公开(公告)号：KR102000168B1

公开(公告)日：2019-10-02

申请号：KR1020130038677

申请日：2013-04-09

Applicant: 한국전자통신연구원

Inventor： 정우석 ,  박종대 ,  정태수 ,  예병호 ,  노성기 ,  문승진 ,  고남석 ,  허환조

IPC: H04N21/231 ,  H04N21/266 ,  H04L12/715

公开(公告)号：KR1020130124425A

公开(公告)日：2013-11-13

申请号：KR1020120047695

申请日：2012-05-04

Applicant: 한국전자통신연구원

Inventor： 고남석 ,  노성기 ,  문승진 ,  예병호 ,  정태수 ,  정우석 ,  허환조 ,  박종대

IPC: H04W74/04 ,  H04W74/08

CPC classification number: H04W72/0446 ,  H04W28/06 ,  H04W72/0413 ,  H04W72/1289 ,  H04W74/006 ,  H04W74/06

Abstract: In case the channel access of a wireless network relative to terminals is controlled, the information is obtained for radio resource allocation relative to each terminal and the channel access time relative to each terminal is determined based on the information for the radio resource allocation. Frames each including the channel access time determined by each terminal are sequentially transmitted. [Reference numerals] (AA) Terminal A;(BB,DD) Data;(CC) Terminal B;(EE) Other terminals

Abstract translation: 在控制无线网络相对于终端的信道接入的情况下，获得相对于每个终端的无线资源分配的信息，并且基于无线电资源分配的信息来确定相对于每个终端的信道访问时间。 顺序地发送包括由每个终端确定的信道访问时间的帧。 （标号）（AA）端子A;（BB，DD）数据;（CC）端子B;（EE）其他端子

公开(公告)号：KR1020130085570A

公开(公告)日：2013-07-30

申请号：KR1020110140316

申请日：2011-12-22

Applicant: 한국전자통신연구원

Inventor： 정우석 ,  박종대 ,  예병호 ,  정태수 ,  노성기 ,  문승진 ,  고남석 ,  허환조

IPC: H04L12/22 ,  G06F21/30

CPC classification number: H04L63/1425 ,  H04L63/1458

Abstract: PURPOSE: A terminal-centered cyber-attack preventing method and a terminal device thereof are provided to analyze cyber-attacks by malicious codes such as a Botnet through a terminal-centered user behavioral pattern analysis, thereby blocking excessive traffic into a network. CONSTITUTION: A packet handler module (110) senses the excessive traffic due to transmission packets. An abnormal traffic sensor (130) senses the abnormal traffic using a first condition and a second condition. The first condition is a condition where the excessive traffic is maintained for a certain period of time. The second condition is a condition where the amount of the same-type transmission packets is equal to or greater than a threshold value. A traffic cut-off requester (140) generates a traffic cut-off request signal depending on the abnormal traffic sensing result. [Reference numerals] (110) Packet handler module; (120) Interrupt analysis unit; (130) Abnormal traffic sensor; (140) Traffic cut-off requester; (150) User matching unit; (AA) Packet formation request; (BB) Transmission packet; (CC) Packet counting cycle initialization; (DD) Input device interrupt; (EE) Interrupt counting cycle initialization; (FF) Excessive traffic detection; (GG) Interrupt counting value; (HH) Upper security mode; (II) Transmission packet header; (JJ) Abnormal traffic detection; (KK) Traffic cut-off request; (LL) Cut-off approval response; (MM) Cut-off approval request

Abstract translation: 目的：提供一种以终端为中心的网络攻击防范方法及其终端设备，以通过终端为中心的用户行为模式分析来分析诸如僵尸网络等恶意代码的网络攻击，从而阻止网络中的过多流量。 构成：分组处理器模块（110）感测由于传输分组引起的过多业务。 异常交通传感器（130）使用第一条件和第二条件来感测异常交通。 第一个条件是在一段时间内维持过高的交通状况。 第二条件是相同类型传输分组的量等于或大于阈值的条件。 交通中断请求者（140）根据异常的交通感测结果生成交通切断请求信号。 （附图标记）（110）分组处理器模块; （120）中断分析单元; （130）异常交通传感器; （140）交通中断请求者; （150）用户匹配单位; （AA）数据包形成请求; （BB）传输包; （CC）包计数周期初始化; （DD）输入设备中断; （EE）中断计数周期初始化; （FF）流量检测过多; （GG）中断计数值; （HH）上层安全模式; （二）传输分组报头; （JJ）异常交通检测; （KK）交通截止要求; （LL）截止审批响应; （MM）截止批准请求

