公开(公告)号：US09935876B2

公开(公告)日：2018-04-03

申请号：US14389309

申请日：2013-03-29

申请人： Kentaro Sonoda ,  Hideyuki Shimonishi ,  Toshio Koide ,  Yoichi Hatano ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki ,  Yuki Ashino ,  Takeo Ohno

发明人： Kentaro Sonoda ,  Hideyuki Shimonishi ,  Toshio Koide ,  Yoichi Hatano ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki ,  Yuki Ashino ,  Takeo Ohno

IPC分类号： H04L12/28 ,  H04L12/56 ,  H04L12/741 ,  H04L12/717 ,  H04L12/751 ,  H04L12/721 ,  G06F9/455 ,  H04L12/24

CPC分类号： H04L45/74 ,  G06F9/45558 ,  G06F2009/45595 ,  H04L41/04 ,  H04L45/02 ,  H04L45/42 ,  H04L45/70

摘要： A communication system, includes: a node that requests a processing rule for processing a packet; and a control apparatus that notifies the node of the processing rule in response to the request. The control apparatus, upon being notified of change of a connection relationship between a communication apparatus to which a packet is addressed and the node, determines a forwarding path for a packet addressed to the communication apparatus and notifies the node of a processing rule for realizing the forwarding path.

公开(公告)号：US09391880B2

公开(公告)日：2016-07-12

申请号：US13137485

申请日：2011-08-19

申请人： Toshio Koide

发明人： Toshio Koide

IPC分类号： H04L12/26 ,  H04L12/717 ,  H04L12/24 ,  H04L12/751 ,  H04L12/931 ,  H04L12/725 ,  H04L12/937

CPC分类号： H04L45/42 ,  H04L41/12 ,  H04L45/02 ,  H04L45/30 ,  H04L49/253 ,  H04L49/70

摘要： The control unit specifies an undetected connection destination port and sends a reply request to a connection destination of the undetected connection destination port. The packet transfer unit determines whether the received reply request is to be transferred to any other packet transfer unit. The packet transfer unit, upon determining the reply request to be transferred to any other packet transfer unit, transfers the reply request to any other packet transfer unit. The packet transfer unit, upon determining the reply request not to be transferred to any other packet transfer unit, returns a reply that includes information on ports of the local packet transfer unit, the reply being sent along a path leading to the control unit.

摘要翻译： 控制单元指定未检测到的连接目标端口，并将答复请求发送到未检测到的连接目的地端口的连接目的地。 分组传送单元确定接收到的应答请求是否被传送到任何其他分组传送单元。 分组传送单元在确定要传送到任何其他分组传送单元的应答请求时，将应答请求传送到任何其他分组传送单元。 分组传送单元在确定不传送到任何其他分组传送单元的应答请求时，返回包括本地分组传送单元的端口信息的应答，该应答沿着通向控制单元的路径发送。

公开(公告)号：US08902733B2

公开(公告)日：2014-12-02

申请号：US12998754

申请日：2009-11-12

申请人： Nobuyuki Enomoto ,  Toshio Koide ,  Hideyuki Shimonishi

发明人： Nobuyuki Enomoto ,  Toshio Koide ,  Hideyuki Shimonishi

IPC分类号： H04J3/14 ,  H04L12/717 ,  H04L12/24 ,  H04L12/26 ,  H04L12/751 ,  H04L12/703 ,  H04L12/721

CPC分类号： H04L43/0811 ,  H04L41/0213 ,  H04L41/069 ,  H04L45/026 ,  H04L45/26 ,  H04L45/28 ,  H04L45/42

摘要： A communication network management system has: a communication network including a plurality of nodes and a plurality of links connecting between the plurality of nodes; and a management computer that manages the communication network. The management computer has: a storage means in which a route information indicating a transfer route of frames in the communication network is stored; and a monitoring means configured to perform, based on the route information, transmission and reception of frames to and from the communication network. The monitoring means transmits a frame to the transfer route. Each of the plurality of nodes, when receiving a frame, not only forwards the received frame along the transfer route but also sends a reply to the management computer. The monitoring means identifies a location of failure occurrence on the transfer route, based on reception state of the reply from the plurality of nodes.

