JP4191010B2 - Communications system - Google Patents

Description

The present invention relates to a communication system for identifying a base of a terminal based on communication data transmitted by the terminal in a multipoint network.

The conventional telephone communication is configured by a point-to-point network shown in FIG. 25, and the communication control device 50 and the terminals 60a, 60b, 60c are fixedly connected in a one-to-one relationship. For this reason, the caller and callee bases can be identified by physical connection from the communication control device, and the combination of the terminal telephone number and the physically connected line is managed by a database or the like. The calling base can be identified from the telephone number.
On the other hand, in the conventional multi-point type network mainly used for data communication networks, the communication control device 51 and the terminals 61a, 61b, 61c are connected to a common communication path, and the identification of the caller is performed. In order to do this, a method is adopted in which the sender is identified from the address in the header of the communication data. In this method, the source is simply identified, not the origin. On the other hand, by not defining a transmission base, a multipoint network has a property that a telecommunications carrier can give an address without depending on the base.

By the way, as described in Non-Patent Document 1, a service has been started in which a multipoint network that has been mainly used in a conventional data communication system is interconnected with an existing public telephone network and provided as a public telephone service. . The reason for this is that, as shown in FIG. 26, the multipoint type shares a line, and the line cost is reduced correspondingly, and an economical telephone service can be provided. A public telephone service on a currently provided multipoint network is assigned a numbering system that is not tied to a base starting with 050 in accordance with the nature of the multipoint network.
On the other hand, the numbering system used in a conventional public telephone network tied to a base has the convenience of knowing the base just by looking at the number, so the telephone system is compatible with multipoint networks. There is an increasing demand to use the conventional number as it is when switching back to a thing.
“Special feature: IP phone number is not just“ 050 ””, Nikkei Communication, Nikkei BP, July 28, 2003, No. 395, p.

  However, in a multipoint network, an address is set in the header of communication data and transmitted. Therefore, when the user changes the connection base of the calling terminal without permission (for example, changing from Tokyo to Osaka) or when the header address is altered as shown in FIG. If there is no means for confirming the transmission base, there is a problem that it is impossible to prevent the transmission from an address that is not originally transmitted from the base.

  The present invention has been made to solve the above-described problems, and an object of the present invention is to identify a base of a transmission source in a multipoint network so that communication that requires base identification in a multipoint network is required. The purpose is to provide services.

According to the first aspect of the present invention, a plurality of IPs that store telephone numbers of a public telephone number system in advance, are given a logical ID, and transmit communication data including the telephone number as source information when making a call. When the communication data is connected to the telephone terminal device and the IP telephone terminal device and received from the IP telephone terminal device, only the communication data including the logical ID previously associated with the telephone number as the assigned logical ID A plurality of site identification devices to be transferred, a multipoint network connected to the plurality of site identification devices and transferring the communication data transmitted from the site identification device through a common communication path, and connected to the multipoint network , Information on a combination of the logical ID and the telephone number is stored in advance, and the communication is performed through the multipoint network. When data is received, it is determined whether or not the combination information of the assigned logical ID and the caller telephone number included in the communication data matches the combination information stored in advance. And a communication control device that establishes a call based on a caller telephone number and a callee telephone number included in the communication data when it is determined that they match. .

The invention according to claim 2 stores telephone numbers in a public telephone number system in advance, is given a logical ID, stores in advance a higher layer logical ID of a layer higher than the logical ID, and makes a call. A plurality of IP telephone terminal devices that transmit communication data including the telephone number and the higher layer logical ID as source information, and connected to the IP telephone terminal device and receiving communication data from the IP telephone terminal device A plurality of site identification devices that transfer only communication data that includes a logical ID that is associated in advance with the telephone number as the assigned logical ID, and are connected to the plurality of site identification devices and are connected to the plurality of site identification devices through a common communication path. A multipoint network for transferring the communication data transmitted from the identification device; and the multipoint network connected to the multipoint network, When information on a combination of high layer logical IDs is stored in advance and the communication data is received through the multipoint network, a combination of the assigned logical ID included in the communication data and the high layer logical ID of the transmission source And the information stored in the combination stored in advance are determined to match, and the high-layer site identification device that transfers only the communication data determined to match is connected to the high-layer site identification device Information on the combination of the high layer logical ID and the telephone number is stored in advance, and when the communication data is received from the high layer base identification device, the high layer logical ID of the transmission source included in the communication data and Determining whether the combination information with the telephone number matches the combination information stored in advance, A communication control device for establishing a call based the on the calling telephone number included in the communication data and the destination telephone number if it is determined that matches a communication system comprising the.

The invention according to claim 3 is the communication system according to claim 1 or 2, wherein the IP telephone terminal device stores the assigned logical ID in advance, and the logical ID is transmitted from a source. When the communication data further included as information is transmitted and the base identification device receives the communication data from the IP telephone terminal device, the base identification device is associated in advance with the logical ID of the caller included in the received communication data and the telephone number. When the logical ID matches, the communication data is transferred, and when the logical ID of the caller included in the received communication data does not match the logical ID previously associated with the telephone number, the communication data is not transferred. It is characterized by that.

According to a fourth aspect of the present invention, in the communication system according to the first or second aspect, the base identification device is associated in advance with the telephone number when receiving communication data from the IP telephone terminal device. A logical ID is assigned to the communication data, and the communication data to which the logical ID is assigned is transferred.

According to a fifth aspect of the present invention, in the communication system according to any one of the first to fourth aspects, the IP telephone terminal device is assigned logical IDs of a plurality of different hierarchies, and the site identification device is , Information on combinations of logical IDs determined in advance for each different hierarchy is stored in advance, and when communication data is received from the IP telephone terminal apparatus, information on combinations of logical IDs of different hierarchies included in the communication data Transfer only communication data that matches the logical ID combination information for each different hierarchy stored in advance and includes a logical ID previously associated with the telephone number as the logical ID assigned. Features.

The invention according to claim 6 is the communication system according to any one of claims 1 to 5, wherein the site identification device is configured to provide the IP address having the same telephone number as the area code of the public telephone number system. It is provided for each base that accommodates a telephone terminal device, and when the base identification device receives communication data from the IP telephone terminal device, a logical ID associated in advance with the area code corresponding to the base identification device is provided. Only the communication data including the given logical ID is transferred.

Further, the invention according to claim 7 is the communication system according to claim 2, wherein the high layer logical ID stored in advance by the IP telephone terminal device is a private IP address, and the communication control device stores in advance. Among the information of the combination of the high layer logical ID and the telephone number, the high layer logical ID is composed of a global IP address and a port number, and the high layer base identification device is connected to the multipoint network, When information on a combination of a logical ID and the private IP address is stored in advance and the communication data is received through the multipoint network, the assigned logical ID included in the communication data and the private IP address of the transmission source Combination information and the previously stored combinations It is determined whether or not the information matches, and only when it is determined that the information matches, the private IP address and port number of the transmission source of the communication data are preliminarily associated with the private IP address. When the communication control device receives the communication data from the high-layer site identification device, the global IP address and the port number of the transmission source included in the communication data are transferred. And the combination of the telephone number and the combination information stored in advance, it is determined whether or not match, and if it is determined to match, the telephone number of the caller included in the communication data and the incoming call It is characterized in that a call is established based on a previous telephone number.

