Title of Invention	METHOD AND SYSTEM FOR IMPLEMENTING INSTANT MESSAGING BETWEEN EXTERNAL NETWORK CLIENT AND LOCAL AREA NETWORK CLIENT"
Abstract	The present invention provides a method and system for implementing instant messaging between an external network client and a Local Area Network (LAN) client, so as to solve the problem that an external network client has to establish and perform instant messaging with a LAN client through the WEB mode. The method includes: allocating, by a public network server, a session server and resources for the instant messaging, and sending the address of the session server and the resource identifier to a LAN gateway and the external network client; establishing, by the LAN gateway and the external network client, a connection with the session server respectively according to the address of the session server and the resource identifier; logging in, by the external network client, the LAN through the connection between the external network client and the session server and the connection between the session server and the LAN gateway; and performing the instant messaging with the LAN client. The system includes an external network client, a public network server, a LAN gateway and a session server. In accordance with the present invention, an external network client can perform instant messaging with a LAN client without protocol conversion.

Title of Invention

METHOD AND SYSTEM FOR IMPLEMENTING INSTANT MESSAGING BETWEEN EXTERNAL NETWORK CLIENT AND LOCAL AREA NETWORK CLIENT"

Abstract

The present invention provides a method and system for implementing instant messaging between an external network client and a Local Area Network (LAN) client, so as to solve the problem that an external network client has to establish and perform instant messaging with a LAN client through the WEB mode. The method includes: allocating, by a public network server, a session server and resources for the instant messaging, and sending the address of the session server and the resource identifier to a LAN gateway and the external network client; establishing, by the LAN gateway and the external network client, a connection with the session server respectively according to the address of the session server and the resource identifier; logging in, by the external network client, the LAN through the connection between the external network client and the session server and the connection between the session server and the LAN gateway; and performing the instant messaging with the LAN client. The system includes an external network client, a public network server, a LAN gateway and a session server. In accordance with the present invention, an external network client can perform instant messaging with a LAN client without protocol conversion.

