友、發明說明（l) 【發明之應用領域 本發明係關於一種用戶實體位置 待別是-種透過區域網路，帛以識別用戶，系統與方法’ 體位置的系統與方法^ 戶^電腦所在之實 【發明背景】 由於電腦科技的進步，資料傳輪的 相當倚賴電腦作為資料的傳輸與存取的=，,們幾乎已 =率的提高’電腦犯罪與網路犯罪 =著電腦使 了防止這些犯罪广& μ +也逐漸增加，為 〜 仃為的擴大，與個人甚至企 ”郵件於網路上所發送的 二、、、罔=t非的情況產生，即使真的有網路犯罪發生，受害 2的電腦即可透過此網路追蹤技術，尋找到另一端的犯罪 電腦所在位置，進而抓到該犯罪者。 但是儘管如此，此項先前技藝能有其缺陷地方，即是 此先前技藝的追蹤技術，主要都是基於網際網路協定（丨P ) 地址與W i nNT的用戶認證系統下的技術，而且主要是應用 在網際網路的環境底下，實際上此做法能追蹤到該電腦的 、’、罔際網路協定（I p )地址，或該電腦所存在的伺服器網際網 路協定（I P)地址，但是卻不能真正於最快的時間内尋找到 該電腦的實體位置；加上這種技術主要是應用在視窗作業 軟體（W 1 ndowS )底下的技術，若犯罪者使用的是磁碟作業 系統（DOS)下的網際網路指令（NET)上網，甚至是Linux (UN I X)作業系統的模式上網，這些作業系統均不是採用網Friends, description of the invention (l) [Application field of the invention The present invention relates to a user entity location to be different-a system, method and method for identifying users, systems and methods through a local area network '. Reality [Background of the Invention] Due to the advancement of computer technology, data transmission relies heavily on computers for the transmission and access of data =, they have almost = the increase in the rate of 'computer crime and cybercrime = computer has prevented These crimes have gradually increased, as the expansion of ~ 〜 has been caused by the situation where individuals, even businesses, send e-mails on the Internet, even if there is a real crime. , The victim 2's computer can use this network tracking technology to find the location of the criminal computer on the other end, and then catch the perpetrator. However, this prior art can have its flaws, which is this prior art The tracking technology is mainly based on the Internet Protocol (丨 P) address and Wi nNT user authentication system technology, and is mainly applied in the Internet environment In fact, this method can track the computer's Internet Protocol (IP) address, or the server's Internet Protocol (IP) address, but it can't really be the fastest time. To find the physical location of the computer; plus this technology is mainly applied under the Windows operating software (W 1 ndowS), if the criminal uses the Internet command under the disk operating system (DOS) ( NET), or even the Linux (UN IX) operating system, these operating systems do not use the Internet
586285 五、發明說明（2) 際網^協定（IP)地址或WinNT的用戶認證系統的技術，如 此一來不僅無法辨識出該犯罪者的電腦身分，同時更不可 能查出該電腦存在的實體位置了。 但疋我們知道，每部電腦皆有其特定的媒體存取控制 (MAC )位址碼，透過此媒體存取控制（MAC )位址碼的識別， 我們可以清楚的分辨每一部電腦，而且不管是普遍使用 網際網路協定（丨P )地址或w i nNT的用戶認證系統，或是磁 碟作業糸統（DOS )下的網際網路指令（NET )上網模式，甚至 是Linux (UNIX)作業系統，它們皆有各自的檔案封包模 =，而在這些封包資料裡，也都一定存在著此媒體存取 (MAC)位址碼，因此若能夠藉由該媒體存取控 址碼尋找到該電腦資料所流通的支持簡單網路管理= =的網路連接器號碼與連接蜂(P。⑴心 〜“ ：ΐ持簡單網路管理協定(SNMP)的網路連接器實 罪者的電腦所在實二i t"—楚而且迅速的找到該犯 【發明之目的亚且進而逮捕到該犯罪者。 種用知技術的問題，本發明的目的在於提供-葬:二二Γ 識別的系統與方法，應用於區域網路中'， 二料將用戶的媒體存取控制（mac)位址碼，傳 她管理協定二持簡 照，的所在實體位置… 、不、、先至少包含一個封包接收模組、一個搜尋586285 V. Description of the invention (2) Internet Protocol (IP) address or WinNT user authentication system technology, so that not only cannot identify the criminal's computer identity, but also it is impossible to detect the entity where the computer exists Location. But we know that each computer has its own specific MAC address code. Through the identification of this MAC address code, we can clearly distinguish each computer, and Whether it is a user authentication system that commonly uses Internet