JP4926381B2 - Management server and communication confirmation method - Google Patents

Description

The present invention provides an IP device capable of performing automatic setting when installed in a network and automatically confirming connection with a wide area network, and a management server capable of automatically confirming connection between the IP apparatus and the wide area network. And a communication confirmation method.

  Since ADSL and CATV are becoming popular because they are always connected to a wide area network such as the Internet, the spread of broadband routers is remarkable. However, since the absolute number of global IP addresses is insufficient in the current IP protocol IPv4, use of NAT (Network Address Translation) function and port forwarding function (static IP masquerading) to cope with the shortage of global IP addresses is doing. By using these functions, it becomes possible to access the IP device on the LAN side from the wide area network via the router. However, conventionally, the user has to know the port number of the IP device and manually set or change the IP device. This was a very heavy burden for users without specialized knowledge.

  Therefore, a standard for dynamically performing port forwarding (port mapping) has been created by the UPnP Forum (see Non-Patent Document 1). In the setting of this standard, the subordinate terminal asks the router whether or not the port number can be used, the router registers if it can be used, and if the terminal cannot be used, the terminal inquires again until it is determined. This is repeated. According to the UPnP standard, manual port forwarding setting is not required, and the port number on the wide area network side can be automatically set regardless of the router vendor. Therefore, this function of the UPnP standard opens the way for automatic setting when an IP device is connected to the network.

  However, in the UPnP standard, since the port number is automatically selected between the IP device and the router, the user on the wide area network side does not know which port number is assigned to which terminal. From the inside of the LAN, the port number used by each IP device can be confirmed using the user interface (web screen) of the router or IP device. However, from the wide area network side (external), the router's This is because the user interface cannot be used.

  Therefore, the applicant has a plurality of IP devices connected to the router, and when communicating by receiving port assignments according to the UPnP standard, a representative IP device is selected from among them and fixed from the wide area network side. And providing address information of other IP devices for access from a wide area network side (Japanese Patent Application No. 2003-12241). This makes it possible to access another IP device by accessing the representative IP device from the wide area network side.

However, it has not been possible to automatically check whether or not the wide area network and the IP device can actually be connected simply by setting the port forward of the router according to the UPnP standard.
UPnP standard, [online], [searched on November 29, 2002], Internet <URL: http://www.upnp.org/standardizeddcps/default.asp>

  As described above, even if port forwarding can be dynamically set according to the UPnP standard, connection confirmation as to whether the wide area network and the IP device can actually be connected cannot be automatically performed.

  SUMMARY OF THE INVENTION An object of the present invention is to provide an IP device, a management server, and a network system that can perform automatic setting when installed in a network and can automatically check connection with a wide area network.

In order to solve the above problems, the present invention provides a port forward function for transferring a packet transmitted to a predetermined port number of a repeater to a first IP device connected to the repeater based on the predetermined port number. A management server that can be connected to a first IP device via a repeater having a connection to a second IP device capable of transmitting packets to a predetermined port number of the repeater, Before the second IP device performs data communication with the first IP device, the management server can perform data communication with the first IP device via the relay device using the port number assigned to the first IP device. The control unit receives a connection check request including information on the port number assigned to the first IP device from the first IP device, and responds to the connection check request. And this A connection request for requesting whether or not the management server can perform data communication with the first IP device via the relay device is a connection check request addressed to the port number assigned to the first IP device of the relay device. The main feature is that transmission is performed using a different session and a connection response corresponding to the connection request is received from the first IP device .

According to the management server and the communication confirmation method of the present invention, it is possible to perform automatic setting when an IP device is installed in a network and to automatically confirm connection with a wide area network.

