201138399 六、發明說明： 【發明所屬之技術領域】 一種應用於網際網路多端連線的方法，主要應用於 用戶端之間的網際網路連線，本發明尤指一種可於現行 網際網路通訊協定中運行，用戶端無需因網際網路連線 而特例開放網路連接埠，且可進一步加載網際網路應用 程式於一網際網路多端連線系統上的方法。 【先前技術】 隨著科技的發展，及寬頻網路的普及化，使得傳統 主從式（Client-Server)的網際網路結構，漸漸被點對點 網路通訊架構（Peer to Peer，P2P)所取代，但一般用戶 端皆設置有網路防火牆，來防範標案遭有心人士運用網 際網路竊取，或架設有網路地址轉換器（Netw〇rk Address Translation，NAT)，以供用戶端可多人使用同一網際網 路位址（IP)對外產生網際網路連線，然而為了與其他用 戶進行網際網路連線’需更動網路防火踏或網路地址轉 換器的設定’使特定網路通訊埠可對外進行連線，如此 網路防火牆上便形成了 一個資安漏洞，許多有心人士便 可循此漏洞’入侵電腦盜竊資料，為因應此問題，便產 生許多穿透網路防火牆或穿透網路地址轉換器的技術， 例如 UPnP(Universal Plug and Play)、TURN(Traversal Using Relay NAT) ' STUN(Session Traversal Utilities 201138399 for NAT or Simple Traversal of User Datagram Protocol through Network Address Translators(NATs)) 等技術，以TURN技術舉例，請參照r第i圖」所示，圖 中所示係為TURN技術的實施示意圖，如圖中所示，一用 戶端ίο主要係透過一代理伺服器u與其他用戶端12產 生網際網路連線，且用戶端1〇係架構有網路防火牆 1〇1(或一網路地址轉換器），並請搭配參閱「第2圖」所 示，圖中所示係為TURN技術的實施流程圖，當用戶端1〇 欲與其他用戶端12產生網際網路連線時，其網際網路連 線流程如下所述： (1) 步驟21 (發出中介需求）：用戶端1〇欲與其他用 戶端12產生網際網路連線時，用戶端1〇便發送一中介 代理的需求至代理伺服器U ; (2) 步驟22(網路連接埠分配）：代理伺服器丨丨接收 訊號後，便在代理伺服器Π的公用網路通訊埠中，分配 一轉介的網路通訊埠給用戶端10使用； (3) 步驟23(與代理伺服器連線）：代理伺服器u回 覆一相關的網際網路連線訊息至用戶端10,如此用戶端 10便可將資訊藉由代理伺服器傳送； (4) 步驟24(與第三方連線）：用戶端10與代理伺服 器11產生連線後，便可透過代理伺服器11與第三方產 生網際網路連線’例如其他用戶端12等。 如上述的TURN技術，係運用代理伺服器丨丨在用戶 201138399 端（10、12)之間進行中介處理，如此技術雖可穿透網路 防火牆，但卻喪失了點對點通訊的特色，變成了用戶代 理伺服器的模式，且所有的通訊負載，皆需由代理伺服 器承擔，又，STUN技術，其係在對稱式的網路地址轉換 器架構中運行，雖可藉由代理伺服器的暫時轉介，使雙 方產生網際網路連線，但因其受限於對稱式的網路地址 轉換器架構（Symmetric) ’使得網路通訊埠無法重置 (Reuse)，再者，為解決穿透網路防火牆以及網路地址轉 換器的問題，許多企業除了使用上述的穿透技術外，更 搭配了其他的網際網路連線技術，並架構相關的硬體設 備，例如私人虛擬網際網路（Virtual Private Netw〇rk， VPN)等，但如果企業據點分散各地時，架設私人虛擬網 際網路便會形成一筆龐大的費用。 【發明内容】 有鑑於上述的問題，本發明者係依據多年來，從事 相關產品研發的經驗，針對網路防火牆及網路地址轉換 器的穿透技術與網際網路通訊協定進行研究及分析期 能研發出更為適切的解決方案；緣此，本纟明主要目的 在於提供-種無需特例開放網路通科，無需透過代理 飼服器轉介資料’且可加載網際網路應用程式的網際網 路多端連線的方法。 為達上述目的，本發明係在用戶端上架構一網際網 201138399 路多端連線线，且本發明係透過—代理㈣器使兩 用戶端產生網際網路訊號連結，當 代理伺服器於中間進行中介，如此，用戶端進行與第 1 方進行網際網路連線時，便可在具有網路防火踏防護或 架設有網路地址轉換器的狀態下’進行相關的網際網路 連線，再者，使用者係可依需求、喜好，加載網際網路 應用程式於本發明所稱的網際網路多端連線系統之中。 以上關於本發明内容之說明及以下之實施方式之 說明，係用以示範與解釋本創作之精神與原理，並且提 供本發明之專利範圍更進一步解釋。 【實施方式】 請參閱「第3圖」，圖中所示係為本發明之實施架 構不意圖’如圖所示’每一用户端3〇係分別架設一網際 網路多端連線系統301於一資訊設備302之中，且可在 開啟網路防火牆303防護（或具有網路地址轉換器）的狀 態下’再者，網際網路多端連線系統301係可資訊連接 至一代理伺服器31。 請參閱「第4圖」，圖令所示係為本發明之實施流 程圖，並請參照「第3圖」以及「第5圖j，圖中所示係 為本發明之實施示意圖（一），當一呼叫端32欲與第三方 產生網際網路連結時，係透過網際網路多端連線系統321 進行網際網路連線，其實施流程如下所述： (1) 201138399 發出網際網路連線需求41:呼叫端32欲與被 呼叫端33進行網際網路連線，呼叫端32係 利用網際網路多端連線系統321，發送一網際 網路連線需求至代理伺服器31 ; (2) 飼服器發送連線需求42 :代理伺服器31係將 呼叫端32所發送的連線需求，轉發至被呼叫 端33 ; % (3)同意連線43 :代理伺服器31依呼叫端32需 求發送網際網路連線需求後，於一特定時間 内（例如9秒），被呼叫端33回應並且同意連 - 線後，代理伺服器31便回傳相關訊息至呼叫 . 端 32 ; (4) 啟動網路地址轉換器網際網路協定驗算機制 44 :雙方同意連線後，呼叫端32以及被呼叫 端33的網際網路多端連線系統（321、331)係 ® 分別開始驗算兩使用端資訊設備的網路防火 牆303(或網路地址轉換器）的網路連接埠編 碼原則，且分別產生有一預期的網路通訊埠 資料（D1、D2); (5) 傳送網路連接埠資訊45 :將雙方所預期的網 路通訊埠資料（Dl、D2)，係透過代理伺服器 31分別傳送給呼叫端32與被呼叫端33，例 如被呼叫端33之預期的網路通訊埠資料D2, 8 201138399 傳送給呼叫端32,而呼叫端32之預期的網路 通訊埠資料D1係傳送給被呼叫端33 ; (6) 產生直接網際網路對連46 :請搭配參照「第 6圖」，圖中所示係為本發明之實施示意圖 (二），如圖所示，呼叫端32與被呼叫端33 分別接收對方之預期的網路通訊埠資料 (Dl、D2)後，便產生即時性的網際網路連線， 此時呼叫端32與被呼叫端33之間的網際網 路連線，無需透過代理伺服器31來進行中介 處理，僅需藉由兩用戶端的網際網路多端連 線系統（321、331)來進行相關的網際網路連 線。 