly, the ICS network frame having the outgoing ICS network address “7711” and the incoming ICS network address “9955” directed from the company X to the company D have the virtual channel ID “ 33 "PVC virtual channel. This indicates that one-to-N (enterprise X-enterprise A-D) communication is being performed by sharing one PVC virtual channel. , That is, the case where the frame is transferred from the companies A to D to the company X will be described in the next section.

<< Flow of N-to-One Communication Frame >> The flow of one-to-N communication frames will be described using frames transmitted from companies A to D to company X, respectively. The originating ICS network address “992” directed from company A to company X
2 "and incoming ICS network address" 7711 "
The ICS network frame having
By referring to the VC address conversion table 1433-20 in 3-20, it is transmitted to the PVC virtual channel of the virtual channel ID “44”. The originating ICS network address “9933” directed from Company B to Company X, and the incoming I
ICS with CS network address "7711"
Similarly, the network frame has the virtual channel ID “4”.
4 is transmitted to the PVC virtual channel. The originating ICS network address “9” directed from company C to company X
944 "and the incoming ICS network address" 771 "
Similarly, the ICS network frame having the originating ICS network address “9955” and the receiving ICS network address “7711” directed from the company D to the company X also have the virtual channel ID “ The transmission is performed on the 44 "PVC virtual channel. This indicates that the N-to-1 (company A to D vs. company X) communication is performed by sharing one PVC virtual channel.

(6) N-to-N communication using PVC: 1: N
By the same method as the communication, one virtual channel of the PVC can be shared as a communication path between the plurality of ICS logical terminals. Referring to FIG.
An example of N-to-N communication will be described.

<< Description of Constituent Elements >> Company X sets the ICS logical terminal address “771” of access control apparatus 1010-11.
1 "is a connection point, and the company Y
The access control device 1010-11 is connected to the ATM switch 10133-11 with the ICS logical terminal address “7722” of −11 as a connection point. The partner to be connected from the company X or the company Y is the company A or the company C. The company A uses the ICS logical terminal address “9922” of the access control device 1010-21 as a connection point, and the company C uses the access control device 1010− The ICS logical terminal address “9944” of 41 is a connection point. Access control device 101
0-21 and 1010-4 are ATM exchanges 10133-
21 and ATM exchanges 10133-11 and 10133-11.
0133-21 is connected via a relay network.

<< Preparation >> For ATM exchanges 10133-11 and 10133-21, ATM exchange 10133
-11 Internal Conversion Unit 1033-11 and ATM Switch 10
One PVC virtual channel connecting the conversion unit 1033-21 inside the 133-21 is set, and the virtual channel ID given to the conversion unit 1033-11 of this virtual channel is set.
To “33”, the conversion unit 1033-21 of this virtual channel.
Is assumed to be "44". VC address conversion table 1433-1 in conversion section 1033-11
1 and VC address conversion table 1 in conversion section 1033-21
For 433-21, registration as shown in FIG. 59 is performed.

<< Frame Flow of N-to-N Communication >> The flow of a frame for N-to-N communication will be described first with reference to frames transmitted from company X to companies A and C, respectively. The originating ICS network address “77” from company X to company A
11 ”and the terminating ICS network address“ 992 ”
The ICS network frame having "2"
By referring to the VC address conversion table 1433-11 in 33-1, it is transmitted to the PVC virtual channel of the virtual channel ID "33". The originating ICS network address “7711” and the incoming call I from company X to company C
Similarly, the ICS network frame having the CS network address “9944” has the virtual channel ID “3”.
3 "PVC virtual channel. Next, company Y
Will be described with frames transmitted to companies A and C, respectively. The ICS network frame having the outgoing ICS network address “7722” and the incoming ICS network address “9922” directed from the company Y to the company A can be obtained by referring to the VC address conversion table 1433-11 in the conversion unit 1033-11. , Virtual channel ID
It is transmitted to the PVC virtual channel of “33”. The originating ICS network address “7722” and the terminating ICS network address “9” directed from company Y to company C
Similarly, the ICS network frame with 944 "
Sent to the PVC virtual channel with virtual channel ID “33”.

Next, the flow of the frame in the reverse direction will be described with reference to frames transmitted from company A to companies X and Y, respectively. The ICS network address having the outgoing ICS network address “9922” and the incoming ICS network address “7711” directed from the company A to the company X can be obtained by referring to the VC address conversion table 1433-21 in the conversion unit 1033-2. , Virtual channel ID
It is transmitted to the PVC virtual channel of “44”. The originating ICS network address “9922” and the terminating ICS network address “7” directed from company A to company Y
The ICS network frame having “722” is transmitted to the PVC virtual channel with the virtual channel ID “44” by referring to the VC address conversion table 1433-2 in the conversion unit 1033-2. ICS with directed outgoing ICS network address "9944" and incoming ICS network address "7711"
The network frame is transmitted to the PVC virtual channel with the virtual channel ID “44”. The originating ICS network address “994” directed from company C to company Y
4 "and incoming ICS network address" 7722 "
Is also transmitted to the PVC virtual channel with the virtual channel ID “44”. As described above, one PVC virtual channel is shared and N-to-N
Communication takes place.

Embodiment 17 (Another Embodiment Using FR Network): Another embodiment in which the network inside the ICS of the present invention is configured using an FR network will be described. In this embodiment,
(1) Supplementary explanation of conventional technology related to FR, (2) Description of components, (3) Flow of frame using SVC, (4) PVC
(5) One-to-N communication or N-to-one communication using PVC, and (6) N-to-N communication using PVC will be described in this order. In this embodiment, the SVC or PV
It is possible to use either of the two types using C, or to use both types in a mixed manner.
Each case using is described. The intra-enterprise communication service and the inter-enterprise communication service described in the first embodiment and the virtual leased line service described in the second embodiment are realized by the access control device of the present invention. It is not necessary to consider frame communication separately, and in this embodiment, these communication services will be integrated and described.

(1) Supplementary explanation of prior art related to FR:
A supplementary description will be given of a conventional technique related to FR necessary for describing a method of configuring the inside of an ICS of the present invention using an FR network.

The frame relay uses a variable length communication information unit called a frame to perform communication, and designates a communication path in units of a frame, thereby storing and exchanging a frame in a circuit network and performing logical multiplexing. (A technique in which one physical line is multiplexed into a plurality of logical lines for use) and is standardized by the ITU.TI.233 recommendation and the like. A communication service using this technology is called a frame mode bearer service (Frame M
ode Bearer Service: hereinafter referred to as “FMBS”.
Service: hereinafter, referred to as “FSBS”) and a frame relay bearer service (hereinafter, referred to as “FRBS”) on the premise of permanent connection (PVC). The term "frame relay" may generally refer to only FRBS ("frame relay" in a narrow sense), but in the ICS of the present invention, "frame relay" refers to the entire FMBS including FSBS and FRBS. Name ("Frame Relay" in a broad sense)
"SV" especially when only FSBS is indicated.
The term “frame relay using PVC” is also referred to as “frame relay using PVC”, and especially the term “frame relay using PVC” is used to refer to only FRBS. In order to distinguish a frame transferred on the FR network from an ICS frame, it is particularly called an “FR frame”.

In the FR network, a plurality of logical lines can be set on a physical line as described above, and this logical line is called a logical channel. In order to identify a logical channel, identifiers respectively assigned to FR terminals connected to both ends of the logical channel (commonly referred to as communication devices connected to the FR network and performing communication using the FR network) are referred to as data link connection identifiers (Data link connection identifiers). Link Connection Identifier:
LCI ")). The logical channels include:
SVC and PVC are defined by the setting method. The SVC sets up a logical channel when necessary, and can establish a logical line with an arbitrary FR terminal at a required speed for a required time. The call setting of the logical channel is performed by the FR terminal that intends to start communication, and this method is standardized as a signaling method in ITU-T. To set up the call, the partner F who sets up the call
An address for identifying the R terminal (hereinafter referred to as “FR address”) is required, and the FR address is systematized so that each FR terminal can be uniquely identified in the FR network. The PVC sets call settings fixedly in the FR exchange and can be regarded as a virtual dedicated line from the viewpoint of the FR terminal.

For an established logical channel, the SV
C and PVC are assigned a DLCI for identifying a logical channel, and when transferring an FR frame, a DLCI is added to the DLCI bit portion of the FR frame address portion shown in FIG.
Set the CI. The format of the FR frame address part is 3
There are types, but FIG. 60 shows a 2-byte address part. The performance (channel performance) of the logical channel of the FR network includes a committed information rate (Committed Information Rate; hereinafter referred to as “CIR”) that is an information transfer rate that is guaranteed in a normal state (a state in which no congestion occurs).
And so on).

In order to transfer a communication frame such as an ICS network frame via the FR network, it is necessary to convert the communication frame into an FR frame as shown in FIG. When the FR frame is received, the reverse conversion is performed. As shown in FIG. 61, a communication frame (ICS network frame) is extracted from the FR frame and restored. This FR frame conversion is a standardized technology according to the ITU-T recommendations. The protocol header in the user data of the FR frame is standardized in RFC1490 of IETF.

(2) Description of components: FIGS. 62 and 63
Focusing on the FR network 1041 from FIG. 35 of FIGS. The internal structure of the unit 1032-2 is described, and the access control devices 1010-2 and 1010-1 described in FIGS. 34 to 36 are simplified. In the method of configuring the inside of the ICS using the FR network, the basic structure of the internal configuration of the access control device or the operation of the processing device in the access control device is the same as that described in the first embodiment.

The access control device 1010-5 is connected to the ICS9
ICS network addresses “7711” and “7722” are assigned as connection points (ICS logical terminals) between companies X and A, which are 25 users. The access control device 1010-7 is similarly provided with ICS network addresses “7733” and “7744” as connection points between the companies W and C, respectively. The access control device 1010-6 is similarly provided with ICS network addresses “9922” and “9933” as connection points of the companies Y and B, respectively, and the access control device 1010-8 is similarly assigned to the companies Z and D. As the connection point, the ICS network address “9”
944 ”and“ 9955 ”, where
In the embodiments shown in FIGS. 62 and 63, the companies X, Y, and the like shown as examples of users may be different bases of the same company performing intra-company communication, or perform inter-company communication. It may be a different company.

Conversion unit 1 inside FR exchange 10132-5
032-5 has an interface unit 1132-5, and the interface unit 1132-5 is
A communication line 1812-5 connecting the F.0-5 and the FR exchange 10132-5, and an access control device 1010-7 and the F
Communication line 1812 for connecting to R exchange 10132-5
Responsible for matching the interface (physical layer, data link layer protocol) with -7.
The conversion unit 1032-5 includes an SV unit in addition to the processing unit 1232-5.
FR address conversion table 1532- for call setup by C
5 and a DLC address conversion table 1432-5 for converting addresses from an ICS network address used for both SVC and PVC to a logical channel. The FR exchange 10132-5 includes an FR address management server 1632-5 as an information processing device for storing an FR address conversion table, and a DL in the case of using PVC.
By connecting to a DLC address management server 1732-5 as an information processing device for storing a C address conversion table,
Performs processing related to address translation. FR exchange 1013
Also regarding the components related to 2-6, the FR exchange 101
Same as 32-5. In this embodiment, the access control device 1010-5 is connected to the FR exchange 10132-5 via the communication line 1812-5, and the access control device 1010-7 is connected to the FR exchange 10132-5 via the communication line 1812-7. 6 via a communication line 1812-6,
The access control device 1010-8 is connected to the communication line 181.
Each is connected to the FR exchange 10132-6 through 2-8. The FR exchange 10132-5 provides the internal conversion unit 1032-5 with the only FR address "297" in the network.
7 "is set, and the FR exchange 10132-6 is
A unique FR address “2999” in the network is set in the internal conversion unit 1032-6. FR exchange 1013
2-5 and 10132-6 are connected via the FR relay network, but in this example, they are connected via the FR exchange 10132-7 representing the FR relay network.

(3) Flow of frame using SVC: As shown in FIGS. 62 and 63, the network inside the ICS is composed of an FR network, and the SVC is used as a communication path in the FR network.
Will be described with reference to an example of an ICS user frame issued from a terminal in company X to a terminal in company Y.

<< Preparation >> FR address conversion table 1532 in conversion section 1032-5 inside FR exchange 10132-5
-5, the destination ICS indicating the destination of the ICS network frame to be transferred from the conversion unit 1032-5 to the FR network.
A network address, an incoming FR address indicating a destination for setting up a logical channel on the FR network, and a channel performance such as an authorized information rate required for the logical channel are registered. Also, the FR address conversion table 153 in the conversion unit 1032-6 inside the FR exchange 10132-6.
The same registration is made for 2-6.

As an embodiment, FR address conversion table 1532
The values to be set in -5 are: an incoming ICS network address; an address for communication with the company Y;
The ICS network address “9922” assigned to the ICS logical terminal of the access control device 1010-6 is set, and the access control device 101 is set as the incoming FR address.
The FR address “2999” assigned only in the FR network is registered in the conversion unit 1032-6 inside the FR exchange 10132-6 to which 0-6 is connected. In the present embodiment, a certified information rate of 64 Kbps is set for the channel performance. The contents registered in the FR address conversion table 1532-5 are also written and stored in the FR address management server 1632-5.

The values to be set in the FR address conversion table 1532-6 are the incoming ICS network address, the address for communication with the company X, and the ICS assigned to the ICS logical terminal of the access control device 1010-5.
Set the network address “7711” and set the incoming FR
The conversion unit 1032 in the FR exchange 10132-5 to which the access control device 1010-5 is connected as an address
Register the FR address “2977” uniquely assigned to −5 in the FR network. In the present embodiment, a certified information rate of 64 Kbps is set for the channel performance. The contents registered in the FR address conversion table 1532-6 are also written and stored in the FR address management server 1632-6.

<< ICS Network Frame Transfer from Access Control Apparatus >> Issued from the terminal of company X to the terminal of company Y connected to access control apparatus 1010-6 via access control apparatus 1010-5. The ICS user frame is encapsulated in ICS when passing through the access control device 1010-5, and becomes an ICS network frame F1 having an originating ICS network address “7711” and an incoming ICS network address “9922” inside the ICS frame header. . The ICS network frame F1 is transmitted from the access control device 1010-5 to the FR exchange 10132-5, and the interface unit 113 processes electric signal conversion / matching of a communication path.
Through 2-5, it reaches the conversion unit 1032-5. Hereinafter, description will be made with reference to the flowchart of FIG.

<Acquisition of DLCI> Upon receiving the ICS network frame F1 (step S1701), the conversion unit 1032-5 converts the frame into the FR exchange 10132.
In order to transfer data to -5, the S realizes the FR network communication path in the ICS 925 determined by the correspondence between the outgoing ICS network address “7711” and the incoming ICS network address “9922” in the ICS frame header.
It is necessary to determine the DLCI of the VC logical channel. SV
In the case of the communication based on C, at the time of receiving the ICS network frame, there may be a case where the logical channel corresponding to this communication path has been established and a case where it has not been established yet. The processing device 1232-5 first checks whether the logical channel corresponding to the pair of the source ICS network address “7711” and the destination ICS network address “9922” is DLC in order to know whether the logical channel has been established.
It is searched whether it is registered in the address conversion table 1432-5 (step S1702).
It knows that the desired logical channel has been established. That is, from the DLC address conversion table 1432-5, the transmission I
DL corresponding to the pair of CS network address “7711” and incoming ICS network address “9922”
In addition to acquiring that the CI is “16”, it is known from the simultaneously acquired channel type value “10” that this logical channel is communication based on SVC. If D
If there is no registration in the LC address conversion table 1432-5, the logical channel to be obtained is established by performing << call setting >> described later, and at that time the DLC address conversion table 1432 is established.
The DLCI is obtained from the information registered on -5 (step S1703).

<< Call Setup >> The DLCI corresponding to the communication path determined by the correspondence between the originating ICS network address and the terminating ICS network address is DLC.
If not registered in the address conversion table 1432-5 ", that is, if the logical channel corresponding to the communication path has not been established yet, the following call setting is performed, and the ICS
It is necessary to establish a logical channel in the FR network constituting the 925, and an operation example of this call setup will be described.

Processing unit 1232-of conversion unit 1032-5
5 refers to the DLC address conversion table 1432-5,
The originating ICS network address “77” inside the ICS frame header of the ICS network frame F1
11 "and the incoming ICS network address" 9922 "
Know that there is no DLCI registration corresponding to the pair,
Referring to the FR address conversion table 1532-5, the incoming ICS
Find the incoming ICS network address "9922" registered in the FR address conversion table 1532-5 that matches the network address "9922", and obtain the corresponding incoming FR address "2999" and the corresponding channel performance "64K". (Step S1705).
As described in the << Preparation >> section, the access control device 1010-6 having the ICS logical terminal to which the incoming ICS network address “9922” is assigned as a connection point, receives the incoming FR address “2999”. FR to be connected
This address is set to be unique in the FR network for the conversion unit 1032-6 inside the exchange 10132-6.

The processing device 1232-5 receives the received F
Using the R address "2999", the FR exchange 10132
A request for call setting is made to -5, and at this time, a channel performance such as an authorized information rate of the logical channel simultaneously obtained from the FR address conversion table 1532-5 is also requested (step S1706). When the FR exchange 10132-5 receives the call setup request, the FR exchange 10132-5 uses a signaling method that is provided as a standard in the FR exchange itself as a conventional technique.
, And establishes a logical channel connecting the conversion units 1032-5 and 1032-6 in the FR exchange network reaching the FR exchange 10132-6. The DLCIs assigned to identify the established logical channels are converted from the FR exchanges into conversion units 1032-5 and 1032
6, the value is notified from the calling side FR exchange 10132-5 (for example, "16") and the value is notified to the called side FR exchange 10
The value notified from 132-6 (for example, “26”)
They are not necessarily the same value. In conversion section 1032-5, FR
DLCI "16" notified from exchange 10132-5
With the originating ICS network address “7711” and the terminating ICS network address “9922” of the ICS network frame F1.
432-5 (step S1707), and holds it on the DLC address conversion table 1432-5 while the connection of this logical channel is established. When the logical channel connection is no longer required, the conversion unit 1032-5 requests the FR exchange 10132-5 to release the logical channel, and together with the DLC address conversion table 1432-5, the DLCI
The registration corresponding to “16” is deleted. The conversion unit 103
The registration in the DLC address conversion table 1432-6 in 2-6 will be described later.

<< Transmission of Frame >> The processing unit 1232-5 of the conversion unit 1032-5 receives the logical channel (DLCI "16") established according to the above description from the access control unit 1010-5. The converted ICS network frame F1 is converted into an FR frame as shown in FIG. 61, and is transferred to the FR exchange 10132-5 (step S1704).

<< Transfer of FR Frame >> The FR frame S1 obtained by converting the ICS network frame F1 by the above-described method is transferred from the FR exchange 10132-5 to the relay FR exchange 10132-5, and furthermore, The data is transferred from the exchange 10132-5 to the FR exchange 10132-6 as an FR frame S2. Hereinafter, description will be made with reference to the flowchart in FIG.

<< Operation after Arrival of Frame >> FR Frame S
2 arrives at the FR exchange 10132-6 (step S1710), the FR frame is
2-6 to conversion unit 1 inside FR exchange 10132-6
032-6. The conversion section 1032-6 restores the ICS network frame from the FR frame as shown in FIG. 61 (step S1711). Although the restored ICS network frame is described as ICS network frame F2 in FIG. 63, the contents of the frame are the same as ICS network frame F1.
The ICS network frame F2 has an incoming ICS network address “99” inside the ICS frame header.
22 "access control device, ie IC
IC with S network address "9922"
The data is transferred to the access control device 1010-6 having the S logical terminal (step S1712).

At this time, the conversion unit 1032-6 uses the ICS
The originating ICS network address "7711" of the network frame F2, the terminating ICS network address "9922", the channel type "10" indicating the SVC known at the time of the incoming call, and the SVC logical channel are assigned at the time of call setup. And the obtained DLCI "26",
It is registered in the DLC address conversion table 1432-6 (step S1714). At this time, the outgoing ICS network address “7711” of the ICS network frame F2 is sent to the incoming ICS network address of the DLC address conversion table 1432-6, and the incoming ICS network address “9922” of the ICS network frame F2 is sent to the DLC.
Write in the reverse address to the originating ICS network address in the address translation table 1432-6. However, at the time of this registration, if the same content as the content to be registered has already been registered in the DLC address conversion table 1432-6,
No registration is performed. The address conversion information registered in the DLC address conversion table 1432-6 is held on the DLC address conversion table 1432-6 while the connection of the corresponding logical channel (DLCI “26” in this example) is maintained. You.

<< Flow in the Reverse Direction of Frame >> Next, the flow in the reverse direction of the ICS frame, that is, the flow from the company Y to the company X, is performed on the premise that the SVC logical channel is set up. 62 and 63 will be described in the same manner.

The ICS user frame issued from the company Y to the company X is encapsulated in the ICS when passing through the access control device 1010-6, so that the originating ICS network address “9922” and the terminating ICS network address “7711” are set. IC inside ICS frame header
Converted to S network frame F3, FR exchange 1
The data is transferred to the conversion unit 1032-6 inside 0132-6.
The processing device 1232-6 of the conversion unit 1032-6 is the same as that shown in FIG.
Is performed, the DLC address conversion table 1432-6 of the conversion unit 1032-6 already has the calling IC
DLCI “2” corresponding to S network address “9922” and incoming ICS network address “7711”
Since “6” is registered as the channel type “10”, that is, SVC, it operates according to the flow of (1) in FIG.
The ICS network frame F3 is converted into an FR frame (FR frame S3) for DLCI "26" and transferred.

The FR frame S3 is relay-transferred through the FR network to become an FR frame S4, which is used as the FR exchange 10132-.
5 and the conversion unit 1032-5 outputs the DLCI "1"
6 ”, and is restored as an ICS network frame F4 having the same content as the ICS network frame F3.
In the case of -5, the source ICS network address “9922” and the destination ICS network address “7” that are inside the ICS frame header of the ICS network frame F4
Since the pair with “711” is already registered in the DLC address conversion table 1432-5 in a form in which transmission and reception are reversed, registration in the DLC address conversion table is not performed, and the ICS network frame F4 is transmitted to the access control device 1010-5. Transfer to

<< Application Example to Half Duplex Communication >> As described above,
The internal network of CS925 is composed of FR network,
When transferring a CS frame from company X to company Y,
Conversely, with regard to the transfer from company Y to company X, 1
The implementation using the SVC logical channel has been described. Such a transfer in the reverse direction is performed by, for example, ICS.
Frame (transfer) from the client terminal of the company X connecting to the ICS to the server terminal of the company Y connecting to the ICS
When this is applied to a response frame (reverse transfer) from the server terminal of company Y to the client terminal of company X for this request frame, only one-way communication is performed temporarily, but the communication direction is switched for each time zone. This is an application example of half-duplex communication that realizes two-way communication.

<< Application Example to Full-Duplex Communication >> The logical channel itself set in the FR network conforms to full-duplex communication,
That is, simultaneous two-way communication is possible. In the FR network, a transfer using one SVC logical channel and a reverse transfer are performed by, for example, request frames (transfer) from a plurality of client terminals of the company X connected to the ICS to a plurality of server terminals of the company Y connected to the ICS. When applied to a response frame (reverse transfer) from the plurality of server terminals of the company Y to the plurality of client terminals of the company X in response to the request frame, the frame between the client terminal and the server terminal is asynchronously transferred. Becomes the communication path 1
The two SVC logical channels are simultaneously subjected to two-way communication, which is an application example of full-duplex communication.

(4) Flow of frame using PVC: IC
The internal network of S925 is constituted by the FR network
An embodiment in which PVC is applied as a communication path in the R network will be described using an ICS user frame issued from a terminal of company W to a terminal of company Z as an example.

<< Preparation >> DLC address conversion table 143 in conversion section 1032-5 inside FR exchange 10132-5
2-5, an originating ICS network address of an ICS network frame to be transferred from the conversion unit 1032-5 to the FR network, an incoming ICS network address, and a communication path of the originating / terminating ICS network address pair as an FR network (FR network). Exchange 10132-5 and FR exchange 1
The DLCI of the PVC fixedly set to the communication path with 0132-6) and the channel type indicating that the logical channel is PVC are registered. This registration is different from the case of the SVC and the FR exchange (1013
2-5, 10132-5, and 10132-6), when the PVC logical channel is set, it is registered in the DLC address conversion table 1432-5 at the same time,
That is, the PVC logical channel is fixedly held until the setting is released. Also, the DLC address conversion table 1432-6 in the conversion unit 1032-6 inside the FR exchange 10132-6.
It is registered and held in the same way. The DLCI of PVC
Is assigned to each FR exchange when a PVC is fixedly connected between the FR exchanges.

The value set in the DLC address conversion table 1432-5 is an address for communication with the company W as an originating ICS network address, that is, an IC assigned to the ICS logical terminal of the access control device 1010-7.
S network address "7733" is set,
The communication address with the company Z as the CS network address, that is, the ICS network address “994 assigned to the ICS logical terminal of the access control device 1010-8.
4 ". Further, as the DLCI, the FR exchange 1
PVC logical channel ID assigned to 0132-5
“18” is set, and a value “20” indicating PVC is set in the channel type. Also, the DLC address conversion table 14
The settings to be registered in the 32-5 are also written and stored in the DLC address management server 1732-5. Also, D in conversion section 1032-6 inside FR exchange 10132-6 is
Similar settings are made in the LC address conversion table 1432-6 in a manner that the originating ICS network address and the terminating ICS network address are reversed. In this case, even if the same PVC is indicated, the DLCI may have a different value from the DLC address conversion table 1432-5.

The value set in the DLC address conversion table 1432-6 is an address for communication with the company Z as the originating ICS network address, that is, the ICS assigned to the ICS logical terminal of the access control device 1010-8.
Set the network address “9944” and set the incoming IC
The address for communication with the company W as the S network address, that is, the ICS network address “773 assigned to the ICS logical terminal of the access control device 1010-7.
3 "is set. Further, the FR exchange 101 is set in the DLCI.
"28" is set as the ID of the PVC logical channel allocated to 32-6, and "20" indicating PVC is set as the channel type. Also, the DLC address conversion table 14
The settings to be registered in the DLC 32-6 are also written and stored in the DLC address management server 1732-6.

<< ICS Network Frame Transfer from Access Control Device >> As described in Embodiment-1, a company connected to the access control device 1010-8 from the terminal of the company W via the access control device 1010-7. The ICS user frame issued to the terminal of Z is encapsulated in the ICS when passing through the access control device 1010-7, and the source ICS network address “7733” and the destination ICS network address “9944” are stored in the IC.
This is the ICS network frame F5 inside the S frame header. The ICS network frame F5 is transmitted from the access control device 1010-7 to the FR exchange 10132-.
5 and reaches the conversion section 1032-5 via the interface section 1132-5.

<< Acquisition of DLCI >> Processing Unit 1232-5
Uses the outgoing ICS network address “7733” and the incoming ICS network address “9944” in the header of the received ICS network frame F5, refers to the DLC address conversion table 1432-5, and communicates with this ICS network address pair. Is obtained that the DLCI of the logical channel set as “18” is “18”. At the same time, it is known from the acquired channel type value “20” that this logical channel is PVC.

<< Transmission of Frame >> Processing Unit 1232-5
Is the PVC logical channel “1” obtained as described above.
8 ", the ICS network frame F5 received from the access control device 1010-7 is converted into an FR frame and transmitted to the FR exchange 10132-5.
The method of R frame conversion is the same as that described in the example of SVC. FIG. 64 is a flowchart showing the processing procedure of the above-described conversion unit 1032-5, and the PVC always passes the flow (1).

<< Transfer of FR Frame >> FR frame S1 obtained by converting ICS network frame F5
Is the relay FR exchange 10 from the FR exchange 10132-5.
132-5, and then the FR exchange 10132-5.
Is transferred to the FR exchange 10132-6 as an FR frame S2, but this operation is the same as in the case of SVC.

<< Operation After Arriving at Frame >> FR Frame S
2 arrives at the FR exchange 10132-6, the FR frame S2 is transmitted from the FR exchange 10132-6 to the FR exchange 1
It is transferred to the conversion unit 1032-6 inside 0132-6. The conversion unit 1032-6 restores the ICS network frame from the received FR frame, but this operation is the same as in the case of SVC. Although the restored ICS network frame is described as ICS network frame F6 in FIG. 63, the contents of the frame are the same as ICS network frame F5. The ICS network frame F6 receives the incoming call I inside the ICS frame header.
The data is transferred to the access control device identified by the CS network address “9944”, that is, the access control device 1010-8 having the logical terminal assigned the ICS network address “9944”. The above conversion unit 103
FIG. 65 is a flowchart showing the processing procedure of 2-6, and the PVC always passes the flow (1).

<< Flow in the Reverse Direction of Frame >> Next, the flow in the reverse direction of the ICS frame, that is, the flow from the company Z to the company W, will be described using a PVC logical channel as a communication path. When the ICS user frame issued from the company Z to the company W passes through the access control device 1010-8,
S encapsulated, the originating ICS network address “9944” and the terminating ICS network address “7
733 "is converted to an ICS network frame F7 having an ICS frame header inside the ICS frame header, and the FR exchange 101
The data is transferred to the conversion unit 1032-6 inside the 32-6. The processing unit 1232-6 of the conversion unit 1032-6 performs processing according to the flow of FIG. 64. In this case, the conversion unit 1032-6
The DLC address conversion table 1432-6 of FIG.
DLCI corresponding to S network address "9944" and terminating ICS network address "7733"
Since “28” is registered, the ICS network frame F7 is converted into an FR frame and transmitted to DLCI “28”.

An FR frame transferred through the FR network is
DLC is added to the conversion unit 1032-5 of the R exchange 10132-5
It is received from the logical channel having I “18” and restored as an ICS network frame F8 having the same contents as the ICS network frame F7. However, the conversion unit 1032-5 determines that the originating ICS network address “994” held in the header of the ICS network
DLC address conversion table 1 in the form that the pair of "4" and the incoming ICS network address "7733" are reversed in origin and destination.
432-5, and the DLCI "18" for this transmission / reception address pair has the channel type value "2".
Since registration is obtained from "0" as a PVC, the registration process is not performed, and the ICS network frame F8 is transferred to the access control device 1010-7.