公开(公告)号：KR1020130048146A

公开(公告)日：2013-05-09

申请号：KR1020120103040

申请日：2012-09-17

Applicant: 한국전자통신연구원

Inventor： 허환조 ,  박종대 ,  정태수 ,  예병호 ,  문승진 ,  정우석 ,  노성기 ,  고남석

IPC: G06F15/16

Abstract: PURPOSE: A device for providing a distribution cloud service and a method thereof are provided to supply a distribution cloud computing service in which availability is high, thereby inspecting the integrity of information. CONSTITUTION: A control unit(730) converts first information into second information, and stores the same in cloud servers. The control unit finds the first information using the second information received from a part of cloud servers, and provides the first information to a user. The control unit inspects the integrity of the first information using the second information. A transmission unit(710) transmits the second information to the cloud servers. A receiving unit(720) receives the second information from the part of cloud servers. [Reference numerals] (710) Transmission unit; (720) Receiving unit; (730) Control unit; (740) Providing unit

Abstract translation: 目的：提供一种用于提供分发云服务的设备及其方法，以提供可用性高的分发云计算服务，从而检查信息的完整性。 构成：控制单元（730）将第一个信息转换为第二个信息，并将其存储在云服务器中。 控制单元使用从一部分云服务器接收到的第二信息来查找第一信息，并向用户提供第一信息。 控制单元使用第二信息检查第一信息的完整性。 传输单元（710）将第二信息发送到云服务器。 接收单元（720）从云服务器的一部分接收第二信息。 （附图标记）（710）传输单元; （720）接收单元; （730）控制单元; （740）提供单位

公开(公告)号：KR1020120055946A

公开(公告)日：2012-06-01

申请号：KR1020100117408

申请日：2010-11-24

Applicant: 한국전자통신연구원

Inventor： 고남석 ,  박종대 ,  예병호 ,  노성기 ,  정우석 ,  문승진 ,  허환조 ,  이순석

IPC: H04L12/873 ,  H04L12/875 ,  H04L12/869 ,  H04L12/867 ,  H04L12/54

CPC classification number: H04L47/52 ,  H04L47/568 ,  H04L47/58 ,  H04L47/629 ,  H04L12/56

Abstract: PURPOSE: An equal bandwidth allocation based packet scheduling method and apparatus thereof are provided to effectively control the traffic congestion of a network by determining a scheduling time for each packet. CONSTITUTION: A packet scheduling apparatus calculates the predicted arrival time of a k+1 packet according to each flow(110). When the k+1 packet arrives, the packet scheduling apparatus compares the predicted arrival time of the k+1 packet with the actual arrival time of the k+1 packet(120). The packet scheduling apparatus schedules the k+1 packet of each flow according to comparison results(130).

Abstract translation: 目的：提供基于相等带宽分配的分组调度方法及其装置，通过确定每个分组的调度时间来有效地控制网络的业务拥塞。 构成：分组调度装置根据每个流（110）计算k + 1分组的预测到达时间。 当k + 1分组到达时，分组调度装置将k + 1分组的预测到达时间与k + 1分组（120）的实际到达时间进行比较。 分组调度装置根据比较结果（130）对每个流的k + 1分组进行调度。

公开(公告)号：KR1020110067871A

公开(公告)日：2011-06-22

申请号：KR1020090124646

申请日：2009-12-15

Applicant: 한국전자통신연구원

Inventor： 예병호

IPC: H04L12/26 ,  H04L12/22

CPC classification number: H04L43/106 ,  H04L43/0852

Abstract: PURPOSE: A network access apparatus and method thereof for traffic monitoring which uses OAM(Operation, Administration and Maintenance) packet on IP network are provided to monitor traffic by using OAM packet on IP network. CONSTITUTION: An OAM packet processing unit(220) generates an OAM packet. The OAM processing unit receives the OAM packet. The OAM packet processing unit loads the load and traffic information of a destination location access unit. The OAM packet processing unit generates the OAM packet as the source access unit. A traffic management unit(230) measures traffic. A packet transmission unit(240) transmits the packet outputted from the OAM packet processing unit to a destination.