In order to solve the above-described problem, the first aspect of the present invention transfers a packet transmitted to a predetermined port number of a repeater to a first IP device connected to the repeater based on the predetermined port number. A management server that can be connected to a first IP device via a repeater having a port forwarding function and can be connected to a second IP device capable of transmitting packets to a predetermined port number of the repeater. Then, before the second IP device performs data communication with the first IP device, the management server uses the port number assigned to the first IP device to pass through the first IP device and the relay device. A control unit for confirming whether or not data communication is possible; the control unit receives a connection check request including information of a port number assigned to the first IP device from the first IP device; To check request Then, a connection request for requesting confirmation whether the management server can perform data communication with the first IP device via the relay device is sent to the port number assigned to the first IP device of the relay device. A management server that transmits a connection response corresponding to the connection request from the first IP device by using a session different from the connection check request, and automatically sets the IP address and port number when the IP device is installed on the network. In addition, the connection confirmation with the wide area network can be performed automatically and easily.

The second aspect of the present invention is a management server that transmits a connection check response corresponding to a connection check request to the first IP device .

  A network camera, a management server on the Internet, and a router in Embodiment 1 of the present invention will be described. FIG. 1 is a configuration diagram of a network system for accessing a network camera under a router in the first embodiment of the present invention, FIG. 2 is a configuration diagram of the network camera in the first embodiment of the present invention, and FIG. 3 is a first embodiment in the present invention. FIG. 4 is a configuration diagram of a management table of the management server according to the first embodiment of the present invention, FIG. 5 is a configuration diagram of a router according to the first embodiment of the present invention, and FIG. 6 is a configuration diagram according to the first embodiment of the present invention. It is explanatory drawing of the sequence between a network camera, a management server, and a terminal, and an image request | requirement.

  In FIG. 1, 1 is the Internet (the wide area network of the present invention), 2 has a WAN (Wide Area Network) interface that can be connected to the Internet 1, and has a plurality of ports on the LAN side for each subordinate IP device. Routers equipped with a UPnP function for routing, especially dynamically setting port forwarding according to the UPnP standard (relay apparatus of the present invention), 3a, 3b, and 3c are networks equipped with a DHCP and UPnP function capable of distributing images using the protocol TCP / IP It is a camera (IP device of the present invention). In the first embodiment, the network cameras 3a, 3b, and 3c are described as IP devices. However, it is a matter of course that other devices may be used as long as they are computer devices equipped with DHCP and UPnP functions that can communicate with the protocol TCP / IP. .

4 is a terminal that can connect to the Internet 1 to access the network cameras 3a, 3b, and 3c, 5 is a computer device that is connected to the LAN and assists network settings of the network cameras 3a, 3b, and 3c, and 6 is a network camera 3a. , 3b, 3c are assigned and registered with domain names and accessed with domain names, network cameras 3a, 3b,
This is a management server equipped with a DDNS (Dynamic DNS) function that responds to a global IP address 3c (hereinafter, WAN side IP address). It should be noted that the router 1 of the first embodiment has a DHCP (assigning an IP address to IP devices in the LAN, that is, the network cameras 3a, 3b, 3c, and the computer device 5 from a predetermined local IP address (hereinafter referred to as IP address). Dynamic Host Configuration Protocol) server function is installed.

  Therefore, a series of sequences for automatic setting and connection check, image confirmation, and normal image browsing operations performed between the network cameras 3a, 3b, and 3c and the router 2, the management server 6, and the terminal 4 of the first embodiment. Will be explained. Of these, (B) the Internet connection check sequence will be described later. FIG. 6 shows a sequence between the network camera, the management server, and the terminal. As shown in FIG. 6, sq1 to sq4 are (A) a setting sequence, and a sequence of sq5 to sq9 performed thereafter is (B) an Internet connection check sequence. Further, sq10 to sq11 are (C) confirmation sequence, sq12 is (D) domain name setting sequence, and sq13 to sq15 are (E) image browsing sequence. Note that sq00 is (F) an update sequence.

