Integrated information communication system

The present invention relates to an integrated information communication system which integrally connects information communication equipment or information communication systems such as personal computer, LAN network (i.e. - say local network), telephone network (including cell phone), FAX system (facsimile system), CATV system (i.e. cable TV system), internet network and the like , not only through dedicated lines, but also through ISDN (Integrated Services Digital Network), FR System (Data Block Relay), ATM System (i.e. (say an asynchronous transfer mode system), the IPX system (integrated packet transmission central), satellite transmission, wireless transmission and public network lines. Here, the integrated information communication equipment performs communication with an address (for information or communication) serving to distinguish the integrated information communication equipments from other equipments. In particular, the present invention relates to an integrated information communication system which integrates data transfer services based on connectionless networks (for example IP (Internet Protocol) technology used in accordance with the stipulations RFC791 and RFC1883 of the documents relating to the Internet system) and improves the overall savings made in the information communication system through the use of a modified address transmission system, and providing security for performing interactive communication between terminals and connected systems.

The prior art will be described below. In accordance with a development in computer and information communication technology, computer communication networks have been widely used in recent years in universities, research institutes, government agencies and in various situations. within corporations and between corporations. LAN networks are used for communication networks within corporations, and in the case where the geographical area corresponds to a national territory, these networks take the form as represented in FIG. 1 appended to the present application. In the example shown in FIG. 1, each local area network LAN uses a common protocol, all these networks being connected by dedicated lines. Here, for example, corporation X owns the LANs LAN-ΧΙ, LAN-X2 and LAN-X3, corporation Y owns the LANs LANYl, LAN-Y2 and LAN-Y3, and both corporations X and Y use systems of ADX and ADY communication addresses for performing computer communications, respectively. Since it is necessary to install a separate leased line for each corporation with such a LAN network, the architecture of the system becomes expensive and, in case the connection has to be established with a LAN network of another corporation , the interface link, such as for example the communication address transmission system, must be tuned, which makes the interconnection very difficult and very expensive.

On the other hand, the Internet system has recently become a widely distributed computer communication network as a network on a global scale. In the Internet, networks are connected using a router from a service provider, a communication protocol referred to as TCP (Transmission Control Protocol) / IP (Internet Protocol) is used, leased lines or FR networks are used to connect remote areas, and Ethernet systems, which are LAN networks with a rate of 10 Mbit / s (i.e. megabits per second), or FDDI interfaces (i.e., distributed data transmission interfaces using fibers), which are LAN networks operating at a rate of 100 Mbit / s, are used as communication channels to the interior of structures. Figure 2, appended to the present application, shows an example of an Internet connection, in which the routers located at the service providers maintain a reciprocal connection by means of the exchange of connection information of a table of routing. Each router is connected to a plurality of networks and an evaluation is made on the basis of the routing table indicating the router to which the data received from the network is to terminate and to which service provider this router is connected. Therefore, in the Internet network, the IP address attached to each IP data block (IP data flow diagram) is checked, the evaluation is made to know to which router the IP data block should be sent and indicating that the IP data block is sent correspondingly. Therefore, the IP data blocks are transferred one after the other and are sent to a destination computer, by means of all the routers performing the operation described above.

FIG. 3, appended to the present application, illustrates the information content of the RFC791 specification of the IP data block used by the Internet network, subdivided into a control area and a data area. Figure 4, appended to the present application, illustrates the information content of a similar RFC1883 specification, also subdivided into a control area and a data area. In both figures, parentheses () indicate the number of bits.

However, with the Internet network, since the system is such that the communication channel is not managed in an integrated way, it cannot be indicated whether the other party, with which the communication is established, is the authorized party, and there are issues with security and information may be eavesdropped. Likewise in reality, the IP addresses within many LANs are set separately by the users of the LANs so that it is necessary to relocate the user's IP address from one LAN to the other. IP address for the Internet network when connecting the LAN network to the Internet network. Likewise the communication qualities, such as communication speeds and communication error rates for the long distance lines constituting the communication path of the Internet network, differ from line to line for each LAN network and are practically not uniform. For example, there are problems such as an attempt to send a 10 Mbit / s television signal for a video conference which does not achieve the desired communication speed. Therefore, the Internet network cannot be used without problems for the communication of the region and the research institute, which have a special requirement of reliability, or for the work of the business handled by the company. In addition, there is no manager to perform network maintenance such as in the event of a failure, integration of the entire network for subsequent network planning, etc. Likewise with LANs and the Internet, the terminals are personal computers (computers) and it was difficult to use telephones, fax systems, cable TV systems, etc. in an integrated way.

The present invention has been developed taking into account the situations described above and an aim of the present invention is to provide an integrated information communication system which can contain a plurality of value-added networks, called VANs, which execute a network. data / information transfer using an IP data block, the security and reliability of which for communications have been guaranteed, without using specialized lines or the Internet network so as to improve the economic aspect of the architecture of information communication systems and to guarantee communication speeds, communication quality and the taking of measures against communications disruptions, in a unified manner. Likewise another object of the present invention is to provide an integrated information communication system, which uses a single transfer of information, which does not depend on the type of services, such as for example sound, image (image mobile and still image), text, etc., so as to interconnect services that were usually provided separately, such as total communication services, analogue / digital telephone line services, Internet network service provider services, facsimile services, central computer data transmission services, CATV cable television services, etc. Another object of the present invention is to provide an integrated information communication system which enables inter-corporate communication with very small modifications of the communication address transmission systems of computers which have been independently created. and separately in each corporation (including universities, research institutes, government agencies, and so on).

The present invention relates to an integrated information communication system, and the aforementioned objects of the present invention are achieved as follows: the present invention is arranged to provide an access control device for connecting a plurality of communication networks of computers or information communication equipment with one another, and a relay device for connecting the control device the aforementioned access system, the system having functions for performing a routing by information transfer by means of the unified address transmission systems, and the system is arranged such that the aforementioned plurality of communication networks of computers or information communication equipment can perform communications in an interactive manner.

In Figure 1, which is given as an example of a conventional arrangement, the range of leased lines used for communications within a corporation or communications between corporations is indicated by solid lines and this is replaced by the equivalent of a communication network of computers according to IP technology, in the form of a common communication network indicated by dotted lines.

According to a first aspect, the aforementioned objects of the present invention are achieved with the aid of an integrated information communication system, characterized in that a user data block of the information communication system ( ICS system) having a unique system (ADX) of system user addresses (ICS) is converted into a system network data block (ICS) having a system of addresses (ADS), on the basis of the management of a conversion table provided in an access control device, and that in the case where the transmission is carried out via at least one value-added network (VAN network), contained in said system (ICS), according to rules of said address system (ADS), and where another destination access control device is reached, a conversion is made to said address system (ADX) of the system user (ICS), based on the management of said look-up table, and another external information communication apparatus is reached.

According to a second aspect, the aforementioned objects of the present invention are achieved with the aid of an integrated information communication system, characterized in that a system user data block (ICS) having a system (ADX) unique system user address (ICS) is converted into a system network data block (ICS) corresponding to a system receive address (ICS) previously recorded in the lookup table, according to a logical user communication line, rather than using a system user address (ICS) within the system user data block (ICS) based on the management of a conversion table provided inside the access control device; and that in the event that a transmission from said system network data block (ICS) is made to another access control device via at least one network (VAN) in accordance with system address system (ADS) rules (ICS), a transfer destination of said system network data block (ICS) being either 1 or N, this destination is returned to said system network data block (ICS) based on the management of a lookup table provided in said access control device, and another external information communication device is reached.

According to another characteristic relating to the first aspect of the invention, in the case where a system user data block (ICS) containing said system (ADX) of system user addresses (ICS) is to be transmitted to a network with a different address system (ADY), said conversion table of said access control device is arranged to contain therein a service identification for distinguishing between communication within a corporation and communication between corporations, and the conversion of the system of 'addresses is carried out during each transmission, on the basis of the management of said access control device, which allows selection in the case of a conversion implementation format for each user block.

According to another feature relating to the first aspect of the invention, the system comprises a processing device and a system network database (ICS), and this system is provided with functions such that the system sends the results that it receives. retains, in response to a request from said access control device, or in the event that the system does not have the response to a request from said access control device, the system obtains a response by communicating with another system network server (ICS) using a system network server communication function (ICS), and returns its results to an access control device applicant.

According to another characteristic of the invention, the system contains an address management server comprising a relational table corresponding to a relationship between the processing device and said system network address (ICS), which corresponds to this address.

According to another characteristic of the invention, the system, which contains a processing device and a system name conversion table (ICS), receives a proposal for a system name (ICS) from said control device access, requests from said system name conversion table (ICS) a system user address (ICS) corresponding to this name, notifies the results obtained to said access control device, the access management server writing at least said system user address (ICS) and said system network address (ICS) in said lookup table, and also has means for returning an address to the user System User (ICS) corresponding to said System Name (ICS).

According to another characteristic of the invention, the system, which contains a processing device and a system name conversion table (ICS), receives a proposal for a system name (ICS) from said control device access, requests from said system name conversion table (ICS) a system user address (ICS) corresponding to this name, notifies the results obtained to said access control device, the access management server temporarily writing at least said system user address (ICS) and said system network address (ICS) in said lookup table, and also has means for returning to the user a system user address (ICS) corresponding to said system name (ICS).

According to another characteristic of the invention.

the system, which contains a processing device and a system name conversion table (ICS), receives a proposal for a system name (ICS) from said access controller, requests said table to system name conversion (ICS) a system user address (ICS) corresponding to this name, notifies the results obtained to said access control device, and has means for returning to the user a system user address (ICS) corresponding to said system name (ICS).

According to another characteristic of the invention, in the case where said access control device receives a system user block (ICS), said access control device reads a type of charging system for each block of the system. system (ICS) kept in the conversion table, based on the system user address (ICS) contained in the system user block (ICS), form an account information in the case where the read type has a value indicating a charging system according to the quantity, notify the charging server of the account information in the form of an account information block, but does not form an account information and does not notify the accounting server of the account information in the form of an account information block in the case where the read type is that of a value indicating a system of taxation with a fixed tax.

According to another characteristic of the invention, the system comprises a system data block database server (ICS) for storing a user data area containing said system user data block (ICS), and to receive notification through the use of a user control area or a user data area in the system user data block (ICS), said system being capable of deleting, transmitting and receiving the stored user data area.

According to another feature of the invention, said system data block database (ICS) server temporarily stores the user data area in the system user data block (ICS) based on the notification of the use of the system user data block (ICS) on the sending user side, and transmits the stored user data area to the user on the receiving side at a time notified by said user on the transmitting side using a system user data block (ICS).

According to another characteristic of the invention, the system comprises, as a relay network, a network (FR) comprising, as an input / output part, a unit for converting the data blocks of the network (FR / ICS) to convert said network data block (ICS) to a block relay format block and to perform the reverse conversion.

According to another characteristic of the invention, the system comprises, as a relay network, an asynchronous transmission mode (ATM) network comprising as input / output zone, a unit for converting network data blocks (ATM / ICS ) to convert said system network data block (ICS) to a data block having the format (ATM) and to perform the reverse conversion.

According to another characteristic of the invention, the system comprises, as a relay network, a satellite communications network comprising, as an input / output part, a unit for converting data blocks of the communications network by satellite / system (ICS) to convert said system network data block (ICS) to a satellite communications network interface and to perform the reverse conversion.

According to another characteristic of the invention, said access control device includes a telephone line conversion unit or a portable telephone line conversion unit having means for converting an interface of a telephone line or of an interface. portable from a telephone line into a system network data block (ICS) suitable for transfer within a system network (ICS), and for reverse conversion.

According to another characteristic of the invention, said access control device comprises a line conversion unit of an integrated services network (ISDN network) having means for converting a line interface of the network (ISDN) into a system network data block (ICS) capable of being transferred to a system network (ICS), and for performing the reverse conversion.

According to another characteristic of the invention, said access control device comprises a cable television line conversion unit (CATV) having means for converting a system line interface (CATV) into a network data block. system (ICS) suitable for transfer to a system network (ICS), and for performing the reverse conversion.

According to another characteristic of the invention, said access control device comprises a satellite communication line conversion unit having means for converting a satellite communication line interface into a system network block (ICS) suitable to be transferred into a system network (ICS), and to perform the reverse conversion.

According to another characteristic of the invention, the system comprises, in the input / output part of the relay network inside said access control device, a data block conversion unit of the system network (FR / ICS) to convert said network system data block (ICS) to a block relay format data block, and to perform the reverse conversion.

According to another characteristic of the invention, the system comprises, at the level of the part d¹ relay network input / output inside said access control device, a system network data block conversion unit (ATM / ICS) for converting said system network data block (ICS) into a system format data block (ATM), and to perform the reverse conversion.

According to another characteristic of the invention, the system comprises, in the input / output part of the relay network inside said access control device, a data block conversion unit of the satellite communication system / System Network (ICS) to convert said System Network (ICS) data block to a satellite communication format data block, and to perform the reverse conversion.

According to another characteristic of the invention, said access control device is contained in a central system (FR).

According to another characteristic of the invention, said access control device is contained in a central system (ATM).

According to another characteristic of the invention, said access control device is contained in a satellite transmitter / receiver.

According to another characteristic of the invention, said access control device is contained in one of the following networks: an X.25 network, a system network (FR), a system network (ATM) or a network satellite communication.

According to another characteristic of the invention, the system comprises at least one control device externally, communication with access provided externally; and an access control device controlling an intended management server which allows the execution of an inside of a corporation or a communication between corporations.

According to another characteristic of 1¹ invention, said access control device has encryption and decryption means, the system user data block (ICS) is converted into an encrypted text by the encryption means and is sent inside the system (ICS) for conversion at the time of a system encapsulation (ICS), and the system user data block (ICS), which is converted to cipher text, is transformed back to an initial block of system user data (ICS) upon reverse system encapsulation (ICS).

According to another characteristic of the invention, a class of speeds and a degree of priority are recorded in the conversion table, the communications being executed as a function of the class of speed and of the degree of priority.

According to another characteristic of the invention, said access control device has an electronic signature unit, and an electronic signature is assigned to the system user block (ICS) when this system user block (ICS) passes through said access control device.

According to another feature of the invention, a system user block (ICS) having a unique system (ADX) of system user addresses (ICS) is converted into a system network block (ICS) having an address system (ICS), based on the management of a conversion table provided within an access control device, and in the case where the transmission is effected through '' a network of system exchanges (ATM), contained in said system (ICS), according to rules of said address system (ADS) and where another destination access control device is reached, a conversion is made to said address system (ADX) of system users (ICS) on the basis of the management of said conversion table, and another external information communication device is reached.

According to another characteristic of the invention, each central office of the system (ATM) constituting said network of central offices of the system (ATM) has an address conversion table (ATM) and an address conversion table (VC).

According to another characteristic of the invention, said central office of the system (ATM) is furthermore connected to a management server of the system (ATM) and to an address management server of the permanent virtual circuit system (PVC ).

According to another characteristic of the invention, a communication path of said network of system exchanges (ATM) is a switched virtual circuit (SVC) or a permanent virtual circuit (PVC).

According to another feature of the invention, a communication path is a circuit (PVC), and a 1: N, N: 1 or N: N communication is performed.

According to another characteristic of the invention, a user block (ICS) comprising a unique system (ADX) of system user addresses (ICS) is converted into a system network data block (ICS) having an address system (ADS), on the basis of the management of a conversion table provided in an access control device, and in the case where the transmission is carried out via a network of exchanges (FR), contained in said system (ICS), according to rules of said address system (ADS), and where another destination access control device is reached, a conversion is made to said system (ADX) of system user addresses (ICS) on the basis of the management of said conversion table, and another external information communication device is reached.

According to another characteristic of the invention, said exchange (FR) which constitutes said network of exchanges (FR), has an address conversion table (FR) and an address conversion table (DLC).

According to another characteristic of the invention, said exchange (FR) is also connected to an address management server of the system (FR) and to an address management server of the system (DLC).

According to another characteristic of the invention, the server producing the electronic signature is connected to said access control device or to a relay device, and a mutual exchange of information is performed by means of a communication function of a system network server (ICS).

According to another characteristic of the invention, an encryption server is connected to said access control device or to the relay device, and a mutual exchange of information is carried out by means of a communication function of the network server of the system. (ICS).

According to another characteristic of the invention, a conversion table server presents a part of said conversion table to a user or rewrites a part of said conversion table corresponding to a request from the user.

According to another characteristic of the invention, when an address described in a network control area of ​​the data block received from the system network (ICS) is not recorded in said conversion table, it is possible to select a open zone connection or a closed zone connection depending on the reception or loss of the system network data block (ICS), by designation of an open zone class.

According to another characteristic of the invention, said access control device is subdivided into an overall access control device and into a simplified access control device in a function, a user is connected to said access control device. '' simplified access, said conversion table is subdivided into a global conversion table within said global access control device and a simplified conversion table in the simplified access control device, a system encapsulation (ICS) and a System reverse encapsulation (ICS) are performed in said simplified access control device, and charging and electronic signature are performed in said overall access control device.

According to another characteristic of the invention, said access control device comprises a network server, such as an address management server, a name server, in the case of physical independence.

Other characteristics and advantages of the present invention will emerge from the description given below, made with reference to the accompanying drawings, in which:

<td></td><td>- figure 1,</td><td>whose</td><td>he</td><td>has already been mentioned,</td>

<td colspan="2">represents a diagram</td><td colspan="3">synoptic used to describe</td>

<td>networks</td><td>Classical LAN - figure 2,</td><td>/ whose</td><td>he</td><td>has already been mentioned,</td>

<td>is a</td><td colspan="2">diagram illustrating</td><td>a</td><td>example of a form of</td>

<td>network</td><td>Internet ; - figure 3,</td><td>whose</td><td>he</td><td>has already been mentioned,</td>

is a diagram illustrating an IP data block in accordance with RFC791 stipulations;

FIG. 4, which has already been mentioned, is a diagram illustrating an IP data block in accordance with the RFC1883 stipulations;

Fig. 5 is a block diagram schematically illustrating the basic principle of the present invention;

FIG. 6 is a block diagram showing an example of a network, in which an integrated information communication system, that is to say an ICS system, according to the present invention is constituted by a plurality of VANs ;

FIG. 7 is a block diagram serving to illustrate an example of configuration of the access control device;

FIG. 8 is a block diagram serving to illustrate an example of configuration of the relay device;

FIG. 9 is a block diagram used to illustrate an example of the configuration of the transfer channel between VANs;

FIG. 10 is a block diagram showing an example of configuration of the network server of the ICS system;

Fig. 11 is a network diagram illustrating an example of the user address of the ICS system, used in the present invention;

Fig. 12 is a wiring diagram illustrating the connection relationship between the logical terminals of the ICS system and the communication lines of the users;

Fig. 13 is a diagram illustrating the relationship between the user data block of the ICS system and the network data block of the ICS system, which are used in the present invention;

Fig. 14 shows part of the block diagram of an arrangement for illustrating a first embodiment (communications within a corporation, communication between corporations) in accordance with the present invention;

FIG. 15 shows part of an arrangement block diagram illustrating a first embodiment (communication within a corporation, communication between corporations) according to the present invention;

FIG. 16 is a diagram showing an example of the conversion table in the access control system;

FIG. 17 is a diagram showing an example of the temporary conversion table in the access control device;

FIG. 18 is a flowchart showing an example of the operation of the access control device;

Fig. 19 is a flowchart showing the example of operation of the access control device in a communication between corporations;

Fig. 20 is an arrangement block diagram for illustrating a second embodiment (virtual leased line) in accordance with the present invention;

FIG. 21 is a diagram showing an example of the conversion table in the access control device;

FIG. 22 is a flowchart showing an example of the operation of the access control device in the connection of virtual leased lines;

Fig. 23 is an arrangement block diagram for illustrating a third embodiment (network server of the ICS system) in accordance with the present invention;

FIG. 24 is a diagram showing an example of the conversion table in the access control device;

FIG. 25 is a diagram showing the table contained in the network database of the ICS system;

FIG. 26 is a flowchart showing an example of an operation inside the access control device in the virtual connection of network servers of the ICS system;

Fig. 27 is an arrangement block diagram for illustrating a fourth embodiment (address management server of the ICS system) in accordance with the present invention;

FIG. 28 is a diagram showing an example of the conversion table in the access control device;

FIG. 29 is a diagram showing an example of the correspondence table in the address management server of the ICS system;

FIG. 30 is a flowchart showing an example of the operation of the address management server of the ICS system;

Fig. 31 is an arrangement block diagram for illustrating a fifth embodiment (name server of the ICS system) in accordance with the present invention;

FIG. 32 is a diagram showing an example of the conversion table in the access control device;

FIG. 33 is a diagram showing an example of the name conversion table of the ICS system in the name server of the ICS system;

FIG. 34 is a flowchart showing an example of the operation of the name server of the ICS system;

Fig. 35 is a part of an arrangement block diagram showing an eighth embodiment (accounting server) in accordance with the present invention;

Fig. 36 is a part of an arrangement block diagram showing the eighth embodiment (accounting server) in accordance with the present invention;

FIG. 37 is a diagram showing an example of the conversion table in the access control device;

FIG. 38 is a diagram showing an example of the charging definition table with a fixed charge in the accounting server;

Fig. 39 is a diagram showing an example of the accounting information database in the accounting server;

FIG. 40 is a flowchart showing an example of operations of the charging process;

Fig. 41 is part of an arrangement block diagram for illustrating a ninth embodiment (ICS system data block database server) in accordance with the present invention;

Fig. 42 is a part of an arrangement block diagram for illustrating a ninth embodiment (ICS system data block database server);

Fig. 43 is a diagram showing an example of the stored information management table and the frame in the ICS system data block database server;

Fig. 44 is a diagram showing an example of the stored information management table and the frame in the ICS system data block database server;

Fig. 45 is a diagram showing an example of an ICS system user block used by the ICS system data block database server;

FIG. 46 is a flowchart showing an example of operation of communication example 1 of the ICS system data block database server;

Fig. 47 is a flowchart showing an example of operation of the communication example of the ICS system data block database server;

FIG. 48 is a flowchart showing an example of the operation of the communication example of the ICS system data block database server;

Fig. 49 is a part of the block diagram of an arrangement for illustrating a tenth embodiment (transfer by X.25, FR, ATM, communication by satellite and inclusion of telephone line, ISDN line, CATV line, satellite line, line IPX), in accordance with the present invention;

Fig. 50 shows part of the block diagram of an arrangement for illustrating a tenth embodiment in accordance with the present invention;

Fig. 51 shows part of the block diagram of an arrangement showing a tenth embodiment in accordance with the present invention;

FIG. 52 is a diagram showing an example of the conversion table in the access control device;

FIG. 53 is a diagram showing the mode of converting the network data block of the ICS system and the X.25 format;

FIG. 54 is a diagram showing the mode of converting the network data block of the ICS system and the FR format;

FIG. 55 is a diagram showing the mode of converting the network data block of the ICS system and the ATM format;

Fig. 56 shows part of the block diagram of an arrangement for illustrating an eleventh embodiment (transfer by X.25, FR, ATM, communication by satellite and inclusion of telephone line, ISDN line, CATV line, satellite line, line IPX), in accordance with the present invention;

Fig. 57 shows part of an arrangement block diagram for illustrating an eleventh embodiment according to the present invention;

Fig. 58 shows part of an arrangement block diagram for illustrating a twelfth embodiment (inclusion of the access control device in the X.2 network and in the FR network) in accordance with the present invention;

Fig. 59 shows part of an arrangement block diagram for illustrating a twelfth embodiment of the present invention;

Fig. 60 shows part of an arrangement diagram for illustrating a thirteenth embodiment (the access control device connected to the relay network) in accordance with the present invention;

Fig. 61 shows part of an arrangement block diagram for illustrating a fourteenth embodiment (use of access control devices outside the ICS system), in accordance with the present invention;

Fig. 62 shows part of an arrangement block diagram for illustrating a fourteenth embodiment in accordance with the present invention;

Fig. 63 shows part of an arrangement block diagram for illustrating a fourteenth embodiment in accordance with the present invention;

Fig. 64 shows part of an arrangement block diagram for illustrating a fourteenth embodiment in accordance with the present invention;

FIG. 65 is a diagram showing an example of the conversion table in the access control device;

FIG. 66 is a diagram showing an example of the table for defining the relationship between the communication speed and the speed class;

Fig. 67 is a flowchart showing an example of the operation in the fifteenth embodiment;

Fig. 68 is a flowchart showing an example of the operation in the fifteenth embodiment;

FIG. 69 is a diagram showing the user block of the ICS circuit after the assignment of the electronic signature;

FIG. 70 is a diagram showing the user block of the ICS circuit after the assignment of the electronic signature;

Fig. 71 shows a block diagram of an arrangement for illustrating a sixteenth embodiment of the present invention;

FIG. 72 is a diagram for illustrating an example of the conversion table in the access control device;

Fig. 73 shows a flowchart for illustrating an example of the operation of the sixteenth embodiment;

- Figure 74 shows a diagram for explaining the electronic signature at the times of transmission and reception;

FIG. 75 is a block diagram of an arrangement for illustrating a seventeenth embodiment in accordance with the present invention;

FIG. 76 is a block diagram of an arrangement for illustrating an eighteenth embodiment in accordance with the present invention;

FIG. 77 is a diagram for illustrating an example of the conversion table in the access control device;

FIG. 78 is a diagram for illustrating an example of the original of the conversion table of the ICS system;

FIG. 79 represents a diagram serving to illustrate an example of the correspondence table in the address management server of the ICS system;

Fig. 80 shows a diagram for illustrating an example of the name conversion table of the ICS system in the name server of the ICS system;

Fig. 81 is a block diagram of an arrangement for illustrating a nineteenth embodiment in accordance with the present invention;

FIG. 82 is a diagram for illustrating an example of the heavy access conversion table in the intensive access controller /

FIG. 83 is a diagram for illustrating an example of the simple conversion table in the simple access controller; and Fig. 84 is a flowchart for illustrating an operation of the nineteenth embodiment.