Further, the invention according to claim 8 is the communication system according to claim 7, wherein the high-layer site identification device sets a private IP address and a port number of the transmission source of the communication data to the private IP address in advance. When converting into the associated global IP address and port number, the private IP address included in the payload of the communication data is also converted into the global IP address.

  As described above, according to the present invention, in the base identification device, the logical ID indicating the base of the terminal or the logical ID identifying the group of the terminal is stored in advance, and when communication data is received from the terminal, the logical ID By verifying the ID, it is determined whether the communication data is transmitted from a legitimate base, and there is an effect of preventing spoofing due to tampering and preventing transmission from other than the logical ID stored in advance.

  In addition, by verifying the base identification for combinations of logical IDs of several layers included in the communication data or logical IDs of different layers, it is determined whether the communication data is transmitted from a legitimate base more accurately. This is effective in preventing tampering over several levels.

  In addition, by applying the present invention to a telephone communication service, it is configured to prevent outgoing calls other than addresses (phone numbers) fixed to an area as in a conventional public telephone network. In the network, there is an effect that it is possible to economically provide a communication service that can give the same telephone number as that of the conventional public telephone network.

Explanation of terms MAC address: A 6-byte address used in the MAC, which is a component on the data link layer of the IEEE 802.3 standard.
VLAN-ID: A 12-bit identifier for identifying a virtual LAN to which a communication frame belongs on an IEEE 802.1Q standard virtual LAN. The VLAN-ID is assigned to the MAC frame in the form of a tag and transmitted together with the MAC frame.
SIP (Session Initiation Protocol): A call control protocol used in a VoIP environment defined by RFC3261.
NAPT (Network Address Port Translation): A protocol that associates a set of global IP address and port number defined in RFC 2663 with one private IP address.
FW (Fire Wall): A device that blocks unauthorized access and protects the machine from attacks by malicious third parties by, for example, not allowing allowed packets to pass when communicating with the Internet.

Hereinafter, an embodiment of the present invention will be described.
In FIG. 1, reference numeral 1 denotes a management area of a telecommunications carrier that provides a communication service in the present embodiment, and shows the boundary of the service provision area. A communication control unit 3 controls a communication service provided by a communication carrier, and controls data transmission / reception between terminals. Reference numerals 10a, 10b, and 10c are base identification devices installed corresponding to the bases. Specifically, a base indicates each area where the area code changes such as the Tokyo branch, Osaka branch, and Nagoya branch of a company, and a base identification device is installed for each base. It will be.
Only communication data corresponding to the logical ID corresponding to the base or included in the logical ID group is allowed to pass. Reference numeral 2 denotes a multipoint network that connects the base identification devices 10a, 10b, and 10c and the communication control unit 3, and each device can transmit and receive communication data to and from each other through a common communication path. In this figure, 30a, 30b, and 30c are user terminals accommodated in the site identification devices 10a, 10b, and 10c, respectively, and the user receives the communication service provided by the communication carrier using the terminals. One or more logical IDs assigned to the respective bases are set in the terminals 30a, 30b, and 30c.

Here, a case where communication data is transmitted from the terminal 30a to any one of the terminals via the communication control unit 3 will be described. The terminal 30a first transmits communication data to the site identification device 10a. The site identification device 10a verifies the logical ID set in the communication data received from the terminal 30a, and sends the communication data to the multipoint network 2 if it is compatible. The multipoint network 2 transmits communication data to the communication control unit 3 according to preset route information.
The communication control unit 3 that has received the communication data can perform subsequent processing on the assumption that the site identification device 10a is communication data that guarantees the legitimacy of the site. Then, the communication control unit 3 checks the communication data transmitted from the logical ID of the communication data from the base to which the terminal 30a belongs, and stores the logical ID stored in advance by checking the correspondence data of the base information and the corresponding data. The logical ID addressed to the appropriate destination terminal is searched from the base information of the destination terminal described in the communication data and the correspondence data of the base information stored in advance and the logical ID, and the destination data is received. A logical ID addressed to the terminal is set, and communication data is transmitted to the destination terminal.

FIG. 2 shows a case where the logical ID is an IP address in the embodiment of FIG. The description of the same reference numerals as those in FIG. 1 is omitted. In FIG. 2, reference numeral 30 denotes a user management area, which indicates the boundary between the network area of the user and the carrier. Reference numeral 31 denotes a network area of the user's A base housed in the base identification device 10a. Reference numeral 32 denotes a network area of the C base housed in the base identification device 10c. In the site identification device 10a, two IP addresses are set as logical IDs for verification, which are Pa1 and Pa2, respectively. In addition, Pa30 (hereinafter, the set state is described as “IP address: Pa30”) is set as the IP address for verification in the site identification device 10c. The terminal 30a is set with Pa1 as the source IP address of the terminal, the terminal 30b is set with the source IP address: Pa2, and the terminal 30c is set with the source IP address: Pa30.
Here, the case where the terminal 30a communicates with one of the terminals via the communication control unit 3 will be described. First, the terminal 30a transmits the communication data in which Pa1 is set as the source IP address of the communication data header to the site identification device 10a. The site identification device 10a receives the communication data, determines from the verification result that the originating IP address of the header of the communication data matches the IP address of Pa1 set in advance as a logical ID, and the multipoint network 2 To send. The multipoint network 2 transmits communication data to the communication control unit 3 according to preset route information, and the communication control unit 3 receives the communication data.
The communication control unit 3 that has received the communication data can perform subsequent processing on the assumption that the site identification device 10a is communication data that guarantees the legitimacy of the site. And the communication control part 3 collates the information memorize | stored beforehand with an originating IP address, and identifies that communication data is the communication data transmitted from base A31. In the case of the terminal 30b, the processing is performed in the same manner as the terminal 30a, and the communication control unit 3 identifies the communication data transmitted from the base C32 as the communication data transmitted from the base A31. When the IP address is transmitted from a device other than the IP address set as the logical ID for verification to the site identification devices 10a, 10b, and 10c, the IP address does not match the logical ID set for verification. And discard the communication data.

  FIG. 3 is a processing sequence in the case of FIG. 2, and shows a flow of processing of a program operating on the computer of the site identification device 10a and the communication control unit 3. The terminal 30a transmits communication data to the site identification device 10a. The site identification device 10a receives the communication data, acquires the IP address from the IP address area of the header of the received communication data, and matches the IP address (here Pa1 or Pa2) stored in advance as a logical ID. If they do not match, they are discarded, and if they match, communication data is transmitted to the communication control unit 3 via the multipoint network 2 (step S1a). The communication control unit 3 that has received the communication data identifies the originating base from the originating IP address of the received communication data (step S1b).