Full Text	METHOD AND SYSTEM FOR IMPLEMENTING INSTANT MESSAGING BETWEEN EXTERNAL NETWORK CLIENT AND LOCAL AREA NETWORK CLIENT Field of the invention The present invention relates to a computer network technology, and particularly, to a method and system for implementing instant messaging between an external network client and a Local Area Network (LAN) client. Background of the invention Network instant messaging software has been accepted by most net users and has become a users' necessary tool, not only widely used in daily entertainment but also in users' work. For diversified requirements of users, various instant messaging providers have proposed group-based services. A user may not only experience the one-to-one communication, but also communicate to a group of persons which have the same character or category in a virtual space. Likewise, along with the development of group, some instant messaging providers propose LAN instant messaging software used by LAN users. The LAN instant messaging software is favorable to establish a flat communication platform within a minor enterprise, and a user may use the platform to communicate on work, so that the informatization of minor enterprises can be greatly improved. The LAN instant messaging software in the prior art performs the instant messaging between an external network client and a LAN client. Fig. 1 is an architecture diagram illustrating a system for implementing instant messaging between an external network client and a LAN client in the prior art. As shown in Fig.l, the system includes: a web page server adapted to convert the Hypertext Transfer Protocol (HTTP) to a private protocol used by LAN instant messaging and vice versa; a database server adapted to store the registration information when a LAN client registers a remote login service; a transfer server adapted to transfer data between a LAN gateway and the web page server; a LAN server, deployed inside the LAN, and adapted to provide a client with applications of basic services associated with instant messaging such as login, state and message forwarding as well as other extended services; a LAN gateway, deployed at the internal edge of a LAN, and adapted to provide data channels for the communication between the inside and outside of the LAN. The procedure of an external network client establishing and performing instant messaging with a LAN client over the above system is as follows. An external network client sends, through a WEB mode, to the web page server a login request carrying the identifier and password of the external network client, the identifier of the LAN to be logged in and a remote login password. The web page server converts the login request from the HTTP format into a private protocol format used by the LAN instant messaging, and sends the login request to the LAN gateway. The LAN gateway authenticates the user's login information. If the authentication is passed, the LAN gateway returns an authentication passing response to the external network client via the web page server. The external network client performs the instant messaging with a LAN client via. the web page server and the transfer server through the WEB mode after adding a LAN client to be communicated with as a contact man. The protocol conversion of the instant messages between the external network client and the LAN client is performed by the web page server. The disadvantages of the above procedure of an external network client establishing and performing instant messaging with a LAN client are as follows. An external network client has to log in a LAN tlirough the WEB mode to perform instant messaging with a LAN client. Since it requires protocol conversion, the clients only can send ordinary instant messages, perform the file transmission and send short messages, so the clients can not download an organization structure and also can not extend the functions of video and audio. In addition, only one long connection exists between the LAN gateway and the transfer server as well as between the web page server and the transfer server, which leads to bad expandability and it is difficult to support a large amount of clients. Summary of the invention Embodiments of the present invention provide a method and system for implementing instant messaging between an external network client and a LAN client, so as to solve the problem that the external network client has to establish and perfonn the instant messaging with the LAN client through the WEB mode in the prior art. The technical solution of the present invention is as follows. A method for implementing instant messaging between an external network client and a LAN client, including: allocating, by a public network server, a session server and resources for the instant messaging, and sending the address of the session server and the resource identifier to a LAN gateway and the external network client; establishing, by the LAN gateway and the external network client, a connection with the session server respectively according to the address of the session server and the resource identifier; logging in, by the external network client, the LAN through the connection between the external network client and the session server and the connection between the session server and the LAN gateway; and performing the instant messaging with the LAN client. A system for implementing instant messaging between an exten\al network client and a LAN client, including: an external network client, a public network server, a LAN gateway and a session server; wherein the public network server is adapted to allocate a session server and resources for the instant messaging and send the address of the session server and the resource identifier to the LAN gateway and the external network client; the LAN gateway is adapted to establish a connection with the session server according to the received address of the session server and the resource identifier, and establish a connection with the LAN server; the external network client is adapted to establish a connection with the session server according to the received address of the session server and the resource identifier, and log in the LAN through the connection between the external network client and the session server and the connection between the session server and the LAN gateway, and perform the instant messaging with the LAN client; the session server is adapted to transfer the data between the external network client and the LAN gateway. The technical advantages of the present invention are as follows. In accordance with the present invention, a public network server allocates a session server and resources for the instant messaging, and sends the address of the session server and the resource identifier to the LAN gateway and the external network client. The LAN gateway and the external network client establish a connection with the session server according to the address of the session server and the resource identifier respectively. So that the external network client may log in the LAN via the session server, i.e. without protocol conversion, while performing instant messaging with a LAN client. Furthermore, a strict encryption technology is applied to the data transmitted between the public network server and the LAN gateway in accordance with the present invention. The connection established by the public network server needs to be authenticated by digital signature technologies, so as to guarantee the security of user data adequately. Brief description of the drawings Fig.l is an architecture diagram illustrating a system for implementing instant messaging between an external network client and a LAN client in the prior art. Fig.2 is a flowchart of a LAN gateway logging in a public network server in accordance with the present invention. Fig.3 is a flowchart illustrating a method for implementing instant messaging between an external network client and a LAN client in accordance with a preferred embodiment of the present invention. Fig.4 is a structure diagram illustrating a system for implementing instant messaging between an external network client and a LAN client in accordance with the present invention. Fig.5 is a block diagram illustrating a system for implementing instant messaging between an external network client and a LAN client in accordance with the present invention. Detailed description of the invention Since an external network client has to establish and perform instant messaging with a LAN client through the WEB mode which requires protocol conversion, the clients can not download the organization structure and extend the functions of video and audio while logging in a LAN. The major idea of the present invention is to provide a solution for implementing instant messaging between an external network client and a LAN client. In this scheme, a public network server allocates a session server and resources for the instant communication, and sends the address of the session server and the resource identifier to the LAN gateway and the external network client. The LAN gateway and the external network client establish a connection with the session server according to the address of the session server and the resource identifier respectively. So that the external network client can perform the instant messaging with the designated LAN client by logging in the LAN through the connection between the external network client and the session server and the connection between the session server and the LAN gateway without protocol conversion. A detailed description of the implementation in accordance with the present invention is provided hereinafter with reference to the attached drawings. Fig. 2 is a flowchart of a LAN gateway logging in a public network server in accordance with the present invention. As shown in Fig.2, the LAN gateway is deployed within a LAN and adapted to provide the LAN with a data channel communicating with external networks. The public network server is operated and managed by an instant messaging service provider. When logging in the public network server, the LAN gateway sends the LAN identifier and login password to the public network server and the public network server authenticates the identification of the LAN. The specific process is as follows. Step S20: when logging in the public network server, the LAN gateway sends a login request carrying the LAN identifier and login password to the public network server. The LAN identifier is applied by the LAN during registering a remote login service, and the login password is set by the LAN during registering. After the registration is completed, the LAN identifier and login password are saved in the LAN information database at the side of the public network server. The LAN may reset the login password as required. After the login password is reset, the LAN sends the modified login password to the LAN information database to update the stored original login password. Step S21: after receiving the login request from the LAN gateway, the public network server authenticates the identification of LAN. The authentication includes: the public network server acquires the login password registered by the LAN from the LAN information database according to the LAN identifier carried by the login request, and determines whether the login password registered by the LAN matches the login password reported by the LAN gateway. If yes, the authentication is passed and proceeds to Step S22; otherwise, the authentication fails and proceeds to Step S23. Step S22: the public network server creates a key used for communicating with the LAN gateway, returns a login request acceptance message carrying the key to the LAN gateway. The LAN gateway establishes a long connection with the public network server. The data between the LAN gateway and the public network server is encrypted and decrypted by using the key. Step S23: the public network server returns a login request rejection message to the LAN gateway, and the procedure is over. Fig. 3 is a flowchart illustrating a method for implementing instant messaging between an external network client and a LAN client in accordance with a preferred embodiment of the present invention. As shown in Fig.3, the implementation procedure is mainly as follows. Step S30: the external network client sends to a public network server a user authentication request carrying the identifier and password of the external network client as well as the identifier of the LAN to be logged in. Step S31: the public network server searches a network connection corresponding to the LAN gateway according to the identifier of the LAN to be logged in, and forwards the LAN login request from the external network client to the LAN gateway according to the searched network connection. Step S32: the LAN gateway authenticates the identification and rights of the external network client according to the identifier and password of the external network client carried by the user authentication request. If the authentication is passed, the LAN gateway returns an authentication success message to the public network server, and proceeds to Step S33; otherwise, the LAN gateway returns an authentication failure message to the public network server, and the procedure is over. Step S33: the public network server allocates a session server and channel resources for the instant messaging according to the load condition of each session server connected with the public network server, and generates a digital signature based on the signature algorithm predetermined with the session server according to current time and the channel resource identifier. The public network server periodically acquires the load condition parameter of each session server connected thereto as well as the number of LANs and external network clients supported by each session server. The load condition parameter indicates the CPU utilization, the network bandwidth utilization and the memory usage status of the session server. In general, there are multiple session servers connected to the public network server, but it is possible that there is only one session server connected to the public network server in accordance with the present invention. When the public network server only connects to one session server, in the step 833, the public network server only allocates the channel resources for the instant messaging, and generates a digital signature based on the signature algorithm predetennined with the session server according to current time and the channel resource identifier. Step S34: the public network server sends the address of the session server, the channel resource identifier and the generated digital signature to the LAN gateway. Step S3 5: the LAN gateway connects to the corresponding session server according to the received address of the session server, and sends to the session server a LAN gateway login request carrying the generated digital signature and the channel resource identifier. Steps S36a'^S36b: the session server receives the LAN gateway login request sent by the LAN gateway, parses the digital signature carried by the LAN gateway login request according to the signature algorithm predetermined with the public network server, detennines whether the signature is expired, and determines whether the channel resource identifier parsed from the digital signature is same as the channel resource identifier carried by the LAN gateway login request; if the channel resource identifiers are same and the signature is not expired, keeps connecting with the LAN gateway, and returns a LAN gateway login success message to the public network server via the LAN gateway. Steps S37a-'S37b: after receiving the LAN gateway login success message, the public network server informs the external network client of the address of the session server, the channel resource identifier and the generated digital signature. The external network client connects to the corresponding session server according to the received address of the session server, and sends to the session server a user login request carrying the generated digital signature and the channel resource identifier. Steps S38a-'S38b: the session server receives the user login request sent by the external network client, parses the digital signature carried by the user login request according to the signature algorithm predetermined with the public network server, determines whether the signature is expired, and determines whether the channel resource identifier parsed the digital signature is same as the channel resource identifier carried by the user login request; if the channel resource identifiers are same and the signature is not expired, keeps connecting with the external network client, and returns a user login success message to the external network client. Steps S39a-'S39b: the external network client sends to the LAN gateway a LAN connect request carrying the IP address and port number of a LAN server via the session server. The LAN gateway connects to the LAN server. The LAN server returns a connection establishment success message to the external network client via the LAN gateway and the session server. Steps S40a^S40b: the external network client logs in the LAN server; the LAN server sends the organization structure of the LAN client to the external network client. Steps S41a--S41b: the external network client selects a target contact man from the organization structure, and performs the instant messaging with the target contact man via the session server. When sending data, the external network client sends the data to the LAN server through the connection between the external network client and the session server, the connection between the session server and the LAN gateway and the connection between the LAN gateway and the LAN server; the LAN server forwards the data to the target contact man. When receiving data, the LAN server forwards the data which receiver is the external network client to the external network client through the connection between the LAN gateway and the session server and the connection between the session server and the external network client. The external network client performs the instant messaging with the LAN client using the existing protocol, which will not be further described herein. Gon-esponding to the above method, the present invention further provides a system for implementing instant messaging between an external network client and a LAN client. Fig. 4 is a structure diagram illustrating a system for implementing instant messaging between an external network client and a LAN client. As shown in Fig.4, the system includes: an external network client 10, a public network server 20, a LAN gateway 30, a session server 40, a registration server 50 and a database server 60. The external network client 10 sends to a public network server 20 a user authentication request carrying the identifier and password of the external network client 10 as well as the identifier of the LAN to be logged in. The public network server 20 forwards the user authentication request to the LAN gateway 30 according to the identifier of the LAN to be logged in. The LAN gateway 30 authenticates the identification