DESCRIPTION OF PREFERRED EMBODIMENTS

Fig. 5 systematically shows the basic principle of the present invention, according to which an integrated information communication system (hereinafter referred to as the ICS system) 1 according to the present invention contains rules providing addresses linked to this system, as a computer information / communication address, i.e. the system has a unique ADS address system, and comprises access control devices (2 to 7 in the present example), which serve as access points for the connection of a plurality of communication networks of computers or information communication equipment, for example a large number of LAN networks (in this example the LAN-X1, LAN-X2 and LAN-X3 networks of a corporation X, and the LAN-Y1, LAN-Y2 and LAN-Y3 networks of a corporation Y). Here the LAN-Xl, LAN-X2 and LAN-X3 networks of corporation X have the same ADX address system, and the LAN-Y1, LAN-Y2 and LAN-Y3 networks of corporation Y have the same system of addresses. 'ADY addresses. Access control devices 2, 3, and 4 have lookup tables to handle mutual conversion between the ADS address system and the ADX address system. The access control devices 5, 6 and 7 have lookup tables to manage a mutual conversion between the ADS address system and the ADY address system. The communication data of computers (ICS data block) in the ICS 1 system uses addresses according to the ADS address system of the ICS 1 system, and communication is performed according to the IP block, which is used in the Internet network. .

We will now describe the operation in the case of communication within a single corporation. The computer communication data (ICS system data block) 80 transmitted by the LAN-X1 network of an X corporation is addressed in accordance with the ADX address system, but undergoes address conversion in accordance with to the ADS address system under the direction of the access control device conversion table located in the ICS 1 system and become the ICS 81 data block. This block is then sent inside the ICS system 1 according to the rules of the ADS address system, and when they reach the destination access controller 4, are regenerated into the computer communication data 80 of the ADX system addresses under the direction of the control table of that system, and are sent to the LAN-X3 network located in the same X corporation. Here, the data block of the ICS system, which is sent and received in the ICS system 1, is designated as a network data block of the ICS system, and the data block of the ICS system, which is sent and received at inside the ICS system 1, is referred to as the ICS system user data block. The form of the ICS system user data block is stipulated by a form defined by the RFC791 or RFC1883 specification as rules used in the Internet network, but the processing of ICS system data blocks, which do not follow the above rule, will be described later, with reference to the description of another embodiment.

The data block 81 of the network of the ICS system is made up of a network control area 81-1 and a network data area 81-2, the network control area 81-1 memorizing the addresses in them (system d. 'ADS addresses) of access control devices 2 and 4. The user data block of the ICS system is used as a network data area 81-2 without any change in the value of that data, or is subject to a data format conversion in accordance with the stipulations determined in the ICS system 1 and is used as network data area 81-2. An example of the stipulations of the data format could be conversion to cipher text or data compression, and the access control device 2 can be provided with encryption means, decryption means for reducing the cipher text to the text original clear (ICS system user data block), data compression means and data decompression means for returning the compressed data to the original data. In the access controller 2, the user data block 80 of the ICS system is used as the network data block 81-2 of the ICS system, and the zona addition operation 81- Network control 1 to ICS network data block 81-2 is referred to as an ICS encapsulation. Likewise, in the access control device 4, the operation of removing the network control area 81-1 from the network data block 81 of the ICS system is referred to as reverse encapsulation of the system. ICS.

We will now describe the operation in the case of communication between different corporations. The computer communication data (ICS system user data block) 82 transmitted from the LAN-Y2 network of a Y corporation, and provided with addressing performed in accordance with the ADY address system, but subject to an address conversion according to the ADS address system under the management of the conversion table of the access control device 6 inside the ICS system 1, and becomes a data block of the ICS system 83. This block is then sent, in the ICS system 1, according to the rules of the ADS address system and, when it reaches the destination access controller 3, is converted into the computer communication data 82 of the ADX address system under the management of the conversion table of this system, and is sent to the LAN-X2 network inside the X corporation. Although 32 bit and 128 bit address lengths are used in the present invention, the present invention is in no way limited to these values. Even if the length of the address is changed to an address other than the 32-bit or 128-bit address, this does not change the principle of address conversion, which is the main idea of ​​the present invention.

Therefore, according to the present invention, both computer communications within corporations and computer communications between corporations are permitted by unified address management by the ICS 1 system. User terminals generally used for computer communications are incorporated into the LAN network within the user structure and are incorporated into the VAN (Value Added Network) by the. intermediary access lines, and user data blocks are sent, these data blocks having different data formats and a different address system for each type of service. For example an IP address is used for Internet network services, a telephone number / ISDN number, (ISDN = integrated services data transmission network) (E.164 address) is used for telephone services, and an X.121 address is used for X.25 packet forwarding services. Conversely, according to the ICS system 1 according to the present invention, an address conversion (referred to as an address conversion of the ICS system) is performed with the conversion table of the access controller based on the data block. user data of the introduced ICS system, which allows to realize the transmission of information data blocks having various structures, unified under a single data format and a single address system, that is, converted into ICS system data blocks.

FIG. 6 schematically shows an example in which the ICS 1 system of the present invention is constituted by a plurality of VAN networks (VAN-1, VAN-2, VAN-3), each VAN network being managed by an operator of the VAN networks . A user of the ICS 1 system requests from the operator of the VAN networks a user communication line, and the operator of the VAN networks sets an address of the ICS system, a network address of the system

ICS and the like for the user and records this information with a circuit type in a lookup table 12 inside the access controller 10, as shown in Fig. 7. The ICS system 1 carries, as a as access points used as external connection elements with LAN networks (or terminals of these networks of corporations X and Y, access control devices 10-1, 10-2, 10-3, 10-4 and

10-5, and further comprises relay devices 20-1, 20-2, 20-3 and 20-4 and also servers 40-1, 40-2, 40-3, 40-4 and 40-5 of ICS system network, as well as ICS system address management servers 50-1 and 50-2. A relay device 1 as shown in Fig. 8 is provided for the communication path within each of the VANs, and a transition to VANs, as shown in Fig. 9, is provided as one. 'connection element of the VAN-2 and VAN-3 networks. LANs 1-1, 1-2, 1-3 and 1-4 shown in figure 6 are connected respectively to access control devices 10-1, 10-5, 10-4 and 10-2, by through lines 36-1, 36-2, 36-3 and 36-4 for user communication.

The access control devices 10 (10-1, 10-2, 10-3, 10-4 and 10-5) are devices containing the communication lines coming from the users (corporations X and Y) and ending in the system ICS 1, and as shown in Fig. 7, consist of a processing device 11 consisting of a central processing unit CPU, etc., a conversion table 12 used as a database for performing address conversion and the like, a line portion 13 of an input / output interface and a temporary conversion table 14. Likewise, the relay device 20 has a function of transferring a network data block of the ICS system and a function of route designating the path and, as shown in Fig. 8, has a processing device 21 consisting of the central processing unit CPU, etc. and a relay table 22, the relay table 22 being used to determine the communication destination when the network data block of the ICS system is transferred inside the ICS system 1. The gateway 30 between the VANs has a device for communicating. process 31 consisting of a central processing unit CPU, and to a relay table 32 to determine where the data blocks of the ICS system network are to be sent between the VANs, as shown in FIG. 9.

As shown in FIG. 10, the server 40 of the server of the ICS system is constituted by a processing device 41 and a database 42 of the network of the ICS system, the use of the database 42 of the network of the system ICS being variable. Examples of use include: user-specific data (such as the name or address of the user) corresponding to the address of the user of the ICS system, data not corresponding to the address of the user of the system ICS, such as data indicating the state of a communication disturbance within the VAN network, or data not directly associated with the VAN network, such as for example an electronic directory which stores and describes digital documents, public codes for a public encryption system using encryption technology employed to verify the authenticity of the sender and receiver, and holding data such as public code control data or secret codes for an encryption system secret. The processing device 41 refers to the network database 42 of the ICS system and obtains corresponding data and transmits data to the access control device 10. Further, not only the network database 42 of the ICS system operates in a stand-alone manner, but also can communicate with other servers of the network of the ICS system and obtain data from these servers, by means of transmission and reception of network data blocks from the ICS system based on IP communication technology. Within the ICS system, the ICS system network server is the only component with a single address in the ICS system network.

In accordance with the present invention, the address used to identify computers, terminals and the like used in the network data block of the ICS system is referred to as a network address of the ICS system, and the address used to identify users. computers, terminals and the like used within the ICS system user data block is referred to as an ICS system user address. The ICS system network address is used only in the ICS system, one or two of the two types being used; a type with a length of 32 bits and / or a type with a length of 128 bits. Similarly, the ICS user address also uses one or two of two types: a 32-bit length and / or a 128-bit length. The logical terminal of the ICS system in the access control device 10, the relay apparatus 20, the gateway 30 between VANs and the network server of the ICS system are arranged so as to be each provided with a network address. of the ICS system so that they can be uniquely identified. Likewise, the user address of the ICS system consists of a superior code of the VAN network and an internal code of the VAN network. Since the upper VAN code length is represented as Cl bits, and the internal VAN code length is represented by C2 bits, the ICS user address is used such that the total of Cl + C2 is equal to 32 bits or 128 bits.

According to the present invention, no particular method for determining the upper code of the VAN network and the internal code of the VAN network is stipulated, but in the case of C1 + C2 = 32 bits, the following example can be given for a process for deciding to take the decision in this case:

Upper code of the VAN network = district management code (4 bits) he region code (4 bits) he coded of the VAN network (8 bits)

Internal VAN code = VAN district code (4 bits) || VAN access point code (8 bits) Il user logic code (4 bits)

Figure 11 provides a description of this using an example of an ICS system user address. Here the symbol a II b indicates a link between the data a and the data b, that is to say the data obtained by means of data a ”and b” arranged in this order. The ICS system network address can be provided locally in the same way as the user network address, i.e .:

ICS system network address = district management code 11 area code 11 VAN network code 11 VAN network district code 11 user logic communication lines code

Thus, the relay device can efficiently find the transfer destination by determining the transfer destination taking into account the district. Likewise the address can be determined in the same way in the case of C1 + C2 = 128 bits. On the other hand, with the present invention, the block data of the ICS system can be constituted as described above, in the same where one has Cl + C2 = 3 2 bits or Cl + C2 = 128 bits, regardless of how the sections of zones of the upper code of the VAN network and of the internal coda of the VAN network are made up, or of the length of each of the sections. Likewise, when determining the upper code of the VAN network and the internal code of the VAN network, some of these codes can be chosen so as to be unique for the user. That is, the user can establish a specific address system for himself. Address values ​​of a 32-bit expression value range from address 0 to address (2³²-1), and the present invention is implemented by providing a user-defined address in the range of the address (10 x 2²⁴+2²⁴-l) or the address (172 x 2²⁴+ 16 x to address (172 x 2²⁴+ 32 x 2^1S-1) or the address x 2^ie) at address (192 x 2²⁴+ 169 single 10 x 2 for

4

2^ie) (192 X 2¹⁶-1).

2²⁴+ 168

A physical communication line can be subdivided from a plurality of communication lines and used, this being achieved in the conventional art in the form of a multiplex communication method by means of relay retransmission of data blocks ( FR). In accordance with the present invention, the user's communication line is subdivided into a user's physical communication line and one or more user logic communication lines. Fig. 12 illustrates an example of this aspect, in which a physical user communication line 62 is subdivided into two logical user communication lines 61-1 and 61-2.

similarly, separate computer communication devices 62-1, 62-2, 62-3 and 62-4 are each connected to respective user communication lines, and the addresses 4123, 0025 the user of the ICS system. are assigned to each of the computer communication devices 62-1 to 62-4. The user's physical communication line 60 is

From logic 0026, 4124 to connected to access controller 63, and the point of contact between the two is referred to as the ICS system logic terminal. The logical terminal of the ICS system is only equipped with a network address of the ICS system in the ICS system. In the example shown in Figure 12, the user's logical communication lines 61-1 and 61-2 are connected to the access controller 63, and the ICS system network addresses 8710 and 8711 are assigned. to the logical terminals 64-1 and 64-2 of the ICS system of the respective contact points.

As previously described, the server 40 of the ICS system network is also equipped only with a network address of the ICS system so that the network address of the ICS system can establish that the logical terminal of the ICS system or the server network of the ICS system is the only one present in the ICS system. The ICS system network server is able to exchange information with other ICS system network servers by sending and receiving data blocks from ICS system networks equipped with network addresses. of the ICS system taken one out of two, using IP communication technology. This function is referred to as a communication function of the servers in the ICS system network ”. The access control device is also provided with a network-only address of the ICS system within the ICS system, and can exchange information with other servers of the ICS system through a function of. ICS system network server communication. The communication function of the ICS system network server can be realized by means of TCP protocol, i.e. transmission control protocol, or UDP protocol (User Data Profile Protocol) d classic technology.

These are two types of the data blocks of the ICS system in the present invention, as described above, namely the network data block of the ICS system, which is transmitted and received in the ICS system, and the user data block. of the ICS system, which is transmitted and received outside of the ICS system. Each network data block of the ICS system consists of a control area and a network data area (ICS system user data block) and, as shown in Fig. 13, the network control area is consisting of a base area and an expansion area, and the network data area consists of a user control area and a user data area, so as to allow use by means of encapsulation of the ICS system or reverse encapsulation of the ICS system. That is, when the user data block of the ICS system enters the ICS system from the access control device, the user data block of the ICS system becomes a control area. data in the ICS system network data block, and the control area (network control area) of the ICS system network data block is added to it (ICS encapsulation). The expansion area in the network control area is used for encryption or the like. In the case where encryption is used, the expansion area is not used.

Within the network control area of ​​the ICS system data block there is an area for storing the address of the transmitter and the intended address of the receiver. There are two types of ICS system data blocks, one with 32-bit address length and one with 128-bit address length, and one data block format with 32-bit address length. is used in accordance with the RFC791 stipulations shown in Figure 3 by way of example. In the event that 32 bits are insufficient for the network address of the ICS system, for example in the event that a 64-bit address must be used, according to RFC791 stipulations, the missing 32 bits (64 bits - 32 bits) are Registered in an option area or the expansion area in the network control area of ​​the ICS system network data block control area, which takes the usable 64-bit network address. A further description will now be given concerning the user-specific address mentioned above. In the event that a large number of users have a private address (a type of ICS system user address) in the section between an address (10 x 10²⁴) and an address (10 x 2²⁴ + 2²⁴ - 1) For example, in case the length of the user address of the ICS system is 32 bits, the 32 bits are insufficient for the network address of the ICS system since the network address of the ICS system is assigned in a way that matches the user address of the ICS system, and eg 32 bits are required. In these cases, as previously described, the missing 32 bits are entered in the option area of ​​the ICS network data block control area, making the network address usable at 64 bits. The fact that a communication between the same user (said communication within a corporation) is possible through the use of a private address, will be described in the case of the first embodiment. Likewise, in the case where the length of the address is 128 bits, the present embodiment is implemented in the data block format according to the RFC1883 stipulations as shown in Fig. 4 for example. The original address area in the network control area and the address stored in the destination address area are set as system network addresses.

ICS, each being respectively the transmission address of the network of the ICS system and the receiving address of the network of the ICS system. Further, the original address area in the user control area and the address stored in the destination address area are arranged to be addresses of users of the ICS system, each of which is respectively the user address, which transmits in the ICS system, and the user address, which performs reception, in the ICS system.

Also, it is not necessary to follow the RFC791 or RFC1883 stipulations for the ICS system data block format when implementing the present invention; the present invention can be implemented as long as the data block format is such that it uses addresses with a length of 32 bits or 128 bits. In general, the ICS system receives the user data block from the ICS system as stipulated by RCF791 or RFC1883, but other data block formats can be processed in the ICS system network by converting the data block from the ICS system user with conversion means (or part of modification).

Mode of implementation 1 (basic ICS system, communications within a corporation and communications between corporations):

A first embodiment of the present invention will be described with reference to Figures 14 and 15, considering a basic communication, in which the transfer destination in the ICS system is determined from the user address, performing the reception in the ICS system, on the basis of a management carried out by a conversion table. In the figures, the reference numerals 170-1, 170-2, 170-3 and 170-4 respectively denote gateways provided in the LAN networks 100-1, 100-2, 100-3 and 100-4, and the ICS system data blocks can pass through these gateways 170-1 through 170-4. Figure 16 shows an example of a conversion table 113-1 in the access controller 111-1, and Figure 17 shows the same for a temporary conversion table 114-2 in the second controller access 110-4.

First, we will describe the communication between a terminal, which is connected to a LAN 100-1 of corporation X, which has a unique ADX address system, and a terminal, which is connected to a LAN network. 100-2 of the same corporation X. That is, there is a communication between a terminal, which has a user address of the ICS 0012 '' system in the LAN 100-1, and a terminal which has a user address in the system. ICS 0034 in the LAN 100-2. This communication is a typical communication established between terminals which have addresses set on the basis of a unique address system in a single corporation (ADX in this example), the communication being effected, in an interactive manner, by the user. intermediary of the network 100 of the ICS system. This type of communication is referred to as a corporate communications service (or corporate communication). Hereinafter we will describe a communication between a terminal, which is connected to a LAN 100-1 of corporation X, which has a unique ADX address system, and a terminal which is connected to a LAN 100-3. of the Y corporation, which has a single ADY address system. That is, there is a communication between a terminal which has a user address of ICS 0012 in the LAN 100-1 and a terminal which has a user address of ICS 1156 in the network. LAN 100-3. This communication is a typical communication established between terminals which have different address systems in different corporations, the communication being made using an address system of the ICS system, which can be used in common between the two. This type of communication is referred to as an inter-corporation communications service (or inter-corporation communication).

"Joint preparations"

In the description of the present embodiment, the address format, etc. are determined as described below, but specific numeric values ​​and specific formats are given by way of example only, and the present invention is not limited in any way to such values ​​and formats. The network address of the ICS system is represented by a 4-digit number and the user address, which is sender in the ICS system and the user address, which is the receiver, in the ICS system are all two represented by a 4-digit number. Among the address of the user, who is the sender, in the ICS system and the address of the user, who is the receiver, in the ICS system, of addresses, the upper two digits of which are not OO, are used as the inter-corporation communication address, and this inter-corporation communication address is a unique value in the network 100 of the ICS system. Among the user address of the sending ICS system and the user address of the receiving ICS system, addresses, the upper two digits of which are ”00, are used as the communication address. within a corporation, and this communication address within a corporation may be the duplication of another communication address within the corporation in the network 100 of the ICS system. Likewise, the conversion table 113-1 in FIG. 16 provided for the access control device 110-1 contains the following: send addresses of the network of the ICS system, receive addresses of the network of the ICS system , ICS system network transmitter addresses, ICS system network receiver addresses, request identification (ID), speed segments, etc. The request identification recorded in lookup table 113-1 is such that, for example, ”1 represents the communication service in a corporation, 2 represents the inter-corporation communication service, and 3 represents a dedicated virtual line connection (which will be described later). The speed segment is the line speed required for communication from the ICS system network address, including the output rate (for example, the number of ICS system data blocks sent during a predetermined time interval. ).

&lt;&lt; Preparations for communication within a corporation

The users of the LAN 100-1 and the LAN 100-2 make a request to the operator of the VAN networks so that the communication within the corporation, terminals connected to the LAN networks can perform the communication by the network. 'intermediary of the VAN-1 and VAN-3 networks. The operator of the VAN networks responds to this request and sets the previously mentioned address of the network of the ICS system, the user address of the ICS system, the requested identification, etc. in the conversion tables of the access control devices 110-1 and 110-5 connected to the LAN 100-1 and LAN 100-2 networks and further writes and keeps this data in the address management server 150-1 of the ICS system.

