公开(公告)号：KR1020090102050A

公开(公告)日：2009-09-30

申请号：KR1020080027271

申请日：2008-03-25

Applicant: 한국전자통신연구원

Inventor： 윤호선 ,  류호용 ,  홍성백

IPC: H04L12/22

CPC classification number: H04W12/06 ,  H04L63/0281 ,  H04L63/06 ,  H04L63/0869 ,  H04W12/04

Abstract: PURPOSE: A security method of a server-based mobile internet protocol system is provided to safely execute communication in a mobile node in which the electric power and computational capacity are weak. CONSTITUTION: A security method of a server-based mobile internet protocol system is composed of the steps of generating a server(20) and a tunnel by using a first security item exchanged by executing mPAK with a server(202), transmitting a similar password request message(PPQ) to the server through the tunnel(204), exchanging a second security item by executing mPAK with the correspondent node which wants communication by using a similar password answer message(PPA) received from the server by corresponding to the request, and producing the tunnel for security about data transmitted/received with the correspondent node and control message(209).

Abstract translation: 目的：提供基于服务器的移动互联网协议系统的安全方法，以安全地执行电力和计算能力较弱的移动节点中的通信。 构成：基于服务器的移动互联网协议系统的安全方法包括以下步骤：通过使用通过执行mPAK与服务器（202）交换的第一安全项来生成服务器（20）和隧道，发送类似的密码 通过隧道（204）向服务器发送请求消息（PPQ），通过使用从服务器接收到的与该请求对应的类似密码应答消息（PPA）来执行mPAK与需要进行通信的通信节点交换第二安全项， 并产生用于与通信节点和控制消息发送/接收的数据的安全性的隧道（209）。

公开(公告)号：KR100772537B1

公开(公告)日：2007-11-01

申请号：KR1020060118569

申请日：2006-11-28

Applicant: 한국전자통신연구원

Inventor： 고남석 ,  류호용 ,  홍성백

IPC: H04L12/749 ,  H04L12/781

CPC classification number: H04L61/2592 ,  H04L61/6086 ,  H04L63/08

Abstract: An IP conversion apparatus and a method for tunneling an IPv6(Internet Protocol version 6) packet to an IPv4 in an IPv4 network environment are provided to allow a service provider to create a new profit at a low investment cost and users to switch to an IPv6 without applying a complicated structure. A tunnel configuration unit(2501) allocates an IPv6 address to terminals located in an IPv4 network. In order to establish a tunnel between the first and second terminals which want to communicate with each other, among the terminals which have received the IPv6 address from the tunnel configuration unit, a tunneling address resolution unit(2502) converts IPv6 addresses of the first and second terminals into IPv4 addresses and transmits the IPv4 addresses mutually between the first and second terminals. The tunnel configuration unit includes an authentication unit that receives subscriber identification information from a terminal first located in the IPv4 network and authenticates it.

Abstract translation: 提供了一种在IPv4网络环境中将IPv6（因特网协议版本6）分组隧道化到IPv4的IP转换装置和方法，以允许服务提供商以低投资成本创建新的利润，并且用户切换到IPv6 而不应用复杂的结构。 隧道配置单元（2501）向位于IPv4网络中的终端分配IPv6地址。 为了在希望彼此通信的第一和第二终端之间建立隧道，在从隧道配置单元接收到IPv6地址的终端中，隧道地址解析单元（2502）转换第一和第 将第二终端转换成IPv4地址，并在第一和第二终端之间相互发送IPv4地址。 隧道配置单元包括认证单元，其从位于IPv4网络中的终端首先接收用户识别信息并对其进行认证。