請參閱「第7圖」，圖中所示係為驗算機制之實施 流程圖，以往的網際網路連線，使用端的資訊設備在欲 進行網際網路連線時，便會產生一内部網路連接埠透 過網路防火牆或網路地址轉換器，產生一外部網路連接 琿，才可與外部的網際網路產生連線，然而使用者端無 法得知自身對外的網路連接埠，因此本發明所稱的網路 地址轉換器網際網路協定驗算機制，主要係利用現今作 業系統的網路防火牆或網路地址轉換器的網路通訊埠， 為循環性的編碼或可透過設定成為一循環性的編碼如 此經過驗證後，便可供用戶端得知自身對外的網路連接 埠資料，進而傳遞給第三方，使雙方產生連線如「第7 201138399 圖」所示，並請搭配參照「第5圖」，承上所述，當被呼 叫端33同意進行連線時，呼叫端32與被呼叫端33分別 開始進行本發明所稱的驗算機制，在此僅以呼叫端32舉 例，而被呼叫端33的實施方式係與呼叫端32相同，又， 網路地址轉換器網際網路協定驗算機制的實施流程如下 所述： (1)與代理伺服器進行多次連線51 :呼叫端32接 收到同意連線訊息後，便與代理伺服器31進201138399 VI. Description of the Invention: [Technical Fields of the Invention] A method for multi-end connection of the Internet is mainly applied to the Internet connection between the user terminals, and the present invention particularly relates to an existing Internet. In the communication protocol, the client does not need to open the network connection due to the Internet connection, and can further load the Internet application on an Internet multi-end connection system. [Prior Art] With the development of technology and the popularization of broadband networks, the traditional client-server network structure has gradually been replaced by Peer to Peer (P2P). However, the general user side is equipped with a network firewall to prevent the target from being used by the Internet to steal, or set up a network address translator (NAT) for the user to have multiple people. Use the same Internet address (IP) to generate Internet connection externally. However, in order to connect to other users, the Internet connection needs to change the network firewall or network address converter settings to enable specific network communication.埠 埠 对外 对外 对外 , , , , , , , , , 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路 网路Network address translator technology, such as UPnP (Universal Plug and Play), TURN (Traversal Using Relay NAT) 'STUN (Session Traversal Utilities 201138399 for NAT or Techniques such as Simple Traversal of User Datagram Protocol through Network Address Translators (NATs), TURN technology, please refer to r i-th figure, which is a schematic diagram of the implementation of TURN technology, as shown in the figure. A user terminal ίο mainly generates an internet connection with other client terminals 12 through a proxy server u, and the client terminal 1 has a network firewall 1.1 (or a network address converter), and please See the "Figure 2" for matching. The figure shows the implementation flow chart of TURN technology. When the user terminal wants to connect to other clients 12 to generate Internet connection, the Internet connection process is as follows: The following: (1) Step 21 (issuing the intermediary requirement): When the user terminal 1 wants to generate an Internet connection with the other client terminal 12, the client terminal 1 sends an intermediary agent's request to the proxy server U; 2) Step 22 (Network Connection/Assignment): After receiving the signal, the proxy server allocates a referral network communication to the client 10 in the public network communication port of the proxy server. (3) Step 23 (with proxy server Connection): The proxy server replies an associated Internet connection message to the client 10, so that the client 10 can transmit the information through the proxy server; (4) Step 24 (connect with a third party) After the client 10 and the proxy server 11 are connected, the proxy server 11 can generate an Internet connection with the third party, such as other client terminals 12 and the like. For example, the TURN technology described above uses a proxy server to mediate between users 201138399 (10, 12). Although this technology can penetrate the network firewall, it loses the characteristics of peer-to-peer communication and becomes a user. The mode of the proxy server, and all