The items to be set for the VAN-1 network are as follows. The network address of the ICS system is set by the logical terminal of the ICS system of the access control device 110-1, to which the LAN 100-1 is connected, the network address of the ICS system of the logical terminal of the ICS system in this case being set to ”7711”. The communication address within a corporation of the terminal connected to the LAN 100-1, from which the application was made, is set to "0012", and this is used as the address user of the ICS system making the transmission. The communication address within the corporation, used by the terminal of the above address, is set to 2212 and this is used as the user address of the ICS system which performs the transmission. Then, the communication address within the corporation, of the terminal connected to the LAN 100-2, from which the request was made, is set by the logical terminal of the ICS system of the access control device. 110-5, to which the LAN 100-2 is connected, the network address of the ICS system in this case being set to 9922, and this address is used as the receiver network address of the ICS system. Further, the user address of the ICS system used by the terminal connected to the LAN 100-2 is set to 0034 and this is used as the user address of the ICS system, which is the receiver. The number 1 is positioned as the request ID, indicating the communication service within a corporation, which has been requested, and the above is recorded in conversion table 113-1 in Figure 16. .

The items to be set for the VAN-3 network are as follows. The values ​​required for reverse communication (communication from LAN 100-2 to LAN 100-1) are set in the conversion table of the access control device 110-5 which connects the LAN 100-2, to from which the request was made. That is, the data is set inversely at the network address, where transmission takes place, in the ICS system and at the address where reception takes place, in the ICS system, and simultaneously the data is set to the reverse of the user address of the ICS system, where transmission takes place, and the user address of the ICS system, where reception takes place . The ICS system network address for LAN 100-2 is set to ”9922 and this address is used as the network address of the ICS system, where transmission takes place. The address 0034 is set as the user address of the ICS system, where the transmission, for the user address of the ICS system, within the corporation, of the terminal connected to the network takes place. LAN 100-2, and the user address of the other party's terminal ICS 0012 is used as the user address of the ICS system, where reception takes place. Likewise, the user address of the ICS 7711 system for the LAN 1001 is used as the network address of the ICS system, where reception takes place, and the value 1 'and set as the identification. request, which indicates the services of a communication within a corporation. What is stated previously has been described in the lookup table in the access controller 110-5 and is recorded.

"Execution of a communication within a corporation"

The terminal, which has an ICS system use address 0012, sends a PI user data block from the ICS system to receiver 0034. This PI user data block from the ICS system has been set as the address of user of the ICS system transmitting to 0012, and the user address of the ICS system performing reception has been set to 0034.

The operation will be explained with reference to Fig. 18. The user data block PI of the ICS system is sent to the access controller 110-1 through the logical communication line 180-1. The access control device 110-1 refers to the conversion table 113-1 of figure 16 from the network address where the transmission takes place, of the ICS 7711 system (not S100 and S101) , and the user address of the ICS system, where the reception is taking place, 0034 of the user data block of the ICS system, where the reception takes place, and the access controller knows that the communication is communication within the corporation, due to the value 1 ”of the request ID (not S102). The access controller 110-1 obtains the fact that the address of the receiving network of the ICS system corresponding to the user address of the receiving ICS system 0034 ”is 9922, then it is subjected to encapsulation. of the ICS system (not S106). The aforementioned procedures, which are illustrated in the form of a flowchart, are shown in Fig. 18, which includes the flow (1) of the communication within the corporation. The user address of the ICS system, which performs the transmission, can be used to specify the transmitted signal of the ICS system data block.

The access controller 110-1 sends the data block P2 from the ICS system network to the relay apparatus 101-1 by means of the ICS system encapsulation. Since the uniqueness of the network address of the network control area is guaranteed in the ICS system, there is no conflict with other data blocks in the ICS system. The data block P2 of the ICS system network passes through the relay devices 120-1 and 120-2 based on the receiving network address of the ICS system and reaches the access controller 110-5 of the VAN-3 network. The access controller 110-5 removes the network control area from the network data block P 4 of the ICS system and performs reverse encapsulation of the ICS system, and recreates a user block P5 of the ICS system , which is the same as the user block P1 of the ICS system from the data area of ​​the network of the data block of the ICS system, and sends it to the LAN 100-2. The ICS system user data block is routed through the LAN 100-2, and is transferred to the terminal which has the ICS system user address 0034 ''.

"Preparations for a communication between corporations"

As an example of execution of the inter-corporation communication, we will describe a communication between a terminal, which has a user address ”0012 of the ICS system and is connected to a LAN 100-1 by means of the ICS system. ADX addresses, and a terminal, which has ICS use address 1156 and is connected to a LAN 100-3 by means of the ADY address system. Users of LAN 100-1 and 100-3 specify the terminal to which each VAN network is connected so that it can perform communication through VAN-1 and VAN-2, and send a request to the operator VAN networks. The operator of the VANs sets the necessary items in the conversion table of the access control device, which is connected to the LANs 100-1 and 100-3, according to the demand.

The items to be set regarding the VAN-1 network are as follows. The network address in the ICS system for the LAN 100-1 is set to 7711, the communication address inside the corporation, which is kept by the terminal connected to the LAN 100-1, from the request was made is set to 0012 '', and this is chosen as the user address of the transmitting ICS system. The inter-corporation communication address, which is sent to the terminal of the above indicated user address of the ICS system is set to 2212, and this is set as the user address of the ICS system which performs the transmission. (between corporations). The network address of the ICS system is determined by the logical terminal of the ICS system of the access control device 110-4 connected to the network address of the ICS system for the LAN 100-3, from which the request has been presented, the network address of the ICS system here being 8822, and this address is chosen as the network address, where reception takes place, of the ICS system. Likewise the user address of the ICS system of a terminal connected to the LAN 100-3 and set to 1156, and this address is set as the user address of the ICS system performing reception. Further the number 2 is set as the request ID, indicating that a corporate communication service has been requested, and the above is recorded on conversion table 113-1.

The items to be set regarding the VAN-2 network are as follows. As a conversion table for the access control device 110-4, to which the LAN 100-3 is connected, there is provided a temporary conversion table 114-2, which keeps the reverse data for a certain time, for example 24 hours. That is, with regard to the network address 8822 of the ICS system, to which the LAN 100-3 is connected, which uses the inter-corporation communication service, the following is provided in the 110-4 access control device: a temporary conversion table 114-2, which includes a transmission network address of the ICS system, a user address of the ICS system, performing transmission, a user address of the ICS system, performing reception, a ICS receiving network address, request ID, etc. An adjustment of the temporary conversion table will be explained later.

"Execution of communication between corporations"

The terminal having a user address "0012" of the ICS system transmits the block of user data F1 of the ICS system, in which the sending user address 0012 of the ICS system and the receiving user address "1156 of the ICS system are set. The ICS system user data block F1 is transferred to the access controller 110-1 through the logical user communication line 180-1.

The access controller 110-1 refers to the conversion table 113-1 from the send network address 7711 ”of the ICS circuit (not S100 and S101) and the receiver user address 1156 of the ICS system, and it knows that the request ID is 2, that is, the communication is the inter-corporation communication (not S102). Then, the access controller 110-1 obtains the fact that the network address of the ICS system, where reception takes place and which corresponds to the user address 1156, where reception takes place, is 8822 (not S104), then converts the user address performing transmission 0012 from the ICS system to a corporate communication user address 2212 (not S105). The access controller 110-1 performs the encapsulation of the ICS system by adding a control area of ​​the network as a network address performing the 7711 transmission of the ICS system, the user address performing the transmission. ICS transmission 2212, the receiving user address 1156 of the ICS system and the receiving network address 8822 of the ICS system, and sends this control area to the relay device 120-1 as the network data block F2 of the ICS system (step S106). The procedures previously indicated and illustrated in a flowchart are shown in Fig. 18, including the traffic flow (2) of the inter-corporation communication.

In the above-mentioned inter-corporation communication, in the case where the user address of the ICS system carrying out transmission in the user data block F1 of the ICS system is set to be the communication address between corporations 2212, the sender and receiver perform the corporate-in communication using an inter-corporation communication address (steps S102 and S104). In this case, the access controller 110-1 does not perform the process of converting the user address carrying out transmission 2212 from the ICS system to the inter-corporation communication address 2212, since it is not necessary. The procedures indicated above are illustrated in a flowchart shown in Figure 18, with the communication between corporations in the form of traffic flow (3). The user address of the transmitting ICS system can be used to specify the transmitted original of the ICS system data block.

The relay device 101-1 transfers the network data block from the ICS system to the access control device 110-4 inside the VAN-2 network through the device 120-2 inside the network VAN-2, the gateway 130 of the VAN network and the relay device 120-3 located in the VAN-2 network, based on the network address of the received ICS system. It will be described with reference to Figure 19. The access controller 110-4 receives the ICS system network data block (step S110), forms an ICS system user data block F5 from the network data area (not S111: reverse encapsulation of the ICS system), sets from the network address performing the reception of the ICS system the logical terminal of the ICS system for transmission (1) in step S102), and sends it to the LAN 100 network -3 (not S113). Simultaneously, in the case where the relation between the address ”7711 of the network carrying out transmission of the ICS system, the user address carrying out the transmission 2212 of the ICS system, the user address carrying out reception 1156 of the ICS system and the address of the receiving network 8822 of the ICS system is not registered in the conversion table inside the access controller 110-4, a temporary conversion table 114-2 is compiled (2) in step S112). The record content of the temporary conversion table 114-2 is updated in accordance with a process such that the content is deleted if it is not used for 24 hours. The ICS system usage data block is routed through LAN 100-3 and transferred to the terminal having ICS user address 1156.

In this embodiment, the address is not set in the temporary conversion table 114-2. In another embodiment thereof, the conversion table 113-1 does not include the user address of the ICS system performing the transmission (within a corporation) and the user address. of the ICS system carrying out the issuance (between corporations) and furthermore does not contain the flowchart (2) of Fig. 18, i.e. step S105. An advantage of this embodiment is that the register number for the lookup table can be reduced to one of the user addresses of the sending ICS system if the user addresses of the sending ICS system exist for one of the user addresses of the receiving ICS system.

Implementation mode 2 (virtual leased line):

The operation of a virtual leased line connection in accordance with the present invention will now be described with reference to FIG. 20. Here, the connection of virtual leased lines refers to a communication, in which the user data block of the ICS system is transferred in a fixed manner to a network address performing the reception of the ICS system already registered in the data table. conversion regardless of the user address of the ICS system within the user control area of ​​the user data block of the ICS system, in which the format chosen is one-for-one or one-for-N. Although one of the components of Figure 20 are the same as those of Embodiment 1 shown in Figures 14 and 15, what differs is the record contents of the lookup table shown in Figure 21. In the conversion table of the access control device, the receiving network address of the ICS system is determined from the network address carrying out the transmission of the ICS system, in a fixed manner, so that the user address of the ICS system making the transmission (within a corporation), the user address of the transmitting ICS system (between corporations) and the user address of the receiving ICS system are not recorded or are ignored if recorded.

The description will now be given in the case where the X corporation uses a virtual leased line connection, and the communication is carried out between the X corporation LAN 200-1, which is connected to the access controller 210- 1, and the X corporation LAN 200-2, which is connected to the access controller 210-5.

&lt;&lt; Preparations »

The user asks the operator of the VANs for the virtual leased line connection. The operator of the VAN networks determines the network address 7711 of the logical terminal in the ICS system at the connection point between the access control device 210-1 for the connection of the LAN 200-1 of the corporation X and the logical user communication line 240-1, and similarly determines the network address 9922 '' of the logical terminal in the ICS system at the connection point between the access controller 210-5 for the LAN 200-2 connection of the corporation X and the logical user communication line 240-2. Next, the VAN operator performs the setting of the following on the conversion table 213-1 of the access controller 210-1: the network address carrying out transmission 7711 of the ICS system, the network address performing the reception 9922 of the ICS system, and the identification of the request. In Fig. 21 there is shown an example, in which the request identification 3 has been made to serve as a virtual leased line connection. Similarly, the VAN operator performs an adjustment of the following on the lookup table of the access controller 210-5:

the network address carrying out transmission of the ICS system 9922, the address 7711 of the network carrying out the reception of the ICS system and the identification of the request.

"Procedures"

The operation will be explained with reference to Fig. 22. The X corporation LAN 200-1 sends a user data block F10 from the ICS system to the ICS network 200 through the communication line. user logic 240-1. The access controller 210-1 receives the user data block F10 of the ICS system from the logical terminal of the ICS system corresponding to the network address 7711 of the ICS system (not S200 and S201), refers to the request ID ”3 of the original network address 7711 of the ICS system in the conversion table 213-1, identifies this as a virtual leased line connection (step S202) and reads the receive network address 9922 of the ICS system (step S203). Then, the access control device 210-1 adds an access control area to the usage data block F10 of the ICS system, in which the network address performing the reception of the ICS system is set to 9922 and the network address performing the ICS system transmission is set to 7711, thereby forming an ICS system wire network data block (not S204; ICS system encapsulation), and sending the wire data block to the device relay 200-1 (not S205). The relay device 220-1 which is received in the wire network data block of the ICS system, determines the destination based on the receive address of the ICS system corresponding to the wire network data block of the ICS system, and sends a network data block F1 2 from the ICS system to the relay device 220-2. The ICS network data block F12 is transferred to the access controller 210-5 through the relay device 220-4 within the VAN-3 network.

Access controller 210-5 eliminates the control area of ​​the network, of the network data block Fl3 of the ICS system (reverse encapsulation of the ICS system) and sends the network data block F14 of the ICS system from the terminal logic of the ICS system corresponding to the network address 9922 of the ICS system at the logical user communication line 240-2. Then, the X corporation LAN 200-2 receives the usage data block F14 from the ICS system. Transmission can be performed in the same manner as has been described from LAN 200-2 to LAN 200-1, and therefore interactive communication is available. Since it is obvious that the transmitter and the receiver do not necessarily belong to the same corporation X, by using the same method, the user data block of the ICS system can be transferred from the LAN 200-1. from corporation X to a LAN 200-3 of another corporation Y.

Although the foregoing description has been made with reference to a case of one-to-one communication, one-to-N communication can also be performed. For example, one can set a plurality of network addresses of the ICS system on the conversion table 213-1 of the access controller 210-1 shown in Fig. 20, as indicated by the network address of 7712 ”broadcast from the ICS system. In this example, two network addresses 6611 and 8822 of the ICS system are set. When receiving the ICS system user data block from the ICS system logical terminal having a network address 7712 of the ICS system, the access controller 210-1 forms a first network data block of the ICS system, in which an ICS system network control area set with 6611 as the network address performing reception of the ICS system is added to this data block, and a second network data block of the ICS system, in which a network control area set with 8822 for the network address performing reception of the ICS system is added to this block, these data blocks being sent to the relay device 220-1. Therefore, one-to-two communication can be performed. In addition, one-to-N communication can be performed by transferring each network data block in the system.

ICS in the same way as described above. Implementation mode 3 (ICS system network server):

As shown in Fig. 23, a network server 331 of the ICS system consists of a processing device 331 and a network database 332 of the ICS system, the data held by the network database 332 of the ICS system. An ICS system comprising: a question element, a type, an answer content and a network address of the other network servers of the ICS system. The network server 330 of the ICS system analyzes the data part of data blocks of the ICS system from the access controller 310-1, refers to the network database 332 of the ICS system on the basis of this part of data, obtains response content corresponding to the question elements (in the case where the identification is "1") and sends the resulting response to the access controller 310-1. In case the network database 332 of the ICS system does not have a response content corresponding to the elements in question (in the case where the identification is 2 ”), it queries another network server of the ICS system and obtains the answer content corresponding to the question elements from this server, using the network server communication function of the ICS system, based on the network address of the ICS system of another network server of the ICS system, and sends the response thus obtained to the access controller 310-1.

In more detail, the following is recorded in the conversion table 313-1 shown in Fig. 24 as preparatory material: the user address ”2000” of the ICS system for the network server 330 of the ICS system, ICS system network address ”7721 and request ID 4. Here, the request ID ”4” indicates that the user address 2000 ”of the ICS system is a number used in common with other users (referred to as a special number of the ICS system), such as the phone 119 in Japan. Then, in the network database 332 of the ICS system is written the fact that the type of the question Q1 is 1 and that the content of the answer is Al, that the type of the question Q2 is 2, that the zone of the Response content is left blank and the ICS system network address for the other ICS system network server 340 is written as 8844.

Then, the user of the user address 0012 of the ICS system sends an F20 data block from the ICS system (including the question Q1) to the user address 2000 of the ICS system for the network database 332. of the ICS system. The access controller 310-1 receives the user data block F20 of the ICS system from the logical terminal of the ICS system corresponding to the line part 311-1, obtains the network address 7711 of the ICS system, refers to lookup table 313-1 and sends a network data block from the ICS system, which is subject to ICS encapsulation, to the network server 320 of the ICS system as shown in the flowchart shown in Figure figure 26. The ICS system network database 332 finds the response A1 corresponding to the question Q1 contained in the data block F20 of the ICS system (not S300 and S301) and returns the response A1 to the access controller 310-1. . Access controller 310-1 sends an ICS system data block containing response A1 to ICS user address 0012.

The user corresponding to the user address 0012 of the ICS system sends an ICS system data block F21 (including question Q2) to the user address 2000 of the ICS system. The access controller 310-1 refers to the lookup table 313-1 and, upon obtaining a network address 7721 '' from the ICS system, sends an ICS system data block consisting of the data block F21 subjected to ICS encapsulation. The ICS system network database 332 identifies type ”2” corresponding to the question Q2 obtained in the ICS system data block F21 (not S300) and knows that the ICS system network database 332 itself. even does not have the answer (A2). Therefore, the network database 332 of the ICS system performs an information exchange with another network server 340 of the ICS system, through the use of network communication functions based on the network address 8844. ”From the ICS system to the network server 340 of the ICS system (step S302) and sends the response A2 to the access controller 310-1. The access controller 310-1 sends an ICS data block containing the response A2 to the user address 0012 of the ICS system.

Implementation mode 4 (ICS system address management server):

As shown in Fig. 27, the address management server 430 of the ICS system is connected to the access controller 410-1 through the network communication line 460 of the ICS system and maintains a correspondence table 432 relating to a network address of the ICS system having a logical terminal of the ICS system at line part 411-1 of the access controller 410-1, and the user address of the ICS system , that matches it. Examples of the lookup table 413-1 and the lookup table 432 are shown in Figs. 28 and 29, respectively. That is, the address management server 430 of the ICS system maintains the addresses of users. of the ICS system 2013, 2014, 1234 and

4500, and the corresponding network addresses of the ICS system '' 7711 '^,i 7711, 7712 and 7713. Simultaneously, all the information to be described in the lookup table, the information associated with the address such as records concerning an operation in the VANs can also be included. Further, the ICS system address management server 430 maintains the ICS system network addresses of a plurality of other ICS system address management servers, and the ICS system network addresses for a plurality of. ICS name servers. Likewise, the address management server 430 of the ICS system can communicate by using the name server of the ICS system, described in Embodiment 5, and the communication function of network servers of the ICS system, which enables the communication function of the ICS system. '' Obtain the names of the ICS system that correspond to the addresses of users of the ICS system.

The processing device 412-1 of the access control device 410-1 can perform communication with the address management server 430 of the ICS system by using the communication function of network servers of the ICS system, and can describe the value of the network address of the ICS system and have the corresponding user address of the ICS system or describe the value of the user address of the ICS system and have the corresponding network address of the ICS system. The operation will be explained with reference to Fig. 30. The ICS system address management server 430 checks whether the network address of the ICS system or the user address of the ICS system requested from the server 410. -1 of the access controller is registered in its correspondence table 432 (step S400) and sends a response if registered (not S401). If the network address of the ICS system or the user address of the ICS system is not registered in the correspondence table, the ICS system address management server 430 communicates with another management server 440 - d '' ICS system addresses using the ICS system network server communication function, which can obtain the user address of the ICS system or the network address of the ICS system (not S402), the results of which are reproduced for the access controller 410-1 (step S403). According to such a configuration, the access controller 410-1 can send a request to the ICS system address management server 430 and obtain the network address of the ICS system and the user address of the ICS system. based on the other address.

Implementation mode 5 (ICS name server):

The user address of the ICS system poses a problem in that it is a 32-bit binary expression or a 128-bit binary expression for example, which is therefore difficult to remember. . There is a method, by which a name of the ICS system is used ”, which is easily remembered.

First, the description will be made with respect to the name of the ICS system. The address of the ICS system expressed in binary form is expressed, as shown in Fig. 11, for example by a district management code, a region code, a VAN network code, a VAN network district code, a VAN access point code, and a user logic code, these numerical values ​​being arranged in such a way as to form an expression such as: district management code | 1 region code 11 VAN network code 11 VAN district code II VAN network access point code || user logic code. In the name of the ICS system, the district management code, which can be expressed in binary form as previously described for example is expressed as follows: AS (an ICS system name component that indicates Asia), JP (Japan), VAN # 1 (identification of a VAN network), DIS # 1 (identification of a VAN network district code that includes the VAN network # 1), ACS # 1 (identification of a VAN network access point code limited by the identification DIS # 1), USR # 1 (identification of a logical user code). The components of the ICS system name thus defined are reversed and separated by periods, thus forming the ICS system name USR # 1.ACS # 1.DIS # 1.VAN # 1.JP.AS. In the case described above, this name of the ICS system can be even further divided, so that the identification USR # 1 is subdivided into USR # 10 and COMP # 10., And the identification ASC # 1 is subdivided into ACS # 11 and ACS # 12, which provides the global name of the ICS system ”USR # 10.COMP # 10.ACS # 11.ACS # 12.DIS # 1. VAN # 1.JP.AS ”.

The ICS system name server, which is typically an ICS system network server, is not described. As shown in FIG. 31, the name server 550 of the ICS system consists of a processing device 551 and a name conversion table 552 of the ICS system consisting for example of the name of the ICS system, the type ( identification of existence of an ICS system user address corresponding to the ICS system name), ICS system user address, etc. Type 2 indicates that the ICS system network database 332 does not maintain an ICS system network address that matches the ICS system name, and therefore the ICS system network address that matches the ICS system name must be obtained from another name server in the ICS system. An example of the lookup table 513-1 is shown in Figure 32. Here, another ICS system name server, which manages the ICS system name ”USR # 2 .ACS # 2 .DIS # 2 .VAN # 2. JP.AS ”can be called” DIS # 2.VAN # 2.JP.AS with withdrawal of

<td>ICS analyzes the z</td><td>one</td><td>of</td>

<td>ICS system received</td><td>of</td><td>the</td>

<td>access 510-1, se</td><td>refi</td><td>time</td>

<td>system names</td><td>ICS</td><td>sure</td>

<td>previously obtained</td><td>ent</td><td>a</td>

<td>Corresponding ICS</td><td>at</td><td>last name</td>

'' USR # 2 and ASC # 2. The name server 550 of the system data block data from the controller to the analysis base conversion table 552 indicated system user address of the controller. ICS system and sends it to access controller 510-1. Further, based on the user address of the ICS system, a response is made as to the name of the corresponding ICS system. In case the corresponding ICS user address does not exist in the ICS 552 name conversion table, the ICS network communication function is used to request the address. requested user of the ICS system from another name server of the ICS system which has the user address of the ICS system, and the user address of the ICS system obtained from there is sent to the device access control 510-1.