Protocol (IP) addresses or WinNT, or the Internet Command (NET) mode under the disk operating system (DOS), or even Linux (UNIX) operations System, they all have their own file packet mode =, and in these packet data, this media access (MAC) address code must exist, so if you can find the media access control address by the media access control code Computer data flow supports simple network management = = network connector number and connection bee (P. Heart ~ ": host computer of the actual connector of the network connector supporting Simple Network Management Protocol (SNMP) Real two i t "-Chu and quickly found the offender [the purpose of the invention and then arrested the perpetrator. This kind of problem with knowledge technology, the purpose of the present invention is to provide-burial: two two Γ identification system and method For local area networks' The two materials user's media access control (mac) address code, she passed two holding profile according to management protocol, where the physical location ..., ,, does not comprise at least one first packet receiving module, a search
第5頁 五、發明說明（3) 擷取模組及—個資料庫，夂 一 ^ ^ ^ (―)封包接收模組，^二料庫的功能如下： 貧料； 妾收用戶端電腦傳送之封包 (一）貧料庫，用以儲存支 的網路連接器實體位置 ·、严日早網路管理協定(SNMp) •(-)搜尋擁取模組，與;丄 連;*二用以擷取封包資料中之：：拉組及該資料庫相 亚搜哥支持簡單網路管理某肢存取控制（MAC)位址， 置對；J太…該用戶：：：實好體：：路^ ,一關本發明的特徵與實作，# 置。 坪細說明如下·· 、，炫配合圖示作最佳實施例 【考X明之詳細說明】 路t ’ ίK:的系統與方法’應用於區域'網 。，傳送給遠端的飼服m㈣體存取控制（嶋位 存取控制（MAC)位址^乍4別，該伺服器再藉由該媒 理協定（SNMP)的網路連接^用戶連接的支持簡單網路管 用該支持簡單網路管 =及連接璋（Port)號碼，接著利 (P〇rt)號碼與伺服器=二SNMP)的網路連接器及連接埠 (SNMP)的網路連接:命雕子的支持簡單網路管理協定 戶的所在實體位置的^ 置對照表相對照，以找出該用 /首先以第1圖本發'月之14方二。 尸端電腦間的連結加 用戶貫體位置識別的系統與用 端電腦之間的連結二γ :二士說明整個系統的架構與用戶 0 # ^、。在第1圖中我們可以看到一個用 ^6285 五 發明說明（4) 戶端的電腦η。藉由支持簡單網 —~~ 連接器120及區域網路環境1〇〇的連处協定（SNMP)的網路 13(3相連結’其中該伺服主額〇更端”服主機 組140、一個搜尋擷取模組15〇及：個封包接收模 、，其中該封包接收模組140，負責们二料庫16〇。 廷之封包資料；資料庫1 6 0，負責儲存用《端電腦11 〇傳 協定（SNMP)的網路連接器實體位置對照持·簡單^網路管理 15 〇，與該封包接收模組及該資料庫相搜呼擷取模組 包資料中之媒體存取控制（MAC)位址，=二二?以掏取封 路管理協定（SNMP)的網路連接器實體位f炉支持簡單網 該用戶端電腦實體位置。上述之該 ^ :以，出 網路（IP)協定包、一網際網路交換（收/協定包；T網網路際 基本輸出入強化（NetBEUI )協定包中任選其中一種·二亥 持簡單網路管理協定（SNMP)的網路連接器實體位置^照支表 至少包含一支持簡單網路管理協定（S Ν Μ P )的網路連接器號 碼、一連接埠（Ρ 〇 r t)號碼及一實體位置資料。 本發明的識別系統與方法主要是應用前置啟動執行環 境(Preboot Execution Environment ； Ρ X E ) W ，以進；^于 整個識別與定位的動作；其中該前置啟動執行環境 (Preboot Execution Environment ;PXE)技術，係指當用 戶端的電腦啟動後，其網路卡上啟動（Boo t)系統内的可讀 取記憶體（Rom )，會先送出一個查找（F I ND )封包資料，在 伺服（s e r v e r )端的伺服器啟動後，該祠服器即可收到來自 用戶端傳送之查找（F I N D )封包資料’此時伺服（s e r v e r )端Page 5 V. Description of the invention (3) Retrieval module and a database, 夂 ^ ^ ^ (―) Packet receiving module, ^ The functions of the two databases are as follows: lean materials; 妾 receive the client computer to send Package (1) Poor material storehouse, used to store the physical location of the network connector. · Strictly Early Network Management Protocol (SNMp) • (-) Search for the capture module, and; In order to retrieve the packet data :: The pull group and the database Xiangya Soge support simple network management of certain limb access control (MAC) addresses, and set them right; J too ... The user ::: Real body: : Lu ^, a feature and implementation of the present invention, # 置. The detailed description is as follows: ·, and the diagram is shown as the best embodiment. [Explain the detailed