FIG. 4 shows a case where the logical ID is a MAC address in the embodiment of FIG. The reference numerals are the same as those in FIG. Two MAC addresses are set as logical IDs for verification in the site identification device 10a, which are Ma1 and Ma2, respectively. Further, the MAC address: Ma30 is set in the site identification device 10c as a logical ID for verification. Further, Ma1 is set as the terminal MAC address in the terminal 30a, MAC address: Ma2 is set in the terminal 30b, and MAC address: Ma30 is set in the terminal 30c.
Here, the case where the terminal 30a communicates with one of the terminals via the communication control unit 3 will be described. First, the terminal 30a transmits communication data in which Ma1 is set as the originating MAC address of the header of the communication data to the site identification device 10a. The site identification device 10a receives the communication data, determines from the verification result that the originating MAC address of the header of the communication data matches the MAC address of Ma1 set in advance as a logical ID, and the multipoint network 2 To send. The multipoint network 2 transmits communication data to the communication control unit 3 according to preset route information, and the communication control unit 3 receives the communication data.
The communication control unit 3 that has received the communication data can perform subsequent processing on the assumption that the site identification device 10a is communication data that guarantees the legitimacy of the site. And the communication control part 3 collates the information memorize | stored previously and originating MAC address, and identifies that communication data is the communication data transmitted from base A31. In the case of the terminal 30b, processing is performed in the same manner as the terminal 30a, and the communication control unit 3 identifies the communication data transmitted from the base A31 as the communication data transmitted from the base C32 in the case of the terminal 30c. To do. When sent from a location other than the MAC address set as the logical ID for verification to the site identification devices 10a, 10b, 10c, the MAC address does not match the logical ID set for verification And discard the communication data.

  FIG. 5 is a processing sequence in the case of FIG. 4 and shows a flow of processing of a program operating on the computer of the site identification device 10a and the communication control unit 3. The terminal 30a transmits communication data to the site identification device 10a. The site identification device 10a receives the communication data, acquires the MAC address from the originating MAC address area of the header of the received communication data, and matches the MAC address (Ma1 or Ma2 here) stored in advance as a logical ID. If they do not match, they are discarded, and if they match, communication data is transmitted to the communication control unit 3 via the multipoint network 2 (step S2a). The communication control unit 3 that has received the communication data identifies the originating base from the originating MAC address of the received communication data (step S2b).

FIG. 6 shows a case where the logical ID is VLAN-ID in the embodiment of FIG. The reference numerals are the same as those in FIG. In the site identification device 10a, VLAN-ID is set as a logical ID for verification, and VLAN-ID: 10 is set as the value. Further, VLAN-ID: 30 is set in the site identification device 10c. Further, the terminal VLAN-ID: 10 is set in the terminal 30a and the terminal 30b as the same VLAN-ID group. The terminal VLAN-ID: 30 is set in the terminal 30c.
Here, the case where the terminal 30a communicates with one of the terminals via the communication control unit 3 will be described. First, the terminal 30a transmits the communication data in which 10 is set as the VLAN-ID of the header of the communication data to the site identification device 10a. The site identification device 10a receives the communication data, determines from the verification result that the VLAN-ID in the header of the communication data matches the VLAN-ID set in advance as the logical ID, and the multipoint network 2 Send it out. The multipoint network 2 transmits communication data to the communication control unit 3 according to preset route information, and the communication control unit 3 receives the communication data.
The communication control unit 3 that has received the communication data can perform subsequent processing on the assumption that the site identification device 10a is communication data that guarantees the legitimacy of the site. And the communication control part 3 collates the information memorize | stored previously and VLAN-ID, and identifies that communication data is the communication data transmitted from base A31. In the case of the terminal 30b, processing is performed in the same manner as the terminal 30a, and the communication control unit 3 identifies the communication data transmitted from the base A31 as the communication data transmitted from the base C32 in the case of the terminal 30c. To do. In the case of transmission from a place other than the VLAN-ID set as the logical ID for verification to the site identification devices 10a, 10b, and 10c, the VLAN-ID is set to the logical ID set for verification in advance. It is determined that they do not match, and the communication data is discarded.

  FIG. 7 is a processing sequence in the case of FIG. 6 and shows a flow of processing of a program operating on the computer of the site identification device 10a and the communication control unit 3. The terminal 30a transmits communication data to the site identification device 10a. The site identification device 10a receives the communication data, acquires the VLAN-ID from the VLAN-ID area of the header of the received communication data, and matches the VLAN-ID (here, 10) stored in advance as a logical ID. If they do not match, they are discarded, and if they match, communication data is transmitted to the communication control unit 3 via the multipoint network 2 (step S3a). The communication control unit 3 that has received the communication data identifies the originating base from the VLAN-ID of the received communication data (step S3b).

FIG. 8 shows a case where a VLAN ID is assigned by the site identification device in the embodiment of FIG. The reference numerals are the same as those in FIG. In the site identification device 10a, VLAN-ID is set as a logical ID, and VLAN-ID: 10 is set as the value. Further, VLAN-ID: 30 is set in the site identification device 10c. The difference from the case of FIG. 6 is that no VLAN-ID is set in the terminal, and the VLAN-ID is assigned by the site identification devices 10a and 10c. That is, when the site identification device 10a receives communication data from all the terminals accommodated in the site identification device 10a, for example, the terminal 30a or the terminal 30b, it assigns 10 as the VLAN-ID to all the communication data and multipoints. Type network 2. The subsequent processing is the same as described in FIG.
In the configuration in which the VLAN IDs are collectively assigned by the site identification device, all the terminals at the physical site are set to one VLAN-ID, so the VLAN-ID indicates the physical site as it is. On the business side, there is an effect that the physical base and the VLAN-ID can be identified one-to-one.

  FIG. 9 is a processing sequence in the case of FIG. 8, and shows a flow of processing of a program operating on the computer of the site identification device 10a and the communication control unit 3. The terminal 30a transmits communication data to the site identification device 10a. The site identification device 10a receives the communication data, assigns 10 to the VLAN-ID area of the header of the received communication data, and transmits the communication data to the communication control unit 3 via the multipoint network 2 (step S4a). . The communication control unit 3 that has received the communication data identifies the originating site from the VLAN-ID of the received communication data (step S4b).

FIG. 10 shows an embodiment in which a plurality of logical IDs having different hierarchies (hereinafter referred to as layers) are combined and identified in addition to the processing described in FIG. The description of the same reference numerals as those in FIG. 1 is omitted. In addition to FIG. 1, a site identification device 20 that verifies a high-layer logical ID is installed in a form that is inserted into a connection portion between the communication control unit 3 and the multipoint network 2. Here, VLAN-ID, MAC address, and the like are assumed as the low layer logical ID, and an IP address is assumed as the high layer logical ID.
Here, a case where communication data is transmitted from the terminal 30a to any one of the terminals via the communication control unit 3 will be described. The terminal 30a first transmits communication data to the site identification device 10a. The site identification device 10a verifies the low-layer logical ID set in the communication data received from the terminal 30a, and sends the communication data to the multipoint network 2 if the logical ID is compatible. The multipoint network 2 transmits communication data to the site identification device 20 in accordance with preset route control.
The site identification device 20 takes out the low layer logical ID and the high layer logical ID in the header of the received communication data, and determines whether or not the combination matches the combination of the low layer logical ID and the high layer logical ID stored in advance. If the combination of the low layer logical ID and the high layer logical ID does not match, the determination is discarded. If the combination of the low layer logical ID and the high layer logical ID matches, the logical control ID is transmitted to the communication control unit 3.
The communication control unit 3 that has received the communication data can perform the subsequent processing on the assumption that the communication data is already communication data in which the site identification device 10a and the site identification device 20 ensure the validity of the site. Then, the communication control unit 3 checks the communication data transmitted from the logical ID of the communication data from the base to which the terminal 30a belongs, and stores the logical ID stored in advance by checking the correspondence data of the base information and the corresponding data. The logical ID addressed to the appropriate destination terminal is searched from the base information of the destination terminal described in the communication data and the correspondence data of the base information stored in advance and the logical ID, and the destination data is received. A logical ID addressed to the terminal is set, and communication data is transmitted to the destination terminal.