and rights of the external network client 10, returns an authentication success message to the public network server 20 when the authentication is passed, returns an authentication failure message to the public network server 20 when the authentication fails. The public network server 20 allocates a session server 40 and channel resources for the instant messaging when receiving the authentication success message, and generates a digital signature based on the signature algorithm predetenmined with the session server 40 according to current time and the channel resource identifier, and sends the address of the session server 40, the channel resource identifier and the generated digital signature to the LAN gateway 30 and the external network client 10. The LAN gateway 30 sends to the session server 40 a LAN gateway login request carrying the generated digital signature and the channel resource identifier according to the received address of the session server 40 and the identifier of the channel resources. The session server 40 receives the LAN gateway login request sent by the LAN gateway 30, parses the digital signature carried by the LAN gateway login request according to the signature algorithm predetermined with the public network server 20, determines whether the signature is expired, and determines whether the channel resource identifier parsed from the digital signature is same as the channel resource identifier carried by the LAN gateway login request; keeps connecting with the LAN gateway 30 when the channel resource identifiers are same and the signature is not expired. The external network client 10 sends to the session server 40 a user login request carrying the digital signature and the channel resource identifier according to the received address of the session server 40 and the channel resource identifier. The session server 40 receives the user login request sent by the external network client 10, parses the digital signature carried by the user login request according to the signature algorithm predetermined with the public network server 20, determines whether the signature is expired, and determines whether the channel resource identifier parsed from the digital signature is same as the channel resource identifier carried by the user login request; keeps connecting with the external network client 10 when the channel resource identifiers are same and the signature is not expired. The extemal network client 10 sends to the LAN gateway 30 a LAN connect request carrying the IP address and port number of a LAN server via the session server 40; the LAN gateway 30 connects to the LAN server; the LAN server retums a connection establishment success message to the extemal network client 10 via the LAN gateway 30 and the session sei'ver 40. The extemal network client 10 logs in the LAN server via the session server 40 and the LAN gateway 30, and performing instant messaging with the LAN client. In addition the registration server 50 provides the LAN with a remote login registering service, and allocates the LAN identifier for the LAN while the LAN gateway 30 registers a remote login service. The database server 60 records the acquired LAN identifier and the password set correspondingly while the LAN gateway 30 registers a remote login service. Here, the public network server 20 also can send the address of the session server 40, the channel resource identifier and the generated digital signature to the LAN gateway 30 first, and after receiving the LAN gateway login success message from the session server 40, then sends the address of the session server 40, the channel resource identifier and the generated digital signature to the external network client 10. Fig. 5 is a block diagram illustrating a system for implementing instant messaging between an external network client and a LAN client in accordance with the present invention. As shown in Fig. 5, the external network client 10 specifically includes: a request sending module 101, adapted to send to a public network server 20 a user authentication request of the extemal network client 10 carrying the identifiier and password of the external network client 10 as well as the identifier of the LAN to be logged in; a first connection establishing module 102, adapted to connect with the session server 40, and send to the session server 40 a user login request carrying a digital signature generated by the public network server20; an instant messaging module 103, adapted to perform instant messaging with a designated LAN client through the connection between the extemal network client 10 with the session server 40, the connection between the session server 40 and the LAN gateway 30 as well as the connection between the LAN gateway 30 and the LAN server. The public network server 20 specifically includes: a request forwarding module 201,adapted to search a network connection corresponding to the LAN gateway 30 according to the identifier of the LAN to be logged in carried by the user authentication request, and forward the user authentication request to the LAN gateway 30 for authentication according to the searched network connection; an allocation module 202, adapted to allocate a session server 40, channel resources and a digital signature for the instant messaging when the request forwarding module 201 receives an authentication success message from the LAN gateway 30, and send the address of the session server 40, the channel resource identifier and the digital signature to the LAN gateway 30 and the extemal network client 10; a parameter acquiring module 203, adapted to periodically acquire the load condition parameters of each session server 40 as well as the number of LANs and extemal network clients 10 supported by each session server 40; a third authentication module 204, adapted to authenticate the LAN identifier and password; generate a key for encrypting/decrypting the data between the public network server 20 and the LAN gateway 30 when the authentication is passed, and send the key to the LAN gateway 30. The LAN gateway 30 specifically includes: a first authentication module 301, adapted to authenticate the identification and rights of the external network client 10 after receiving the user authentication request from the external network client 10; return a authentication success message to the public network server 20 when the authentication is passed; a second connection establishing module 302, adapted to connect with the session server 40, and send to the session server 40 a LAN gateway login request; a second transfer module 303, adapted to transfer the data between the session server 40 and the LAN server; a login module 304, adapted to send to the public network server 20 a login request carrying the LAN identifier and password. The session server 40 of the system specifically includes: a second authentication module 401, adapted to receive a LAN gateway login request from the LAN gateway 30, authenticate the digital signature earned by the LAN gateway login request; keep connecting with the LAN gateway 30 according to the channel resource identifier carried by the LAN gateway login request when the authentication is passed; and receive a user login request from the external network client 10, authenticate the digital signature carried by the user login request; keep connecting with the external network client 10 according to the channel resource identifier carried by the user login request when the authentication is passed; a first transfer module 402, adapted to transfer the data between the external network client 10 and the LAN gateway 30; a parameter statistic module 403, adapted to calculate load condition parameter of itself as well as the number of LANs and external network clients 10 supported by itself. Other technical implementation details of the system refer to the corresponding technical implementation details described by the above method principle in accordance with the present invention, which will not be further described herein. Obviously, those skilled in the art may make numerous changes and variations on the solution of the present invention without departing from the spirit and scope thereof. Accordingly, it is intended that the present invention includes the changes and variations in case that such changes and variations come within the scope as set forth in the appended claims and the equivalent techniques thereof. Claims 1. A method for implementing instant messaging between an external network client and,a Local Area Network (LAN) client, comprising: allocating, by a public network server, a session server and resources for the instant messaging, and sending the address of the session server and the resource identifier to a LAN gateway and the external network client; establishing, by the LAN gateway and the external network client, a connection with the session server respectively according to the address of the session server and the resource identifier; logging in, by the external network client, the LAN through the connection between the external network client and the session server and the connection between the session server and the LAN gateway, and performing the instant messaging with the LAN client. 2. The method of Claim 1, before the allocating step, further comprising: sending, by the external network client, the identifier and password of the external network client as well as the identifier of the LAN to be logged in to the LAN gateway via the public network server; authenticating, by the LAN gateway, the external network client according to the identifier and password of the external network client as well as the identifier of the LAN to be logged in , and sending an authentication success message to the public network server when the authentication is passed. 3. The method of Claim 2, wherein the sending step comprises: sending, by the external network client, the identifier and password of the external network client as well as the identifier of the LAN to be logged in to the public network server; searching, by the public network server, a corresponding LAN gateway according to the identifier of the LAN to be logged in, and forwarding the identifier and password of the external network client as well as the identifier of the LAN to be logged in to the LAN gateway; wherein the authenticating step comprises: authenticating, by the LAN gateway, the identification and rights of external network client according to the identifier and password of the external network client. 4. The method of Claim 1, wherein the allocating step comprises: allocating, by the public network server, a session server and resources for the instant communication according to the load condition of each session server. 5. The method of Claim 1, fiirther comprising: 12 generating, by the public network server, a digital signature according to a signature algorithm predetermined with the session server, and sending the generated digital signature to the LAN gateway; wherein, establishing, by the LAN gateway, a connection with the session server comprises: sending, by the LAN gateway, the digital signature and the resource identifier to the session server; authenticating, by the session server, the digital signature; returning a LAN gateway login success message to the LAN gateway when the authentication is passed; wherein, establishing, by the external network client, a connection with the session server comprises: sending, by the external network client, the digital signature and the resource identifier to the session server; authenticating, by the session server, the digital signature; returning a user login success message to the external network client when the authentication is passed; 6. The method of Claim 5, wherein the authenticating step comprises: determining whether the digital signature is expired; determining whether the resource identifier parsed from the digital signature is same as the resource identifier received from the external network client or the LAN gateway. 7. The method of Claim 1, wherein the logging in step comprises: sending, by the external network client, the IP address and port number of a LAN server to the LAN gateway through the connection between the external network client and the session server and the connection between the session server and the LAN gateway; establishing, by the LAN gateway, a connection with the LAN server ; logging in, by the external network client, the LAN through the connection between the external network client and the session server and the connection between the session server and the LAN gateway as well as the connection between the LAN gateway and the LAN server, 8. The method of Claim 4, further comprising: acquiring, by the public network server, the load condition parameters of each session server as well as the number of LANs and external network clients supported by each session server periodically. 9. The method of Claim 1, further comprising: reporting, by the LAN gateway, the identifier and password of LAN to the public network server for authentication while logging in the public network server; generating, by the public network server, a key when the authentication is passed, and sending the key to the LAN gateway; encrypting and decrypting the data between the LAN gateway and the public network server with the key. 10. The method of Claim 9, further comprising: recording, by the LAN gateway, the identifier and password of LAN in a LAN information database at side of the public network server while registering a remote login service. wherein the reporting step comprises: authenticating, by the public network server, whether the login password registered by the LAN matches the login password reported by the LAN gateway. 11. A system for implementing instant messaging between an external network client and a Local Area Network (LAN) client, comprising: an external network client, a public network server, a LAN gateway and a session server; wherein the public network server is adapted to allocate a session server and resources for the instant messaging and send the address of the session server and the resource identifier to the LAN gateway and the-extemal network client; the LAN gateway is adapted to establish a connection with the session server according to the received address of the session server and the resource identifier, and establish a connection with the LAN server; the external network client is adapted to establish a connection with the session server according to the received address of the session server and the resource identifier, and log in the LAN through the connection between the external network client and the session server and the connection between the session server and the LAN gateway, and perform the instant messaging with the LAN client; the session server is adapted to transfer the data between the external network client and the LAN gateway. 12. The system of Claim 11, wherein the external network client comprises: a request sending module, adapted to send the identifier and password of the external network client as well as the identifier of the LAN to be logged in to the public network server; a first connection establishing module, adapted to connect with the session server, and send the resource identifier and the digital signature generated by the public network server to the session server; an instant messaging module, adapted to performing instant messaging with the LAN client through the connection between the external network client and the session server, the connection between the session server and the LAN gateway as well as the connection between the LAN gateway and the LAN server. 13. The system of Claim 11, wherein the public network server comprises: a request forwarding module, adapted to search a network connection corresponding to the LAN gateway according to the identifier of the LAN to be logged in from the external network client, and forward the identifier and password of the external network client as well as the identifier of the LAN to be logged in to the LAN gateway for authentication according to the searched network connection; an allocation module, adapted to allocate a session server, channel resources and a digital signature for the instant messaging when the request forwarding module receives an authentication success message from the LAN gateway, and send the address of the session server, the resource identifier and the digital signature to the LAN gateway and the external network client. 14. The system of Claim 11, wherein the LAN gateway comprises: a first authentication module, adapted to authenticate the identification and rights of the external network client after receiving the identifier and password of the external network client as well as the identifier of the LAN to be logged in from the external network client; return a authentication success message to the public network server when the authentication is passed; a second connection establishing module, adapted to connect with the session server, and send the resource identifier and the digital signature generated by the public network server to the session server; a second transfer module, adapted to transfer the data between the session server and the LAN server. 15. The system of Claim 11, wherein the session server comprises: a second authentication module, adapted to receive the resource identifier and the digital signature from the LAN gateway, authenticate the digital signature; keep connecting with the LAN gateway according to the resource identifier when the authentication is passed; and receive the resource identifier and the digital signature from the external network client authenticate the digital signature; keep connecting with the external network client according to the resource identifier when the authentication is passed; a first transferring module, adapted to transfer the data between the external network client and the LAN gateway. 16. The system of Claim 11, wherein the public network server further comprises: a parameter acquiring module, adapted to periodically acquire the load condition parameters of each session server as well as the number of LANs and external network clients supported by each session server; wherein, the session server further comprises: a parameter statistic module, adapted to calculate load condition parameter of itself as well as the number of LANs and external network clients supported by itself 17. The system of Claim 11, wherein the LAN gateway further comprises: a login module, adapted to send the LAN identifier and password to the public network server; wherein, the public network server further comprises: a third authentication module, adapted to authenticate the LAN identifier and password; generate a key when the authentication is passed and send the key to the LAN gateway. 18. The system of Claim 11, further comprising: a registration server, adapted to provide the LAN with a remote login registering service, and allocate the LAN identifier for the LAN when the LAN gateway registers a remote login service; a database server, adapted to record the acquired LAN identifier and the correspondingly password when the LAN gateway registers a remote login service.