<< Example of Application to Half-Duplex Communication >>
Although the internal network of the CS 925 is configured using the FR network, and the embodiment of the transfer of the ICS frame using the PVC has been described, the PVC and the SVC may determine whether the logical channel is fixedly set or call setting when necessary. The operation itself for transferring the FR frame to the set logical channel is not different. Therefore, when the ICS is configured using the FR network and the PVC network is used for the FR network, an example of application to half-duplex communication is an example of application to half-duplex communication using the SVC logical channel. Are equivalent.

<< Application Example to Full-Duplex Communication >> For the same reason as the application example to the half-duplex communication, the application example to the full-duplex communication of PVC is the application example to the full-duplex communication in SVC. Is equivalent to

(5) One-to-N communication or N-to-one communication using PVC: In the above description, one logical channel of PVC is a communication path connecting one company (base) and one company (base). In the ICS, the embodiment in which one ICS logical terminal is used as a communication path for connecting one ICS logical terminal has been described, but one logical channel of PVC is used as a communication path between one ICS logical terminal and a plurality of ICS logical terminals. It is possible to share as. With reference to FIG. 66, an example of such one-to-N communication or N-to-one communication will be described.

<< Description of Constituent Elements >> Company X uses the ICS logical terminal provided with the ICS network address “7711” in the access control device 1010-52 as a connection point, and the access control device 1010-52 is a FR exchange. 10
132-52. The partners to be connected from the company X are the companies A to D, and the company A is the access control device 1
ICS network address “992” in 010-62
The ICS logic terminal assigned “2” is set as a connection point, and the company B
Is an ICS logical terminal provided with the ICS network address “9923” in the access control device 1010-62 as a connection point. Similarly, company C has access control device 1
ICS network address “994” in 010-82
The ICS logic terminal assigned 4 "is a connection point, and the company D
Is an ICS logical terminal provided with the ICS network address “9955” in the access control device 1010-82 as a connection point. The access control devices 1010-62 and 1010-82 are connected to the FR exchange 10132-62, and the FR exchanges 10132-52 and 10132-62.
Are connected via an FR relay network.

<< Preparation >> For FR exchanges 10132-52 and 10132-62, FR exchange 10132-5
2 internal conversion unit 1032-52 and FR exchange 10132
One PVC logical channel is set to connect the conversion unit 1032 to the conversion unit 1032 in the −62. DLC given to
Let I be "26". DLC in conversion unit 1032-52
Address conversion table 1432-52 and conversion unit 1032-6
6 for the DL address conversion table 1432-62 in FIG.
Registration as shown in FIG.

<< Flow of Frame for One-to-N Communication >> The flow of the frame for one-to-N communication will be described with reference to frames transmitted from company X to companies A to D, respectively. Outgoing ICS network address "7711" from company X to company A
And the ICS network frame having the incoming ICS network address “9922” is converted by the conversion unit 1032-5.
By referring to the DLC address conversion table 1432-52 at 2, the data is transmitted to the PVC logical channel of DLCI “16”. The ICS network frame having the originating ICS network address “7711” and the terminating ICS network address “9933” directed from the company X to the company B is also transmitted to the DLCI “16” PVC logical channel. Outgoing call I from company X to company C
CS network address "7711" and incoming ICS
An ICS network frame having a network address "9944", an originating ICS network address "7711" directed from company X to company D, and an incoming IC
Similarly, the ICS network frame having the S network address “9955” also has a PVC of DLCI “16”.
Sent to a logical channel. This indicates that one-to-N (company X-company A-D) communication is performed by sharing one PVC logical channel. Reverse flow of the frame,
That is, the case where the frame is transferred from the companies A to D to the company X will be described below.

<< Flow of N-to-One Communication Frame >> The flow of one-to-N communication frames will be described with reference to frames transmitted from companies A to D to company X, respectively. Outgoing ICS network address "9922" from company A to company X
And the ICS network frame having the incoming ICS network address “7111” is converted by the conversion unit 1032-6.
2, by referring to the DLC address conversion table 1432-62, it is transmitted to the PVC logical channel of DLCI "26". The ICS network frame having the originating ICS network address “9933” and the terminating ICS network address “7711” directed from the company B to the company X is also transmitted to the DLCI “26” PVC logical channel. Outgoing call I from company C to company X
CS network address "9944" and incoming ICS
ICS network frame with network address "7711", origination I directed from company D to company X
CS network address "9955" and incoming ICS
The ICS network frame having the network address “7711” is also transmitted to the DLCI “26” PVC logical channel. This means that N to 1 (Company A)
ＤD vs. company X) indicates that communication is performed by sharing one PVC logical channel.

(6) N-to-N communication using PVC: 1: N
By the same method as the communication, it is possible to share one logical channel of the PVC as a communication path between a plurality of ICS logical terminals. Referring to FIG.
An embodiment of the N-to-N communication will be described.

<< Description of Constituent Elements >> Company X sets the ICS logical terminal address “771” of access control apparatus 1010-13.
1 "is a connection point, and the company Y
-13, the ICS logical terminal address “7722” is set as a connection point, and the access control device 1010-13 is connected to the FR exchange 1
0132-13. The other party to connect from company X or company Y is company A or company C, and company A
Uses the ICS logical terminal address “9922” of the access control device 1010-23 as a connection point, and the company C sets the ICS logical terminal address “992” of the access control device 1010-43.
44 "is a connection point. The access control device 1010
-23 and 1010-43 are FR exchanges 10132-2
3 and FR exchanges 10132-13 and 101
32-23 are connected via an FR relay network.

<< Preparation >> For FR exchanges 10132-13 and 10132-23, FR exchange 10132-1
3 internal conversion unit 1032-13 and FR exchange 1013
One PVC logical channel connecting the conversion units 1032-23 inside the 2-23 is set, the DLCI given to the conversion unit 1032-13 of this logical channel is set to "16", and the conversion unit 1032-23 of the logical channel is set. DLC given to
Let I be "26". DLC in converter 1032-13
Address conversion table 1432-13 and conversion section 1032-2
3 is registered in the DLC address conversion table 1432-23 in FIG.

<< Flow of N-to-N Communication Frame >> The flow of N-to-N communication frame will be described first with reference to frames transmitted from company X to companies A and C, respectively. The originating ICS network address “7” from company X to company A
711 ”and the terminating ICS network address“ 992 ”
The ICS network frame having "2"
By referring to the DLC address conversion table 1432-13 at 32-13, it is transmitted to the PVC logical channel of DLCI "16". Also, an ICS having a source ICS network address “7711” and a destination ICS network address “9944” directed from company X to company C
Similarly, the network frame has a P of DLCI "16".
Sent to VC logical channel. Next, a description will be given using frames transmitted from the company Y to the companies A and C, respectively. An ICS network frame having a sending ICS network address “7722” and a receiving ICS network address “9922” directed from company Y to company A is
DLC address conversion table 143 in conversion section 1032-13
2-13, the PVC of DLCI "16"
Sent to a logical channel. Also, the originating ICS network address “772” directed from company Y to company C
2 "and incoming ICS network address" 9944 "
ICS network frame with
Sent to the "16" PVC logical channel.

Next, the flow of the frame in the reverse direction will be described with reference to frames transmitted from company A to companies X and Y, respectively. For the ICS network address having the outgoing ICS network address “9922” and the incoming ICS network address “7711” directed from the company A to the company X, refer to the DLC address conversion table 1432-23 in the conversion unit 1032-23. And DLCI
Sent to the "26" PVC logical channel. Also, an ICS network frame having a sending ICS network address “9922” and a receiving ICS network address “7722” directed from company A to company Y is as follows:
DLC address conversion table 143 in conversion section 1032-23
2-23, the PVC of DLCI "26"
Sent to a logical channel. Similarly, the originating ICS network address “9” directed from company C to company X
944 ”and the incoming ICS network address“ 771 ”
An ICS network frame with "1" is a DLCI
Sent to the "26" PVC logical channel. The originating ICS network address “9944” and the terminating ICS network address “7” directed from company C to company Y
The ICS network frame with “722” is also D
Sent to the PVC logical channel of LCI "26". According to the above description, one PVC logical channel is shared and N
It is indicated that communication with N is performed.

Example-18 (telephone line, ISDN line,
CATV line, satellite line, IPX line, accommodating mobile telephone line): The connection to the access control device, which is the access point to the ICS of the present invention, is performed by the LAN as described in the first and second embodiments. Communication line (exclusive line, etc.), telephone line, ISDN line, C
An ATV line, a satellite line, an IPX line, and a mobile phone line can be accommodated, and another embodiment different from the tenth embodiment will be described.

FIGS. 68 to 71 show a telephone line, an ISDN line, a CATV line, a satellite line,
This shows an example of a system for accommodating a PX line and a mobile telephone line, and line units 6011-1 and 6011-2 are telephone line conversion units 6030-1 and 6030-, respectively.
2. ISDN line conversion units 6029-1 and 6029-
2. CATV line conversion units 6028-1 and 6028-
2. Satellite link converters 6027-1 and 6027-2, I
PX converters 6026-1 and 6025-2, and mobile phone converters 6025-1 and 6025-2.
The telephone line conversion units 6030-1 and 6030-2 are provided with a physical layer and a data link layer (OSI (Open Systems Interconnection)) between the telephone lines 6160-1 and 6160-2 and the access control devices 6010-1 and 6010-2. It has a function of conversion and reverse conversion of functions corresponding to the first and second layers of the communication protocol). Also, the ISDN line conversion units 6029-1 and 6029-2 provide the
161-1 and 6161-2 and the access control device 601
It has a function of conversion and reverse conversion of a function corresponding to a physical layer and a data link layer between 0-1 and 6010-2, and CATV line conversion units 6028-1 and 6028-2.
Has a function of conversion and reverse conversion of functions corresponding to the physical layer and the data link layer between the CATV lines 6162-1 and 6162-2 and the access control devices 6010-1 and 6010-2. Further, the satellite link converter 6027-
1 and 6027-2 are satellite lines 6163-1 and 616-1.
63-2 and access control device 6010-1 or 601
It has a function of conversion and reverse conversion of a function corresponding to a physical layer and a data link layer between the IPX conversion unit 6 and the IPX conversion unit 6.
026-1 and 6026-2 are IPX lines 6164
1 and 6164-2 and a function of conversion and reverse conversion of functions corresponding to a physical layer and a data link layer between the access control devices 6010-1 and 6010-2. The mobile phone conversion units 6026-1 and 6026-2 have functions corresponding to a physical layer and a data link layer between the mobile phone wireless lines 6165-11 and 6165-2 and the access control devices 6010-1 and 6010-2. It has conversion and inverse conversion functions.

ICS frame interface network 6050
Is the ICS frame interface network 10 shown in FIG.
This is a network of the same type as 50, and transfers an ICS network frame in accordance with RFC791 or RFC1883 in the same format. X. 25 network 6040 is also the X.25 network of FIG. This is the same type of network as the X.25 network 1040. The frame is converted into a frame of 25 format and transferred, and finally converted back to the format of the ICS network frame and output. The FR network 6041 is also the same type of network as the FR network 1041 in FIG. 35, accepts an ICS network frame, converts it into a frame relay format frame, transfers it, and finally converts it back into an ICS network frame format and outputs it. I do. The ATM network 6042 is also shown in FIG.
This is a network of the same type as the ATM network 1042, which accepts an ICS network frame, converts it into an ATM format frame, transfers it, and finally converts it back into an ICS network frame format and outputs it. The satellite communication network 6043 is the same type of network as the satellite communication network 1043 in FIG.
The S network frame is accepted, the information is transferred using a satellite, and finally the data is converted back to the ICS network frame format and output. Also, the CATV network 6044
Accepts ICS network frames and CATV
After converting the frame into a frame, transfer the frame inside
The data is converted back to the CS network frame format and output.

<< Common Preparation >> Access Control Unit 6010
The conversion table 6013-1 in -1 includes the originating ICS network address, the sender ICS user address, and the receiver IC.
S user address, incoming ICS network address,
Contains request identification. This request identification represents, for example, “1” for the intra-company communication service, “2” for the inter-company communication service, “3” for the virtual leased line connection, and “4” for the ICS network server connection. The conversion table 6013-1 includes Example-1 and Example-2.
The registered address is described in the same manner as the above. I
The CS network server 670 has the ICS user address “2000” and the ICS network address “782”.
1 ", which is connected to the access control device 6010-1 via the ICS network communication line 6081-1.
013-1 includes the recipient ICS of the ICS network server 670.
The user address “2000”, the incoming ICS network address “7821”, and the request identification “4” are registered.

The operation will be described with reference to the flowchart in FIG.

<< Communication from Telephone Line to ISDN Line >> The user 6060-1 has the sender ICS user address “3”.
400 ”and the ICS user frame F110 of the receiver ICS user address“ 2500 ”
1 to the access control device 6010-1. The access control device 6010-1 receives the ICS user frame F110 from the telephone line conversion unit 6030-1 of the ICS network address “7721” (Step S10).
1800), ICS network address “7721”
In the conversion table 6013-1, it is checked whether the request identification is registered as the virtual leased line connection "3" (step S1801). In this case, you are not registered,
Next, the receiver ICS user address "2500" written on the ICS user frame F110 is converted to the conversion table 60.
13-1 (step S1803),
Further, it is checked whether or not the request identification is registered as inter-company communication “2” (step S1804). In this case, since it is registered, the incoming IC
The S network address “5522” is acquired, and processing such as charging for inter-company communication is performed (step S180)
5), the ICS user frame F110 is encapsulated in the ICS (step S1820), converted into the ICS network frame F120, and the ICS network communication line 6080-1 is converted.
Is transmitted to the ICS frame transfer network 6030 (step S1825). ICS network frame F12
0 is X. The access control device 6010-2 reaches the access control device 6010-2 via the 25 network 6040 and the ICS network communication line 6080-2, where the ICS user frame F110 is restored by decapsulating the ICS and the user 6061 having the receiver ICS user address "2500" -2 is reached.

<< Communication from ISDN Line to CATV Line
>> User 6061-1 has a sender ICS user address “3500” and a receiver ICS user address “260”
An ICS user frame Fll of "0" is transmitted to the access control device 6010-1 via the ISDN line 6161-1. The access control device 6010-1 transmits the ISDN line converter 6 of the ICS network address "7722".
The ICS user frame Flll is received from 029-1 (step S1800), and it is checked whether or not the request identification is registered as the virtual leased line connection "3" in the conversion table 6013-1 (step S1800). Step S1801). In this case, since the virtual leased line connection “3” is registered, the destination ICS network address “5523” is acquired from the conversion table 6013-1, and processing such as charging for the leased line connection is performed (step S1802). User frame Fllll IC
S (Step S1820), converts the packet into an ICS network frame F121,
The data is transmitted to the ICS frame transfer network 6030 via 080-1 (step S1825).

In the connection of the virtual leased line, the sender ICS user address and the receiver ICS user address written in the ICS network frame Fll need not be used inside the access control device. Next, the ICS network frame F121 is, for example, F
The access control device 6010-2 reaches the access control device 6010-2 via the R network 6041 and the ICS network communication line 6080-2.
Through the CATV line unit 6028-2 to which
User 6 connected from CATV line 6162-2
062-2 is reached.

<< Communication from the CATV Line to the Satellite Line >> The user 6062-1 receives the sender ICS user address “3”.
600 ”and the ICS user frame F112 of the receiver ICS user address“ 2700 ”are transmitted to the CATV line 616.
The data is sent to the access control device 6010-1 via 2-1. The access control device 6010-1 transmits the CATV line conversion unit 602 of the ICS network address “7723”.
8-1 is received from the ICS user frame F112 (step S1800), and it is checked whether or not this ICS network address “7723” is registered in the conversion table 6013-1 as the request identification as the virtual leased line connection “3”. (Step S1801). In this case, since it is not registered, the receiver ICS user address “2700” written on the ICS user frame F112 is next.
Are registered in the conversion table 6013-1 (step S
1803) Further, it is checked whether or not the request identification is registered as inter-company communication "2" (step S180).
4). In this case, since the inter-company communication “2” is registered, the incoming ICS network address “5524” is acquired from the conversion table 6013-1, and processing such as charging for the inter-company communication is performed (step S1805). ICS encapsulation of the frame F112 (step S
1820), it is converted into an ICS network frame F122 and transmitted to the ICS frame transfer network 630 via the ICS network communication line 6080-1 (step S1825).
The ICS network frame F120 is, for example, an ATM.
The access control device 6010-2 reaches the access control device 6010-2 via the network 6042 and the ICS network communication line 6080-2, and is decapsulated by the ICS to restore the ICS user frame frame F112. To reach.

<< Communication from Satellite Line to IPX Line >> The user 6063-1 uses the sender ICS user address “37”.
00 ”and the ICS user frame F113 of the receiver ICS user address“ 2800 ”are stored in the telephone line 6163-
1 to the access control device 6010-1. The access control device 6010-1 receives the ICS user frame F113 from the satellite channel converter 6027-1 of the ICS network address “7724” (step S100).
1800), ICS network address “7724”
Is checked whether the request identification is registered as the virtual leased line connection “3” on the conversion table 6013-1 (step S1801). In this case, since it has not been registered, the receiver ICS user address “2800” written on the ICS user frame F113 next is converted to the conversion table 6013-.
1 (step S1803), and checks whether the request identification is registered as inter-company communication "2" (step S1804). In this case, since the inter-company communication “2” is registered, the incoming ICS network address “5525” is acquired from the conversion table 6013-1, and processing such as charging for the inter-company communication is performed (step S1805). IC with frame F113
S (Step S1820), converts the packet into an ICS network frame F123,
The data is transmitted to the ICS frame transfer network 6030 via 080-1 (step S1825). The ICS network frame F123 reaches the access control device 6010-2 via, for example, the ICS frame interface network 6050 and the ICS network communication line 6080-2, and is decapsulated with the ICS to restore the ICS user frame F113.
User 60 of recipient ICS user address "2800"
64-2 is reached.

<< Communication from IPX Line to Cellular Phone Line >>
The user 6064-1 has a sender ICS user address “0012” and a receiver ICS user address “290”.
ICS user frame F114 of IPX line 6
The data is transmitted to the access control device 6010-1 via 164-1. The access control device 6010-1 transmits the IPX line conversion unit 602 of the ICS network address “7725”.
ICS user frame F114 is received from 6-1 (step S1800), and it is checked whether or not the ICS network address “7725” is registered in the conversion table 6013-1 as the request identification as the virtual leased line connection “3” (step S1800). Step S1801). In this case, since it is not registered, the receiver ICS user address “2900” written on the ICS user frame F114 is registered on the conversion table 6013-1 (step S18).
03) Further, it is checked whether or not the request identification is registered as inter-company communication “2” (step S1804). In this case, since “2” is not registered, it is checked whether the request identification is registered as intra-company communication “1” (step S1810). In this case, inter-company communication "1"
Is registered, the incoming call I is obtained from the conversion table 6013-1.
It acquires the CS network address “5526” and performs processing such as charging for intra-company communication (step S18).
11), the ICS user frame F114 is encapsulated in ICS (step S1820), converted into an ICS network frame F124, and the ICS network communication line 6080-
Then, the packet is transmitted to the ICS frame transfer network 6030 through the step 1 (step S1825). ICS network frame F1
24 is an access control device 6010- via a CATV line network 6044 and an ICS network communication line 6080-2, for example.
2, the ICS is decapsulated to restore the ICS user frame F114, and reaches the user 6065-2 having the recipient ICS user address "2900".

<< Communication from Cellular Phone Line to Telephone Line >> The user 6065-1 uses the sender ICS user address “3”.
800 "and the recipient ICS user address" 2400 "
ICS user frame F115 of the mobile phone line 61
The data is sent to the access control device 6010-1 via the line 65-1. The access control device 6010-1 has a mobile phone line conversion unit 603 of the ICS network address “7726”.
The ICS user frame F115 is received from 5-1 (step S1800), and it is checked whether or not the request identification is registered as the virtual leased line connection "3" in the conversion table 6013-1 in the conversion table 6013-1 (step S1800). Step S1801). In this case, since it is not registered, the receiver ICS user address “2400” written on the ICS user frame F115 is stored in the conversion table 6.
013-1 (step S180).
3) It is further checked whether or not the request identification is registered as inter-company communication "2" (step S1804). In this case, since the request identification is registered as the inter-company communication “2”, the incoming ICS network address “5521” is acquired from the conversion table 6013-1, and processing such as charging for the inter-company communication is performed (step S1805). , ICS user frame F115 is encapsulated in ICS (step S1820), converted to ICS network frame F125, and transmitted to ICS frame transfer network 6030 via ICS network communication line 6080-1 (step S182).
5). The ICS network frame F120 includes, for example, a satellite network 6043 and an ICS network communication line 6080-2.
Arrives at the access control device 6010-2 via the
The ICS user frame F115 is restored by decapsulation, and reaches the user 6060-2 having the receiver ICS user address "2400".

<< Communication from Cellular Phone Line to ICS Network Server >> The user 6066-1 has the sender ICS user address “3980” and the receiver 1CS user address “20”.
An ICS user frame F116 of “00” is transmitted to the access control device 6010-1 via the mobile phone line 6166-1. Receives the ICS user frame F116 (step S1800), and checks whether the ICS network address “7726” is registered in the conversion table 6013-1 as the request identification as the virtual leased line connection “3” (step S1801). In this case, since it is not registered, the receiver ICS user address “2000” written on the ICS user frame F116 is registered on the conversion table 6013-1 (step S180).
3) It is further checked whether or not the request identification is registered as inter-company communication "2" (step S1804). In this case, since it is not registered, it is checked whether or not the request identification is registered as intra-company communication "1" (step S1810). In this case, since it is not registered, it is checked whether the request identification is registered as communication "4" with the ICS network server (step S1812). In this case, since it has been registered, the conversion 6013-1
The network address “7821” is acquired, and processing such as charging for intra-company communication is performed (step S181).
3), the ICS user frame F116 is encapsulated in ICS (step S1820), converted into an ICS network frame, and transmitted to the ICS network server 670 (step S1825). The method in which the ICS network server 670 returns a reply to the transmission source user 6066-1 is the same as the method described in the third embodiment.

In the various transmission methods of the ICS user frame described above, the transmitting user changes the receiver ICS user address to be written in the ICS user frame, so that the transmitting side can change the telephone line, ISDN line, CATV
Line, satellite line, IPX line, mobile phone line, telephone line on receiving side, ISDN line, CATV
Any of a line, a satellite line, an IPX line, and a mobile phone line can be selected.

Example-19 (Dial Appleta):
An example using a dial applet will be described with reference to FIGS. User 740 inside LAN 7400
0-1 has an ICS user address "2500", and similarly, a user 7410-1 inside the LAN 7410 has an IC
It has an S user address “3601”. The person who manages the dial-up router 7110 inputs a telephone number designated corresponding to the recipient ICS user address and its priority from the router table input unit 7018-1 to the router table 713-1 of the dial-up router 7110.

Here, referring to FIG. 76, router table 71
13-1 will be described. When the recipient ICS user address “3601” is designated, the first priority is the telephone number “03-1111-1111”, the second priority is the telephone number “03-2222-2222”, and the priority is The third place is telephone number "03-3333-333"
3 ". Recipient ICS user address "3602"
And "3700" are also registered. Then, from the sender ICS user address “2500”, the receiver ICS
As an example of communication to the user address “3601”, FIG.
This will be described with reference to the flowchart of FIG.

The user 7400-1 transmits the ICS user frame F200 via the gateway 7400-2 and the user logical communication line 7204 to the dial-up router 711.
Send to 0. The dial-up router 7110 is a processing device 7
It operates under the control of 112-1 and receives the ICS user frame F200 (step S190).
1) The receiver ICS user address “3601” included in the ICS user frame F200 is read, and the router table 711 is used with the address “3601” as a search keyword.
3-1 is searched (step S1902), and a telephone number with a higher priority is found. In this case, the telephone number with the highest priority is “03-1111-” as shown in the router table of FIG.
1111 ", the dial-up router 7110
Calls the telephone number “03-1111-1111” via the telephone network 7215-1 as a first attempt (step S1910). As a result, the telephone number "03-
A telephone communication path 7201 is established with the line unit 7011-1 of the access control device 7010-1 called by "1111-1111", that is, the dial-up router 7110 and the line unit 7011-1 are connected by a telephone line. . If the dial-up router 7110 and the line unit 7011-1 are not connected by a telephone line in the above-mentioned telephone calling procedure, the dial-up router 7110 next determines the telephone number “03” having the second highest priority according to the router table 7113-1.
-2222-2222 ", and as a second attempt, the telephone number" 03-22 "via the telephone network 7215-1.
22-2222 "(step S191).
1). As a result, the telephone number “03-2222-222”
Access control device 7010-1 called by "2"
A telephone communication path 7202 is established with the line unit 7011-1. If the dial-up router 7110 and the line section 7011-1 are not connected by a telephone line in the above-mentioned telephone calling procedure, the dial-up router 7110 next determines the telephone number of the third highest priority according to the router table 713-1. “03-3333-3333” was found, and as a third attempt, the telephone number “03” was entered via the telephone network 7215-3.
-3333-3333 "(step S1).
912). As a result, the telephone number “03-3333-33”
33 "called by the access control device 7010-
A telephone communication path 7203 is established with the third line unit 7011-3. Note that when a telephone communication path is not established from the dial-up router to the access control device even after a plurality of attempts, the dial-up router 7110 receives the received ICS.
The frame F200 is stored in the storage unit 7117-1 (step S1913), and after a predetermined time (step S1914)
Then, the router table is indexed again (step S1902), and an attempt is made to establish telephone communication paths 7201, 7202, 7203 and the like.

Next, the dial-up router 7110
The operation after the connection between the and the line unit 7011-1 via the telephone line will be described. The dial-up router 7110 enters an authentication procedure to determine whether or not the user is a legitimate user registered as a user in the access control device 701O-1 (step S1920). The authentication procedure may be any procedure that can achieve the purpose of the authentication. For example, the dial-up router 7110
Sends an ID and a password for identifying the dial-up router 7110 to the line unit 7011-1 through the telephone line 7201, and sends the access control device 7010-1
The authentication unit 7016-1 checks whether the received ID and password are correct, and if correct, the user is correct,
That is, the notification data for notifying “affirmation” is transmitted to the telephone communication path 7.
By transmitting the data to the dial-up router 7110 via 201, the authentication procedure is completed. The received ID
If any of the passwords is incorrect, the communication via the telephone communication path 7201 is interrupted.

When dial-up router 7110 receives the notification of the positive confirmation in the user authentication from telephone line 7201, it transmits ICS user frame F200 to telephone communication line 7201.
201 (step S1930), and confirms that the access control device 7010-1 has received the ICS user frame F200, releases the telephone communication path 7201 and disconnects the telephone (step S1931). Is terminated.

When receiving the ICS user frame F200, the access control device 7010-1
ICS encapsulation using the conversion table 7013-1 under the management of the ICS network frame F301
Is generated, and the ICS network communication line 73 inside the ICS 7100 is generated.
01. In this embodiment, the originating ICS network address of the ICS network frame F301 is the network address “7501” assigned to the ICS logical terminal in the line unit 7011-1, and the destination IC
The S network address is the access control device 7010-
"8601" assigned to the ICS logic terminal No. 2.
ICS network frame F301 is ICS7100
To reach the access control device 7010-2,
Here, the ICS is decapsulated and the user logical communication line 7
After passing through 601, the user reaches the user 7410-1 having the ICS user address “3601”.

In the above description, dial-up router 7110 and line unit 70 of access control device 7010-1
11-1 and the telephone number "03-2222-222"
When the telephone communication path 7202 called in “2” is established, the ICS user frame F200 is stored in the telephone communication path 720.
2 is transferred from the dial-up router 7110 to the line unit 7011-1. Also in this case, similarly to the above, when receiving the ICS user frame F200, the access control device 7010-1 performs ICS encapsulation, and
The CS network frame F302 is generated and the ICS7
100 to the ICS network communication line 7301 inside. Here, the ICS user frame F302 has the originating ICS user address “7502” and the terminating ICS user address “8601”.

When a telephone communication path 7203 called by telephone number “03-3333-3333” is established between dial-up router 7110 and line section 7011-3 of access control apparatus 7010-3, an ICS user frame F200 passes through the telephone communication path 7203,
From dial-up router 7110 to line section 7011-3
Is forwarded to In this case, the access control device 7010-
3 receives ICS user frame F200, performs ICS encapsulation, and performs ICS network frame F303.
Is generated, and the ICS network communication line 73 inside the ICS 7100 is generated.
03. In this case, the originating ICS network address of the ICS network frame F303 is the network address “7800” assigned to the ICS logical terminal in the line unit 7011-3, and the terminating ICS network address is the I / O address of the access control device 7010-2.
“8601” given to the CS logic terminal. ICS
The network frame F303 is transferred through the ICS 7100 and reaches the access control device 7010-2, where the ICS is decapsulated and the user logical communication line 7601 is transmitted.
To the user 7410-1 of the ICS user address "3601".

Embodiment-20 (speed class and priority) << Configuration >> As shown in FIGS. 78 to 80, the ICS8000-
1 is an access control device 8010-1, 8010-2,
801O-3, 8010-4, relay device 8020-1,
An ICS address management server 8025-1 and an ICS network server 8027-1 are provided.
1,8030-2,8030-3,8030-4,80
30-5 and 8030-6. Line section 801
1-1, the processing device 8012-1, and the conversion table 8013-1 are all provided inside the access control device 8010-1. The ICS logical communication lines 8051-1, 8051-2,
8051-3 and 8051-4 are connected, respectively, and IC
S network addresses “7721”, “7723”,
“7724” and “7725” are respectively assigned. The ICS network communication line in ICS8000-1 is IC
A speed class representing the standard of the speed at which the S network frame is transferred is given. Line 8030
-3 and 8030-5 both have a speed class of "3", and the ICS network communication line 8030-4 has a speed class of "2". The speed class is determined based on the same standard as the speed class registered in the conversion table 8013-1. IC address management server 8025-1 has IC
The S network address “7811”, the ICS network server 8027-1 has the ICS network address “782”
1 "is assigned to each of the ICS network communication lines 8054-
1 and 8054-2 are connected to the access control device 8010-1.