FIG. 11 shows a case where, in the embodiment of FIG. 10, the logical ID set in the terminal side base identification devices 10a, 10b, 10c is VLAN-ID and the logical ID set in the communication control unit side base identification device 20 is an IP address. It is. Since the reference numerals are the same as those in FIGS. In FIG. 11, 10 is set as the VLAN-ID as the low-layer logical ID in the base identification device 10a, and 30 is set as the VLAN-ID as the low-layer logical ID in the base identification device 10c. . The site identification device 20 includes a combination of a low layer logical ID and a high layer logical ID as a combination of VLAN-ID: 10 and IP address: Pa1, a combination of VLAN-ID: 10 and IP address: Pa5, and VLAN. -A combination of ID: 30 and IP address: Pc1 is set.
As terminal settings, VLAN-ID: 10 and IP address: Pa1 are set for the terminal 30a, and VLAN-ID: 10 and IP address: Pa5 are set for the terminal 30b. VLAN-ID: 30 and IP address Pc1 are set.
Here, the case where the terminal 30a communicates with one of the terminals via the communication control unit 3 will be described. First, the terminal 30a transmits communication data in which the VLAN-ID: 10 and the originating IP address: Pa1 of the header of the communication data are set to the site identification device 10a. The site identification device 10a receives the communication data, verifies the VLAN-ID in the header of the communication data, determines from the verification result that it matches the VLAN-ID 10 set in advance as a logical ID, Send to the point network 2. The multipoint network 2 transmits communication data to the site identification device 20 according to preset route information, and the site identification device 20 receives the communication data. The site identification device 20 reads VLAN-ID: 10 and IP address: Pa1 from the header of the communication data, and determines from the verification result that it matches the previously stored combination of VLAN-ID: 10 and IP address: Pa1. Then, VLAN-ID: 10 is deleted from the header, and communication data is transmitted to the communication control unit 3.
The communication control unit 3 that has received the communication data can perform subsequent processing on the assumption that the site identification device 10a and the site identification device 20 are communication data that guarantees the legitimacy of the site. And the communication control part 3 collates the information memorize | stored beforehand with an originating IP address, and identifies that communication data is the communication data transmitted from base A31. In the case of the terminal 30b, the processing is performed in the same manner as the terminal 30a, and the communication control unit 3 identifies the communication data transmitted from the base C32 as the communication data transmitted from the base A31. The site identification devices 10a, 10b, and 10c discard transmissions from anything other than the VLAN-ID stored in advance as a logical ID, and the site identification device 20 also has a combination other than the combination of the VLAN-ID and IP address stored in advance. Discard communication from things as well.

  FIG. 12 is a processing sequence in the case of FIG. 11 and shows a flow of processing of a program executed on the computers of the site identification device 10a, the site identification device 20, and the communication control unit 3. The terminal 30a transmits communication data to the site identification device 10a. The site identification device 10a receives the communication data, and the site identification device 10a acquires the VLAN-ID from the VLAN-ID area of the header of the received communication data and stores the VLAN-ID (here, 10) as the logical ID. ), The communication data is transmitted to the site identification device 20 via the multipoint network 2 (step S10a). The site identification device 20 receives the communication data, and the site identification device 20 determines whether the VLAN-ID: 10 and the IP address: Pa1 match the combination stored in advance from the header of the received communication data. In this case, the communication data is discarded, and if they match, the VLAN-ID is deleted and the communication data is transmitted to the communication control unit 3 (step S10b). The communication control unit 3 that has received the communication data identifies the originating base from the IP address of the received communication data (step S10c).

FIG. 13 shows a case where the logical ID set in the terminal side base identification devices 10a, 10b, 10c is the MAC address and the logical ID set in the communication control unit side base identification device 20 is an IP address in the embodiment of FIG. is there. Since the reference numerals are the same as those in FIGS. In FIG. 13, MAC addresses: Ma1 and Ma5 are set as low layer logical IDs in the site identification device 10a, and MAC addresses: Mc1 are set as low layer logical IDs in the site identification device 10c. . The site identification device 20 includes a combination of a low layer logical ID and a high layer logical ID as a combination of MAC address: Ma1 and IP address: Pa1, a combination of MAC address: Ma5 and IP address: Pa5, and MAC address: A combination of Mc1 and IP address: Pc1 is set.
As the settings on the terminal side, the MAC address: Ma1 and the IP address: Pa1 are set for the terminal 30a, the MAC address: Ma5 and the IP address: Pa5 are set for the terminal 30b, and the MAC address is set for the terminal 30c. Address: Mc1 and IP address: Pc1 are set.
Here, the case where the terminal 30a communicates with one of the terminals via the communication control unit 3 will be described. First, the terminal 30a sets the originating MAC address of the header of the communication data to Ma1, and transmits the communication data in which the originating IP address: Pa1 is set to the site identification device 10a. The site identification device 10a receives the communication data, verifies the originating MAC address of the header of the communication data, determines from the verification result that it matches the Ma1 of the originating MAC address stored in advance as a logical ID, Send to the point network 2. The multipoint network 2 transmits communication data to the site identification device 20 according to preset route information, and the site identification device 20 receives the communication data. The site identification device 20 reads the originating MAC address: Ma1 and the originating IP address: Pa1 from the header of the communication data, and confirms that the MAC address: Ma1 and the IP address: Pa1, which are combinations stored in advance, match with each other. The communication data is transmitted to the communication control unit 3.
The communication control unit 3 that has received the communication data can perform subsequent processing on the assumption that the site identification device 10a and the site identification device 20 are communication data that guarantees the legitimacy of the site. And the communication control part 3 collates the information memorize | stored beforehand with an originating IP address, and identifies that communication data is the communication data transmitted from base A31. In the case of the terminal 30b, the processing is performed in the same manner as the terminal 30a, and the communication control unit 3 identifies the communication data transmitted from the base C32 as the communication data transmitted from the base A31. The base identification devices 10a, 10b, and 10c discard transmissions from those other than the MAC address stored in advance as the logical ID, and the base identification device 20 also uses a device other than the combination of the MAC address and IP address stored in advance. Similarly, the communication is discarded.