description of XM] The system and method of road t ': ί: applied to the area' network. Send to the remote feeding access control system (bit access control (MAC) address ^ 1), the server then uses the SNMP network connection ^ user connection Support simple network management. Use this to support simple network management = and connect 璋 (Port) number, followed by (Port) number and server = two SNMP) network connector and port (SNMP) network connection : Ming Diaozi supports a simple network management protocol where the physical location of the user's physical location is compared with the comparison table to find out which one is used / first published in Figure 1 of this article. The link between the corpse computer and the connection between the system for identifying the user's body position and the user computer γ: The two explain the structure of the entire system and the user. 0 # ^ ,. In Figure 1, we can see a computer using the ^ 6285 five invention (4) client computer η. By supporting Simple Network— ~~ Connector 120 and Local Area Network Environment 100 (SNMP) network 13 (3 connections 'where the servo principal 0 is more endless') serving host group 140, one Search and retrieve modules 15 and: a packet receiving module, of which the packet receiving module 140 is responsible for the second database of 160. Ting's packet data; database 1 60, responsible for storing "end computer 11 〇" The physical location of the network connector of the communication protocol (SNMP) is relatively simple. ^ Network management 15 〇, and the packet receiving module and the database to search and retrieve the media access control (MAC) in the module package data. ) Address, = 22? In order to extract the network connector entity position of the SNMP, the furnace supports the network location of the client computer entity in the simple network. The above mentioned: ^, out of the network (IP) Any one of the protocol package, an Internet exchange (receive / protocol package; T network basic input / output enhancement (NetBEUI) protocol package) · Erhail Simple Network Management Protocol (SNMP) network connector The physical location list includes at least one network that supports the Simple Network Management Protocol (SNMP). A connector number, a port number and a physical location data. The identification system and method of the present invention mainly apply a Preboot Execution Environment (P XE) W to advance; ^ throughout Recognition and positioning action; the Preboot Execution Environment (PXE) technology refers to the readable memory in the boot system (Bot) on the network card after the client computer is started. Rom), will first send out a lookup (FI ND) packet data. After the server on the server (server) is started, the server can receive the lookup (FIND) packet data sent from the client. server)