User 8400 as ICS Communication Terminal
1 has an ICS user address "2500",
A user 8400-2 as an ICS communication terminal is connected to a line unit 8011-1 via a logical communication line 8051-1.
Has an ICS user address “2510”, and has access control device 801 via ICS logical communication line 8052-1.
0-2, the user 84 as an ICS communication terminal
00-3 has an ICS user address "3600",
The user 8400-4 has the ICS user address “36”.
10 "and connected to the access control device 8010-3 via the gateway 8041-1 and the ICS logical communication line 8053-1.

The method of registering the ICS network address and the ICS user address in the conversion table 8013-1 is the same as the method of the first embodiment or the second embodiment. 80, the speed class and the priority are registered as shown in FIG. 80, and the speed class and the priority are registered in the address management server 8025-1. Is stored together with the corresponding ICS user address as part of the address-related information.

The speed class is represented by a numerical value or the like instead of a speed unit. For example, the communication speed is 64K.
bps is represented by speed class 1, communication speed is 128 Kbps by speed class 2, and similarly 500 Mbps by speed class 7. The numerical value of the speed class is determined to be higher as the numerical value is larger. FIG. 81 shows an example of the correspondence between the communication speeds and the speed classes.
It is not necessary to use the seven stages, and the number may be subdivided into, for example, approximately 20 stages in accordance with the progress of communication technology. Further, the communication speed does not need to exactly match the physical communication speed of the ICS network communication line in the ICS8000-1. For example, 25% of the physical communication speed corresponds to allow a margin in the communication speed. You may do so. The priority is expressed by a numerical value, for example, in eight stages, and indicates the priority when the ICS network frame is transmitted from the access control device or the relay device to the ICS network communication line when compared in the same speed class. As for the numerical value of the priority, the higher the numerical value, the higher the priority. For example, the relay apparatus receives two ICS network frames F510 and F511 at substantially the same time, and the speed class of these two frames is the same value “3”.
And the priority of the ICS network frame F510 is “3”, and the ICS network frame F511
If the priority is "5", the ICS network frame F511 having the higher priority is transmitted earlier in time.

In this embodiment, for example, the ICS network communication lines 8030-3 and 8030-4
-1 to the access control device 8010-3, "in the same communication route", and the ICS network communication line 8030-
5 and 8030-6 are said to be "in the same communication route" from the relay device 8020-1 to the access control device 8010-4. The communication route may be directed from the access control device to the relay device, or from one relay device to another relay device connected by the ICS network communication line. A plurality of ICS network communication lines of the same speed class may exist on the same communication path, and in this case, the same speed class may be on the same ICS network communication line.

<< Operation >> The operation will be described with reference to the flowcharts of FIGS. 82 and 83.

The user 8400-1 transmits the ICS user frame F500 having the sender ICS user address “2500” and the receiver ICS user address “3600” to the ICS.
The data is transmitted to the logical communication line 8051-1. The processing device 8012-1 of the access control device 8010-1 includes a line unit 80
11-1 receives the ICS user frame F500 from the ICS logical terminal of the ICS network address “7721” and the ICS network address “7721”.
(Step S2001), and the address “772”
It is checked whether the request identification is registered as virtual leased line connection “3” in the conversion table 8013-1 (step S2002).
Next, the receiver ICS user address “3600” written on the ICS user frame F500 corresponding to the ICS network address “7721” is acquired (step S2004), and the address “3600” is registered in the conversion table. Then, it is determined whether or not the request identification is registered as inter-company communication “2” (step S2005). In this case, since it has been registered, in preparation for performing ICS encapsulation, the destination ICS network address “5522” is acquired from the conversion table 8013-1.
Information related to charging of the speed class “3” and the priority “3” is acquired from 3-1 (step S2006). Next, ICS encapsulation is performed by generating an ICS network frame F510 in which the speed class “3” and the priority “3” are written in the ICS network frame control unit (step S2020), and the ICS network communication line 8
030-1 (step S2021).

[0294] In the above description, the ICS network frame is for the case of inter-enterprise communication with the request identification "2". ICS network address, speed class, priority, etc. are obtained from the ICS, and information related to charging is obtained (step S2003). Get address, speed class, priority, etc.
Further, information related to charging is acquired (step S201).
1) In the case of communication "4" to the ICS network server, the destination ICS network address and the like are acquired from the conversion table 8013-1, and information related to charging is acquired (step S).
2013), after the ICS encapsulation, the ICS network server 80
27-1.

[0295] The ICS network frame F510 generated by the above procedure is used for the ICS network communication line 8030-.
1 to the relay device 8020-1. At this time,
At about the same time, another ICS network frame F51
1 is the relay device 80 via the ICS network communication line 8030-2.
Suppose that it reached 20-1. The ICS network frame F511 is transmitted from the user 8400-2 as the ICS user frame F501, and is sent to the ICS logical communication line 80.
The access control device 8010-2 reaches the access control device 8010-2 via the 52-1 and is encapsulated into an ICS network frame F511.
2 is transmitted and reaches the relay device 80201-11. Relay apparatus 8020-1 receives ICS network frames F510 and F511 (step S2).
030), under the control of the processing device 8021-1, first examine the relay table 8022-1 to find out which of the ICS network frames F510 and F511 is the ICS network communication line, that is, find the communication route (step S2031). ,
It is divided for each communication route (step S2032). In the case of the present embodiment, the two ICS network frames F5
10 and F511, the transmission destination is the relay device 802.
0-1 to the access control device 8010-3, which are communication routes of the ICS network communication lines 8030-3 and 8030.
-4, there are two ICS network communication lines. Next, in both of the ICS network frames F510 and F511, the speed class described in the control unit is read and divided for each speed class (step S2041), and thereafter, the procedure for each divided speed class is performed. In the case of this embodiment, the IC
The speed classes of the S network frames F510 and F511 are both “3”. Next, ICS of the same speed class
As for the frames, the priorities described in the respective control units are read, and transmitted from the ICS frame having the higher priority (step S2042). In the case of the same priority, any may be transmitted first. As a result of the above processing, the relay device 8
020-1 sends the ICS network frame F511 to the ICS network communication line 8030-3 first, and then sends the ICS network frame F511.
The network frame F510 is transferred to the ICS network communication line 80.
30-3.

In the above procedure, if there is only an ICS network communication line of a lower speed class than the speed class described in the control unit of the ICS network frame F510, information on the reduction of the communication service due to the lower speed is provided.
That is, the sender ICS user address and the receiver user address described in the corresponding ICS network frame,
The time (year / month / day / hour / minute / second) of the communication service and the like are recorded in the relay operation file 8023-1. The recorded contents of the relay operation file are notified to the user of the ICS 8000-1 as required.

According to the above procedure, the two ICS network frames F511 and F510 have the higher priority I
CS user frame F511 is preceded in time by IC
The data is transferred through the S network communication line 8030-3 and reaches the access control device 8010-3. The ICS network frame F511 is decapsulated by ICS to become an ICS user frame F501, and the ICS logical communication path 8053-1.
Through the user 84 of the ICS user address “3610”
00-4 is reached. ICS network frame F5
10 is decapsulated by the ICS to become an ICS user frame F500, and the user 8400 of the ICS user address “3600” via the ICS logical communication path 8053-1.
Reach 3

Next, options for using the priority are shown. At the time of ICS encapsulation, the conversion table 8013-
When the speed class and priority registered in No. 1 are transferred to the ICS network frame, the processing device 8012-
1 checks the length written in the ICS user frame control unit to be processed, and sets the priority value only when the ICS user frame is equal to or less than a predetermined value (for example, 256 bytes). Is transferred to the ICS network frame. In this way, a short ICS user free
A service that transfers the inside of the ICS 8000-1 preferentially only for the system can be realized. With this method, the ICS800
The 0-1 operator can easily realize a communication service that raises the priority of a short ICS user frame, that is, increases the communication fee. If the ICS user frame is short for the user, the throughput is more reliable. Whether or not to adopt the priority option is achieved by, for example, determining for each access control device.

It is to be noted that the above method may be carried out by executing only the speed class and excluding the priority, that is, as having the same priority. In another embodiment, the conversion table 8013-1 stores the sender IC
Does not include S user addresses (intra-company and inter-company). Even in this case, the flowchart of FIG.
Since the S user address is not referenced, there is no change.

Embodiment 21 (Addition of Electronic Signature to ICS User Frame): An embodiment will be described in which an ICS user frame is electronically signed to prove that the ICS user frame has passed through the access control device. An embodiment for encrypting an ICS user frame when requested will be described. First, a technique of an electronic signature (electronic signature) used in the present embodiment will be described. In using an electronic signature, there are a signer who creates the electronic signature and a verifier of the signature. The signer a generates a pair of the signing key KSa and the verification key KPa of the signer a at the same time, holds the signature key KSa in secret and releases only the verification key KPa by some means. The signer a is a secret signing key KSa of only the signer a.
Is used to generate an electronic signature σ depending on the data m and the signature key KSa. When expressed by a mathematical formula, the following equation 1 is obtained.

[0301]

Σ = SIGN (KSa, h (m)) where SIGN is a signature function representing a signature function, and a function y = h (m) is an electronic function having a function of compressing data m into short data. This is a hash function for signature. Verifier b uses publicly available verification key KPa,

The validity of the digital signature σ is verified by ν = TEST (σ, KPa, h (m)). If ν = 1, the digital signature σ and the data m are both correct, and the digital signature σ
Indicates that both the digital signature σ and the data m have not been rewritten and have not been tampered with. Also, ν =
If 0, one or both of the digital signature σ and the data m are incorrect. The verification key KPa is widely disclosed by an appropriate means, for example, through a public key guidance service center that provides a gazette or a public key guidance service, a general advertisement, or the like. Even if the verification key KPa is made public, the signature key KS
Techniques for creating a signature function SIGN that makes the calculation of a virtually impossible are known.

Next, a procedure for adding an electronic signature to an ICS user frame will be described. "Time / location parameters" representing conditions relating to the time and place of applying the electronic signature, that is, the time consisting of the date, month, day, hour, minute, and second when the electronic signature was provided, the person in charge of the operation of the access control device, and the identification symbol of the access control device. P1 "and the signature function SIGN and the hash function h (m)
"Signature function parameter P2" indicating the type of the signature key and the length of the signature key, etc., is also an object of the electronic signature. This is expressed by the following equation (3).

[0303]

Σ = SIGN (KSa, h (m)) where m = UF‖P1‖P2.

Here, UF is the IC before ICS encapsulation.
Represents the S user frame or the restored ICS user frame after ICS decapsulation. The receiving-side user receives the ICS user frame UF, the time / location parameter P1, the signature function parameter P2, and the electronic signature σ as UF ユ ー ザ P1‖P2‖σ in the receiving-side ICS user frame. This is illustrated in FIG. Further, the parameter P is stored inside the ICS user frame UF.
There is also a method in which the writing area of 1, P2 or the electronic signature σ is made an empty area as shown in FIG. In this case, when the free area of the ICS user frame UF is represented by Data,
The electronic signature σ is

Σ = SIGN (KSa, h (m)) where m = Data‖P1‖P2.

The signature is verified as

Ν = TEST (σ, KPa, h (m)) where m = Data‖P1‖P2.

This is performed as follows.

Further, for example, the length of the ICS user frame UF is 2048 bytes, and the length of UF {P1} P2} σ is 2448 bytes (2048 bytes + 400 bytes)
, A field representing the length of the frame inside the control unit of the ICS user frame UF (for example, FIG. 1)
00 total length field) from 2048 bytes to 2448 bytes. By this method, the ICS user frame whose length field has been rewritten is represented by UF '. When employing such an embodiment, the digital signature σ is

Σ = SIGN (KSa, h (m)) where m = UF′‖P1‖P2.

The signature is verified as

Ν = TEST (σ, KPa, h (m)) where m = UF′‖P1‖P2.

This is performed as follows.

In this embodiment, the order in which UF, P1 and P2 are arranged may be changed. For example, m = Pl‖P2‖U
An electronic signature σ = SIGN (KSa, h (m)) may be calculated as F, and P1‖P2‖UF‖σ may be set inside the ICS user frame on the receiving side. In this embodiment,
The function of encryption is represented by y = ENC (K1, x), and the function of decryption is represented by x = DEC (K2, y). Here, x is plaintext data, y is ciphertext data, ENC is an encryption function, and DE is
C represents a decryption function, K1 represents an encryption key, and K2 represents a decryption key. The digital signature technique is also called a digital signature. For example, W. Diffie, ME Hell
man's dissertation "New Direction in Cryptography" IEEE, I
T. Vol.IT-22, No.6, p.644-654, 1976, published by Shokodo 1990, Ed.Shigeo Tsujii, "Cryptography and Information Security," p.127-
138.

<< Configuration >> As shown in FIGS. 86 and 87,
The ICS 9000-1 is an access control device 9010-1,
9010-2, 9010-3 and relay device 9120-1
ICS network communication lines 9030-1 and 9030- for transferring ICS network frames.
2,9030-3. The line unit 9011-11, the processing device 9012-1, the conversion table 9013-1, and the digital signature unit 9017-1 are all provided in the access control device 90.
10-1 is provided inside. Electronic signature unit 9017
Inside -1, a signature key KSa, a verification key KPa, a program module for realizing an electronic signature function SIGN and a hash function h (m), a time / location parameter P1, and a signature function parameter P2 are included. Here, Ken Ken
“a” is a secret value held by the access control device 9010-1. Since the digital signature unit internally holds a secret signature key, it is necessary to prevent the secret signature key from leaking outside. For example, a structure is adopted in which an electronic signature unit is stored inside a physically strong box and a signature key cannot be read from outside. A plurality of ICS logic terminals of the line unit 9011-1 include:
ICS network addresses “7721”, “772”
2 "," 7725 "," 7726 "," 7727 ",
“7728” is assigned.

The encryption / decryption means 9018-1 includes an encryption function and holds an encryption key K1 and a decryption key K2. When the ICS user frame UF1 is input, the ciphertext UF2 is generated as UF2 = ENC (K1, UF1). When the ciphertext UF2 is input, the plaintext is converted to UF1 =
Determined as DEC (K2, UF2).

<< Operation >> The operation will be described with reference to the flowchart of FIG. The user 9400-1 has an ICS user frame F90 having a sender ICS user address “2500” and a receiver ICS user address “3600”.
0 is sent to the ICS logical communication line 9051-1. Processing device 9012-1 of access control device 9010-1
Receives the ICS user frame F900 from the ICS logical terminal of the ICS network address “7721” of the line unit 9011-1, acquires the ICS network address “7721” (step S2001), and converts the address “7721” into the conversion table 9013−. Then, it is checked whether or not the request identification is registered as a virtual leased line connection "3" (step S2002). In this case, since it is not registered, the ICS network address "77
The receiver ICS user address “3600” written on the ICS user frame F900 corresponding to “21” is acquired (step S2004), and this address “360” is obtained.
It is checked whether "0" is registered in the conversion table and whether the request identification is registered as inter-company communication "2" (step S2005).
In preparation for performing the CS encapsulation, the conversion table 9013-1
And obtains the incoming ICS network address “5522” from the server. Next, information relating to the charging of the speed class and the priority is acquired from the conversion table 9013-1 (Step S).
2006). Since “1” is specified in the signature field of the conversion table 9013-1 and “YES” is registered in the transmission electronic signature field at the same time, the processing device 9012-1 stores it in the electronic signature unit 9017-1. Electronic signature function SIGN
Module that implements a hash function h (m), a time / location parameter P1, a signature function parameter P
2 to generate a digital signature of the ICS user frame F900 by the above-mentioned digital signature technique,
Create a user frame (represented by UF2) (step S
2019). When expressed by an equation, the following equation 8 is obtained.

[0314]

UF2 = m‖σ where m = F900‖P1‖P2, σ = SIGN (K
Sa, h (m)).

In the above procedure, the conversion table 9013-
Even if “1” is specified in the “1” signature field, if “NO” is registered in the transmission electronic signature field, the electronic signature unit 9017-1 does not operate and the electronic signature is not attached. .

Next, since the encryption class is designated as "1", the ICS user frame UF2 is encrypted by the encryption / decryption means 9018-1 and a new ICS user frame UF3 (= ENC (K1, UF2)).
If the encryption class is “0”, no encryption is performed.

Next, the ICS in which the speed class, the priority, and the encryption class are written in the ICS network frame control unit.
By generating a network frame F901, I
CS encapsulation is performed (step S2020), and ICS
The packet is sent to the ICS network communication line 9030-1 inside the 9000-1 (step S2021). In the above description, I
The CS network frame is an example of inter-enterprise communication with a request identification of “2”. For example, in the case of a virtual line connection with a request identification of “3”, the conversion table 9013-1 relates to an incoming ICS network address, charging, and the like. Information is acquired (step S2003), and in the case of intra-company communication with the request identification "1", information on the incoming ICS network address, billing, etc. is acquired from the conversion table 90131-1 (step S2003).
2011), in the case of communication to the ICS network server with the request identification “4”, information on the destination ICS network address, billing, etc. is acquired from the conversion table 9013-1 (step S2013).

[0318] The ICS network frame F901 generated by the above-described procedure is the ICS network communication line 9030-
1 and the access control device 9010-2 via the relay device 9120-1.
The CS user frame F902 becomes the ICS user address "3600" via the ICS logical communication path 9051-3.
Reaches user 9400-2. Here, F902 =
m‖σ, m = UF1‖P1‖P2, where UF1 is I before transmission
CS user frame F900, P1 is time / location parameter, P2 is digital signature parameter, σ is digital signature, σ =
SIGN (KSa, h (m)).

<< Electronic Signature and Decryption in ICS Decapsulation >> The user 9400-3 has the sender ICS user address “3610” and the receiver ICS user address “2”.
A 510 "ICS user frame F930 is transmitted to the ICS logical communication line 9051-4. The access control device 9
010-3 receives the ICS user frame F930, performs ICS encapsulation using the internal conversion table,
A CS network frame F931 is generated and transmitted to the ICS network communication line 9030-3. The ICS network frame F931 is composed of the media device 9120-1 and the ICS.
Access control device 901 via network communication line 9030-1
0-1 and the IC under the management of the conversion table 9013-1
S is inversely encapsulated to become an ICS user frame UF1. Since the encryption class is designated as "1" in the control unit of the ICS network frame F931, the ICS user frame (UF1) obtained by decapsulation is encrypted by the encryption / decryption means 9018-1. Decoding is performed to obtain an ICS user frame UF1 '. UF1 '= DEC (K2, UF
1), and if the encryption class is “0”, no decryption is performed.

Next, “1” is designated in the signature column of the conversion table 9013-1, and at the same time, “Y” is entered in the electronic signature upon reception column.
ES ”, the electronic signature unit 901 is registered here.
7-11 are operated, parameters P1 and P2 and an electronic signature σ are added by the same method as described above, and a new ICS
The user frame becomes F932. Expressed as a symbol, F9
32 = m‖σ, m = UF1‖P1‖P2, digital signature ＝=
SIGN (KSa, h (m)), which is UF1 'instead of UF1 when the decoding is performed. In the above procedure, even if “1” is specified in the signature field of the conversion table 9013-1, if “NO” is registered in the electronic signature upon reception field, no electronic signature is given. . The ICS user frame F932 receives the ICS user address 25 via the line unit 9011-1 and the logical communication line 9051-4.
Reach ten users 9400-4.

<< Signature Request >> Sender ICS user address "2800", Receiver ICS user address "3
700 ”ICS user frame F940
When input from 11-1, the request identification is "2" corresponding to the ICS network address "7728" and the signature column of the conversion table 9013-1 corresponding to the receiver ICS user address "3700" “0” and “YES” are registered in the field of the electronic signature upon transmission at the same time. Since “1” is specified in the “signature request” field written at a predetermined position in the ICS user frame F940, the electronic signature unit 9017-1 operates, and the parameters P1, P2 and A new ICS user frame is provided with the electronic signature σ.

In the conversion table 9013-1, “0” or “1” is registered in the signature column, and “NO” is registered in the transmission electronic signature column. Even if “1” is specified, an electronic signature is not added before ICS encapsulation. Similarly, conversion table 9013-
In the case where “0” or “1” is registered in the signature field of “1” and “NO” is registered in the field of the digital signature upon reception, even if “1” is specified in the signature request field of the ICS user frame, ICS
No digital signature is given after decapsulation.

On the other hand, in the case where the ICS user frame is digitally signed at the time of transmission by the transmission-side access control device and further digitally signed at the time of reception by the reception-side access control device, FIG.
As shown in (1), an electronic signature at the time of transmission and an electronic signature at the time of reception are given. Also, the verification key KPa is included in the signature function parameter P2.
There are other examples that include the value of In this way, ICS
This eliminates the need for the recipient of the user frame to obtain the verification key KPa from the public key guidance service center or the like. Furthermore, I
When the content of the CS user frame is an electronic slip (order slip, receipt, etc.), an electronic signature is added to the electronic slip along with the identification name of the access control device through which the electronic slip has passed. If either the sender (creator) of the electronic slip or the receiver (receiver) of the electronic slip modifies the electronic slip,
The tampering can be found by the principle of electronic signature. Therefore, as long as the electronic signature key is a secret value, that is, as long as the operator of the access control device that holds the signature key inside guarantees the signature key as a secret value, the electronic signature cannot be falsified. It can be used as

Embodiment 22 (Electronic signature server and encryption server)
B): As shown in FIG. 86 of the embodiment-21, the electronic signature unit 9017-1 and the encryption / decryption means 9018-1 are inside the access control device 9010-1. On the other hand, in the present embodiment, as shown in FIG.
310-1, 9310-2, 9310-3, 9310-
Reference numeral 4 denotes an embodiment in which each does not include an electronic signature unit. Instead, the electronic signature servers 9340-1 and 9340-
2, 9340-3, 9340-4 and ICS network communication line 9
341-1, 9341-2, 9341-3, 9341-
4 respectively. Each digital signature server includes the function of the digital signature unit of the embodiment-21, and gives an electronic signature before ICS encapsulation or gives an electronic signature after ICS decapsulation in cooperation with the access control device. This is the same as the function of the electronic signature unit 9017-1 in the embodiment-21, and includes a signature key, a verification key, an electronic signature function, a program module for realizing a hash function, a time / location parameter, and a signature function parameter. The electronic signature servers 9342-1 and 9342-2 are connected to relay devices 9320-1 and 9320-2 via ICS network communication lines 9344-1 and 9344-2, respectively. All the electronic signature servers have a unique ICS network address inside the ICS network, communicate with other electronic signature servers and access control devices using the ICS network server communication function, and exchange information held by each other with each other. Has functions. The electronic signature server 9342-1 is a digital signature server representing the VAN 9301-1, communicates with the electronic signature servers 9340-1 and 9340-2 inside the VAN 9301-1 using the ICS network server communication function, and performs these electronic signatures. The information held by the server can be obtained. Also, the electronic signature server 9
340-1 can obtain information (for example, a verification key) on the electronic signature held by the electronic signature server 9340-12 via the electronic signature server 9342-1. The electronic signature server 9342-1 communicates with the electronic signature server 9342-2 representing another VAN 9301-2 by using the ICS network server communication function, and can exchange information on the electronic signature held by each of them. Note that the electronic signature server does not exchange the secret signature key held therein with another electronic signature server, and strictly keeps the secret of the signature key.

Further, in this embodiment, as shown in FIG. 90, the access control devices 9310-1, 9310-2, 9310
Reference numerals -393 and 9310-4 denote examples in which the encryption / decryption means is not included in each of them.
343-2, 9343-3, and 9343-4 are connected by ICS network communication lines, respectively. Each encryption server includes the function of the encryption / decryption means 9018-1 and cooperates with an access control device connected thereto to encrypt the ICS user frame before ICS encapsulation, or The decryption of the ICS user frame encrypted at the transmission source after the ICS decapsulation is the same as that of the encryption / decryption means 9018-1. And an encryption key and a decryption key. The encryption servers 9343-5 and 9343-6 are connected to the relay devices 9320-1 and 9320-2 via ICS network communication lines, respectively. Each cryptographic server has a unique ICS network address inside the ICS network, communicates with other cryptographic servers using the ICS network server communication function, and exchanges information held by each of them. It has the function to do. The encryption server 9343-5 has V
VAN is a cryptographic server that represents AN9301-1.
Cryptographic servers 9343-1 and 93 inside 9301-1
43-2 using the ICS network server communication function to obtain information held by these cryptographic servers. Also, the encryption server 9343-1 stores information (for example, an encryption key) related to encryption held by the encryption server 9343-2 in the encryption server.
It is available through Bus 9342-5. The cryptographic server 9343-5 communicates with the cryptographic server 9343-6 representing another VAN 9301-2 by using the ICS network server communication function, and can exchange information relating to cryptography held by the cryptographic server 9343-5. it can.

Embodiment 23 (Open Connection): An ICS open connection, that is, a preparation procedure performed by a user and a VAN operator in order to perform inter-company communication by changing the destination will be described.

<< User Application >> The user applies for the ICS name and the ICS user address to the VAN operator, and at the same time, the ICS connection conditions, the user identity and the payment method (address,
Company name, payment bank account number, etc.). Also,
If there is an ICS user address for intra-company communication defined by the user, it is presented, but if not, it is not presented. The VAN operator determines an ICS name and an ICS user address according to a common rule predetermined with other VAN operators, and notifies the user. The item of ICS connection condition is ICS
Name condition, communication band condition, billing condition, digital signature condition,
Including the encryption condition, the open condition, the dynamic change condition, etc., the contents of these conditions are as follows.

[0328] The ICS name condition is that the left part of the ICS name, for example, the ICS name is "USR # 1.ACS #"
1. DIS # 1. VAN # 1. JP. In the case of "AS", the user designates only the leftmost "USR # 1" (the VAN operator determines the remaining right part) .The communication band condition is a speed class and a priority. Supports communication band conditions, electronic signature conditions, encryption conditions, etc. for fixed-rate charges for a fixed period, charges for network use (network charges), and charges for information sent and received in electronically signed communications (information charges). The electronic signature condition specifies whether to give an electronic signature that can prove the fact that the ICS user frame has passed through the access control device together with the date and time, and the encryption condition is that the ICS user frame is transferred. When the open condition is the inter-company communication service, that is, when the request identification of the conversion table is “2”, the unknown condition that is not registered in the conversion table is specified. When the ICS frame is received from the sender, the access control device specifies whether to reject the reception, or creates a temporary conversion table and receives the ICS frame. A function that can change various conditions in response to a user request through the ICS frame is specified by an open class.A method of specifying the value of the open class will be described later. Signing conditions and encryption conditions can be changed, but important conditions for VAN operation such as ICS address and charging are not changed.

<< ICS Address Management Server and ICS Name Server >> Referring to FIG. 91 and FIG. 92, in this embodiment, the access control apparatuses 11110-1, 11110-2, and 11110 are provided inside the ICS 11000-1. −
3, relay device 11116-1, ICS address management servers 11150-1, 11150-2, ICS name servers 11160-1, 11160-2, ICS conversion table servers 11170-1, 11170-2, user 11132
11, 111132-2. The ICS address management server 11150-2 stores the user 11132 in an internal correspondence table.
-2 ICS network address "8210", IC
The ICS name server 11160-2 includes the S user address “4200” and the address related information of the user.
In the internal ICS name conversion table, the ICS name “USR # 3.ACS # 3.DIS #” of the user 111132-2 is stored.
3. VAN # 3. JP. AS "and the ICS user address" 4200. "
An ICS network address (“777”) used in association with the ICS user address “3333” of 32-1
7 ″), and the IC of the access control device 11110-1 is determined.
S logical terminal 11111-2 and user 11132
-1 connected via gateway 11000-2
The S logical communication path 11133-1 is connected. Since the ICS network address “7777” is a user private value, the user is not notified.

Next, the VAN operator checks the correspondence table 11152-1 inside the ICS address management server 11150-1.
The ICS network address “7777” and the ICS user address (between companies) “33”
33 ", the ICS user address (within the company)" 1111 "presented by the user and the address-related information of the user, that is, the communication band condition, charging condition, electronic signature condition, encryption condition, open condition, dynamic change condition, user identity And payment method
Data path 11153-1 and processing unit 11151-1
Is written directly into the conversion table 11152-1 via the. VAN
The operator further stores the ICS name “USR # 1.ACS # 1.DIS #” in the ICS name conversion table 11162-1 inside the ICS name server 11160-1.
1. VAN # 1. JP. AS ", ICS user address" 3333 ", type" 1 "(ICS user address" 3
333 "is written in the ICS name conversion table 11162-1) directly into the ICS name conversion table 11162-1 via the data path 11163-1 and the processing device 11161-11. The result is represented by a correspondence table 11152-1 or an ICS name conversion table 111.
62-1.

The ICS address management server 11150-1
When the ICS name server 11160-1 finishes writing the above-described various information on the new user,
Using the respective ICS network addresses “8910” and “8920” and the ICS network communication function, the ICS for the new user is stored in the ICS conversion table server 11170-1.
Notify that the information of the address and the ICS connection condition has been obtained. Here, the ICS conversion table server 11170-1 is an IC
In this example, the ICS network address “8100” and the ICS user address “21”
00 ".

<< ICS Conversion Table Server >> The ICS conversion table server 11170-1 is the ICS address management server 111
The information described in the correspondence table 11152-1 of 50-1 is
Read using CS network communication function, conversion table prototype 11172
Write to -1. That is, “7777” is written in the column of the originating ICS network address, “1111” is written in the column of the sender ICS user address (within the company), and “3333” is written in the column of the sender ICS user address (between companies).
When there is no ICS user address for intra-company communication, the column of the sender ICS user address (within the company) is blank. The request identification is "2" indicating inter-company communication. The communication band condition is an example in which the speed class is “3” and the priority is “3”. The electronic signature condition is that the signature specification is “1”, the transmission signature specification is “YES”, and the reception signature is “YES”. This is an example in which the designation is “NO”. The charging condition is “4” of the charging class, and in this example, represents charging based on a flat-rate system. The encryption condition is “1” of the encryption class, and in this example, it specifies that the ICS network frame is encrypted inside the ICS. The open class in this example is “0”. In the dynamic change class “6”, the signature at the time of transmission can be changed by a user request in this example.

