JP4675842B2 - IP address management system, IP address management method and program - Google Patents

Description

  In the present invention, when a network using IPv6 (Internet Protocol Version 6) addresses is constructed in a network system such as the Internet, a plurality of IPv6 addresses are assigned to one network interface using a multi-prefix function that is a feature of IPv6. The present invention relates to an IP address management system, an IP address management method, and a program.

  Conventionally, in IPv6, a multi-prefix function for assigning a plurality of IP addresses is provided. When an IPv6-compatible information communication terminal is connected to an IPv6 network, a router solicitation message is transmitted to an IPv6-compatible router in the same segment, and the IPv6-compatible router is a network identification part of an IPv6 address by a router advertisement message. Notify the terminal of the prefix. The information communication terminal extracts a prefix from this router advertisement message, calculates an interface ID from its own MAC (Media Access Control) address, and sets a 128-bit IPv6 address. When there are a plurality of IPv6 routers on the network, the information communication terminal receives a plurality of router advertisement messages, extracts prefix information from each router advertisement message, and sets an IPv6 address. As described above, an IPv6 information communication terminal can have a plurality of IPv6 addresses. By applying this, it is possible to freely have an IPv6 address or to set an IPv6 address for each purpose.

  According to such an IPv6 address management system, when the information communication terminal receives the IPv6 prefix advertisement message from the router, the information communication terminal generates a prefix from a part of the prefix received on the information communication terminal side and its own device type, By determining the interface ID from the MAC address or the like and setting a 128-bit IPv6 address, it is possible to share a prefix between the same device types and perform communication.

  Examples of the IPv6 address management system include those described in Patent Document 1.

  FIG. 8 is a flowchart of the IPv6 address management process of the router of the conventional IPv6 address management system and the IPv6 address setting process of the information communication terminal.

  In FIG. 8, when an IPv6 information communication terminal is connected to the IPv6 network, the information communication terminal transmits an IPv6 router request message (step S6). When the router receives the IPv6 router solicitation message (step S1), the router extracts an IPv6 prefix registered in advance and generates an IPv6 router advertisement message (step S2). Next, the router transmits an IPv6 router advertisement message to the information communication terminal (step S3). When receiving the IPv6 router advertisement message from the router (step S7), the information communication terminal extracts an IPv6 prefix from the received message (step S8).

  Next, the information communication terminal determines the IPv6 prefix by adding a numerical value of a bit determined in advance from its own device type to a part of the extracted prefix (step S9). In step S10, an IPv6 address is finally determined from the prefix and MAC address determined in step S9 by a method such as EUI-64. The EUI-64 is composed of 64 bits, the first 24 bits are assigned as a part for identifying the manufacturer, and the latter 40 bits are assigned as a serial number assigned to each product within the manufacturer. Used as part of a bit address space.

  Finally, in step S11, the information communication terminal notifies the router of the determined IPv6 address. This is performed by an ICMP-ECHO request or the like. When the router receives the IPv6 address from the information communication terminal (step S4), the router sets the routing table in step S5, and thereafter, the packet to the information communication terminal is normally delivered.

As described above, the IPv6 address management system can freely determine an IPv6 prefix on the information communication terminal side, and can configure a network having a plurality of IPv6 prefixes in one segment. It can be used for services using the prefix function.
JP 2003-298619 A

  However, in such a conventional IPv6 address management system, when information communication terminals having different IPv6 prefixes (prefix) in the same segment communicate with each other, the other information communication terminals are in the same segment. Since it does not know that it exists, it is necessary to transfer the packet to the router of the segment, and when these information communication terminals transmit / receive a large amount of data to / from each other, the router falls into an overload state. Also, there is a router that does not implement this special procedure because the router communicates the IPv6 address from the information communication terminal to the router with a special procedure between the router and the information communication terminal, and the router sets the routing table. In this case, the information communication terminal in the segment cannot communicate with the outside. In other words, the router needs to know what type of 64-bit prefix exists under its own, set the routing so that the packet normally arrives at that device, and discard the packet for the invalid prefix There is. In the conventional example, negotiation between the router and the terminal device is performed by ping. However, if the router does not implement this technology, a neighbor search packet overflows on the network, and the network becomes congested.

  Therefore, when the system is mixed, or when an unauthorized router and terminal transmit a message, the IPv6 address assignment in the IPv6 network becomes uncertain or unstable, and the stability of the network is impaired. There's a problem.

  The present invention has been made in view of the above. With a simple configuration, the present invention expands messages relating to IPv6 address setting of routers and information communication terminals, and increases the load on the router while maintaining compatibility with conventional messages. An object of the present invention is to provide an IP address management system, an IP address management method, and a program that can reliably and efficiently transmit and receive packets between information communication terminals.

