FI115326B - Procedure for updating in a name resolution system of dynamic correlation addresses at the network level for middleware name names - Google Patents

Abstract

In this publication is disclosed a method for updating the dynamic network-level bound addresses of middelware-level names in a name resolution system. In the method according to the invention, the steps are carried out of binding (101) to a user profile (12) stored in the operator system (11) a definition of the responsibility of the operator system to perform in a name resolution system the update of the binding between the network-level address of the information network resource and its middleware name. When the allocation binding of a dynamic network-level address to a given subscriber connection or an information network resource communication via the same is detected to have been created or canceled, the update (104) of the binding information pertaining to a first middleware-level name and the respective dynamic network-level address is performed by the operator system (11) in a name resolution system.

Description

115326

A method for updating middleware-level name dynamic network-level match addresses to a name resolution system.

The invention relates to a method for updating dynamic network-level name-matched middleware-level names in accordance with the preamble of claim 1, comprising updating the association between the at least one middleware-level name and its network-level counterpart to the name-resolution system.

Traffic on telecommunication networks is divided into hierarchical levels. Traffic at a particular hierarchical level is transparent to elements of other hierarchical levels. For the purposes of these 10 applications, the term middleware level corresponds to layers 4-7 of the International Organization for Standardization (OSI) OSI (transport system), session, presentation and application layers. (application layer). Middleware is software that implements that software. layers functionality.

15

According to the prior art, a name resolution system such as

The purpose of the DNS rigid system used on the Internet is to enable referencing

To an Internet resource by DNS name without knowing its location. In the case of DNS, the resource is most often the so-called. host, which is a host of * 20 computers connected to the Internet. The DNS name is the middleware level name. Location is, in the case of DNS, "a network location expressed on the Internet by an IP address, which is a network-level address.

'* Being able to refer to a resource without knowing its location is important because if! »* ·« · Would not distinguish between resource names and locations, changing resource location I · »· would result in a laborious reconfiguration of all systems that * * · 25 would contain references to the migrated resource. Especially if the moving resource were a server, the amount of work involved would be considerable. Em. therefore, in the general case of ♦ · · t · '·', the Internet application or user must not rely directly on a reference, such as an IP address, when sending messages, but instead always refer to the object as locally as possible. Further prior art is disclosed in US-A-5790548; in Proceedings of t »» | 30 High Performance Computing on Information Superhighway, 1997, HPC-Asia • ·

: '97, C-J. Park et al. pages 511-516; and AT-T US-A-5878212 (G06F

13/00), released 02/03/99.

2,115,326

In the prior art, when connecting terminals to a data network, such as the Internet, to dynamic, that is, network-specific addresses that are defined at each connection set-up, currently in practice IP addresses, the terminal communicates with the access router 5 The terminal then takes care of updating the dynamic network-level address for the name resolution system, now in practice the DNS system.

A drawback of the prior art is that the terminal has to take care of updating its dynamic 10 network-level address for the name resolution system. In this case, the terminal software must be updated to be capable of making the update. Terminal storage and processor time is required to store and execute the updated software. In addition, when transmitting the dynamic network-level address from the access router to the terminal, and forwarding the dynamic network-level address from the terminal to the access router from which it is routed through a data network, currently in practice an IP network, system. Extra. traffic is a burden on the bearer especially when dynamic IP addresses »I · j. '20 is often defined. This is typical of connections made with portable terminals. Especially with portable terminals, it is important to minimize

* * I

the proportion of control information in the information transmitted on the transmission path. It is difficult for an operator to provide services based on data binding • »*. ·: ·. to the middleware level name of the network terminal in the name resolution system, when * * · »25 network terminals change the data associated with its middleware level name.

• ·

It is an object of the invention to provide a completely new type of method by which the above-mentioned prior art problems can be solved.

This object can be achieved in accordance with the invention by transferring the network-level matching address update responsibility * * from the terminal to the operator's system.

Specifically, the method of updating the dynamic network-level equivalent addresses of middleware-level names according to the invention in a name resolution system, the method of updating the association between at least one of the middleware-level names and its network-level counterparts in the name resolution system is characterized in claim 1.

The invention provides considerable advantages. The terminal does not have to worry about submitting its network-level address to the name resolution system, whereby the terminal software does not have to be updated so that it is capable of performing the above-mentioned update. Terminal storage and processor time are not consumed in maintaining and executing the updated software. In addition, the transmission path between the access-15 router and the terminal for transmitting the network-level address of the terminal from the access router to the terminal and back from the terminal to the access router is not loaded. A reduced proportion of control information in the transmission path between the access router and the terminal is obtained. It is easier for an operator to provide services based on data binding to the middleware layer name of the • 20 middleware layer in the name resolution system when the network terminal does not change the data bound to its middleware layer name.