The method will now be described, by means of which the user address terminal carrying out transmission 0012 of the ICS system connected to the LAN 500-1 provides a user address of the ICS system which corresponds to the name # 1 of the ICS system. ”USR # 1.ACS # 1.DIS # 1.VAN # 1.JP.AS”. Here we will describe two cases: that where the access control device 510-1 obtains data from the name server 550 of the ICS system and that where the access control device 510-1 obtains data from. another name server 560 in the ICS system.

First, for preparation, the network address ”7741” of the ICS system, which corresponds to the user address ”1000 of the ICS system for the name server 550 of the ICS system, and an identification of 4 requests from this server are recorded in the conversion table

513-1 of the access control device 510-1. Here, the request number 4 indicates that when the user address 1000 of the ICS system is the telephone number 519, it is a special number of the ICS system which is common to another user. The 2014 receiver user address of the ICS system, which corresponds to the ICS system name USR # 1.ACS # 1.DIS # 1.VAN # 1, JP.AS is stored in the name conversion table 552 of the system ICS for the name server 550 of the ICS system. Then, the terminal user of the sender user address 0012 of the ICS system of the LAN 500-1 sends a user data block F40 of the ICS system to the access controller 510-1 and requests a conversion. from ICS # 1 system name USR # 1.ACS # 1.DIS # 1.VAN # 1.JP.AS for an ICS system user address. The processing device 512-1 located in the access controller 510-1 receives the user data block F40 of the ICS system from the logical terminal of the ICS system in the line part 511-1, obtains the user data block F40 of the ICS system. The network address 7711 of the ICS system, then refers to the conversion table 513-1 based on the user address of the ICS system performing reception for the user data block F40 of the ICS system. If the corresponding data ID is 4 (connection to a name server of the ICS system for the special number of the ICS system), the processor 512-1 performs the encapsulation of the user data block F40 of the ICS system. using the obtained network address 7711 of the ICS system, and sends an ICS system network data block including a name of the ICS system to the name server 550 of the ICS system.

As shown in Fig. 34, the name server 550 of the ICS system analyzes the name of the ICS system in the ICS system data block received from the access controller 510-1 with the processing device. 551, and refers to the ICS System Name Conversion Table 552 (not S500). Then, in the case where a user address of the ICS system, which matches the name of the ICS system exists in the name conversion table 552 of the ICS system, the user address of the ICS system is obtained and the block of ICS system network data F45 including user address 2014 ”of ICS system is sent to access controller 510-1 (step S501). In the event that the name of the ICS system does not exist in the name conversion table 552 of the ICS system, the access controller 512-1 receives a user data block F41 from the ICS system for example and , in case the name # 2 of the ICS system (i.e. USR # 2.ACS # 2.DIS # 2.VAN # 2.JP.AS) described in user data block F41 of the ICS system is not described in the name conversion table 552 of the ICS system, ICS system name server 550 obtains the ICS system network address for another ICS system name server from ICS system name conversion table 550 based on the ICS system name (c ' i.e. DIS # 2.VAN # 2.JP.AS), then obtains the user address 1130 of the ICS system, which is the name of the requested ICS system, by means of performing an exchange information using the name server 560 of the ICS system, and the communication function of the ICS system network server (step S502). The obtained result is sent to the access controller 510-1 (step S503). The access controller 510-1 exchanges information with the ICS system address management server 570, based on the receiving user address of the ICS system, which is received from the server. of names 550 of the ICS system and is described in the network data block F41 of the ICS system, obtains the network address of the ICS system which corresponds to the user address of the ICS system and the information associated with it. address, contained in the correspondence table, and writes the data consisting of the user data obtained from the ICS system, the network address of the ICS system and the information associated with the address, into the conversion table 513-1. The access controller 510-1 sends the user address '2014' of the ICS system (or II 30) obtained from the name server 550 of the ICS system to a terminal user having the address of. user performing ICS transmission 0012 for LAN 500-1. The user address 0012 of the ICS system is written in the F45 network data format of the ICS system. The terminal user of the sending user address 0012 of the ICS system of the LAN 500-1 obtains the receiving user address 2014 (or 1130) of the ICS system, obtained from the control device. access control 510-1.

Implementation mode 6 (ICS system name server):

In the embodiment 5, the access controller 510-1 does not write the data such as the user address obtained from the ICS system, the network address of the ICS system, etc. in the conversion table 513-1, but on the contrary writes these data obtained in a temporary conversion table 514-1. In this case, the address mentioned above, written in this temporary conversion table, is deleted for example after 24 hours.

Implementation mode 7 (ICS name server):

In the embodiment 5, the access control device 510-1 does not call the address management server 510 and only provides the call service consisting in signaling the user address obtained 2014 (or 1130) from the ICS system to the terminal corresponding to the user address 0012 of the ICS system.

Implementation mode 8 (accounting server):

There were three types of taxation system: the network charging system, in which charging is performed by counting the ICS user data blocks to be transmitted or received when a call is established, the information charging system, in which charging is executed by counting the information transferred in the user data block of the ICS system, and the fixed charging system in which no charging is performed with respect to the user data blocks transferred from the ICS system, but a constant value charge is counted for a certain time interval (month, year, etc. .) when the registration of the user address of the ICS system or the like is continued in the conversion table of the access controller. The information charging system performs counting and charging designating identification, which indicates the information charging applied to the user control area of ​​the user data block of the ICS system. The network charging system and the information charging system are of the counting type on transmission if the sender of the communication takes charge of the charges, and are of the counting type on reception if it is the receiver. which bears the taxes. Each of the systems comprising the network charging system and the information charging system is called as a quantity charging system ”.

"Conf iguration"

The charging system in the network of the ICS system according to the present invention will be explained with reference to Figures 35 and 36. Each example of the conversion table 813-1, the definition table for fixed charges 843 and The account information database 842 is shown in the figure respectively the charge indicating the quantity

37, figure 38 and figure 39.

The charging system setting information is kept in the conversion table 813-1 in the access controller 810-1 and the definition table for fixed charges 843 is kept in the charging server 840, and a setpoint value indicating network or information charging and a charging system setpoint as a function of (identification of the sender account and of the receiver account) or of the fixed charging system (identification of the sender account and of the receiver account ) are kept in conversion table 813-1. The operation will be explained with reference to Figure 40. The access controller 810-1 receives the user data block F50 from the ICS system (not S800), and reads the charging system type for each data block of the ICS system kept in the conversion table 813. -1, read on the basis of the user address of the ICS system, which is contained in the user data block F50 of the ICS system and checks the account condition (step S801). The access controller 810-1 forms the account information in the case where the read type indicates the charging system according to the quantity, and transfers the account information as a block of information data F51 to the accounting server 840, which is one of the network servers of the ICS system (not S810). However, in the case where the read type indicates the fixed charging system, no formation of an account information not transferring the account information in the form of an account information data block F51 to the server 840 accounting is performed (not S820).

The accounting server 840 receives the account information data block F51 sent by each of the access control devices and stores the account information contained in the account information data blocks. There is an account processing device

841 and an account information database 842 in the accounting server 840, whereby the account processing device 841 receives the accounting information data block F51 sent by the accounting controller. access 810-1, analyzes the account information contained in the account information data block F51 and stores the information in the account information database 842. The account information database 842 uses the network address of the ICS system and the user address of the ICS system as identifiers, and stores the account information as a database. Likewise, in the case where the charging system is the quantity-based charging system, the account information database

842 stores the information about the quantity as a counted number, the counted number can be set with an upper limit, and in case the count exceeds the set upper value, the count server 840 notifies the controller access 8101 that the upper limit has been exceeded, and the controller 810-1, which receives the notification, interrupts the user's communication. The accounting server 840 is able to manipulate the account information stored for other VANs and other users by using the network server communication function of the ICS system.

(1) Example of communication with a network charging, transmission charging and quantity charging system arrangement:

We will give the description in the case where the X corporation and the Y corporation carry out a communication between corporations using the system

ICS 800 according to the present invention. In this case, the charging system for the LAN 800-1 and 800-3 networks is the quantity-based charging system for network charging, the entire bill being borne by the LAN 800-1 network. , and no information charging is performed.

"Preparations for establishing communication"

LANs' 800-1 and 800-3 are connected respectively to the respective access control devices 810-1 and 810-4.

"Preparations for performing a tax"

The charging condition for LANs 800-1 and 800-3, which are to transmit the communication, is recorded in conversion table 813-1. The charging conditions are inserted, for registration, in the conversion table 813-1 on the basis of the transmission network address of the ICS system of the user address of the receiving ICS system, of the receiving network address of the ICS system and the user address of the receiving ICS system. A value of 1 ”is set to indicate that network charging is to be performed by quantity-dependent charging with transmission charging. Likewise, a value “1” is set for the unit charge price. Since information charging is not to be performed, a value of 0 indicating no charging is set to the charging conditions in the information charging condition of conversion table 813-1. A value of ”0 indicating the fixed charging system is set in the conversion table of the access control device 810-4 containing the LAN network 800-3, to prevent the access control device 810-4 from executing. accounting processing, since the LAN 800-1 network must bear the costs.

"Description of the charging operation"

Regarding the user data block

F50 from the ICS system, which is sent by the terminal corresponding to the network address ^ 0012⁵¹ of the ICS system connected to the LAN 800-1 network, the charging condition areas are specified from the user address of the ICS system which performs the transmission and the user address of the ICS system performing the reception in the user data block of the ICS system at the processing device 812-1 in the access control device 810-1 (not S800 and S801), and reference is made to the charging conditions so as to specify the charging system relating to the charging of the network from this area (step S810). Since it is the 1 which indicates that the taxation system is the quantity-dependent taxation system and that emission taxation is to be performed, the system refers it to the unit price of taxation (step S811) , the charging information is formed (e.g. charging unit price l formed as a charging information unit) (step S812), and this charging information is transferred to the accounting server 840 as an account information data block F51 (step S813). In the account processing device 841 in the accounting server 840, the network account counter of the account information database 842 is incremented according to the charging formation located in the account information data block. account F51 received from access controller 810-1 (step S814). In the case where the charging conditions are not part of the examples described last, the charging described here is implemented.

(2) Example of communication with a network charging, sending charging and fixed charging system arrangement:

The description will be given regarding the case where the X corporation makes a communication within itself using the ICS 800 system according to the present invention. In this case, the charging system for the LAN 800-1 and 800-2 networks is the fixed charging system for the charging of the network, all the charges being borne by the LAN 800-1 and no charging of the network. information is executed.

"Preparations for establishing a communication"

LANs 800-1 and 800-2 are both connected to access control devices 810-1 and 810-5. "Preparations for carrying out a tax"

The charging condition for LANs 800-1 and 800-2, which are to perform communication, is recorded in conversion table 813-1. The load conditions are set for recording in conversion table 813-1 based on the transmission network address of the ICS system, the user address of the ICS system performing the transmission, the receiving network address of the ICS system and the user address of the receiving ICS system. A value of 0 ”is set to indicate that network charging is to be performed by the fixed charging system, and likewise a value of 1” indicating that send charging is set for billing based on the table of charges. definition for fixed taxes 843, indicating which party bears the taxes. Since information charging is not performed, a value of 0 '' indicating non-charging is set to the charging conditions in the information charging condition of conversion table 813-1. A value of 0 ”indicating the fixed charging system is set in the conversion table of the access control device 810-5 containing the LAN network 800-2.

"Description of the charging operation"

Regarding the ICS system user data block, sent by the terminal of the network address 0012 of the ICS system connected to the LAN 800-1, charging condition areas are specified from the user address of the sending ICS system and the user address of the receiving ICS system and in the user data block of the ICS system in the processing device 812-1 inside the access control device 810-1 (not S800 and S801), and reference is made to the charging conditions for specifying the charging system relating to network charging from this area (step S810). Since it is the 1 indicating that the charging system is performing fixed charging, no charging processing such as formation of charging information is performed (step 820). Processing for billing is performed with reference to definition table for fixed charges 843. That is, charging is performed for LAN 800-1 since the value 0 indicating send charging is set in the definition table for fixed tables 843.

(3) Example of communication with an arrangement of the network charging, receiving charging and quantity charging system:

We will describe the case where the X corporation and the Y corporation carry out a communication between corporations. In this case, the charging system for the LAN 800-1 and 800-3 networks is the quantity-dependent charging system for network charging, the entire bill being borne by the LAN 800-3 network. , and no information charging is performed. "Preparations for establishing communication"

The LANs 800-1 and 800-3 are connected to respective access control devices 810-1 and 810-4. "Preparations for establishing taxation"

The charging condition for LANs 800-1 and 800-3, which are to transmit the communication, is recorded in conversion table 813-1. The load conditions are set for recording in conversion table 813-1 based on the transmission network address of the ICS system, the user address of the ICS system performing the transmission, the network address of the receiving ICS system and the user address of the receiving ICS system. A value of 2 "is set to indicate that network charging is to be performed by means of the quantity-dependent charging system, and also a value of 1" is set for the charging unit price. Since charging is not to be performed, a value of 0 indicating no charging is set to the charging conditions in the charging condition of the information in conversion table 813-1. A value of 2 indicating that the quantity-based charging system is receiving charging is set in the conversion table of the access controller 810-4 containing the LAN 800-3, since the network LAN 800-3 must bear the loads. "Description of the charging operation"

Regarding the user block of the ICS system sent by the terminal of the network address 0012 ”of the ICS system connected to the LAN 800-1, charging condition fields are specified from the user address of the transmitting ICS system and the receiving ICS system user address in the user data block of the ICS system in the processing device 812-1 inside the access control device 810-1 (not S800 and S801), and reference is made to the charging conditions for specifying the charging system relating to the charging of the network from the area (step S810). Since it is 2 '' which indicates that the charging system is a function of the quantity and that the charging on reception is to be executed, the charging information is formed (for example the charging unit price 1 is formed under the form of two units of the charging information) and the account information data block is transferred to the accounting server 840. In the account processing device 841 inside the accounting server 840, the network account counter for the LAN 800-3 of the account information database 842 is incremented according to the information. charge in the account information data block received from the access controller 810-4.

(4) Example of communication with an arrangement of the network charging, receiving charging and fixed charging system:

We will describe the case where the X corporation performs a transmission within itself. In this case, the charging system for the LAN 800-1 and 800-2 networks is the fixed charging system for the charging of the network, all the charges being borne by the LAN 800-2, and no charging of the network. information is not executed. "Preparations for establishing a communication"

The LANs 800-1 and 800-2 are connected respectively to the respective access control devices 810-1 and 810-5.

"Preparations for establishing taxation"

The charging condition for LANs 800-1 and 800-2, which are to transmit the communication, is recorded in conversion table 813-1. The charging conditions are set for registration in the conversion table 813-1 based on the transmission network address of the ICS system, the user address of the receiving ICS system, the receiving network address of the ICS system and the user address of the receiving ICS system. A value of 0 is set to indicate that network charging is to be performed by means of fixed charging, and also a value of 2 indicating that receiving charging is set to define who bears charging in the definition table for fixed taxes 843, indicating which party bears the charges. Since information charging is not to be performed, a value of 0 indicating non-charging is set to the charging conditions in the information charging condition of conversion table 813-1. A value of O indicating the fixed charging system is set in the conversion table of the access control device 810-5 containing the LAN network 800-2.

"Description of the charging operation"

Regarding the ICS system user data block sent by the terminal of the network address ”0012 of the ICS system connected to the LAN 800-1, charging condition areas are specified from the user address of the transmitting ICS system and the receiving ICS system user address in the user data block of the ICS system at level of the processing device 812-1 inside the access control device 810-1 (not S800 and S801), and reference is made to the charging conditions so as to specify the charging system relating to the charging of the network from this area (step S810). Since it is 0 which indicates that the charging system is performing fixed charging, no charging processing such as formation of charging information is performed (not S820). The processing to indicate which part bears the charge is performed with reference to the definition table for fixed charges 843. That is, the charges are posted to the LAN 800-2, given that a value of 2 ”Indicating an emission charge is set in the definition table for fixed charges 843.

(5) Example of communication with an arrangement of the information charging system, emission charging and quantity charging:

We will describe the case where the X corporation and the Y corporation establish a communication. In this case, the charging system for LANs 800-1 and 800-3 is information charging, without any network charging being performed. All costs are borne by the LAN 800-1 network.

"Preparations for establishing communication"

The LAN 800-1 and LAN 800-3 networks are connected to the respective access control devices 810-1 and 810-4.

"Preparations for establishing taxation"

For network charging conditions, a value of 0 indicating no charging is set in conversion table 813-1 and, since charging itself is not performed, there is no setting. of the tax unit price. A value of 3 is set to indicate that the information charge condition is to be fulfilled by quantity charge and transmission charge. Likewise, a value of 2 is set for the taxation unit price.

"Description of the charging operation"

Regarding the ICS system user data block sent by the terminal of the network address 0012 of the ICS system connected to the LAN 800-1, charging condition areas are specified from the user address of the transmitting ICS system and the user address of the receiving ICS system in the user data block of the ICS system in the processing device 812-1 inside the access control device 810-1 (not S800 and S801), and reference is made to the charging conditions so as to specify the charging system associated with the network communication from that area (step S810). Since it is' O which indicates that no charging is set, network charging is not executed (step S820). Next, reference is made to the information charging conditions to specify the charging conditions associated with the information charging. In this case, a value of “1” is set, which indicates quantity-dependent charging, which is to be borne by the transmitter, so that quantity-dependent charging is executed. Likewise the unit tax price, which indicates that reference is made to the weighting of this tax as a function of the quantities, which in this case is set to a value of 2 ”. Then, on the basis of the obtained information, the charging information for each user data block of the ICS system is formed (for example, the charging unit price 2 ”is formed as two units of the charging information) and charging information is transferred to the account server 840 as an account information data block F51. The account processing device 841 located in the account server 840, which received the charging information, specifies the information storage area of ​​the account information database 842 on the basis of the address the transmission network of the ICS system, the user address of the ICS system that performs the transmission, the receiving network address of the ICS system and the user address of the ICS system receiving from the information data block F51, and the network account counter is incremented according to the charging information within the account information block F51.

(6) Example of communication with an arrangement of a

<td>system of</td><td>taxation</td><td>information,</td><td>taxation</td><td>of</td>

<td>reception and</td><td>taxation</td><td>depends on</td><td>amount :</td><td></td>

<td>The</td><td>description</td><td>will wear on</td><td>a case where</td><td>the</td>

<td>corporation</td><td>X and the</td><td>corporation Y</td><td>perform</td><td>a</td>

communication between corporations. In this case, the charging system for LANs 800-1 and 800-3 is the quantity-based charging system for information charging, and no network charging is performed. All the loads are supported by the LAN 800-3 network, which is a receiver.

"Preparations for establishing communication"

The LAN 800-1 and LAN 800-3 networks are connected to the respective access control devices 810-1 and 810-4.

"Preparations for carrying out taxation"

For network charging conditions, a value of O ”indicating no charging is set in conversion table 813-1 and, since charging itself is not performed, there is no setting for the network. unit price of taxation. A value of ”2 is set in the information charging condition to indicate that the information charging condition is to be fulfilled by means of quantity charging and transmission charging. Likewise, a value of 2 is set for the taxation unit price. "Description of the charging operation"

Regarding the ICS system user data block which is sent by the terminal of the network address ”0012 of the ICS system connected to the LAN 800-1, charging condition areas are specified to be specified at charging from the user address of the ICS system performing transmission and the user address of the ICS system performing reception and in the user data from the ICS system in the processing device 812-1 inside the access control device 810-1 (not S800 and S801), and reference is made to the charging conditions so as to specify the charging system associated with communication in the network from that area (step S810). Since it is 0 ”which indicates that no charging is set, network charging is not executed (step S820). Next, reference is made to the information charging conditions in a manner associated with information charging conditions. In this case, a value of "2" is set, which indicates quantity dependent charging, which is to be borne by the receiver, so that quantity dependent charging is executed. Likewise, reference is made to the taxation unit price, which indicates the weighting of the taxation according to the quantity, which in this case is set to a value of 2. Then, on the basis of the obtained information, the charging information for each user data block of the ICS system is formed (for example, a charging unit price "2" is formed as two units of the (charge information) and charge information is transferred to the account server 840 as the account information data block F51. The account processing device 841 located in the accounting server 840, which has received the charging information, specifies the information storage area of ​​the charging information database 842 based on the address. the transmission network of the ICS system, the user address of the ICS system carrying out the transmission, the network address of the receiving ICS system and the user address of the receiving ICS system from the account information data block F51, and the network account counter is incremented according to charging information in the account information data block F51.

(7) Example of communication with an information charging, transmission charging and quantity charging system arrangement, in which charging conditions have not been previously recorded in a lookup table :

The description will relate to the case where the X corporation and the Y corporation establish a communication. The charging conditions for a communication between LAN 800-1 and 800-3 are the same as described above, but in this case the difference is that values ​​used to stipulate charging conditions are not saved. in the conversion table 813-1 of the access control device 810-1 connected to the LAN network 800-1.

"Preparations for establishing communication"

The LAN 800-1 and LAN 800-4 networks are each connected to the respective access control devices 810-1 and 810-2 respectively.

"Preparations for establishing a tax"

In this case, there is no charging condition stored in the conversion table 813-1, so here it is not necessary to make preparations in the access control device 810-1 containing the LAN 800-1 network. The reception charging conditions for the LAN 800-4 network are set in the conversion table in the access controller 810-2 containing the LAN 800-4. A value 'O ”indicating the absence of charging is set to the charging conditions in the charging condition of the information in conversion table 813-1. Since the taxation itself is not executed, there is no setting of the unit price of taxation. A value of 3 is set to the information charging condition to indicate that the information charging is to be performed by quantity based charging and transmission charging. Likewise, a value “1” is set for the unit charge price.

"Description of the charging operation"

Regarding the ICS user data block output from the terminal of the network address 0012 of the ICS system connected to the LAN 800-1, a charging condition areas specification test is performed using the user address of the ICS system making the transmission, the user address of the receiving ICS system in the ICS system user data block for the conversion table 813-1 in the processing device 812-1 inside the access controller 810-1 (not S800 and S801), but since there is no zone indicating the relevant charging conditions in this case, contact is made with the access control device 810-4 containing the user performing the reception, based on the receiving user address of the ICS circuit for the receiving user (step S802). The access control device 810-4 refers to the charging conditions of the user performing the reception in conjunction with the conversion table located in the access control device 810-4 and responds with the charging conditions to the user. access control device 810-1. The charging conditions, which the access control device 810-1 has obtained from the access control device 810-4, are recorded in a conversion table 814-1 (step S803). Then, reference is made, in the processing device 812-1, to the charging conditions so as to specify the charging conditions concerning the network communication from the charging conditions. Since the condition is 0 ”, which indicates that no charging is set, network charging is not executed (step S820). Hereinafter, reference will be made to the information charging conditions to specify the charging conditions associated with the information charging. In this case, a value of 1, which indicates quantity-dependent charging, which is to be borne by the sender, so that quantity-dependent charging is executed. Likewise reference is made to the charge unit price, which indicates the weighting of the charge according to the quantity, and which in this case is set to a value "1" and therefore the weight of this charge is known. Then, on the basis of the obtained information, the charging information for each user block of the ICS system is formed (for example, a unit price of charging 1 ”is formed as a unit of the charging information. ) and the charging information is transferred to the account server 840 as an account information data block F51. The account processing device 841 located in the accounting server 840, which has received the charging information, specifies the information storage area of ​​the account information database 842 on the basis of the address transmission network of the ICS system and the user address of the ICS system that performs reception, from the account information data block F51, and the network account counter is incremented according to the account information contained in the account information data block F51.