  First, the setting sequence (A) shown in FIG. 6 is first executed. When the network cameras 3a, 3b, and 3c are connected to the LAN or powered on, each network camera 3a, 3b, and 3c requests an IP address from the router 2, and the router 2 assigns an IP address (sq1). Each network camera 3a, 3b, 3c transmits a network setting notification to the computer device 5 (sq2). The computer device 5 confirms the user's intention to connect to the Internet, and sets an access ID and a password in the network cameras 3a, 3b, 3c (sq3). Next, the network cameras 3a, 3b, and 3c request the router 2 to assign ports by the UPnP function. This request includes the MAC address, IP address, and port number of the network camera 3, and the router 2 sets the port number together with the MAC address and IP address in a port forwarding table 34a described later (sq4).

  Next, (B) an Internet connection check sequence is performed. When the network connection check request is transmitted from the network cameras 3a, 3b, and 3c to the management server 6 together with the URL information for the access check (sq5), the management server 6 that has received the request checks the access of the network cameras 3a, 3b, and 3c. An HTTP request is transmitted to the URL in a session different from sq5 (sq6). The router 2 routes this HTTP request to the network cameras 3a, 3b, 3c designated according to the setting of the port forwarding table 34a. In response to this HTTP request, the network cameras 3a, 3b, and 3c transmit an HTTP response including an OK response of the status code 200 (hereinafter referred to as 200OK) and MAC address information as a response of the session of sq6 (sq7). . If the setting of the port forwarding table 34a in the router 2 is not correctly performed, this HTTP request is not sent from the router 2 to the designated network cameras 3a, 3b, 3c, and there is no response. The router 2 that has received 200 OK transmits an Internet connection check result response to the network cameras 3a, 3b, 3c (sq8).

The Internet connection check result response notifies each response information. (A) Information with a positive response indicating connection success, (b) Information with a negative response indicating connection failure, (c) Connection failure Information with no response indicating success is notified. The network cameras 3a, 3b, and 3c transmit a registration message (signal) for confirming the set MAC address, IP address, and port number when the response includes information with a positive response (sq9). ). On the other hand, if a negative response is received or if there is no response, an Internet connection check result response is sent to the network cameras 3a, 3b, 3c only to notify information with a negative response and information with no response. By notifying this fact, the router 2 is prompted to connect to the Internet 1 again, or the port forward setting is manually prompted.

  When the connection of (B) is successful, the (C) confirmation sequence is performed. When the URL storing the confirmation screen page information of the management server 6 is accessed from the terminal 4 (sq10), the confirmation screen page information described in HTML or the like is read and transmitted (sq11). The URL accessed at this time includes a file name indicating confirmation screen page information, and a file name obtained by encrypting the MAC address is used as the file name. The management server 6 decodes the encrypted MAC address, and reads the IP address and port number of the network camera from this MAC address. Further, the management server 6 generates confirmation screen page information linked to the directory of the images so as to read the sample images stored in the network cameras 3a, 3b, and 3c, and transmits the confirmation screen page information to the terminal 4. The terminal 4 browses this sample image by displaying a confirmation screen page. When the confirmation sequence is performed for several days, the network cameras 3a, 3b, and 3c can be used to capture images and update the sample images.

  The encrypted MAC address described above is preferably described in a document attached by the manufacturer to the network cameras 3a, 3b, and 3c together with the URL, and packed and sold. It can be shared with an ID number of an access ID 42 described later. For example, when accessing the MAC address “00223344D732” with the encrypted file name “FFFF35178913” and the URL “http://camera.c.net/FFFF35178913/”, the management server 6 sets “FFFF35178913” to MAC. It is possible to decode the address “00223344D732” and read out the corresponding IP address and port number in the network cameras 3a, 3b, 3c. Here, the URL “http://camera.c.net” is determined in common, and the user to be used accesses the management server 6 by attaching an encrypted file name “FFFF35178913” unique to the network camera. Can identify the network cameras 3a, 3b, 3c.