<< Use of ICS Conversion Table Server (User) >>
The user 111132-1 writes “3333” as the sender ICS user address, writes the ICS user address “2100” of the ICS conversion table server 11170-1 as the receiver ICS user address, and writes the receiver ICS in the user data section of the ICS user frame. An ICS user frame F1200 in which information (a recipient ICS user address or a recipient ICS name) is written is transmitted. The ICS conversion table server 11170-1 receives the ICS user frame F1200 via the access control device 11110-1, and determines whether the recipient information in the user data part is the recipient ICS user address or the recipient ICS name. In response, an incoming ICS network address for inter-enterprise communication is obtained by the following method. When the receiver ICS name is specified, the receiver ICS user address is further obtained.

(When the recipient ICS user address is specified) The recipient information is the recipient ICS user address “3”.
800 ", the ICS conversion table server 11170-
1 is an I connected to the access control device 11110-1.
The CS address management server 11150-1 is inquired using the ICS network communication function, and the ICS user address "38"
ICS network address “760” corresponding to “00”
If the receiver ICS user address is not included in the correspondence table 11152-1 (the search of the ICS network address has failed), the ICS conversion table server 11170 is obtained.
-1 receives the “notification of ICS network address search failure” from the ICS address management server 11150-11.

(When the receiver ICS name is specified) The receiver information is the receiver ICS name “USR # 3.ACS”.
# 3. DIS # 3. VAN # 3. JP. AS ", the ICS conversion table server 11170-1 provides the ICS name server 11160-1 connected to the same access control device 11110-1 to the ICS name" USR # 3. ACS # 3. DIS # 3.
VAN # 3. JP. AS ". The ICS name server 11160-1 transmits the IC of another ICS name server.
The S network address is held corresponding to the ICS name (the part excluding the leftmost part USR # n of the ICS name), and in this case, the ICS name server 1116
0-1 searches the ICS name conversion table 11162-1,
“ACS # 3.DIS # 3.VAN # 3.JP.AS”
Of the ICS name server 11160-2 that manages
The CS network address “8930” is found, an inquiry is made to the address “8930” using the ICS network communication function, and the ICS name “USR # 3.ACS #”
3. DIS # 3. VAN # 3. JP. ICS user address “4200” (receiver ICS user address) and ICS network address “821” corresponding to “AS”
0 ”(incoming ICS network address). In this procedure, the ICS name server 111
60-2 is an ICS address management server 11150-2
Is inquired about the ICS network address of the user 111132-2 to obtain the address “8210”.

(Completion of Conversion Table 11113-1) Recipient I
For CS user address designation, ICS conversion table server 1
1170-1 is the recipient ICS user address "380
0 "and incoming ICS network address" 7600 "
Is added to the conversion table 11113-1 and the conversion table 11113-
1 is completed for the receiving user. In the case of specifying the recipient ICS name, the ICS conversion table server 11170-1
Recipient ICS user address "4200" and incoming IC
Convert S network address “8210” to conversion table 1111
In addition to 3-1, the part corresponding to the receiving user of the conversion table 11113-1 is completed. The ICS address management server 11150-1 and the ICS name server 11160
-1 from the ICS conversion table server 11170-
1 transmits an ICS frame indicating that conversion table addition has failed to the requesting user 111132-1.

<< Other Use of ICS Conversion Table Server (User) >> The user 111132-1 sets the conversion table 111113-1.
That wrote a request to notify the contents of individual user
S user frame is converted to ICS conversion table server 11170-1
Requesting the user to be notified of the user-specific contents. Further, the user can request rewriting of a part of the conversion table 11113-1 by using the dynamic change class previously agreed with the VAN operator by the above method. The dynamic change class is determined to be, for example, 1, 2,..., The dynamic change class 1 designates that the priority of the application user is incremented by 1, and the dynamic change class 2 designates the priority 1 For the designation to be reduced and the dynamic change class 3, the signature at the time of transmission
In addition to "ES", it is specified that the encryption class is changed to "2".

<< Utilization of Conversion Table >> The usage of the conversion table created by the above procedure has been described in the first embodiment and the like. Example-
1 describes a method of creating a temporary conversion table, that is, a method of creating a temporary conversion table when the access control device receives an ICS network frame and decapsulates the ICS when there is no conversion table. Use the open class of the conversion table. That is, when the access control device receives the ICS network frame and decapsulates the ICS, the received “pair of the incoming ICS network address and the outgoing ICS network address included in the network control unit of the ICS network frame” is converted. If the table is not registered as “pair of originating ICS network address and terminating ICS network address” in the table, and the designation of the open area class is “2”, it is set in the temporary conversion table as in the previous embodiment. Area class specification is "1"
If so, do not set a temporary conversion table. Further, if the designation of the open area class is “0”, the temporary conversion table is not set and the received ICS network frame is discarded. In this case, the ICS user frame is not delivered to the user. That is, when the designation of the open area class is "0", reception from an unknown sender not registered in the conversion table is rejected, and a so-called closed area connection is realized. In the above, in the case of the request identification “4”, it is always treated as the designation “1” of the open area class. That is, it is not set in the temporary conversion table.

<< Extraction of Closed Network Using Open Class >> When performing inter-company communication between companies A, B and C, the open class of the IP terminals of these companies registered in the conversion table Are all set to “0”. Then, all ICS user frames from unknown senders not registered in the conversion table are discarded by the access control device.
The ICS user frame is transmitted and received only between company C and company C. In this sense, it is possible to configure a virtual closed network closed to these three companies, that is, to cut out the closed network. For one of the company A's IP terminals,
If the designation of the open class of the conversion table is set to “2”,
Since only this terminal receives ICS user frames from unknown senders, it will be located outside the closed network.

<< Partial Modification of the Embodiment (Variation) >>
In the embodiment described above, the VAN operator sets the data path 11
153-1 and data path 11163-1, IC
The method of inputting an ICS address, an ICS connection condition, and the like to the S address management server 11150-1 and the ICS name server 11160-1 has been described. The VAN operator creates a special ICS network server inside the ICS 11000-1 without using these data paths, and from this special ICS network server, the ICS address management server 11150-11 or the ICS network management function is used. ICS name server 1116
The ICS address, the ICS connection condition, and the like may be directly input to 0-1, and the contents of the conversion table 11152-1 and the ICS name conversion table may be rewritten.

Embodiment 24 (ICS Address Name Management Server): As shown in FIGS. 91 and 92 of Embodiment 23, the ICS address management server and the ICS name server are independent of each other, and It is connected to the access control device via a line. On the other hand, in this embodiment, as shown in FIG.
-1 ICS address name management server 1300
0-1,13000-2,13000-3,13000
-4 are access control devices 13010-1 and 13010, respectively.
010-2, 13010-3, and 13010-4. ICS address name management server 13000
-1 has a processing unit 130001-1.
Of correspondence table 13002-1 having the same function as that included in the ICS address management server, and ICS name conversion table 1303- having the same function as that of the ICS name server.
1 and also uniquely distinguishable from others within the ICS
The CS network address “9801” is assigned.

Other ICS Address Name Management Server 13
000-2,13000-3,13000-4 is also ICS
It has the same function as the address name management server 13000-1, includes a processing device, a correspondence table, and an ICS name conversion table, and further has ICS network addresses “9802”, “9803”, and “9804”, respectively.
It is possible to communicate with each other by using the CS network communication function and exchange information held by other ICS address / name management servers. ICS address name VAN representative management server 13
020-1 is the ICS network address "9805"
The other ICS address name VAN representative management server 13020-2 has an ICS network address “9806”, and uses the ICS network communication function to perform multiple ICS address name management servers and other ICS address name VANs. It can communicate with the representative management server and exchange information possessed by each of them. ICS address name VAN representative management server 13020-1
031-1 and a database 13032-1.
Exchange information such as ICS address and ICS name with all ICS address and name management servers inside AN13000-1. Collected data on ICS address and ICS name is stored in database 13032-1 and perform the above procedure. VAN13030-1
To represent.

The ICS address name management server is
Although the processing device, the correspondence table, and the ICS name conversion table are included, as another embodiment, the correspondence table and the ICS name conversion table may be combined into one table, and are included in both of these two types of tables. Only one of the ICS user addresses to be used.

Embodiment-25 (Separation of functions of access control device): As shown in FIGS.
ICS address management server 11150-1, ICS name server 11160-1, ICS conversion table server 1117
0-1 are respectively connected to the access control device 11110-1. ICS encapsulation and ICS decapsulation are performed by the conversion table 11 inside the access control device 11110-1.
113-1. On the other hand, in the present embodiment, the functions of the access control device 11110-1 are the same as the integrated access control device 14110-1 and the plurality of simple access control devices 14210-1, 14210-2, and 1421.
0-3. That is, as shown in FIGS. 94 and 95, the access control device 11110-1 is connected to the ICS network communication lines 14190-1, 14190-2, and 14190.
-3 via the simple access control device 1421
0-1, 14210-2, and 14210-3. ICS address management server 14150-1, ICS
Name server 14160-1, ICS conversion table server 14
170-1, ICS charging server 14180-1, electronic signature server 14181-1, encryption server 14182-1,
Operation management server 14183-1, ICS network server 141
84-1 is an ICS network communication line 14191-
1,14191-2, 14191-3, 14191-
4,14191-5,14191-6,14191-
7, 14191-8, the centralized access control device 141
10-1 and the access control device 11
The conversion table 11113-1 inside the 110-1 is an aggregation conversion table 141113-1, and simple conversion tables 142131-1 and 142.
13-2 and 14213-3. However, these aggregation conversion tables and simplified conversion tables partially overlap. That is, the four items of the originating ICS network address, the request identification, the speed class, and the priority are included in both of these conversion tables. The temporary partial conversion table 142214-1 is not essentially different from the temporary conversion table described in the first embodiment or the like, but the items included in the temporary partial conversion table 142214-1 are included in the simple conversion table 142213-1. Same as item.
Line section 14 inside simple access control apparatus 14210-1
211-1 has the same function as the line unit 11111-1 inside the access control device 11110-1.

The simple access control device 14210-1 uses the simple conversion table 142213-1 to perform ICS encapsulation at the time of transmission and ICS decapsulation at the time of reception. 141
The processing related to the electronic signature and the billing described above is performed by using 13-1. In addition, the plurality of simple access control devices 14210-1, 14210-2, 14210-3
The function of both the access control device 11110-1 and that of the centralized access control device 14110-1 work together. The user 1432-1 has an ICS user frame F13 having a sender ICS user address “3333” and a receiver ICS user address “4200”.
00 to the ICS logical communication line 14133-1.
Processing device 142 of simple access processing device 14210-1
As shown in the flowchart of FIG. 96, the ICS network address "7-1"
777 "ICS logic terminal to ICS user frame F
1300, the ICS network address “7777” is obtained (step S2501), and the address “7777” is registered in the simple conversion table 14213-1 as to whether the request identification is registered as the virtual leased line connection “3”. Is checked (step S2502). In this case, since it is not registered, the ICS user frame F130 corresponding to the ICS network address “7777” is registered.
0, the receiver ICS user address “42”
00 ”(step S2504), it is checked whether or not this address“ 4200 ”is registered in the simple conversion table 142213-1, and whether the request identification is registered as inter-company communication“ 2 ”(step S2505). In this case, since it has been registered, the incoming ICS network address “8210” is obtained from the simple conversion table 14213-1 in preparation for performing ICS encapsulation (step S).
2506).

The simple access control device 14210-1 is
Next, ICS encapsulation is performed by generating an ICS network frame F1301 in which the speed class and the priority are written based on the information obtained from the simple conversion table 142213-1 in the ICS network frame (step S2520). It is sent to the centralized access control device (step S2521). Here, as described above, the information of the speed class “3”, the priority “3”, and the encryption class “0”, which are the items of the simple conversion table 142213-1, are written in the extension unit of the ICS network control unit.

The centralized access control device 14110-1 is
The ICS network frame F1301 is received from the simple access control device 14210-1.
110-11, based on the fact that the charging information frame F
K01 is created and sent to billing server 14180-1.
The information such as the request identification and the speed class, the priority, the charging class, the encryption class, and the like of the items registered in the aggregation conversion table 1413-1 are referred to in order to create the charging information frame FK01. The signature, the transmission signature, and the reception signature of the items in the aggregation conversion table 1413-1 are used for adding an electronic signature, and as described in the other embodiments, the electronic signature server 14181- 1 and an electronic signature is performed. Similarly, if the specification of the encryption class is “1” meaning encryption, the encryption request is made to the encryption server 14182-1. When the above processing is completed, the aggregation access control device 14110-1 sets the ICS network frame F1
302 is transmitted to another access control device 14110-2 or an aggregate access control device via the ICS network communication line 14190-4. The ICS network frame F13
In the format 02, when the digital signature server or the cryptographic server operates, the contents are changed by the addition of the digital signature or the conversion into the cipher text as described above.
This is equivalent to the CS network frame F1301. The simple access control device 14210-1 can be realized with almost no change in the function of the existing router. In addition, when the number of users accommodated in the simple access control device 14210-1 is small and users are widely distributed in regions. Has an economical advantage that the total number of the ICS address management server, the ICS name server, the ICS conversion table server, the billing server, the electronic signature server, and the encryption server can be reduced.

The operation management server 14183-1 is assigned an ICS network address, is connected to the centralized access control device 14110-1 and the relay device, and
The CS network communication function allows the IC to communicate with other operation management servers, access control devices, ICS address management servers, etc., such as communication status (communication congestion degree) inside the ICS and fault information.
Exchange information on the operation of S.

The simple access control device 1421
The open class of the item included in the simple conversion table 142213-1 in 0-1 is used for the same processing as the treatment of the open class registered in the conversion table inside the access control device, as described above. . That is, the simple access control device 142
10-1 receives an ICS network frame and receives an IC
When the S decapsulation is performed, the received “pair of the incoming ICS network address and the outgoing ICS network address included in the ICS network frame control unit” is
If the simple conversion table 14213-1 has not been registered as a “pair of the originating ICS network address and the destination ICS network address”, that is, if the source of the received frame is not registered in the simple conversion table, If the designation is "2", the temporary partial conversion table 14 is obtained by the above method.
214-1 is set, but if the designation of the open area class is "1", the temporary partial conversion table is not set. Further, if the designation of the open area class is "0", the temporary partial conversion table is not set, and the received ICS network frame is discarded. In this case, no ICS user frame is transmitted to the user. The open class designation “0” rejects reception from an unknown transmission source that is not registered in the simple conversion table, and realizes a so-called closed connection.

As described in the above embodiment, the IC
The S address management server and the ICS name server may be integrated, that is, may be realized as a single ICS address name management server.
The address name management server is connected to the ICS network communication line for use. In the above embodiment, the simple conversion table 1
No item of speed class or priority is set in 4213-1.
At the time of CS encapsulation, the speed class and priority “0” are written in the extension of the ICS network control unit,
It may indicate that there is no designation. Similarly, an example in which the simple conversion table 142131-1 does not specify the open area class may be used.
In this case, "0" of the speed class or the priority is written in the extension of the ICS network control unit to indicate that there is no designation.

Embodiment-26 (Access Control Unit Including Server and Aggregated Access Control Unit): As shown in FIG.
The ICS 15000-1 includes access control devices 15110-1, 15110-2, 15110-3 including a server,
Aggregate access control device 15210-1,1 including server
5210-2, 15210-3, simple access control devices 15213-1, 15213-2, and 15213-3. In the examples of FIGS. 91 and 92, the ICS address management server 11150-1 and the ICS name server 111
94-1, the ICS conversion table server 11170-1 is connected to the access control device 11110-1.
In the example of FIG. 95, the ICS address management server 141
50-1, ICS name server 14160-1, ICS
Conversion table server 1417O-1, billing server 14180-
1, electronic signature server 14181-11, encryption server 141
82-1 is an integrated access control device 14110-
1 connected. On the other hand, in this embodiment, FIG.
As shown in the figure, the access control device 15110-1 has an ICS address management server 15115-1 and an ICS name server 15115 inside the same physically independent housing.
-2, ICS conversion table server 15115-3, ICS frame database server 15115-4, billing server 1
5115-5, an operation management server 15115-6, an electronic signature server 15115-7, and an encryption server 15115-8. However, these servers have the ICS network addresses “6701”, “6702”, and “670”.
3 "," 6704 "," 670 "," 6706 "," 6
707 "and" 6708 "respectively.
With the CS network server communication function, information can be exchanged with an ICS network server outside the access control device 15110-1 including the server. The processing device 15112-1 is connected to the servers 15115-1 through 15115-1 via the data line 15117-1.
Information can be exchanged with 115-8. Furthermore, these servers 15
115-1 to 15115-8 are data lines 15117
Information can be mutually exchanged via -1.

Similarly, the integrated access control device 15210-1 including the server is provided within the same physically special housing, with the ICS address management server 15215-1, ICS
Name server 15215-2, ICS conversion table server 15
215-3, ICS frame database server 152
15-4, a billing server 15215-5, an operation management server 15215-6, an electronic signature server 15215-7, and an encryption server 15215-8. However, these servers have the ICS network address “7001”,
“7002”, “7003”, “7004”, “700
5 "," 7006 "," 7007 ", and" 7008 ", respectively, and an integrated access control device 15210-1 including a server by the ICS network server communication function.
Information can be exchanged with an ICS network server outside the server. The processing device 152212-1 can exchange information with the servers 15215-1 to 15215-8 via the data line 15217-1. Further, the servers 15215-1 to 15215-8 can exchange information with each other via the data line 15217-1. In the above description, the same physically independent housing means, for example, a stand-alone computer, a single electronic board, or an LSI. In the case of an LSI, an integrated access device including a server is realized as a system on an LSI chip.

It should be noted that the present invention may be implemented by removing the ICS frame database server or other servers from the “access control device including the server”. Similarly, the present invention may be implemented by excluding the ICS frame database server or other servers from the “aggregated access control device including a server”. In these embodiments, for example, an ICS frame database server and an access control device including the server, or an integrated access control device including the server are connected via an ICS network communication line.

Embodiment-27 (Incoming call priority control): FIG.
The control unit in the IP frame shown in FIG. 2 has a source IP address and a destination IP address in addition to the “protocol type”. In addition, the TCP frame shown in FIG. , A source port number and a destination port number are defined. 48 where IP address (32 bits) and port number (16 bits) are arranged
The bit data is called a socket number. That is,
Socket number = IP address / port number. In the present embodiment, source socket number = source IP addressＩＰ
Source port number, destination socket number = destination IP address / destination port number. In the present embodiment, the ICS user frame that arrives at the access control device from the ICS network communication line and is
This is an example of controlling the order of transmission to the outside of the ICS using the “protocol type” and the socket number displayed inside the user frame.

<< Configuration >> As shown in FIGS. 100 and 101, the ICS 17000-1
0-1, 17110-1, 17120-1, 17130
-1, 17140-1, 17150-1, 17160-
1 and the access control device 17100-1
7111-1, processing unit 17112-1, conversion table 171
13-1. 17200-1,17210-1,1
7220-1,17230-1,17240-1,17
250-1, 17260-1, 17270-1, 172
80-1 are the LAs of the respective companies, and the respective gateways 17201-1, 1721-1, 1722
1-1, 17231-1, 17241-1, 17251
-1,17261-1,17271-1,17281-
1 is connected to ICS17000-1. Each LAN includes two or three terminals having a function of transmitting and receiving IP user frames. These ICS user addresses are “2600” and “2610” inside the LAN 17200-1 and “1600” inside the LAN 17210-1.
230 ”and“ 1240 ”, and LAN17220−
1 is "2700", "2710" and "2720"
And “2800” and “2810” inside the LAN17230-1 and “2800” inside the LAN17230-1.
100 "and" 2110 ", and the LAN 17250-
1 is “1200”, “121O” and “1220”
The inside of the LAN 1726O-1 is “2200” and “2210”, and the inside of the LAN 17270-1 is “2200”.
300 "and" 2310 ", and the LAN 17280-
1 is “2400” and “2410”. Furthermore, terminals 17291-1 and 17292-1 are terminals having a function of transmitting and receiving IP user frames, respectively, and have ICS user addresses "2500" and "1250", respectively.
And is connected to ICS17000-1.

<Conversion Table> Access control device 17100-
1 will be described with reference to FIG. 102. The function of the conversion table is the same as that of the other embodiments. In this embodiment, the incoming call priority symbol, the protocol priority,
It is characterized in that the priority is controlled by using a partial table which is a component of the conversion table 1713-1 named TCP socket priority and UDP socket priority. Transmission of conversion table I
If the CS network address is “7821”, the incoming call priority symbol is defined as “pr-7821”. That is, the incoming call priority is determined by the access control device as I
The parameter is determined to be a parameter depending on the ICS network address assigned to the ICS user logical terminal to be transmitted after CS decapsulation. Conversion table 17113-
Looking at the other sub-tables, for example, corresponding to “pr-7821”, the protocol priority is “p−1”, the TCP socket priority is “t−1”, and the UDP socket priority is “N”.
Here, “NULL” represents no designation, and the protocol priority “p−1” is “TCP”, “UDP”, “ICMP”,
It is defined as “IGMP”.

Looking at the other partial tables, the TCP socket priority "t-1" indicates the socket symbol "
"Sk-1" and "sk-7" are defined. Looking at the other partial tables, the UDP socket priority "u-1" defines "sk-3" and "sk-8" in descending order of priority. Furthermore, the socket symbol "s" written in another subtable
In the content of “k−1”, “To” represents a destination socket number, and its destination IP address is “210”.
0, indicating that the destination port number is "30". Similarly, in the content of the socket symbol "sk-2", "From" indicates that it is a source socket number, and its source IP address is "1240", indicating that the source port number is "32".

<< Individual Description of ICS Frame >> The ICS network frame NF01 has the ICS user address “2”.
After being transmitted from the terminal 17291-1 of "500", the access control device 17110-1 encapsulates the ICS as the originating ICS network address "7200" and the destination ICS network address "7821".
The data is transferred inside the ICS 17000-1 and reaches the access control device 17100-1, where the ICS is decapsulated to become the ICS user frame UF01, and the ICS user address “2100” is transmitted via the user logical communication line 17821-1. Reach the terminal. User frame UF0 inside ICS network frame NF01
The "protocol type" of the control unit 1 is TCP, and T
This is an example in which the “destination port number” of the CP frame is “30”. Hereinafter, from the ICS network frame NF02,
NF03, NF04, NF05, NF06, NF07,
NF08, NF09, NF10 and NF11 are all shown in FIG.
This is the same as shown in FIG.

The frame NF02 has the address “2600”
Outgoing ICS network address “7300”, incoming ICS network address “78”
21 ", which is encapsulated in the ICS. After the transfer inside the ICS, the ICS is decapsulated and the frame UF0 is transferred.
2 and reaches the terminal having the ICS user address “2110” via the user logical communication line 17821-1. "Protocol type" of frame UF02 is TCP
And the “destination port number” is “30”.

The frame NF03 has an address “1230”
Outgoing ICS network address “7400” and incoming ICS network address “78”
22 ”, which is encapsulated as ICS. After the transfer inside the ICS, the ICS is decapsulated and the frame UF0 is transferred.
3 and reaches the terminal having the ICS user address “1200” via the user logical communication line 17822-1. "Protocol type" of frame UF03 is TCP
In this example, the “source port number” is “30”.

The frame NF04 has the address “1240”
Outgoing ICS network address “7400” and incoming ICS network address “78”
22 ”, which is encapsulated as ICS. After the transfer inside the ICS, the ICS is decapsulated and the frame UF0 is transferred.
4 and reaches the terminal having the ICS user address “1210” via the user logical communication line 17822-1. "Protocol type" of frame UF04 is TCP
In this example, the “source port number” is “32”.

The frame NF05 has the address “125”.
0, and is encapsulated as an outgoing ICS network address “7500” and an incoming ICS network address “8222”.
After the transfer inside the CS, the ICS is decapsulated into a frame UF05, and reaches the terminal having the ICS user address “1220” via the user logical communication line 17822-2. "Protocol type" of frame UF05 is T
This is an example in which the “source port number” is “32”.

The frame NF06 has the address “2610”
Outgoing ICS network address "7300", incoming ICS network address "7
823 ", which is encapsulated in ICS.
After the transfer inside, the ICS is decapsulated and the frame UF
06, and reaches the terminal having the ICS user address “2200” via the user logical communication line 17823-1. "Protocol type" of frame UF06 is UDP
And the “destination port number” is “40”.

The frame NF07 has the address “2700”
Outgoing ICS network address “7600”, incoming ICS network address “78”
23 ”, which is encapsulated in ICS. After transfer inside the ICS, ICS is decapsulated and the frame UF0 is transferred.
7 and reaches the terminal having the ICS user address “2210” via the user logical communication line 17823-1. "Protocol type" of frame UF07 is UDP
And the “destination boat number” is “40”.

The frame NF08 has the address “2710”
Outgoing ICS network address “7600”, incoming ICS network address “7
824 "which is encapsulated in ICS.
After the transfer inside, the ICS is decapsulated and the frame UF
08, and reaches the terminal having the ICS user address “2300” via the user logical communication line 17824-1. "Protocol type" of frame UF08 is UDP
In this example, the “source port number” is “40”.

The frame NF09 has the address “2800”
Outgoing ICS network address “7700” and incoming ICS network address “78”
24 ”, which is encapsulated as ICS. After the transfer inside the ICS, the ICS is encapsulated and the frame UF0
9 and reaches the terminal having the ICS user address “2310” via the user logical communication line 17824-1. "Protocol type" of frame UF09 is UDP
In this example, the “source port number” is “42”.

The frame NF10 has the address “2720”
Outgoing ICS network address “7600”, incoming ICS network address “78”
25 ”, which is encapsulated in the ICS. After the transfer inside the ICS, the ICS is decapsulated and the frame UF1 is transferred.
It becomes 0 and reaches the terminal having the ICS user address “2400” via the user logical communication line 17825-1. "Protocol type" of frame UF10 is TCP
And the “destination port number” is “60”.

The frame NF11 has the address “2810”.
Outgoing ICS network address “7700” and incoming ICS network address “78”
25 ”, which is encapsulated in the ICS. After the transfer inside the ICS, the ICS is decapsulated and the frame UF1 is transferred.
It reaches 1 and reaches the terminal having the ICS user address “2410” via the user logical communication line 17825-1. "Protocol type" of frame UF11 is UDP
In this example, the “source port number” is “70”.

<< Example 1 of Determination of Priority >> A method of determining the priority will be described with reference to the flowchart in FIG. The access control device 17100-1 receives the ICS network frames NF01 and NF02 from the ICS network communication line at substantially the same time (step S1000), and decapsulates the respective network frames to obtain ICS user frames UF01 and UF02 (step S1000). S10
10). According to the conversion table 1713-1, it is found that the incoming ICS network addresses of the ICS logical terminals that transmit these ICS user frames are both “7821” and coincide (step S1020). The incoming call priority symbol of both the ICS network frames NF01 and NF02 is "pr-7821".
According to the partial table 13-1, the protocol priority corresponding to "pr-7821" is "p-1", the TCP socket priority is "t-1", and the UDP socket priority is "NULL".
Is specified. Further examination of the other parts that are components of the conversion table 1713-1 reveals that the protocol priority "p
-1 "from TCP, UDP, ICMP, IGMP
, The TCP having the highest priority, and the highest priority in the order of the socket symbols “sk-1” and “sk-7” from the breakdown of the TCP socket priority “t−1”, and the socket symbol From the breakdown of “sk−1”, it can be seen that the IP address forming the destination socket number is “2100” and the destination port number is “30”. The protocol type displayed inside the ICS network frame NF01 is “TCP”, and the destination IP address is “2”.
100 ", and the destination port number is" 30 ".
The protocol type displayed inside the CS network frame NF02 is “TCP”, the destination IP address is “2110”, and the destination port number is “30”. In this embodiment, it is understood that the ICS network frame NF01 in which the protocol type and the destination socket number match the designation of the above-mentioned socket symbol “sk-1”. By the above procedure, IC to send out preferentially
It is determined that the S network frame is NF01 (step S1030). Next, the ICS network frame NF01 is transmitted to the user logic terminal via the ICS logic terminal (step S1040).

<< Example 2 of Determination of Priority >> Access control apparatus 17100-1 receives ICS network frames NF03, NF04 and NF05 from the ICS network communication line at substantially the same time (step S1000), and reverses each network frame. Encapsulation to obtain ICS user frames UF03, UF04, UF05 (step S1)
010). According to the conversion table 1713-1, these ICSs
Incoming ICS of ICS logic terminal transmitting user frame
The network addresses are both "7822", which indicates that they match (step S1020). The incoming call priority symbols of the ICS network frames NF03, NF04 and NF05 are all "pr-7822", the protocol priority is "P-1", the TCP socket priority is "t-2", and the UDP socket priority is “NULL” is specified. From the breakdown of the protocol priority "p-1", the priority of TCP is high, and the TCP socket priority "t-
2, the socket symbol "sk-2" has a higher priority, and the source code of the source socket number is "2100" and the source port number is "30" from the socket symbol "sk-2". ICS.
The protocol type displayed inside the network frame NF03 is “TCP”, the source IP address is “1230”, and the source port number is “30”. I
The protocol type displayed inside the CS network frame NF04 is “TCP”, the source IP address is “1240”, and the source port number is “32”. Further, the protocol type displayed inside the ICS network frame NF05 is “TCP”, the source IP address is “1250”, and the source port number is “32”. In this embodiment, the protocol type and the source socket number are the same as the socket symbol "sk-
It can be seen that what matches the designation of 2 ″ is the ICS network frame NF04.
The ICS network frame transmitted with priority is NF
04 (step S1030). Next, this ICS network frame NF04 is
Transmission to the user logic terminal via the logic terminal (step S
1040).

<< Example 3 of Priority Determination >> The access control device 17100-1 receives the ICS network frames NF06 and NF07 from the ICS network communication line at substantially the same time (step S1000), and decapsulates each network frame. ICS user frame UF0
6, UF07 is obtained (step S1010). Conversion Table 17
According to 113-1, the incoming ICS network addresses of the ICS logical terminals that transmit these ICS user frames are both "7823", which indicates that they match (step S1020). ICS network frame NF
06 and NF07, the incoming call priority symbol is "pr-7
823 ", the protocol priority is" p-2 ", and the TC
"NULL" is designated as the P socket priority, and "u-1" is designated as the UDP socket priority. UDP, TCP, ICMP, IG from the breakdown of protocol priority "p-2"
For the UDP with the highest priority in the order of MP and the highest priority, the socket symbols “sk-3” and “sk-8” have the highest priority from the breakdown of the UDP socket priority “t−1”, and the socket From the breakdown of the symbol “sk-3”, it can be seen that the IP address forming the destination socket number is “2200” and the destination port number is “40”. The protocol type displayed inside the ICS network frame NF06 is "UDP", the destination IP address is "2200", and the destination port number is "40", while the protocol type is displayed inside the ICS network frame NF07. The protocol type is “UDP”, the destination IP address is “2110”, and the destination port number is “40.” In this embodiment, the protocol type and the destination socket number match the specification of the socket symbol “sk-3”. It is determined that the ICS network frame NF06 is to be performed by the above procedure, and it is determined that the ICS network frame to be transmitted with priority is NF06 (step S1030). To user logic terminal via ICS logic terminal And out (step S1040).