摘要翻译： 通信网络管理系统具有：包括多个节点的通信网络和在所述多个节点之间连接的多个链路; 以及管理通信网络的管理计算机。 管理计算机具有：存储装置，其中存储指示通信网络中的帧的传送路由的路由信息​​; 以及监视装置，被配置为基于所述路由信息来执行到所述通信网络和从所述通信网络的帧的发送和接收。 监视装置将帧传送到传送路由。 多个节点中的每一个在接收到帧时不仅沿着传送路由转发所接收的帧，而且还向管理计算机发送回复。 监视装置基于来自多个节点的回复的接收状态来识别传送路由上的故障发生的位置。

公开(公告)号：US08711678B2

公开(公告)日：2014-04-29

申请号：US12998758

申请日：2009-11-12

申请人： Nobuyuki Enomoto ,  Toshio Koide ,  Hideyuki Shimonishi

发明人： Nobuyuki Enomoto ,  Toshio Koide ,  Hideyuki Shimonishi

IPC分类号： G01R31/08 ,  H04J1/16

CPC分类号： H04L45/42 ,  H04L41/0213 ,  H04L41/069 ,  H04L41/0806 ,  H04L41/0816 ,  H04L45/026 ,  H04L45/26 ,  H04L45/28

摘要： A communication network includes a plurality of nodes and a plurality of links connecting between the nodes. A management computer managing the communication network has a storage means, an entry control means and a monitoring means. A route information indicating a transfer route of frames in the communication network is stored in the storage means. The monitoring means performs, based on the route information, transmission and reception of frames to and from the communication network. The entry control means instructs each node to set up a forwarding table indicating a correspondence relationship between an input source and a forwarding destination of frames. More specifically, the entry control means instructs the each node to set up the forwarding table such that frames are forwarded along the transfer route indicated by the route information.

摘要翻译： 通信网络包括多个节点和连接在节点之间的多个链路。 管理通信网络的管理计算机具有存储装置，入口控制装置和监视装置。 指示通信网络中的帧的传送路由的路由信息​​被存储在存储装置中。 监视装置根据路由信息，对通信网络进行帧的发送和接收。 入口控制装置指示每个节点建立指示帧的输入源和转发目的地之间的对应关系的转发表。 更具体地，入口控制装置指示每个节点建立转发表，使得帧沿着由路由信息指示的传送路由转发。

公开(公告)号：US20130266018A1

公开(公告)日：2013-10-10

申请号：US13997158

申请日：2011-08-30

申请人： Yuta Ashida ,  Toshio Koide

发明人： Yuta Ashida ,  Toshio Koide

IPC分类号： H04L12/56

CPC分类号： H04L45/745 ,  H04L45/566 ,  H04L45/64 ,  H04L49/3009 ,  H04L49/552

摘要： A communication system includes a first switch that refers to a first processing rule included in a packet and processes the packet in accordance with the first processing rule; a second switch that includes a table associating and storing an identifier and a second processing rule for a packet, refers to an identifier included in a packet, and processes the packet in accordance with a second processing rule associated with the identifier; and a control apparatus that stores the first processing rule and the identifier in a packet, associates and stores, in the table of the second switch, the identifier and the second processing rule.