The invention will now be described by way of example and with reference to the accompanying drawing.

'j'; Fig. 1 is a schematic diagram of one method according to the invention in which the middleware layer name dynamic is updated by control of an operator rigid system; '·': The network-level equivalent address to the name resolution system and remove the middleware-level: V: name and dynamic network-level address association from the name resolution system.

An example is the TCP / IP environment and it uses the DNS rigid system. The invention. The method according to the invention may be applied in a similar manner in other types of I · I »· \ 30 communication networks and / or using a different name resolution system.

I | I

• · · 4 115326

In the example of the operation diagram of Figure 1, the following numbered elements are used:

A particular subscriber interface 10 is an interface to a circuit switched or packet switched communication network 5.

Operator system 11 is hardware that enables an operator to provide a connection to the IP network to a particular subscriber interface 10 in communication with operator system 11.

10 The user profile 12 is a definition of the services provided to the customer identity of a particular subscriber interface 10, network terminal, person, application program or application program stored in or available to the operator system 11 provided through the operator system 11.

15

The first DNS name is a DNS name which seeks to identify a particular subscriber interface 10, a network terminal or application program and / or an instance of an application program connected to a particular subscriber interface 10.

. . The first DNS server 13 is the DNS system name server. A first DNS name 13 is or may be stored on the first DNS server 13.

• ·.,.: The second DNS server 14 is a DNS system name server to which the operator system 11 has update privileges. The second DNS server 14 has or can have 25 other DNS names stored.

• ·

A dynamic IP address is an IP address that the operator system 11 is able to allocate, e.g., with its access router, to the operator system 11 at any given time *. ·; ·. to a connected subscriber line.

30 * · «

The method carries out the following numbered steps. Steps 101-103 are performed to 'define and target the service to be provided and to establish a communication link between the subscriber line 10 and the operator system 11: 5 115326 101) Binding the user profile 12 stored in the operator system 11 to determine that the operator system 11 is updating to the name resolution system 5 dynamic IP addresses allocated to the data link resource connecting to the identity.

102) Establishing a communication link between the operator system 11 and the subscriber interface 10 and allocating a specific dynamic IP address to the subscriber interface 10.

103) It is detected, in the operator system, that a communication connection is established from the subscriber interface 10, or that the subscriber interface 10 is connected to the operator system 11 by a user profile 12 and retrieved by the operator system 11 from the first DNS name and / or second DNS name.

Step 104 is performed to store a logical connection between a particular dynamic EP address and ·: first DNS name allocated to the subscriber interface 10 in a name resolution system: ir: 20. »» · ·, · · 104) Updates to the name resolution system in response to 1 I · of the first DNS name. * * Request for a specific dynamic IP address to return.

The operator system can perform the update directly on the first * »· DNS server 13, where the first« · · <I * '25 DNS name is stored or stored if the operator system has the privileges to update it or • »· v · * to the second DNS 14. The alternative way is

* I I

... *, however, ensure that queries according to the first DNS name 13: are configured to redirect to the second DNS server 14. Also define: ·; the validity period of the link 30 between the first DNS name 13 and a particular dynamic IP address and associating it with a specific dynamic IP address 6115326 to the first DNS server 13 or the second DNS server 14. The updating is done concretely by controlling the operator subsystem 11 to communicate a first name server 13 or a second name server 14, or a name server belonging to a recursive chain 5 between them, and generating update information in response to the configuration bound to the user profile 12 and any authentication, authorization, and status server signals received from the name server. Sending update information packets to the name server from which new information packets can be received interactively. By controlling this exchange of information, a logical connection between a particular dynamic IP address and a first DNS name is established in the name resolution system.

Then, if in step 104, the dynamic IP address is not directly updated to match the first 15 DNS names, but rather combines the first DNS name and a particular dynamic IP address through a recursive lookup chain, it is necessary to ensure that first DNS name requests are routed For example, the second DNS name 13 is stored in a CNAME-RR field associated with the first *, ·, 20 DNS name. In this case, the first DNS name ·. The request for a query will be answered with a message containing another DNS name, which • · knows that the request for another DNS name is redirected to another name server that has been updated to a specific 'I * name to bind to another DNS name. dynamic IP address.