586285 五 、發明說明（5) 3飼服器再根據查找（HND)封包資料中的識別（ID)碼，搜 哥儲存於伺服器内的啟動資料中是否含有該識別（I D)碼^ 配置記錄；如果該識別（I D)碼的配置記錄不存在，則該用 戶端的電腦將無法啟動；如果該識別（丨D )碼的配置記錄存 在’則該伺服（server)端的伺服器會送出一個已查找到 2〇UND)封包資料給用戶端的電腦，並且啟動該用戶端的 電腦’在已查找到（FOUND)封包資料中則含有該伺服 (server)端的伺服器識別（iD)碼。 由於本發明係應用前置啟動執行環境（preb〇〇t586285 V. Description of the invention (5) 3 The feeder according to the identification (ID) code in the search (HND) packet information, whether the search data stored in the server contains the identification (ID) code ^ Configuration record ; If the configuration record of the identification (ID) code does not exist, the client computer will not start; If the configuration record of the identification (丨 D) code exists', the server at the server (server) will send a search To 2UND) packet data to the client computer, and the computer that starts the client 'contains the server identification (iD) code of the server in the found packet data. Because the present invention is a pre-boot execution environment (preb〇〇t
Execution Environment ;PXE)技術執行用戶端的電腦11〇 的識別與管理，因此當用戶端的電腦丨丨〇啟動之後，該用 戶端，，腦110會產生一個查找（FIND)的封包資料，經過 支持簡早網路管理協定（SNMP)的網路連接器丨2 〇及區域網 路環境傳達給另-端的舰主機13Q，該舰主機13〇 的封包接收模組140在收到該查找（FIND)的封包資料後， 該搜尋擷取模組150會先分析該查找（FIND)的封包資料， 並從中擷取一媒體存取控制（MAC)位址，此為該用戶端電 腦110的媒體存取控制（MAC)位址號碼；該搜尋擷取槿电 :存取控弟MAC)位址號碼反向尋找，尋找具有該媒體存 取控制（MAO位址號碼的電腦11〇所連结 ::協定（SNMP)的網路連接器m號碼與支持簡單網路管理 協定(SNMP)的網路連接器12〇上的連 s 在哥找亚取仔该支持簡單網路管理協定(s n m p)的網路Execution Environment (PXE) technology performs identification and management of the client computer 110. Therefore, after the client computer 丨 丨 〇 is started, the client, the brain 110 will generate a lookup (FIND) packet data, after the support is simple and early The network connector of the Network Management Protocol (SNMP) 丨 20 and the LAN environment are transmitted to the other host 13Q, and the packet receiving module 140 of the host 13 receives the FIND packet. After the data, the search and retrieval module 150 first analyzes the packet data of the lookup (FIND), and retrieves a media access control (MAC) address from the packet data, which is the media access control of the client computer 110 ( MAC) address number; this search captures the WLAN: access control MAC) address number to look backwards, looking for the computer with the media access control (MAO address number 11) link :: protocol (SNMP ) The number of the network connector m and the network connector 12 that supports the Simple Network Management Protocol (SNMP) are connected on the network. Look for a network in Brother. The network that supports the Simple Network Management Protocol (snmp)
586285 —丨丨丨' - 五、發明說明（6) — 連接器1 2 0號碼应該連接捨 取模組15〇合彳^資料m(p〇rt)號碼後’此時該搜尋操 _ /科庫6〇中調出該支持簡單網路管理協定 (=_連接器實體位置對照表，並且利用該支持簡 路5ί Ϊ贿去對照該支持簡單網路管理協定（SNMP)的網 所在位i =也位置對如、表以找出該用戶端電腦110的實體 用第2圖本發明之用戶實體位置識別的方法 t績說明本發明方法的具體操作流程圖。當用戶 =腦110後’由用戶端的電腦n〇發送-個查找 伺服主機貝"料j t驟2〇〇) '給遠端的词服主機130 ;接著該 控制（ΜΑΠ ^ ^ —找（FIND)封包資料中擷取一媒體存取 (MA位i Π碼(步驟21〇) ; 1且根㈣某 ^ ^ ^ ^ ^ ^ ^ ^ ,1 (MAC) & Ϊ 埠.的^持間早網路管理協定（SNMp)的網路連接器及連 〇 r )，並擷取該支持簡單網路 ^ ^ ^ #(p〇rt) ^ ^ 根據該支持簡單網路管理協定（SNMp)的網 $統再 :亥連接埠(Port)號碼，搜尋一支持簡單網路及 SNMP)的網路連接器實體對照表（步驟23〇)ei W定 支持簡單網路管理協定（SNMP)的網路 ，—之後根據該 照表找出具有該媒體存取控制（MAC )位址的。^，位置對 所存在的實體位置（步驟2 4 〇 ) ^ 、 端電腦1 1 0 雖然本發明以前述之較佳實施例揭露如上，然其並非 第9頁 586285 五、發明說明（7) 用以限定本發明，任何熟習該項技藝者，在不脫離本發明 之精神和範圍内，當可作些許之更動與潤飾，因此本發明 之專利保護範圍須視本說明書所附之申請專利範圍所界定 者為準。