摘要翻译： 通信系统包括参照分组中包含的第一处理规则的第一交换机，并根据第一处理规则处理分组; 包括关联和存储分组的标识符和第二处理规则的表的第二交换机参考分组中包括的标识符，并且根据与该标识符相关联的第二处理规则处理该分组; 以及将第一处理规则和标识符存储在分组中的控制装置，在第二交换机的表中关联并存储标识符和第二处理规则。

公开(公告)号：US07969996B2

公开(公告)日：2011-06-28

申请号：US11817718

申请日：2006-02-27

申请人： Toshio Koide

发明人： Toshio Koide

IPC分类号： H04L12/56

CPC分类号： H04L12/4633 ,  H04L41/0213 ,  H04L45/00 ,  H04L69/22 ,  H04L69/324 ,  H04L2212/00

摘要： The present invention provides a tunneling apparatus which can perform tunneling without requiring the network to be suspended or requiring the existing configuration of a local network to be modified. The frame sorting part 11 determines whether or not a frame input from a local network through a physical interface is an encapsulated tunnel frame. If such frame is a tunnel frame, the frame sorting part 11 outputs such frame to the decapsulation unit of the tunneling part 13. If such frame is not a tunnel frame, the frame sorting part 11 outputs such frame to at least one of the address resolution unit of the kernel part 12 and the encapsulation unit of the tunneling part, based on the characteristics of such frame.

摘要翻译： 本发明提供一种可以执行隧道传输而不需要暂停网络或者要求修改本地网络的现有配置的隧道设备。 帧分类部11判断通过物理接口从本地网络输入的帧是否是封装的隧道帧。 如果这样的帧是隧道帧，则帧排序部分11将这样的帧输出到隧道部分13的解封装单元。如果这样的帧不是隧道帧，则帧分类部分11将这样的帧输出到至少一个地址 基于这种帧的特性，内核部分12的分辨率单元和隧道部分的封装单元。

公开(公告)号：US08583912B2

公开(公告)日：2013-11-12

申请号：US11850899

申请日：2007-09-06

申请人： Yuichi Ishikawa ,  Toshio Koide

发明人： Yuichi Ishikawa ,  Toshio Koide

IPC分类号： H04L29/06

CPC分类号： H04L9/0833 ,  H04L9/0838 ,  H04L2209/601

摘要： In a client terminal of a communication system, a cipher session establishing section establishes a cipher session use connection between the client terminal as a source client terminal and a relay server by transmitting/receiving a cipher session establishment message between the source client terminal and the relay server, and notifies header information contained in a cipher session header to the relay server. A shared key managing section holds a client shared key with a destination client terminal, A data enciphering section performs encipherment of a data and/or MAC (Message Authentication Code) calculation of the data by using the client shared key and to output the performing result as a client cipher data. A message producing section produces a data communication message including a cipher data field in which the client cipher data is inserted and a non-cipher data field in which the cipher session header containing the header information is inserted. A transmitting section transmits the data communication messages destined to the destination client terminal to the relay server by using the cipher session use connection.

摘要翻译： 在通信系统的客户终端中，密码会话建立单元通过在源客户终端和中继站之间发送/接收加密会话建立消息来建立作为源客户终端的客户终端与中继服务器之间的加密会话使用连接 服务器，并将包含在密码会话报头中的报头信息通知给中继服务器。 共享密钥管理部分与目的客户终端保持客户端共享密钥，数据加密部分通过使用客户端共享密钥对数据进行数据和/或MAC（消息认证码）的计算，并输出执行结果 作为客户端密码数据。 消息产生部分产生包括其中插入客户端密码数据的密码数据字段的数据通信消息和其中插入包含标题信息的密码会话报头的非加密数据字段。 发送部通过使用密码会话使用连接将发往目的地客户终端的数据通信消息发送给中继服务器。

公开(公告)号：US09544194B2

公开(公告)日：2017-01-10

申请号：US14343711

申请日：2012-09-07

申请人： Kentaro Sonoda ,  Hideyuki Shimonishi ,  Toshio Koide ,  Yoichi Hatano

发明人： Kentaro Sonoda ,  Hideyuki Shimonishi ,  Toshio Koide ,  Yoichi Hatano

IPC分类号： H04L12/26 ,  H04L12/28 ,  H04L12/24

CPC分类号： H04L41/0893 ,  H04L41/5064

摘要： A network management service system includes a policy management apparatus that receives updating of a communication policy from an user and manages the communication policy for each user; a control apparatus that generates a packet handling operation of a packet associated with the communication policy of the user, in response to a request from the user, and sets the generated packet handling operation in a forwarding node(s); and the forwarding node(s) that processes the packet using the packet handling operation generated by the control apparatus.