* * · * · · * 25 After step 104, if the IP address associated with the first DNS name is queried by the DNS system from the name resolution system, the DNS system returns a specific I »; ,, dynamic IP address either directly or in response to the requesting system. for one additional search whose • · · '' DNS names that are being searched for in the extra will appear in the first DNS response message, or ·; * '30 recursively in subsequent response messages. Step 105 is performed to disconnect the M 1, '' communication link and step 106 is performed to remove the correspondence between the first DNS name> 11 115326 name and a particular dynamic IP address and to release a specific dynamic IP address for later use: 105) Received in subscriber interface 10 the transmitted communication disconnection request and / or communication between the system 11 of the operator 5 and the subscriber interface 10 is disconnected.

106) Controlling the operator system 11 to communicate with the first name server 13 or the second name server 14 or the name server in the recursive chain between them, and generating update information in the operator 10 system 11 in response to the user profile 12 bound specification and Sending update data packets to the name server from which new data packets can be received interactively. The control of this exchange 15 releases the binding associated with the first DNS name, either directly or via a recursive lookup chain, to a specific dynamic IP address and releases a particular dynamic IP address for later use.

The dynamic IP address will not be allocated by the operator system to the second subscriber line • ♦ 20 before the expiration of the dynamic IP address and the first DNS name or the second DNS name: '·· stored in the name resolution system.

· '' The validity period in this case is the time originally specified by the operator's system '* and supplied to the name resolution system.

Similarly to Example 1, the link between the first or second DNS name and a particular dynamic IP address can also be removed from the mm resolution system, even if not initially provided by the operator system 11.

A similar bond may be formed according to the method, even if its removal by other means.

: ···: 30 4.:. · If traffic between the first DNS name and a specific dynamic IP address is blocked after the first DNS name is blocked, traffic to the subscriber lines can be monitored by means of an automated tracking system in the operator system 11, e.g. . Hereby an automatic tracking system is arranged so that information packets 5, which are directed to at least one subscriber interface, passes through an automatic tracking system. Receiving name resolution system response messages targeted to the subscriber interface in the operator system 11 and mapping the network-level DNS response addresses of the DNS names contained in these response messages to the dynamic IP addresses assigned to the subscriber subscriptions,

By unlinking the first DNS name from a particular dynamic IP address from the DNS system, the assigned IP addresses associated with a particular 15 dynamic IP addresses stored in the operator system 11 can be activated by the auto-tracking system, thereby stopping the auto-tracking system from data packets that contain a dynamic IP address as the destination address. Response messages from the DNS system can still be tracked, and when it is detected that a specific dynamic IP-20 address is associated with a non-first DNS name, • 1; · is removed. blocking from an automatic tracking system to a specific dynamic ΓΡ address.

> t · • ·

In the method of the invention, messages sent from a subscriber line or certain subscriber lines to a name server system can be directed to a traffic editor that directs messages sent from a subscriber line or subscriber line to a name resolution system such that a name resolution system or a subscriber subscriber the number of messages directed to certain subscriber lines does not exceed a certain threshold within a certain »: '1 1: 30 time, thereby lowering the speed requirement of the automatic tracking system.

• 1 · ♦ · · »· ·» · · 9 115326

The following describes what some of the terms are used in this application and in particular in the claims.

Generation of information packets in the operator system when updating the name resolution system 5 takes place without control received from the subscriber interface. The operator's system is programmed with functionality to generate the data packets needed to update the name resolution system.

The name is a symbolic identifier present in communication systems, e.g., a Uniform 10 Resource Name (URN), which does not have any location dependent part. The name also refers here, for example, to the DNS host name, which is a locale name because the host is a localization in terms of abstract resources, but which is needed for naming independently of a network-level address such as an IP address.

15 A nameserver is a system that can, after obtaining a name for a given middleware level, determine the data associated with that middleware name if a particular middleware name is stored on the name server in question. For example, the bound information may relate to the network-level equivalent of a specific middleware level name.

20 A name resolution system is a system that knows the name of a specific middleware level; upon receipt of specifying the data associated with this middleware-level name, provided that a particular middleware-level name is stored in the name resolution system in question.

; A: The name resolution system may consist of multiple name servers that may be updated by different entities, each containing at least in part an 'I'; 25 different middleware-level nomenclature, or set of names.

. i: The resource is a network resource and the network resource is intended to be a subscriber interface, a host connected to it, hosted on a data network; "· * · application software and / or its instance.

* 30, X Network-level counterpart is a network-level counterpart for a specific, ...; The network-level address corresponding to the middleware-level name at a given time, i.e., the network resource designated at a given middleware-level name, is capable at a given time of receiving information at the network-level address and / or transmitting information at the network-level address

5 A subscriber interface is an interface to a circuit switched or packet switched telecommunications network.

An operator system is hardware that enables an operator to provide a connection to a data network, such as an IP network, to a telecommunications subscriber connection to the operator system 10, and possibly some telecommunication services to a subscriber interface, to a data network .