586285 — 丨 丨 丨 '-V. Description of the invention (6) — The connector 1 2 0 number should be connected to the rounding module 15 〇 ^ data m (p〇rt) number' this search operation at this time _ / In Coco 60, the simple network management protocol (= _connector entity location comparison table) is called, and the support profile 5 is used to compare the location of the network supporting the simple network management protocol (SNMP). = Also, the table is used to find the entity of the client computer 110. Figure 2 shows the method of identifying the location of the user entity of the present invention. The performance of the method of the present invention is described in detail. When the user = brain 110 ' The client computer n〇 sends a search server host "quote jt step 2200" 'to the remote gram server 130; then the control (ΜΑΠ ^ ^-find (FIND) packet data to retrieve a media Access (MA bit i Π code (step 21〇); 1 and root ^ ^ ^ ^ ^ ^ ^ ^, 1 (MAC) & port. Network connector and connection 〇), and retrieve the support for simple network ^ ^ ^ # (p〇rt) ^ ^ According to the network support for Simple Network Management Protocol (SNMp) Re: Port number, search for a network connector entity comparison table that supports Simple Network and SNMP) (step 23) ei W will determine the network that supports Simple Network Management Protocol (SNMP),-after Find out who has the MAC address based on the look-up table. ^, Position versus existing physical position (step 2 4 〇) ^, terminal computer 1 1 0 Although the present invention is disclosed as above with the preferred embodiment, it is not page 9 586285 V. Description of the invention (7) To limit the present invention, anyone skilled in the art can make some changes and retouching without departing from the spirit and scope of the present invention. Therefore, the scope of patent protection of the present invention must be determined by the scope of the patent application attached to this specification. Defined shall prevail.
第10頁 586285 圖式簡單說明 第1圖 為本發明 之 用 戶 實 電腦 間的連結架構圖； :及 第2圖 為本發明 之 用 戶 【圖 示符號說明】 100 區 域 網 路 環 110 電 腦 120 支 持 簡 σσ 早 網 接 器 130 伺 服 主 機 140 封 包 接 收 模 150 搜 尋 擷 取 模 160 資 料 庫 步驟 200 由 用 戶 端 的 包 資 料 步驟 210 擷 取 一 媒 體 步驟 220 擷 取 吕亥 支 持 網 路 連 接 器 步驟 230 搜 尋 一 支 持 網 路 連 接 器 步驟 240 找 出 具 有 該 戶 端 電 腦 所 體位置識別的系統與用戶端 體位置識別的方法流程圖。 境 路管理協定（S Ν Μ P)的網路連 組 組 電腦發送一個查找（FIND)封 存取控制（MAC)位址號碼 簡單網路管理協定（S Ν Μ P)的 號碼及連接埠（Por t)號碼 簡單網路管理協定（S Ν Μ P )的 實體對照表 媒體存取控制（MAC )位址的用 存在的實體位置Page 586285 Brief description of the diagram. The first diagram is a diagram of the connection structure between the user's real computer of the present invention; and the second diagram is the user of the present invention [Illustration of Symbols] 100 LAN ring 110 Computer 120 Support σσ early network connector 130 servo host 140 packet receiving module 150 search retrieval module 160 database step 200 packet data from the client step 210 retrieve a media step 220 retrieve Lü Hai support network connector step 230 search a support network Step 240 of the circuit connector finds a flowchart of a system having the position recognition of the client computer and a method for identifying the position of the client. The network connection computer of the border management protocol (SNM) sends a lookup (FIND) access control (MAC) address number and the number of the simple network management protocol (SNM P) and the port ( Por t) number of simple network management protocol (SNMP) entity lookup table media access control (MAC) address using existing physical location