Concentrated system for controlling network interconnections

• US 6,931,437 B2
• Filed: 04/26/2001
• Issued: 08/16/2005
• Est. Priority Date: 04/27/2000
• Status: Expired due to Fees

• Current Assignee: Nippon Telegraph and Telephone Corporation
• Original Assignee: Nippon Telegraph and Telephone Corporation
• Inventors: Hariu, Takeo
• Primary Examiner(s): Wiley, David
• Assistant Examiner(s): Nguyen, Phuoc H.
• Application Number:
  US09/842,138
• Publication Number:
  US 20010039593A1
• Time in Patent Office: 1,573 Days
• Field of Search: 709/218, 709/221, 709/223, 709/227, 709/225, 709/229, 709/217
• US Class Current: 709/218
• CPC Class Codes: H04L 12/462 LAN interconnection over a bridge based backbone
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2535 Multiple local networks, e.g. resolving potential IP address conflicts

Abstract

Interfaces IF-A to IF-D connected to individual user networks, control function parts 41C1, 41C2 for providing an independent connection control function for each pair of user networks, and a function association selector 43 for associating each of the interfaces IF-A to IF-D to either control function part 41C1 or 412 are provided. User networks connected to respective interfaces IF-A to IF-D are connected to the control function parts 41C1, 41C2 to which they are previously associated, thus implementing communications between a plurality of user networks with a single system.

Claims

1. A concentrated network interconnection control system, comprising:

a plurality of interfaces connected to individual user networks configured to transmit and receive packets;

a network interconnection controller including a plurality of control function parts, each control function part independently provided for a respective pair of user networks and defining rules for connections between one of terminal addresses in one of said pair of user networks and one of terminal addresses in another one of said pair of user networks; and

a function association selector configured to associate each interface to one of the plurality of control function parts, said function association selector including

a function managing table configured to store an association between each interface and a corresponding one of the control function parts,

an identifier imparting part configured to retrieve an identifier from the function managing table, the identifier identifying the corresponding one of the control function parts associated with a first interface that has received a packet, and configured to impart the identifier to the packet,

a function selector configured to transfer the packet to the control function part identified by the imparted identifier, and

an output interface selector configured to select a second interface corresponding to the identifier imparted to the packet, via the function managing table, and configured to deliver the packet to the selected interface.

2. A concentrated network interconnection control system according to claim 1, in which the concentrated network interconnection control system represents concentrated firewall equipment.

3. A concentrated network interconnection control system according to claim 2, wherein the network interconnection controller contains a firewall table including pairs of sender and receiver terminal addresses for each pair of user networks, a direction of transfer between each pair of interfaces corresponding to each pair of sender and receiver terminal addresses, and a connection control indicating whether a connection between each pair of sender and receiver terminal addresses is enabled or rejected.

4. A concentrated network interconnection control system according to claim 1, wherein the concentrated network interconnection control system is a concentrated address translation system.

5. A concentrated network interconnection control system according to claim 4, wherein the network interconnection controller contains

an address translation table including a pair of a terminal address which is to be translated and a translated address, and

a direction of transfer between corresponding interfaces associated with each of the identifiers.

6. A concentrated network interconnection control system according to one of claims 1 and 4, and wherein the function association selector and the network interconnection controller are formed by devoted logic circuits.

7. A concentrated network interconnection control system according to one of claims 1 and 4, wherein the function association selector and the network interconnection controller are implemented in software executed by a computer.