Abstract translation: 目的：提供一种在IP网络上使用OAM（操作，管理和维护）数据包进行流量监控的网络访问设备及其方法，通过在IP网络上使用OAM数据包来监控流量。 构成：OAM分组处理单元（220）生成OAM分组。 OAM处理单元接收OAM数据包。 OAM分组处理单元加载目的地位置访问单元的负载和交通信息。 OAM分组处理单元生成OAM分组作为源接入单元。 交通管理单元（230）测量交通。 分组发送单元（240）将从OAM分组处理单元输出的分组发送到目的地。

公开(公告)号：KR1020100072452A

公开(公告)日：2010-07-01

申请号：KR1020080130865

申请日：2008-12-22

Applicant: 한국전자통신연구원

Inventor： 예병호 ,  박우구 ,  양선희

IPC: H04N17/00

CPC classification number: H04N17/04 ,  H04H60/52 ,  H04H60/56 ,  H04N21/254 ,  H04N21/4126 ,  H04N21/44222 ,  H04N21/632

Abstract: PURPOSE: An audience rating survey method and system using a mobile terminal in a broadband convergence network are provided to examine audience rating about broadcasting program in real time through the mobile terminal thereby conspicuously improving reliability and accuracy of program rating value. CONSTITUTION: A terminal receiving unit(301) receives broadcasting program image information from a TV receiver. A terminal extracting unit(302) extracts a broadcasting classification code from the broadcasting program video information. A terminal transmitting unit(303) transmits extracted code information to a center management server via a mobile terminal. If extracted code information is normal, a terminal recording unit(304) changes the normal code information to readable format in the portable terminal.

Abstract translation: 目的：提供宽带融合网络中使用移动终端的观众评价调查方法和系统，通过移动终端实时检测广播节目的受众评级，显着提高节目评级价值的可靠性和准确性。 构成：终端接收单元（301）从TV接收机接收广播节目图像信息。 终端提取单元（302）从广播节目视频信息中提取广播分类码。 终端发送单元（303）经由移动终端向中心管理服务器发送提取的代码信息。 如果提取的代码信息是正常的，则终端记录单元（304）将普通代码信息改变为便携式终端中的可读格式。

公开(公告)号：KR1020080044071A

公开(公告)日：2008-05-20

申请号：KR1020060112890

申请日：2006-11-15

Applicant: 한국전자통신연구원

Inventor： 강현주 ,  안윤영 ,  김성혜 ,  예병호

IPC: H04L12/771 ,  H04L12/947 ,  H04L29/02

CPC classification number: H04L49/252 ,  H04L45/72

Abstract: A method and an apparatus for reducing a packet forwarding delay in a router are provided to reduce delay or loss of a packet by having a local agent in a forwarding processor block and processing information between software blocks of a routing processor unit and a forwarding processor unit. A routing processor unit(110) checks a new routing entry to which a packet is to be forwarded, allocates a new connection identifier with respect to a next hop of the checked routing entry, and transfers information about the checked routing entry including the connection identifier. Forwarding processor units(120,130) allocate the new connection identifier through the information about the routing entry received from the routing processor unit, obtain a link layer address from the next hop and inform the routing processor unit, and forward the packet to the next hop according to the obtained link layer address.