  In addition, (D) a domain name setting sequence can also be performed. The management server 6 assigns / registers domain names to the network cameras 3a, 3b, 3c, and the domain names are notified to the computer device 5 from the network cameras 3a, 3b, 3c. The management server 6 registers each MAC address and IP address in association with this domain name. The domain name registered in the terminal 4 is transmitted from the computer device 5 (sq12). In sq12, other procedures can be performed simultaneously. This registration makes it possible to execute the DDNS function in the management server 6. Therefore, the subsequent (C) confirmation sequence can be executed with the domain name.

  If an access is made using a domain name in this state, (E) an image browsing sequence can be executed. That is, when accessing from the terminal 4 with the domain name (sq13), the management server 6 transmits the URL described by the WAN side IP address and the WAN side port number of the network cameras 3a, 3b, 3c (sq14). When the network camera 3a, 3b, 3c is accessed with the URL, the image is distributed (sq15).

  In the update sequence (F), after the registration message is transmitted in sq9, the network cameras 3a, 3b, and 3c periodically update the WAN side IP address and the WAN side port number. The update contents are notified to the management server 6 at a predetermined time interval together with the MAC address (sq00).

Accordingly, the internal configuration of the network cameras 3a, 3b, and 3c that execute the above sequence, the management server 6, and the internal configuration of the router 2 that performs port forward setting will be described with reference to FIGS. 2, 3, and 5. FIG. First, the network cameras 3a, 3b, 3c will be described. In FIG. 2, 11 has an interface conforming to the IEEE 802.3 standard, and transmits a request from a communication means such as a browser of the terminal 4 transmitted via the router 2 to the network cameras 3a, 3b, 3c. Display information (hereinafter, page information) described in a markup language such as HTML is transmitted to the Internet 1 via the router 2 in order to display web pages from 3a, 3b, 3c. Reference numeral 12 denotes a camera unit, and 13 denotes an image data generation unit that processes a video signal from a CCD or CMOS image sensor provided in the camera unit 12 and compresses it into a compression format such as JPEG format or MPEG format.

  14 is a storage unit for storing control programs and various data, 14a is an HTML storage unit for storing page information in which display instructions and link information are described by HTML, etc., and 14b is compressed by the image data generation unit 13. An image storage unit 14c for storing image data is an address information storage unit for storing assigned port information, MAC address, IP address, management server 6 address, and the like.

  Reference numeral 15 denotes a web server unit that communicates with the Internet 1 using the protocol TCP / IP. Reference numeral 16 denotes page information to the communication unit when the communication unit of the terminal 4 accesses the web server unit 15. Is generated from the storage unit 14, further generates page information, and transmits it from the web server unit 15. In the first embodiment, in the Internet connection check sequence in (B), an HTTP request is transmitted from the management server 6, but the HTML generation unit 16 reads out the page information of the access destination and describes the MAC address. An HTTP response is generated and transmitted from the web server unit 15.

  Reference numeral 17 denotes a control unit, which is configured as a function realizing unit that reads a control program into a central processing unit (CPU) and performs each function. Reference numeral 17a denotes port management means for executing the UPnP function and managing port information, and reference numeral 17b denotes DHCP management means for transmitting a DHCP discovery packet and receiving an IP address assignment from a DHCP server or the like. The DHCP management unit 17b and the port management unit 17a request the router 2 equipped with the DHCP function and the UPnP function to assign an IP address and a port number, and when assigned, register them in the address information storage unit 14c. Note that the DHCP server is not necessarily installed in the router 2 and may be arranged in a LAN that can receive the DHCP discovery packet transmitted from the DHCP management unit 17b. Thereafter, when the Internet connection check is performed and the connection is successful, the control unit 17 notifies the management server 6 of the MAC address, the IP address, and the port number by the web server unit 15, and further periodically updates the registered content. To do.

  Reference numeral 18 denotes a drive unit such as a motor that performs operations such as panning and tilting of the camera unit 12, and 19 denotes a camera control unit that drives the drive unit 18 and controls the camera unit. The control unit 17 processes a request from the communication unit and operates the HTML generation unit 16 to generate page information, retrieves image data to be transmitted to the communication unit from the storage unit, and further sends a request to the camera control unit 18. The operation is performed by designating an imaging mode.

