公开(公告)号：US20110072515A1

公开(公告)日：2011-03-24

申请号：US12882557

申请日：2010-09-15

Applicant: Pyung-Koo PARK ,  Tae Ho Lee ,  Soon Seok Lee ,  Sung Back Hong

Inventor： Pyung-Koo PARK ,  Tae Ho Lee ,  Soon Seok Lee ,  Sung Back Hong

IPC: G06F11/00 ,  G06F15/173

CPC classification number: H04L63/1458

Abstract: A method and apparatus for collaboratively protecting against a Distributed Denial of Service (DDoS) attack are provided. The method performed by a network apparatus includes detecting data suspected as being used in the DDoS attack by monitoring traffic forwarded to a service server, notifying a security apparatus that the detected data is suspected as being used in the DDoS attack, and performing at least one of a first operation and a second operation, the first operation being receiving an analysis result for the detected data from the security apparatus and controlling the traffic based on the analysis result, and the second operation being controlling, prior to the first operation, the traffic based on a rule set in advance.

Abstract translation: 提供了一种用于协同防御分布式拒绝服务（DDoS）攻击的方法和装置。 由网络装置执行的方法包括通过监视转发到服务服务器的流量来检测疑似被用于DDoS攻击中的数据，通知安全设备所检测到的数据被怀疑在DDoS攻击中被使用，以及执行至少一个 在第一操作和第二操作中，第一操作是从安全装置接收检测到的数据的分析结果，并且基于分析结果来控制流量，第二操作在第一操作之前控制流量 基于事先设定的规则。

公开(公告)号：US20110013647A1

公开(公告)日：2011-01-20

申请号：US12667379

申请日：2008-04-08

Applicant: Pyung Koo Park ,  Sung Back Hong ,  Kyeong Ho Lee ,  Kyung Pyo Jun

Inventor： Pyung Koo Park ,  Sung Back Hong ,  Kyeong Ho Lee ,  Kyung Pyo Jun

IPC: H04J3/16

CPC classification number: H04L12/4633 ,  H04L29/12358 ,  H04L45/00 ,  H04L61/251 ,  H04L61/2592 ,  H04L61/6086

Abstract: The present invention relates to a method and apparatus for performing IPv6 over IPv4 transition to improve performance of a control server. When an edge router selected by the control server according to a tunnel creation request of an IPv6 terminal receives a tunnel creation request message from the control server, the edge router transmits a tunnel creation response message for the received tunnel creation request message to the IPv6 terminal through the control server, and the edge router performs IPv6 over IPv4 transition through a tunnel created by the IPv6 terminal that received the tunnel creation response message so as to improve the performance of the control server. Therefore, loads of the control server occurred because all terminals set control tunnels to the control server can be prevented, and service extensibility due to the increase in the number of subscribers can be guaranteed.

Abstract translation: 本发明涉及一种用于执行IPv6 over IPv4转换的方法和装置，以改善控制服务器的性能。 当控制服务器根据IPv6终端的隧道创建请求选择的边缘路由器从控制服务器接收到隧道创建请求消息时，边缘路由器向IPv6终端发送接收到的隧道创建请求消息的隧道创建响应消息 通过控制服务器，边缘路由器通过接收隧道创建响应消息的IPv6终端创建的隧道进行IPv6 over IPv4转换，以提高控制服务器的性能。 因此，控制服务器的负载发生是因为可以防止所有终端设置到控制服务器的控制隧道，并且可以保证由于订户数量的增加而导致的业务可扩展性。

公开(公告)号：US08891551B2

公开(公告)日：2014-11-18

申请号：US12667379

申请日：2008-04-08

Applicant: Pyung Koo Park ,  Sung Back Hong ,  Kyeong Ho Lee ,  Kyung Pyo Jun

Inventor： Pyung Koo Park ,  Sung Back Hong ,  Kyeong Ho Lee ,  Kyung Pyo Jun

IPC: H04L12/28 ,  H04L29/12 ,  H04L12/701 ,  H04L12/46

CPC classification number: H04L12/4633 ,  H04L29/12358 ,  H04L45/00 ,  H04L61/251 ,  H04L61/2592 ,  H04L61/6086

Abstract: The present invention relates to a method and apparatus for performing IPv6 over IPv4 transition to improve performance of a control server. When an edge router selected by the control server according to a tunnel creation request of an IPv6 terminal receives a tunnel creation request message from the control server, the edge router transmits a tunnel creation response message for the received tunnel creation request message to the IPv6 terminal through the control server, and the edge router performs IPv6 over IPv4 transition through a tunnel created by the IPv6 terminal that received the tunnel creation response message so as to improve the performance of the control server. Therefore, loads of the control server occurred because all terminals set control tunnels to the control server can be prevented, and service extensibility due to the increase in the number of subscribers can be guaranteed.