<< Example 4 of Determining Priority >> The access control device 17100-1 transmits the ICS network frame NF08.
And NF09 are received at substantially the same time (step S10).
00), the respective network frames are decapsulated to obtain ICS user frames UF08 and UF09.
(Step S1010). According to the conversion table 1713-1,
The incoming ICS network addresses of the ICS logic terminals transmitting these ICS user frames are both "782".
4 ", indicating that they match (step S102).
0). ICS network frames NF08 and NF0
9, the incoming call priority symbol is "pr-7824", the protocol priority is "p-2", the TCP socket priority is "NULL", and the UDP socket priority is "u-
The priority of the socket symbol "sk-4" is high from the breakdown of the protocol priority "p-2", and the source socket number is formed from the breakdown of the socket symbol "sk-4". It can be seen that the IP address to be transmitted is “2710” and the source port number is “40.” The protocol type displayed inside the ICS network frame NF08 is “UDP” and the source IP address is “2.
710 ", and the source port number is" 40 ".
The protocol type displayed inside the ICS network frame NF09 is “UDP”, the source IP address is “2800”, and the source boat number is “42”. In this embodiment, it can be seen that the ICS network frame NF08 whose protocol type and source socket number match the designation of the socket symbol “sk-4”. By the above procedure, it is determined that the ICS network frame to be transmitted with priority is NF08 (step S1030). Next, the ICS network frame NF01 is sent to the user logic terminal via the ICS logic terminal (step S1040). << Example 5 of determination of priority >> Access control device 17100-
1 is an ICS network frame NF10 and NF11
At substantially the same time (step S1000), and decapsulates each network frame to obtain ICS user frames UF10 and UF11 (step S10).
10). According to the conversion table 1713-1, the incoming ICS network addresses of the ICS logical terminals that transmit these ICS user frames are both "7825", which indicates that they match (step S1020). The incoming call priority symbol of both the ICS network frames NF10 and NF11 is "pr-7825", the protocol priority is "p-1", the TCP socket priority is "t-3", and the UD
"U-3" is designated as the P socket priority. From the breakdown of the protocol priority "p-1", the priority of TCP is U
Higher than DP. However, the protocol type displayed inside the ICS network frame NF10 is "TCP", and the protocol type displayed inside the ICS network frame NF11 is "UDP". By the above procedure, it is determined that the ICS network frame to be transmitted with priority is NF10 (step S1030). Next, the ICS network frame NF10 is transmitted to the user logic terminal via the ICS logic terminal (step S1040).

Embodiment 28 (Original Priority Control): ICS
An embodiment will be described in which, after a user IP frame arriving from the outside of the system is encapsulated in an ICS by an access control device, the order of transmission to an ICS network communication line is determined.

<< Structure >> As shown in FIG.
7000-2 is an access control device 17100-2, 17
The access control device 17100-2 includes a line unit 17111-2, a processing device 17112-2, and a conversion table 17113-2. 1
, 7280-2 are corporate LANs
, Respectively, via the ICS user logical communication line.
S17000-2. Each LAN
Includes a plurality of IP terminals, 1741-2 to 17411
-2 are IP terminals.

<< Conversion Table >> Conversion table 1711 shown in FIG. 105
The function of 3-2 is the same as that of the other embodiments. In this embodiment, a conversion table 1711 named outgoing priority symbol, protocol priority, TCP socket priority, and UDP socket priority.
It is characterized by using a partial table which is a constituent element of 3-2. If the outgoing ICS network address in the conversion table 17113-2 is “7821”, the outgoing priority symbol is “p”
s-7821 ". That is, the transmission priority is a parameter depending on the network address assigned to the ICS logical terminal that receives the user IP frame arriving at the access control device from the user logical communication line. Conversion table 17113-
Looking at the other partial tables of FIG. 2, for example, corresponding to “ps-7821”, the protocol priority is “p-21”, the TCP socket priority is “t-21”, and the UDP socket priority is “NULL”. It has been described. Protocol priority, TC
Notations such as P socket priority and UDP socket priority are the same as those in the thirty-second embodiment.

<< Example 1 of Determining Priority >> A method of determining priority will be described with reference to the flowchart in FIG. The access control device 17100-2 has a line unit 17111 to which the ICS network address “7821” is assigned.
-2 ICS logical terminal, ICS user frame F0
1 and F02 are received at substantially the same time, and the ICS network address assigned to the ICS logic terminal is obtained (step S2700). Next, the procedure of transmission priority control is performed as follows. The calling priority symbol of both the ICS user frames F01 and F02 is "ps-7821".
Then, according to the partial table of the conversion table 17113-2,
The protocol priority corresponding to “ps-7821” is “p
-21 ", TCP socket priority is" t-21 ", UD
“NULL” is designated as the P socket priority. Further examination of other parts that are components of the conversion table 17113-2 reveals that TCP, UDP, ICMP, and IGMP have higher priority in the order of the protocol priority “p-21”, and that TCP with the highest priority , From the breakdown of the TCP socket priority “t-21”, the socket symbol “s
The priority is higher in the order of k-21 and sk-27. Further, from the breakdown of the socket symbol "sk-21", the IP address constituting the source socket number is "2100" and the source port number is "30". The protocol type displayed inside the ICS user frame F01 is “TCP”, and the source IP address is “210”.
0 "and the source port number is" 30 ".
The protocol type displayed inside the S user frame F02 is “TCP”, and the source IP address is “21”.
10 "and the source port number is" 30. "In this embodiment, the protocol type and the source socket number match the specification of the socket symbol" sk-21 "in the ICS user frame F01. I understand.
As described above, the ICS encapsulation and the I
It is determined that the CS user frame is F01 (step S2710). Next, the ICS network address “77” assigned to the logical terminal that has received the ICS user frame F01.
21 "is checked in the conversion table 17113-2 as to whether or not the request identification is registered as the virtual leased line connection" 3 "(step S2720). The following is a series of steps similar to those described in other embodiments. S2730,..., S277
0, the ICS encapsulation is performed at the end (step S2780), and the ICS network frame NF01 obtained by the encapsulation is given priority and the IC is encapsulated.
It is transmitted within S17000-2 (step S2790). << Another Example of Priority Determination >> Access Control Device 17100-
2 also accesses Example 2 of the priority determination for receiving the ICS user frames F03 and F04 and F05 at almost the same time from the ICS logical terminal of the line unit 17111-2 to which the ICS network address “7822” is assigned. The control unit 17100-2 is connected to the line unit 1711 to which the ICS network address “7823” is assigned.
From the ICS logic terminal 1-2, the ICS user frame F
The access control device 17100-2 also relates to Example 3 of the priority determination for receiving 06 and F07 at almost the same time.
From the ICS logical terminal of the line unit 17111-2 to which the ICS network address “7824” is assigned,
In Example 4 of priority determination for receiving the ICS user frames F08 and F09 at almost the same time, the access control device 17100-2 further sets the ICS logic of the line unit 17111-2 to which the ICS network address “7825” is assigned. Example 5 of priority determination for receiving ICS user frames F10 and F11 from the terminal at substantially the same time is the same as Example 1 of priority determination, and the conversion table 17113
As shown in the partial table which is a component of -2, the description is omitted.

Embodiment 29 (multiple communications): This embodiment is a new embodiment constructed by combining the above-mentioned embodiments -2, -10 and -18, and is shown in FIGS.
This will be described with reference to FIG. The ICS 18000-1 is an access control device 18140-1, 18141-1, 18142.
1, 18143-1, 18144-1, and the conversion table inside the access control device 18140-1 is 18195-
1, the conversion table inside the access control device 18141-1 is 1
8196-1. Conversion Table 18195-1 is Conversion Table 6.
Similarly to 013-1, the specified value of the request identification is “1”,
Including “2”, “3”, and “4”, correspondingly, intra-enterprise communication, inter-enterprise communication, virtual private line connection, and ICS network server connection can be implemented inside one access control device. . The conversion table 18196-1 has a specified value "3" for the request identification.
Only, and a virtual leased line connection is possible.

The ICS network server 18160-1 has the ICS
It is connected to the access control device 18140-1 via a network communication line. Reference numeral 18184-1 denotes an FR network or an ATM network. When 18184-1 is an FR network, it corresponds to the FR network 1041 shown in FIG. 35. When 18184-1 is an ATM network, the ATM network shown in FIG. 1042. The conversion units 18181-1 and 18182-1
If 184-1 is an FR network, the FR / I shown in FIG.
This corresponds to the CS network frame conversion unit 1032-1. Also, conversion units 18181-1 and 18182-1
Is the ATM / ICS network frame conversion unit 1033 shown in FIG.
-1.

LAN 18110-1, 18130-1
Are access control devices 18140-1 and 181 respectively.
42-1 is connected via an ICS user logical communication line. Gateway 18171- of LAN 18120-1
1 and 18172-1 are connected to an access control device 18140-1 or 18141-1 via an ICS user logical communication line, respectively. LAN18120-1
Are a plurality of IP terminals 18121-1, 18122-1,
18123-1. Here, the IP terminal refers to a terminal having a function of transmitting and receiving an IP user frame. IP terminals 18150-1 and 18151-1 are connected to access control devices 18143-1 and 18144-1, respectively, and an IC.
It is connected via an S-user logical communication line. The ICS network communication line 18191-1 connects the conversion unit 18181-1 and the access control device 18141-1 and connects the ICS network communication line 18191-1.
192-1 connects the conversion unit 18182-1 and the access control device 18142-1.

[0380] LAN 18120-1 and LAN 18110
When the ICS user frame transmitted from -1 reaches the access control device 18140-1, the conversion table 18195
Request identification values “1”, “2”,
According to the control of "3" and "4", ICS is encapsulated in order to receive any communication service of intra-enterprise communication, inter-enterprise communication, virtual leased line, and ICS network server. As described, the description is omitted. Also, the ICS sent from the gateway 18172-1
When the user frame reaches the access control device 18141-1, the user frame is subjected to the control of the request identification value "3" described in the conversion table 18196-1, and is subjected to ICS encapsulation so as to receive a virtual leased line communication service. Line 1
Via the conversion unit 18181-1 via 8191-1,
Further, via the FR network or the ATM network 18184-1, via the conversion unit 18182-1, the ICS network communication line 18192-
1 to the access control device 18142-1. Here, the FR network to the ATM network 18184-1 are F
As a function of the R network or the ATM network, a function of a known fixed connection (PVC), which is a known technique, is used. By the procedure described above, the transfer of the ICS user frame is realized.

<< Partial Modification of the Above Embodiment: Variation
>> A description will be given with reference to FIG. ICS18000-2
Includes a plurality of access control devices like the 18000-1 and is connected to a LAN or an IP terminal through the access control devices. FR network to ATM network 18 in FIG.
184-1 is replaced by an FR network or an ATM network 18200-2, and an access control device 18141-1-1, a conversion unit 181
81-1, the ICS network communication line 18191-1 is replaced with a PVC interface conversion unit 18210-2, and the access control device 181422-1, the conversion unit 18182-1, and I
The CS network communication line 18192-1 is replaced with a PVC interface conversion unit 18220-2, and the gateways 18171-1 and 18172-1 are replaced with a new gateway 18230-2. Where 1
When the 8200-2 is an FR network, the PVC interface converters 18210-2 to 18220-2 have a function of converting and inversely converting the ICS user frame into the FR frame format. As described in When 18200-2 is an ATM network, the PVC interface converters 18210-2 to 18220-2 have a function of converting and reverse converting an ICS user frame into an ATM frame format. This is as described in FIG. The transfer of the ICS user frame by the variation is realized by using the function of the fixed connection (expressed by PVC) by the FR network or the ATM network.

Embodiment-30 (Operation of Integrated Information Communication System): This will be described with reference to FIGS. IC
S19000-1 is VAN19010-1, VAN1
9020-1, access control device 19300-1, 19
310-1, 19320-1, 19330-1, relay devices 19400-1, 19410-1, 1942O-1,
19430-1, Inter-VAN gateway 19490-
1. Server devices 19500-1, 19510-1, 19
520-1, 19530-1, and 19540-1.
Each server device is assigned an ICS network address, and includes a plurality of ICS network servers inside each server device. These multiple ICS network servers are distinguished by port numbers used in the TCP communication protocol and the UDP communication protocol. Access control device 19300-1, 19
310-1, 19320-1, and 19330-1 are conversion tables 19301-1, 19311-1, and 1932, respectively.
1-1, 19331-1, and conversion table servers 19731-1, 19732-1, 19733-1, 1 respectively.
9734-1 and domain name servers 19741-1, 19742-1, 19743-1, 1 respectively.
9744-1, each of which includes a resource management server 19
751-1,19752-1,19753-1,197
54-1. The relay device 19400-1 includes the path information server 19761-1 and the resource management server 19755-
1 and the relay device 19410-1 is connected to the route information server 1
9742-1, the relay device 19420-1 includes the path information server 19763-1, and the relay device 19430-
1 includes a route information server 19764-1, and the server device 19500-1 includes a user service server 19711-
1. The ICS authority server 19721-1 is included, and the server device 19510-1 is a general resource management server 19750.
-1, an integrated route information server 19760-1 and the server device 19520-1 is a user service server 1971
2-1 includes an ICS authority server 19722-1, and the server device 19530-1 has an ICS user address "120".
ICS network server 19980-1 that provides digital library service with “0” and ICS user address “1300”
ICS network server 19 that provides a travel guidance service with
981-1, and the server device 19540-1 includes a general ICS authority server 19720-1, a general domain name server 19740-1, a general conversion table server 19730-1,
And an integrated user service server 19710-1. Note that the domain name server is the same as the one described in the other embodiments.
This server has the same functions as the CS address management server and the ICS name server, and has different functions. The details of the functions are determined in this embodiment.

The access control device, the relay device,
The server device and the gateway between VANs are ICS network communication lines 19040-1, 19041-1, 19042-1,
19043-1 and the like, and can exchange information with each other using the ICS network communication function. The server device is made, for example, by giving a computer an ICS network communication function,
A program for executing a server function runs therein.

[0384] Reference numeral 19110-1 denotes an FR network.
Reference numerals 9111-1 and 19112-1 perform interface conversion between a communication line of the FR exchange network and an ICS network communication line for transferring an ICS network frame, and are similar to those described in other embodiments. It is.
Reference numeral 19900-1 denotes an ATM network, and a conversion unit 199.
01-1 and 19902-1 perform interface conversion between a communication line of an ATM switching network and an ICS network communication line for transferring an ICS network frame, which is the same as that described in the other embodiments. It is.

[0385] LAN1 is outside the ICS19000-1.
9600-1, 19601-1, 19602-1, 19
603-1, 19604-1, 19605-1, and IC
In this embodiment, IP terminals 19606-1 and 19607-1 having a function of transmitting and receiving S network frames are connected.

<< Hierarchical Structure of ICS Network Server >> Description will be made with reference to FIGS. 113 to 118. The general user service server 19710-1 is a user service server 19711.
-1 and 19712-1 have higher control rights in the sense of giving an instruction or reporting individual information, and the higher control rights are shown in a tree structure in FIG. 113. 1981
1-1 is a communication path for exchanging information between the general user service server 19710-1 and the user service server 19711-1, and is composed of an ICS network communication line, a relay device, and the like. General ICS authority server 19720-1, general conversion table server 19730-1, general domain name server 19
740-1, an integrated resource management server 19750-1,
The same applies to the integrated route information server 19760-1, which is shown in FIGS. 114 to 118, respectively. In this embodiment, the tree structure of the server has two hierarchies.
The number of access control devices, relay devices, server devices, and the like installed inside can be increased to three or more layers.
The routing information server has a routing table used by the relay device and the access control device with a function of transmitting and receiving inside the ICS. The resource management server contains relay devices, access control devices,
Provide management functions such as grasping the installation state of server devices and failure information.

<ICS19000- by ICS operator>
Operation 1 >> ICS Operator 19960-1 and 19961-
1 gives an instruction such as operation start to the general user service server 19710-1, the general conversion table server 19730-1, the general resource management server 1950-1, and the general route information server 19760-1, or reports individual information. Thus, the operation of the ICS19000-1 can be easily performed.

<< ICS19000- by ICS officials >>
Management of 1 >> ICS official 19950-1 is the supervising ICS authority server 19720-1, supervising domain name server 197
It is possible to easily manage the addresses and the like used in the ICS19000-1 by giving an instruction such as operation start to 40-1 or reporting individual information.

<< Socket Number and Server >> Each ICS network server has an ICS user address and an ICS network address. In addition to the ICS network address, each server has a port defined by TCP or UDP communication protocol. Having a number is a matter added to other embodiments. That is, each of the servers is 32
It is identified by a total of 48 bits of a ICS network address of 16 bits and a port number of 16 bits (this is called a socket number). Each server has an ICS 190
00-1 includes programs each having a unique function, and some servers have an "operation interface" as described later. Here, the “operation interface” is a function of transmitting and receiving instructions such as information exchange with an operator via a keyboard or the like, operation of each server function, start of operation, and the like. Each server assigns, for example, an ICS network address to an access control device or a relay device, assigns different port numbers to a plurality of programs (that is, servers) inside these devices, and distinguishes them by socket numbers. Each server has an ICS network communication function as described in the other embodiments, and can exchange information with each other using the ICS network address and the port number.

<< Registration of User to ICS-1: Inter-Company Communication and ICS Network Server >> Description will be made with reference to FIGS. 111, 112 and 119. ICS19000-1 use applicant 19200-1 is given ICS receptionist 19940-1 by ICS
Apply for a subscription (procedure P100). The “application reception data” is an ICS usage item excluding the ICS user address ICS network address and the ICS name, and includes, for example, request identification (intra-company communication, inter-company communication, virtual private line connection,
ICS network server classification), speed class, priority, etc., communication bandwidth conditions, charging conditions, open connection conditions, fee payment methods, user name and address (identification data), signature conditions, encryption conditions, etc. The meaning of the items has been described in other embodiments.

The ICS receptionist 19940-1 inputs the application reception data to the user service server 19711-1 via the operation interface, and stores the application reception data in the user database 19611-1 (procedure P
110). Next, the user service server 19711-1
Will provide the ICS authority server 19721-11 with its ICS user address, ICS network address and ICS
Name using the ICS network communication function (procedure P
120). The ICS authority server 19721-1 stores the requested ICS address and ICS name in the ICS network address allocation record table 19622-1 (FIG. 120) that holds the ICS address and the ICS name in the database 19621-1.
S user address allocation record table 19623-1 (FIG. 121)
(Step P130), the result of the allocation is recorded in the allocation table, and the result of the allocation is returned to the user service server 19711-1 (step P140). The user service server 19711-11 stores the assignment result obtained from the ICS authority server 19721-1 in the user database 19611-1 (procedure P150).

FIG. 135 shows an example of the ICS network address assignment record table 19622-1. In the first row of the table, the ICS network address "7700" is used to identify the ICS logical terminal of the node identification symbol ACU-1. Symbol LT
Assigned to -001, assigned destination identifier is user
-1 and the assignment date is an example of April 1, 1998, and the node identification symbol ACU-1 is the access control device 19300-
It is predetermined to indicate 1. In the third row of this table, the ICS network address “9630” is allocated to the port number “620” of the node identification code SVU-1, the allocation destination identification code is Sv-001, and the allocation date is 98 Is the example of February 1, 2002, and the node identification code SVU
It is predetermined that -1 indicates the server device 19530-1.

FIG. 121 shows an example of the ICS user address assignment record table. The first line of the table contains the ICS user address “4610” and the ICS name (also called the ICS domain name) “ddl.ccl.bbl”. .Aal.j
"p" is assigned, the value of the request identification is "2", the assignment destination identification symbol is user-1, and the assignment date is April 1, 1998.
It is an example of the day. Further, in the fourth row of the table, the ICS user address “1200” is added to the ICS name “rrl.
qq. pp. jp "is assigned, the request identification value is" 4 ", the assignment destination identification symbol is Sv-001, and the assignment date is February 1, 1998.

[0394] The user service server 19711-1 is
Contents of application for use applicant 19200-1 and ICS acquired
Access control device 19300-
1 so as to write in the conversion table 1931-1 inside the IC.
Information is provided to the conversion table server 19731-1 via the S network communication function (procedure P160). The content to be provided is
These are registration items in the conversion table described in other embodiments, such as CS network address, sender ICS user address, request identification, speed class, priority, signature condition, encryption condition, and open class. The above-mentioned ICS network address and ICS user address have a request identification value of “2”, ie, in the case of inter-company communication, register as the originating ICS network address and the sender ICS user address. If the value of the request identification is "4", that is, the ICS network server, it is registered as the destination ICS network address and the recipient ICS user address. The conversion table server 19731-1 adds the above content to the conversion table 1931-1 (procedure P170). At this point, the incoming ICS network address and the recipient ICS user address are not registered in the conversion table 1931-1, and the conversion table 1931-1 will be described later in “registration of communication partner” described later in this embodiment.
Register with.

Next, the conversion table server 19731-1 executes the IC
It notifies the S domain name server 19641-1 of the ICS network address, ICS user address, and ICS name (procedure P180). ICS domain name server 19
741-1 is an internal database 19641-1.
The ICS network address, the ICS user address and the ICS name received are written and stored (procedure P190), and the completion of the writing is indicated by the conversion table server 19731.
-1 (procedure P200). Conversion table server 197
31-1 confirms this report (procedure P210), and notifies the user service server 19711-1 of the end of the series of procedures.
To the user service server 19 (procedure P220).
711-1 confirms this report (procedure P230), and notifies the ICS user address and the ICS name which are the allocation results to the use applicant (procedure P240). Since the ICS network address is used only inside the ICS, the use applicant is not notified. Further, in the case of the ICS network server, that is, when the value of the request identification is “4”, the user service server 19711-1 sets the ICS 1900 in the procedure P160.
It notifies all conversion table servers inside 0-1 and requests registration in the conversion tables of all access control devices.

<< Rewrite management of conversion table by the general conversion table server >> Procedures P800 to 960 on the lower side of FIG. 119, FIG.
This will be described with reference to FIGS. The general conversion table server 19730-1 is a conversion table server 19731-
1 is instructed to rewrite the contents of the conversion table 19301-1, for example, speed class priority, originating ICS network address, and some or all items of the conversion table (procedure P800). According to this instruction, the contents of the conversion table 19301-1 are changed (procedure P810). Also, the domain name server 19741
-1 is instructed to rewrite the ICS network address and the like (procedure P820), and the domain name server 19741-1
Updates the internal table according to this instruction (procedure P83).
0), the result is reported to the conversion table server 19731-1 (procedure P840), the conversion table server 19731-1 confirms (procedure P850), and the overall conversion table server 19730-1.
(Procedure P860). The general conversion table server 19730-1 is a user service server 19711-1.
Is instructed to rewrite the contents of the user database 19611-1 such as the speed class, the ICS network address, and other items (procedure P900).
The user service server 19711-1 updates the contents of the user database 19611-1 according to the instruction (procedure P910). ICS Authority Server 1972
1-1 ICS network address and I no longer needed
Returns the CS user address and the ICS name or transmits a new request (procedure P920), and the ICS authority server 19
The 721-1 updates the ICS network address assignment record table 19622-1 and the ICS user address assignment record table 19623-1 according to this instruction (procedure P93).
0), and the result is stored in the user service server 19711-1.
To the user service server 1 (procedure P940).
9711-1 confirms (procedure P950) and reports to the overall conversion table server 19730-1 (procedure P960).

In the above description, the general conversion table server 1
9730-1 is the first user service server 197
It is also possible to execute the procedures P900 to P960 by calling 11-1 and secondly invoke the conversion table server 19731-1 to execute the procedures P800 to P860. Because of this, the ICS operator 199
By instructing the general conversion table server 19730-1 to rewrite the contents of the access control table, the domain name server 60-1 or the ICS 60-1 manages the conversion table inside the access control device and address information associated therewith. By exchanging information with the authority server, it is possible to easily manage the rewriting of the contents of the consistent conversion table, that is, update management of all the conversion tables of the access control device inside the ICS19000-1.

<< User Communication Partner Registration >> This will be described with reference to FIG. ICS19000-1 use applicant 1920
0-1 applies to ICS receiver 19940-1 for communication partner registration with the domain name of the communication partner (procedure P30).
0). The ICS receiver 19940-1 receives the domain name of the communication partner (procedure P310), and converts the conversion table server 1973.
1-1 is transmitted (procedure P320). Conversion table server 197
31-1 is a domain name server 19740-1, 1974
2-1 and the like (procedures P330 and P331), the ICS network address and the ICS user address corresponding to the inquired communication partner domain name are obtained, and the contents of the conversion table 1931-1 are updated. (Procedure P34
0), and report the result (procedures P350, P360). The updated result is shown in a conversion table 1931-2. The obtained ICS network address is the incoming ICS network address, and the ICS user address is the recipient ICS.
Each user address is registered in a conversion table as shown in FIG. 141. In addition, the ICS network server
The fields of the incoming ICS network address and the recipient ICS user address are left blank.

<< Registration of User to ICS-2: Intra-Company Communication and Virtual Private Line >> A description will be given with reference to FIG. The difference between the intra-company communication and the above-mentioned inter-company communication is that the ICS user address is submitted and the ICS name cannot be used. Therefore, there is no ICS name assigned and the ICS name is used. Procedure (P180, P19
0, P200). First, the ICS19000-1 user 19200-1
Apply for ICS subscription to ICS receptionist 19940-1
(Procedure P400). The application acceptance data is ICS usage items excluding the ICS network address and the ICS name, such as an ICS user address, for example, request identification (intra-enterprise communication, inter-enterprise communication, virtual private line connection, classification of ICS network server), The speed class and priority are the same as in the inter-company communication. ICS user address is sender I
One or more sets are presented for both the CS user address and the receiver ICS user address. In the case of a virtual leased line connection, the sender ICS user address and the receiver IC
Not presenting the S user address is different from the case of intra-company communication.

The ICS receptionist 19940-1 stores the “application reception data” in the user service server 19711-1.
Through the operation interface and store the “application reception data” in the user database 19611-1.
(Procedure P410). Next, the user service server 1971
1-1 sends the IC to the ICS authority server 19721-1.
S user address, ICS network address and I
A CS name is requested using the ICS network communication function (procedure P420). The ICS authority server 19721-1 allocates only the ICS network address in the same manner as the above-described procedure P130 (procedure P430), records the allocation result in the allocation table, and returns the allocated result to the user service server 19711-1. (Procedure P440). The user service server 19711-1 is the ICS authority server 1972
The allocation result obtained from 1-1 is stored in the user database 1961
1-1 is stored (procedure P450).

[0401] The user service server 19711-1 is
The conversion table server 19731-1 is notified of the application contents and the acquired ICS network address (procedure P46).
0), the conversion table server 19731-1 sends the conversion table 193
01 (procedure P370) and report completion of registration
(Procedures P480 and P495). FIG. 128 shows the conversion table 193.
01 shows an example in which intra-company communication and virtual private line registration are performed.

<< Description of Domain Name Server >> Procedures P330 and P331 relating to the domain name server in the description of FIG.
129, an example of four layers will be described with reference to FIG.
The ICS network address of the internal table 19600-1 of the domain name server for the domain name "root" is "9500", and the domain name "a" is located below the ICS network address.
l ”,“ a2 ”,“ a3 ”..., for example, an IC in which a domain name server handling a domain name“ a1 ”is located
This indicates that the S network address is “9610” and the port number is “440”. Domain name "a
Internal table 19610 of the domain name server for "1"
The ICS network address of “−1” is “9610”, and domain names “bl”, “b2”, “b3”
"..." indicates that the ICS network address where the domain name server handling the domain name "b2" is located is "9720" and the port number is "440".

The ICS network address of the internal table 19620-1 of the domain name server for the domain name “b2” is “9720”, and the domain names “c4”, “c5”, “c6”,. Exists, for example, the domain name “c5” does not have a lower domain name because the display of the end point column is “YES”, and in this example, it corresponds to the ICS name “c5.b2.al.” ICS
This indicates that the network address is “9720” and the ICS user address is “4510”.
The record of the internal table 19620-1 of the domain name server, that is, the ICS name (ICS domain name) and the IC
S network address and ICS user address “4”
A set of data including the combination with "610" is particularly called a "resource record" of the domain name server.

<< Call of Domain Name Server >> FIG. 133
, The conversion table server 19630-1 converts the domain name server 19640-1, 19650-1, 19660-
A procedure for calling an ICS network address and an ICS user address corresponding to the domain name "c5.b2.al." Conversion table server 19
630-1 is a resolver 19635 inside the conversion table.
-1 is input with the domain name "c5.b2.al."
The resolver 19635-1 uses the ICS network communication function to convert the ICS frame 19641-1 including “al” into the ICS frame 19641-1.
When sent to the domain name server 19640-1, an ICS frame 19642-1 including the ICS network address "9610" of the ICS domain name server for "a1" is returned. Next, the resolver 19635-1 sets “b2”
Is sent to the ICS domain name server 19650-1 and the ICS network address “972” of the ICS domain name server for “b2” is sent.
An ICS frame 19652-1 containing "0" is returned.

Next, the resolver 19635-1 is "c5"
Is sent to the ICS domain name server 19660-1, the ICS of "c5"
ICS frame 19662-1 including network address "9820" and ICS user address "4520"
Is returned. By the above procedure, the conversion table server 19
630-1 is an ICS network address "9820" corresponding to the domain name "c5.b2.al."
The user address “4520” is obtained.