communication payloads are required to be borne by the proxy server. In addition, STUN technology runs in a symmetric network address translator architecture, although it can be temporarily transferred by the proxy server. In order to make the Internet connection between the two parties, but because it is limited by the symmetric network address converter architecture (Symmetric), the network communication can not be reset (Reuse), in addition, to solve the penetration network In addition to the above-mentioned penetration technology, many enterprises use other Internet connection technologies and architecture related hardware devices, such as private virtual Internet (Virtual). Private Netw〇rk, VPN), etc., but if the company's strongholds are scattered around, the establishment of a private virtual Internet will create a huge expense. SUMMARY OF THE INVENTION In view of the above problems, the present inventors have conducted research and analysis on penetration technologies and Internet communication protocols for network firewalls and network address translators based on years of experience in related product development. It is possible to develop a more appropriate solution; therefore, the main purpose of this book is to provide an Internet that does not require special open Internet access, no need to refer to the data through a proxy server, and can load Internet applications. The method of network multi-end connection. In order to achieve the above objective, the present invention constructs an Internet 201138399 multi-end connection line on the user side, and the present invention enables the two users to generate an Internet signal connection through a proxy (four) device, when the proxy server performs in the middle. Intermediary, in this way, when the user conducts the Internet connection with the first party, the relevant Internet connection can be made in the state of having the network fire protection or the network address converter. The user can load the internet application according to the requirements and preferences in the so-called internet multi-end connection system of the present invention. The above description of the present invention and the following description of the embodiments are intended to illustrate and explain the spirit and principles of the present invention, and to provide further explanation of the scope of the invention. [Embodiment] Please refer to "3rd figure", which is shown in the figure. The implementation architecture of the present invention is not intended to be 'as shown in the figure'. Each of the user terminals 3 is provided with an internet multi-end connection system 301. In an information device 302, and in the state in which the network firewall 303 is turned on (or has a network address translator), the Internet multi-end connection system 301 can be connected to a proxy server 31. . Please refer to FIG. 4, which is a flowchart of the implementation of the present invention. Please refer to FIG. 3 and FIG. 5, which are schematic diagrams of the implementation of the present invention (1). When a caller 32 wants to connect to a third party to generate an Internet connection, the Internet connection is performed through the Internet multi-end connection system 321 , and the implementation process is as follows: (1) 201138399 sends an Internet connection Line