Abstract:
본 발명은 가상사설망을 구성하는 기술에 관한 것이다. 이동 중 변하지 않는 가상 홈주소(HoA)와 이동 중 계속적으로 변하는 IP주소(CoA)를 갖는 접속노드로 이동성을 지원하는 가상사설망 게이트웨이는 이동성 지원부, 데이터 보안부 및 가상주소 변환부를 포함한다. 이동성 지원부는 접속노드로부터 패킷이 전달되는 경우, 접속노드의 HoA와 변경된 CoA의 매핑관계를 유지하며 패킷에 대한 이동성 터널을 처리하여 제1 변환 패킷을 생성한다. 데이터 보안부는 이동성 지원부로부터 제1 변환 패킷을 전달받으며, 제1 변환 패킷에 대한 보안성 검사를 수행한다. 가상주소 변환부는 보안성 검사가 완료된 제1 변환 패킷을 수신하여 제1 변환 패킷의 소스 주소인 접속노드의 HoA를 가상사설망에서 사용 가능한 사설망 내부 주소로 변환하여 제2변환 패킷을 생성한다.
Abstract:
과금 관리 서버 및 서비스 플랫폼 서버와 연동하여 동작하는 과금 관리 장치는 응용 서비스별로 과금을 관리하기 위해 서비스 플랫폼 서버와 협상을 통해 결정된 협상 정보를 서비스 플랫폼 제공부로부터 전달받는다. 과금 관리 장치는 협상 정보에 따라 서비스 플랫폼 제공부에서 제공하는 서비스 플랫폼을 적용한 응용 프로그램으로부터 응용 데이터를 전달받는다. 그리고 과금 관리 장치는 응용 데이터에 대한 과금 정보를 수집하여 상대 노드로 전달한다.
Abstract:
PURPOSE: A flow based QoS(Quality of Service) router and an operation method thereof are provided to reflect an QoS policy for specific traffic and monitoring for abnormal traffic by executing a real-time statistics processing function for massive data. CONSTITUTION: An SSC(System Supervisor Controller) receives flow information requesting the filtering and flow information which does not request filtering from a line card unit. The SSC stores the flow information requesting the filtering and the flow information. A manager terminal(100) monitors the flow information requesting the filtering and the flow information which does not request the filtering. The manager terminal executes the filtering and the application of QoS for the specific flow. An AP(Application Processor) directs the application of the QoS for the specific flow according to the request of the SSC. [Reference numerals] (132) Statistical report server; (134) Statistical collection table; (136) Filtering table; (140) DB interface; (150) Memory DB; (160) Web server; (170) QoS applied server
Abstract:
PURPOSE: A method for providing forwarding information and QoS(Quality of Service) information in a flow-based network device is provided to dynamically apply forwarding information and QoS processing information to a corresponding flow. CONSTITUTION: If an inputted packet is not a primary packet(S110), a forwarding engine unit obtains the serial information for the packet. The forwarding engine unit first and second information from a flow table within a network device based on the state information for a specific flow(S160). The forwarding engine unit judges based on a rout ID of the serial information whether or not the first and second information are updated(S170). If is judged whether or not the first and second information are updated, the forwarding engine unit updates the flow table(S190).