Next, the internal configuration of the management server 6 will be described based on FIG. In FIG. 3, 21 is a network interface with the Internet 1, 22 is a web communication unit that communicates with the Internet 1 using the protocol TCP / IP, and 23 is a control unit. The control unit 23 is also configured as the above-described function realization means. 23a is a timer (time measuring means of the present invention) for determining that there is no response when a timeout occurs when performing an Internet connection check. If the Internet connection is successful, it can be determined that the connection is successful by receiving an HTTP response of 200 OK, and the HTTP response is received in the case of a negative response. Since it cannot be determined, it is determined that there is no response with a timeout and that the connection is unsuccessful. 24, when there is an access from the communication means of the terminal 4, the page information composed of HTML or the like is extracted from the storage unit 14 for the communication means, and further, the page information is generated and transmitted from the web communication unit 22 It is an HTML generation unit.

  Reference numeral 25 denotes a storage unit for storing control programs and various data. Reference numeral 25a denotes an HTML storage unit for storing a plurality of page information for authentication and network camera access described in HTML, and 25b denotes a network camera 3a. 3b and 3c are management table storage units for storing management tables such as port numbers, MAC addresses, IP addresses, access IDs, passwords, network camera domain names, and the like to which 3b and 3c are assigned. The management table storage unit 25b also stores the WAN-side IP address of the router 2.

  Reference numeral 26 denotes a DDNS function unit that extracts address information (MAC address, IP address, port number, WAN side IP address of the router 2) from the management table and notifies the URL when an inquiry is made from the terminal 4 with the domain name and port number. It is.

  An example of this management table is shown in FIG. 41 is a MAC address such as “00: 22: 33: 44: D7: 32”, 42 is an access ID, and 43 is a password. When a user purchases a product, the manufacturer writes an ID number such as “35178913” in the document attached by the manufacturer, and the user who authenticates with this ID number allows access, and sets a default password at the time of shipment. In addition, after the authentication is successful, it is changed on the user side such as “3zD45E”. Data for authentication is input from the computer device 5 (see sq3 shown in FIG. 6).

  44 is the WAN port number assigned by the UPnP router 2, 45 is the IP address of the network cameras 3a, 3b and 3c, 46 is the LAN port number, 47 is the WAN side IP address of the router 2, and 48 is the domain name. is there. Note that the MAC address 41, IP address, and port number are periodically updated from the network cameras 3a, 3b, and 3c at intervals of about 10 minutes to update the data. In order to simplify the management, the WAN side port number and the LAN side port number may be operated in the same manner.

  Next, the internal configuration of the router 2 will be described with reference to FIG. In FIG. 5, 31 is a LAN interface provided with a port on the LAN side, and 32 is a WAN interface provided with a port on the Internet 1 side. Reference numeral 33 denotes a control unit, which is configured as the above-described function realization means. 33a is a DHCP function means for assigning an IP address in response to an IP address request from a client, 33b is a UPnP function means for dynamically assigning a port number for port forwarding in accordance with the UPnP standard, and 33c is for communication by TCP / IP. It is a web server part. Reference numeral 34 denotes storage means, 34a denotes a port forwarding table provided in the storage means 34, and 35 denotes display means for displaying on an LCD or the like.

  Since the router 2 has such a configuration, when the network cameras 3a, 3b, and 3c are connected to the LAN interface 31 or powered on, the DHCP management unit 17b of each network camera transmits a packet requesting an IP address. Upon receiving this, the DHCP function means 33a assigns an IP address to the network camera network camera 3a, 3b, 3c that has transmitted the packet, and registers it in the port forwarding table 34a.

When the IP address setting is completed, each network camera requests the UPnP function means 33b to assign a port by the UPnP function, and the router 2 registers the assignable port number in the port forwarding table 34a and finishes the router setting. . For example, when “8080” is assigned, the port 2 forward function of the router 2 uses the WAN side IP address “60.1.2.3” of the router 2 and the WAN side port number “8080” to “http: // 60.1.2.3:8080/ "to access the network camera 3a. If the domain name is registered in the address information storage unit 14c of the management server 6 with respect to this port number, the domain number can be accessed.