requirement 41: The calling end 32 wants to connect to the called end 33 for internet connection, and the calling end 32 uses the internet multi-end connection system 321 to send an internet connection request to the proxy server 31; The feeding device sends the connection demand 42: the proxy server 31 forwards the connection request sent by the calling terminal 32 to the called terminal 33; % (3) agrees to connect 43: the proxy server 31 according to the calling terminal 32 After the demand for the Internet connection is sent, after the caller 33 responds and agrees to connect to the line for a certain period of time (for example, 9 seconds), the proxy server 31 returns the related message to the call. End 32; Start the network address translator internet protocol checking mechanism 44: both sides After the connection, the network connection system (321, 331) of the calling terminal 32 and the called terminal 33 respectively starts to check the network firewall 303 (or network address translator) of the two user equipments. Network connection 埠 coding principle, and generate an expected network communication data (D1, D2); (5) transmission network connection 埠 information 45: the network communication data expected by both parties (Dl, D2) And transmitted to the calling terminal 32 and the called terminal 33 through the proxy server 31, for example, the expected network communication data D2, 8 201138399 of the called terminal 33 is transmitted to the calling terminal 32, and the expected network of the calling terminal 32 is transmitted. Road communication data D1 is transmitted to the called terminal 33; (6) Direct Internet connection 46 is generated: Please refer to "Figure 6", which is a schematic diagram of the implementation of the present invention (2), such as As shown in the figure, after the calling end 32 and the called end 33 respectively receive the expected network communication data (D1, D2) of the other party, an instant internet connection is generated, and the calling end 32 and the called end are at this time. Internet connection between 33, no need to go through a proxy server 31 for intermediary processing, only through the two-client Internet multi-end connection system (321, 331) to carry out the relevant Internet connection. Please refer to "Figure 7". The figure shows the flow chart of the implementation of the verification mechanism. In the past, the Internet connection and the information device on the use side generated an internal network when the Internet connection was to be made. The connection can be connected to the external Internet through an Internet firewall or a network address translator to generate an external network connection. However, the user cannot know the external network connection. The invention refers to the network address converter internet protocol checking mechanism, which mainly uses the network communication of the current operating system network firewall or network address translator to make a loop for cyclic coding or permeable setting. After the verification of the sexual code, the user can know the information about the external network connection and pass it on to the third party, so that the connection between the two parties is as shown in the "7th 201138399", and please refer to the reference. In the fifth figure, as described above, when the called