Implementation mode 9 (ICS system data block database server):

Figures 41 and 42 show an example of an ICS 900 system that contains two ICS system data block database servers 950 and 960, which are one type of ICS system network servers. The ICS system data block database servers 950 and 960 store data based on a timing requested from the terminal side (hereinafter referred to as the ICS system user terminal) using the ICS 900 system or delete the stored data and send the data to the requestor. The ICS system data block database servers 950 and 960 consist of processors 951 and 961, memory information management tables 952 and 965, and boxes 953 and 963, respectively. Upon receipt of the instruction from the processing devices 951 and 961, the memory information management tables 952 and 962 store items, the management of which is necessary for each separate terminal using the ICS system such as, for example, the number of indexes of stored information. Upon receiving the instruction from the processing devices 951 and 961, the boxes 953 and 963 memorize the number of management of information stored for each separate terminal using the ICS system, and the user information, etc. . Hereinafter, the preparatory elements for using ICS system data block database servers 950 and 960 and associated communication examples will be described. "Preparatory elements"

The operator of the VAN-1 network pre-registers the information (in this embodiment, the user address 0012 of the ICS system, etc.) about the user in the information management table 952. memory and in box 953, so that the memorizing of the information can be carried out by a terminal having the user address “0012” of the ICS system, which is connected to the LAN 900-1 of the corporation X . Likewise, in the same way, the operator of the VAN-3 network will pre-register the information (in the first embodiment, the user address "0034" of the ICS system, etc.) concerning the system. user in the memory information management table 962 and in the box 963, so that the information storage can be performed for a terminal having the user address 0034 ”of the ICS system, which is connected to the LAN 900-2 network of the X corporation. The user using the ICS system sends a user data block F60 from the ICS system, as shown in Fig. 45, to the ICS 900 system. This ICS user data block F60 has the following added for the user control area of ​​this block: a use request identifier (an identifier that explicitly indicates the use of the ICS system data block database server) for the use of the ICS system data block database server, and an information processing identifier (an identifier which explicitly indicates the processing of information stored in the database server of the ICS system). On the other hand, although the description of the present embodiment implies that the user appends the use request identifier and the information processing identifier to the user control area of ​​the data block d. user F60 of the ICS system, which obtains the request for the user's use of the ICS system data block database server, but, instead, the use of the request identifier and the information processing identifier may, however, be appended to the user data area of ​​the ICS system.

"Communication examples" (1) Communication example 1 (operation of the ICS system data block database server on the send side):

A terminal, which is connected to the X corporation LAN 900-1 network and has an ICS user address 0012, establishes communication with a terminal which is connected to the X corporation LAN 900-2 network and has a ICS system user address 0034, which uses the ICS system data block database server. FIG. 46 shows a flowchart which describes the operation of this server.

The transmitting terminal sends a user data block F60 of the ICS system to use the server 950 of the ICS system data block database for the ICS system 900, the user data block F60 of the ICS system being provided, in the user control area, with a use request identifier (management number of the memory user carrying out the transmission: a code that the user, who uses the ICS system, provides optionally and which is used as a search index number in the event that the user of the ICS system intervenes on the stored information) and a treatment identifier information (duration of the transfer program, information memory, information transfer, information deletion, information elimination, etc.). An access control device 910-1, which has received this identifier (not S900) refers to the use request identifier of the user data block F60 of the ICS system in the processing device 912-1 (step S901) and, in the case where the number of the user request identifier is set by the terminal making the transmission exists, the user data block F60 of the ICS system is transferred to the processing device 951 . The processing device 951, which has received the user data block F60 from the ICS system, refers to the use request identifier and the information processing identifier (step S910) which performs the operation. operation indicated in the information processing identifier.

In the event that the information memory is indicated, the processing device 951 receives the use request identifier (user management number of the transmission memory) and the information processing identifier. (information memory) of the usage data block F60 of the ICS system transmitted by the transmitting terminal, thereby memorizing the user address of the ICS system, which performs the reception, and the use request identifier in the memory information management table 952 corresponding to the address of the data block of the user of the ICS system, which performs the transmission, then stores the data block user of the ICS system in box 953 (not S911). Since the user data block to be stored is sent from the transmitter in a form divided into a plurality of user data blocks of the ICS system, this operation is carried out until the last of the blocks User data of the ICS system to be stored is indicated, by means of the information processing identifier (end of information) indicated in the user data block F60 of the ICS system (step 912).

In the case where the transfer schedule time is indicated (step S913), the processing device 951 receives the use request identifier (user management number of the transmission memory) and the processing identifier. information (transfer program duration) of the user data block

F60 of the ICS system issued by the sending terminal, which causes the storage of the time specified in the memory information management table 952 (step 914), and the processing device 951 also transfers the information stored in the box 953 to the receiving terminal, at a predetermined time, by means of constant control of the transfer program duration (step S915).

In the case where the transfer of information is indicated, the processing device 951 receives the use request identifier (user management number of the transmission memory) and the information processing identifier. (transfer request) of the user data block F60 of the ICS system sent by the sending terminal, which blocks the sending of the information (ICS system user data block) stored in box 953 to the receiving terminal (step S916). Likewise, in the case where information elimination is indicated, the processing device 951 receives the use request identifier and the information processing (information deletion) identifier of the data block d. user F60 of the ICS system sent by the terminal carrying out the transmission, which deletes the information stored in the memory information management table 952 and in the box 953 (step S917). (2) Communication example 2 (operation of the ICS system data block database server on the receiving side):

A terminal, which is connected to the LAN 900-2 of corporation X and has a user address 0034 ”of the ICS system receives a communication from a terminal which is connected to the LAN 900-1 of corporation X and has a user address of 0012 of the ICS system, which uses the user box. A flowchart is shown in Fig. 47, which describes memory information and in box 963 (step S937).

(3) Communication example 3 (case the receiving side temporarily cannot perform reception):

In the event that a terminal, which is connected to the X corporation LAN 900-1 network, and has a user address "0012" of the ICS system, establishes communication with a terminal which is connected to the LAN 900-2 network of corporation X and has a user address ^,,0034 '' of the ICS system, even if a connection cannot be established temporarily between the sending terminal and the LAN 900-2 of the corporation X, the server 960 of the data block database of the ICS system temporarily stores the information addressed to the terminal performing the reception, and executes the communication when the connection becomes possible. FIG. 48 shows a flowchart describing this operation.

The transmitter terminal transmits a user data block F60 from the ICS system to the ICS system 990, the user data block F60 from the ICS system being provided, at the user control area, with an information processing identifier (temporary memory) which makes it possible to distribute information even if communication with the receiver terminal is impossible, by temporarily storing the information in the ICS system data block database server 960. The user data block F60 of the ICS system is sent through the ICS system 900 to the access controller 910-5 containing the receiver terminal, the access controller 910-5 receives the block user data F60 of the ICS system (step S940), and the device 912-5 checks whether or not the use request identifier exists in the data block for this operation.

The transmitting terminal sends a user data block F60 from the ICS system for the use of the ICS system data block database server 960, receiving side, to the ICS 900 system, the data block user F60 of the ICS system being provided, in the user control area, with a use request identifier (management memory user management number: a code that the user using the ICS system optionally issues, used as an index number in the case where the user of the ICS system is processing the stored information) and the information processing identifier. The user data block F60 of the ICS system is sent through the ICS system 900, to the access control device 910-5 containing the receiving terminal (step S920). The processing device 912-5 refers to the use request identifier of the user data block F60 of the ICS system (step S921), and the number of the use request identifier set by the terminal performing the transmission exists, transfers the user data block F60 from the ICS system to the processor 961.

The processing device 961, which has received the user data block F60 from the ICS system, verifies the information processing identifier (information storage, information transfer, information elimination, complementation of information). information, etc.) of the user data block F60 of the ICS system (step S930), in a case of storing the information, stores the use request identifier in the management table 962 of the system. memory information, which corresponds to the user address of the ICS system performing transmission and the user address of the data block performing reception and then stores the user data block of the ICS system in box 963 (not S931). The ICS system user data block to be stored is sent from the transmitter in a form divided into a plurality of ICS user data blocks so that in the present embodiment, this operation is performed. until the last of the ICS system user data blocks to be stored is indicated, by means of the information processing identifier (information supplementation) indicated in the user data block F60 of the ICS system (step S932). The processing device 962 notifies the terminal of the user performing the reception that this is information addressed to the terminal of the receiver in the server 960 of the database of data blocks of the ICS system, by attaching the user management number of the receive memory, at a time (eg noon) agreed in advance with the receiver terminal (step S933). The receiver terminal, which has been informed, sends a user data block F60 from the ICS system, which sets the use request identifier and the information processing (information transfer) identifier to the device. access control 910-5, the ICS system data block database server 960 sends the information stored in box 963 to the receiver terminal (step S936), then the receiver terminal receives the information (ICS system user data block) stored in the ICS circuit data block database server 960.

When receiving a data block explicitly indicating the use request identifier and the information processing (information deletion) identifier of the user data block (F60) of the ICS system, the processing device 961 discards the information stored in the user management table F60 of the ICS system (step S941) and refers to the information processing identifier (temporary storage) of the data block of user F60 of the ICS system (not S942). If there is a request for temporary storage, an evaluation is made as to whether the terminal on the reception side is in a state in which communication is available. In case the communication is available, the user data block F60 of the ICS system is transferred to the receiving terminal (not S950) and in the case where the communication is not available, the user data block F60 from the ICS system is transferred to the treatment device

961 ICS System Data Block Database Server 960.

The processor 961 stores the user address of the ICS system, which performs transmission, the user address of the ICS system, which performs reception, and the request identifier for using the data block d. 'user F60 of the ICS system in the table

962 management information, then stores the ICS system user data block in the box

963 (not S951). The ICS system user data block to be stored is sent from the transmitter in the form divided into a plurality of ICS user data blocks so that in the present embodiment, this operation is performed. until the last of the ICS system user data blocks to be stored is specified, by means of the information processing (information supplementation) identifier indicated in the user data block F60 of the ICS system (step S952). The processing device 912-5 continuously monitors the state of communication with the terminal performing the reception, and when the terminal performing the reception becomes able to perform the reception, it signals the processing device 961 that the communication with the receiver is available. Upon receipt of the notification, the processor 961 notifies the receiver terminal that there is information addressed to the receiver in the ICS system data block database server 960 at a timing (e.g. after 5 minutes) agreed in advance with the receiver terminal (not S953). The receiver terminal, which received the notification, sends a user data block F60 from the ICS system, which set the use request identifier (ICS system user management number) and the identifier information processing (information transfer) to the access control device 910-5, the ICS system data block database server 960 sends the information stored in box 963 to the receiver terminal (step S956) and the receiver terminal receives the stored information from the database server 960. ICS system data block data (step S945).

When the processing device 961 receives a data block explicitly indicating the use request identifier and the information processing (information discard) identifier of the user data block F60 of the sent ICS system by the receiver terminal, it deletes the information stored in the memory information management table 962 and in the block 963 (step S957).

Implementation mode 10 (transfers by X.25, FR, ATM, satellite communications and inclusion of telephone lines, ISDN lines, CATV lines, satellite line):

The format of data from the user in the ICS system according to the present invention is not limited to the user data blocks of the ICS system according to the protocol according to RFC791 or RFC1883, but can also be applied to the control of 'a telephone line, an ISDN line, a CATV line, a satellite line, the IPX system. Likewise the relay network for the ICS system network data block inside the ICS system network can handle X.25, FR, ATM, satellite communication, etc. In accordance with the present invention, the ATM central office includes relay cell equipment and the ATM network contains cell / relay networks.

Figures 49 to 51 are an example of the interface conversion in an ICS 1000 circuit according to the present invention, consisting of access control devices 1010-1 and 1010-2, a transmission interface network 1050 data blocks from the ICS system, an X.25 transfer network 1040, a transfer network FR 1041, an ATM network 1042, a satellite communication network 1043, units 1031-1, 1031-2 network data block conversion of X.25 / ICS systems, units 1032-1 and 1032-2 reception data block conversion of FR / ICS system, units 1033-1 and 1033- 2 ATM / ICS system network data block converter, 1034-1 and 1034-2 satellite network / ICS system data block converter, 1030-1 and 1030-2 converter telephone lines, ISDN line conversion units 1029-1 and 1029-2, CATV line conversion units 1028-1 and 1028-2, satellite line conversion units 1027-1 and 1027-2, and IPX system conversion units 1026-1 and 1026-2. An example of the conversion table 1013-1 in the access controller 1010-1 is shown in Figure 52.

The ICS System Data Block Transmission Interface Network 1050 is a relay network, which transfers the intervening ICS system network data block following the protocol of RFC 791 or RFC 1883 in the format such that he is present. The X.25 network 1040 is a relay network for transferring data blocks having an X.25 format and has, as an input / output part, data block conversion units 1031-1 and 1031-2 X.25 network / ICS system to convert ICS network data blocks to data blocks having an X.25 format and to perform a reverse conversion. The FR 1041 network is a relay network for transferring data blocks of a data block retransmission format and has as an input / output part 1032-1 and 1032-2 data block conversion units of FR network / of the ICS system to convert blocks of network data of the ICS system to an FR format, and to perform a reverse conversion. The ATM network 1042 is a relay network for transferring data blocks having an ATM format and has as an input / output part the data block conversion units 1033-1 and 1033-2 of the network of the ATM / ICS system for converting network data blocks of the ICS system into data blocks having an ATM format, and for performing a reverse conversion. The satellite communication network 1043 is a relay network for transferring data blocks having a format for satellite communication, and has as an input / output part the data block conversion units 1034-1 and 1034-2. ICS system satellite / network to convert blocks of data from the ICS system network for input into an interface of the satellite communication network and for reverse conversion. The role of the telephone line conversion units 1030-1 and 1030-2 is to convert a function equivalent to a physical layer or a data link layer (first and second layers of the OSI communication protocol) between the telephone line and the access control device, and to perform the reverse conversion. The ISDN network line conversion units 1029-1 and 10292758924 perform the functions of converting a function equivalent to a physical layer or a data link layer between the line of the IDSN network and the access control device. and to perform a reverse conversion. The purpose of the CATV line conversion units, 1028-1 and 1028-2 is to convert a function equivalent to a physical layer or a data link layer between the CATV line and the access control device and for perform the reverse conversion. The function of the satellite line conversion units 1027-1 and 1027-2 is to convert a function equivalent to a physical layer into a data link layer between the satellite line and the access control device and to perform a reverse conversion. The function of the IPX line conversion units 1027-1 and 1027-2 is to convert an equivalent function to a physical layer or a data link layer between the satellite line and the access control device and to perform a reverse conversion. The role of IPX line conversion units 1026-1 and 1026-2 is to convert a function equivalent to a physical layer or a data link layer between the IPX line and the second access control device, and for perform the reverse conversion.

(1) The description will be given in the case where a communication is established between the access control device 1010-1 and the access control device 1010-2, through the X.25 network 1040.

The access controller 1010-1 sends the network data block from the ICS system to the X.25 exchange 10131-1. The ICS system X.25 network data block conversion unit 1031-1 in the X.25 exchange 10131-1 converts the ICS system network data block received from the access controller 1010 -1 to an X.25 format data block as shown in Figure 53. The X.25 exchange 10131-1 sends the block data in X.25 format into the X.25 1040 network. The X.25 format data block sent by the X.25 exchange 10131-1 is transferred to the X.25 exchange. the X.25 1040 network and reaches the X.25 exchange 10131-2. Then the X.25 network data block conversion unit 1031-2 / ICS system inside the X.25 exchange 10131-2 performs a reverse conversion of the data block from the received X.25 format to the format. network data block from the ICS system, and sends it to the access controller 1010-2. Access controller 1010-2 receives the network data block from the ICS system. ICS 1000 network data blocks sent by access controller 1010-2 to X.25 exchange 10131-2 are transferred in the same manner to access controller 1010-1.

(2) The description will be given in the case where a communication is established between the access control device 1010-1 and the access control device 1010-2, via the FR 1041 network.

The access controller 1010-1 transmits the network data block to the ICS system. The FR network / ICS system network data block conversion unit 1032-1 located in the FR 10132-1 exchange unit converts the ICS system network data block received from the access control device 1010 -1 into a FR format data block as shown in FIG. 54. Then the FR 10132-1 exchange sends the format data block of the X.25 system into the FR 1041 network. The FR system format data block sent by the FR 10132-1 exchange is transferred via the FR 1041 network and reaches the FR 10132-2 exchange. The ICS system FR / network data block conversion unit 1032-2 in the FR 10132-2 central office performs a reverse conversion of the data block from the received FR format to the network data block format of the ICS system and sends it to the access control device 1010-2. Access controller 1010-2 receives the network data block from the ICS system. The data blocks of the network of the ICS system sent by the access control device 1010-2 to the central FR 10132-2 are transferred in the same way to the access control device 1010-1.

(3) The description will be given in the case where a communication is performed between the access control device 1010-1 and the access control device 1010-2 through the ATM network 1042

The access controller 1010-1 sends the network data block from the ICS system to the ATM central 10133-1. The ICS system ATM / network data block converter unit 1033-1 in the ATM exchange 1013 3-1 converts the ICS system network data block received by the access controller 1010-1 to an ATM format data block as shown in Figure 55. Then, the ATM exchange 10133-1 sends the format data block of the ATM system into the ATM network 1042. The format data block of the ATM system sent by the ATM exchange 10133-1 is transferred into the ATM network 1042 and reached. the central ATM 10133-2. Then the ATM system / ICS system network data block conversion unit 10033-2 in the ATM exchange 10133-2 performs the reverse conversion from the received ATM format data block to the network data block format. of the ICS system and sends it to the access control device 1010-2. The access controller 1010-2 receives the network data block from the ICS system. The access controller 1010-2 receives the network data block from the ICS system. ICS network data blocks sent from access controller 1010-2 to ATM exchange 10133-2 are transferred to access controller 1010-1 in the same way.

(4) The description will be given in the case where communication is performed between the access control device 1010-1 and the access control device 1010-2 through the satellite communications network 1043.

Access controller 1010-1 sends the network data block from the ICS system to satellite transceiver 10134-1. The ICS system satellite / network data block conversion unit 1034-1 within the transceiver 10134-1 converts the ICS system network data block received from the control device. 1010-1 access to an interface in the 1043 satellite communications network. Then the satellite transceiver 10134-1 transmits the converted ICS network data block through an interface into the satellite communications network 1043. The converted ICS network data block through an interface into the network satellite communications network 1043 and transmitted by satellite transceiver 10134-1, is transferred through satellite communications network 1043 and reaches satellite transceiver 10134-2. The ICS satellite / network data block conversion unit 10034-2 within the satellite transceiver 10134-2 performs the reverse conversion of the interface received in the satellite communication network 1043 , in an ICS system network data block format and sends it to the access controller 1010-2. Access controller 1010-2 receives the network data block from the ICS system. ICS network data blocks sent from access controller 1010-2 to satellite receiver / transmitter 10134-2 are transferred to access controller 1010-1 in the same manner.

(5) The description will be given in the case where a communication is performed with an interface of a telephone line between a user 1060-1 connected to a telephone line conversion unit 1030-1 of a control device. access 1010-1, a user 1060-2 connected to a telephone line conversion unit 1030-2 of an access control device 1010-2, the first user making the call.

User 1060-1 establishes a telephone line connection with the VAN network operator. The operator of the VAN networks specifies the access control device 1010-1 connecting the user 1060-1 and decides on an address^not7721 from the ICS system network to the logical terminal of the ICS system. Then the operator of the VAN networks sets information in the conversion table 1013-1 of the access control device 1010-1, such as for example the address^,,7721^,'ICS system network transmission, the telephone number for reception ”06-5555-9876' ', the reception address 5521 of the ICS system network, request identification, etc. In the present embodiment, the request ID 5 indicates a connection between telephone line. In the same way, the operator of the VAN networks positions information in the conversion table 1013-2 of the access control device 1006-2, such as for example the transmission address 5521 of the network of the ICS system, the number receiving telephone 03-5555-1234, ICS system network receiving address 7721, request ID, etc.

User 1060 issues the telephone number 065555-9876. The telephone line conversion unit 1030-1 converts the received telephone number into a format that can be read by the processing device 1012-1 and sends it to the processing device 1012-1. The processing device 1012-1, which received the telephone number information from the unit 1030-1 of the telephone line converter unit, with the address “7721” of the system network ICS, refers to the request identification of the ICS system network send address 7721 in lookup table 1013-1, identifies it as a telephone line connection and reads the receive address 5521 of the ICS system network from the receive telephone number 06-5555-9876. The access controller 1010-1 forms a network data block of the ICS system having a network control area, in which the network receiving address of the ICS system is set to 5521 and the address performing the network. The ICS system transmission is set to 7721 and information from the described network data area to indicate that it is a telephone reception, and sends it into an ICS 1000 system network. The ICS system network data block issued by the access controller 1010-1 is transferred through the ICS 1000 system network and reaches the access controller 1010-2. The access controller 1010-2, which has received the system data block from the ICS system with described network data area information tends to notify that it is a telephone reception, issues a signal from telephone line converter unit 1030-2 having ICS network address 5521 to user 1060-2 notifying receipt. Then user 1060-2 sends a receive signal.

Upon receiving the answer signal, the 1030-2 telephone line conversion unit converts this signal into a format that can be transferred into the ICS 1000 system network. The access controller 1010-2 forms a network data block of the ICS system having a network control area, in which the network receive address of the ICS system is set to 7721 and the address of. ICS system network transmission is set to "5521", and network data area information described to notify that this is the telephone answer and sends it to a network of the ICS system. The ICS system network data block sent by the access controller 1010-2 is transferred to the ICS system network and reaches the access controller 1010-1. The access controller 1010-2, which has received the network data block from the ICS system including the described network data data information to notify that it is a response, sends a signal from the telephone line conversion unit 1030-1 with the address^,,7721 from the ICS system to user 1060-1, which notifies the response. Therefore user 1060-1 and user 1060-2 start full duplex communication using analog signals (voice, etc.) and user 1060-1 sends analog signals. The telephone line conversion unit 1030-1, which received the analog signals, converts the analog signals to an analog information format, which is transferred through the ICS system network.