The IP address management system of the present invention automatically uses the extended router solicitation message and the extended router advertisement message between the information communication terminal and the router connected via the IPv6 network to automatically set the IPv6 address of the information communication terminal. In the IP address management system to be set, the information communication terminal, based on the identification ID, generates terminal extension header generation means for generating an IPv6 extended router solicitation message that requests prefixes for the required number of IDs, Based on the IPv6 prefix information described in the IPv6 extended router advertisement message from the router corresponding to the IPv6 extended router solicitation message transmitted from the terminal and the communication means for transmitting the IPv6 extended router solicitation message to the router. IPv6 to set the address And when the router receives the IPv6 extended router request message from the information communication terminal, the prefix setting means for pooling a plurality of prefixes in advance and setting a prefix table for each prefix. Remove the corresponding prefix from table, said comprising: a router extension header generation means for generating an IPv6 extension router advertisement message, a communication unit which sends the IPv6 extension router advertisement message created, and the router, the communication means The information communication terminal periodically stores a valid prefix in the same segment in the prefix list based on the currently valid prefix notified from the router. A prefix list storage means is provided, which compares a prefix valid at the time of data transmission with the prefix list, and if it exists in the list, sends a neighbor search message to resolve the address, and only when it does not exist in the list, A configuration for forwarding to the router is adopted. Also, the IP address management system of the present invention uses the extended router solicitation message and the extended router advertisement message between the information communication terminal and the router connected via the IPv6 network, and the IPv6 address of the information communication terminal. An IP address management system for automatically setting a terminal extension header generating means for generating an IPv6 extended router solicitation message for requesting prefixes for a required number of IDs based on identification IDs, Communication means for transmitting the IPv6 extended router solicitation message to the router, and IPv6 prefix information described in the IPv6 extended router advertisement message from the router corresponding to the IPv6 extended router solicitation message transmitted from its own terminal. I to set IPv6 address in I v6 address means, and the router pools a plurality of prefixes in advance, sets a prefix table for each prefix, and receives the IPv6 extended router request message from the information communication terminal. A router extension header generating means for extracting a corresponding prefix from a prefix table and creating the IPv6 extended router advertisement message; and a communication means for transmitting the created IPv6 extended router advertisement message. A value is set in the identification ID of the IPv6 extension header of the IPv6 extension router solicitation message at the time of startup, the router has a plurality of IPv6 prefixes, and the prefix table has an identification ID and a prefix. The valid flag is composed of a plurality of data having a pair of data, the plurality of IPv6 prefixes are respectively registered in the prefix table in correspondence with the identification ID, the valid flag is set in an initial state OFF, and the information When the extended router solicitation message is transmitted from the communication terminal, the IPv6 extended router solicitation message is received, a value matching the identification ID described in the IPv6 extension header is searched from the identification ID of the prefix table, and the valid Change the flag to ON, set the identification ID sent to the identification ID of the IPv6 extension header of the IPv6 extension router advertisement message, set the prefix read from the prefix table to the prefix information, and send A configuration for transmitting to the original information communication terminal. Adopt the composition.

The IP address management method of the present invention automatically sets an IPv6 address of an information communication terminal using an extended router solicitation message and an extended router advertisement message between an information communication terminal and a router connected via an IPv6 network. An IP address management method in which the information communication terminal creates an IPv6 extended router solicitation message for requesting prefixes for the required number of IDs based on identification IDs, and the created IPv6 extended router solicitation message To the router, and to set an IPv6 address based on the IPv6 prefix information described in the IPv6 extended router advertisement message from the router corresponding to the IPv6 extended router solicitation message transmitted from the terminal. And the router Pooling a plurality of prefixes, setting a prefix table for each prefix, and receiving an IPv6 extended router solicitation message from the information communication terminal, taking out the corresponding prefix from the prefix table, and A step of creating a router advertisement message; and a step of transmitting the created IPv6 extended router advertisement message. The information communication terminal sets a value to the identification ID of the IPv6 extension header of the IPv6 extended router solicitation message when activated. The router has a plurality of IPv6 prefixes, the prefix table is composed of a plurality of data having an identification ID, a prefix, and a valid flag as a pair of data, and the plurality of I When a v6 prefix is associated with the identification ID and registered in the prefix table, the valid flag is set in an initial state OFF, and an extended router solicitation message is transmitted from the information communication terminal, IPv6 Receiving an extension router solicitation message, searching the identification ID in the prefix table for a value that matches the identification ID described in the IPv6 extension header, and changing the valid flag to ON; and the IPv6 extension router advertisement Setting the identification ID transmitted in the identification ID of the IPv6 extension header of the message, setting the prefix read from the prefix table in the prefix information, and transmitting the prefix to the information communication terminal; Have In addition, the IP address management method of the present invention uses the extended router solicitation message and the extended router advertisement message between the information communication terminal and the router connected via the IPv6 network to set the IPv6 address of the information communication terminal. An IP address management method for automatic setting, wherein the information communication terminal creates an IPv6 extended router request message for requesting prefixes for the required number of IDs based on the identification ID, and the created IPv6 extended router An IPv6 address is set based on IPv6 prefix information described in the IPv6 extended router advertisement message from the router corresponding to the IPv6 extended router solicitation message transmitted from the terminal, and a step of transmitting a solicitation message to the router. And the router Pooling a plurality of prefixes in advance, setting a prefix table for each prefix, and receiving an IPv6 extended router solicitation message from the information communication terminal, taking out the corresponding prefix from the prefix table, and Creating a router advertisement message; and transmitting the created IPv6 extended router advertisement message. The information communication terminal has a prefix list that records a plurality of IPv6 prefixes. Periodically, the prefixes whose valid flag is ON in each table of the prefix table are read one by one, and each of the identification IDs in the IPv6 extension header of the IPv6 extension router advertisement message Each time the information communication terminal receives an IPv6 extended router advertisement message for a new prefix from the router, and registers the IPv6 packet in the prefix list. When there is a prefix that matches the prefix list, a neighbor solicitation message is transmitted to search for a destination that owns the IPv6 address of the destination, and if it does not exist in the prefix list, a packet is sent to the router. A step of transferring