公开(公告)号：KR100545792B1

公开(公告)日：2006-01-24

申请号：KR1020030092825

申请日：2003-12-18

Applicant: 한국전자통신연구원

Inventor： 류호용 ,  김선철 ,  양선희

IPC: H04L12/723 ,  H04L12/823

Abstract: 본 발명은 MPLS 네트워크의 입력노드에서 미리 MPLS 네트워크내에서 불필요한 패킷의 발생으로 인한 트래픽 증가를 해결하기 위한 MPLS 네트워크에서의 IP 패킷 포워딩 방법에 관한 것으로서, MPLS 네트워크의 입력노드에서 Trace LSP 패킷을 이용하여 MPLS 네트워크내의 전송 노드들의 출측 링크 MTU 정보와 Cross Connect Table의 스택 사이즈 정보를 수집하여, 입력 노드가 수신된 IP 패킷중 MPLS 도메인내에서 폐기될 가능성이 있는 패킷을 미리 폐기시킴으로서, MPLS 네트워크내에서의 불필요한 패킷 발생을 제거한 것이다.
MPLS, 패킷, 입력노드, 전송노드, 최대 전송 단위(MTU), 스택사이즈, 포워딩 테이블,

Abstract translation: 使用本发明，在MPLS网络的输入节点跟踪LSP的分组涉及到IP分组转发方法在MPLS网络中，以解决从MPLS网络的输入节点预先引起在MPLS网络中不必要的数据包的出现流量的增加， 通过收集的MPLS网络中的传输节点的出口链路MTU信息和交叉连接表的堆栈大小，节点是sikimeuroseo预先丢弃这个分组与可能性在所接收的IP包的MPLS域被丢弃，在MPLS网络中， 它消除了不必要的数据包生成。

公开(公告)号：KR1020010063809A

公开(公告)日：2001-07-09

申请号：KR1019990061903

申请日：1999-12-24

Applicant: 한국전자통신연구원

Inventor： 윤현정 ,  김부일 ,  류호용 ,  이현정 ,  이재섭

IPC: H04L9/14

CPC classification number: H04L45/50 ,  H04L9/0625 ,  H04L9/0643

Abstract: PURPOSE: A method for processing label distribution protocol message for setting of authenticated label switched path in a multi-protocol label switching network is provided to set the authenticated label switched path between two terminal ends. CONSTITUTION: The method for processing label distribution protocol message includes following steps. When received message is hello message, it is determined whether security key is included within the hello message. When security key is included within the hello message, an adjacency table is formed. The received message is a label distribution protocol request/mapping message, a message authenticated code is calculated using a self password and the calculated code is compared with the code included within the received message. The calculated code is matched with the code included within the received message, the received message is decoded and the authenticated label switched path is set.

Abstract translation: 目的：提供一种处理多协议标签交换网络认证标签交换路径标签分发协议消息的方法，设置两个终端之间的认证标签交换路径。 规定：处理标签分发协议消息的方法包括以下步骤。 当接收到的消息是hello消息时，确定安全密钥是否包含在hello消息中。 当hello消息中包含安全密钥时，形成邻接表。 接收到的消息是标签分发协议请求/映射消息，使用自我密码计算消息认证代码，并将计算的代码与接收到的消息中包含的代码进行比较。 所计算的代码与接收到的消息中包含的代码相匹配，接收到的消息被解码，并且设置了认证的标签交换路径。

公开(公告)号：KR102216746B1

公开(公告)日：2021-02-17

申请号：KR1020160150093

申请日：2016-11-11

Applicant: 한국전자통신연구원

Inventor： 나태흠 ,  박평구 ,  류호용 ,  심재찬

IPC: H04L12/24

Abstract: 가상머신기반의서비스펑션체이닝에있어서가상머신의배치방법및 장치가개시된다. 서비스노드들의배치방법은서비스체인을구성하는서비스노드들의요구자원들을파악하는단계; 서비스체인을구성하는서비스노드들간의링크별 링크비용을산출하고, 산출된링크비용에따라서비스노드들간의링크를정렬하는단계; 적어도하나의컴퓨팅노드의잔여자원을확인하는단계; 및서비스노드들의요구자원, 링크별비용, 및적어도하나의컴퓨팅노드의잔여자원에기초하여, 서비스노드들을그룹핑하여유사(pseudo) 서비스노드를구성하고, 유사서비스노드를적어도하나의컴퓨팅노드중 하나의컴퓨팅노드에할당하는단계를포함하여구성될수 있다.