  Since the domain name is not registered during the Internet connection check sequence, the control unit 17 of the network camera 3a uses the WAN side IP address “60.1.2.2” of the management server 6 and a predetermined number for this service. An Internet connection check request packet is transmitted to the management server 6 using the HTTP port number “60001”. On the other hand, in the normal image browsing sequence for requesting image distribution, the terminal 4 of the Internet 1 uses, for example, the domain name “camera001” and the HTTP port number “8080”, and the URL “http: //camera001.c”. When accessing with “.net /”, the management server 6 refers to the management table by the DDNS function unit 26 and converts it to “http://60.1.2.3:8080/”, and notifies the terminal 4 of it. The terminal 4 accesses the router 2 using this WAN side IP address, and the router 2 converts it to “http://192.168.0.2:8080/”, forwards the port, and arrives at the network camera 3a.

  Therefore, the (B) Internet connection check sequence of the first embodiment will be described in more detail. FIG. 7 is a detailed sequence chart of the Internet connection check according to the first embodiment of the present invention. sq5 to sq8 are the sequence numbers shown in FIG. 6, and will be described using the same numbers in FIG.

  As shown in FIG. 7, when the network camera 3a is connected to the router 2, the control unit 17 of the network camera 3a makes an Internet connection check request with the protocol HTTP in “sq5”. The IP address of the network camera 3a is “192.168.0.2” and the LAN side port number is “8080”, and the WAN side IP address of the management server 6 is “60.1.2.2” and the HTTP port number is “60001”. The WAN-side IP address of the router 2 is “60.1.2.3”. Therefore, as an Internet connection check request, the network camera 3a composes a TCP packet with, for example, the destination IP address “60.1.2.2:60001” and the source IP address “192.168.0.2:8080”, and can authenticate at the same time. The MAC address 41 for indicating the connection is stored in the data area and transmitted. The router 2 uses the port forwarding table 34a to convert the IP address into the WAN-side IP address, and transmits the IP packet having the destination IP address “60.1.2.2:60001” and the source IP address “60.1.2.3:8080”.

  On the other hand, in the management server 6, the control unit 23 retrieves the source WAN-side IP address, port number, and MAC address 41, stores them in the management table storage unit 25b, and uses the method GET in “sq6” to perform the network camera 3a. An HTTP request for accessing the URL “Access Check.html” is transmitted. The HTTP request is transmitted with the destination IP address “60.1.2.3:8080” and the source IP address “60.1.2.2:60001”, and in the router 2, the destination IP address “192.168.0.2:8080” and the source IP address “60.1” ".2.2: 60001" and arrives at the network camera 3a.

  When the IP address setting and the port forward setting are appropriately performed, the management server 6 uses the file for checking the access of the network camera 3a (dedicated file of the present invention, “Access Check.html” in FIG. 7). File name) can be correctly accessed, and in “sq7”, the network camera 3a notifies the management server 6 of 200 OK and the MAC address as an HTTP response. In other cases, it generally means that there is a problem with the port forward setting.

In order to determine that there is no HTTP response (no response), the management server 6 counts the time since the HTTP request was transmitted by the timer 23a, and if the setting is made properly, the management server 6 receives the call within the time. The control unit 23 extracts the MAC address from the HTTP response. The MAC address is compared with the MAC address transmitted in the Internet connection check request and stored in the management table storage unit 25b. If they match, the control unit 23 determines that the Internet connection is successful, and the HTML The generation unit 24 creates information with a positive response indicating a successful connection. When the MAC address is not notified or does not match, the HTML generation unit 24 creates information with a negative response indicating that the connection is unsuccessful, assuming that a negative response is notified instead of 200 OK. In addition, when there is no response itself, the timer 23a times out. Accordingly, the HTML generation unit 24 creates information indicating no connection indicating unsuccessful connection as no HTTP response.