  From another viewpoint, the present invention is a program for causing a computer to execute the steps of the IP address management method.

  According to the present invention, since the IPv6 extension header of the IPv6 packet is used, it does not affect the operation of the existing router or the information communication terminal, and the information communication terminal shares a valid prefix in the same segment. Packets can be sent. As a result, the network can be operated efficiently, and the router can forward the packets efficiently.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a block diagram showing a schematic configuration inside an IPv6 address management system, a router, and an information communication terminal according to an embodiment of the present invention. This embodiment is an example applied to an IPv6 address management system.

  In FIG. 1, the IPv6 address management system 1 includes a router 100, an information communication terminal 200, and an IPv6 network 150 that connects the router 100 and the information communication terminal 200.

  The router 100 includes a router solicitation reception unit 111, a router advertisement transmission unit 112, a router extension header generation unit 113, a terminal authentication unit 114, a prefix management unit 115, a prefix table 116, a routing management unit 117, a routing table 118, and a router packet transmission unit. 119 and a router packet receiving unit 120.

  The information communication terminal 200 includes a router request transmission unit 211, a router advertisement reception unit 212, a terminal extension header generation unit 213, a prefix selection unit 214, a prefix search unit 215, a prefix list 216, a router authentication unit 217, a neighbor advertisement reception unit 218, A proximity request transmission unit 219, a terminal packet transmission unit 220, and a terminal packet reception unit 221 are provided.

  FIG. 2 is a block diagram showing the configuration of the prefix table 116 of the router 100.

  In FIG. 2, the prefix table 116 includes an identification ID 301, a prefix value 302, and a valid flag 303.

  FIG. 3 is a block diagram showing a configuration of the prefix list 216 of the information communication terminal 200.

  In FIG. 3, the prefix list 216 includes a number 401 and a valid prefix value 402.

  FIG. 4 is a diagram showing a format of an IPv6 packet 500 that is transmitted and received between the router 100 and the information communication terminal 200.

  In FIG. 4, the IPv6 packet 500 includes an IPv6 extended router solicitation message 510 and an IPv6 extended router advertisement message 520.

  The IPv6 extended router solicitation message 510 includes an IPv6 header 511, IPv6 extended router solicitation message authentication data 512, an IPv6 extended router solicitation message identification ID 513, and a router solicitation message 514. The IPv6 extended router solicitation message 520 includes an IPv6 header. 521, IPv6 extended router advertisement message authentication data 522, IPv6 extended router advertisement message identification ID 523, advertisement prefix 524, and router advertisement message 525.

  The authentication data 512 and identification ID 513 of the IPv6 extended router solicitation message 510 and the authentication data 522, identification ID 523 and advertisement prefix 524 of the IPv6 extended router advertisement message 520 constitute an IPv6 extended header 530 for the IPv6 headers 511 and 521. .

  The operation of the IPv6 address management system configured as described above will be described below.

[IPv6 address setting]
FIG. 5 is a flowchart showing a procedure for setting an IPv6 address between the router 100 and the information communication terminal 200.

  First, the flow on the router 100 side will be described. In the router 100, the IPv6 address management process is activated. In step S101, the router solicitation receiver 111 of the router 100 receives the IPv6 router solicitation message from the information communication terminal 200. Next, in step S102, the router 100 checks whether the IPv6 extension header 530 exists in the received IPv6 router solicitation message. If the IPv6 extension header 530 exists, the received router solicitation message 100 is the IPv6 extension router solicitation message 510. In step S103, the router 100 extracts the authentication data 512 of the IPv6 extended router solicitation message from the IPv6 extension header 530 of the IPv6 extended router solicitation message 510. The authentication data 512 is authentication data generated by an authentication device such as a fingerprint or an iris connected to the information communication terminal, an authentication device using an IC card, or the like.

  In step S104, the terminal authentication unit 114 of the router 100 checks whether the information communication terminal that has transmitted the IPv6 extended router request message 510 from the authentication data 512 is a correct terminal. In the terminal authentication unit 114 of the router, authentication data of a terminal permitted to transmit the IPv6 extended router request message 510 in advance is registered. If it is determined in step S104 that the terminal is correct, in step S105, the router 100 extracts the identification ID 513 of the IPv6 extended router solicitation message from the IPv6 extension header of the IPv6 extended router solicitation message 510.