terminal 33 agrees to connect, the calling terminal 32 and the called terminal 33 respectively start the verification mechanism referred to in the present invention, and only call The terminal 32 is exemplified, and the implementation of the called terminal 33 is the same as that of the calling terminal 32. Moreover, the implementation process of the network address converter internet protocol checking mechanism is as follows: (1) multiple connections with the proxy server Line 51: After receiving the consent connection message, the calling terminal 32 enters with the proxy server 31.
行多次的連線，且代理伺服器31係在每一次 的連線後，回傳一外部通訊埠資料D3給呼叫 端32 ; (2)取得邏輯性的通訊埠資料52 :當呼叫端犯接 收到多次的外部通訊埠資料D3後，便藉由網 際網路多端連線系統321，對外部通訊埠資料 D3進行驗算，驗算後便可得到一具有邏輯性的 通訊埠資料； (3)產生預期的網路通訊埠資料53:承步驟52 所述，產生具有邏輯性的通訊淳資料後，呼叫 端32的網際網路多端連線系統321進一步利 用此資料’產生1期的外部網路連接痒資料 D1’如此呼叫端32便可將此資料傳遞給被呼 叫端33,進而產生直接的網際網路連線。 請參聞「第8圖」，圖中所示係為本發明之較佳實 201138399 施例，承「第4圖」的步驟46所述，呼叫端32與被呼 叫端33產生即時性的網際網路連線後，係可進一步搭配 本圖所示的步驟47(啟動網際網路應用程式）；本圖所示 的步驟47(啟動網際網路應用程式），係指呼叫端32與被 呼叫端33產生即時性的網際網路連線後，可進一步依個 人或企業需求，於本發明所稱的網際網路多端連線系統 (301、321、331)加載各類的網際網路應用程式，例如視 訊會議、即時通訊等應用程式，請參照「第9圖」，圖中 鲁 所示係為本發明之較佳實施例之連線系統介面圖，如圖 所示，本發明所稱的網際網路多端連線系統3〇1係安裝 於使用端的資訊設備上，且具有一選單式的使用介面 3011 ’使用介面3011上係架構有多個選單，例如聯絡人 選單3012’可將同企業或是朋友的相關網路連接埠資訊 經s又疋s己錄在聯絡人選單内，又，例如網際網路應用程 式功能選單3013，當使用者加載任何網際網路應用程 • 式，於網際網路多端連線系統301上時，便會顯示使用 者所加載的網際網路應用程式，如圖所示，網際網路多 端連線系統301係加載有即時聊天應用程式3〇14、遠端 遙控應用程式3015、視訊會議應用程式3〇16等網際網路 應用程式，其實施方式係如下所述，以遠端遙控來舉例， 請搭配參照「第3圖」以及「第8圖」，進行網際網路連 時兩用戶端（32、33)都需架設本發明所稱的網際網 路多端連線系統（321、331)，且同時需加載遠端遙控應 11 201138399 用程式3015於網際網路多端連線系統（321、331)上，當 被呼叫端33接收到呼叫端32的連線需求，確認連線後， 便可進行直接性的連線’且可運用遠端遙控應用程式 3015對被呼叫端33的資訊設備，進行資訊設備的操控， 其具體的實施内容’係如上所述，在此不於贅述。 由上所述可知，本發明所稱的可穿透網路地址轉換 器且無需第二方轉介的多端連線之方法，其係可於現行 的網際網路通訊協定中運行，其主要係在各用戶端架設 一網際網路多端連線系統’以提供用戶端對網際網路連 線進行相關的設定或加載相關的網際網路應用程式再 者，進行網際網路連線時，無需透過代理飼服器於其中， 進行資料轉址等動作，且藉由網際網路多端連線系統對 呼叫端與被呼叫端，進行通訊連接埠的驗算，進而產生 即時性的網際網路連線，藉此，用戶端與第三方的網際 網路連線’無需為了連線關閉網路防火牆或更動網路地 址轉換器的設定，而產生資訊安全漏洞，有助於提高網 際網路的資訊安全，·依此，本發明其據以實施後，硪實 可以達到提供一種無需代理伺服器，且可穿透網路防火 牆以及網路地址轉換器，並可進一步運用相關網際網路 應用程式的網際網路多端連線的方法。 唯’以上所述者，僅為本發明之較佳之實施例而 已’並非用以限定本發明實施之範圍；任何熟習此技藝 者’在不脫離本發明之精神與範園下所作之均等變化與 12 201138399The connection is made multiple times, and the proxy server 31 returns an external communication data D3 to the calling terminal 32 after each connection; (2) obtains a logical communication 埠 information 52: when the calling terminal commits After receiving multiple external communication data D3, the external communication data D3 is checked by the Internet multi-end connection system 321, and a logical communication data can be obtained after verification; (3) Generating the expected network communication 埠 Data 53: After generating the logical communication data according to step 52, the Internet multi-terminal connection system 321 of the calling terminal 32 further utilizes the data to generate the external network of the first phase. The connection itch data D1' is such that the caller 32 can pass this data to the called terminal 33, thereby generating a direct internet connection. Please refer to "8th figure", which is a preferred embodiment of the present invention 201138399. According to step 46 of "Fig. 4", the calling end 32 and the called end 33 generate an instant internet. After the network is connected, you can further use step 47 (starting the Internet application) shown in this figure; step 47 (starting the Internet application) shown