  FIG. 14 is a processing sequence in the case of FIG. 13 and shows a flow of processing of a program executed on the computer of the site identification device 10a, the site identification device 20, and the communication control unit 3. The terminal 30a transmits communication data to the site identification device 10a. The site identification device 10a receives the communication data, and the site identification device 10a acquires the MAC address from the originating MAC address area in the header of the received communication data, and stores the MAC address (Ma1 or Ma5 here) stored in advance as a logical ID. ), The communication data is transmitted to the site identification device 20 via the multipoint network 2 (step S11a). The site identification device 20 receives the communication data, and the site identification device 20 determines whether the MAC address: Ma1 and the IP address: Pa1 in the header of the received communication data match the combination stored in advance. The communication data is discarded, and the communication data is transmitted to the communication control unit 3 (step S11b). The communication control unit 3 that has received the communication data identifies the originating site from the IP address of the received communication data (step S11c).

  Although not shown, as a combination form of logical IDs in the embodiment of FIG. 10, the terminals 30a, 30b, and 30c are IP telephone terminal devices, and the communication control unit 3 performs communication control of IP telephones. The case where the high layer logical ID is a telephone number and the low layer logical ID is an IP address can be cited as an example of the embodiment. In this case, the terminal IP address is set as a logical ID in the low-layer base identification devices 10a, 10b, and 10c, and the combination of the terminal IP address and the calling telephone number is set in the high-layer base identification device 20; A verification process similar to that shown in FIGS. 11 to 14 is performed.

  Also, as one form in the embodiment of FIG. 10, for example, base identification devices are installed for three layers, the originating MAC address is verified in the first layer, and the combination of the originating MAC address and the originating IP address is in the second layer. It is also possible to add a verification process that further increases the legitimacy of the base, such as performing verification and performing the calling IP address and calling telephone number in the third layer. In this configuration, there may be a configuration of the site identification device in which one site identification device performs the processing of the second and third layers.

  FIG. 15 shows an embodiment in which the multipoint network 2 in which the site identification devices described in FIGS. 1 and 10 are arranged is applied to a VoIP (Voice Over Internet Protocol) system that performs telephone communication over an IP network. The terminals 30a, 30b, and 30c are IP telephone terminals, and the communication control unit 3 performs communication control of the IP telephone. The meanings of the other symbols are the same as those in FIGS. In addition to the logical ID, a caller telephone number is set for each terminal. The validity of the base is verified only by the base identification apparatus 10a, 10b, 10c compatible with the low layer and the base identification apparatus 20 compatible with the high layer, or the base identification apparatus 10a, 10b, 10c compatible with the low layer. The communication control unit 3 further verifies the validity of the base of the calling telephone number by comparing the stored telephone number with the correspondence data of the base information from the combination of the logical ID and the calling telephone number secured by the verification. Can be confirmed.

FIG. 16 shows a case where the logical ID set in the site identification devices 10a, 10b, 10c in the embodiment of FIG. 15 is an IP address. The reference numerals are the same as those in FIGS. In FIG. 16, Pa1 to Pa5 are set as a range of IP addresses as logical IDs in the site identification device 10a. An example of this setting is to specify a range using a network address in an IP address. As a setting on the terminal side, the terminal 30a has a calling IP address: Pa1 and a telephone number 1234-59-0001 (actually, a 10-digit number from 0AB to J, which is a public telephone number system starting from 0, is shown. Here, for the purpose of explanation, an area code of 1234 is assumed.) Is set, and the originating IP address: Pa5 and telephone numbers 1234-59-0005 are set in the terminal 30b.
Here, the case where the terminal 30a communicates with one of the terminals via the communication control unit 3 will be described. First, the terminal 30a transmits the communication data in which the originating IP address in the header of the communication data is set to Pa1 and 1234-59-0001 is set as the calling telephone number to the site identification device 10a. The site identification device 10a receives the communication data and verifies the originating IP address in the header of the communication data. It is determined that it is included in the IP address range (Pa1 to Pa5) set in advance as a logical ID, and is sent to the multipoint network 2. The multipoint network 2 transmits communication data to the communication control unit 3 according to preset route information.
The communication control unit 3 that has received the communication data can perform subsequent processing on the assumption that the site identification device 10a is communication data that guarantees the legitimacy of the site. The communication control unit 3 acquires the calling IP address: Pa1 and the calling phone number 1234-59-0001 from the communication data, and inquires the database inside the communication control unit 3 for the combination of the calling IP address: Pa1 and the calling phone number. multiply. The database stores a combination of an IP address and a telephone number in advance, and if it is registered as a result of the inquiry, the communication control unit 3 permits the use of the service. The terminal 30b is verified by the site identification device 10a in the same manner as the terminal 30a, and an inquiry is made by a combination of the calling IP address and the calling telephone number in the communication control unit, and the service use is permitted. The site identification device 10a discards communication data from an IP address not included in the IP address stored in advance as a result of the determination.

FIG. 17 is a processing sequence in the case of FIG. 16 and shows a flow of processing of a program executed by the site identification device 10a and the communication control unit 3. The terminal 30a transmits communication data to the site identification device 10a. The site identification device 10a receives the communication data, and the site identification device 10a acquires the IP address from the IP address area of the header of the received communication data, and stores the IP address range (here Pa1) stored in advance as a logical ID. ~ Pa5) is determined. If not included, it is discarded, and if included, communication data is transmitted to the communication control unit 3 via the multipoint network 2 (step S20a).
The communication control unit 3 that has received the communication data acquires the IP address: Pa1 and the calling number: 1234-59-0001 of the received communication data, and inquires of the internal database regarding this combination (step S20b).
If the response from the database is “verification OK”, the communication control unit 3 permits the provision of the communication service (step S20c).

FIG. 18 shows a case where the logical ID set in the terminal-side base identification devices 10a, 10b, and 10c is VLAN-ID and the logical ID set in the communication control unit-side base identification device 20 is an IP address in the embodiment of FIG. is there. The reference numerals are the same as those in FIGS. In FIG. 11, 10 is set as the VLAN-ID as the low layer logical ID in the site identification device 10a. As the combination of the low layer logical ID and the high layer logical ID, a combination of VLAN-ID: 10 and IP address: Pa1, and a combination of VLAN-ID: 10 and IP address: Pa5 are set in the site identification device 20. ing.
As terminal settings, VLAN-ID: 10 and IP address: Pa1 and telephone number: 1234-59-0001 are set for the terminal 30a, and VLAN-ID: 10 and IP address: Pa5 are set for the terminal 30b. And a telephone number: 1234-59-0005.
Here, the case where the terminal 30a communicates with one of the terminals via the communication control unit 3 will be described. First, the terminal 30a transmits communication data in which the VLAN-ID: 10, the calling IP address: Pa1, and the calling telephone number: 1234-59-0001 in the header of the communication data are set to the site identification device 10a. The site identification device 10a receives the communication data, verifies the VLAN-ID in the header of the communication data, determines from the verification result that it matches the VLAN-ID 10 set in advance as a logical ID, Send to the point network 2. The multipoint network 2 transmits communication data to the site identification device 20 according to preset route information, and the site identification device 20 receives the communication data. The site identification device 20 reads VLAN-ID: 10 and IP address: Pa1 from the header of the communication data, and confirms that the combination matches the previously stored VLAN-ID: 10 and IP address: Pa1. Determination is made, VLAN-ID: 10 is deleted from the header, and communication data is transmitted to the communication control unit 3.
The communication control unit 3 that has received the communication data can perform subsequent processing on the assumption that the site identification device 10a and the site identification device 20 are communication data that guarantees the legitimacy of the site. The communication control unit 3 acquires the calling IP address: Pa1 and the calling phone number 1234-59-0001 from the communication data, and inquires the database inside the communication control unit 3 for the combination of the calling IP address: Pa1 and the calling phone number. multiply. The database stores a combination of an IP address and a telephone number in advance, and if it is registered as a result of the inquiry, the communication control unit 3 permits the use of the service. In the case of the terminal 30b, processing is performed in the same manner as the terminal 30a, and the communication control unit 3 is treated as legitimate communication data transmitted from the base A31. The site identification device 10a discards communication data from those not matching the VLAN-ID stored in advance, and the site identification device 20 similarly discards communication data not included in the combination stored in advance.