  Next, in step S106, the prefix management unit 115 of the next router searches the matching field from the identification ID 513 of the extracted IPv6 extended router solicitation message and the identification ID 301 of the prefix table 116, reads the prefix value 302, and sets the validity flag 303. Set to ON. The prefix management unit 115 pools prefixes in advance and registers a prefix value 302 for each identification ID. Further, all the valid flags 303 of the prefix table 116 are set to OFF in the initial state.

  Next, in step S107, the router extension header generation unit 113 of the router 100 next sets the authentication data 522 of the IPv6 extension router advertisement message 520, the identification ID 523 of the IPv6 extension router advertisement message, and the advertisement prefix 524 in the IPv6 extension header. The authentication data 522 is authentication data generated by an authentication device such as a fingerprint or an iris connected to the router 100, an authentication device using an IC card, or the like. The identification ID 523 is the same as the identification ID 513 of the received IPv6 extended router solicitation message 510. The advertisement prefix 524 is the same as the prefix value 302 read in step S106.

  If there is no IPv6 extension header in the IPv6 router solicitation message 510 received in step S102, the router 100 determines that it is a normal IPv6 router solicitation message 510 and skips steps S103 to S107. If it is determined in step S104 that the terminal is not correct, the router 100 determines that the received IPv6 extended router solicitation message 510 is an invalid message, and skips step S105 to step SS107.

  Next, in step S108, the prefix management unit 115 of the router 100 sets a default prefix registered in advance in the router advertisement message 525. In step S109, the router advertisement transmission unit 112 of the router 100 stores the IPv6 extended router advertisement message 520 as information. It transmits to the communication terminal 200.

  Finally, in step S110, the routing management unit 117 of the router 100 sets the routing information for the prefix value 302 as the routing addressed to itself in the routing table 118 of the router 100.

  Next, the flow on the information communication terminal 200 side will be described. In the information communication terminal 200, the IPv6 address setting process is activated. In step S111, the information communication terminal 200 prepares identification IDs for the required number of IPv6 addresses and repeats the following processing. First, in step S112, the terminal extension header generation unit 213 of the information communication terminal 200 sets the identification ID 513 of the IPv6 extension router solicitation message in the IPv6 extension header. This identification ID is a unique value shared between all information communication terminals that transmit the IPv6 extended router solicitation message 510 to the router 100 and the router.

  Next, in step S113, the terminal extension header generation unit 213 of the information communication terminal 200 sets the authentication data 512 of the IPv6 extension router request message 510 in the IPv6 extension header. The authentication data 512 is authentication data generated by an authentication device such as a fingerprint or an iris connected to the information communication terminal 200, an authentication device using an IC card, or the like.

  Next, in step S <b> 114, the information communication terminal 200 sets the router request message 514, and the router request transmission unit 211 of the information communication terminal 200 transmits the IPv6 extended router request message 510 to the router 100. Thereafter, the information communication terminal waits to receive an IPv6 router advertisement message 520 from the router.

  Next, in step S115, the router advertisement receiving unit 212 of the information communication terminal 200 receives the IPv6 router advertisement message from the router 100, and in step S116, the information communication terminal 200 includes the IPv6 extension header in the received IPv6 router advertisement message. Check if. If the IPv6 extension header exists, the received router advertisement message is the IPv6 extension router advertisement message 520.

  Next, in step S117, the information communication terminal 200 extracts the authentication data 522 of the IPv6 extended router advertisement message from the IPv6 extended header 530 of the IPv6 extended router advertisement message 520. The authentication data 522 is authentication data generated by an authentication device such as a fingerprint or an iris connected to the router 100, an authentication device using an IC card, or the like.

  In step S118, the router authentication unit 217 of the information communication terminal 200 checks whether the router that transmitted the IPv6 extended router advertisement message 520 from the authentication data 522 is a correct router. In the router authentication unit 217 of the information communication terminal 200, authentication data of a router permitted to transmit the IPv6 extended router advertisement message 520 in advance is registered.

  If it is determined in step S118 that the router is correct, in step S119, the information communication terminal 200 extracts the IPv6 extension router advertisement message identification ID 523 from the IPv6 extension header of the IPv6 extension router advertisement message 520. In step S120, the information communication terminal 200 compares the identification ID 513 of the IPv6 extended router request message 510 set in step S112 with the identification ID 523 extracted in step S119. If the identification IDs match, the advertisement prefix 524 is extracted from the IPv6 extension header 530 of the IPv6 extension router advertisement message 520 in step S121, and the process of step S122 described later is performed.

  On the other hand, if the IPv6 extension header does not exist in the IPv6 router advertisement message received in step S116, the router 100 determines that it is a normal IPv6 router advertisement message, skips step S117 to step S121, and executes step S123 described later. Process. Similarly, if it is determined in step S118 that the router is not correct, the information communication terminal determines that the received IPv6 extended router advertisement message 520 is an invalid message, skips step S119 to step S121, and will be described later in step S123. Perform the process. Similarly, when the identification IDs do not match in step S120, the information communication terminal 200 determines that the received IPv6 extended router advertisement message 520 is an invalid message, skips step S121, and performs the process of step S123 described later.