The access controller 1010-1 forms a network data block of the ICS system having a network control area, and in which the network send address of the ICS system is set to 7721 ”and the ICS system network receive address is set to 5521, and the described network data area analog information and sends it to an ICS 1000 system network. The ICS system network data block issued by the access control device 1010-1 is transferred through the ICS system 1000 network and reaches the access control system 1010-2. The access controller 1010-2, which received the network data block from the ICS system including analog information of the described data area of ​​the

100 network outputs analog information in the form of converted analog signals into a telephone line interface from the telephone line conversion unit 1030-2 having the ICS system network address ”5521 relating to the user 1060- 2. Analog signals output from user 1060-2 are transferred to user 1060-1 using the same procedure.

(6) A case will be described where a communication is performed with an interface of an ISDN line between a user 1061-1 connected to an ISDN line conversion unit 1029-1 of an access control device 1010- 1, and a user 1061-2 connected to an ISDN line conversion unit 1022-2 of the access controller 1010-2, the first user making the call.

User 1061-1 establishes an ISDN line connection with the VAN operator. The VAN operator specifies the access control device 1010-1 which logs on the user 1061-1 and decides an ICS system network address 7722 for the ICS system logical terminal. Then, the operator of the VAN networks positions information in the conversion table 1013-1 of the access control device 1010-1, such as for example the transmission address 7722 of the network of the ICS system, the telephone number Receive ISDN 06-55552222, ICS system network receive address 5522, Request ID, etc. In the present embodiment, the request ID 6 indicated a connection of ISDN lines. In the same way, the operator of the VAN networks positions information in the conversion table 1013-2 of the access control device 1010-2, such as for example the transmission address 5522 of the network of the ICS system, the number Receive ISDN 03-5555-1111, receive address 7722

101 of the ICS system network, demand identification, etc.

User 1061-1 issues the ISDN number 06-55552222. Telephone line converter unit 1029-1 converts the received ISDN number into a format that can be read by processing device 1012-1 and sends it to processing device 1012-1. The processing device 1012-1, which has received the information of the ISDN number from the ISDN line conversion unit 1029-1, with the network address 7722 of the ISDN system refers to the request identification of the send address 7722 of the network of the ISDN system in the conversion table 10131, identifies it as a connection of an ISDN line and reads the receive address 5522 of the network of the ISDN system from the ISDN number of reception 06-5555-2222. The access control device 1010-1 forms a data block of the network of the ISDN system having a network control area, in which the receive address of the network of the ICS system is set to 5522 and the address of the network. ISDN system transmission is set to 7722, and described network data area information to notify that it is an ISDN reception, and sends it to an ICS 1000 system network.

The ICS system network data block issued by the access controller 1010-1 is transferred to the network of the ICS 1000 system and reaches the access controller 1010-2. Access controller 1010-2, which has received the network data block from the ICS system including the described network data area information to notify that it is a telephone reception, sends a signal from ISDN line conversion unit 1029-2 having ICS network address 5522 to user 1061-2, notifying receipt. Then user 1061-2 sends a response signal. When receiving the answer signal, the unit

102

ISDN Line Conversion 1029-2 converts this signal into a format that can be transferred over the ICS 1000 system network. The network controller 1010-2 forms a network data block of the ICS system having a network control area, in which the network send address of the ICS system is set to 7722 and the address of the network. ICS network transmission is set to 5522, and a described network data area information to notify that this is a response from the ISDN system, and sends it to a network of the ICS 1000 system .

The ICS system network data block issued by access controller 1010-2 is transferred through the ICS 1000 system network and reaches access controller 1010-1. The access controller 1010-2, which has received the network data block from the ICS system including information describing the network data area to notify that it is a response, outputs a signal to from ISDN Line Conversion Unit 1029-1, including ICS network address 7722 ”to user 1061-1, notifying the response. Therefore user 1061-1 and user 1061-2 start full duplex communication with digital signals (voice signals, etc.) and user 1061-1 transmits the digital signals. The ISDN line conversion unit 1029-1, which received the analog signal, puts it into a digital information format, which can be transferred through the ICS 1000 system.

The access controller 1010-1 forms a network block of the ICS system having a network control area, in which the network receive address of the ICS system is set to 5522 and the transmit address of network of the ICS system is set to 7722 and a network data area describes information

103 digital, and sends that block of data to a network of the ICS 1000 system. The block of data of the ICS system network sent by the access control device 1010-1 is transferred to the network of the ICS 1000 system and reaches the device. access control switch 1010-2. The access controller 1010-2, which has received the network data block from the ICS system having a network data area describing the digital information, outputs the digital information in the form of converted signals in an interface of ISDN lines from the ISDN Line Conversion Unit 1029-2 with the ICS system network address “5522” to user 1061-2. The digital signals output from user 1061-2 are transferred to user 1061-1 by means of the same procedure.

(7) The description will be made regarding a case where communication is performed with an interface of a CATV line between a CATV broadcast station 103 2-1 connected to a CATV line conversion unit 1028-1 of a device. access control unit 1010-1, and a user 1062-2 connected to a CATV line conversion unit 1028-2 of an access control device 1010-2.

The CATV broadcast station 1032-1 establishes a connection of a CATV line between the user 1062-2 and the operator of the VAN networks. The VAN operator specifies the access control device 1010-2 connecting the user 1062-1, and sets an ICS system network address '' 5523 for the ICS system logical terminal. Then the operator of the VAN networks positions information in the conversion table 1013-1 of the access control device 1010-1, in accordance with the transmission address 7723 of the network of the ICS system, such as the address of receive 5523 from the ICS network, request a request ID, etc. In the

104 In this embodiment, the request ID ”7 indicates a connection of CATV lines. Similarly, the operator of the VAN networks positions information in the conversion table 1013-2 of the access control device 1010-2, such as for example the transmission address 5523 of the network of the ICS system, the ICS system network “7723” receive address, request ID, etc.

The CATV 1062-1 broadcast station sends analog signals from the CATV system. The CATV 1028-1 line converter unit converts the received analog CATV signals into a format that can be transferred to the ICS 1000 system. The access controller 1010-1 forms a network data block of the ICS system having a network control area, in which the network receive address of the ICS system is set to 5523 and the address of ICS. ICS network transmission is set to 7723, and a network data area describing the CATV information, and sends this data block into an ICS 1000 system network. The ICS system network data block issued by the access controller 1010-1 is transferred to the ICS system 1000 and reaches the access controller 1010-2. The access controller 1010-2, which has received the network data block from the ICS system including the network data area describing the CATV information, outputs the CATV information from the converter unit 1028-2 from the CATV line with a network address 5523 from the ICS system to the user 1062-2 as analog CATV signals converted to a CATV line interface. Analog CATV signals delivered by user 1062-2 are transferred to CATV broadcast system 1062-1 following the same procedures.

(8) We will give the description concerning the case where a communication is carried out with an interface of a

105 satellite line between a user 1063-1 connected to a satellite line conversion unit 1027-1 of an access control device 1010-1, and a user 1063-2 connected to a line conversion unit 1027-2 satellite of an access control device 1010-2.

User 1063-1 and user 1063-2 establish a satellite line communication, which exists between user 1063-1 and user 1063-2 with the operator of the VANs. The VAN operator specifies the access control device 1010-1 connecting the user 1063-1 and sets an ICS system network address 7724 ”for the ICS system logical terminal. Likewise, the operator of the VAN networks specifies the access control device 1010-2 connecting the user 1063-2 and sets an address ”5524 for the logical terminal of the ICS system. Then, the operator of the VAN networks sets information in a part of the conversion table 1013-1 of the access controller 1010-1 according to the network send address 7724 of the ICS system, such as for example the ICS system network receive address 5524, an identification of the request, etc. In the present embodiment, the request ID 8 indicates the satellite line connection. Likewise, the operator of the VAN networks positions information in the conversion table 1013-2 of the access control device 1010-2 such as for example the transmission address 5524 of the network of the ICS system, the ICS system network receive address 7724, request identification, etc.

User 1063-1 sends signals via satellite. The satellite line converter unit 1027-1, which has received satellite interface signals from the satellite line, converts the satellite signals into an information format that can be transferred by

106 through the ICS 1000 system. The access control device 1010-1 forms a network data block of the ICS system having a network control area, in which the receive address of the ICS system network is set. to ”5524 and the home address of the ICS system is set to 7724, and a network data area describing satellite signal information, and sends this information into the network of the ICS 1000 system. The ICS 1000 system network data block issued by the access controller 1010-1 is transferred through the ICS 1000 system network and reaches the access controller 1010-2. The access controller 1010-2, which has received the network data block from the ICS system having a data area describing the satellite signal information, sends the satellite signal information from the unit 1027-2 converting the satellite line with an ICS network address 5524 to the user 1063-2 as satellite signals converted to a satellite line interface. Satellite signals from the satellite line gap and delivered by user 1063-2 are also transferred to user 1063-1 according to the same procedures.

(9) The description will be given in the case where a communication is established with an IPX interface between a terminal having an IPX 9901 address of a 1064-1 user and a terminal having an IPX 8801 address of a 1064-1 user. .

The users 1064-1 and 1064-2 establish an IPX communication, between a terminal having an IPX 9901 address of the user 1064-1 and a terminal having an IPX 8801 address of the user 1064-2, with the operator VAN networks. The operator of the VAN networks specified the access control device 1010-1 connecting the user 1064-1 and the converter unit

107

IPX 1026-1 with a network address ”7725” of the ICS system In the same way the operator of the VAN networks specifies the access control device 1010-2 connecting the user 1064-2 and the IPX converter unit 1026-2 with an ICS system network address ”5525”. Then, the operator of the VAN networks sets the information in a part of the conversion table 1013-1 of the second access control device 1010-1 corresponding to the transmission address 7725 '' of the network of the ICS system, like for example the IPX address ^,,9901 of the transmitter, the IPX address ”8801” of the receiver, the receive address 5525 ”of the network of the ICS system, the identification of the request, etc. In the present embodiment, the request ID 9 indicates the IPX connection. Likewise, the operator of the VAN networks positions information in a part of the conversion table 1013-2 of the access controller 1010-2, which corresponds to the transmission address 5525 of the system's network. ICS, such as the sender's IPX 8801 address, the receiver's IPX 9901 address, the ICS system's network receive address 7725, request identification, etc.

The terminal with an IPX 9901 address of user 1064-1 sends an IPX data block with the sender's IPX address set to 9901 and the receiver's IPX address set to 8801. The IPX 1026-1 converter unit of the access control device receives the IPX data block and reads the sender's IPX 9901 address and the receiver's IPX 8801 address, then reads the receive address 5525 ”Of the receiving network, the IPX address 8801 of the receiver, the IPX address 9901 of the transmitter and the send address 7725 of the network of the ICS system, in conversion table 1013-1. The access control device 1010-1 forms a network data block of the ICS system having a network control area, in which the network transmission address of the ICS system is

108 set to ”5525” and the network receive address of the ICS system, where reception takes place, is set to 7725 ”, and a network data area describing the information of the ICS data block, and sends this data block in a network of the ICS 1000 system.

The ICS system network data block output from the access controller 1010-1 is transferred through the ICS system 1000 network and reaches the access controller 1010-2. The access controller 1010-2, which has received the network data block from the ICS system including the network data area describing the network data block information from the ICS system, outputs data block information. IPX data in the IPX 1026-2 converter unit with a 5525 network address from the ICS system to user 1064-2, as a block of IPX data converted to an IPX interface. The terminal with the IPX 8801 address of user 1064-2 receives the IPX data block. On the other hand, the IPX data block set to the IPX 8801 address of the sender and to the IPX 9901 of the receiver sent by the terminal with the IPX 8801 address of the user 1064-2 is also transferred to user 1064-1 using the same procedures.

Implementation mode 11 (transfer according to X.25, FR, ATM, satellite communication and inclusion of a telephone line, an ISDN line, a CATV line, a satellite line):

In the previously mentioned embodiment 10, the network data block conversion units 1031-1 and 1031-2 of the X.25 / ICS system, the units

FR system / ICS system network data block conversion 1032-1 and 1032-2, units 1033-1 and

1033-2 network data block converter from the ATM system / ICS system, units 1034-1 and 1034-2 from

109 satellite system / ICS system network data block conversion are each located in relay networks, i.e. in X.25 1040 network, FR 1041 network, 1042 ATM network t communication network by satellite 1043. Conversely, as shown in Figures 56 and 57, with the embodiment 11, the X.25 system / ICS system network data block conversion units 1131-1 and 1131-2, the units

FR system / ICS system network data block conversion 1032-1 and 1032-2, units 1033-1 and

1033-2 for the ATM system / ICS system network data block converter, the satellite system / ICS system network data block conversion units 1034-1 and 1034-2 are each located in the controllers of the ICS system. access 1110-1 and 1110-2. That is, while in the embodiment 10 the data blocks received from the network of the ICS system are converted and reverse converted into formats which can be transferred on the side of each of the relay networks (network X .25 1040, FR 1041 network, ATM 1042 network, satellite communication network 1043), the conversion being performed by the relay networks, with the implementation mode 11, the conversion and reverse conversion to formats which can be transferred in each of the relay networks, is carried out in the access control devices.

Mode of implementation 12 (inclusion of access control devices in relay networks):

In the previously mentioned embodiment 10, the network data block conversion units 1031-1 and 1031-2 of the X.25 / ICS system, the units

FR system / ICS system network data block conversion 1032-1 and 1032-2, units 1033-1 and

1033-2 network data block converter from the ATM system / ICS system, units 1034-1 and 1034-2 from

110 satellite system / ICS system network data block conversion are each located in relay networks, i.e. in X.25 1040 network, FR 1041 network, 1042 ATM network and overhead communication network. satellite 1043. Conversely, as shown in Figures 58 and 59, with the embodiment 12, the access control devices 1120-1, 1120-2, 1121-1, 1121-2, 1122-1, 122 -2, 1123-1, 1123-2 are each located in the relay networks, that is to say in the X.25 network 1140-1, in the FR 1141-1 network, in the ATM 1142-1 network and in the 1243-1 satellite communication network. That is, although with the embodiment 10, a conversion from the user data blocks to the data blocks of the ICS system network and a reverse conversion based on the management. by means of the conversion table were carried out in the access control devices arranged outside each relay network, in this example, a conversion from the user data blocks of the ICS system into the network data blocks of the ICS system (ICS encapsulation) and a reverse conversion of this conversion (reverse encapsulation of the ICS system), based on the management of the conversion table are executed in each of the aforementioned relays, i.e. in the X.25 network 1040, in the FR network 1041, in the ATM network 1042 and in the satellite communication network 1043.

Implementation mode 13 (relay network connection to relay devices):

In the previously mentioned embodiment 10, the X.25 network 1040, the FR network 1041, the ATM network 1042 and the satellite communication network 1043 are each connected to the access control devices 1010-1 and 1010. -2, but are not connected to relay devices. Conversely, as shown

111 in FIG. 60, with the embodiment 13, the X.25 2020-1 network is connected to the access control device 2010 and to the relay device 2030, the FR2031-1 network is connected to the control device d 'access 2011 and to the relay device 2031, the ATM network 2022-2 is connected to the access control device 2002 and to the relay device 2032, and the satellite communication network 2023-1 is connected to the access control device 2013 and the relay device 2033 and further the X.25 network 2020-1 is connected to the relay devices

2030, 2034 and 2035, the FR 2021-2 network is connected to the 2031 and 2035 devices, the 2022-2 ATM network is connected to the 2031, 2032 and 2036 relay devices, and the 2023-2 satellite communication network is connected to relay devices 2033, 2036 and 2037. That is, in the present embodiment, the access control devices are arranged such that the X.25 network 2020-1 and 2020-2, the FR network 2021-1 and 2021 -2, the ATM network 2022-1 and 2022-2, the satellite communication network 2024-1 and 2024-2 are each connected to relay devices.

Implementation mode 14 (case where the access control device is located outside the ICS system):

FIG. 61 represents a 14th embodiment according to the present invention, in which the contact device 1210-1 is placed outside the ICS system 1020, that is to say in the LAN network 1200 of the X corporation. Therefore, the ICS system address management server 1250-1 and the ICS system networks server 1260-1 are also located outside the ICS 1200 system, that is, that they are located in the LAN 1200-1. The access control device integration management server 1240 is located inside the ICS 1200 system. The access control integration management server 1240 has the function of

112 to communicate and exchange information with the access control device 1210-1, the network management server 1250-1 of the ICS system and the server 1260-1 of the networks of the ICS system, by using the communication function of the ICS system networks. The moment the operator of the VAN networks contacts the X corporation and connects the communication line to the user at the ICS 1200 system, the functions of the two 1240 servers of management of the integration of the access control devices are used to write data to the lookup table inside the access controller 1210-1. Likewise, the ICS system address management server 1250-1 and the ICS system network server 1260-1 can each use the respective ICS system network server communication functions to communicate with the management server 1250-2. ICS system addresses, the ICS 1260-2 network servers within the ICS 1200 system. Since the present invention is so arranged, a user terminal in the LAN 1200 can perform communication within the corporation and the communication between corporations, such as the embodiment 1 indicated. easily that within a corporation and between corporations can be performed with the user terminal as previously described, as in the case where the ICS System Address Management Server 1250-1 and the ICS System Network Server 1260-1 are located inside the ICS System 1200.

Implementation mode 15 (speed class and degree of priority):

"Conf igur ation"

As shown in Figures 62-64, described above. communication communication

113 the ICS 8000-1 system includes access control devices 8010-1, 8010-2, 8010-3, 8010-4, relay devices 8020-1, an ICS system address management server 8025-1 and an ICS system network server 8027-1, this device being connected by communication lines 8030-1, 8030-2, 8030-3, 8030-4, 8030-5 and 8030-6 of ICS system networks, that transfer a block of network data from the ICS system. Line unit 80111, processor 8012-1, and conversion table 8013-1 are all provided within access controller 8010-1. Communication lines 8051-1, 8051-2, 8051-3 and 8051-4 of the ICS system are connected to the plurality of logical terminals of the ICS system in the line unit 8011-1, these lines being respectively provided with ICS system network addresses ”7721, 7723, 7724 and 7725. The speed classes assigned to the communication lines of the ICS system in the ICS 8000-1 system and indicate the transfer speed of the network data blocks of the ICS system. For example, the speed classes of the communication lines 8030-1, 8030-2 and 8030-3 of the ICS system are all 4, the speed classes of the communication lines 8030-3 and 8030-5 of the ICS system are all 3 , and the speed class of the 8030-4 communication line of the ICS system is 2. An example of the 893-1 conversion table and shown in figure 65. The speed class is determined by a standard identical to that of the speed class recorded in the 8013-1 conversion table. An ICS system network address 7811 is sent to the ICS system address management server 8025-1, and an ICS system network address 7821 is sent to the ICS system address management server 8027-1, these servers being connected to the 8010-1 access control devices through the 8054-1 and 8054-2 network communication lines of the ICS system.

114

User 8400-1, which is an ICS system communication terminal, has an ICS system user address ”2500”, and is connected to line unit 8011-1 through the line of logical communication 8051-1 of the ICS system; user 8400-2, which is an ICS system communication terminal, has a user address ”2510 of the ICS system, is connected to line unit 8010-2 through the logical communication line 8052-1 of the ICS system, the user 8400-3, which is a communication terminal of the ICS system, has a user address ”3600” of the ICS system and the user 84004, which is a communication terminal of the system ICS, has a user address ”3610” of the ICS system, these terminals being connected to the line unit 8010-3 respectively through the gateway 8041-1 and the logical communication line 8053-1 of the ICS system .

The method of registering the network address of the ICS system and the user address of the ICS system with the conversion table 8013-1 is the same as with the implementations 1 and 2 mentioned above. , the differences with these embodiments being as follows: the speed recorded in the conversion table 8013-1 in the implementation mode 1 is deleted and, in its place, a speed class and a degree of priority are registered; furthermore, the speed class and the degree of priority are stored in the address management server 8025-1 together with the corresponding user addresses of the ICS system, as part of the information associated with the address.

Speed ​​class is a system, in which the communication speed is represented by numerical or analogous values, instead of speed units. For example, the communication speed is 64k bit / s

115 in class 1, the communication speed is 128 k bit / s in class 2, etc., the communication speed of 500 M bit / s constituting class 7. The higher the number of the communication class, the higher the number of the communication class, the higher the speed. Fig. 66 shows an example of correlation between communication speed and speed class, but here it is not necessary to set the speed class system as 7 class system from 1 ”to” 7. This system can be, for example, a system used finely in 20 classes, in accordance with the progress of technology. Likewise, it is not necessary that the communication speed precisely matches the physical communication speed of the ICS system trunks in the ICS 8000-1 system and on the contrary the system can be arranged to match. at 25% of the physical communication speed, which provides some freedom with the communication speed. The degree of priority is represented by numerical values, in an 8-element system, for example representing the order of priority compared in a single speed class in the case of transmitting the network data blocks of the ICS system from the access control device or relay device to the network communication line of the ICS system. The higher the numeric value representing the priority degree, the higher the priority. For example, in the case where the relay device receives two data blocks F510 and F511 from the ICS system almost simultaneously, and the speed class of both data blocks has the same value "2", the priority level of the ICS system network F510 data block is '' 3, and the priority of ICS system network F511 data block is 5, the system first outputs the ICS system network F511 data block with higher priority.

116

In the present embodiment 15, for example the communication lines 8030-3 and 8043-4 of the network of the ICS system are in the same communication channel starting from the relay device 8020-1 towards the control device. access 8010-3, and the ICS network communication lines 8030-5 and 8030-6 are in the same communication channel from relay device 8020-1 to access controller 8010-4. The communication line can be connected to the relay device from the access control device or can be connected from a relay device to another relay device connected to the ICS system network communication line. A plurality of network communication lines of the ICS system, belonging to the same speed class, can be inserted in the same channel, and in this case, the same speed class can be located in the same network communication line of the ICS system.

"Operation"

The operation will now be described with reference to the flowcharts of FIGS. 67 and 68.

User 8400-1 sends the user data block F500 of the ICS system with the user address 2500 of the ICS system doing the sending, and the user address 3600 of the ICS system doing the sending. receive, to the 8051-1 logical communication line of the ICS system. The processing device 8012-1 of the access control device 8010-1 receives the user data block F500 of the ICS system from the logical terminal of the ICS system with the address 7721, in the network of the ICS system, line unit 8011-1 and simultaneously obtains the ICS system network address 7721 (not S2001) and checks whether the ICS system network address 7721 contains an identification of

117 request recorded in conversion table 8013-1 as ”3” (virtual leased line connection) or not (not S2002). In this case, the registration was not carried out as such so that the address 3600 ”which carries out the reception, of the ICS system network and which is described in the user data block F500 of the ICS system is obtained according to the network address 7721 of the ICS system (step S2004) and checks whether the request identification of the address ICS system network ”3600” is recorded in the conversion table as 2 (communication between corporations) or not (not S2005). In this case, the record has been saved so that then the receive address ”5522 of the ICS system network is obtained from the conversion table 8013-1 as preparations for performing the encapsulation of the system. ICS, and information associated with the accounting, namely speed class 3 ”and priority degree 3 is obtained from the conversion table 8013-1 (step S2006). Then, the encapsulation of the ICS system is performed to produce an ICS system network data block F510, in which speed class ”3 and priority degree 3 (step S2020) are written, which are sent to the communication line. 8030-1 from the ICS system network (not S2021).