Full Text

METHOD AND SYSTEM FOR IMPLEMENTING INSTANT MESSAGING BETWEEN EXTERNAL NETWORK CLIENT AND
LOCAL AREA NETWORK CLIENT
Field of the invention
The present invention relates to a computer network technology, and particularly, to a method and system for implementing instant messaging between an external network client and a Local Area Network (LAN) client.
Background of the invention
Network instant messaging software has been accepted by most net users and has become a users' necessary tool, not only widely used in daily entertainment but also in users' work. For diversified requirements of users, various instant messaging providers have proposed group-based services. A user may not only experience the one-to-one communication, but also communicate to a group of persons which have the same character or category in a virtual space. Likewise, along with the development of group, some instant messaging providers propose LAN instant messaging software used by LAN users. The LAN instant messaging software is favorable to establish a flat communication platform within a minor enterprise, and a user may use the platform to communicate on work, so that the informatization of minor enterprises can be greatly improved.
The LAN instant messaging software in the prior art performs the instant messaging between an external network client and a LAN client. Fig. 1 is an architecture diagram illustrating a system for implementing instant messaging between an external network client and a LAN client in the prior art. As shown in Fig.l, the system includes:
a web page server adapted to convert the Hypertext Transfer Protocol (HTTP) to a private protocol used by LAN instant messaging and vice versa;
a database server adapted to store the registration information when a LAN client registers a remote login service;
a transfer server adapted to transfer data between a LAN gateway and the web page server;
a LAN server, deployed inside the LAN, and adapted to provide a client with applications of basic services associated with instant messaging such as login, state and message forwarding as well as other extended services;