  In step S123, the information communication terminal 200 extracts a prefix from the received IPv6 router advertisement message. Finally, in step S122, the information communication terminal 200 sets an IPv6 address from the advertisement prefix 524 extracted in step S121 or the prefix extracted in step S123. In order to set the IPv6 address, a method is conceivable in which the upper 64 bits set the advertisement prefix 524 and the lower 64 bits are set from the MAC address of the information communication terminal 200 by EUI-64.

[Regular IPv6 Prefix Notification Process of Router 100 / IPv6 Prefix Setting Process of Information Communication Terminal 200]
FIG. 6 is a flowchart showing periodic IPv6 prefix notification processing of the router 100 and IPv6 prefix setting processing of the information communication terminal 200.

  First, the flow on the router 100 side will be described. The router 100 is in a timer waiting state and is periodically started from the timer (step S201). Next, in step S202, the router 100 repeats steps S203 to S208 described later as many as the number of identification IDs 301 registered in the prefix table 116. Next, in step S203, the router 100 reads the valid flag 303 corresponding to the identification ID 301 of the prefix table 116, and in step S204, the router 100 checks whether the read valid flag 303 is ON.

  If it is not ON in step S204, the process returns to step S203, and the process for the next identification ID 301 is repeated. If ON in step S204, the router extension header generation unit 113 of the router in step S205 sets the authentication data 522 of the IPv6 extension router advertisement message 520, the identification ID 523 of the IPv6 extension router advertisement message, and the advertisement prefix 524 in the IPv6 extension header. Set each. The authentication data 522 is authentication data generated by an authentication device such as a fingerprint or an iris connected to the router 100, an authentication device using an IC card, or the like. The identification ID 523 is the same as the identification ID 301 in the prefix table 116. The advertisement prefix 524 is the same as the prefix value 302 corresponding to the identification ID 301 of the prefix table 116.

  Next, in step S207, the prefix management unit 115 of the router 100 sets a pre-registered default prefix in the router advertisement message 525, and in step S208, the router advertisement transmission unit 112 of the router transmits the IPv6 extended router advertisement message 520 to the information communication. Send to the terminal.

  Next, processing on the information communication terminal 200 side will be described. First, in step S209, the router advertisement reception unit 212 of the information communication terminal 200 receives the IPv6 router advertisement message from the router 100. Next, in step S210, the information communication terminal 200 checks whether the IPv6 extension header is present in the received IPv6 router advertisement message. If the IPv6 extension header exists, the received router advertisement message is the IPv6 extension router advertisement message 520. Next, in step S211, the information communication terminal 200 extracts the authentication data 522 of the IPv6 extended router advertisement message 520 from the IPv6 extension header of the IPv6 extended router advertisement message 520. The authentication data 522 is authentication data generated by an authentication device such as a fingerprint or an iris connected to the router, an authentication device using an IC card, or the like.

  Next, in step S212, the router authentication unit 217 of the information communication terminal 20 checks whether the router that transmitted the IPv6 extended router advertisement message 520 from the authentication data 522 is a correct router. In the router authentication unit 217 of the information communication terminal 200, authentication data of a router permitted to transmit the IPv6 extended router advertisement message 520 in advance is registered.

  If it is determined in step S212 that the router is correct, the information communication terminal 200 extracts the advertisement prefix 524 from the IPv6 extension header of the IPv6 extension router advertisement message 520 in step S213. If there is no IPv6 extension header in the IPv6 router advertisement message received in step S210, the router 100 determines that it is a normal IPv6 router advertisement message, skips step S211 to step S213, and performs the processing in step S215 described later. I do. Similarly, if it is not determined that the router is correct in step S212, the information communication terminal 200 determines that the received IPv6 extended router advertisement message 520 is an invalid message, skips step S213, and performs processing in step S215 described later. I do.

  In step S215, the information communication terminal 200 extracts a prefix from the received IPv6 router advertisement message. Finally, in step S <b> 214, the information communication terminal 200 searches for an empty number 401 in the prefix list 216 and sets a prefix to the valid prefix value 402. This prefix is the prefix value extracted in step S213 or the advertisement prefix 524.

[Packet transmission processing of information communication terminal 200]
FIG. 7 is a flowchart showing packet transmission processing of the information communication terminal 200.

  First, in step S301, before the information communication terminal 200 transmits a packet, the terminal packet transmitter 220 extracts the destination prefix from the destination IPv6 address. Next, in step S302, the terminal packet transmission unit 220 of the information communication terminal 200 reads and compares the effective prefix values 402 sequentially registered in the list from the prefix list 216. In step S303, it is determined whether or not it matches the valid prefix value 402 of the prefix list 216, and if it matches the valid prefix value 402 of the prefix list 216, the neighbor request transmission unit 219 of the information communication terminal 200 transmits the destination in step S304. An IPv6 address is set and an IPv6 neighbor solicitation message is transmitted. Thereafter, the information communication terminal waits to receive an IPv6 neighbor advertisement message. When receiving the IPv6 neighbor advertisement message in step S305, the neighbor advertisement receiving unit 218 of the information communication terminal 200 extracts the source MAC address from the message received in step S306 and performs address resolution of the destination.