Abstract translation: 本发明涉及一种用于执行IPv6 over IPv4转换的方法和装置，以改善控制服务器的性能。 当控制服务器根据IPv6终端的隧道创建请求选择的边缘路由器从控制服务器接收到隧道创建请求消息时，边缘路由器向IPv6终端发送接收到的隧道创建请求消息的隧道创建响应消息 通过控制服务器，边缘路由器通过接收隧道创建响应消息的IPv6终端创建的隧道进行IPv6 over IPv4转换，以提高控制服务器的性能。 因此，控制服务器的负载发生是因为可以防止所有终端设置到控制服务器的控制隧道，并且可以保证由于订户数量的增加而导致的业务可扩展性。

公开(公告)号：US08699466B2

公开(公告)日：2014-04-15

申请号：US12747971

申请日：2008-10-17

Applicant: Sun Cheul Kim ,  Pyung Koo Park ,  Seong Moon ,  Young Soo Shin ,  Ho Yong Ryu ,  Sung Back Hong

Inventor： Sun Cheul Kim ,  Pyung Koo Park ,  Seong Moon ,  Young Soo Shin ,  Ho Yong Ryu ,  Sung Back Hong

IPC: H04W4/00

CPC classification number: H04W36/0022 ,  H04W76/22

Abstract: The invention relates to a method and an apparatus for controlling seamless handover between heterogeneous networks based on IPv6 over IPv4 tunneling. When IPv6 service is provided using tunneling in an IPv4 based network environment, handover of a mobile terminal between different networks is achieved through switching of an active tunnel and a standby tunnel, and thus handover between different networks is facilitated and data loss is prevented to secure continuity of service provided to the mobile terminal even when the mobile terminal hands over to a heterogeneous network.

Abstract translation: 本发明涉及一种基于IPv6 over IPv4隧道来控制异构网络间的无缝切换的方法和装置。 当在基于IPv4的网络环境中使用隧道提供IPv6服务时，通过主动隧道和备用隧道的切换实现移动终端在不同网络之间的切换，从而促进不同网络之间的切换，防止数据丢失 即使当移动终端转移到异构网络时，也提供给移动终端的服务的连续性。

公开(公告)号：US20130191906A1

公开(公告)日：2013-07-25

申请号：US13619302

申请日：2012-09-14

Applicant: Pyung-Koo PARK ,  Jung-Sik KIM ,  Sung-Back HONG ,  Ho-Sun YOON ,  Seong MOON ,  Sun-Cheul KIM ,  Young-Soo SHIN ,  Sang-Jin HONG ,  Seung-Woo HONG ,  Ho-Yong RYU ,  Soon-Seok LEE

Inventor： Pyung-Koo PARK ,  Jung-Sik KIM ,  Sung-Back HONG ,  Ho-Sun YOON ,  Seong MOON ,  Sun-Cheul KIM ,  Young-Soo SHIN ,  Sang-Jin HONG ,  Seung-Woo HONG ,  Ho-Yong RYU ,  Soon-Seok LEE

IPC: G06F21/20

CPC classification number: H04L63/0272 ,  H04W12/001 ,  H04W12/06 ,  H04W76/12

Abstract: An apparatus and method for supporting a portable mobile VPN service are provided. The method accesses a public network to generate a security tunnel, maps the generated security tunnel and a VPN address, stands by for authentication of a mobile terminal which desires to access a VPN, authenticates a mobile terminal which desires to access the VPN, and assigns an internal address which is used in the VPN according to the authentication result.

Abstract translation: 提供了一种用于支持便携式移动VPN服务的装置和方法。 该方法访问公共网络以生成安全隧道，映射所生成的安全隧道和VPN地址，由希望访问VPN的移动终端进行身份认证，验证希望访问VPN的移动终端，并分配 根据认证结果在VPN中使用的内部地址。

公开(公告)号：US20110002220A1

公开(公告)日：2011-01-06

申请号：US12865933

申请日：2009-11-23

Applicant: Pyung-koo Park ,  Sung-back Hong ,  Kyeong-ho Lee ,  Kyung-pyo Jun ,  Bong-tae Kim

Inventor： Pyung-koo Park ,  Sung-back Hong ,  Kyeong-ho Lee ,  Kyung-pyo Jun ,  Bong-tae Kim

IPC: H04W28/02 ,  H04L12/26

CPC classification number: H04Q11/0478 ,  H04W8/065 ,  H04W36/0016 ,  H04W60/005 ,  H04W80/04 ,  H04W80/045

Abstract: A tunneling-based mobility support method and apparatus is provided which supports a mobility of a mobile node in a heterogeneous network regardless of IP versions (IPv4/IPv6). The mobility support apparatus includes a load balancer, a plurality of mobility support servers, and a plurality of end routers each being TCP connected to each of the mobility support servers. When receiving a tunnel establishment request message from the mobile node, the load balancer selects one mobility supports server from a plurality of mobility support servers to control a mobility service for the mobile node. The selected mobility support server selects a plurality of tunnel end addresses of one end router from the plurality of end routers to establish an IP tunnel with the mobile node according to a predetermined criterion, forwards the tunnel establishment request message to the end router, and sends the mobile node a tunnel establishment response message including the tunnel end address of the selected end router.