  In “sq8”, as an Internet connection check result response, the web communication unit 22 transmits a packet containing information with a positive response, information with a negative response, and information without a response. If successful, a registration message for confirming registration of the MAC address, IP address, and port number set from the network camera 3a is transmitted as shown by "sq9" in FIG. In the above description, the MAC address is notified to check whether or not the MAC addresses match. However, this confirmation process may be omitted.

  2 is a flowchart of a series of operations for automatic setting, connection check, confirmation, and normal image browsing performed between the network camera, the management server, and the terminal according to the first embodiment of the present invention. FIG. 8 is a flowchart executed between the network camera, the management server, and the terminal according to the first embodiment of the present invention.

  In FIG. 8, when the network camera 3a is connected to the LAN or turned on, the DHCP management means 17b of each network camera 3a requests an IP address from the DHCP function means 33a of the router 2, and the DHCP function means 33a assigns an IP address. The IP address is set (step 1). Next, the network camera 3a requests port allocation to the UPnP function unit 33b of the router 2 by the port management unit 17a, and performs port forward setting (step 2).

  The control unit 17 of the network camera 3a transmits an Internet connection check request, and also transmits a MAC address, an IP address, and a port number to the management server 6 (step 3). Upon receiving this, the control unit 23 of the management server 6 checks whether there is a problem such as the absence of the destination IP address or port number, and confirms whether an HTTP request can be transmitted to the network camera 3a (step 4). When an HTTP request can be transmitted in step 4, it is determined whether or not an HTTP response can be transmitted in the control unit 17 of the network camera 3a (step 5). When the HTTP request cannot be made at step 4, the process proceeds to step 8. When the HTTP response is notified at step 5, the control unit 23 of the management server 6 extracts the MAC address notified by the HTTP response, compares it with the MAC address transmitted at step 3, and determines whether they match (step 6). . When there is no HTTP response at step 5 (when there is no response), when the MAC address does not match at step 6 (when a negative response is notified), the process proceeds to step 8.

  If the MAC addresses match at step 6, the control unit 23 determines that the Internet connection is successful (step 7). If the MAC addresses do not match, the control unit 23 determines that the Internet connection is unsuccessful (step 8). The control unit 23 of the management server 6 stores the information with the positive response, the information with the negative response, and the information with no response in steps 7 and 8 in a packet and sends the Internet connection check result response from the web communication unit 22 to the network camera. It transmits to 3a (step 9).

  At step 9, in the network camera 3a, the control unit 17 checks whether or not there is a notification containing information with an affirmative response indicating the connection success determination result (step 10). When determining that the setting is completed, the control unit 17 transmits a registration message to confirm the MAC address, IP address, and port number (step 11). In step 10, if it is not notification of information with a positive response, it is confirmed whether or not information with a negative response is notified (step 12). In this step 12, if information with a negative response is notified, it is determined that automatic setting is unsuccessful, port forward setting or the like is performed manually (step 13), and the process returns to step 3. In step 12, when information with a negative response is not notified, that is, when information with no response is notified, it is determined that automatic setting is unsuccessful, and the process returns to step 1, and the user again connects the network camera 3a to the router 2 Or the connection to the Internet 1 of the router 2 is confirmed, and the process is repeated from turning on the power. Note that it is preferable to notify the user of the result of the end of automatic setting or the failure by notifying means (not shown) such as a speaker or an LCD.

  After registering the MAC address, IP address, and port number in step 11, the terminal 4 performs a confirmation sequence for receiving a confirmation image (step 14). Next, the DDNS function unit 26 of the management server 6 associates the domain name “camera001” with the MAC address, IP address, and port number so that it can be accessed from the terminal 4 of the Internet 1 with the domain name “camera001”. 25b is registered (step 15). Thereafter, when the terminal 4 requests an image from the network camera 3a with the domain name “camera001” and the MAC address (step 16), the management server 6 converts the image into an IP address, and the network camera 3a that receives the image distributes the image (step 17). .