  On the other hand, if it does not match the valid prefix value 402 of the prefix list 216 in step S303, there is no terminal having the destination prefix in the same segment. In step S308, since the information communication terminal 200 needs to transfer the packet to the external segment via the router, the destination MAC address is set to that of the default router, and steps S304 to S306 are skipped. Finally, in step S307, the terminal packet transmitter 220 of the information communication terminal transmits a packet. If the neighbor advertisement receiving unit 218 of the information communication terminal 200 fails to receive the IPv6 neighbor advertisement message within a predetermined time in step S305, there is no terminal having the destination IPv6 address in the same segment. The packet is discarded at this point, and an error response is made to end this flow (step S310).

  As described above in detail, according to the present embodiment, the information communication terminal 200 creates an IPv6 extended router solicitation message for requesting prefixes for the required number of IDs based on the identification ID and sends it to the router 100. The IPv6 address is set based on the IPv6 prefix information described in the IPv6 extended router advertisement message from the router 100 corresponding to the IPv6 extended router solicitation message transmitted from the terminal. In addition, the router 100 pools a plurality of prefixes in advance, sets a prefix table for each prefix, and receives an IPv6 extended router solicitation message from the information communication terminal 200, extracts a corresponding prefix from the prefix table, Since the IPv6 extended router advertisement message is created and transmitted, the router 100 can manage all the prefixes used in the segment, so that the packet transferred to the router 100 can be efficiently routed. In addition, since the information communication terminal 200 can register and refer to prefixes used in the same segment in the prefix list, the information communication terminal 200 can directly transmit a packet to the prefix of the same segment and suppress the load on the router 100. Can do. In addition, since the information communication terminal 200 selects only a necessary prefix and sets an IPv6 address, there is an effect that it is not necessary to receive various influences of external communication without receiving unnecessary packets.

  In addition, the message between the router 100 and the information communication terminal 200 is compatible with the conventional system, and even if this IP address management system and the conventional system are mixed, there is no confusion, and the network It becomes possible to guarantee stability.

  In the present embodiment, the router 100 includes a terminal authentication unit 114 that authenticates that the information communication terminal that has transmitted the IPv6 extended router solicitation message has the authority to transmit the IPv6 extended router solicitation message, and includes the information communication terminal 200. Includes a router authentication unit 217 that authenticates that the router that has transmitted the IPv6 extended router advertisement message has the authority to transmit the IPv6 extended router advertisement message. Therefore, the IPv6 extended router solicitation message and the IPv6 extended router advertisement message are authenticated. An unauthorized router 100 or information communication terminal 200 including data can be detected by an authentication check. This prevents unauthorized routers and information communication terminals from functioning even if they send messages, prevents damage even if a malicious user tries to bring down the network, and prevents network stability. Can be guaranteed.

  In the present embodiment, the information communication terminal 200 registers in the prefix list every time it receives an IPv6 extended router advertisement message for a new prefix from the router 100, and matches the prefix list when transmitting an IPv6 packet. If the prefix exists, a neighbor solicitation message is transmitted to search for a destination having the destination IPv6 address, and if it does not exist in the prefix list, the packet is forwarded to the router 100. Therefore, the router 100 has a plurality of IPv6 addresses. Can be managed using the identification ID determined between the router 100 and the information communication terminal 200, and reliable communication can be performed between the router 100 and the information communication terminal 200. Can do.

  The above description is an illustration of a preferred embodiment of the present invention, and the scope of the present invention is not limited to this. For example, in the present embodiment, IPv6 address management has been described. However, any network using an IP address may be used, and the present invention is not limited to an IPv6 address. That is, the present invention can be similarly applied to a higher version including the concept of IPv6 address having a multi-prefix function for assigning a plurality of IP addresses.

  In the present embodiment, the names IP address management system, router, and information communication terminal are used. However, this is for convenience of explanation, and includes an IP address creation device, a terminal device, a network device, and an IPv6 address management method. Of course, it may be.

  Furthermore, any part of the IP address management system, for example, the header generation part, the routing management part, the type of the packet transmission part, the number thereof, the connection method, and the like may be used.

  The IP address management method described above is also realized by a program for causing this IP address management method to function. This program is stored in a computer-readable recording medium.

  The IP address management system and the IP address management method according to the present invention can manage all the prefixes used in a segment by the router, so that the packets transferred to the router can be efficiently routed and the information communication terminal Since the prefix used in the same segment can be registered and referenced in the prefix list, packets can be sent directly to the prefix of the same segment, and the load on the router can be reduced. In addition, since the information communication terminal selects only a necessary prefix and sets an IPv6 address, there is an effect that it is not necessary to receive various unnecessary influences from outside without receiving unnecessary packets. In a network such as the Internet, multiple players Ikkusu can effectively be deployed in a variety of application services utilizing useful as IPv6 address management system.