公开(公告)号：KR102024573B1

公开(公告)日：2019-09-25

申请号：KR1020150174360

申请日：2015-12-08

Applicant: 한국전자통신연구원

Inventor： 전협우 ,  박평구 ,  류호용

IPC: H04L12/24

公开(公告)号：KR102021333B1

公开(公告)日：2019-09-16

申请号：KR1020150133314

申请日：2015-09-21

Applicant: 한국전자통신연구원

Inventor： 박건태 ,  김선철 ,  류호용 ,  윤호선 ,  홍성백 ,  홍승우

IPC: G01R31/28 ,  G01R31/02 ,  G08C19/02 ,  G08B21/18 ,  G08B3/10 ,  G08B5/22

公开(公告)号：KR101953587B1

公开(公告)日：2019-05-27

申请号：KR1020150092496

申请日：2015-06-29

Applicant: 한국전자통신연구원

Inventor： 박평구 ,  류호용 ,  박건태 ,  심재찬 ,  전협우

IPC: H04L12/741 ,  H04L29/06

公开(公告)号：KR1020170059696A

公开(公告)日：2017-05-31

申请号：KR1020150163956

申请日：2015-11-23

Applicant: 한국전자통신연구원

Inventor： 문성 ,  류호용 ,  윤호선 ,  홍승우

IPC: H04L12/935 ,  H04L12/931

CPC classification number: H04L69/03 ,  H04L12/4641 ,  H04L45/56 ,  H04L69/16

Abstract: 본발명은네트워크트래픽처리방법, 시스템및 컴퓨터판독가능한기록매체에관한것이다. 본발명에따른스위칭 ASIC을사용하여네트워크트래픽을처리하는방법에있어서, 소프트웨어기반의네트워크운영체제내에서구동되는소프트웨어포워더가네트워크처리정보가포함된메시지를생성하는단계, 상기메시지를하드웨어기반의네트워크운영체제내에서구동되는스위치매니저로전달하는단계, 상기스위치매니저가상기네트워크처리정보를학습하는단계및 상기학습된정보를참조로하여상기스위칭 ASIC을제어하는단계를포함할수 있다.

Abstract translation: 网络流量处理方法，系统和计算机可读记录介质。 根据本发明使用的开关ASIC用于处理网络流量的方法，基于软件的网络操作系统，包括：软件转发器与网络管理信息，基于硬件的网络操作系统，该消息的消息的生成驱动 对在交换机管理器中驱动的交换机管理器，交换机管理器学习网络处理信息，并参照所学习的信息控制交换机ASIC。

公开(公告)号：KR1020170052004A

公开(公告)日：2017-05-12

申请号：KR1020150153855

申请日：2015-11-03

Applicant: 한국전자통신연구원

Inventor： 김선철 ,  류호용 ,  심재찬

IPC: H04L12/937 ,  H04L12/931 ,  H04L12/46 ,  H04L29/12 ,  H04L29/06

Abstract: 본발명의실시예는포트포워딩(Port forwarding) 정보를자동적으로구축할수 있도록한 사설네트워크를지원하는포트포워딩제어장치에관한것이다본 발명의실시예에의한포트포워딩제어장치는호스트들과; 내부네트워크망에의하여상기호스트들과접속되며, 내부네트워크를외부망과접속시키기위한라우터와; 상기내부네트워크망에의하여상기호스트들과접속되며, 상기내부네트워크망에접속되는제 1단말이상기호스트들과접속될수 있도록내부포트포워딩정보를설정하는내부포워딩부를구비한다.

Abstract translation: 本发明的示例性实施例涉及一种端口转发控制装置，其支持能够自动构建端口转发信息的专用网络。根据本发明实施例的端口转发控制装置包括主机; 路由器通过内部网络连接到主机并将内部网络连接到外部网络; 内部转发单元通过内部网络连接到主机，并设置内部端口转发信息以连接到连接到内部网络的第一终端主机。