in this figure refers to the caller 32 and the called. After the end 33 generates an instant Internet connection, the Internet connection application (301, 321, 331) of the present invention can be further loaded with various Internet applications according to individual or enterprise requirements. For example, video conferencing, instant messaging, and the like, please refer to "FIG. 9", which is a connection diagram of a preferred embodiment of the present invention. As shown in the figure, the present invention is referred to as The Internet Multi-Terminal Connection System 3〇1 is installed on the information device of the user side and has a menu interface 3011. The interface 3011 has multiple menus, for example, the contact menu 3012' can be used in the same enterprise. Or a friend's related network connection埠The s is also recorded in the contact list, and, for example, the Internet application function menu 3013, when the user loads any Internet application, on the Internet multi-end connection system 301 The Internet application loaded by the user will be displayed. As shown in the figure, the Internet multi-end connection system 301 is loaded with a live chat application 3〇14, a remote remote control application 3015, and a video conferencing application. 3〇16 and other Internet applications, the implementation of which is as follows, with remote control as an example, please refer to "Figure 3" and "Figure 8" for the Internet connection with two clients ( 32, 33) All need to set up the Internet multi-end connection system (321, 331) of the present invention, and at the same time need to load the remote control should be 11 201138399 application 3015 in the Internet multi-end connection system (321, 331 When the called terminal 33 receives the connection request of the calling terminal 32, after confirming the connection, the direct connection can be performed and the remote control application 3015 can be used to access the information device of the called terminal 33. Information setting Handling, specific embodiments thereof contents' system mentioned above, which is not to be described herein. It can be seen from the above that the method of the present invention, which can penetrate the network address translator and does not require the second party to refer to the multi-end connection, can be operated in the current Internet communication protocol, and its main system Set up an Internet multi-terminal connection system on each user's side to provide the user-side settings for the Internet connection or load related Internet applications, and then do not need to pass through the Internet connection. The agent feeding machine is used for performing data forwarding and the like, and the Internet connection end system is used to check the communication connection between the calling end and the called end, thereby generating an instant internet connection. In this way, the Internet connection between the client and the third party does not need to close the network firewall or the network address converter setting to generate an information security vulnerability, which helps to improve the information security of the Internet. According to this, after the invention is implemented, the invention can provide a proxy-free server, and can penetrate the network firewall and the network address converter, and can be further utilized. The method of Internet connection multiport off Internet app. It is to be understood that the foregoing description of the preferred embodiments of the present invention is not intended to limit the scope of the present invention. 12 201138399