The block diagram which shows schematic structure inside the IPv6 address management system, router, and information communication terminal which concerns on embodiment of this invention The block diagram which shows the structure of the prefix table of the router of the IP address management system which concerns on the said embodiment The block diagram which shows the structure of the prefix list of the information communication terminal of the IP address management system which concerns on the said embodiment The figure which shows the format of the IPv6 packet of the IP address management system which concerns on the said embodiment. Flow chart showing a procedure for setting an IPv6 address between the router and the information communication terminal of the IP address management system according to the above embodiment The flowchart which shows the notification process of the periodic IPv6 prefix of the router of the IP address management system which concerns on the said embodiment, and the setting process of the IPv6 prefix of an information communication terminal The flowchart which shows the packet transmission process of the information communication terminal of the IP address management system which concerns on the said embodiment Flow chart of IPv6 address management processing of router of conventional IPv6 address management system and IPv6 address setting processing of information communication terminal

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 IPv6 address management system 100 Router 150 IPv6 network 200 Information communication terminal 111 Router request receiving part 112 Router advertisement transmission part 113 Router extension header production | generation part 114 Terminal authentication part 115 Prefix management part 116 Prefix table 117 Routing management part 118 Routing table 119 Router Packet transmission unit 120 Router packet reception unit 211 Router solicitation transmission unit 212 Router advertisement reception unit 213 Terminal extension header generation unit 214 Prefix selection unit 215 Prefix search unit 216 Prefix list 217 Router authentication unit 218 Neighbor advertisement reception unit 219 Neighbor solicitation transmission unit 220 Terminal packet transmitter 221 Terminal packet receiver 301 Identification ID
302 Prefix Value 303 Valid Flag 401 Number 402 Valid Prefix Value 500 IPv6 Packet 510 IPv6 Extended Router Solicitation Message 520 IPv6 Extended Router Advertisement Message 511 IPv6 Header 512 Authentication Data 513 Identification ID of IPv6 Extended Router Solicitation Message
514 Router solicitation message 520 IPv6 extension router advertisement message 521 IPv6 header 522 Authentication data of IPv6 extension router advertisement message 523 Identification ID of IPv6 extension router advertisement message
524 Advertisement prefix 525 Router advertisement message

Claims (7)