15 Updating is the process of storing, deleting, or altering information in the system being updated.

A user profile is defined as a specification, stored in an operator system or made available by an operator system, of the services provided to a particular network customer, customer group or 20 network resources. In response to the cybersecurity client defined in the user profile, custom cyberspace services are provided, such as

* I

. between the network level address of the cyber resource and the name of a specific middleware layer, '_ ,. updating the link to the operator system.

• * ·. 25 A network resource is a subscriber interface, a network terminal device connected to a data network, an application program running on such a network terminal device or its:. '. an instance.

• · · · • t · • *

• * t M

. *. A recursive search chain is the name of a particular keyword, such as a specific middleware level

• <I

30 based name server query chain, where a specific keyword • »'·' is matched with another keyword and the desired resolution information or • · · ··· | third keyword. The third keyword can be matched with the desired 115326 11 resolution information or the fourth keyword. The corresponding chain can continue for nth keyword, n being a natural number.

In this application, and especially in the claims, a dynamic network-level address is intended to be a network-level address that can be allocated by an operator ice system to a subscriber connection in a telecommunications connection. A different dynamic network-level address may be allocated to the subscriber line at different set-up times, and the same dynamic network-level address may be allocated to another subscriber line when it is released from the first subscriber line.

• # • · s · I ·

Claims (14)

