Network-connecting apparatus and method for providing direct connections between network devices in different private networks

• US 20030172184A1
• Filed: 03/06/2003
• Published: 09/11/2003
• Est. Priority Date: 03/07/2002
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Kong, Won-keun
• Granted Patent: US 7,290,060 B2
• Time in Patent Office: Days
• US Class Current: 709/245
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 2101/604 Address structures or formats
• CPC Class Codes: H04L 61/2535 Multiple local networks, e.g. resolving potential IP address conflicts
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]

Abstract

A network-connecting apparatus for a first private network having a first network device. The apparatus includes a direct connection part for providing a direct connection in response to a connection request from the first network device, said request being a request to connect to a second network device in a second private network. Further, an address change part is provided for changing subnet numbers of origination and destination addresses of a packet transferred outside the first private network through the direct connection.

Claims

1. A network-connecting apparatus for a first private network having a first network device, the apparatus comprising:

a direct connection part for providing a direct connection in response to a connection request from the first network device, said request being a request to connect to a second network device in a second private network; and

an address change part for changing subnet numbers of origination and destination addresses of a packet transferred outside the first private network through the direct connection.

2. The network-connecting apparatus as claimed in claim 1, wherein the direct connection part comprises:

an address acquisition part for acquiring a public IP address of the second private network from a domain name management server based on a domain name of the second network device received from the first network device, and for acquiring a private IP address of the second network device based on the received domain name; and

a connection management part for connecting to the second private network based on the acquired public IP address and forming a tunnel with the second private network.

3. The network-connecting apparatus as claimed in claim 2, further comprising:

an address mapping part for converting the acquired public IP address and the acquired private IP address into an address system used in the first private network in case an address system used for the public IP address of the second private network is different from the address system used for the public IP address of the first private network.

4. The network-connecting apparatus as claimed in claim 2, wherein the address change part comprises:

a number acquisition part for receiving a unique tunnel number from the second private network, said tunnel number being allocated to the tunnel; and

a change part for changing the subnet number of the origination address of the packet transferred outside the first private network through the direct connection to the tunnel number, and for changing the destination address of the packet to the acquired private IP address.

5. The network-connecting apparatus as claimed in claim 1, further comprising:

a registration request part for requesting a registration of a public IP address from a domain name management server, said public address being allocated from a unique domain name and internet service providing device through a communication network.

6. The network-connecting apparatus as claimed in claim 1, wherein the direct connection part includes a connection management part for forming a tunnel with the second private network having the second network device.

7. The network-connecting apparatus as claimed in claim 6, wherein the address change part comprises:

a number assignment part for assigning a unique tunnel number to the tunnel; and

a change part for changing a subnet number of the origination address of the packet transferred outside the first private network through the direct connection to the tunnel number, and for changing the destination address of the packet to a private IP address of the first network device.

8. The network-connecting apparatus as claimed in claim 7, wherein the number assignment part assigns a number that is not a subnet number of the private IP address allocated to the second network device.

9. The network-connecting apparatus as claimed in claim 1, further comprising an authentication part for authenticating the second network device, wherein the direct connection part provides a direct connection in case of receiving a connection approval signal from the authentication part.

10. A network-connecting method for establishing connection between a first network device in a first private network and a second network device in a second private network, the method comprising:

a) providing a direct connection in response to a connection request from the first network device to be connected to the second network device;

b) acquiring a private IP address of the second network device;

c) changing a subnet number of an origination address of a packet transferred outside the first private network through the direct connection; and

d) changing a destination address of the packet to the private IP address of the second network device.

11. The network-connecting method as claimed in claim 10, wherein the direct connection includes:

ai) acquiring a public IP address of the second private network from a domain name management server based on a domain name of the second network device received from the first network device;

aii) connecting to the second private network based on the acquired public IP address; and

aiii) forming a tunnel with the second private network.

12. The network-connecting method as claimed in claim 11, wherein the direct connection further includes:

aiii) receiving a unique tunnel number allocated to the tunnel from the second private network, and

aiv) changing the subnet number of the origination address of the packet to the tunnel number.

13. The network-connecting method as claimed in claim 11, wherein prior to changing, the acquired public IP address and acquired private IP address are mapped into an address system used in the first private network address in case the address system used for the public address by the first private network is different from an address system used for the public IP address in the second private network.

14. The network-connecting method as claimed in claim 10, wherein prior to direct connection, a domain name management server is requested to register a public IP address allocated from a unique domain name and internet service providing device through a communication network.

15. The network-connecting method as claimed in claim 10, wherein the direct connection includes:

ai) forming a tunnel with the second private network having the second network device; and

aii) allocating a unique tunnel number to the tunnel.