<< Rewriting Conversion Table from IP Terminal >> FIG.
This will be described with reference to FIG. Domain name "c5.
b2.al ”is sent to the IP terminal 1
It transmits from 9608-1 to the conversion table server 19731-1 (procedure P500). The conversion table server 19731-1 queries the domain name server (procedure P510), and the domain name server checks the ICS corresponding to the domain name "c5.b2.al".
Search and acquire the network address “9820” and the ICS user address “4520” (procedure P520),
When replying to the conversion table server 19731-1 (procedure P53
O), the conversion table server writes in the conversion table 19301-1
(Procedure P540) Reporting to IP terminal 19608-1
(Procedure P550). In this procedure, the ICS network address “9820” is the destination network address, and the ICS user address “4520” is the recipient ICS
FIG. 138 shows the rewritten conversion table as a user address.
Shown in FIG. 123 omits the description contents of the conversion table corresponding to the request identification included in FIG.

Next, the IP terminal 19608-1 transmits, to the conversion table server 19731-1, an ICS user frame including a designation to change the speed class to “2” for the registered contents of the conversion table 1931-1X (procedure). P600).
The conversion table server 19731-1 converts the conversion table 1931-1.
Rewrite the registered contents of X to speed class "2" according to the specification
(Procedure P610), and reports it to IP terminal 19608-1 (Procedure P620). The conversion table rewritten by this procedure is shown in 19301-Y (FIG. 124).

<< Moving Terminal Between Access Control Devices >> IC
As can be seen from the example of the S user address assignment record table 19623-1, the first line of this table indicates that the ICS user address "4610" contains the ICS name (also called the ICS domain name) "dd1.cc1.bb1". .Aa1.j
p ”is assigned, and the ICS user address and ICS
It is characterized by holding a name. For example, IC
Terminal 19608 with S-user address "4610"
-1 (FIG. 111) with the access control device 19300-1.
To the access control device 19320-1 (FIG. 112), for example, when a new ICS network address “7821” is assigned to this terminal, the conversion table 19321
-1, the originating ICS network address "78"
21 and the sender ICS user address "4610" are registered as a pair, in this case, the ICS name "dd1. cc1. bb1. aa1. jp "
As specified by the ICS user address assignment record table 19623-1, the ICS user address "461"
0 and the ICS name is not changed.The ICS name “dd” inside the domain name server is not changed.
1. cc1. bb1. aa1. jp ", the ICS network address" 7700 ", and the ICS user address" 4610 ".
S name “dd1.cc1.bb1.aa1.jp”
ICS network address “7821” and IC
The address is changed to the S user address “4610”. That is, the ICS network address “7700” is rewritten to another address “7821”, but the ICS name “dd1.cc1.bb1.aa1.jp” and the ICS user address “4610” are not rewritten. In summary, the ICS user address assignment management table of the ICS authority server and the resource record of the domain name server
It holds the user address and the ICS name, and does not change only one of them. Thus, when the terminal is moved between the access control devices, the ICS of this terminal is
There is no need to change the user address and ICS name.

(Another Embodiment: Determination of ICS User Address by User) In the above embodiment, the user
It is modified to determine the CS user address. In other words, the user (user 19200-1)
When applying for use to CS19000-1, an ICS user address is added. ICS Recipient 19940-1
Newly includes the ICS user address in the application reception data. Further, the ICS authority server 19711-1 stores the ICS user address provided by the user in the ICS user address assignment table 19623-1. By the above method, the user can determine his / her own ICS user address by himself, and the degree of freedom is improved.

Embodiment-31 (Calling a communication partner by telephone number): In this embodiment, an ICS user IP frame can be transmitted to and received from a communication partner by using a telephone number as an ICS domain name. An example is shown in which digitized voice is stored in the inside, and this allows public communication by telephone. In the present embodiment, the telephone number “81-3-1234-56” of Tokyo, Japan
78 ”to the domain name“ 5678.34.13.2.3.8 ”
An example will be described in which it is regarded as 1. Here, "3" represents Tokyo and "81" represents Japan.

This will be described with reference to FIG. ICS2000
0-1 is an access control device 2001-1 or 20020
-1,230-1, relay apparatuses 2008-1 and 20
090-1, Domain Name Server 20110-1, 201
20-1, 20130-1, 20140-1, 20150
-1, the access control device 2001-1 includes a line unit 20011-1, a processing device 20012-1, and a conversion table 20.
013-1 and a conversion table server 20040-1. The conversion table server 20040-1 is an access control device
-1 and the ICS network address is “7
800 "and the port number" 600 ".
The conversion table server 20040-1 is ICS2000-1
ICS user address “4600” is given from the outside of the server. When a domain name is input, the ICS user address is converted and returned, and the ICS network address is converted into a conversion table 20013-1 inside the access control device 2001-1. It looks like an ICS server that has the function of registering to the

Reference numeral 20210-1 denotes a LAN;
1-1 and 20300-1 are IP terminals having a function of transmitting and receiving an ICS user frame, each having an ICS user user address of "4520" and "1200", and having an ICS 20000 via an ICS user logical communication line.
-1. Note that IP terminal 20300-1 can be used as a telephone, and is therefore called an IP telephone. IP telephone 20300-1 has a telephone number input section 20310-1,
It includes an IP address storage unit 20320-1, an audio data transmission / reception unit 20330-1, an input button 20340-1, and an audio input / output unit 20350-1.

<< Acquisition of ICS User Address by Phone Number >> Enter Phone Number "1234-5678" Button 2
Input from 0340-1 to telephone number input section 20310-1. The telephone number input unit 20310-1 generates the ICS user frame P1201 and delivers it to the access control device 2001-1 via the ICS user logical communication line.
Here, the ICS user frame P1201 is the sender IC
The S user address is “1200” and the recipient ICS user address is “4600”, and its data part has the telephone number “1234-5” input from the input button 20340-1.
678 ". The processing device 2001-1 looks at the conversion table 2001-1 and checks the ICS user frame P120.
1 is sent to the conversion table server 20040-1 indicated by the ICS user address “4600”. In the case of the present embodiment, the conversion table server 20040-1 is the access control device 2001
Since it is inside 0-1, it is not necessary to use the ICS network communication function. The conversion table server 20040-1 stores the telephone number “1” included in the data portion of the ICS user frame P1201.
234-5678 ", the domain name server 201
30-1, 20140-1 and 20150-1 one after another, and the terminal 202111-1 of the communication partner when the telephone number "1234-5678" is regarded as the domain name.
ICS network address "7920" and ICS
The user address “4520” is obtained.

Next, the conversion table server 20040-1 obtains the two addresses “7920” and “452” obtained here.
0 "is used to create a new conversion table item 20030-1,
For the ICS user address “4520”, an ICS user frame P1202 is generated, the ICS user address “4520” is written therein, and the IP telephone 203
Send to 00-1. IP telephone 20300-1 transmits the IC included in received ICS user frame P1202.
The S user address "4520" and the telephone number "1234--5678" initially queried are combined and stored in the IP address storage unit 20320-1, and the ICS corresponding to the telephone number "1234-5678" will be stored at a later date. It is used when the user address “4520” is required.
The above conversion table new item 20030-1 includes the IP telephone 20300-1 having the ICS network address “7820” and the ICS user address “1200”, and the destination terminal 202111-1 specified by the telephone number “1234-5678”. And Conversion table new item 200
30-1 is used as a new element of the conversion table 20013-1.

<< Communication Using ICS User Address >> A voice is input from the voice input / output unit 20350-1, and the voice is converted into digital data in the voice data transmission / reception unit 20330-1, and the ICS user frame P1210
And transmitted to the destination specified by the telephone number “1234-5678”, that is, the terminal 20211-1 of the destination determined by the ICS user address “4520”, according to the same principle as described in the other embodiments. You. After that, 2
Between two terminals 20211-1 and 20211-1
Telephone communication is performed by sending and receiving CS user frames.

<< Detailed Description of Domain Name Server >> In the above description, the conversion table server presents the telephone number “1234-5678” to the domain name server, and sets the ICS network address “7920” and the ICS user address “4”.
The method for acquiring 520 "will be described in detail.

FIG. 137 is a diagram showing an embodiment of a "domain name tree" having a hierarchy number of 6 based on an international telephone number.
auto-tel ”, and the level 2 of the tree below it
The domain names "1", "44", "81"
"90" ... exists, and then, for example, the domain name "8"
Level 3 domain name below "1" ... "3"
"6" is present, and then, for example, a domain name of level 4 "11", "12",
"13" ... exists, and then, for example, the domain name "1"
The domain name of level 5 below “2”, “33”, “3”
4 ”,“ 35 ”,..., And then, for example, a domain name of level 6 below the domain name“ 34 ”.
7 "," 5678 "," 5679 "...

FIG. 138 shows the internal table 20131-1 of the domain name server 2013-1 handling the domain name “3”. For example, the domain server 20140 handling the domain name “12” below the domain name “3”. -1 IC
This indicates that the S network address is “8720” and the port number is “440”. FIG. 139 shows a domain name server 20140-1 that handles the domain name “12”.
Of the domain server 20150-1 that handles the domain name “34” lower than the domain name “12”, for example, the ICS network address is “8820” and the port number is “440”. Is shown. FIG. 140 shows an internal table 20151 of the domain name server 20150-1 which handles the domain name “34”.
-1. For example, the domain name “5678”
Since the display in the end point column of the internal table 20151-1 is "YES", there is no lower domain name, and in this example, the domain name "5678.34.12.3.3.18."
The ICS network address corresponding to is "892"
0 ", indicating that the ICS user address is" 4520 ".

<< Calling Domain Name Server >> FIG. 141
, The conversion table server 20040-1 converts the domain name servers 20130-1, 20140-1 and 20150-
1 is called and the domain name "567.34.12.
3.81. A description will now be given of a procedure for searching for an ICS network address and an ICS user address corresponding to ". The resolver 20041-1 is an ICS network address of a domain name server handling a level 1 domain" root-tel "shown in FIG. In the case where communication is frequently performed with a domain name server that handles level 2 or level 3 domains, the ICS network address of the higher-level domain name server is stored inside the resolver 20041-1. Holding.

The conversion table server 20040-1 gives the internal resolver 20041-1 the domain name “567.34.
12. The resolver 20041-1 resolves the domain name “3.81. "
ICS network address "86"
When the ICS frame 20135-1 including the domain name "12" under the domain name "3" is sent to the ICS domain name server 20130-1 using the ICS network communication function, ICS frame 20 including the ICS network address "8720" of the ICS domain name server 20140-1 handling the name "12"
136-1 is returned. Next, the resolver 20041-1
Is the ICS frame 2014 containing the domain name “34”
When 5-1 is sent to the ICS domain name server 20140-1, the IC including the ICS network address "8820" of the ICS domain name server handling the domain name "34"
The S frame 20146-1 is returned.

Next, the resolver 20041-1 sends the ICS frame 20155-1 including the domain name “5678”.
Is sent to the ICS domain name server 20150-1, the ICS network address “7920” and the ICS user address “452” corresponding to the domain name “5678” are sent.
ICS frame 20156-1 including "0" is returned.
By the above procedure, the conversion table server 20040-1
ICS network address “7920” corresponding to domain name “56784.34.12.3.81.” And IC
The S user address “4520” is obtained.

<< Phone line connection >> Line section 200011-1
The telephone line conversion unit 20510-1 is connected to the telephone line conversion unit 20510-1 via the telephone line 20530-1. The telephone line conversion unit 20510-1 has the same function as that described in the other embodiments, converts the voice transmitted from the telephone line 20530-1 into digitized voice, and stores the voice in the data unit. Generate an ICS user frame. Also,
The ICS user frame transmitted in the opposite transmission direction, that is, transmitted from the inside of the ICS network and passing through the access control line section, is obtained by converting the digitized voice stored in the data section into analog voice in the telephone line conversion section 20510-1. It is converted or, in the case of an ISDN line, converted into its digitized voice. Because of this, IC
IP terminal 20300-1 to which the S domain name is assigned
And the telephone 20520-1 can perform communication by telephone voice.

(Connection to Public Telephone Network) Further, the telephone line conversion unit 20510-1 and the private branch exchange 20600-1
They are connected by a telephone line 20530-2. Private telephone line 20540- originating from private branch exchange 20600-1
From 1, telephones 20520-2 and 20520-3 are connected, and for example, telephone communication is possible between the telephone 20520-2 and the IP telephone 20300-1. Also, the private branch exchange 20600-1 sends the telephone line 20
670-1, the public telephone network or the international telephone network 20
680-1. Because it looks like this
Telephone communication is possible between the telephone 20520-4 and the IP telephone 20300-1.

Embodiment 32 (IP terminal that can be connected to a plurality of access control devices): This embodiment uses an ICS user IP
Rather than fixing an IP terminal having a function of transmitting and receiving frames to a specific access control device, use of a mobile IP terminal that can be used by connecting to another access control device;
That is, roaming is realized. Roaming is IP
This is realized based on the ICS domain name assigned to the terminal. In the following description, a‖b represents data (concatenated data) obtained by combining data a and data b.

<< Password Transmission Technique by Encryption >> The present embodiment includes a procedure for encrypting a secret password PW and transmitting it from the sender (encryption side) to the receiver (decryption side). First, the encryption function Ei and the decryption function Di
Will be described. The encryption function Ei is represented by y = Ei (k1, x), and the decryption function Di is represented by x = Di (k2, y). Here, y is ciphertext, x is plaintext, kl, k
2 is an encryption key, and i is an encryption number (i = 1, 2,...) That determines how to use the secret key encryption or the public key encryption, including the value of the encryption key. In the above, plaintext x 'is encrypted as x' = x‖r (where r is a random number) instead of plaintext x, and random number r is discarded from plaintext x 'obtained at the time of decryption to obtain plaintext x. Is also good. By doing so, it is said that even if the same plaintext is encrypted, a different ciphertext is generated for the random number, and the ciphertext is resistant to breaking.

(Example of Encryption Number i = 1) << Preparation >> The sender m publishes its domain name (represented by DNm) including the receiver. The receiver uses the secret data compression function Hash-1 to obtain Km = Hash-1.
(DNm) is calculated, and only the encryption key Km is handed over to the sender in a secure manner not to be known to a third party. This example is DE
This is an example in which S encryption is adopted, and the sender uses an encryption function Ei
Holds the “encryption module DES-e” and the encryption key Km. The encryption key Km is a secret value shared by the sender and the receiver. The receiver holds a “decoding module DES-d” for realizing the decoding function Di and a data compression function Hash-1. What is used as the data compression function Hash-1 is determined for each value of the encryption number. The data compression function is also called a hash function.

<< Encryption by Sender >> The sender sets the secret password PW as x = PW and sets the encryption module DE.
By using Se and the held encryption key Km, y = DES−
The encrypted text is transmitted as e (Km, x), and the encrypted text y and the domain name DNm are transmitted.

<< Decryption by Recipient >> Recipient is ciphertext y
And the domain name DNm, and using the secret data compression function Hash-1 of the recipient, Km = Hash-1 (D
Nm), the secret encryption key Km is calculated, and then the receiver uses the decryption module to obtain x = DES-d (Km,
Obtain plaintext x as y). The plain text x is the password PW, and the recipient can obtain the secret password PW. Since the third party does not know the data constriction function Hash-1, it cannot calculate the encryption key Km.
W cannot be calculated. In the above embodiment, the encryption function and the decryption function can be changed to another encryption function and decryption function other than the DES encryption as the definition of the encryption number i = 3.

(Example of Encryption Number i = 2) << Preparation >> This example is an example employing RSA encryption, and the receiver has an encryption function y = x ^e modn and a decryption function y = x ^d
Generate mod n. Here, e ≠ d and the key d are secret values. The receiver is able to publish the encryption keys e and n, and the encryption module RS that realizes the encryption function y = x ^e modn.
Ae is given to the sender. The sender holds the encryption key and the encryption module RSA-e. The sender has no secret encryption module or secret data. On the other hand, the receiver receives n, a secret key d, and a decryption function y =
Decoding module RSA-d that realizes x ^e mod n
Holding.

<< Encryption by Sender >> The secret password PW to be transmitted, its own domain name DNm, and the date and time of transmission (year / month / day / minute / second) are represented by x = PW {x1} x2 (where
xl: as, hour, minute, and second) time domain name DNm, x2 = date, by the encryption module ^{RSA-e, y = x e} mo
Encrypt as dn and transmit the ciphertext y.

<< Decryption by Recipient >> Recipient is ciphertext y
Is received, and the decryption module RSA-
calculating the ^x = y d mod n with d and the decoding key.
Since x = PW‖x1‖x2, data at a predetermined position from the head of x is used as PW. In the above encryption, x1 of the domain name and x2 of the year, month, day, hour, minute, and second are used as random numbers. Since the third party does not know the secret key d, the third party cannot calculate the secret password PW.
In the above-described embodiment, the values of the encryption keys e, d, and n can be changed as the definition of the encryption number i = 4. Further, the RSA encryption technique can be used as another public key encryption technique as a rule for the encryption number i = 5.

<< Terminal authentication technique using password and random number
>> Password PW used on the roaming terminal is
A description will be given of a terminal authentication technique for checking whether or not the password matches a password registered in the authentication server. As a prerequisite, the authentication server of the authentication subject and the terminal of the authentication subject are provided with an encryption function E (where y = E (k, x), y is a ciphertext, k
Is the encryption key, x is the plaintext) and the secret password P to the third party
W and own it. A specific procedure of terminal authentication will be described. The terminal to be authenticated determines the random number R by appropriate means, calculates Y1 = F (PW, R) using the password PW and the function y = F (PW, R), and calculates both the random numbers R and Y1. Sent to the authenticating subject. The authentication subject is a random number R and Y
1 and the received random number R, the password FW held by itself, and the function F, Y2 = F (FW,
R) is calculated, and it is checked whether or not Y1 = Y2 holds.
If they match, the terminal owner as the authenticatee uses the correct password PW, that is, the terminal can be authenticated. In the above technique, the random number R is limited to a time-dependent random number (referred to as a time random number) so that the person to be authenticated cannot freely select it, which makes it more difficult for a third party to calculate the password PW. . Using a secret data compression function Hj instead of the encryption function used above,
1, Y2 = Hj (PW, R).

<< Overall Configuration >> FIGS. 142 and 143 show an outline of the entire roaming technique according to this embodiment, and the ICS 21000-1 is an access control device 2101.
0-1, 21020-1, 21030-1, 21040-
1, 21050-1, 21060-1, relay apparatus 2108
0-1, 2108I-1, 21082-1, 21083
1. Authentication servers 21100-1, 21101-1, 211
02-1, 21103-1, domain name server 2113
0-1, 21131-1, 21132-1, 21133
1, including a user service server 21250-1 and an ICS authority server 21260-1. Access control device 210
10-1 is a conversion table 21013-1, a conversion table server 210
16-1, registration server 21017-1, connection server 21
0182-1, and the access control device 210720-1
Is the conversion table 21023-1, the conversion table server 21026-
1, registration server 21027-1, connection server 21028
-1. Registration server 21017-1 or 21027-
1 is assigned an ICS user address “6300”. The connection server 21018-1 or 21028-1 is provided with the ICS user address “6310”.
Roaming IP outside ICS21000-1
The terminal has a function of registering or connecting an access control device determined according to the necessity to the IP terminal.

The conversion table server 21016-1 converts the conversion table 21
It has the function of rewriting the contents of 013-1, and the conversion table server 21026-1 has the function of rewriting the contents of the conversion table 21023-1, as in the case of the other embodiments. The LAN 21150-1 includes an IP terminal 21151-1, the LAN 21160-1 includes an IP terminal 21161-1, and 21170-1 denotes an IP terminal. 21200-1 is a mobile roaming terminal, which is identified by an ICS domain name “cl.bl.al.” uniquely assigned as ICS21000-1.

<< Application for Using Roaming Terminal >> The owner of the roaming terminal 21200-1 is the ICS user 2
The user service server 212 specifies the method of paying the fee of the roaming terminal 21200-1 as 1270-1.
Apply the ICS domain name (same as the ICS name) and the ICS user address to the ICS authority server 21260-1 via 50-1. The fee payment method is represented by a charging category “MNY”. For example, when MNY = 1, the fee is paid by the home IP terminal (that is, the IP terminal fixedly connected to the access control device), and when MNY = 2, the fee is Specifies to pay according to the record of the authentication server. I
The CS authority server 21260-1 communicates with the roaming terminal 21
ICS domain name "cl.b" for using 200-1
l. al. "And the ICS user address" 1200. "
P terminal 21200-1 is connected to access control device 21010-
ICS authority server 21260 via the user service server 21250-1 for use by being fixedly connected to
Apply for an ICS network address at -1. Upon acquiring the ICS network address, the user service server 21250-11 requests the conversion table server 21016-1 to send the ICS network address “8115” and the I
Conversion of CS user address “1200” into conversion table 21013−
Set to 1. This procedure is described in another embodiment.

[0436] The ICS receiver 21271-1 stores the ICS in the roaming terminal 21200-1 inside 21201-1.
Domain name “cl.bl.al.”, ICS user address “1200”, special ICS user address for roaming terminal (referred to as roaming special number) “100”
0 ”, ICS user address of registration server“ 630 ”
0 ”, ICS user address of connection server“ 6310 ”
Embedded in the roaming terminal 21200-1 and the encryption function Ei and the encryption-related data RP1.
Embed No hash function is embedded. Where R
P1 = Hj (domain name @ RP0) @ RP0 (however, R
P0 = MNY‖i‖j), and the domain name is “cl.
bl. al. ", MNY is the above-described accounting category," i "is an encryption number for classifying the encryption Ei," j "is a type of hash function Hj. A data compression function Hj is a secret used only by the authentication server or the user service server. Since the user does not have the data compression function Hj and does not know Hj, the user cannot generate the encryption-related data RP1.

<< Registration Procedure from Home IP Terminal >> FIG. 1
This will be described with reference to FIG. The roaming terminal user connects the roaming terminal 21200-1 to the home IP terminal 2115.
Connect to position 1-1. Next, the roaming terminal user determines a password (PW) and inputs the password from the input unit 21204-1, and also generates the ICS user frame PK01 using the encryption function and the phonetic-related data stored inside the 21202-1. Generate and ICS user logical communication line 2
Access control device 21010-
1 (step T10). ICS user frame PK
01 is “6300” indicating the roaming registration server
And own ICS domain name "cl.bl.a
l. , Encryption parameter RP1, ICS user address “1200”, expiration date “98-12-31”, encrypted text “y” encrypting the password, “tg” (however,
In order to indicate the registration procedure, tg = 1), and includes “Yes” or “No” for specifying the roaming connection. Here, the ciphertext “y” is generated using the above-described encryption technique.
For example, when the cipher number is 2, the cipher text “y” is generated as y = x ^e mod n (where x = PW {c1.bl.a1} year / month / day / hour / minute / second). Access control device 210
10-1 refers to the conversion table 21013-1, and stores the ICS user frame PK01 in the registration server 21 of the destination “6300”.
017-1 (procedure T15). Registration server 210
17-1 calls the authentication server 21100-1 using the domain name “c1.b1.a1” (procedure T2).
0). The method by which the registration server 21017-1 calls the authentication server 21100-1 using the domain name is the same as the method by which the connection server 21028-1 calls the authentication server 21100-1 using the domain name. Will be described later. The authentication server 21100-1 transmits the received I
The contents of PK01 of the CS user frame are examined, and the ciphertext “y” is decrypted by the above-described technique to calculate the password PW. For example, when the encryption number = 2, x = y ^d mod
As n, the ciphertext “y” is decrypted. Then, x =
PW @ c1. bl. Since a1‖year / month / day / hour / minute / second, the password PW can be obtained.

Next, the content of the encryption parameter PP1 is RP
1 = Hj (domain name @ RPO) @RPO (however, RP
O = MNY‖i‖j), the authentication server 2
The secret hash function H held by 1100-1 itself
j and the obtained domain name “cl.bl.al” are used to calculate t = Hj (domain name‖RP0) ‖RP0), and it is checked whether or not t = RP1 holds for the received RP1. If it is established, the domain name “cl.bl.a
It is determined that the “1”, the charging category MNY, and the encryption numbers “i” and “j” have not been tampered with.
Checks whether there is no excess or deficiency in the registered contents, and if it is normal, registers the registration result in the authentication table 21100-2, and does not register any missing information.

This situation is shown in the row of the management number 1 in the authentication table 21100-2, and the domain name is “cl.bl.a”.
l. , The encryption number is “2”, the charging category (MNY) is “1”, and the calculated password PW value “22469”
1, "98-12-31", indicating that the roaming connection is "Yes", that is, accepting the roaming connection.When the PK01 is generated in the procedure T10, the value of the tg is set to tg = 2. The roaming connection may be designated as “No.” By applying the above-described encryption technique, the password will not be leaked to a third party.A report of the roaming registration is sent via the registration server 21017-1 to ( Procedure T30), then access control apparatus 21010-1
(Procedure T35), and is reported to the roaming IP terminal.
(Procedure T40). Note that tg = 3 from the terminal 21200-1 via the ICS user logical communication line 21152-1.
The ICS user frame that changes the value of the password PW as described above or changes the value of the expiration date as tg = 4 can be transmitted after the procedure T40 is completed. It should be noted that the password may be changed by a method of designating the password used before that.

<< User IP Frame Transmission / Reception at Destination >>
The roaming terminal 21200-1 is connected to the access control device 21.
020-1 and roaming terminal 21200-1
An example of inter-enterprise communication in which an IP frame is transmitted and received between the domain name “cl.bl.al.” and the domain name “c2.b2.a2.” Of the communication partner will be described. The user sets the communication partner's domain name to “c2.b2.a2.”, And sets “tg” to “tg” to specify transmission / reception of an IP frame.
, The password PW of the user, and “5” days of the designation (expressed by TTL) of the roaming connection period
04-1. For this, roaming terminal 2
21201-1 and 21202-1 inside 1200-1 are used. In addition, the IP frame unit 210203-1
ICS user IP frame PK01, PK02, PK0
3. Used to generate and transmit and receive PK04 and the like.

Next, the roaming terminal 21200-1 generates the user IP frame PK02 and sends it to the access control device 2 via the ICS user logical communication line 21210-1.
It is transmitted to 1020-1 (procedure T50). The user IP frame PK02 has the sender domain name “cl.bl.a”.
l. ", The recipient domain name" c2. b2. a2. ", Including a cryptographic parameter RP2 and a connection period (represented by TTL).
This is data calculated inside 02-2. In other words, the date “yy-mm-dd-sssss” is generated as the time random number TR (TR = yy-mm-dd-ssss).
s), RP2 = Ei (PW, TR) ‖TR is calculated using the clock inside the 210202-2 and the encryption function Ei.

The access control device 21020-1 receives the user IP frame PK02, acquires the ICS network address “7800” assigned to the ICS logical terminal thereof, and determines that the request identification is “4” by the conversion table 21023-1.
Further, since the sender ICS user address written in the user IP frame PK02 is “1000” (that is, the roaming special number), the ICS network address “7800” is held, and together with the ICS user frame PK02, Delivery to the connection server 21028-1 indicated by the recipient ICS user address "6310"
(Procedure T60). The ICS network address “7800” held in this procedure is used after a procedure T130 described later.

<< Connection Server Function >> Next, Connection Server 2
1028-1 calls the authentication server 21100-1 using the domain name "c1.b1.a1",
l. bl. al. "And the encryption parameter RP2 to the authentication server (step T70).
1 is the password P written in the authentication table 21100-2.
The values of W and the encryption number are read, and the encryption function Ei is selected to read the password PW. Next, the encryption parameter R
Since P2 is such that RP2 = Ei (PW, TR) ‖TR, using the time random number TR in the latter half of RP2, t =
Ei (PW, TR) is calculated. The value of the temporary variable t calculated here is equal to the first half Ei (PW, PW,
If the password matches T), it can be confirmed that the password PW input to the terminal 21200-1 is correct. Since the time function TR includes the date (that is, TR = yy-mm-dd)
-Sssss), when the received date is different from the processing time, it is possible to detect fraud.

Next, the authentication server 21100-1 has registered the roaming registered in the authentication table 21100-2.
The charge classification and the authentication server call information are stored in the connection server 21028.
-1 (procedure T80). In the case of this embodiment, the charging category is MNY = 1, and the authentication server call information is the ICS network address “7” of the authentication server 21100-1.
981 ", a port number" 710 ", and a management number" 1 "in the authentication management table.The connection server 21028-1 has a domain name" cl. bl. al. "To the domain name server to request an ICS user address and an ICS network address associated with this domain name (procedure T9).
0), the ICS user address “1200” and the ICS network address “8115” are obtained (procedure T10).
0). Similarly, the domain name “c2.b2.a2.” Is presented to the domain name server, and the I
A CS user address and an ICS network address are requested (procedure T110), and the ICS user address "250
“0” and the ICS network address “8200” (procedure T120) The access to the domain name server described above is the same as that described in detail in the other embodiments.

Next, the connection server 21028-1 operates as an IC
The ICS network address “7800” of the ICS logical terminal to which the S user frame was input (retained in step T60), the ICS user address “1200” obtained immediately before from the domain name server, and the ICS user address “250”
0, the ICS network address "8200", and the roaming-registered, charging category, and authentication server call information transmitted from the authentication server 21100-1 are transmitted to the conversion table server 21026-1 (step T130). -6 writes the four transmitted addresses in the conversion table 21023-11.The value of the request identification is "1".
0, which indicates inter-company communication by roaming. When the charging category is MNY = 1, the conversion table 2102 converts the ICS network address “8115” and the ICS user address “1200” acquired from the domain name server immediately before.
It is transcribed to the charge notification destination of 3-1. Also, if the charging category is MN
When Y = 2, the authentication server call information is converted into the conversion table 21013.
It is transcribed to the charge notification destination of -1. Further, the designated “5” days of the roaming connection period included in the ICS user frame PK02 are also written in the conversion table 21013-1. Conversion table server 21026-1 reports the result to connection server 21028-1 when the writing of conversion table 21023-1 is completed (procedure T140). The end report is sent via the access control device 21020-1 (procedure T150), and the ICS user frame PK03 is sent to the roaming terminal 21200-1 (procedure T160). Here, the ICS user frame P
K03 is the ICS user address “1200” attached to the domain name “cl.bl.al.” of the roaming terminal 21200-1 and the domain name “c2.b of the communication partner.
2. a2. ICS user address "250 accompanying"
0 ". The operating company of the access control device is:
The use of the connection server 21028-1 described above,
A series of procedures from the reception of the CS user frame PK02 to the return of the ICS user frame PK03, and the usage fee can be charged to the owner of the roaming terminal 21200-1 for the designated “5” days of the roaming connection period.