  As described above, the network camera and the management server according to the first embodiment of the present invention automatically perform IP address setting and port forward setting, and also automatically perform Internet connection check. A network camera can be installed.

The present invention automatically executes an IP device capable of performing automatic setting when installed in a network and automatically confirming connection with a wide area network, and automatically confirming connection between the IP device and the wide area network. The present invention can be applied to a management server that can view a confirmation screen and a communication confirmation method.

1 is a configuration diagram of a network system for accessing a network camera under a router in Embodiment 1 of the present invention. 1 is a configuration diagram of a network camera in Embodiment 1 of the present invention. Configuration diagram of the management server in Embodiment 1 of the present invention Configuration diagram of the management table of the management server in Embodiment 1 of the present invention Configuration diagram of router in embodiment 1 of the present invention Explanatory drawing of the sequence of the network camera in the Example 1 of this invention, a management server, the setting between a terminal, and an image request | requirement Detailed sequence chart of internet connection check in embodiment 1 of the present invention A flowchart performed between the network camera, the management server, and the terminal according to the first embodiment of the present invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Internet 2 Router 3a, 3b, 3c Network camera 4 Terminal 5 Computer apparatus 6 Management server 11, 21 Network interface 12 Camera part 13 Image data generation part 14, 25 Storage part 14a, 25a HTML storage part 14b Image storage part 14c Address information Storage unit 15 Web server unit 16, 24 HTML generation unit 17, 23, 33 Control unit 17a Port management unit 17b DHCP management unit 18 Drive unit 19 Camera control unit 22 Web communication unit 23a Timer 25b Management table storage unit 26 DDNS function unit 41 MAC address 42 ID for access
43 Password 44 WAN side port number 45 IP address 46 LAN side port number 47 WAN side IP address 48 Domain name 31 LAN interface 32 WAN interface 33a DHCP function means 33b UPnP function means 33c Web server part 34 Storage means 34a Port forwarding table 35 Display means

Claims (4)

Via the repeater having a port forward function for transferring a packet transmitted to a predetermined port number of the repeater to a first IP device connected to the repeater based on the predetermined port number, A management server that is connectable to a first IP device and is connectable to a second IP device capable of transmitting packets to the predetermined port number of the repeater;
Before the second IP device performs data communication with the first IP device, the management server uses the port number assigned to the first IP device to connect the first IP device and the repeater. A control unit for confirming in advance whether or not data communication can be performed,
The controller is
Receiving a connection check request including information of a port number assigned to the first IP device from the first IP device;
In response to the connection check request, the management server sends a connection request requesting confirmation of whether or not data communication can be performed with the first IP device via the repeater. Send to the port number assigned to the IP device using a session different from the connection check request,
Receiving a connection response corresponding to the connection request from the first IP device;
A management server characterized by that. The management server according to claim 1, wherein a connection check response corresponding to the connection check request is transmitted to the first IP device . Via the repeater having a port forward function for transferring a packet transmitted to a predetermined port number of the repeater to a first IP device connected to the repeater based on the predetermined port number, A management server that can be connected to a first IP device and can be connected to a second IP device capable of transmitting packets to the predetermined port number of the repeater, and wherein the second IP device is the first IP device. Whether the management server can perform data communication with the first IP device and the repeater using the port number assigned to the first IP device before performing data communication with the first IP device. Is a communication confirmation method for confirming in advance,
Receiving a connection check request including information of a port number assigned to the first IP device from the first IP device;
In response to the connection check request, the management server sends a connection request for requesting confirmation of whether or not data communication can be performed with the first IP device via the repeater. Send to the port number assigned to the IP device using a session different from the connection check request,
The communication confirmation method, wherein the management server receives a connection response corresponding to the connection request from the first IP device . 4. The communication confirmation method according to claim 3 , wherein a connection check response corresponding to the connection check request is transmitted to the first IP device .

Images