a LAN gateway, deployed at the internal edge of a LAN, and adapted to provide data channels for the communication between the inside and outside of the LAN.
The procedure of an external network client establishing and performing instant messaging with a LAN client over the above system is as follows.
An external network client sends, through a WEB mode, to the web page server a login request carrying the identifier and password of the external network client, the identifier of the LAN to be logged in and a remote login password.
The web page server converts the login request from the HTTP format into a private protocol format used by the LAN instant messaging, and sends the login request to the LAN gateway.
The LAN gateway authenticates the user's login information. If the authentication is passed, the LAN gateway returns an authentication passing response to the external network client via the web page server.
The external network client performs the instant messaging with a LAN client via. the web page server and the transfer server through the WEB mode after adding a LAN client to be communicated with as a contact man. The protocol conversion of the instant messages between the external network client and the LAN client is performed by the web page server.
The disadvantages of the above procedure of an external network client establishing and performing instant messaging with a LAN client are as follows.
An external network client has to log in a LAN tlirough the WEB mode to perform instant messaging with a LAN client. Since it requires protocol conversion, the clients only can send ordinary instant messages, perform the file transmission and send short messages, so the clients can not download an organization structure and also can not extend the functions of video and audio.
In addition, only one long connection exists between the LAN gateway and the transfer server as well as between the web page server and the transfer server, which leads to bad expandability and it is difficult to support a large amount of clients.
Summary of the invention
Embodiments of the present invention provide a method and system for implementing instant messaging between an external network client and a LAN client, so as to solve the problem that the external network client has to establish and perfonn the instant messaging with the LAN client through the WEB mode in the prior art.

The technical solution of the present invention is as follows.
A method for implementing instant messaging between an external network client and a LAN client, including:
allocating, by a public network server, a session server and resources for the instant messaging, and sending the address of the session server and the resource identifier to a LAN gateway and the external network client;
establishing, by the LAN gateway and the external network client, a connection with the session server respectively according to the address of the session server and the resource identifier;
logging in, by the external network client, the LAN through the connection between the external network client and the session server and the connection between the session server and the LAN gateway; and performing the instant messaging with the LAN client.
A system for implementing instant messaging between an exten\al network client and a LAN client, including: an external network client, a public network server, a LAN gateway and a session server; wherein
the public network server is adapted to allocate a session server and resources for the instant messaging and send the address of the session server and the resource identifier to the LAN gateway and the external network client;
the LAN gateway is adapted to establish a connection with the session server according to the received address of the session server and the resource identifier, and establish a connection with the LAN server;
the external network client is adapted to establish a connection with the session server according to the received address of the session server and the resource identifier, and log in the LAN through the connection between the external network client and the session server and the connection between the session server and the LAN gateway, and perform the instant messaging with the LAN client;
the session server is adapted to transfer the data between the external network client and the LAN gateway.
The technical advantages of the present invention are as follows.
In accordance with the present invention, a public network server allocates a session server and resources for the instant messaging, and sends the address of the session server and the resource identifier to the LAN gateway and the external network client. The LAN gateway and the external network client establish a connection with the session server according to the address of the session server and the resource identifier respectively. So that the external network client may

log in the LAN via the session server, i.e. without protocol conversion, while performing instant messaging with a LAN client.
Furthermore, a strict encryption technology is applied to the data transmitted between the public network server and the LAN gateway in accordance with the present invention. The connection established by the public network server needs to be authenticated by digital signature technologies, so as to guarantee the security of user data adequately.
Brief description of the drawings
Fig.l is an architecture diagram illustrating a system for implementing instant messaging between an external network client and a LAN client in the prior art.
Fig.2 is a flowchart of a LAN gateway logging in a public network server in accordance with the present invention.
Fig.3 is a flowchart illustrating a method for implementing instant messaging between an external network client and a LAN client in accordance with a preferred embodiment of the present invention.
Fig.4 is a structure diagram illustrating a system for implementing instant messaging between an external network client and a LAN client in accordance with the present invention.
Fig.5 is a block diagram illustrating a system for implementing instant messaging between an external network client and a LAN client in accordance with the present invention.
Detailed description of the invention
Since an external network client has to establish and perform instant messaging with a LAN client through the WEB mode which requires protocol conversion, the clients can not download the organization structure and extend the functions of video and audio while logging in a LAN. The major idea of the present invention is to provide a solution for implementing instant messaging between an external network client and a LAN client. In this scheme, a public network server allocates a session server and resources for the instant communication, and sends the address of the session server and the resource identifier to the LAN gateway and the external network client. The LAN gateway and the external network client establish a connection with the session server according to the address of the session server and the resource identifier respectively. So that the external network client can perform the instant messaging with the designated LAN client by logging in the LAN through the connection between the external network client and the session server and the connection between the session server and the LAN gateway without protocol conversion.

A detailed description of the implementation in accordance with the present invention is provided hereinafter with reference to the attached drawings.
Fig. 2 is a flowchart of a LAN gateway logging in a public network server in accordance with the present invention. As shown in Fig.2, the LAN gateway is deployed within a LAN and adapted to provide the LAN with a data channel communicating with external networks. The public network server is operated and managed by an instant messaging service provider. When logging in the public network server, the LAN gateway sends the LAN identifier and login password to the public network server and the public network server authenticates the identification of the LAN. The specific process is as follows.
Step S20: when logging in the public network server, the LAN gateway sends a login request carrying the LAN identifier and login password to the public network server.
The LAN identifier is applied by the LAN during registering a remote login service, and the login password is set by the LAN during registering. After the registration is completed, the LAN identifier and login password are saved in the LAN information database at the side of the public network server.
The LAN may reset the login password as required. After the login password is reset, the LAN sends the modified login password to the LAN information database to update the stored original login password.
Step S21: after receiving the login request from the LAN gateway, the public network server authenticates the identification of LAN. The authentication includes: the public network server acquires the login password registered by the LAN from the LAN information database according to the LAN identifier carried by the login request, and determines whether the login password registered by the LAN matches the login password reported by the LAN gateway. If yes, the authentication is passed and proceeds to Step S22; otherwise, the authentication fails and proceeds to Step S23.
Step S22: the public network server creates a key used for communicating with the LAN gateway, returns a login request acceptance message carrying the key to the LAN gateway. The LAN gateway establishes a long connection with the public network server. The data between the LAN gateway and the public network server is encrypted and decrypted by using the key.
Step S23: the public network server returns a login request rejection message to the LAN gateway, and the procedure is over.

