Patent ID: 7028100
Filing Date: 2006-04-11
Classification: H04L

Abstract:
1. An integrated information communication system comprising: at least one set of a communication company management network, in which said communication company management network includes an access control apparatus, a relay apparatus, and a server; wherein said access control apparatus, said relay apparatus, and said server are connected to each other via an internal communication line having a packet transfer function, and wherein: when two, or more sets of said communication company management networks are employed, these communication company management networks are connected via a boundary relay apparatus to each other by using said internal communication line; an external terminal of said integrated information communication system is connected via a user communication line to said access control apparatus, an internal address is applied to a logic terminal so as to identify said logic terminal of a termination of said user communication line, and also said access control apparatus contains a conversion table; if a request identification field of said conversion table is a value indicating a virtual dedicated line, then identification information of a logic terminal which has received an external packet is registered as a record of said conversion table in such a manner that the determination of said identification information of the logic terminal allows for an exclusive determination of an internal destination address which is stored in a header of an internal packet produced by an access control apparatus installed on the transmission side; if said request identification field is a private address communication, a set of information/address comprising an identification information of a logic terminal which has received an external packet; an external source address thereof; and an external destination address thereof is registered as a record of said conversion table in such a manner that the determination of said information/address set allows for an exclusive determination of said internal destination address which is stored into the header of the internal packet produced by the access control apparatus installed on the transmission side; with respect to identification information of the same logic terminal, a set of said external destination address and said internal destination address stored into said header portion is made different from each and every other record; and a delivery destination of said external packet can be changed by changing an external destination address contained in an external packet which is entered from the same logic terminal; if said request identification field is a non-private address communication, a set of said identification information of the logic terminal and said source address is registered as a record of said conversion table; said registration implies a transmission permission with respect to a terminal having said external source address; said external packet is reached from said terminal via said user communication line to an access control apparatus; a detection is made of such a fact so that: as a first case, said request identification is registered as a virtual dedicated line into a record of said conversion table containing the identification information of the logic terminal which has received said external packet; as a second case, said request identification is registered as a private address communication into the record of said conversion table; as a third case, said request identification is registered as a non-private address communication; wherein in both said first case and said second case, said external packet is converted into said internal packet by employing both logic terminal identification information and an internal destination address, which are acquired from said conversion table; and in said third case, while said external packet is directly used as an internal packet, said internal packet acquired in said first case to said third case is transferred via said internal communication line and said relay apparatus provided in said integrated information communication system, and also is transferred via a logic terminal of an access control apparatus installed on the reception side to another user communication line so as to be thereby reached to another terminal and when a packet filter employed in said access control apparatus detects that the destination address contained in said external packet corresponds to such an address which is not opened outside network, said packet filter discards said detected external packet.