Abstract translation: 提供一种用于减少路由器中的分组转发延迟的方法和装置，以通过在转发处理器块中具有本地代理并且在路由处理器单元的软件块和转发处理器单元之间处理信息来减少分组的延迟或丢失 。 路由处理器单元（110）检查要转发分组的新路由条目，针对所检查的路由条目的下一跳，分配新的连接标识符，并且传送关于所检查的路由条目的信息，包括连接标识符 。 转发处理器单元（120,130）通过从路由处理器单元接收到的路由条目的信息分配新的连接标识符，从下一跳获取链路层地址并通知路由处理器单元，并将该分组转发到下一跳 到获取的链路层地址。

公开(公告)号：KR100778347B1

公开(公告)日：2007-11-22

申请号：KR1020060123335

申请日：2006-12-06

Applicant: 한국전자통신연구원

Inventor： 강현주 ,  예병호

IPC: H04L12/771 ,  H04L12/24 ,  H04L12/781

CPC classification number: H04L61/2592 ,  H04L45/021 ,  H04L61/251

Abstract: An apparatus and a method for managing tunnel source information in a distributed IPv6 router are provided to improve the efficiency of address usage by making many tunnel interfaces have an identical tunnel source address using a tunnel interface index list. An apparatus for managing tunnel source information in a distributed IPv6 router comprises a management table, an operator command processor(21), an interface manager(22), and a forwarding server(23). The management table uses tunnel source addresses as indexes, and has tunnel indexes and tunnel interface identifiers as values. The operator command processor(21) parses a tunnel interface setup command inputted from an operator and creates tree-shaped tunnel interface information. The interface manager(22) delivers the tunnel interface information, received from the operator command processor(21), to the forwarding server(23) in the form of an event. The forwarding server(23) extracts a tunnel interface identifier and a tunnel source address from the event-type tunnel interface information and updates the management table.

Abstract translation: 提供了一种用于管理分布式IPv6路由器中的隧道源信息的装置和方法，以通过使用隧道接口索引列表使许多隧道接口具有相同的隧道源地址来提高地址使用效率。 一种用于在分布式IPv6路由器中管理隧道源信息的装置，包括管理表，操作员命令处理器（21），接口管理器（22）和转发服务器（23）。 管理表使用隧道源地址作为索引，并具有隧道索引和隧道接口标识符作为值。 操作员指令处理器（21）解析从操作者输入的隧道接口建立命令，并创建树形隧道接口信息。 接口管理器（22）以事件的形式将从操作员命令处理器（21）接收的隧道接口信息传送到转发服务器（23）。 转发服务器（23）从事件类型隧道接口信息中提取隧道接口标识符和隧道源地址，并更新管理表。

公开(公告)号：KR100745678B1

公开(公告)日：2007-08-02

申请号：KR1020050119824

申请日：2005-12-08

Applicant: 한국전자통신연구원

Inventor： 박정숙 ,  박미룡 ,  예병호

IPC: H04L12/22 ,  H04L12/70

Abstract: 본 발명은 망으로 유입되는 트래픽에 대해 패킷 플로우의 기반의 트래픽 패턴을 분석함으로써 비정상적인 트래픽에 의한 망 공격을 조기에 탐지하는 망 공격 탐지장치 및 방법에 관한 것이다.
본 발명은 다수의 외부공격에 의한 비정상적인 트래픽 패턴 및 다수의 정상적인 트래픽 패턴을 저장하는 패턴 DB; 망에 입력되는 패킷 플로우에 대한 이상징후를 검사하는 패킷검사부; 이상징후가 있는 패킷 플로우를 수집하고 상기 패킷 플로우에 대한 트래픽 패턴을 추출하는 패턴추출부; 상기 추출된 트래픽 패턴과 상기 패턴 DB에 저장된 트래픽 패턴을 비교하여 상기 트래픽 패턴이 외부공격에 의한 트래픽 패턴인지를 분석하는 트래픽 분석부; 외부공격에 의한 트래픽 패턴인 경우, 상기 트래픽에 대한 대응책을 결정하고 그 대응책에 따라 대응하는 트래픽 대응부; 및 외부 공격에 의한 트래픽 패턴이 아닌 경우 설정된 시간 동안 트래픽 패턴을 모니터링하고 상기 설정시간 경과 후의 트래픽 패턴을 추출하여 상기 트래픽 분석부로 전달하는 트래픽 감시부를 포함한다.
망 공격, 트래픽 패턴, 패킷 플로우, 이상징후, 탐지