<< Use of Roaming Terminal >> The roaming terminal 21200-1 uses the conversion table 21023-1 created according to the above-described procedure to perform inter-company communication in the same manner as described in the other embodiments. (Step T17)
0 to T220). Also, conversion table server 21026-1
Can delete the roaming connection described in the conversion table 21023-1 after the designated “5” of the roaming connection period.

<< Notification of Billing >> Access Control Unit 2102
0-1 notifies the communication charge to the charging notification destination registered in the conversion table 21023-1 (procedure T300 or T31).
0).

<< Method of Accessing Authentication Server >> In the above description, the connection server 21028-1
The domain name “c” is stored in a plurality of authentication servers including 00-1.
l. bl. al. And the roaming terminal 212
ICS network frame PK0 generated by 00-1
2 is correct or not, that is, the domain name “c1.bl.a” of the roaming terminal 21200-1.
l. The method of checking whether "" has already been registered in the authentication server will be described in detail.

FIG. 160 is a diagram showing an example of a domain name tree having four levels. In FIG. 160, a root domain name “root” is provided at level 1 of the tree, and level 2 of the tree below it is provided.
Have the domain names "al", "a2", "a3",...
Domain names "bl", "b2", "b3"
Next, for example, the level 4 domain names “cl”, “c2”, “c3”... Exist below the domain name “bl”.

FIG. 146 shows an internal table 211102-2 of the authentication server 211102-1 which handles the domain name "root". For example, below the domain name "root",
Domain server 21101- handling the domain name "al"
1 indicates that the ICS network address is “7971” and the port number is “710”. FIG. 146 shows an authentication server 211 that handles the domain name “al”.
An internal table 21101-2 of the domain server 21100-1 that handles the domain name “b1” is “7981” and the port number is “710” below the domain name “a1”. ".

FIG. 148 shows an internal table 21100-2 of the authentication server 21100-1 which handles the domain name "bl". For example, the domain name "cl" corresponds to the internal table 21100.
Since the display of the end point column of "-2" is "YES", there is no lower domain name, and in this example, the domain name "cl.bl.al." is registered in the authentication server, and the password PW Is recorded as “224691” and the expiration date is “98-12-31”.

<< Calling of Authentication Server >> Referring to FIG. 149, connection server 21028-1 sets domain name "c1.
b1. a1 ", the authentication server 21100-1 is called, and the domain name" cl. bl. al. 160. Here, a method of checking whether or not “.” Has been registered in the authentication server will be described. Here, the connection server 21028-1 uses the ICS of the authentication server that handles the level 1 domain “root” shown in FIG.
Has a network address inside. Also, in the case where communication is frequently performed with authentication servers that handle level 2 and level 3 domains, the ICS network addresses of these authentication servers are similarly held.

The connection server 21028-1 sends the domain name “c1.bl.al” to the internal resolver 21029-1.
Enter The resolver 21029-1 uses the ICS network communication function to send the ICS frame 21335-1 including the domain name “al” under the domain name “root” and the encryption parameter RP2 to the authentication server 211102-1, and Authentication server 21101 handling “a1”
ICS frame 21336-1 including the ICS network address "7971" of -1 is returned. Next, the resolver 21029-1 operates the IC including the domain name "bl".
The S frame 21345-1 is transmitted to the authentication server 21101-1.
To the authentication server IC that handles the domain name "bl"
An ICS frame 21346-1 including the S network address "7981" is returned. Next, the resolver 210
29-1 sends the ICS frame 21355-1 including the domain name "cl" to the authentication server 21100-1.
Since the column of the end point of the domain name “cl”, 21100-2 in this case is “Yes”, it can be determined that the authentication information has been registered. As described above, “root”, “a
1. "and" bl "in that order, so that the domain name" cl. bl. al. It can be seen that the authentication information for "" is registered in the internal table 21100-2.

The authentication server 21100-1 checks the received encryption parameter RP2, and checks the validity period “98-12-31”.
Check that is not over. Next, the authentication server 211
00-1 reads the value of the password PW and the encryption number written in the authentication table 21100-2, and selects the encryption function Ei. The encryption parameter RP2 is obtained by RR2 = Ei (P
Since (W, TR) ‖TR, t = Ei (PW, TR) is calculated using the time random number TR in the latter half of RP2. If the value of the temporary variable t calculated here matches Ei (PW, TR) in the first half of the received RP2, it is confirmed that the password PW input to the terminal 21200-1 is correct. The above result is reported to the connection server 21028-1. As a result, the connection server 21028-1 transmits the authentication result (pass or fail) of the roaming terminal and the charging category MNY.
I understand.

<< Another embodiment of roaming without a home IP terminal >> In the above embodiment, the ICS receiver 2127
If 1-1 does not set a home IP terminal,
The “registration procedure from the home 1P terminal” is performed via the user service server 21250-1. This exchange is made by the accounting record “120” inside the authentication table 21100-2 inside the authentication server 21100-1 and the information “7981-71” of the authentication server shown in the accounting notification destination inside the conversion table 21023-1.
0-1 "is used.

<< Another embodiment of roaming in which the authentication server is included in the domain name server >> The domain name tree of FIG. 145 which is the object of the authentication server 21110-1 is shown in another embodiment and is the object of the domain name server. Has the same structure as the domain name tree. Therefore, each domain server
It is possible to store the data of the authentication server described in the present embodiment and include the function of the authentication server. That is, another method of performing roaming is to integrate the authentication server described in the present embodiment with the domain name server described in the other embodiment.

<< Access Control Device and IP Terminal Connected to Wireless Transceiver >> Wireless transceiver 21620-1 is connected to ICS2
1000-1 is installed inside the wireless transceiver 2
1620-1 and the wireless transceiver 21640-1 can exchange information with each other via the wireless communication path 21625-1.
The terminal 21630-1 includes a wireless transceiver 21640-1, and the terminal 21200-2 is the IP terminal 21200-
As in the first embodiment, it has a function of inter-company communication using the ICS domain name. An information communication path 21620- between the access control device 21020-1 and the wireless transceiver 21620-1
There is one. The information communication path 21610-1 is similar to the ICS user logical communication line in having a function of transmitting and receiving an IC user frame.
1 is inside ICS21000-1. Wireless transceiver 21620-1 and wireless transceiver 21640-
2 receives the ICS user frame, converts the internal information of the ICS user frame into ICS user frame information in a radio wave format and transmits the ICS user frame information, and vice versa, that is, receives the ICS user frame information in a radio wave format, It has the function of inverting and sending out the ICS user frame format. Because of this, the IP terminal 21200-
2 is transmitted to the access control device 21020-1 via the wireless transceiver 21640-1, the wireless communication path 21625-1, the wireless transceiver 21620-1, and the information communication path 21610-1. The ICS user frame transmitted from the access control device 21020-1 in the reverse direction is
610-1, a wireless transceiver 21620-1, a wireless communication path 21625-2, and a wireless transceiver 21640-1.
It is sent to P terminal 21200-2.

[0458]

As described above, according to the present invention, a high-priced dedicated line is not required, and a high-speed communication line used for moving image communication such as a TV is not provided, or a communication line equipment is provided. A relatively inexpensive large-scale communication system can be constructed without using the Internet where the person in charge of the expansion plan is absent. In addition, the private address system for computer communication of individual companies (including government agencies, universities, etc.), which had been individually serviced in the past, was hardly changed,
There is an advantage that inter-company communication can be performed together with intra-company communication.
In addition, since the network administrator has the control of the network, management such as troubleshooting of the entire network becomes clear, and reliability is easily secured.
Eavesdropping prevention measures are possible by means of encrypted communication inside the ICS. Further, since the network itself can add an electronic signature to the ICS frame as an option, tampering of the ICS frame can be detected, and information security can be significantly improved. According to the present invention, a single information transfer (IP datagram transfer) independent of services such as voice, image, text, etc., enables services that have been conventionally implemented individually such as a telephone line service and an Internet provider service to be exchanged. , An integrated information communication system connected to the system can be realized.

[Brief description of the drawings]

FIG. 1 is a block diagram schematically showing a basic principle of the present invention.

FIG. 2 is a block diagram showing an example of a network in which the ICS of the present invention is configured by a plurality of VANs.

FIG. 3 is a block diagram illustrating a configuration example of an access control device.

FIG. 4 is a block diagram illustrating a configuration example of a relay device.

FIG. 5 is a block diagram illustrating a configuration example of an inter-VAN gateway.

FIG. 6 is a block diagram illustrating a configuration example of an ICS network server.

FIG. 7 is an array diagram showing an example of an ICS user address used in the present invention.

FIG. 8 is a connection diagram showing a connection relationship between an ICS logic terminal and a user communication line.

FIG. 9 shows an ICS user frame and an IC used in the present invention.
It is a figure showing the relation with S network frame.

FIG. 10 is a part of a block diagram showing a first embodiment (intra-company communication, inter-company communication) of the present invention.

FIG. 11 is a part of a block diagram showing a first embodiment of the present invention.

FIG. 12 is a flowchart illustrating an operation example of the access control device.

FIG. 13 is a flowchart illustrating an operation example of an access control device in inter-company communication.

FIG. 14 is a block diagram showing a second embodiment (virtual leased line) of the present invention.

FIG. 15 is a flowchart illustrating an operation example of an access control device in a virtual leased line connection.

FIG. 16 is a block diagram showing a third embodiment (ICS network server) of the present invention.

FIG. 17 is a flowchart showing an operation example in the access control device in connection with the server in the ICS network.

FIG. 18 is a block diagram for explaining a modification of the third embodiment.

FIG. 19 is a block diagram showing a fourth embodiment (ICS address management server) of the present invention.

FIG. 20 is a flowchart illustrating an operation example of the ICS address management server.

FIG. 21 is a block diagram for explaining a modification of the fourth embodiment.

FIG. 22 is a diagram showing a fifth embodiment of the present invention (ICS name server);
FIG. 3 is a block diagram showing the configuration.

FIG. 23 is a flowchart showing an operation example of the ICS name server.

FIG. 24 is a block diagram for explaining a modification of the fifth embodiment.

FIG. 25 is a part of a block diagram showing an eighth embodiment (billing server) of the present invention.

FIG. 26 is a part of a block diagram showing an eighth embodiment of the present invention.

FIG. 27 is a flowchart illustrating an operation example of a charging process.

FIG. 28 is a part of a block configuration diagram showing a ninth embodiment (ICS frame database server) of the present invention.

FIG. 29 is a part of a block diagram showing a ninth embodiment of the present invention.

FIG. 30 is a diagram showing an example of an ICS user frame used in the ICS frame database server.

FIG. 31 is a flowchart illustrating an operation example of communication example-1 of the ICS frame database server;

FIG. 32 is a flowchart illustrating an operation example of communication example-2 of the ICS frame database server.

FIG. 33 is a flowchart illustrating an operation example of communication example-3 of the ICS frame database server;

34 shows a tenth embodiment (X.25, FR, A) of the present invention.
TM, transmission by satellite communication and telephone line, ISDN line, C
FIG. 2 is a part of a block diagram showing an ATV line, a satellite line, and an IPX frame.

FIG. 35 is a part of a block diagram showing a tenth embodiment of the present invention.

FIG. 36 is a part of a block diagram showing a tenth embodiment of the present invention.

FIG. 37 is a part of a block diagram showing a tenth embodiment of the present invention.

FIG. 38 shows an ICS network frame and X.40. It is a figure which shows a mode of the frame conversion of 25 format.

FIG. 39 is a diagram showing how an ICS network frame and FR format frame are converted.

FIG. 40 is a diagram showing how an ICS network frame and an ATM format frame are converted.

FIG. 41 shows an eleventh embodiment (X.25, FR, A) of the present invention.
TM, transmission by satellite communication and telephone line, ISDN line, C
FIG. 2 is a part of a block diagram showing an ATV line, a satellite line, and an IPX frame.

FIG. 42 is a part of a block diagram showing an eleventh embodiment of the present invention.

43 is a part of a block diagram showing a twelfth embodiment of the present invention (the access control device is accommodated in an X.25 network or an FR network).

FIG. 44 is a part of a block diagram showing a twelfth embodiment of the present invention.

FIG. 45 is a part of a block diagram showing a thirteenth embodiment of the present invention (the access control device is connected to a relay network).

FIG. 46 is a block diagram showing a fourteenth embodiment of the present invention (when the access control device is installed outside the ICS).

FIG. 47 shows a fifteenth embodiment of the present invention (non-IC
FIG. 2 is a part of a block diagram showing S encapsulation.

FIG. 48 is a part of a block diagram showing a fifteenth embodiment of the present invention.

FIG. 49 is a flowchart showing an operation example of non-ICS encapsulation of inter-company communication.

FIG. 50 is a diagram illustrating a format example of an NSAP format ATM address.

FIG. 51 is a diagram illustrating an information unit in an ATM cell format.

FIG. 52 is a diagram for describing conversion / restoration between an ICS network frame and a CPCS frame.

FIG. 53 is a diagram for describing disassembly / assembly between a CPCS frame and a cell.

FIG. 54 is a part of a block diagram showing a sixteenth embodiment (another embodiment using an ATM network) of the present invention.

FIG. 55 is a part of a block diagram showing a sixteenth embodiment of the present invention.

FIG. 56 is a flowchart showing an example of the flow of a frame using SVC and PVC.

FIG. 57 is a flowchart illustrating an example of the flow of a frame using SVC and PVC.

FIG. 58 is a block diagram illustrating an example of one-to-N communication or N-to-one communication using PVC.

FIG. 59 is a block diagram illustrating an example of N-to-N communication using PVC.

FIG. 60 is a diagram showing an example of an FR frame address section.

FIG. 61 is a diagram showing a modification between the ICS network frame and the FR frame.

FIG. 62 is a part of a block diagram showing a seventeenth embodiment (another embodiment using an FR network) of the present invention;

FIG. 63 is a part of a block diagram showing a seventeenth embodiment of the present invention.

FIG. 64 is a flowchart showing an example of the flow of a frame using SVC and PVC.

FIG. 65 is a flowchart showing a flow example of a frame using SVC and PVC.

FIG. 66 is a block diagram illustrating an example of one-to-N communication or N-to-one communication using PVC.

FIG. 67 is a block diagram illustrating an example of N-to-N communication using PVC.

FIG. 68 shows an eighteenth embodiment (telephone line, ISDN) of the present invention.
FIG. 2 is a part of a block configuration diagram illustrating a line, a CATV line, a satellite line, an IPX line, and a mobile phone line).

FIG. 69 is a part of a block diagram showing an eighteenth embodiment of the present invention;

FIG. 70 is a part of a block diagram showing an eighteenth embodiment of the present invention;

FIG. 71 is a part of a block diagram showing an eighteenth embodiment of the present invention.

FIG. 72 is a flowchart showing the operation of the eighteenth embodiment.

FIG. 73 is a part of a block diagram showing a nineteenth embodiment of the present invention;

FIG. 74 is a part of a block diagram showing a nineteenth embodiment of the present invention;

FIG. 75 is a part of a block diagram showing a nineteenth embodiment of the present invention;

FIG. 76 is a diagram showing an example of description contents of a router table in the dial-up router.

FIG. 77 is a flowchart showing the operation of the nineteenth embodiment.

FIG. 78 is a part of a block diagram showing a twentieth embodiment of the present invention.

FIG. 79 is a part of a block diagram showing a twentieth embodiment of the present invention.

FIG. 80 is a part of a block diagram showing a twentieth embodiment of the present invention;

FIG. 81 is a diagram illustrating an example of correspondence between a communication speed and a speed class.

FIG. 82 is a flowchart showing the operation of the twentieth embodiment.

FIG. 83 is a flowchart showing the operation of the twentieth embodiment.

FIG. 84 is a diagram illustrating an ICS user frame after an electronic signature is added.

FIG. 85 is a diagram illustrating an ICS user frame before an electronic signature is added.

FIG. 86 is a part of a block diagram showing a twenty-first embodiment (electronic signature and encryption) of the present invention;

FIG. 87 is a part of a block diagram showing a twenty-first embodiment of the present invention.

FIG. 88 is a flowchart showing the operation of the twenty-first embodiment.

FIG. 89 is a view for explaining an electronic signature at the time of transmission and at the time of reception.

FIG. 90 is a block diagram showing a twenty-second embodiment (electronic signature server and encryption server) of the present invention;

FIG. 91 is a part of a block diagram showing a twenty-third embodiment (open connection) of the present invention;

FIG. 92 is a part of a block diagram showing a twenty-third embodiment of the present invention.

FIG. 93 is a block diagram showing a twenty-fourth embodiment (ISC address name management server) of the present invention;

FIG. 94 is a part of a block configuration diagram showing a twenty-fifth embodiment (separation of functions of an access control device) of the present invention.

FIG. 95 is a part of a block diagram showing a twenty-fifth embodiment of the present invention.

FIG. 96 is a flowchart showing an operation of the twenty-fifth embodiment.

FIG. 97 is a block diagram showing a twenty-sixth embodiment (an access control device including a server and an integrated access control device) of the present invention;

FIG. 98 is a diagram illustrating an example of a TCP frame.

Fig. 99 is a diagram illustrating an example of a UDP frame.

Fig. 100 is a twenty-seventh embodiment of the present invention (incoming call priority control).
Is a part of a block configuration diagram showing

FIG. 101 shows a twenty-seventh embodiment of the present invention (incoming call priority control).
Is a part of a block configuration diagram showing

FIG. 102 is a figure for explaining the 27th embodiment;

FIG. 103 is a flowchart illustrating an operation example of priority determination.

FIG. 104 shows a twenty-eighth embodiment of the present invention (transmission priority control).
FIG. 3 is a block diagram showing the configuration.

FIG. 105 is a diagram illustrating an example of a conversion table used in the twenty-eighth embodiment.

FIG. 106 is a flowchart showing an operation example of priority determination in the twenty-eighth embodiment.

FIG. 107 is a block diagram showing a twenty-ninth embodiment (plural communications) of the present invention.

FIG. 108 is a diagram illustrating an example of a conversion table used in the twenty-ninth embodiment.

FIG. 109 is a diagram illustrating an example of a conversion table used in the twenty-ninth embodiment.

FIG. 110 is a block diagram showing a modification of the thirty-fourth embodiment.

FIG. 111 is a part of a block configuration diagram showing a thirtieth embodiment (operation of an integrated information communication system) of the present invention.

FIG. 112 is a part of a block configuration diagram showing a thirtieth embodiment (operation of an integrated information communication system) of the present invention.

FIG. 113 is a view for explaining the 30th embodiment;

FIG. 114 is a view for explaining the 30th embodiment;

FIG. 115 is a figure for explaining the 30th embodiment;

FIG. 116 is a figure for explaining the 30th embodiment;

FIG. 117 is a figure for explaining the 30th embodiment;

FIG. 118 is a figure for explaining the 30th embodiment;

FIG. 119 is a figure for explaining the 30th embodiment;

FIG. 120 is a diagram illustrating an example of an ICS network address assignment record table used in the thirtieth embodiment;

FIG. 121 is a diagram illustrating an example of an ICS user address assignment record table used in the thirtieth embodiment.

FIG. 122 is a diagram illustrating an example of a conversion table used in the thirtieth embodiment.

FIG. 123 is a diagram illustrating an example of a conversion table used in the 30th embodiment.

FIG. 124 is a diagram illustrating an example of a conversion table used in the thirtieth embodiment.

FIG. 125 is a procedure diagram for explaining the thirtieth embodiment.

FIG. 126 is a diagram illustrating an example of a conversion table used in the thirtieth embodiment.

FIG. 127 is a sequence diagram for explaining the 30th embodiment;

FIG. 128 is a diagram illustrating an example of a conversion table used in the thirtieth embodiment.

FIG. 129 is a diagram for describing a domain name server.

FIG. 130 is a diagram for describing a domain name server.

FIG. 131 is a diagram for describing a domain name server.

FIG. 132 is a diagram for describing a domain name server.

FIG. 133 is a diagram for describing calling of a domain name server.

FIG. 134 is a diagram for describing rewriting of a conversion table from an IP terminal.

FIG. 135 is a diagram for describing rewriting of a conversion table from an IP terminal.

FIG. 136 is a block diagram showing a thirty-first embodiment of the present invention (calling a communication partner by telephone number).

FIG. 137 is a view for explaining a 31st embodiment;

FIG. 138 is a diagram showing an example of the internal table used in the thirty-first embodiment.

FIG. 139 is a diagram illustrating an example of an internal table used in the thirty-first embodiment.

FIG. 140 is a diagram showing an example of an internal table used in the thirty-first embodiment.

FIG. 141 is a diagram for describing calling of a domain name server.

FIG. 142 is a part of a block configuration diagram showing a thirty-second embodiment (IP terminal connectable to a plurality of access control devices) of the present invention.

FIG. 143 is a part of a block diagram showing a thirty-second embodiment (IP terminal connectable to a plurality of access control devices) of the present invention;

FIG. 144 is a timing chart for explaining a registration procedure from a home IP terminal.

FIG. 145 is a diagram for describing an access method of the authentication server.

FIG. 146 is a diagram showing an example of an internal table used in the 32nd example.

FIG. 147 is a diagram showing an example of the internal table used in the 32nd Example.

FIG. 148 is a diagram illustrating an example of an internal table used in the 32nd working example.

FIG. 149 is a diagram for describing calling of the authentication server.

FIG. 150 is a block diagram for explaining a conventional LAN network.

FIG. 151 is a diagram illustrating an example of the form of the Internet.

FIG. 152 is a diagram showing an IP frame defined by RFC791.

FIG. 153 is a diagram showing an IP frame defined by RFC1883.

[Explanation of symbols]

 1, 100 Integrated information and communication system (ICS) 2, 3, 4, 5, 10 Access control device 20 Relay device 30 Gateway between VAN 40 ICS network server 50 ICS network address management server 60 User physical communication line

Continuation of the front page (56) References JP-A-64-23646 (JP, A) JP-A-9-266509 (JP, A) JP-A-5-75726 (JP, A) JP-A-9-247210 (JP) JP-A-6-205137 (JP, A) JP-A-5-227165 (JP, A) Koichi Takao et al., "C & C Internet Service Mesh", NEC Technical Report, Vol. 49, No. 7, p. 74-81, NEC Creative, July 30, 1996 IEICE Technical Report IN 98-12 (April 23, 1998) IEICE Technical Report IN 98-113 (October 16, 1998 Date) (58) Fields surveyed (Int.Cl. ⁷ , DB name) H04L 12/56 H04L 12/66 H04L 12/46 H04L 12/28

Claims (84)