Abstract translation: 提供了基于隧道的移动性支持方法和装置，其支持移动节点在异构网络中的移动性，而不管IP版本（IPv4 / IPv6）如何。 移动性支持装置包括负载均衡器，多个移动性支持服务器和多个终端路由器，每个终端路由器连接到每个移动性支持服务器。 当从移动节点接收到隧道建立请求消息时，负载平衡器从多个移动性支持服务器中选择一个移动支持服务器来控制移动节点的移动性服务。 所选择的移动性支持服务器从多个终端路由器中选择一个终端路由器的多个隧道终端地址，根据预定标准与移动节点建立IP隧道，将隧道建立请求消息转发给终端路由器，并发送 所述移动节点包括所选择的终端路由器的隧道结束地址的隧道建立响应消息。

公开(公告)号：US20100257188A1

公开(公告)日：2010-10-07

申请号：US12814779

申请日：2010-06-14

Applicant: Sun Cheul Kim ,  Pyung Koo Park ,  Seong Moon ,  Young Soo Shin ,  Ho Yong Ryu ,  Sung Back Hong

Inventor： Sun Cheul Kim ,  Pyung Koo Park ,  Seong Moon ,  Young Soo Shin ,  Ho Yong Ryu ,  Sung Back Hong

IPC: G06F17/30

CPC classification number: H04N1/00307 ,  H04N13/178 ,  H04N13/194 ,  H04N2201/3242

Abstract: A method for providing a service of downloading stereoscopic image data including first image data and second image data in a digital broadcasting system includes: generating information regarding a file name of each of the first image data and the second image data; and transmitting the first image data, the information regarding the file name of the first image data, the second image data, and the information regarding the file name of the second image data. The file name of the second image data includes a prefix indicating the second image data of the stereoscopic image data.

Abstract translation: 一种用于在数字广播系统中提供包括第一图像数据和第二图像数据的立体图像数据的服务的方法包括：产生关于第一图像数据和第二图像数据中的每一个的文件名的信息; 以及发送第一图像数据，关于第一图像数据的文件名的信息，第二图像数据以及关于第二图像数据的文件名的信息。 第二图像数据的文件名包括表示立体图像数据的第二图像数据的前缀。

公开(公告)号：US07647393B2

公开(公告)日：2010-01-12

申请号：US10826205

申请日：2004-04-15

Applicant: Sun Hee Yang ,  Hyeon Sik Yoon ,  Pyung Koo Park ,  Ho Sun Yoon

Inventor： Sun Hee Yang ,  Hyeon Sik Yoon ,  Pyung Koo Park ,  Ho Sun Yoon

IPC: G06F15/173

CPC classification number: H04L67/1008 ,  H04L67/1002 ,  H04L67/1017 ,  H04L67/1023 ,  H04L69/22

Abstract: The present invention provides a server load balancing apparatus using MPLS session labels. The server load balancing apparatus includes a packet analyzing unit, a load balancing processing unit, a session label switching unit, a session managing unit, and a session label managing unit. The packet analyzing unit inspects whether a session label has been attached to a received packet, analyzes header information of the received packet to learn session information, and attaches a session label to a header of the received packet. The load balancing processing unit assigns a server to a session of the received packet without the session label attached. The session label switching unit hardware-switches the received packet with the session label attached using only the session label information. The session managing unit manages and maintains relevant information and states of sessions. The session label managing unit manages the session label.

Abstract translation: 本发明提供一种使用MPLS会话标签的服务器负载平衡装置。 服务器负载平衡装置包括分组分析单元，负载平衡处理单元，会话标签交换单元，会话管理单元和会话标签管理单元。 分组分析单元检查会话标签是否附加到接收到的分组，分析接收分组的报头信息以学习会话信息，并将会话标签附加到接收分组的报头。 负载平衡处理单元将服务器分配给接收到的分组的会话，而不附加会话标签。 会话标签交换单元使用仅使用会话标签信息的会话标签硬件切换接收的分组。 会话管理单元管理和维护会话的相关信息和状态。 会话标签管理单元管理会话标签。

公开(公告)号：US08984618B2

公开(公告)日：2015-03-17

申请号：US13611925

申请日：2012-09-12

Applicant: Ho Sun Yoon ,  Sung Back Hong ,  Jung Sik Kim ,  Seong Moon ,  Sun Cheul Kim ,  Seung Woo Hong ,  Sang Jin Hong ,  Pyung Koo Park ,  Young Soo Shin ,  Ho Yong Ryu ,  Soon Seok Lee