Abstract:
본 발명의 데이터 감청 시스템은 복수의 단말들 간에 송수신되는 데이터가 경유되며, 데이터 복구 요청에 상응하여 데이터 수집 정보에 대응되는 데이터를 수집하고, 수집된 데이터에 포함된 서버 아이피 어드레스를 제거하고, 데이터 복구 요청된 감청 장치의 아이피 어드레스를 삽입하여 송신하는 서버와, 데이터 복구 요청에 상응하여 복수의 단말들 간에 송수신되는 데이터가 경유되는 서버로 데이터 수집을 요청하고, 상기 서버로부터 데이터 수집 정보에 대응되는 사용자 데이터를 수신하여 복구하는 감청 장치를 포함한다. 데이터 감청, 단말, 서버, 감청장치
Abstract:
본 발명은 IPv6 Over IPv4 터널링 기반의 이종망간 심리스 핸드오버 제어 방법 및 장치에 관한 것으로, IPv4 기반의 네트워크 환경에서 터널링 기술을 이용한 IPv6 서비스를 제공함에 있어서, 액티브 터널(Active tunnel)과, 스탠바이 터널(Standby tunnel)의 터널 절체를 통해, 이동단말이 상이한 네트워크 간에 핸드오버 되도록 함으로써, 상이한 네트워크간의 핸드오버가 용이하고, 데이터의 손실을 방지하여 이종망으로의 핸드오버 시에도 이동단말에 제공되는 서비스의 연속성이 보장되는 효과가 있다. 터널링, IPv6, IPv4, 핸드오버, 스위치오버, 이종 인터페이스
Abstract:
PURPOSE: A selective packet collecting method using kernel prove and a device thereof are provided to selectively determine traffic generated by only particular application program in order to collect packets generated by the particular application program. CONSTITUTION: A kernel module(110) obtains 5-tuple information which an application program provides to a network function through a kernel prove(111). A packet collecting module(120) distinguishes traffic generated by the application program by comparing 5-tupple information transceived through a network device and 5-tuple information provided by the kernel module. When the application program calls a network function of the kernel, the kernel prove intercepts 5-tuple information provided to the kernel function in the application program.
Abstract:
A seamless handover control method between heterogeneous networks for preventing data loss and guaranteeing the continuity of a service and an apparatus thereof are provided to perform the continuity of the service by using a tunnel switching function. An interface management module of a mobile terminal compares the radio signal of an active interface and the radio signal of a standby interface(S710). A switching point of time of the tunnel for changing the standby tunnel into the active tunnel is determined. A tunneling protocol module requests the change over of tunnel as the control server through the standby tunnel(S720). The handover of the mobile terminal is performed by changing the standby tunnel(S735). The mobile terminal received through the existing active tunnel is received through the new active tunnel(S745).
Abstract:
A method for constructing a tunnel network interface in a server of an IPv4 network and transmitting/receiving packets by using a tunnel network interface are provided to transmit/receive packets to/from each terminal by using a single tunnel network interface established in an OS(Operating System) of a server. When a new terminal attempts a connection(201), a server establishes information for the new terminal in a single tunnel network interface(202). The server sets an output network interface with respect to an IPv6 address of the new terminal as the tunnel network interface(203), and establishes a tunnel for the new terminal(204). The server checks whether there is a request for transmission of an IPv6 packet from an application program(205). If there is a request for transmission of an IPv6 packet, the server searches an IPv4 address and UDP port information by using destination IPv6 information as a key value(206), establishes an IPv4 or IPv6_UDP header by using the searched IPv4 information and transfers it to an IPv4 stack(207). The server transmits the packet transferred via the IPv4 stack to a corresponding terminal(208). The server checks whether an IPv4 packet has been received from an arbitrary terminal located in an IPv4 network(209). If an IPv4 packet has been received, the server checks whether the received packet is an IPv6 or UDP_IPv6 tunneling packet(210). If the received packet is the IPv6 or UDP_IPv6 tunneling packet and if the received packet has been tunneled to an IPv4 header, the server removes the IPv4 header, and if the received packet has been tunneled to an IPv4_UDP, the server removes a UD P header from a UDP stack(212). The server sets a packet reception interface as a tunnel network interface(213) and transfers the IPv4 header or IPv4_UDP header-deleted IPv6 packet to a reception processing routine of the tunnel network interface(214).
Abstract:
A router and a method for processing an IPv4 packet sectioning an outer traffic and an inner traffic are provided to set all IPv4 addresses in external communication regardless of the IPv4 address in internal communication. A router includes an application processor(300), a plurality of line card processors, a switch fabric(114), and an Ethernet switch(103). The application processor separately has an IPv4 protocol stack for outer communication and an IPv4 protocol stack for inner communication, processes system control by managing an inner control packet, transmitted between processes in the router, through the IPv4 protocol stack for inner communication, and performs routing by managing a data packet, transceived with an external node, through the IPv4 protocol stack for outer communication. The plurality of line card processors receive the data packet from the external node, or transmit the data packet to the external node. The switch fabric switches the data packet between the plurality of line card processors and between the line card processor and the application processor according to control of the application processor. The Ethernet switch switches the control packet between the application processor and the plurality of line card processors.