(57) [Claims] An ICS network address for identifying an ICS logical terminal is assigned to an ICS logical terminal at the end of a user communication line, and ICS logical terminal identification information of a transmitting side, a sender ICS user address, and a receiver ICS user address. When the set is determined, an ICS network communication line through which an ICS network frame is transferred between the transmission-side access control device and the reception-side access control device is uniquely determined, and an ICS for specifying the ICS network communication line is specified. The ICS network address that determines the transfer destination of the network frame is defined by the conversion table of the access control device and the relay table of the relay device, and an external ICS user frame having a unique ICS user address system ADX is transmitted from the user communication line. Via the ICS logic terminal to the access control device on the transmission side And force, and the information identifying the ICS logic terminal of the ICS user frame is input, the IC
When it is found that the sender ICS user address and the receiver ICS user address in the S user frame are both registered in the record of the conversion table of the access control device, the ICS user frame is stored in the ICS network address. It is adapted to be converted into an internal ICS network frame having a system ADS.
The CS network frame includes a network control unit, the network control unit stores at least the ICS network address for specifying the ICS network communication line, and the ICS network frame conforms to the rules of the ICS network address system ADS. When the transfer destination of the ICS network frame is determined based on the conversion table of the access control device and the relay table of the relay device, the ICS network communication line is transmitted, and when the ICS network frame reaches the access control device on the receiving side, The ICS user frame is the ICS
Integrated information characterized by being restored from a network frame, transferred to another user communication line via an ICS logical terminal of the access control device on the receiving side, and reaching another external information communication device. Communications system. 2. The method according to claim 1, wherein said conversion table includes a priority,
2. The integrated information communication system according to claim 1, wherein a CS network frame includes a priority obtained from the conversion table, and the ICS network frame is transmitted by the relay device according to a priority of the ICS network frame. . 3. The conversion table has two or more records, and specifies the ICS network communication line for a set of the ICS logical terminal identification information, the sender ICS user address, and the receiver ICS user address. The ICS for
2. The integrated information communication system according to claim 1, wherein a set of network addresses differs for each record, and the destination of the ICS user frame can be changed by changing the recipient ICS user address. 4. The sender ICS registered in the conversion table
2. The integration according to claim 1, wherein intra-company communication and inter-company communication can be performed according to whether the user address and the recipient ICS user address are both intra-company communication addresses or inter-company communication addresses. Information communication system. 5. An ICS logic terminal at the end of a user communication line is provided with an ICS network address for identifying the ICS logic terminal, and an IC to which an ICS user frame is input.
If the S logical terminal identification information is determined, the ICS network communication line to which the ICS network frame is transferred is determined, and the IC
An ICS network address for specifying the S network communication line is registered as a record in the conversion table of the access control device, and the request identification is registered as a virtual leased line in the record, and a unique ICS user address system ADX An external ICS user frame having the following is input from the user communication line to the access control device via an ICS logical terminal, and the record of the conversion table including the ICS logical terminal identification information has a request identification of a virtual leased line. When the IC is found to be registered as
S user frame is ICS network address system A
The ICS network frame is converted into an internal ICS network frame having a DS, the ICS network frame includes a network control unit, and the network control unit transmits at least the ICS network address for specifying the ICS network communication line. Storing the said IC
According to the rules of the ICS network address system ADS, the S network frame determines the transfer destination of the ICS network frame based on the conversion table of the access control device and the relay table of the relay device, and transmits the ICS network communication line. When the frame reaches the access control device on the receiving side, the ICS user frame is restored from the ICS network frame, transferred to another user communication line via the ICS logical terminal of the access control device on the receiving side, and transmitted to the external device. An integrated information communication system characterized by reaching another information communication device. 6. The record of the conversion table includes a request identification indicating intra-company communication / inter-company communication, and the request identification is virtually exclusive in a record of the conversion table including the ICS logical terminal input by the ICS user frame. When the line is registered as a line, the process for the record is not performed, and when the request identification is found to be intra-company communication / inter-company communication, it is converted to the ICS network frame. 2. The integrated information communication system according to claim 1, wherein: 7. ICS logical terminal identification information, sender ICS
When a set of a user address (between companies) and a receiver ICS user address (between companies) is determined, an ICS network communication line to which an ICS network frame is transferred is determined.
An ICS network address for specifying the CS network communication line is registered in the record of the conversion table of the access control device, and the sender ICS user address (in the company) is included in the record of the conversion table. The address (between companies) is registered in a one-to-one correspondence,
The conversion table includes a request identification indicating inter-enterprise communication, information for identifying an ICS logical terminal input by the ICS user frame, and a sender I in the ICS user frame.
The set of the CS user address and the receiver ICS user address are both included in the record of the conversion table as information for identifying the ICS logical terminal and the sender ICS user address (within the company) and the receiver ICS user address (between the companies). When found to be registered, after changing the sender ICS user address in the ICS user frame to the sender ICS user address (inter-company) registered in the record of the conversion table, A user frame is converted to an internal ICS network frame having an ICS network address system ADS,
The S network frame includes a network control unit,
The network control unit stores at least the ICS network address for specifying the ICS network communication line, and the ICS network frame stores the ICS network frame.
According to the rules of the S network address system ADS, the transfer destination of the ICS network frame is determined based on the conversion table of the access control device and the relay table of the relay device, the ICS network communication line is transmitted, and the ICS network frame is transmitted to the receiving side. Upon reaching the access control device, the ICS user frame is restored from the ICS network frame, transferred to another user communication line via the ICS logic terminal of the access control device on the receiving side, and transmitted to another external information communication system. An integrated information communication system adapted to reach a device. 8. A method comprising: a processing device and an ICS network database, when returning a result held by itself in response to a request from the access control device, or when not holding an answer to a question from the access control device. 2. An ICS network server having a function of communicating with another ICS network server using an ICS network server communication function to obtain an answer and returning the result to an access control device of a query source. Integrated information and communication system. 9. The integrated information communication system according to claim 8, further comprising an address management server having a correspondence table for associating a processing device with an ICS network address corresponding to said ICS user address. 10. An ICS name conversion table including the processing device and an ICS name conversion table, receiving an ICS name from the access control device, and setting an ICS user address for the ICS name to the ICS name.
The address management server writes at least the ICS user address and the ICS network address into the conversion table, and obtains the ICS corresponding to the ICS name from the name conversion table. 9. The integrated information communication system according to claim 8, further comprising an ICS name server having a function of returning a user address to the user. 11. An ICS name conversion table including the processing device and an ICS name conversion table, receiving an ICS name from the access control device, and setting an ICS user address for the ICS name to the ICS user.
The address management server writes the ICS user address and the ICS network address into the temporary conversion table, and obtains the ICS corresponding to the ICS name from the name conversion table. The integrated information communication system according to claim 10, further comprising an ICS name server having a function of returning a user address to the user. 12. An ICS name conversion table including the processing device and an ICS name conversion table, receiving an ICS name from the access control device, and inputting an ICS user address corresponding to the ICS name to the ICS.
The integrated information communication system according to claim 10, further comprising a function of obtaining a result obtained from a name conversion table, notifying the obtained result to the access control device, and returning an ICS user address corresponding to the ICS name to the user. 13. When the access control device receives an ICS user frame, the access control device reads and reads the type of the charging method for each ICS frame stored in the conversion table based on the ICS user address included in the ICS user frame. If the type is a value indicating a metered billing method, billing information is generated, and the billing information is transmitted to a billing server as a billing information frame. 6. The integrated information communication system according to claim 3, wherein the integrated information communication system has a function of not generating the accounting information and transmitting the accounting information to the accounting server as an accounting information frame. 14. An integrated information communication system according to claim 3, wherein at least an access control device is provided outside and an access control device general management server is provided therein to perform intra-company communication or inter-company communication. . 15. The access control device has an encryption unit and a decryption unit, and when ICS encapsulation is performed, the IC is
The S-user frame is converted into a cipher text by the encrypting means and transmitted inside the ICS. At the time of ICS decapsulation, the ICS user frame converted into the cipher text is converted into the original ICS user frame by the decrypting means. The integrated information communication system according to claim 3, wherein the integrated information communication system is configured to return to the above. 16. The access control device is separated into a centralized access control device and a simple access control device, and a user is connected to the simple access control device, and converts the conversion table into a centralized conversion table and a centralized conversion table inside the centralized access control device. 4. A simple conversion table in the simple access control device, wherein ICS encapsulation and ICS decapsulation are performed by the simple access control device, and charging and electronic signature are performed by the centralized access control device. Or the integrated information communication system according to 5. 17. A plurality of user service servers, an ICS authority server, and a conversion table server, each of which receives an application for ICS subscription at the user service server,
6. The integrated information communication system according to claim 3, wherein the S authority server assigns an ICS user address, an ICS network address, and an ICS name, and the conversion table server rewrites a conversion table in the access control device. 18. The system according to claim 3, wherein the ICS operator gives an instruction to the general user service server, the general resource management server, and the general route information server, and performs an individual report to perform the operation. Integrated information and communication system. 19. The integrated information communication system according to claim 3, wherein a telephone line conversion unit inside the access control device is connected to a telephone via a telephone line to enable communication by telephone voice. 20. The integrated information communication system according to claim 3, wherein an ICS receiver embeds an encryption function and encryption-related data in the roaming terminal, and the encryption function can be selected by changing a parameter. . 21. An ICS user address and an ICS network address of a communication partner are obtained by using a telephone number as an ICS domain name, and the ICS network address is stored in a conversion table in a call-side access control device. The integrated information communication system according to claim 3. 22. An ICS user address and an ICS network address of a communication partner are obtained by using the telephone number as an ICS domain name, and digitized voice is put on an ICS user frame.
2. The integrated information communication system according to 1. 23. An ICS network address for identifying an ICS logical terminal is given to an ICS logical terminal at the end of a user communication line, and if a set of ICS logical terminal identification information on the transmitting side and a receiver ICS user address is determined, An ICS network communication line to which the ICS network frame is transferred is uniquely determined between the transmission-side access control device and the reception-side access control device, and the transfer destination of the ICS network frame for specifying the ICS network communication line is specified. Determine I
The CS network address is defined by the conversion table of the access control device and the relay table of the relay device, and has a unique I
An external ICS user frame having a CS user address system ADX is input from the user communication line to the transmission-side access control device via an ICS logical terminal, and identifies the ICS logical terminal input by the ICS user frame. Information and the recipient I in the ICS user frame
The ICS user frame is converted to an internal ICS network frame having an ICS network address scheme ADS when it is found that both the CS user address and the CS user address are registered in the record of the conversion table of the access control device. The ICS network frame includes a network control unit, the network control unit stores at least the ICS network address for specifying the ICS network communication line, and the ICS network frame includes the ICS network address. According to the rules of the system ADS, the conversion table of the access control device and the relay table of the relay device
The transfer destination of the S network frame is determined and the IC
When the S-network communication line is transmitted and the ICS network frame reaches the access control device on the receiving side, the ICS user frame is restored from the ICS network frame, and the ICS logical terminal of the access control device on the receiving side is restored. Is transferred to another user communication line via the network and reaches another external information communication device, and the user 1 having the value of the ICS user address
Between the user and the other user 2 having another value of the ICS user address, the conversion table of the access control device and the relay table of the relay device to which each user communication line is connected have the IC.
An ICS network communication line capable of transmitting and receiving S user frames is set. A conversion table and a relay table of an access control device connected to each user communication line between another user m and the user 1 or 2 An ICS network communication line enabling transmission / reception of an ICS user frame is set in the relay table of the device. An access is established between each of the other user n and the user 1, 2 or m, in which each user communication line is connected. An ICS network communication line capable of transmitting and receiving ICS user frames is set in the conversion table of the control device and the relay table of the relay device. The users 1, 2, m, and n are set as a set of all the ICS network communication lines. A closed network capable of transmitting and receiving the ICS user frame only between the ICS and the ICS user frame, and including the closed network therein. Law. 24. An ICS logical address at the end of the user communication line is assigned an ICS network address for identifying the ICS logical terminal, and the ICS logical terminal identification information and the receiver I
When the set of CS user addresses is determined, it is registered as a record of the conversion table so that the incoming ICS network address is uniquely determined, and the ICS logical terminal identification information input by the ICS user frame and the ICS user frame When it is found that both the recipient ICS user address and the recipient ICS user address are registered in the record of the conversion table of the access control device, the address is converted into the ICS network frame, and the unique ICS user When an external ICS user frame having the address system ADX is input from the user communication line to the transmission-side access control device via the ICS logical terminal, it is converted into an internal ICS network frame based on the management of the conversion table. , The ICS network frame is the ICS
The inside is transmitted according to the rules of the network address system ADS, and when the ICS network frame reaches the access control device on the receiving side, the ICS user frame is restored from the ICS network frame and the access control device on the receiving side is restored. A user 1 having a value of an ICS user address, which is transferred through another user communication line via an ICS logic terminal and reaches another external information communication device,
Other user 2 with other value of CS user address 2
Between the access control device to which the user communication line of user 1 is connected and the conversion table of the other access control device to which the user communication line of user 2 is connected, a record for enabling transmission and reception of the ICS user frame is set. The record of the conversion table of the access control device to which each user communication line is connected is set between the other user m and the user 1 or 2.
Is set with a record that enables the transmission and reception of an ICS user frame with user 1 or 2. Other users n access each user communication line with user 1, 2 or m. In the conversion table of the control device, a record that enables the transmission and reception of the ICS user frame is set, and as a set of all the records, the user 1, 2,
An integrated information communication method, wherein a closed network capable of transmitting and receiving the ICS user frame only between m and n is defined inside the ICS, and the closed network is included therein. 25. A closed network X and another closed network Y are defined by the method according to claim 23, and the ICS is set between a user x belonging to the closed network X and a user y belonging to the closed network Y. An integrated information communication system which cannot transmit and receive user frames and includes two or more closed networks. 26. An IC for identifying an ICS logical terminal is provided to an ICS logical terminal of an access control device at the end of a user communication line.
As a first rule, if the identification information of the ICS logical terminal is determined, it is registered as a record in a conversion table so that the incoming ICS network address is uniquely determined, and the request identification is virtually included in the record. As a second rule, if a set of the identification information of the ICS logic terminal and the receiver ICS user address is determined, the incoming call
A CS network address is registered as a record of the conversion table so as to be uniquely determined, and a request identification is registered in the record as intra-company communication. The number of records in the conversion table is two or more, and the same ICS The destination of the ICS user frame can be changed by changing the receiver ICS user address with respect to the logical terminal identification information. An ICS user frame is input from the ICS logical terminal, and the ICS logical When a record of the conversion table including the terminal identification information is found and the request identification is registered as a virtual leased line, the incoming IC obtained by the first rule
Using the S network address to convert to an ICS network frame, or when the request identification is registered as intra-company communication, as the second rule, identification information of an ICS logical terminal input by the ICS user frame, The ICS user frame is converted to an ICS network frame when the receiver ICS user address in the ICS user frame is found to be both registered in the record of the conversion table; When both the rule and the procedure according to the second rule are not satisfied, that is, the identification information of the ICS logical terminal input by the ICS user frame,
When it is not found that the set of the receiver ICS user addresses in the CS user frame is registered as a record in the conversion table, the receiver ICS user address in the ICS user frame is set in the section of the inter-company communication address. It is determined whether or not there is, and in the case of the section of the inter-company communication address, the ICS user frame is used as it is as an ICS network frame,
At this time, the destination network address in the ICS network frame is a recipient ICS user address in the ICS user frame, and the ICS network frame is transmitted via at least one relay device, and the other access control device , The ICS network frame
When the CS user frame is restored and the destination network address in the ICS network frame is in the inter-company communication address section, the ICS network frame is used as the ICS user frame as it is,
An access control device used to transfer an S-user frame to another external information communication device and perform a virtual leased line, intra-company communication, and inter-company communication. 27. The ICS logical terminal at the end of the user communication line is provided with an ICS network address for identifying the ICS logical terminal, and the receiver ICS is added to the record of the conversion table.
Just by determining the user address, the IC of the ICS network server
The S network address is registered so as to be uniquely determined as an incoming ICS network address, a request identification meaning an ICS special number is registered in the record, and when an ICS user frame is input from the ICS logical terminal, the ICS The ICS network address assigned to the logical terminal is held as the originating ICS network address. Next, it is determined whether the receiver ICS user address in the ICS user frame matches the receiver ICS user address in the record of the conversion table. If a match is detected and the received ICS network address is registered in the record using the held outgoing ICS network address and the received ICS network address,
The integrated information is converted into an S network frame, and the ICS network frame is transmitted through an internal ICS network communication line according to the rules of the ICS network address system ADS and reaches the ICS network server. Communications system. 28. Internally, it includes two or more access control devices, one or more relay devices, and may include an ICS network server, which are directly or indirectly connected by an ICS network communication line,
A plurality of IP terminals of a user outside the integrated information communication system are connected to any of the access control devices via user communication lines, respectively, for identifying an ICS logical terminal at the end of each user communication line. An ICS network address is assigned to the ICS logical terminal, and the ICS network address is assigned to identify the relay device and the ICS network server. The access control device, the relay device, and the ICS network server Using the ICS network address, an ICS network frame can be transmitted and received to exchange information. An external ICS user frame having an ICS user address system ADX is used by the ICS based on the management of a conversion table in the access control device. Converted to a network frame,
The ICS network frame includes a network control unit and a network data unit, the network control unit including at least an address according to the ICS network address system ADS, and the ICS network frame is transmitted to the ICS network via at least one relay device. When the set of the ICS logical terminal identification information and the receiver ICS user address is determined according to the rules of the address system, the ICS network address stored in the network control unit of the ICS network frame generated by the conversion by the access control device is converted. Is uniquely registered as a record of the conversion table, the identification information of the ICS logical terminal input by the ICS user frame, and the receiver I in the ICS user frame.
When it is found that both CS user addresses are registered in the record of the conversion table, the ICS user frame is converted to the ICS network frame. Yes, for the ICS logical terminal identification information, the set of the receiver ICS user address and the ICS network address stored in the network control unit are different for each record, and the ICS user frame input from the same ICS logical terminal Recipient ICS
By changing the user address, the destination of the ICS user frame can be changed. By transferring only the ICS user frame registered as a record of the conversion table, the collection of the communication fee can be facilitated. An integrated information communication system characterized by the above. 29. When the ICS network address of the caller is determined, it is registered as a record in the conversion table so that the ICS network address stored in the network control unit is uniquely determined, and the record is registered as a virtual leased line. When the ICS user frame is input and found to be registered as a virtual leased line in the record of the conversion table including the identification information of the ICS logical terminal on the transmitting side,
When a CS user frame is converted to the ICS network frame and is not registered as a virtual leased line, the ICS
Identification information of the ICS logic terminal input by the user frame,
When the receiver ICS user address in the ICS user frame is found to be registered in the record of the conversion table, the ICS user frame is converted to the ICS network frame. 29. The integrated information communication system according to claim 28. 30. An originating ICS logic terminal and an external transmission I
The ICS network address of the internal ICS network frame is determined based on the ICS user address assigned to the CS user frame, and the destination ICS logic to which the transmission ICS network frame is to be transmitted is determined based on the determined ICS network address. An integrated information communication system, wherein terminals are determined. 31. An ICS network address for identifying an ICS logical terminal is given to an ICS logical terminal at the end of a user communication line, and when a set of ICS logical terminal identification information on the transmitting side and a receiver ICS user address is determined, An integrated information communication system, wherein an ICS network communication line through which an ICS network frame is transferred is determined between a transmission-side access control device and a reception-side access control device. 32. A unique ICS user address system ADX
Is converted into an internal ICS network frame having an ICS network address system ADS based on the management of a conversion table in the access control device, and the ICS network frame is composed of a network control unit and a network data unit. Wherein the network control unit stores an address according to the ICS network address system ADS, and the network data unit includes the ICS user frame, and includes a rule of the ICS network address system ADS via at least one or more relay devices. Transmitted according to the above I
The CS user frame is restored from the ICS network frame and transferred to another external information communication device. The ICS network address is assigned to the ICS logical terminal at the end of the user communication line, and When the set of the ICS logical terminal identification information and the receiver ICS user address is determined, it is registered as a record in the conversion table so that the incoming ICS network address is uniquely determined, and the I / S input by the ICS user frame is input.
When it is found that the identification information of the CS logic terminal and the receiver ICS user address in the ICS user frame are both registered in the record of the conversion table,
An integrated information communication system, wherein a CS user frame is converted into the ICS network frame. 33. An IP outside the integrated information communication system
An I / O storing a digitized voice between the telephone and another IP telephone via the integrated information communication system.
33. The integrated information communication system according to claim 30, wherein telephone communication is performed by transmitting / receiving a CS user frame. 34. An external IP of the integrated information communication system
An I / O storing a digitized voice between the telephone and another IP telephone via the integrated information communication system.
The integrated information communication system according to claim 3, wherein telephone communication is performed by transmitting / receiving a CS user frame. 35. A conversion table new item including an ICS network address and an ICS user address obtained by inquiring of a domain name server by a conversion table server based on a telephone number. 30, 3
33. The integrated information communication system according to 1 or 32. 36. An ICS stored in a network control unit by defining a closed network X using the method according to claim 23.
An integrated information communication method, wherein the closed network X is identified from the value of the ICS network address by using a property that a network address defines a closed network as a set of ICS network communication lines. 37. A method for defining a closed network X by using the method according to claim 24, and using the property of defining a closed network as a set of records in a conversion table inside an access control device, the closed network X from the value of the record. An integrated information communication method characterized by identifying a network X. 38. The conversion table in the access control device on the transmitting side registers the priority, the ICS network frame includes the priority obtained from the conversion table,
34. The CS network frame is transmitted by the relay device according to the priority.
3. The integrated information communication system according to 2. 39. The ICS network communication line is provided with a speed class, and an ICS network frame in which the speed class is written is transmitted from the relay device to the ICS network communication line corresponding to the speed class. 33. The integrated information communication system according to claim 3, wherein the integrated information communication system is adapted to be performed. 40. A conversion table including a record registered so that a destination ICS network address is uniquely determined when a set of an originating ICS network address, a sender ICS user address and a recipient ICS user address is determined, As a function on the transmitting side, the I input from the ICS logic terminal
A CS user frame and an ICS network address given to an ICS logical terminal input by the ICS user frame are input, and the ICS network address and a sender ICS included in the ICS user frame are input.
A function of converting the ICS user frame into an ICS network frame and transmitting it to the ICS network communication line when it is found that both the user address and the receiver ICS user address are registered in the record of the conversion table. The function of the receiving side is to restore the ICS user frame from the ICS network frame and
An access control device having a function of transmitting from a CS logic terminal to a user communication line. 41. If a set of the originating ICS network address and the recipient ICS user address is determined, the terminating ICS
It has a conversion table including a record registered so that the network address is uniquely determined.
A CS user frame and an ICS network address assigned to an ICS logical terminal input by the ICS user frame are input, and the ICS network address and a receiver ICS included in the ICS user frame are input.
When it is found that both the user address and the user address are registered in the record of the conversion table, the ICS user frame is converted into an ICS network frame to convert the ICS user frame into an ICS network frame.
A function of transmitting the ICS user frame from the ICS network frame as a function of the receiving side, and
An access control device having a function of transmitting from a CS logic terminal to a user communication line. 42. An ICS logic terminal on the transmitting side and an external transmission I
ICS of the internal ICS network frame based on the ICS user address given to the CS user frame
Determine a network address and determine the determined ICS
An access control device characterized in that a destination ICS logical terminal to which a transmission ICS network frame is to be transmitted is determined based on a network address. 43. An ICS network address for identifying the ICS logical terminal is given to the ICS logical terminal at the end of the user communication line, and if a set of the ICS logical terminal identification information on the transmitting side and the receiver ICS user address is determined, An access control device, wherein an ICS network communication line through which an ICS network frame is transferred is determined between a transmission-side access control device and a reception-side access control device. 44. As a function of the receiving side, only when it is found that both the ICS network address and the receiver ICS user address contained in the ICS network frame are registered in the record of the conversion table, Restores the ICS user frame from the ICS network frame and sends it to the user communication line from the ICS logic terminal on the receiving side;
41. The access control device according to claim 40, wherein the S network frame is discarded. 45. The access control apparatus according to claim 40, wherein a speed class is registered in said conversion table, and said speed class is written in said ICS network frame. 46. A priority is registered in the conversion table,
The access control device according to any one of claims 40 to 44, wherein the priority is written in the ICS network frame. 47. A priority is registered in the conversion table,
45. The access control device according to claim 40, wherein an order of transmitting the ICS network frame to the ICS network communication line is determined according to the priority. 48. A priority is registered in the conversion table,
45. The access control device according to claim 40, wherein an order in which the restored ICS user frames are transmitted to a user communication line is controlled according to the priority. 49. An electronic signature unit, as an operation at the time of transmission, adding an electronic signature to the ICS user frame by designating a signature at the time of transmission registered in the conversion table. The access control device according to any one of claims 40 to 43, further comprising a function of adding an electronic signature to the ICS user frame by designating a reception signature registered in a table. 50. An encrypting means and a decrypting means, and as an operation at the time of transmission, by specifying the encryption class registered in the conversion table, the ICS user frame is encrypted and then converted to an ICS network frame. Out of the ICS network communication line, and as an operation at the time of reception, after restoring the ICS network frame, the encrypted ICS
The access control device according to any one of claims 40 to 43, further comprising a function of decoding the user frame to obtain the ICS user frame, and transmitting the ICS user frame from the ICS logical terminal on the receiving side to the user communication line. 51. The access control device according to claim 40, wherein a charging class is registered in the conversion table. 52. An ICS user frame is input from a telephone line as a function of a transmitting side, including a telephone line conversion unit.
A function of converting an ICS network frame input from the ICS network communication line and transmitting an ICS user frame obtained by converting the ICS network frame input from the ICS network communication line to the telephone line is provided as a receiving side function. The access control device according to any one of claims 40 to 43, comprising: 53. An ISDN line conversion unit, which receives a ICS user frame from an ISDN line as a function on the transmission side, converts the frame into an ICS network frame, and sends out the frame to an ICS network communication line. The access control device according to any one of claims 40 to 43, further comprising a function of transmitting an ICS user frame obtained by converting an ICS network frame input from an ICS network communication line to the ISDN line. 54. A CATV line conversion unit, which receives a ICS user frame from a CATV line, converts it into an ICS network frame, and sends it out to an ICS network communication line as a transmitting side function. 44. The access control device according to claim 40, further comprising a function of transmitting an ICS user frame obtained by converting an ICS network frame input from an ICS network communication line to the CATV line. 55. A transmitting / receiving function including a satellite link converter, which receives an ICS user frame from a satellite link as a function on the transmitting side.
A function of converting an ICS network frame input from the ICS network communication line and transmitting an ICS user frame obtained by converting the ICS network frame to the satellite line is provided as a receiving side function. The access control device according to any one of claims 40 to 43, comprising: 56. A transmitting-side function including a mobile telephone line conversion unit, wherein an ICS user frame is input from a mobile telephone line, converted into an ICS network frame, and transmitted to an ICS network communication line. 44. The access control apparatus according to claim 40, further comprising a function of transmitting an ICS user frame obtained by converting an ICS network frame input from the ICS network communication line to the mobile phone line. 57. The access control device according to claim 26, wherein the conversion table does not include a record according to the first rule, and can perform intra-company communication and inter-company communication. 58. An IC for identifying an ICS logical terminal is provided to an ICS logical terminal of an access control device at the end of a user communication line.
S network address is assigned, and as a first rule, if the identification information of the ICS logic terminal is determined, the incoming IC
The S network address is registered as a record in the conversion table so as to be uniquely determined, and the request identification is registered as a virtual leased line in the record. As a second rule, the identification information of the ICS logical terminal and the receiver ICS Once the set of user addresses is determined,
A CS network address is registered as a record of the conversion table so as to be uniquely determined, and a request identification is registered in the record as intra-company communication. The number of records in the conversion table is two or more, and the same ICS The destination of the ICS user frame can be changed by changing the receiver ICS user address with respect to the logical terminal identification information. An ICS user frame is input from the ICS logical terminal, and the ICS logical When a record of the conversion table including the terminal identification information is found and the request identification is registered as a virtual leased line, the incoming IC obtained by the first rule
Using the S network address to convert to an ICS network frame, or when the request identification is registered as intra-company communication, as the second rule, identification information of an ICS logical terminal input by the ICS user frame, The ICS user frame is converted to an ICS network frame when the receiver ICS user address in the ICS user frame is found to be both registered in the record of the conversion table; When both the rule and the procedure according to the second rule are not satisfied, that is, the identification information of the ICS logical terminal input by the ICS user frame,
When it is not found that the set of the receiver ICS user addresses in the CS user frame is registered as a record in the conversion table, the receiver ICS user address in the ICS user frame is set in the section of the inter-company communication address. It is determined whether or not there is, and in the case of the section of the inter-company communication address, the ICS user frame is used as it is as an ICS network frame,
At this time, the destination network address in the ICS network frame is a recipient ICS user address in the ICS user frame, and the ICS network frame is transmitted via at least one relay device, and the other access control device , The ICS network frame
When the CS user frame is restored and the destination network address in the ICS network frame is in the inter-company communication address section, the ICS network frame is used as the ICS user frame as it is,
An integrated information communication system wherein an S user frame is transferred to another external information communication device, and performs a virtual leased line, intra-company communication, and inter-company communication. 59. The integrated information communication system according to claim 58, wherein a record according to said first rule is not included in said conversion table, so that intra-company communication and inter-company communication can be performed. 60. An ICS network address for identifying the ICS logical terminal is assigned to the ICS logical terminal at the end of the user communication line, and if a set of the ICS logical terminal identification information on the transmitting side and the receiver ICS user address is determined, An ICS network communication line to which the ICS network frame is transferred is uniquely determined between the transmission-side access control device and the reception-side access control device, and the transfer destination of the ICS network frame for specifying the ICS network communication line is specified. Determine I
The CS network address is defined by the conversion table of the access control device and the relay table of the relay device, and has a unique I
An external ICS user frame having a CS user address system ADX is input from the user communication line to the transmission-side access control device via an ICS logical terminal, and identifies the ICS logical terminal input by the ICS user frame. Information and the recipient I in the ICS user frame
The ICS user frame is converted to an internal ICS network frame having an ICS network address scheme ADS when it is found that both the CS user address and the CS user address are registered in the record of the conversion table of the access control device. The ICS network frame includes a network control unit, the network control unit stores at least the ICS network address for specifying the ICS network communication line, and the ICS network frame includes the ICS network address. According to the rules of the system ADS, the conversion table of the access control device and the relay table of the relay device
The transfer destination of the S network frame is determined and the IC
When the S-network communication line is transmitted and the ICS network frame reaches the access control device on the receiving side, the ICS user frame is restored from the ICS network frame, and the ICS logical terminal of the access control device on the receiving side is restored. An integrated information communication system characterized in that the information is transferred to another user communication line via the network and reaches another external information communication device. 61. The conversion table includes a priority, the ICS network frame includes a priority obtained from the conversion table, and the ICS network frame is transmitted by the relay device according to the priority of the ICS network frame. 61. The integrated information communication system according to claim 60, which is adapted to be performed. 62. The record of the conversion table is two or more,
For the set of the ICS logical terminal identification information and the receiver ICS user address, the set of the ICS network address for specifying the ICS network communication line differs for each record, and the receiver ICS user address is changed. 61. The integrated information communication system according to claim 60, wherein the destination of the ICS user frame can be changed by using the following. 63. The receiver IC registered in the conversion table
61. The integrated information communication system according to claim 60, wherein intra-company communication and inter-company communication can be performed depending on whether the S user address is an intra-company communication address or an inter-company communication address. 64. The record of the conversion table includes a request identification indicating intra-company communication / inter-company communication, and the request identification is virtually exclusive in the record of the conversion table including the ICS logical terminal input by the ICS user frame. When the line is registered as a line, the process for the record is not performed, and when the request identification is found to be intra-company communication / inter-company communication, it is converted to the ICS network frame. 61. The integrated information communication system according to claim 60, wherein 65. A system comprising a processing unit and an ICS network database, when returning a result held by itself in response to a request from the access control unit, or when not holding an answer to a question from the access control unit. 61. An ICS network server having a function of communicating with another ICS network server using the ICS network server communication function to obtain an answer and returning the result to the access control device of the query source.
3. The integrated information communication system according to 1. 66. Upon receiving the ICS user frame, the access control device reads and reads the type of the charging method for each ICS frame stored in the conversion table based on the ICS user address included in the ICS user frame. If the type is a value indicating the metered billing method, billing information is generated, and the billing information is transmitted to the billing server as a billing information frame. 61. The integrated information communication system according to claim 60, which has a function of not generating the accounting information and transmitting the accounting information to the accounting server as an accounting information frame. 67. The integrated information communication system according to claim 60, wherein at least an access control device is provided outside and an access control device general management server is provided therein to perform intra-company communication or inter-company communication. 68. The access control device has an encryption unit and a decryption unit, and when ICS encapsulation is used, the access control device
The S-user frame is converted into a cipher text by the encrypting means and transmitted inside the ICS. At the time of ICS decapsulation, the ICS user frame converted into the cipher text is converted into the original ICS user frame by the decrypting means. 61. The integrated information communication system according to claim 60, wherein the integrated information communication system is configured to return to. 69. The access control device is separated into a centralized access control device and a simple access control device, and a user is connected to the simple access control device, and converts the conversion table into a centralized conversion table inside the centralized access control device. 61. The simple access control device is divided into simple conversion tables, and ICS encapsulation and ICS decapsulation are performed by the simple access control device, and charging and electronic signature are performed by the centralized access control device. 3. The integrated information communication system according to 1. 70. A plurality of user service servers, an ICS authority server, and a conversion table server, each of which receives an application for ICS subscription at the user service server,
61. The integrated information communication system according to claim 60, wherein the S authority server assigns an ICS user address, an ICS network address, and an ICS name, and the conversion table server rewrites a conversion table in the access control device. 71. The integrated information according to claim 60, wherein the ICS operator gives an instruction to the general user service server, the general resource management server, and the general route information server, and operates by making individual reports. Communications system. 72. The integrated information communication system according to claim 60, wherein a communication by telephone voice is possible by connecting to a telephone via a telephone line from a telephone line conversion unit inside said access control device. 73. The integrated information communication system according to claim 60, wherein an ICS receiver embeds an encryption function and encryption-related data in the roaming terminal, and the encryption function can be selected by changing a parameter. 74. An ICS user address and an ICS network address of a communication partner are obtained by using a telephone number as an ICS domain name, and the ICS network address is stored in a conversion table in an access control device on the calling side. The integrated information communication system according to claim 60. 75. An IP outside the integrated information communication system
An I / O storing a digitized voice between the telephone and another IP telephone via the integrated information communication system.
61. The integrated information communication system according to claim 60, wherein telephone communication is performed by transmitting / receiving a CS user frame. 76. A plurality of records of the conversion table of the access control device on the transmission side each include a receiver ICS user address, and the receiver I assigned to the ICS user frame.
32. The integrated information communication according to claim 31, wherein one of the plurality of records is referred to in response to a change in a CS user address, and the ICS network communication line to which an ICS network frame is transferred is selected. system. 77. ICS logic terminal information on the transmitting side and external I
Based on the receiver ICS user address in the CS user frame, the internal ICS
Determine a network address and determine the determined ICS
The ICS network frame is converted into an ICS network frame by using a network address. The ICS network frame is transferred inside, reaches the access control device on the receiving side, and the external ICS user frame is restored. An integrated information communication system, wherein a destination ICS logic terminal is determined using an ICS network address. 78. ICS logic terminal information on the transmitting side and external I
Based on the receiver ICS user address in the CS user frame, the internal ICS
Determine a network address and determine the determined ICS
The ICS network frame is converted into an ICS network frame by using a network address. The ICS network frame is transferred inside, reaches the access control device on the receiving side, and the external ICS user frame is restored. In an integrated information communication system wherein an incoming ICS logical terminal is determined using an ICS network address, a range division of a sender ICS user address is performed using a sender ICS user address in the external ICS user frame. And identifying a LAN including a source IP terminal connected to a user communication line connected to an ICS logical terminal on the transmission side, as well as a closed network. . 79. A conversion table section including one or more records registered such that a set of a source ICS network address, a sender ICS user address, and a receiver ICS user address is uniquely determined. As the transmission side, the ICS user frame input from the ICS logical terminal and the ICS network address given to the ICS logical terminal are input, and the ICS network address and the sender ICS included in the ICS user frame are input. When it is found that both the user address and the receiver ICS user address are registered in the record of the conversion table section,
A communication function for converting an S user frame into an ICS network frame, and as a receiving side, a function unit for restoring the ICS user frame from the ICS network frame and transmitting the ICS user frame to another ICS logical terminal; circuit. 80. If the set of the originating ICS network address and the recipient ICS user address is determined, the terminating ICS
A conversion table including one or more records registered such that a network address is uniquely determined; and, as a transmission side, an ICS user frame input from an ICS logical terminal, and an ICS network address assigned to the ICS logical terminal. And the receiver IC included in the ICS user frame and the ICS network address
When it is found that both the S-user address and the S-user address are registered in the record of the conversion table section, the ICS user frame is converted to an ICS network frame, and as a receiving side, the ICS network frame is converted from the ICS network frame to the ICS network frame. A communication function circuit having a function section for restoring a user frame and sending it to another ICS logic terminal. 81. An ICS network frame is formed and transmitted by using a new conversion table item including an ICS network address and an ICS user address obtained from the conversion table server in the access control device. , 30, 31, or 32. 82. An ICS network frame encapsulating an ICS user frame based on a new conversion table item including an ICS network address and an ICS user address obtained from the conversion table server. 33. The integrated information communication system according to 5, 30, 31, or 32. 83. An ICS network frame is formed and transmitted by using a new conversion table item including an ICS network address and an ICS user address obtained from the conversion table server.
An access control device according to any one of the above. 84. An ICS network frame encapsulating an ICS user frame based on a new conversion table item including an ICS network address and an ICS user address obtained from the conversion table server. 44. The access control device according to any one of 40 to 43.