摘要翻译： 网络管理服务系统包括：策略管理装置，其从用户接收通信策略的更新，并管理每个用户的通信策略; 响应于来自用户的请求，生成与用户的通信策略相关联的分组的分组处理操作的控制装置，并且将所生成的分组处理操作设置在转发节点中; 以及使用由控制装置生成的分组处理操作来处理分组的转发节点。

公开(公告)号：US20150063354A1

公开(公告)日：2015-03-05

申请号：US14389309

申请日：2013-03-29

申请人： Kentaro Sonoda ,  Hideyuki Shimonishi ,  Toshio Koide ,  Yoichi Hatano ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki ,  Yuki Ashino ,  Takeo Ohno

发明人： Kentaro Sonoda ,  Hideyuki Shimonishi ,  Toshio Koide ,  Yoichi Hatano ,  Masayuki Nakae ,  Masaya Yamagata ,  Yoichiro Morita ,  Takayuki Sasaki ,  Yuki Ashino ,  Takeo Ohno

IPC分类号： H04L12/741 ,  H04L12/751 ,  H04L12/721

CPC分类号： H04L45/74 ,  G06F9/45558 ,  G06F2009/45595 ,  H04L41/04 ,  H04L45/02 ,  H04L45/42 ,  H04L45/70

摘要： A communication system, includes: a node that requests a processing rule for processing a packet; and a control apparatus that notifies the node of the processing rule in response to the request. The control apparatus, upon being notified of change of a connection relationship between a communication apparatus to which a packet is addressed and the node, determines a forwarding path for a packet addressed to the communication apparatus and notifies the node of a processing rule for realizing the forwarding path.

摘要翻译： 一种通信系统，包括：请求处理规则以处理分组的节点; 以及响应于该请求向处理规则通知节点的控制装置。 控制装置在被通知了分组所寻址的通信装置与节点之间的连接关系的改变时，确定寻址到通信装置的分组的转发路径，并向节点通知用于实现分组的处理规则 转发路径。

公开(公告)号：US20130308462A1

公开(公告)日：2013-11-21

申请号：US13983539

申请日：2012-02-06

申请人： Yuta Ashida ,  Toshio Koide

发明人： Yuta Ashida ,  Toshio Koide

IPC分类号： H04L12/801

CPC分类号： H04L47/10 ,  H04L41/12 ,  H04L45/02 ,  H04L45/38 ,  H04L49/70

摘要： A communication system includes: a plurality of communication nodes; and a control apparatus that controls packet processing of the plurality of communication nodes. The control apparatus further includes: a virtualization unit that configures a virtual node(s) from a plurality of communication nodes among the plurality of communication nodes; a control unit that sets a processing rule for a packet in at least one communication node of the plurality of communication nodes included in the virtual node(s), so that the at least one communication node executes packet processing corresponding to an operation of the virtual node(s); and a path calculation unit that calculates a forwarding path of a packet, based on a virtual network topology including the virtual node(s). The plurality of communication nodes process a packet corresponding to the forwarding path, in accordance with the processing rule.

摘要翻译： 通信系统包括：多个通信节点; 以及控制多个通信节点的分组处理的控制装置。 控制装置还包括：虚拟化单元，其从多个通信节点中的多个通信节点配置虚拟节点; 控制单元，其在所述虚拟节点中包括的所述多个通信节点的至少一个通信节点中设置分组的处理规则，使得所述至少一个通信节点执行与所述虚拟节点的操作相对应的分组处理 节点; 以及路径计算单元，其基于包括所述虚拟节点的虚拟网络拓扑来计算分组的转发路径。 多个通信节点根据处理规则处理与转发路径对应的分组。