Fig. 3 is a flowchart illustrating a method for implementing instant messaging between an external network client and a LAN client in accordance with a preferred embodiment of the present invention. As shown in Fig.3, the implementation procedure is mainly as follows.
Step S30: the external network client sends to a public network server a user authentication request carrying the identifier and password of the external network client as well as the identifier of the LAN to be logged in.
Step S31: the public network server searches a network connection corresponding to the LAN gateway according to the identifier of the LAN to be logged in, and forwards the LAN login request from the external network client to the LAN gateway according to the searched network connection.
Step S32: the LAN gateway authenticates the identification and rights of the external network client according to the identifier and password of the external network client carried by the user authentication request. If the authentication is passed, the LAN gateway returns an authentication success message to the public network server, and proceeds to Step S33; otherwise, the LAN gateway returns an authentication failure message to the public network server, and the procedure is over.
Step S33: the public network server allocates a session server and channel resources for the instant messaging according to the load condition of each session server connected with the public network server, and generates a digital signature based on the signature algorithm predetermined with the session server according to current time and the channel resource identifier.
The public network server periodically acquires the load condition parameter of each session server connected thereto as well as the number of LANs and external network clients supported by each session server. The load condition parameter indicates the CPU utilization, the network bandwidth utilization and the memory usage status of the session server.
In general, there are multiple session servers connected to the public network server, but it is possible that there is only one session server connected to the public network server in accordance with the present invention. When the public network server only connects to one session server, in the step 833, the public network server only allocates the channel resources for the instant messaging, and generates a digital signature based on the signature algorithm predetennined with the session server according to current time and the channel resource identifier.
Step S34: the public network server sends the address of the session server, the channel resource identifier and the generated digital signature to the LAN gateway.

Step S3 5: the LAN gateway connects to the corresponding session server according to the received address of the session server, and sends to the session server a LAN gateway login request carrying the generated digital signature and the channel resource identifier.
Steps S36a'^S36b: the session server receives the LAN gateway login request sent by the LAN gateway, parses the digital signature carried by the LAN gateway login request according to the signature algorithm predetermined with the public network server, detennines whether the signature is expired, and determines whether the channel resource identifier parsed from the digital signature is same as the channel resource identifier carried by the LAN gateway login request; if the channel resource identifiers are same and the signature is not expired, keeps connecting with the LAN gateway, and returns a LAN gateway login success message to the public network server via the LAN gateway.
Steps S37a-'S37b: after receiving the LAN gateway login success message, the public network server informs the external network client of the address of the session server, the channel resource identifier and the generated digital signature. The external network client connects to the corresponding session server according to the received address of the session server, and sends to the session server a user login request carrying the generated digital signature and the channel resource identifier.
Steps S38a-'S38b: the session server receives the user login request sent by the external network client, parses the digital signature carried by the user login request according to the signature algorithm predetermined with the public network server, determines whether the signature is expired, and determines whether the channel resource identifier parsed the digital signature is same as the channel resource identifier carried by the user login request; if the channel resource identifiers are same and the signature is not expired, keeps connecting with the external network client, and returns a user login success message to the external network client.
Steps S39a-'S39b: the external network client sends to the LAN gateway a LAN connect request carrying the IP address and port number of a LAN server via the session server. The LAN gateway connects to the LAN server. The LAN server returns a connection establishment success message to the external network client via the LAN gateway and the session server.
Steps S40a^S40b: the external network client logs in the LAN server; the LAN server sends the organization structure of the LAN client to the external network client.
Steps S41a--S41b: the external network client selects a target contact man from the organization structure, and performs the instant messaging with the target contact man via the session server.

When sending data, the external network client sends the data to the LAN server through the connection between the external network client and the session server, the connection between the session server and the LAN gateway and the connection between the LAN gateway and the LAN server; the LAN server forwards the data to the target contact man.
When receiving data, the LAN server forwards the data which receiver is the external network client to the external network client through the connection between the LAN gateway and the session server and the connection between the session server and the external network client.
The external network client performs the instant messaging with the LAN client using the existing protocol, which will not be further described herein.
Gon-esponding to the above method, the present invention further provides a system for implementing instant messaging between an external network client and a LAN client. Fig. 4 is a structure diagram illustrating a system for implementing instant messaging between an external network client and a LAN client. As shown in Fig.4, the system includes: an external network client 10, a public network server 20, a LAN gateway 30, a session server 40, a registration server 50 and a database server 60.
The external network client 10 sends to a public network server 20 a user authentication request carrying the identifier and password of the external network client 10 as well as the identifier of the LAN to be logged in. The public network server 20 forwards the user authentication request to the LAN gateway 30 according to the identifier of the LAN to be logged in. The LAN gateway 30 authenticates the identification and rights of the external network client 10, returns an authentication success message to the public network server 20 when the authentication is passed, returns an authentication failure message to the public network server 20 when the authentication fails.
The public network server 20 allocates a session server 40 and channel resources for the instant messaging when receiving the authentication success message, and generates a digital signature based on the signature algorithm predetenmined with the session server 40 according to current time and the channel resource identifier, and sends the address of the session server 40, the channel resource identifier and the generated digital signature to the LAN gateway 30 and the external network client 10.
The LAN gateway 30 sends to the session server 40 a LAN gateway login request carrying the generated digital signature and the channel resource identifier according to the received address of the session server 40 and the identifier of the channel resources.

The session server 40 receives the LAN gateway login request sent by the LAN gateway 30, parses the digital signature carried by the LAN gateway login request according to the signature algorithm predetermined with the public network server 20, determines whether the signature is expired, and determines whether the channel resource identifier parsed from the digital signature is same as the channel resource identifier carried by the LAN gateway login request; keeps connecting with the LAN gateway 30 when the channel resource identifiers are same and the signature is not expired.
The external network client 10 sends to the session server 40 a user login request carrying the digital signature and the channel resource identifier according to the received address of the session server 40 and the channel resource identifier.
The session server 40 receives the user login request sent by the external network client 10, parses the digital signature carried by the user login request according to the signature algorithm predetermined with the public network server 20, determines whether the signature is expired, and determines whether the channel resource identifier parsed from the digital signature is same as the channel resource identifier carried by the user login request; keeps connecting with the external network client 10 when the channel resource identifiers are same and the signature is not expired.
The extemal network client 10 sends to the LAN gateway 30 a LAN connect request carrying the IP address and port number of a LAN server via the session server 40; the LAN gateway 30 connects to the LAN server; the LAN server retums a connection establishment success message to the extemal network client 10 via the LAN gateway 30 and the session sei'ver 40.
The extemal network client 10 logs in the LAN server via the session server 40 and the LAN gateway 30, and performing instant messaging with the LAN client.
In addition the registration server 50 provides the LAN with a remote login registering service, and allocates the LAN identifier for the LAN while the LAN gateway 30 registers a remote login service.
The database server 60 records the acquired LAN identifier and the password set correspondingly while the LAN gateway 30 registers a remote login service.
Here, the public network server 20 also can send the address of the session server 40, the channel resource identifier and the generated digital signature to the LAN gateway 30 first, and after receiving the LAN gateway login success message from the session server 40, then sends the