Inventor： Ho Sun Yoon ,  Sung Back Hong ,  Jung Sik Kim ,  Seong Moon ,  Sun Cheul Kim ,  Seung Woo Hong ,  Sang Jin Hong ,  Pyung Koo Park ,  Young Soo Shin ,  Ho Yong Ryu ,  Soon Seok Lee

IPC: G06F21/00 ,  H04L29/06

CPC classification number: G06F21/00 ,  H04L12/4633 ,  H04L12/4641 ,  H04L61/2514 ,  H04L61/2539 ,  H04L61/2592 ,  H04L63/0227 ,  H04L63/0236 ,  H04L63/0245 ,  H04L63/0263 ,  H04L63/0272 ,  H04L63/104

Abstract: Disclosed are a system for managing virtual private networks (VPNs) includes: terminals configured to transmit user data; a manager configured to transmit information for concealing networks and managing the VPNs; border gateways configured to decrypt the user data and perform a network address translation (NAT) procedure and a filtering procedure on the decrypted user data based on the information; and servers configured to receive the user data subjected to the NAT procedure and the filtering procedure, wherein the filtering procedure is a procedure discarding the user data to be transferred to the servers that are not allowed so as to allow the terminals to access only the allowed servers, the NAT procedure is a procedure changing an Internet protocol (IP) address used in a first network to an IP address used in a second network, and the first network and the second network are different networks.

Abstract translation: 公开了一种用于管理虚拟专用网络（VPN）的系统，包括：被配置为传送用户数据的终端; 配置为传送隐藏网络和管理VPN的信息的管理器; 边界网关被配置为基于该信息解密用户数据并对解密的用户数据执行网络地址转换（NAT）过程和过滤程序; 以及被配置为接收经历了NAT过程和过滤过程的用户数据的服务器，其中，过滤程序是丢弃要传送到不允许的服务器的用户数据以允许终端仅访问允许的用户数据 服务器，NAT过程是将第一网络中使用的因特网协议（IP）地址改变为在第二网络中使用的IP地址的过程，并且第一网络和第二网络是不同的网络。

公开(公告)号：US20130133057A1

公开(公告)日：2013-05-23

申请号：US13611925

申请日：2012-09-12

Applicant: Ho Sun YOON ,  Sung Back HONG ,  Jung Sik KIM ,  Seong MOON ,  Sun Cheul KIM ,  Seung Woo HONG ,  Sang Jin HONG ,  Pyung Koo PARK ,  Young Soo SHIN ,  Ho Yong RYU ,  Soon Seok LEE

Inventor： Ho Sun YOON ,  Sung Back HONG ,  Jung Sik KIM ,  Seong MOON ,  Sun Cheul KIM ,  Seung Woo HONG ,  Sang Jin HONG ,  Pyung Koo PARK ,  Young Soo SHIN ,  Ho Yong RYU ,  Soon Seok LEE

IPC: G06F21/00

CPC classification number: G06F21/00 ,  H04L12/4633 ,  H04L12/4641 ,  H04L61/2514 ,  H04L61/2539 ,  H04L61/2592 ,  H04L63/0227 ,  H04L63/0236 ,  H04L63/0245 ,  H04L63/0263 ,  H04L63/0272 ,  H04L63/104

Abstract: Disclosed are a system for managing virtual private networks (VPNs) includes: terminals configured to transmit user data; a manager configured to transmit information for concealing networks and managing the VPNs; border gateways configured to decrypt the user data and perform a network address translation (NAT) procedure and a filtering procedure on the decrypted user data based on the information; and servers configured to receive the user data subjected to the NAT procedure and the filtering procedure, wherein the filtering procedure is a procedure discarding the user data to be transferred to the servers that are not allowed so as to allow the terminals to access only the allowed servers, the NAT procedure is a procedure changing an Internet protocol (IP) address used in a first network to an IP address used in a second network, and the first network and the second network are different networks.

Abstract translation: 公开了一种用于管理虚拟专用网络（VPN）的系统，包括：被配置为传送用户数据的终端; 配置为传送隐藏网络和管理VPN的信息的管理器; 边界网关被配置为基于该信息解密用户数据并对解密的用户数据执行网络地址转换（NAT）过程和过滤程序; 以及被配置为接收经历了NAT过程和过滤过程的用户数据的服务器，其中，过滤程序是丢弃要传送到不允许的服务器的用户数据以允许终端仅访问允许的用户数据的过程 服务器，NAT过程是将第一网络中使用的因特网协议（IP）地址改变为在第二网络中使用的IP地址的过程，并且第一网络和第二网络是不同的网络。