An IP address management system for automatically setting an IPv6 address of an information communication terminal using an extended router solicitation message and an extended router advertisement message between an information communication terminal and a router connected via an IPv6 network. ,
The information communication terminal, based on the identification ID, a terminal extension header generating means for generating an IPv6 extended router request message for requesting prefixes for the required number of IDs;
Communication means for transmitting the created IPv6 extended router solicitation message to the router;
IPv6 address means for setting an IPv6 address based on the IPv6 prefix information described in the IPv6 extended router advertisement message from the router corresponding to the IPv6 extended router solicitation message transmitted from the own terminal,
The router pools a plurality of prefixes in advance, and sets a prefix table for each prefix;
Upon receiving the IPv6 extended router solicitation message from the information communication terminal, router extension header generating means for extracting the corresponding prefix from the prefix table and creating the IPv6 extended router advertisement message;
Communication means for transmitting the created IPv6 extended router advertisement message,
The router periodically notifies the currently valid prefix by the communication means,
The information communication terminal includes a prefix list storage unit that stores a valid prefix in the same segment in a prefix list based on a currently valid prefix notified from the router, and the prefix that is valid at the time of data transmission is included in the prefix list. If it exists in the list, the IP address management system transmits a neighbor search message to resolve the address, and forwards it to the router only when it does not exist in the list. The information communication terminal, the prefix data based on stored in the prefix list storage means, and transmits the direct packet to other terminals having different prefixes of the same segment, IP address, management system of claim 1, wherein. An IP address management system for automatically setting an IPv6 address of an information communication terminal using an extended router solicitation message and an extended router advertisement message between an information communication terminal and a router connected via an IPv6 network. ,
The information communication terminal, based on the identification ID, a terminal extension header generating means for generating an IPv6 extended router request message for requesting prefixes for the required number of IDs;
Communication means for transmitting the created IPv6 extended router solicitation message to the router;
IPv6 address means for setting an IPv6 address based on the IPv6 prefix information described in the IPv6 extended router advertisement message from the router corresponding to the IPv6 extended router solicitation message transmitted from the own terminal,
The router pools a plurality of prefixes in advance, and sets a prefix table for each prefix;
Upon receiving the IPv6 extended router solicitation message from the information communication terminal, router extension header generating means for extracting the corresponding prefix from the prefix table and creating the IPv6 extended router advertisement message;
Communication means for transmitting the created IPv6 extended router advertisement message,
The information communication terminal sets a value in the identification ID of the IPv6 extension header of the IPv6 extension router solicitation message at startup,
The router has a plurality of IPv6 prefixes, and the prefix table includes a plurality of pieces of data having an identification ID, a prefix, and a valid flag as a pair of data, and each of the plurality of IPv6 prefixes is associated with the identification ID. , Register in the prefix table, set the valid flag in the initial state OFF,
When an extended router solicitation message is transmitted from the information communication terminal, an IPv6 extended router solicitation message is received, and a value that matches the identification ID described in the IPv6 extension header is searched from the identification ID of the prefix table. Change the valid flag to ON,
The identification ID transmitted to the identification ID of the IPv6 extension header of the IPv6 extension router advertisement message is set, the prefix read from the prefix table is set to the prefix information, and the source information communication terminal is set. sending, IP address management systems. An IP address management system for automatically setting an IPv6 address of an information communication terminal using an extended router solicitation message and an extended router advertisement message between an information communication terminal and a router connected via an IPv6 network. ,
The information communication terminal, based on the identification ID, a terminal extension header generating means for generating an IPv6 extended router request message for requesting prefixes for the required number of IDs;
Communication means for transmitting the created IPv6 extended router solicitation message to the router;
IPv6 address means for setting an IPv6 address based on the IPv6 prefix information described in the IPv6 extended router advertisement message from the router corresponding to the IPv6 extended router solicitation message transmitted from the own terminal,
The router pools a plurality of prefixes in advance, and sets a prefix table for each prefix;
Upon receiving the IPv6 extended router solicitation message from the information communication terminal, router extension header generating means for extracting the corresponding prefix from the prefix table and creating the IPv6 extended router advertisement message;
Communication means for transmitting the created IPv6 extended router advertisement message,
The information communication terminal has a prefix list for recording a plurality of IPv6 prefixes,
The router periodically reads one prefix at a time when the validity flag of each table of the prefix table is ON, and sets the prefix to the identification ID and the prefix of the IPv6 extension header of the IPv6 extension router advertisement message, respectively. And having a function of transmitting to the information communication terminal,
The information communication terminal registers in the prefix list every time it receives the IPv6 extended router advertisement message for a new prefix from the router, and if there is a prefix that matches the prefix list when transmitting an IPv6 packet. , neighbor Solicitation message transmitted by the searched destination that owns the IPv6 address of the destination, if present in the prefix list, and transfers the packet to the router, IP address, management system. An IP address management method for automatically setting an IPv6 address of an information communication terminal using an extended router solicitation message and an extended router advertisement message between an information communication terminal and a router connected via an IPv6 network,
The information communication terminal creates an IPv6 extended router request message for requesting prefixes for the required number of IDs based on the identification ID;
Transmitting the created IPv6 extended router solicitation message to the router;
Setting an IPv6 address based on IPv6 prefix information described in an IPv6 extended router advertisement message from the router corresponding to the IPv6 extended router solicitation message transmitted from the own terminal;
The router pools a plurality of prefixes in advance and sets a prefix table for each prefix;
Receiving an IPv6 extended router solicitation message from the information communication terminal, extracting a corresponding prefix from the prefix table, and creating the IPv6 extended router advertisement message;
Transmitting the created IPv6 extended router advertisement message,
The information communication terminal has a step of setting a value to the identification ID of the IPv6 extension header of the IPv6 extension router solicitation message at the time of activation,
The router has a plurality of IPv6 prefixes, and the prefix table includes a plurality of pieces of data having an identification ID, a prefix, and a valid flag as a pair of data, and each of the plurality of IPv6 prefixes is associated with the identification ID. Registering in the prefix table;
Setting the valid flag in the initial state OFF;
When an extended router solicitation message is transmitted from the information communication terminal, an IPv6 extended router solicitation message is received, and a value that matches the identification ID described in the IPv6 extension header is searched from the identification ID of the prefix table. Changing the valid flag to ON;
The identification ID transmitted to the identification ID of the IPv6 extension header of the IPv6 extension router advertisement message is set, the prefix read from the prefix table is set to the prefix information, and the source information communication terminal is set. and a step of transmitting, IP address, management method. An IP address management method for automatically setting an IPv6 address of an information communication terminal using an extended router solicitation message and an extended router advertisement message between an information communication terminal and a router connected via an IPv6 network,
The information communication terminal creates an IPv6 extended router request message for requesting prefixes for the required number of IDs based on the identification ID;
Transmitting the created IPv6 extended router solicitation message to the router;
Setting an IPv6 address based on IPv6 prefix information described in an IPv6 extended router advertisement message from the router corresponding to the IPv6 extended router solicitation message transmitted from the own terminal;
The router pools a plurality of prefixes in advance and sets a prefix table for each prefix;
Receiving an IPv6 extended router solicitation message from the information communication terminal, extracting a corresponding prefix from the prefix table, and creating the IPv6 extended router advertisement message;
Transmitting the created IPv6 extended router advertisement message,
The information communication terminal has a prefix list for recording a plurality of IPv6 prefixes,
The router periodically reads one prefix at a time when the validity flag of each table of the prefix table is ON, and sets the prefix to the identification ID and the prefix of the IPv6 extension header of the IPv6 extension router advertisement message, respectively. And transmitting to the information communication terminal,
The information communication terminal registers in the prefix list every time it receives an IPv6 extended router advertisement message for a new prefix from the router, and when sending an IPv6 packet, if there is a prefix that matches the prefix list, A method for managing an IP address , comprising: transmitting a neighbor solicitation message to search for a destination having an IPv6 address of a destination, and transferring the packet to a router if the destination does not exist in the prefix list. The program for making a computer perform the step of the IP address management method of Claim 5 or 6 .

Images