Although the previous explanation has been given in connection with the inter-corporation communication, where the request ID of the network data block of the ICS system is set to 2 (inter-corporation communication), in the case where the request identification of this data block is ”3” (virtual leased line connection), the network address of the ICS system, to which the reception takes place, the speed address, the degree of priority and the like are obtained from the conversion table 8013-1, and further the information relating to the account is obtained (step S2003). In the case where

118 the request identification of this data block is ”1” (communication within a corporation), the network address of the ICS system, at which reception takes place, the speed class, the degree priority and the like are obtained from the conversion table 8013-1 and further the information regarding the count is obtained (step S2011). In the case where the request identification of the data block is M (communication with a network server of the ICS system), the network address of the ICS system, to which reception is performed, and the like are obtained from of the conversion table 8013-1 and further the information about the account is obtained (step S2013), whereby this account is sent to the network server 8027-1 of the ICS system after the encapsulation.

The ICS system network block F510 thus formed reaches the relay device 8020-1 through the ICS system network communication line 8030-1. Assume that then another network block F511 of the ICS system reaches the relay device 8020-1 through the communication line 2030-2 of the ICS system network, almost simultaneously. This ICS system network data block F511 was sent by user 8400-2 as ICS system user block F501, arrived in access controller 8010-2 through the 8052-1 logical communication line of the ICS system, with the encapsulation of the ICS system at this time so as to become the network data block F511 of the ICS system at this location, and reached the relay device 8020-1 by being sent through the ICS system network communication line 8030-2. When receiving the F510 network data block from the ICS system and the F511 network data block from the ICS system (not S2030), the relay device 8020-1 controls first, under the direction of the

119 processing device 8021-1, the relay table 8022-1 to determine which network communication line should be used for the network data blocks F510 and F511 of the ICS system, that is, it determines the communication channels (not S2031) and separate the latter channel by channel (not S2032). With the present embodiment 15, the two network data blocks F510 and F511 of the ICS system both have a communication channel transmission destination from the relay device 8020-1 to the controller 8010-3, and two ICS system network communication lines exist, namely ICS 8030-3 and 8030-4 network communication lines. Then the relay device 8020-1 reads the described speed class in the control area of ​​the two network data blocks F510 and F511 of the ICS system and separates the network data blocks of the ICS system according to the speed class. (not S2041). Then the procedures are performed separately for each separate speed class.

In the case of this embodiment 15, the speed class of the two network data blocks F510 and F511 of the ICS system are both 3 ”. Then, with the data blocks of the ICS system having the second speed class, the priority degree described in the control part of the two network data blocks of the ICS system is read for each of these blocks, and the data block of the ICS system with the highest property is sent first (step S2042). If the priority is the same, either block can be sent first. As a result of the above process, the relay device 8020-1 sends the F511 network data block of the ICS system first in the 8030-3 communication line of the ICS system network and then sends the F510 network data block of the ICS system. ICS system in the 8030-3 communication lines of the

120 ICS system.

On the other hand, in the procedures indicated above, in the event that the only available ICS system network communication lines have a communication speed lower than the speed class described in the control area of ​​the system network data block F510 ICS, information regarding slower service due to slower speeds, i.e. the address of the user performing transmission in the ICS system and the address of the user performing the reception in the ICS system, which must be described in the relevant data block of the system network ICS, the instant of the communication service (year, month, day, hour, minute, second), etc. are described in the relay operation file 8023-1. The content recorded in the 8023-1 relay operation file is notified to the user according to requests from the ICS 8000-1 system.

According to the above procedures, of the two ICS system network data blocks F511 and F510, the ICS system network data block F511 with the higher priority takes priority at intervals and reaches the access controller 8010- 3, after passing through the ICS system network 8030-3 communication line. ICS system network block F511 is reverse encapsulated by ICS system, becomes ICS system network data block F501, and reaches user 8400-4 with user address '' 3610 of the system ICS, through the 8053-1 logical communication path of the ICS system. The ICS system network block F510 is reverse encapsulated by the ICS system, becomes the ICS system network data block F500 and reaches user 8400-3 with user address ”3600” of the ICS system via the communication path

121 logic 8053-1 of the ICS system.

The options for how to use the priority level will be described below. In the event that the speed class and the degree of priority recorded in the 8013-1 lookup table need to be copied to the network data block of the ICS system at the time of encapsulating the ICS system, the 8012 processing device -1 controls the length written in the control area of ​​the user data block of the ICS system to be processed, and it is only in the case where the user data block of the ICS system is equal to or less than the predetermined value (for example 256 bytes), that a value representing the degree of priority incremented by 1 is copied into the ICS system network data block. Therefore, in the limited case of user data blocks of the ICS system, the user data blocks of the ICS system can be transferred with priority to the ICS 8000-1 system. That is, the operator of the ICS 8000-1 system is able to easily realize a service in which the priority of short blocks of user data of the ICS system is increased, i.e. the service communication with increased communication charges. With regard to the users, the short user data blocks of the ICS system increase the transmission security. Whether or not this option is used is determined separately, for example for each access control device.

A method can be used, according to which only the speed class is used, and the method indicated above is carried out without the degree of priority, i.e. all the user data blocks of the ICS system have the same level of priority.

In other embodiments, lookup table 8013-1 does not contain the user address of the ICS system, which performs the transmission (inside

122 of a corporation and between corporations). Also in this case there is no modification since the flowchart shown in Fig. 67 does not refer in any way to the user address of the ICS system, which performs the transmission.

Method of implementation 16 (assignment of an electronic signature to the user's data block of the ICS system):

the form of data during electronic description

An embodiment will now be described, in which the user data blocks of the ICS system are electronically signed and in which a verification is made that a user data block of the ICS system has passed through a device. access control. Likewise, we will now describe an embodiment, in which the user blocks of the ICS system are request encrypted. First of all, we will give the concerning the technology of the signature used in the present mode of implementation. To use an electronic signature, there is provided a device producing the signature to form the electronic signature and a verifier for verifying the electronic signature. The device producing the signature simultaneously forms a pair of codes, a signature code KSa and a verification code KPa. The device producing the signature keeps the signature code KSa secret and describes the verification code KPa in one way or another. The device a producing the signature uses the secret signature code KSa kept by the device a ”producing the signature alone, to form an electronic signature σ which depends on a datum m and on the signature code KSa. This is represented in the following expression (1):

σ = SIGN (KSa, h (m)) .... (1)

Here SIGN ”is a signature function representing the

123 function of the signature, and the function y = h (m) is a function known as a hash function ”to carry out the electronic signature and which has the role of compressing the data m into short data. The verifier "b" uses the described verification code KPa and checks the authenticity of the electronic signature σ, in accordance with the following:

V = TEST (σ, KPa, h (m)) .... (2)

Then, in the case where we have av = 1, this indicates that the electronic signature σ and the data m are both correct, that the electronic signature σ and the data m have not been rewritten following the production of the electronic signature σ and that there have been no unauthorized manipulation attempts. If we have av = 0, this indicates that the electronic signature σ or the data m or both are not correct. The KPa verification code is widely described in forms of public code information services, which provide public codes such as, for example, operational reports and information on public codes, or by means of general announcements. The technique for forms of the signature function SIGN, which makes it practically impossible to calculate the signature code KSa even with the description of the verification code KPa, is public knowledge.

<td>Hereafter</td><td colspan="5">we will describe the procedure to affect</td>

<td>one signature</td><td>electronic</td><td>at</td><td>block</td><td>of</td><td>data</td>

<td>users of</td><td>ICS system.</td><td>The</td><td>goals of</td><td>the</td><td>signature</td>

<td>electronics are</td><td>The following</td><td>: a</td><td colspan="2">parameter</td><td>time to</td>

PI position representing conditions regarding the time at which the location of issue of the electronic signature, i.e. year / month / day / hour / minute / second of electronic signature , the operator of the access control device or the identification code of the access control device, and the signature function parameter P2 representing the

124 signature function SIGN, the type of hash function h of the signature code. In a this is expressed by the expression represented on method, according to (m) or the length numerical expression, following (3):

σ = SIGN (KSa, h (m)) .... (3) with m = UF j PI B P2.

Here UF represents the user data block of the ICS system before the encapsulation of the ICS system, or the user data block of the ICS system would remain in the original form after the reverse encapsulation of the ICS system. The user on the receiving side receives the user data block, from the ICS system, the time / location parameter PI, the signature function parameter P2 and the electronic signature σ added to the user code block of the ICS system on the receiving side in the form UF I PI | P21 σ. This is figure 69. In addition, there is one which the area for writing the parameters PI and P2 and the electronic signature σ in the user data block UF of the ICS system remains empty, as shown in Fig. 70. In this case , the electronic signature σ is produced in a manner which can be represented as follows, the open area in the user data block UF of the ICS system being represented by data ”:

σ = SIGN (KSa, h (m)) .... (4) with m = Data B PI B P2.

Signature verification is performed as follows:

v = TEST (σ, KPa, h (m)) .... (5) with m = Data B PI 8 P2.

In case the UF user data block of the ICS system has a length of 2048 bytes, for example, and the length of Uf8piJp21o is equal to 2448 bytes (2048 bytes + 400 bytes), it is necessary to will rewrite the area representing the block length of

125 data in the control area of ​​the UF user data block of the ICS system (eg the full length area as shown in Fig. 3) from 2048 bytes to 2448 bytes. Therefore, the rewritten ICS user data block is represented by UF '. In the case where such an embodiment is used, the electronic signature σ is represented as follows:

σ = SIGN (KSa, h (m)) .... (6) with m = UF '| Pl | P2.

Signature verification is performed as follows:

v = TEST (σ, KPa, h (m)) .... (7) with m = UF '1 PI 1 P2.

In the present embodiment 16, UF, PI and P2 can be reorganized, as regards their order so as to calculate for example the electronic signature if σ = SIGN (KSa, h (m)) and m = PI B P2 I UF is set Pi | p28ufSc in the user data block of the ICS system on the receiving side. In the present embodiment, the encryption function is represented by: y = ENC (K1, x), and the decryption function is represented by x = DEC (K2, y). Here x represents plain text data, y represents cipher text data, ENC represents an encryption function, DEC represents a decryption function, K1 represents an encryption code, and K2 represents a decryption code. The type of electronic signature is also referred to as digital signature and is described, for example, in New Direction in Cryptography (article by W. Diffie and E.. E. Hellma, IEEE IT. Vol. IT-22 No. 6, pages 644654, 1976), and in Encryption and Information Security (Shigeo Tsujii, 1990, Shokodo, pages 127-138).

"Conf igur ation"

As shown in Figure 71, the ICS 9000-1 system contains control devices

126 access 9010-1, 9010-2 and 9010-3, and relay devices 9120-1; these devices being connected by communication lines 9030-1, 9030-2 and 9030-3 of the ICS system network, which transfers network data blocks from the ICS system. Line unit 9011-1, processor 9012-1, conversion table 9013-1, and electronic signature unit 9017-1 are all provided in access controller 9010-1. Inside the electronic signature unit 9017-1, the following are provided: program modules for carrying out the signature code KSa, the verification code KPa, the electronic signature function SIGN and the hash function h (m), the PI time / location parameter, and the P2 signature function parameter. The signature code KSa is a secret value kept by the access control device 9010-1, and the electronic signature unit contains the secret signature code, so that it is necessary to prevent leakage of the code. secret signature. For example, the electronic code unit can be stored inside a physically robust housing, structured so that the signature code cannot be read from the outside. The plurality of logical terminals of the ICS system of line unit 9011-1 are provided with the network addresses 7721, 7722, 7725, 7726, 7727 and 7728 of the ICS system. An example of the conversion table 9013-1 is shown in Figure 72.

The encryption / decryption means 9018-1 include encryption functions and store the encryption code K1 and the decryption code K2. When a UF1 user data block of the ICS system is entered, the UF2 cipher text is output in the form UF2 = ENC (K1, UF1), and when the UF2 cipher text is entered, the clear text is obtained as the formula UF1 = DEC (K2, UF2). "Surgery"

127

This operation will be described with reference to the flowchart shown in Fig. 73. User 2400-1 sends the user data block F900 of the ICS system with the user address ”3600” of the ICS system, gui receives, at the logical communication line 9051-1 of the ICS system. The processing device 9012-1 of the access controller 9010-1 receives the user data block F900 of the ICS system from the logical terminal of the ICS system, with the ICS system network address 7721 for it. 'line unit 9011-1, and simultaneously obtains the ICS system network address 7721 (not S2001) and checks whether the request ID of the ICS system network address 7721 is registered in the conversion table 9013-1 as 3 (connection virtual leased line) or not (not S2002). In this case, the registration was not performed as such, so that the ICS system's network receive address 3600, which is written to the user data block F900 of the ICS system, is subsequently written to. is obtained according to the ICS system network address 7721 (step S2004), and checks whether the request identification of the ICS system network address 3600 is registered in the lookup table as 2 (communication between corporation) or not (not S2005). In this case, registration is performed so that then the ICS system network receive address 5522 is obtained from conversion table 9013-1 as preparations for performing encapsulation of the ICS system. ICS system.

Then, the information associated with the accounting for the speed class and the priority degree is obtained from the conversion table 9013-1 (step S2006). The value 1 is specified in the signature space in conversion table 9013-1, and also YES is recorded in the space for transmission of

128 electronic signature, so that the processing device 9012-1 uses the program modules to realize the electronic signature function SIGN and the hash function h (m), the time / location parameter PI and the function parameter of signature P2 stored in the electronic signature unit 9017-1, using the electronic signature method described above, produces an electronic signature for the user data block F900 of the ICS system, and forms a new ICS system user data block (represented by UF2) (step S2019). This is represented by an expression (8) as follows:

UF2 = mia .... (8) with m = F900 J PI i P2 σ = SIGN (KSa, h (m)).

The procedures indicated above, even if 1 was specified in the signature space in the conversion table 9013-1, if NO is recorded in the space for the transmission of the electronic signature, the production unit 9017-1 of the electronic signature does not work and no electronic signature is issued.

Then, since the encryption class is specified as 1, the user data block UF2 of the ICS system is encrypted by the encryption / decryption means 9018-1 to form a new user data block UF3 ( = ENC (Kl, UF2)). In case the encryption class is ”0”, no encryption is performed.

Then, the encapsulation of the ICS system is performed by means of producing a network data block F901 of the ICS system written with the speed class, the priority degree and the encryption class (step S2020), which is sent to the ICS system network communication line 9030-1 inside the ICS 9000-1 system

129 (not S2021). Although the explanation given above has been made in connection with the communication between corporations, in which the request identification of the network data block of the ICS system is set to '^,2 '' (communication between corporations), in the case where the request identification is '' 3 '' (virtual leased line connection), the network address of the ICS system, at which reception takes place, the Information regarding the count and the like are obtained from conversion table 9013-1 (step S2003). In the case where the request ID is l (communication within a corporation), the network address of the ICS system, to which reception takes place, account information and the like are obtained. from conversion table 9013-1 (not S2011) and in the case where the request ID is 4 ”(communication to a network server of the ICS system), the network address of the ICS system, at which reception takes place, information regarding the count and the like are obtained from conversion table 9013-1 (step S2013).

The ICS system network data block F901 thus produced by the aforementioned methods reached the access controller 9010-2 through the ICS network communication line 9030-1 and the device. relay 9101-1, is subject to the reverse encapsulation of the ICS system, becomes ICS system network data block F90 2 and reaches user 9400-4 with ICS user address “3600” through ICS logical communication path 9051-3. Here we have F902 = mlo, m = UFiJpi1p2, UF1 represents the F900 user data block of the ICS system before transmission, PI is the time / location parameter, P2 is the electronic signature parameter and σ represents the signature

130 electronic with σ = SIGN (KSa, h (m)).

"Electronic signature and decryption during reverse encapsulation of the ICS system

User 9400-3 sends a user data block F930 from the ICS system with a user address 2510 from the ICS system doing the transmission, and a user address 2510 from the ICS system, to which reception at the logical communication line 9051-4 of the ICS system. The access controller 9010-3 receives the user data block F930 from the ICS system, performs encapsulation of the ICS system using the internal conversion table, produces an ICS system network data block 931, and sends it to the ICS system network communication line 9030-3. The ICS system network data block F931 reaches the access controller 9010-1 through the network communication line 9030-1 of the ICS system and the access controller 9020-1, is reverse encapsulated by the ICS system under the effect of the management of the conversion table 9013-1, and becomes the user data block UF1 of the ICS system. Since the value 1 is specified in the signature space in conversion table 9013-1, the user data block (UF1) of the ICS system obtained by means of the reverse encapsulation of the ICS system is decrypted using the use of the encryption / decryption means 9018-1, which makes it possible to obtain a user data block UF1 'from the ICS system. Here we have UF1 '= DEC (K2, UF1) and in the case where the encryption class is 0, no encryption is performed.

Then, since the value 1 is specified in the signature space in the conversion table 9013-1 and also YES is recorded in the space for electronic signature transmission, the output unit 9017-1 Signature

131 electronic function and appends to the user block data of the ICS system the parameters P1 and P2 and the electronic signature σ by forming a new user data block F932 of the ICS system. The latter is represented as follows:

F932 = mlo, m = UF1 i Pl | P2 electronic signature σ j = SIGN (KSa, h (m)) .. (9) and in the case where the aforementioned encryption has been performed, UF1 'is used instead of UF1. In the procedures indicated above, even if the value 1 ”is specified in the signature space in the conversion table 9013-1, if NO is recorded in the space for the transmission of the electronic signature, no electronic signature is was issued. ICS user data block F932 reaches user 9400-4 with ICS user address “2510” through line unit 9011-1 and logical communication path 9051-4 of the ICS system.

"In the case of a request for signature"

In the event that an ICS system user data block F940 having a user address 2800 ”to which the transmission takes place, and an ICS user address 3700 to which the reception takes place , is entered from line unit 9011-1, the request ID corresponding to the network address 7728 of the ICS system is 2, the value 0 is specified by the signature space in the conversion table 9013-1 in a manner corresponding to the user address 3700 of the ICS system, at which reception takes place, and simultaneously OUI is recorded in space for the transmission of the electronic signature. Then, since the value 1 is specified in the signature request space in the user data block F940 of the ICS system, the unit 9017-1 issuing the electronic signature

132 operates and forms a new user data block of the ICS system provided with the parameters PI and P2 and the electronic signature σ.

In the case where the signature space in the conversion table 9013-1 is either 0 ”or 1 and where NO³'is saved in the space for the transmission of the electronic signature, the electronic signature is not delivered with ICS encapsulation, even if the value 1 is specified in the signature request space in the data block d F940 user of the ICS system. Likewise, in the case where the signature request space in the conversion table 9013-1 is either ”0 or 1 and where NO is recorded in the space for the reception of the electronic signature of the block of user data of the ICS system, an electronic signature is not issued after reverse encapsulation of the ICS system, even if the value 1 is specified in the signature space in conversion table 9013-1.

On the other hand, in the case where the user data block of the ICS system is to receive the electronic signature at the time of transmission by the access control device on the transmission side, and furthermore is to receive the electronic signature by the access control device on the reception side, an electronic transmission signature and an electronic reception signature are assigned, as shown in Fig. 74. Likewise there are other examples, in which the value of the verification code KPa is included in the signature function parameter P2. Therefore, this makes it possible to suppress the disturbance of the receiver of the user data block of the ICS system, which obtains the verification code KPa from the public code information center or the like. In addition, in the event that the content of the ICS system user data block is an electronic invoice (order slip, receipt, etc.),

133 an electronic signature is attached to the electronic invoice, as well as the identification code of the access control device through which the electronic invoice has passed. In the event that the issuer (creator) of the electronic invoice or the person who receives it (the recipient) falsifies the electronic invoice, the falsification can be discovered on the basis of the principle of electronic signature. This is why, as long as the electronic signature code is a secret value, that is to say as long as the operator of the access control device, who retains the signature code within him, guarantees that the signature code is a secret value, the electronic signature can be used as a public tampering control system.

Method of implementation 17 (electronic signature server and encryption server):

As shown in Fig. 71 of the embodiment 16, the unit 9017-1 producing the electronic signature and the encryption / decryption means 9018-1 are located in the access control device 9010-1. Conversely, with the present embodiment, as shown in Fig. 75, the access controllers 9310-1, 9310-2, 9310-3 and 9310-4 do not contain any electronic signature issuing unit. Instead, servers 9340-1, 9340-2,

9340-3 and 9340-4 producing an electronic signature and the communication lines 9341-1, 9341-2, 9341-3 and

9341-4 network of the ICS system are respectively connected. Each server producing the electronic signature described in the case of the implementation mode 16 and the mode of operation, according to which electronic signatures are provided before the encapsulation of the ICS system or the delivery of the electronic signature takes place after the encapsulation

134 inverse of the ICS system in cooperation with the access control device, is identical to the function of the unit 9017-1 producing the electronic signature, described in the implementation mode 16, with the signature code, the code verification, electronic signature function, program module to realize hash function, time / location parameter and signature function parameter. The 9342-1 servers and

9342-2 producing the electronic signature are connected to the relay devices 9320-1 and 9320-2 through the communication lines 9344-1, 9344-2 of the ICS system, respectively. The server producing the electronic signature has ICS system network addresses, which are unique throughout the ICS system network, your role of communicating with other electronic signature issuing servers or other control devices. access using the communication function of the ICS system network server, which allows mutual exchange of the information each of them has. The server 9342-1 producing the electronic signature is a server producing the electronic signature which represents the VAN 9301-1 network, which communicates with the servers 9340-1 and 9340-2 producing the electronic signature, in the VAN 9301-1 network in using the server communication function of the ICS system network, and is able to obtain information held by the servers producing the electronic signature. Likewise, the server (the server 9340-1 producing the electronic signature is able to obtain information relating to an electronic signature kept by the server 9340-2 producing the electronic signature, such as for example a verification key), by the intermediary of the server 9342-1 producing the electronic signature. The 9342-1 server producing the electronic signature is able to

135 devices from and 9310-4 do not communicate with the server 9342-2 producing the electronic signature, which represents another network VAN 9301-2 using the communication function of the network server of the ICS system, which has the effect that they exchange reciprocally the information concerning the electronic signatures which they respectively possess. The servers producing the electronic signatures do not exchange information concerning the secret signature codes which they contain, and strictly protect the secrecy of the signature codes.