FIG. 19 is a processing sequence in the case of FIG. 18 and shows a flow of processing of a program executed on the computer of the site identification device 10a, the site identification device 20, and the communication control unit 3. The terminal 30a transmits communication data to the site identification device 10a. The site identification device 10a receives the communication data, and the site identification device 10a acquires the VLAN-ID from the header of the received communication data and matches the VLAN-ID (here, 10) stored in advance as a logical ID. If they do not match, they are discarded, and if they match, communication data is transmitted to the site identification device 20 via the multipoint network 2 (step S21a).
The site identification device 20 receives the communication data, and the site identification device 20 determines whether the VLAN-ID: 10 and the IP address: Pa1 in the header of the received communication data match the combination stored in advance, and does not match. In this case, the communication data is discarded, and if they match, the VLAN-ID is deleted from the header and the communication data is transmitted to the communication control unit 3 (step S21b).
The communication control unit 3 that has received the communication data acquires the IP address: Pa1 and the calling telephone number: 1234-59-0001 of the received communication data, and inquires the database for the validity of this combination (step S21c).
If the response from the database is “verification OK”, the provision of the communication service is permitted (step S21d).

 20 further includes a logical ID conversion function in addition to the site identification device 20 in addition to the embodiment of the VoIP (Voice Over Internet Protocol) system described in FIG. In addition, the embodiment is closer to the actual configuration. The meanings of the other symbols are the same as those in FIGS. The logical ID conversion function of the site identification device 20 is a function for converting the logical ID in the header of the communication data into a logical ID that can be processed by the communication control unit 3, and logical ID information in the communication data (hereinafter referred to as payload). Has the function of converting. There are cases where logical IDs are converted to one-to-one and combinations of a plurality of logical IDs are converted into one logical ID. In reality, this conversion function may be included in the site identification device 20 or in the communication control unit 3. In the embodiment of FIG. 20, the conversion function is a function included in the site identification device 20. With this configuration, the logical ID system used on the user side network and the logical ID system used on the communication control unit 3 side can be separated, and a plurality of user networks can be controlled by one communication control unit 3. Become.

FIG. 21 shows that the logical ID set in the terminal side base identification device in the embodiment of FIG. 20 is VLAN-ID, and the first logical ID (that is, the low layer logical ID) is VLAN-ID in the communication control side base identification device. ID, second logical ID (ie, higher layer logical ID) is private IP address, third logical ID (ie, third logical ID converted from second logical ID) is global IP address and port This is a combination of numbers. The meaning of the reference numerals is the same as in FIG. In the site identification device 10a, 10 is set as the VLAN-ID as the low layer logical ID. As the combination of the low layer logical ID and the high layer logical ID, a combination of VLAN-ID: 10 and IP address: Pa1, and a combination of VLAN-ID: 10 and IP address: Pa5 are set in the site identification device 20. ing. Further, the site identification device 20 has an IP address: PA as a third logical ID with respect to the IP address: Pa1 as the second logical ID (specifically, PA is a global IP used by the communication control unit 3). IP address included in the address system) and port number: 11 are set, and IP address: PA and port number are set as the third logical ID for IP address: Pa5, which is the second logical ID. : 22 is set. As terminal settings, VLAN-ID: 10 and IP address: Pa1 and telephone number: 1234-59-0001 are set for the terminal 30a, and VLAN-ID: 10 and IP address: Pa5 are set for the terminal 30b. And a telephone number: 1234-59-0005.
Here, the case where the terminal 30a communicates with one of the terminals via the communication control unit 3 will be described. First, the terminal 30a transmits communication data in which the VLAN-ID: 10, the calling IP address: Pa1, and the calling telephone number: 1234-59-0001 in the header of the communication data are set to the site identification device 10a. The site identification device 10a receives the communication data, verifies the VLAN-ID in the header of the communication data, determines from the verification result that it matches the VLAN-ID 10 set in advance as a logical ID, Communication data is sent to the point type network 2. The multipoint network 2 transmits communication data to the site identification device 20 according to preset route information, and the site identification device 20 receives the communication data.
The site identification device 20 reads VLAN-ID: 10 and IP address: Pa1 from the header of the communication data, and determines from the verification result that the VLAN-ID: 10 and IP address: Pa1 of the combination stored in advance match. Then, VLAN-ID: 10 is deleted from the header. Next, the site identification device 20 converts the IP address: Pa1 in the header of the communication data into an IP address: PA that is the third logical ID, and converts the port number in the header of the communication data into 11. Furthermore, the IP address: Pa1 in the payload of the communication data is converted to PA, and the communication data is transmitted to the communication control unit 3.
The communication control unit 3 that has received the communication data can perform subsequent processing on the assumption that the site identification device 10a and the site identification device 20 are communication data that guarantees the legitimacy of the site. The originating IP address: PA, port number 11 and calling phone number 1234-59-0001 are acquired from the communication data, and the combination of the calling IP address: PA, port number 11 and calling phone number 1234-59-0001 is set in the communication control unit 3. Query the database inside the. The database stores a combination of an IP address, a port number, and a telephone number in advance, and if it is registered as a result of the inquiry, the communication control unit 3 permits the use of the service. In the case of the terminal 30b, processing is performed in the same manner as the terminal 30a, and the communication control unit 3 is treated as legitimate communication data transmitted from the base A31. The site identification device 10a discards communication data that does not match the VLAN-ID stored in advance, and the site identification device 20 also discards communication data not included in the combination stored in advance.

FIG. 22 is a processing sequence in the case of FIG. 21, and shows a flow of processing of a program executed on the computer of the site identification device 10 a, the site identification device 20, and the communication control unit 3. The terminal 30a transmits communication data to the site identification device 10a. The site identification device 10a receives the communication data, and the site identification device 10a acquires the VLAN-ID from the header of the received communication data and matches the VLAN-ID (here, 10) stored in advance as a logical ID. If they do not match, they are discarded, and if they match, they are transmitted to the site identification device 20 via the multipoint network 2 (step S30a).
The site identification device 20 receives the communication data, and the site identification device 20 determines whether the VLAN-ID: 10 and the IP address: Pa1 in the header of the received communication data match the combination stored in advance, and does not match. In this case, the communication data is discarded, and if they match, the VLAN-ID is deleted from the header. Next, the site identification device 20 converts the IP address: Pa1 in the header of the communication data into an IP address: PA that is the third logical ID, and converts the port number in the header of the communication data into 11. Further, the originating IP address: Pa1 in the payload of the communication data is converted to PA, and the communication data is transmitted to the communication control unit 3. (Step S30b).
The communication control unit 3 that has received the communication data obtains the IP address: PA, port number: 11 and calling number: 1234-59-0001 of the received communication data, and inquires of the database whether this combination is correct. If the response from is “verification OK”, the provision of the communication service is permitted (step S30c).