修飾，皆應涵蓋於本創作之專利範圍内。 綜上所述，本發明之功效，係具有發明之「產業可 利用性」、「新穎性」與「進步性」等專利要件；申請人 爰依專利法之規定，向 鈞局提起新型專利之申請。 13 201138399 【圖式簡單說明】 第1圖，係為TURN技術的實施示意圖。 第2圖，係為TURN技術的實施流程圖。 第3圖，係為本發明之實施架構示意圖。 第4圖，係為本發明之實施流程圖。 第5圖，係為本發明之實施示意圖（一）。 第6圖，係為本發明之實施示意圖（二）。 第7圖，為驗算機制之實施流程圖。Modifications should be covered by the scope of this creation. In summary, the effects of the present invention are patents such as "industry availability," "novelty," and "progressiveness" of the invention; the applicant filed a new patent with the bureau in accordance with the provisions of the Patent Law. Application. 13 201138399 [Simple description of the diagram] Figure 1 is a schematic diagram of the implementation of TURN technology. Figure 2 is a flow chart of the implementation of the TURN technology. Figure 3 is a schematic diagram of the implementation structure of the present invention. Figure 4 is a flow chart showing the implementation of the present invention. Figure 5 is a schematic view (I) of the implementation of the present invention. Figure 6 is a schematic view (2) of the implementation of the present invention. Figure 7 is a flow chart for the implementation of the verification mechanism.
第8圖，係為本發明之較佳實施例。 第9圖，係為本發明之較佳實施例之連線系統介面圖。 【主要元件符號說明】 10 用戶端 101 網路防火牆 11 代理伺服器 12 其他用戶端 21 發出中介需求 22 網路連接埠分配 23 與代理伺服器連線 24 與第三方連線 30 用戶端 301 網際網路多端連線系統 3011 使用介面 3012 連絡人選單 3013 網際網路應用程式功能選單 14 201138399 3014 即時聊天應用程式 3015 遠端遙控應用程式 3016 視訊會議應用程式 302 資訊設備 303 網路防火牆 31 代理伺服器 32 呼叫端 321 網際網路多端連線系統 33 呼叫端 331 網際網路多端連線系統 41 發出網際網路連線需求 42 伺服器發送連線需求 43 同意連線 44 啟動網路地址轉換器網際網路協定驗算機制 45 傳送網路連接埠資訊 46 產生直接網際網路對連 47 啟用網際網路應用程式 51 與代理伺服器進行多次連線 52 取得邏輯性的通訊埠資料 53 產生預期的網路通訊埠資料 D1 預期的網路通訊埠資料 D2 預期的網路通訊埠資料 15 201138399 D3 外部通訊埠資料Figure 8 is a preferred embodiment of the invention. Figure 9 is a connection diagram of a wiring system in accordance with a preferred embodiment of the present invention. [Main component symbol description] 10 Client 101 Network firewall 11 Proxy server 12 Other client 21 Intermediary request 22 Network connection 埠 Assignment 23 Connection with proxy server 24 Connection with third party 30 Client 301 Internet Multi-Terminal Connection System 3011 Interface 3012 Contact Menu 3013 Internet Application Function Menu 14 201138399 3014 Instant Chat Application 3015 Remote Control Application 3016 Video Conferencing Application 302 Information Device 303 Network Firewall 31 Proxy Server 32 Calling Terminal 321 Internet Multi-Terminal Connection System 33 Calling Terminal 331 Internet Multi-End Connection System 41 Making Internet Connection Requirements 42 Server Sending Connection Requirements 43 Agreeing to Connect 44 Starting Network Address Translator Internet Protocol Checking Mechanism 45 Transferring Network Connections Information 46 Generating Direct Internet Connections 47 Enabling Internet Applications 51 Multiple Connections with Proxy Servers 52 Logical Communication 埠 Data 53 Generating Expected Network Communications埠 Data D1 Expected Network Communication 埠 Data D2 Expectations Network communication port information 15 201138399 D3 external data communication port
I Si 16I Si 16