address of the session server 40, the channel resource identifier and the generated digital signature to the external network client 10.
Fig. 5 is a block diagram illustrating a system for implementing instant messaging between an external network client and a LAN client in accordance with the present invention.
As shown in Fig. 5, the external network client 10 specifically includes:
a request sending module 101, adapted to send to a public network server 20 a user authentication request of the extemal network client 10 carrying the identifiier and password of the external network client 10 as well as the identifier of the LAN to be logged in;
a first connection establishing module 102, adapted to connect with the session server 40, and send to the session server 40 a user login request carrying a digital signature generated by the public network server20;
an instant messaging module 103, adapted to perform instant messaging with a designated LAN client through the connection between the extemal network client 10 with the session server 40, the connection between the session server 40 and the LAN gateway 30 as well as the connection between the LAN gateway 30 and the LAN server.
The public network server 20 specifically includes:
a request forwarding module 201,adapted to search a network connection corresponding to the LAN gateway 30 according to the identifier of the LAN to be logged in carried by the user authentication request, and forward the user authentication request to the LAN gateway 30 for authentication according to the searched network connection;
an allocation module 202, adapted to allocate a session server 40, channel resources and a digital signature for the instant messaging when the request forwarding module 201 receives an authentication success message from the LAN gateway 30, and send the address of the session server 40, the channel resource identifier and the digital signature to the LAN gateway 30 and the extemal network client 10;
a parameter acquiring module 203, adapted to periodically acquire the load condition parameters of each session server 40 as well as the number of LANs and extemal network clients 10 supported by each session server 40;
a third authentication module 204, adapted to authenticate the LAN identifier and password; generate a key for encrypting/decrypting the data between the public network server 20 and the LAN gateway 30 when the authentication is passed, and send the key to the LAN gateway 30.
The LAN gateway 30 specifically includes:

a first authentication module 301, adapted to authenticate the identification and rights of the external network client 10 after receiving the user authentication request from the external network client 10; return a authentication success message to the public network server 20 when the authentication is passed;
a second connection establishing module 302, adapted to connect with the session server 40, and send to the session server 40 a LAN gateway login request;
a second transfer module 303, adapted to transfer the data between the session server 40 and the LAN server;
a login module 304, adapted to send to the public network server 20 a login request carrying the LAN identifier and password.
The session server 40 of the system specifically includes:
a second authentication module 401, adapted to receive a LAN gateway login request from the LAN gateway 30, authenticate the digital signature earned by the LAN gateway login request; keep connecting with the LAN gateway 30 according to the channel resource identifier carried by the LAN gateway login request when the authentication is passed; and receive a user login request from the external network client 10, authenticate the digital signature carried by the user login request; keep connecting with the external network client 10 according to the channel resource identifier carried by the user login request when the authentication is passed;
a first transfer module 402, adapted to transfer the data between the external network client 10 and the LAN gateway 30;
a parameter statistic module 403, adapted to calculate load condition parameter of itself as well as the number of LANs and external network clients 10 supported by itself.
Other technical implementation details of the system refer to the corresponding technical implementation details described by the above method principle in accordance with the present invention, which will not be further described herein.
Obviously, those skilled in the art may make numerous changes and variations on the solution of the present invention without departing from the spirit and scope thereof. Accordingly, it is intended that the present invention includes the changes and variations in case that such changes and variations come within the scope as set forth in the appended claims and the equivalent techniques thereof.

Claims
1. A method for implementing instant messaging between an external network client and,a Local Area Network (LAN) client, comprising:
allocating, by a public network server, a session server and resources for the instant messaging, and sending the address of the session server and the resource identifier to a LAN gateway and the external network client;
establishing, by the LAN gateway and the external network client, a connection with the session server respectively according to the address of the session server and the resource identifier;
logging in, by the external network client, the LAN through the connection between the external network client and the session server and the connection between the session server and the LAN gateway, and performing the instant messaging with the LAN client.
2. The method of Claim 1, before the allocating step, further comprising:
sending, by the external network client, the identifier and password of the external network client as well as the identifier of the LAN to be logged in to the LAN gateway via the public network server;
authenticating, by the LAN gateway, the external network client according to the identifier and password of the external network client as well as the identifier of the LAN to be logged in , and sending an authentication success message to the public network server when the authentication is passed.
3. The method of Claim 2, wherein the sending step comprises:
sending, by the external network client, the identifier and password of the external network client as well as the identifier of the LAN to be logged in to the public network server;
searching, by the public network server, a corresponding LAN gateway according to the identifier of the LAN to be logged in, and forwarding the identifier and password of the external network client as well as the identifier of the LAN to be logged in to the LAN gateway;
wherein the authenticating step comprises:
authenticating, by the LAN gateway, the identification and rights of external network client according to the identifier and password of the external network client.
4. The method of Claim 1, wherein the allocating step comprises:
allocating, by the public network server, a session server and resources for the instant communication according to the load condition of each session server.
5. The method of Claim 1, fiirther comprising:
12

generating, by the public network server, a digital signature according to a signature algorithm predetermined with the session server, and sending the generated digital signature to the LAN gateway;
wherein, establishing, by the LAN gateway, a connection with the session server comprises:
sending, by the LAN gateway, the digital signature and the resource identifier to the session server;
authenticating, by the session server, the digital signature; returning a LAN gateway login success message to the LAN gateway when the authentication is passed;
wherein, establishing, by the external network client, a connection with the session server comprises:
sending, by the external network client, the digital signature and the resource identifier to the session server;
authenticating, by the session server, the digital signature; returning a user login success message to the external network client when the authentication is passed;
6. The method of Claim 5, wherein the authenticating step comprises:
determining whether the digital signature is expired;
determining whether the resource identifier parsed from the digital signature is same as the resource identifier received from the external network client or the LAN gateway.
7. The method of Claim 1, wherein the logging in step comprises:
sending, by the external network client, the IP address and port number of a LAN server to the LAN gateway through the connection between the external network client and the session server and the connection between the session server and the LAN gateway;
establishing, by the LAN gateway, a connection with the LAN server ;
logging in, by the external network client, the LAN through the connection between the external network client and the session server and the connection between the session server and the LAN gateway as well as the connection between the LAN gateway and the LAN server,
8. The method of Claim 4, further comprising:
acquiring, by the public network server, the load condition parameters of each session server as well as the number of LANs and external network clients supported by each session server periodically.
9. The method of Claim 1, further comprising:
reporting, by the LAN gateway, the identifier and password of LAN to the public network server for authentication while logging in the public network server;