FIG. 23 is obtained by adding a connection sequence until the service permission message from the communication control unit 3 returns to the terminal 30a to the sequence of FIG. In the present embodiment, the logical ID conversion function is specifically NAPT and FW (hereinafter referred to as NAPT / FW), and is included in the communication control unit 3.
Below, the flow of the processing of the program executed on the computer of the site identification device 10a, the site identification device 20, and the communication control unit 3 will be described.
The terminal 30a transmits communication data to the site identification device 10a. The site identification device 10a receives the communication data, the site identification device 10a obtains the VLAN-ID from the header of the received communication data, determines whether it matches the VLAN-ID set in advance as a logical ID, and matches If not, it is discarded, and if they match, it is transmitted to the site identification device 20 via the multipoint network 2 (step S31a).
The site identification device 20 receives the communication data, and the site identification device 20 determines whether the VLAN-ID and the IP address in the header of the received communication data match a combination stored in advance. If the data match, the VLAN-ID is deleted from the header, and the communication data is transmitted to the communication control unit 3 (step S31b).
The NAPT / FW (communication control unit 3) that has received the communication data changes the combination of the global IP address and port number associated with the IP address (private IP address) of the header of the communication data, Convert IP address and port number. Furthermore, the IP address in the payload of communication data is also converted into a global IP address. (Step S31c).
Next, the call processing server (communication control unit 3) obtains the calling IP address, port number, and calling telephone number from the communication data, inquires of the database whether this combination is correct, and the response from the database is “verification OK”. If so, the provision of communication services is permitted.
The call processing server (communication control unit 3) sets a response message permitting the communication service in the communication data, and sets the combination of the IP address and port number on the calling side as the IP address and port number on the receiving side in the communication data ( Step 31d).
Next, the NAPT / FW (communication control unit 3) acquires the global IP address and port number from the destination IP address and destination port number of the received communication data. The IP address (private IP address) in the user's network corresponding to the combination of the global IP address and the port number is searched, the destination IP address of the communication data is converted into the private address, and the communication data is sent to the site identification device 20. Transmit (step 31e).
The site identification device 20 that has received the communication data searches the VLAN-ID to which the terminal 30a belongs from the destination IP address of the communication data, sets the corresponding VLAN-ID to the communication data, and the multipoint network 2 To send. (Step 31f)
The site identification device 10a that accommodates the terminal 30a receives the communication data, verifies whether the VLAN-ID of the communication data matches the VLAN-ID that is stored in advance as the verification logical ID, and does not match. If it matches, the communication data is transmitted to the terminal 30a.

FIG. 24 shows a change state of the protocol stack in each apparatus of FIG.
The format of communication data transmitted from the user terminal (terminal 30a) is as follows. D-MAC indicates the destination MAC address, and S-MAC indicates the source MAC address. S-IP is a source IP address, and a terminal p of a private IP address used in the user network is set. D-IP is a destination IP address, and a server p that is a private IP address in the user network of the communication control unit 3 is set. Further, terminal p-SIP (terminal p-SIP is the same IP address as terminal p), which is a private IP address of the terminal, is set in the payload of communication data, and a SIP telephone number is further set.
When communication data is transmitted from the user terminal 30a and the communication data is received by the first site identification device 10a, the site identification device 10a verifies whether the VLAN-ID of the communication data matches the VLAN-ID stored in advance. To do. When they match, when the base identification device 20 receives the communication data transmitted from the base identification device 10a to the base identification device 20, the base identification device 20 first stores a combination of the VLAN-ID and the terminal p in advance. Verify whether it matches the combination. If they match, the address of the terminal p of the source IP address (S-IP) in the header of the communication data is changed to the terminal g which is the global IP address used on the telecommunications carrier side, and further in the payload of the communication data The terminal p-SIP in the terminal is also changed to the terminal g-SIP (the terminal g-SIP has the same IP address as that of the terminal g). Then, the site identification device 20 transmits the communication data to the communication control unit 3, the communication control unit 3 receives the communication data, and queries the database for the combination of the terminal g-SIP and the SIP telephone number in the communication data payload. When the inquiry is OK, “REGIST OK” is described in the payload of the communication data to notify the terminal 10a that the service can be provided.

  The above-described site identification devices 10a, 10b, 10c, 20 and the communication control device 3 have a computer system inside. The process sequence described above is stored in a computer-readable recording medium in a program format, and the above process is performed by the computer reading and executing the program. Here, the computer-readable recording medium means a magnetic disk, a magneto-optical disk, a CD-ROM, a DVD-ROM, a semiconductor memory, or the like. Alternatively, the computer program may be distributed to the computer via a communication line, and the computer that has received the distribution may execute the program.

The embodiment of the present invention has been described above.
The communication system according to the present embodiment is applied to an IP telephone system, and the communication control apparatus identifies a base for performing processing to check whether or not the second logical ID included in the communication data corresponds to the first logical ID. Unit, an address conversion unit that converts the logical ID included in the header of the communication data and the logical ID included in the communication data, or both into another logical ID, and the incoming telephone number included in the header of the communication data The apparatus includes a call processing server unit that establishes a call based on the above.
Here, the site identification unit, the address conversion unit, and the call processing server unit may be components in the communication control unit 3, or the site identification unit and the address conversion unit may be components of the site identification device 20. .
The terminal devices 30a, 30b, and 30c are IP telephone terminal devices, and the communication control device 3 performs IP telephone communication control. The communication data received from the terminal devices 30a, 30b, and 30c via the multipoint network 2 Based on this, the apparatus performs processing for examining the correspondence between the logical ID corresponding to the base of the transmission source terminal device and the telephone number of the transmission source terminal device.
In addition, the base identification devices 10a, 10b, and 10c are included in the communication data when the communication data received from the terminal devices 30a, 30b, and 30c is transmitted to the communication control device 3 via the multipoint network 2. The base identification device 20 is a device that performs processing to check whether the logical ID of 1 is a logical ID corresponding to the base of the terminal device that is the transmission source of communication data, and the base identification device 20 that is a part of the components of the communication control device Whether the second logical ID of the received communication data corresponds to the first logical ID, or the second logical ID included in the communication data is the terminal from which the communication data is transmitted It is an apparatus that performs processing for inspecting whether or not it corresponds to the base of the apparatus.
Furthermore, the site identification devices 10a, 10b, and 10c store in advance a logical ID corresponding to the site in which the terminal devices 30a, 30b, and 30c are accommodated, and communication data from the terminal devices 30a, 30b, and 30c. Is a device that transmits only communication data including a logical ID corresponding to the base of the terminal device 30a, 30b, 30c toward the communication control device 3 via the multipoint network 2.