Further, with the present embodiment as shown in Fig. 75, the access commands 9310-1, 9310-2, 9310-3 contain no encryption / decryption means. Instead a connection is established with the encryption servers 9343-1, 9343-2, 9343-3 and 9343-4, via respective communication lines of the ICS system. Each encryption server has the functions of the encryption / decryption means 9018-1 mentioned above, and the operating mode, according to which the encryption of the user data blocks of the ICS system is carried out before the encapsulation of the ICS system or the decryption of the encrypted ICS system user data blocks after the reverse encapsulation of the ICS system in cooperation with the device access control is identical to the function of the encryption / decryption means 9018-1, with a program module to perform the encryption function and the decryption function, the encryption code and the decryption code. Encryption servers 9343-5 and

9343-6 are connected to relay devices 9320-1 and 9320-2 through the communication lines of the ICS system network. Each encoding server has ICS system network addresses, which are unique across the entire ICS system network, and functions as

136 communicate with other encryption servers or access control devices using the communication function of the network server of the ICS system, so as to exchange between them the information they respectively possess. The 9343-5 Encryption Server is an encryption server representing the 9301-1 VAN network, which communicates with the 9343-1 and 9343-2 Encryption Server in the 9301-1 VAN network using the server communication function of network of the ICS system, and is able to obtain the information held by the encryption servers. Likewise, the encryption server 9343-1 can obtain the information concerning the encryption stored by the encryption server 9343-2 (such as for example an encryption code), through the encryption server 9342-5. The encryption server 9343-5 can communicate with the encryption server 9343-6 which represents another VAN 9301-2 network using the server communication function of the ICS system network, so as to reciprocally exchange the information contained therein. respectively.

Implementation mode 18 (open connection):

We will now describe the open connection of the ICS system, that is to say the preparatory procedures implemented by the user and by the operator of the VAN networks activated so as to modify the other party and to execute the communication between corporations.

"User request"

The user asks the operator of the VAN networks for a name of the ICS system and a user address of the ICS system and simultaneously represents ICS system connection conditions, a user identification and a payment method (address, name account, payment bank account, etc.). If we are in the presence of the user address of the ICS system for communications within a corporation, that

137 the user has decided, this is also shown, but not if there is no address. The operator of the VAN networks follows common rules previously decided with other operators of the VAN networks and decides the name of the ICS system and the user address of the ICS system and informs the user thereof. Items relating to ICS system connection conditions include ICS system name conditions, communication band conditions, accounting conditions, electronic signature conditions, encryption conditions, open area conditions, and conditions. dynamic, the content of these conditions being as described below.

The ICS system naming conditions specify only the left part of the ICS system name. For example in the case where the name of the ICS system is '' USR # l. ACS # 1. DIS # 1. VAN # 1. JP. AS, the user specifies only the leftmost part ”USR #! (the operator of the VAN networks decides on the remaining right-hand side). The conditions in the communication band are a speed class and a priority degree. The accounting conditions are determined based on charges for a fixed quantity for a certain time interval, network usage charges (network accounting) and charge regarding the content of information transmitted and received through the communication. electronic (information account) with respect to communication band conditions, signature conditions, encryption conditions, etc. The electronic signature conditions specify whether or not to provide an electronic signature which can prove, with the date and time, the face that the user data block of the ICS system has passed through in the access control device. . Encryption conditions specify whether or not encryption is performed when the data block

138 user of the ICS system is transferred. The open area conditions specify whether to perform, in the access control device, the rejection of an ICS system data block received from an unknown transmitter not registered in the lookup table, or whether it is must form a temporary conversion table and perform a reception, etc. The dynamic modification conditions specify the functions that can be modified at the request of the user through the data blocks of the ICS system, with respect to the conditions described previously. The dynamic modification conditions are not set so that the signature conditions or the encryption conditions can be modified, but elements important for the operation of the VAN network cannot be modified, such as for example system addresses. ICS or accounting.

"ICS System Address Management Server and ICS System Name Server"

With reference, for the purposes of the description, to Figs. 76 and 77 showing the conversion table 11113-1, to Fig. 78 showing the conversion table, to Fig. 79 showing the correlation table and to Fig. 80 representing the name server of the ICS system, according to this implementation, the following elements are present in the ICS 11000-1 system: access control devices 11110-1, 11110-2 and 11110-3, a relay device 11116-1, address management servers 11150-1 and 11150-2 of the ICS system, servers 11160-1 and 11160-2 giving the names of the ICS system, of the servers 11170-1 and 11170-2 of the ICS system conversion table and of the users 11132-1 and 11132-2. The address management server 11150-2 of the ICS system has in the correlation table, which it contains, the network address `` 8210 '' of the

139 user address user 11132-2.

ICS System Logical Access, user address 4200 of the ICS system, and information associated with the user address, of user 11132-2. The ICS System Name Server 11130-2 has the ICS System Name USR # 1.ÀCS # 1.DIS # 1.VAN # 1.JP in the ICS System Name Conversion Table it contains. .AS and ”4200” of the ICS system, for

The operator of the VAN networks decides on a network address ("7777") (j_u ICS system for use in accordance with user address 3333 of the ICS system for user 11132-1, sending to logical terminal 11111-2 of the ICS system for the controller

11110-1 and connects the communication path

11133-1 of the ICS system, which connects the 11132-1 user through the 11132-2 gateway. The ICS network address 7777 is a described name value, so it is not notified to the user.

Then, the operator of the VANs directly writes the following elements in the correlation table 11152-1 with the address management server 11150-1 of the ICS circuit, and in the conversion table 11152-1 through the intermediary of the ICS circuit. data path 11153-1 and processing device 11151-1: the network address

7777 of the ICS system, determined by the method described above, the user address 3333 (between corporations) of the ICS system, the user address of the ICS system indicated by the user (within a corporation) 1111, and the information associated with the user address, i.e. communication request conditions, account conditions, electronic signature conditions, encryption conditions, open area conditions , dynamic modification conditions, user identification, payment process, etc. The operator of the VANs further writes the following directly in the conversion table 1162-1

140 names of the ICS system in the name server 11160-1 of the ICS system, through data path 11163-1 and processing device 11161-1: the name ”USR # 1.ACS # 1.DIS # 1.VAN # 1.JP.AS ”from the ICS system, as previously described, the user address” 3333 from the ICS system and type 1 (indicating that the user address 3333 is recorded in the name conversion of the ICS 11162-1 system). The above expressed results are as represented by conversion table 11152-1 and ICS system name conversion table 11162-1.

At the time when the aforementioned writing of the various types of information for the new user is completed, the ICS system address management server 11150-1 and the ICS system name server 11160-1 use the function. of the ICS system network to communicate with the respective network addresses 8910 and '^,8920 to notify the ICS system conversion table server 11170-1 that information has been obtained regarding the ICS system address and ICS system connection conditions for a new user. Then the ICS system conversion table server 11170-1 is a type of ICS system network server, and in the present embodiment, has an ICS system network address 100 and a user address. 2100 ”from the ICS system.

"ICS System Conversion Table Server"

The ICS System Lookup Table Server 11170-1 reads the information described in the ICS System Address Management Server 11150-1 correlation table 11152-1 using the ICS system's network communication functions and writes it in template 11172-1 of the conversion table. That is, 7777 is written in the space used for sending the network address of the ICS system (inside a

141 corporation), mi ”is written in the space for the user address of the ICS system, which performs the transmission (between corporations) and 3333” is written in the space provided for the user address of the system ICS, which carries out the issue (between corporations). In case there is no user address of the ICS system for communication inside a corporation, the space for the network address of the ICS system performing the transmission (inside 'a corporation), remains empty. The Request ID number is set to 2, indicating communication between corporations. The other settings for the present embodiment are as follows: the conditions of the communication band are set to speed class 3 and with the priority degree S, the conditions of the electronic signature are set to 1, the transmission signature specification is YES, the reception signature specification is set is NO ”and the accounting conditions are accounting class 4, this embodiment using an example of a fixed charging system. The encryption conditions are encryption class 1, the present embodiment being designed to specify the encryption of the data blocks of the ICS system network within this ICS system. The open zone class of the present embodiment is O. The dynamic modification class ”6 of the present embodiment allows the transmission signature element to be modified at the time of the request made by the user.

"ICS System Conversion Server Table User (User)"

The user 11132-1 as the user address of the broadcast, and the user address 2100 of the ICS system for the server 11170-1 of the conversion table of the writes 3333 system ICS, as performing

142 ICS system as the user address of the ICS system, which performs the reception, sends the user data block F1200 of the ICS system, writes with the information of the receiver (user address of the ICS system, performing the receipt or name of the receiver in the ICS system written to a user data portion of the user data block of the ICS system. The ICS system lookup table server 11170-1 receives the user data block from the ICS system block F1200 through the access controller 11110-1 and obtains the network address of the system. ICS, which performs reception, for communication between corporations, depending on whether the receiver information in the user data part is a user data address of the ICS system, receiving a receiver name from the ICS system, using the method described below. Further, in the case where the receiver name of the ICS system has been specified, the user address of the ICS system, which performs the reception, is also obtained.

(In case this is the specification of the user address of the ICS system, which is the receiver):

In case the previously mentioned receiver information is the user address 3800 ”of the ICS system for the receiver, the server 11170-1 of the ICS system conversion table requests, using the network communication function of the ICS system, the ICS system address management server 11150-1, which is connected to the address controller 11110-1, and obtains the network address of the ICS system 7600 (ICS system network address , receiving location) corresponding to user address 3800 in the ICS system. Likewise, in the event that the user address of the ICS system, which constitutes the receiver,

143 is not found in correlation table 11152-1 (the ICS system network address is not found), the ICS system conversion server 11170-1 receives an address detection fault notification from the ICS System Address Management Server 11150-1.

(In case the name of the receiver in the ICS system is specified):

In the case where the receiver information indicated previously is the receiver name in the ICS system USR # 3.ACS # 3.DIS # 3.VAN # 3.JP.AS, the server 11170-1 of the conversion table of the ICS system sends, using the network communication function of the ICS system, the name of the ICS system USR # 3.ÀCS # 3.DIS # 3.VÀN # 3.JP.AS to the system name server 11160-1 ICS, connected to the same 11110-1 access control device. ICS system name server 11160-1 maintains network addresses in the ICS system network, other ICS system name servers, a form corresponding to the ICS system name (the part of the ICS system name after deletion of the leftmost part USR # ln), and in this embodiment, the ICS name server 11160-1 searches the ICS system name conversion table 11160-2, Finds the network address 8930 of the ICS system from the ICS name server 11160-2 that manages ACS # 3 .DIS # 3. VAN # 3. JP .AS and makes a request for the address 8930, using the network communication functions of the ICS system and obtains the user address 4200 of the ICS system (user address of the receiver in the ICS system) and l '8210 system network address of the ICS system (network address of the receiver in the ICS system) to the name of the mentioned ICS system

USR # 3.ACS # 3.DIS # 3.VAN # 3.JP.AS. In the previously indicated, the 11160-2 server previously corresponding to the name procedures of the

144 ICS system contacted the ICS system address management server 11150-2 regarding the ICS system network address of user 111322, and obtained address 8210.

(Supplement to conversion table 11113-1):

In case the user address of the receiver in the ICS system is specified, the server 11170-1 of the ICS system conversion table adds the user address 3800 ”of the receiver of the ICS system and the address 7600 network of the ICS system, at which the reception takes place, to the conversion table 11113-1, which completes the portion of the conversion table 11113-1 corresponding to the user performing the reception. In the case where the receiver name of the ICS system is specified, the ICS system conversion table server 11170-1 adds the user address 4200, performing reception, and the network address 8210 of the system running. reception, to the conversion table 11113-1, which completes the part of the conversion table 11113-1 which corresponds to the user performing the reception. Likewise in the event that a notification of the inability to find the network address of the ICS system is received from the address management server 11150-1 of the ICS system or the name server 11160-1 of the ICS system. , the ICS conversion table server 11170-1 sends an ICS system data block indicating the unsuccessful conversion table addition to the requesting user 11132-1.

"Alternate Use of ICS System Conversion Table Server (User)"

User 11132-1 requests a user for notification of user-specific information, by issuing a user data block from the ICS system, writes with a request for notification of the content of the user. 'information specific to

145 user in conversion table 11113-1, to ICS system conversion table server 11170-1. In addition, the user can use a dynamic modification class which has been agreed in advance with the operator of the VANs to rewrite part of the 11113-1 conversion table. The dynamic modification class is set to 1, 2, ..., and its content is as follows: dynamic modification class 1 is a specification for increasing user-specific priority by 1 ”, dynamic modification class 2 is a specification for reducing user-specific priority and class by 1 of dynamic modification 3 sets the transmission signature to YES ”and at the same time specifies the switching of the encryption class to” 2.

"Use of the conversion table"

The method of using the conversion table formed in accordance with the procedures indicated above has been described in Embodiment 1, etc. Although in the embodiment 1, the description has been made regarding the method of forming a temporary conversion table if there is no conversion table at the time when the access controller receives the data block from the ICS system network and must perform reverse encapsulation of the ICS system, but in this embodiment, the open area class of the lookup table is used. That is, at the moment when the access control device receives the network data block from the ICS system and needs to perform the reverse encapsulation of the ICS system, in the case that the received pair of network addresses of the ICS system, performing reception, and the network address of the ICS system, performing transmission, contained in the network control area of ​​the network data block of the ICS system has not been recorded in the table of

146 conversion as a pair of the network address of the ICS system, carrying out transmission, and the network address of the ICS system, carrying out reception ”, a temporary conversion table is set in the same way as in the Aforementioned embodiment in the case where the open area class is set to 2 ”, and in the case where the open class area is set to 1”, a temporary conversion table is not set. Further, in case the open area class is set to O ”, not only a temporary lookup table is not set, but the received ICS system network data block is discarded. In this case, the ICS system user data block is not issued by the user. That is, in case the open zone class is set to 0 ”, the reception from an unknown transmitter not registered in the lookup table is rejected, which is called a connection. closed ”. On the other hand, in the above, in the case where the identification of the request is ”4, the open zone class is then treated as being set to 1”, that is to say a table of temporary conversion is not settled.

"Variants of the method of implementation"

The method for using the data path

11153-1 and data path 11163-1 by the VAN operator to enter the addresses of the ICS system, connection conditions of the ICS system and the like into the address management server 11150-1 of the ICS system and in the name server 11160-1 of the ICS system have been described in connection with the previous embodiment. Instead, the arrangement can be such that the operator of the VANs does not use these data paths, but instead forms a special server of networks of the ICS system in the ICS 11000-1 system, so as to enter the system addresses directly

147

ICS, the connection conditions of the ICS system and the like in the ICS system address management management server 11150-2 and in the ICS system name management server 11160-1, using the network communication function of the ICS system, thereby rewriting the contents of the 11150-1 conversion table and the ICS system name conversion table.

Method of implementation 19 (separation of functions from the access control system):

As shown in Figure 76 for implementation 18, the ICS system address management server 11150-1, the ICS system name server 11160-1, and the table server 11170-1 converters of the ICS system are each connected to the access controller 11110-1, the encapsulation of the ICS system and the reverse encapsulation of the ICS system being performed in the access controller 11110-1 using the table conversion rate 11113-1. Conversely, with the present embodiment, the functions of the access control device 11110-1 are separated into an aggregation access control device 11110-1 and a plurality of access control devices. simplified 14210-1, 14210-2 and 14210-3. That is, as shown in Fig. 81, the access controller 11110-1 is connected to the simplified access controllers 14210-1, 14210-2 and 14210-3, by l 'intermediary of respective communication lines 14190-1, 14190-2 and 14190-3 of ICS system networks. ICS System Address Management Server 14150-1, ICS System Name Server 14160-1, ICS System Conversion Table Server 1470-1, ICS System Accounting Server 14180-1, the server 14181-1 producing the electronic signature, the encryption server 14182-1, the operation management server 14183-1 and the network server 14184-1 of the ICS system are connected to the device of

148 aggregation access control 14110-1 via the respective switching lines 14191-1, 14191-2, 14191-3, 14191-4, 14191-5, 14191-6, 14191-7 and 14191-8 network of the ICS system. Further, the conversion table 11113-1 in the access controller 11110-1 is subdivided into an aggregation conversion table 14113-1 and a plurality of simplified conversion tables 14213-1, 14213-2 and 14213-3. An example of the aggregation conversion table 14113-1 is shown in Fig. 2 and an example of the simplified conversion table 14213-1 is shown in Fig. 83.

However, part of the aggregation conversion table and part of the simplified conversion tables overlap. That is, the following four elements are contained in all lookup tables: network address of the ICS system performing the transmission, request identification, speed class, and priority level. There is no fundamental difference between the temporary partial conversion table 14214-1 and the temporary conversion table described in Embodiment 1 and elsewhere, the elements contained in the temporary partial conversion table 14214-1 being the same. to the elements contained in the simplified conversion table 14213-1. Line unit 14211-1 in simplified access controller 14210-1 has the same functions as line unit 11111-1 in access controller 11110-1.

The simplified access controller 14210-1 uses the simplified conversion table 14213-1 to perform the encapsulation of the ICS system at a time of transmission and the reverse encapsulation of the ICS system at a time of reception, and the aggregation access controller 14110-1 uses aggregation conversion table 14113-1 to perform processing

149 concerning the electronic signature and the account, as described above. Likewise, by means of the plurality of simplified access controllers 14210-1, 14210-2 and 14210-3 working in conjunction with the aggregation access controller 14110-1, the combined functions are the same. than those of the 11110-1 access control device. User 14132-1 sends a user data block F1300 from the ICS system with a user address ”3333 from the ICS system, performing transmission, and a user address 4200 from the ICS system, performing reception. to the logic communication line 14133-1 of the ICS system. As shown in the flowchart of Figure 84, the processing device 14210-1 of the simplified access control devices 14210-1 receives the user data block F1310 of the ICS system from the logical terminal of the ICS system. , at ICS network address 7777 for line unit 14211-1, and simultaneously obtains the network address 7777 from the ICS system (not S2501 and checks whether or not the address' 7777 is registered in the simplified conversion table 14213-1 with the request ID set to 3, which indicates a virtual leased line connection (not S2502). In this case, the registration was not executed so that the user address 4200 of the ICS system, performing reception, which is written to the user data block F1300 of the ICS system, is obtained according to to the ICS system network address 7777 (not S2504), and a further check is made to see if the address 4200 is registered in the simplified conversion table 14213-1 with the request ID of this table set to 2, indicating communication between corporations (not S2505). In this case, the registration was performed so that as preparations for ICS encapsulation,

150 the network address ”8210 of the receiving ICS system is obtained from the simplified conversion table 14213-1 (step S2506).

The simplified access controller 14210-1 then performs the encapsulation of the ICS system by means of producing, in the network data block of the ICS system, a network data block F13 01 of the registered ICS system. with the speed class and priority degree obtained from the simplified conversion table 14213-1 (step S2520), and sends it to the aggregation access control device (step S2521). Then, as described above, speed class 3, priority 3, and encryption class 2, which are elements of the simplified conversion table 14213-1, are written for the expansion part of the network control unit of the ICS system.

The aggregation access controller 14110-1 receives the network data block F1301 of the ICS system from the simplified access controller 14210-1, and based on the fact that the data block F1301 The ICS system network passes through the aggregation access controller 14110-1, forms a block of account information FK01, and sends to the accounting server 14180-1. Information such as request ID, speed class, priority, account class, and encryption class, which are recorded in aggregation conversion table 14113-1, are mentioned in the 'order to form the account information data block FK01. The signature, transmission signature and reception signature of the elements of the aggregation conversion table 14113-1 are used to provide the electronic signature and, as has been described in other embodiments, the electronic signature operation is performed by requesting the signature

151 electronic to the server 14181-1 producing the electronic signature. Likewise, in the case where the specification of the encryption class is 1, which indicates the encryption, the encryption is performed by applying the encryption to the encryption server 14182-1. After the above processing is completed, the aggregation access controller 14110-1 sends the network data block F1302 from the ICS system to another access controller 14110-2 and to d other aggregation access control devices, through the ICS system network communication line 14190-4. Also, the content of the format varies from the network data block F1302 of the ICS system in the case where the server producing the electronic signature or the encryption server is running, due to the addition of electronic signatures or conversion to the encrypted text as described previously, but if neither server producing the electronic signature nor any encryption server has been activated, ICS system network data block F1302 is identical to ICS system network data block F1301. Not only can the 14210-1 simplified access control device be realized with virtually no damage to the existing router, but also there are other economic advantages such as for example the name of the user contained in the control device. simplified access 14210-1 is not high and, in the case where the users are dispersed over a large geographic area, the total number of each of the address management servers in the ICS system, ICS System Name Servers, ICS System Conversion Table Servers, Account Servers, Electronic Signature Servers, and Encryption Server can be reduced.

The 14183-1 operation management server is equipped with the ICS system network address, is

152 connected to the access control device 14110-1 and to the relay devices and performs an exchange with other operation management servers, other access control devices, other address management servers in the system ICS, etc. concerning information relating to the conditions of communication with the ICS system (communication traffic, etc.) or a disturbance, through the use of the network communication functions of the ICS system.

Then, the open area class element contained in the simplified conversion table 14213-1 of the simplified access controller 14210-1 is used for the same processing as the processing of the open area class registered in the open area table. conversion of the access control device, as described above. That is, at the time when the simplified access controller 14210-1 receives the network data block from the ICS system and needs to perform the reverse encapsulation of the ICS system, in case the couple receipt formed by the network address of the ICS system, at which reception takes place, and the network address of the ICS system, carrying out the transmission, contained in the network control area of ​​the network data block of the ICS system was not recorded in the simplified conversion table 14213-1 as a pair formed by the network address of the ICS system, performing the transmission, and the network address of the receiving ICS system, a temporary partial conversion table 14214-1 is set as previously mentioned in the case where the open zone class is set to 2, but in case the open area classa is set to 1, a temporary partial conversion table is not set. In addition, in case the open area class is set to 0, not only a temporary partial conversion table

153 is not set, but the received ICS network data block is discarded. In this case, the ICS system user data block is not delivered to the user. In this arrangement, 0 indicates that the reception of an unknown transmitter not registered in the lookup table is to be rejected, which achieves what is called a closed connection.

As described in the previous embodiment, the address management server of the ICS system and the name server of the ICS system can be integrated into a single address and name management server of the ICS system. , the aggregation access control device used being connected to the address and name management server of the ICS system and to the network communication line of the ICS system. Likewise in the previous embodiment, an arrangement can be used, in which elements of the speed class of the priority degree are not provided for in the simplified conversion table 14213-1, a 0 being written at the time. of the encapsulation of the ICS system, in the expansion part of the network control unit of the ICS system for the speed class and the priority degree, which indicates that there is no specification. Likewise, an arrangement can be used in which the specification of the open area class is not provided in the simplified conversion table 14213-1, with a 0 being written in the expansion part of the control unit. ICS system network command for speed class and priority, indicating that there is no specification.

Thus, according to the present invention, the management of the communication of information is carried out with a unified address system, and different services can be provided, without using leased lines or the Internet, which makes it possible to structure a system of

154 large-scale communication with high security and relatively low cost. Likewise, communication between individual corporations (including government organizations, universities, etc.), which used to be departments, can be effected separately with virtually no modification of the address system for communications between computers. In addition, since the grid manager retains control of the grid, the overall grid management becomes clear, which improves reliability and also dramatically improves security.