generating, by the public network server, a key when the authentication is passed, and sending the key to the LAN gateway;
encrypting and decrypting the data between the LAN gateway and the public network server with the key.
10. The method of Claim 9, further comprising:
recording, by the LAN gateway, the identifier and password of LAN in a LAN information database at side of the public network server while registering a remote login service.
wherein the reporting step comprises:
authenticating, by the public network server, whether the login password registered by the LAN matches the login password reported by the LAN gateway.
11. A system for implementing instant messaging between an external network client and a
Local Area Network (LAN) client, comprising: an external network client, a public network
server, a LAN gateway and a session server; wherein
the public network server is adapted to allocate a session server and resources for the instant messaging and send the address of the session server and the resource identifier to the LAN gateway and the-extemal network client; the LAN gateway is adapted to establish a connection with the session server according to the received address of the session server and the resource identifier, and establish a connection with the LAN server;
the external network client is adapted to establish a connection with the session server according to the received address of the session server and the resource identifier, and log in the LAN through the connection between the external network client and the session server and the connection between the session server and the LAN gateway, and perform the instant messaging with the LAN client;
the session server is adapted to transfer the data between the external network client and the LAN gateway.
12. The system of Claim 11, wherein the external network client comprises:
a request sending module, adapted to send the identifier and password of the external network client as well as the identifier of the LAN to be logged in to the public network server;
a first connection establishing module, adapted to connect with the session server, and send the resource identifier and the digital signature generated by the public network server to the session server;
an instant messaging module, adapted to performing instant messaging with the LAN client through the connection between the external network client and the session server, the connection

between the session server and the LAN gateway as well as the connection between the LAN gateway and the LAN server.
13. The system of Claim 11, wherein the public network server comprises:
a request forwarding module, adapted to search a network connection corresponding to the LAN gateway according to the identifier of the LAN to be logged in from the external network client, and forward the identifier and password of the external network client as well as the identifier of the LAN to be logged in to the LAN gateway for authentication according to the searched network connection;
an allocation module, adapted to allocate a session server, channel resources and a digital signature for the instant messaging when the request forwarding module receives an authentication success message from the LAN gateway, and send the address of the session server, the resource identifier and the digital signature to the LAN gateway and the external network client.
14. The system of Claim 11, wherein the LAN gateway comprises:
a first authentication module, adapted to authenticate the identification and rights of the external network client after receiving the identifier and password of the external network client as well as the identifier of the LAN to be logged in from the external network client; return a authentication success message to the public network server when the authentication is passed;
a second connection establishing module, adapted to connect with the session server, and send the resource identifier and the digital signature generated by the public network server to the session server;
a second transfer module, adapted to transfer the data between the session server and the LAN server.
15. The system of Claim 11, wherein the session server comprises:
a second authentication module, adapted to receive the resource identifier and the digital signature from the LAN gateway, authenticate the digital signature; keep connecting with the LAN gateway according to the resource identifier when the authentication is passed; and receive the resource identifier and the digital signature from the external network client authenticate the digital signature; keep connecting with the external network client according to the resource identifier when the authentication is passed;
a first transferring module, adapted to transfer the data between the external network client and the LAN gateway.
16. The system of Claim 11, wherein the public network server further comprises:

a parameter acquiring module, adapted to periodically acquire the load condition parameters of each session server as well as the number of LANs and external network clients supported by each session server;
wherein, the session server further comprises:
a parameter statistic module, adapted to calculate load condition parameter of itself as well as the number of LANs and external network clients supported by itself
17. The system of Claim 11, wherein the LAN gateway further comprises:
a login module, adapted to send the LAN identifier and password to the public network server;
wherein, the public network server further comprises:
a third authentication module, adapted to authenticate the LAN identifier and password; generate a key when the authentication is passed and send the key to the LAN gateway.
18. The system of Claim 11, further comprising:
a registration server, adapted to provide the LAN with a remote login registering service, and allocate the LAN identifier for the LAN when the LAN gateway registers a remote login service;
a database server, adapted to record the acquired LAN identifier and the correspondingly password when the LAN gateway registers a remote login service.

Documents:

2731-CHE-2007 AMENDED PAGES OF SPECIFICATION 08-03-2013.pdf

2731-CHE-2007 AMENDED PAGES OF SPECIFICATION 13-09-2012.pdf

2731-CHE-2007 AMENDED CLAIMS 08-03-2013.pdf

2731-CHE-2007 AMENDED CLAIMS 13-09-2012.pdf

2731-CHE-2007 FORM-3 13-09-2012.pdf

2731-CHE-2007 OTHER PATENT DOCUMENT 13-09-2012.pdf

2731-CHE-2007 POWER OF ATTORNEY 13-09-2012.pdf

2731-CHE-2007 CORRESPONDENCE OTHERS 08-03-2013.pdf

2731-CHE-2007 CORRESPONDENCE OTHERS 17-01-2012.pdf

2731-CHE-2007 EXAMINATION REPORT REPLY RECEIVED 13-09-2012.pdf

2731-che-2007-abstract.pdf

2731-che-2007-claims.pdf

2731-che-2007-correspondnece-others.pdf

2731-che-2007-description(complete).pdf

2731-che-2007-drawings.pdf

2731-che-2007-form 1.pdf

2731-che-2007-form 18.pdf

2731-che-2007-form 3.pdf

2731-che-2007-form 5.pdf

« Previous Patent

Next Patent »

Patent Number

258680

Indian Patent Application Number

2731/CHE/2007

PG Journal Number

06/2014

Publication Date

07-Feb-2014

Grant Date

30-Jan-2014

Date of Filing

22-Nov-2007

Name of Patentee

TENCENT TECHNOLOGY (SHENZHEN) COMPANY LIMITED

Applicant Address

4/F, EAST 2 BLOCK, SEG PARK, ZHENXING ROAD, FUTIAN DISTRICT, SHENZHEN, GUANGDONG 518044, CHINA.

Inventors:

#	Inventor's Name	Inventor's Address
1	LI, WEI	4/F, EAST 2 BLOCK, SEG PARK, ZHENXING ROAD, FUTIAN DISTRICT, SHENZHEN, GUANGDONG 518044, CHINA.
2	WANG, XING	4/F, EAST 2 BLOCK, SEG PARK, ZHENXING ROAD, FUTIAN DISTRICT, SHENZHEN, GUANGDONG 518044, CHINA.
3	CHEN, WEIHUA	4/F, EAST 2 BLOCK, SEG PARK, ZHENXING ROAD, FUTIAN DISTRICT, SHENZHEN, GUANGDONG 518044, CHINA.
4	YUE, XIAOCHENG	4/F, EAST 2 BLOCK, SEG PARK, ZHENXING ROAD, FUTIAN DISTRICT, SHENZHEN, GUANGDONG 518044, CHINA.
5	YE, MAO	4/F, EAST 2 BLOCK, SEG PARK, ZHENXING ROAD, FUTIAN DISTRICT, SHENZHEN, GUANGDONG 518044, CHINA.
6	WANG, ZHONGMING	4/F, EAST 2 BLOCK, SEG PARK, ZHENXING ROAD, FUTIAN DISTRICT, SHENZHEN, GUANGDONG 518044, CHINA.
7	HE, WEIXING	4/F, EAST 2 BLOCK, SEG PARK, ZHENXING ROAD, FUTIAN DISTRICT, SHENZHEN, GUANGDONG 518044, CHINA.

PCT International Classification Number

G06F 17/30

PCT International Application Number

N/A

PCT International Filing date

PCT Conventions:

#	PCT Application Number	Date of Convention	Priority Country
1	200610170763.6	2006-12-22	China