A method for updating in a name resolution system of dynamic correlation addresses at the network level for names at the middleware level, wherein the link between at least one name at the middleware level and its correlation address at the network level 5 is updated in the name resolution system, whereby - to a user profile (11) stored ) is linked (101) to a definition whereby the operating system (11) provides an update of the link between a dynamic address at the network level of a data network resource communicating or communicating with the user profile (12) by means of a data communication connection to be formed or formed in the operator system, and a first name at the middleware level in the name resolution system, - in the operator system (11), (105) is observed to communicate between a certain subscriber connection (10) and / or one via the subscriber connection (10) with the operator system (11) and a certain dynamic address on the network friend pours an allocation to form, is formed, pours to be shredded or shredded. - in response to a predefined and stored in the user profile (12), (106) the operator system (11) updates the link between the particular dynamic address at the network level • *; 'And the first intermediate level name in the name resolution system,:; characterized in that 20. the validity of the link between the first middleware level name and the • i * · certain dynamic address at the network level is determined, and it is linked as a tili to a • * »· certain dynamic IP address hearing information in the name resolution system; some dynamic IP address is allocated to another middleware level name, I · at least one specific IP address linked to the certain dynamic IP address t · *; '25 is activated in an automatic follow-up system, and in »» »,' in the automatic follow-up system, a data packet containing» ·,; at least a specific IP address as the sender address and a certain dynamic IP address as the destination address, to advance towards a terminal with the particular dynamic IP address. 115326 2. A method according to claim 1, characterized in that the update takes place, when (103) it is observed (103) from the particular subscriber connection (10) that a data communication connection is formed by the user profile (12), or from the particular subscriber connection ( 10), a data communication connection 5 is formed in the operating system (11) by the user profile (12), thereby updating (104) the operating system (11) the certain dynamic address at the network level in the name resolution system to correspond to the first middleware name that originates or is searched on basis of the user profile (12). 3. A method according to any of claims 1 to 2, characterized in that the update 10 takes place, where in the operator system (11) it is observed (105) that the allocation between the particular subscriber connection (10) and / or the other communicating via the subscriber connection (10) with the operator system the data network resource pours to be shredded or shredded, thereby updating (106) the operating system (11) removing the link between the dynamic address at the network level and the first middleware name from the name resolution system in such a way that at least one link between the first middleware level name and the dynamic address at the network level is shredded from the name resolution system. 4. A method according to claims 1-3, characterized in that between the operator system (11) and the particular subscriber connection (10), a data communication connection is formed (102) and allocated to the particular subscriber connection in the operator system (11). some dynamic address at the network level. The method according to any of claims 1 - 4, characterized in that the operator system ': (11) updates (104) the certain dynamic address at the network level to correspond to the first middleware level name at the network level for a first name server (13) and / or shreds • the (106) link between the first middleware level name and the dynamic address of (in 1:. · network level from the first name server (13).) I; ';' 6. A method according to any of claims 1-5. , characterized in that the operator system in · (11) updates (104) the dynamic address at the network level of another name server •. ',' (14) at the end of a recursive search chain from the first name server (13) to correspond to a • I: Another middleware level name obtained from the recursive search chain, and / or shreds (106) the logical link 115326 ί in the middleware store name and the dynamic address of the network level from the second name server (14) or by updating one name server for the second name server (14) in the recursive search chain. Method according to any of claims 1-6, characterized in that the following steps are taken during the update 5: in response to an identification of a data communication connection between the particular subscriber connection (10) and the operator system (11) identified by the user profile (12), a request for forming such a data communication connection, a cancellation of the data communication connection between them, or a request for the cancellation of the data communication connection between them or upon a change of the allocated dynamic address at the network level of the subscriber connection (10) or the the subscriber connection (10) communicating the data network resource, the operating system (11) is controlled to communicate with the first (13) or the second name server (14) or with any name server between them in the recursive search chain, in response to the user profile (12) and information obtained according to the definitions of the user profile (12) as well as any authentication o ch * · j. authorization signals received from the first (13) or second name server • 20 (14) or from a name server between the same in the recursion chain, and • · · any signals from which the name server's permission is generated in: ': the operating system (11) contains some data packet contents , and some data packets are sent to the first name server (13) or to the second ... name server (14). The method according to any of claims 1-6, characterized in that the name server system is a DNS system, the nameservers are the DNS system: name servers, the middleware level names are DNS names and the network level counter. ,, Responsibilities consist of IP addresses. . 9. A method according to any one of claims 1-8, characterized in that 115326! In the operator system (11) or in the automatic follow-up system which functions as part thereof, the name resolution system's response message addressed to the specific dynamic address at the network level is received, which message tells about the corresponding middleware level name at the network level. 5. the network level correspondence contained in the name server system's response message is linked to the specific dynamic address at the network level in the operating system (11) or to the automatic tracking system that functions as part thereof, from the subscriber connection, the same allocated certain dynamic address at the network level is canceled. the dynamic address at the network level and the associated network level counterparts are activated on a blocking list in the automatic follow-up system, a data packet directed to the dynamic address at the network level is controlled by the automatic follow-up system belonging to the operator system (11), and a data packet as a destination packet at the network level, is stopped in the automatic tracking system, if the packet's destination address is the certain dynamic address at the network level, and if the packet's t «. *. * sender's address is linked to the certain dynamic address at Eating level on the I I in the * list. * * t; : Method according to claim 9, characterized in that "*" In the operator system (11), the name server system response message is received, whereby "* * •" * states that the dynamic address at the network level on the blocking list is allocated to. any other subscriber connection, and> I - the dynamic address at the network level is removed from the blocking list. 11. Method according to any of claims 9-10, characterized in that as stated. · * Tracking system uses a programmable active node. e · »I I I! Method according to any one of claims 1-11, characterized in that the name>> Directed messages sent in the server system from the subscriber connection (10) or from certain subscriber connections are controlled to a traffic scrambler which controls the subscriber connection or subscriber connections sending the messages to the name resolution system in such a way that the amount of messages directed to the subscriber connection number or messages directed from the name resolution system to the subscriber connection or to certain subscriber connections do not exceed a certain limit value for a certain period of time. Method according to any one of claims 1 to 12, characterized in that at least one action in accordance with the method is taken in response to a definition located in the customer or customer group-specific user profile stored in the operating system (11). Method according to any of claims 1 to 13, characterized in that the first middleware name and the associated certain network level correspondence are stored as data structure for the first name server (13), and that a definite reference to another middleware level name is defined to be linked to the first the middleware name, a definition of information to be linked to the second middleware level name, is stored in the user profile that defines the services offered is stored by a data network customer (10),: ·, ·. - it is checked whether the user profile defining the data network resource in ·; ·, (10) services is stored such a definition that the name server (13) • which offers a name resolution for the first middleware level name is desired •; · · J 20 is replaced, • t · *; 't' - in response to the definition in the user profile (12), which defines the services of the data network resource (10), automatically determines determined data, such as position data. ... data, to be linked to the second middleware level name and stored in the other • · · * I \! the name server (14) linked to the second middleware name, 25. It receives a request regarding the second middleware name in the second name server (14), the second middleware name stored in the first name server (13) conforming to the defined reference,, ·, ; which is linked to the first middleware name, and in response to a request regarding the second middleware level name, a new position information is obtained from the second server (14) corresponding to the second middleware name and / or other information which is linked to the other middleware level address. 5 a • · t a 1 I ·; ) *> * § * »· * t a» I a · a * 4 · »a · a a i a a * • t a a a a a i •» a · t a * a> a a a a i a a t • a a a a · a a a »a I» a a