1 is a block diagram of a communication system according to an embodiment of the present invention. FIG. 2 is a block diagram of a communication system when the logical ID is an IP address in the embodiment of FIG. 1. It is a processing sequence which concerns on embodiment of FIG. It is a block diagram of a communication system in case logical ID is a MAC address in embodiment of FIG. It is a processing sequence which concerns on embodiment of FIG. FIG. 2 is a block diagram of a communication system when the logical ID is VLAN-ID in the embodiment of FIG. 1. 7 is a processing sequence according to the embodiment of FIG. FIG. 2 is a block diagram of a communication system when a VLAN-ID that is a logical ID is assigned in the embodiment of FIG. 1. 9 is a processing sequence according to the embodiment of FIG. It is a block diagram of a communication system in case two base identification apparatuses are installed in one Embodiment of this invention. FIG. 11 is a block diagram of a communication system when the first logical ID is VLAN-ID and the second logical ID is an IP address in the embodiment of FIG. 10. It is a processing sequence which concerns on embodiment of FIG. FIG. 11 is a block diagram of a communication system when the first logical ID is a MAC address and the second logical ID is an IP address in the embodiment of FIG. 10. It is a processing sequence which concerns on embodiment of FIG. It is a block diagram of a communication system when applied to VoIP in an embodiment of the present invention (part 1). FIG. 16 is a block diagram of a communication system when the logical ID is an IP address in the embodiment of FIG. 15. It is a processing sequence which concerns on embodiment of FIG. FIG. 16 is a block diagram of a communication system when the first logical ID is VLAN-ID and the second logical ID is an IP address in the embodiment of FIG. 15. It is a processing sequence which concerns on embodiment of FIG. It is a block diagram of the communication system at the time of applying to VoIP in the embodiment of the present invention (part 2). FIG. 21 is a block diagram of a communication system when the first logical ID is VLAN-ID, the second logical ID is an IP address, and the third logical ID is a global IP address and a port number in the embodiment of FIG. FIG. 22 is a process sequence (part 1) according to the embodiment of FIG. 21; It is the processing sequence which concerns on embodiment of FIG. 21 (the 2). It is the block diagram which showed the change process in the communication data in embodiment of FIG. It is a block diagram for making the comparison in the structural surface with a prior art. It is a block diagram for comparing in terms of charge with the prior art. It is a block diagram for comparing before and after tampering.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Management area of communication carrier 2 Multipoint type network 3 Communication control part 10a, 10b, 10c, 20 Base identification apparatus 30a, 30b, 30c Terminal

Claims (8)

A plurality of IP telephone terminal devices for transmitting communication data including the telephone number as information of a transmission source when a telephone number of a public telephone number system is stored in advance and a logical ID is given and a call is made;
A plurality of bases connected to the IP telephone terminal apparatus and transferring only communication data including a logical ID previously associated with the telephone number as the assigned logical ID when receiving communication data from the IP telephone terminal apparatus An identification device;
A multipoint network connected to the plurality of site identification devices and transferring the communication data transmitted from the site identification device through a common communication path;
When connected to the multipoint network, pre-stores information on the combination of the logical ID and the telephone number, and when the communication data is received through the multipoint network, the assigned logical ID included in the communication data; It is determined whether or not the information of the combination with the telephone number of the transmission source matches the information of the combination stored in advance, and the telephone number of the transmission source included in the communication data when it is determined that they match And a communication control device for establishing a call based on the destination telephone number,
A communication system comprising: When a telephone number of a public telephone number system is stored in advance, a logical ID is given, a higher layer logical ID of a layer higher than the logical ID is stored in advance, and a call is made, the telephone number and the higher layer logical ID are transmitted. A plurality of IP telephone terminal devices for transmitting communication data included as original information;
A plurality of bases connected to the IP telephone terminal apparatus and transferring only communication data including a logical ID previously associated with the telephone number as the assigned logical ID when receiving communication data from the IP telephone terminal apparatus An identification device;
A multipoint network connected to the plurality of site identification devices and transferring the communication data transmitted from the site identification device through a common communication path;
When the communication data is connected to the multipoint network, the combination of the logical ID and the high layer logical ID is stored in advance, and the communication data is received through the multipoint network, the added logic included in the communication data It is determined whether or not the combination information of the ID and the high layer logical ID of the transmission source matches the combination information stored in advance, and only the communication data determined to match is transferred. A site identification device;
When the communication data is received from the high-layer site identification device and connected to the high-layer site identification device, stores in advance information on a combination of the high-layer logical ID and the telephone number, and is transmitted in the communication data It is determined whether or not the combination information of the original higher layer logical ID and the telephone number matches the combination information stored in advance, and is included in the communication data when it is determined that they match A communication control device for establishing a call based on a caller telephone number and a callee telephone number;
A communication system comprising: The IP telephone terminal device stores the assigned logical ID in advance, and transmits communication data further including the logical ID as source information,
The site identification device is
When communication data is received from the IP telephone terminal device, if the logical ID of the caller included in the received communication data matches the logical ID previously associated with the telephone number, the communication data is transferred and received. If the logical ID of the caller included in the communication data does not match the logical ID associated with the telephone number in advance, the communication data is not transferred.
The communication system according to claim 1 or 2. The site identification device is
When communication data is received from the IP telephone terminal device, a logical ID associated with the telephone number is assigned to the communication data, and the communication data with the logical ID is transferred.
The communication system according to claim 1 or 2. The IP telephone terminal device is assigned logical IDs of a plurality of different layers,
The site identification device is
Information of combinations of logical IDs for the different hierarchies determined in advance is stored in advance;
When communication data is received from the IP telephone terminal device, the combination information of logical IDs of different layers included in the communication data matches the logical ID combination information of different layers stored in advance. In addition, only communication data including a logical ID associated with the telephone number in advance as the assigned logical ID is transferred.
The communication system according to any one of claims 1 to 4, wherein: The base identification device is provided for each base that accommodates the IP telephone terminal device having the same telephone number as the area code of the public telephone number system,
The site identification device is
When communication data is received from the IP telephone terminal device, only communication data including a logical ID previously associated with the area code corresponding to the base identification device as the assigned logical ID is transferred.
  The communication system according to any one of claims 1 to 5, wherein: The high layer logical ID stored in advance by the IP telephone terminal device is a private IP address,
Of the information of the combination of the higher layer logical ID and the telephone number stored in advance by the communication control device, the higher layer logical ID is composed of a global IP address and a port number,
The high-layer site identification device is
When the communication data is connected to the multipoint network, the information on the combination of the logical ID and the private IP address is stored in advance, and the communication data is received through the multipoint network, the logical ID to be added included in the communication data And the combination of the private IP address of the transmission source and the combination information stored in advance match, and only when it is determined that they match, the private IP of the transmission source of the communication data An address and a port number are converted into a global IP address and a port number associated with the private IP address in advance, and the converted communication data is transferred.
The communication control device includes:
When the communication data is received from the high-layer site identification device, information on the combination of the global IP address of the sender, the port number, and the telephone number included in the communication data, and the combination stored in advance And if it matches, the call is established based on the telephone number of the caller and the telephone number of the callee included in the communication data.
The communication system according to claim 2. The high-layer site identification device is
When the private IP address and port number of the source of the communication data are converted into a global IP address and port number previously associated with the private IP address, Private IP address is also converted to the global IP address
The communication system according to claim 7.

Images