One-way transmission and reception with delayed TCP ACK message and monitoring for UDP and TCP frames
    1.
    发明授权
    One-way transmission and reception with delayed TCP ACK message and monitoring for UDP and TCP frames 有权
    单向传输和接收具有延迟的TCP ACK消息和监视UDP和TCP帧

    公开(公告)号:US09565162B2

    公开(公告)日:2017-02-07

    申请号:US14726496

    申请日:2015-05-30

    Abstract: A one-way data transmission and reception system and method, which mitigate the problem of a buffer overflow that may occur on a reception system while also mitigating the problem of data loss caused by a link error that may occur in the unidirectional line of a physical one-way data transmission system. The one-way data transmission system includes a first interface unit connected to a first network. A second interface unit is unidirectionally connected to a reception system connected to a second network. An interface integration module unit transmits a delayed Transmission Control Protocol (TCP) Acknowledgement (ACK) frame to a TCP session established with a device of the first network unit through the first interface unit, and transmits one or more identical data frames to the reception system through the second interface unit.

    Abstract translation: 一种单向数据发送和接收系统和方法,其减轻可能在接收系统上发生的缓冲器溢出的问题,同时还减轻了可能在物理的单向线路中发生的链路错误引起的数据丢失的问题 单向数据传输系统。 单向数据传输系统包括连接到第一网络的第一接口单元。 第二接口单元被单向连接到连接到第二网络的接收系统。 接口集成模块单元通过第一接口单元向与第一网络单元的设备建立的TCP会话发送延迟的传输控制协议(TCP)确认(ACK)帧,并且向接收系统发送一个或多个相同的数据帧 通过第二接口单元。

    Network security apparatus and method
    2.
    发明授权
    Network security apparatus and method 有权
    网络安全设备及方法

    公开(公告)号:US09444845B2

    公开(公告)日:2016-09-13

    申请号:US14277360

    申请日:2014-05-14

    CPC classification number: H04L63/20 H04L63/1408

    Abstract: A network security apparatus includes a management unit, a security policies monitoring unit, a security monitoring unit, a log security check unit, and a log transmission unit. The management unit receives network security apparatus setting information, security policies and log generation policies from the outside. The security policies monitoring unit checks whether the security policies comply with a set format. If the security policies comply with the set format, the security monitoring unit monitors whether a communication node communicates in compliance with the security policies. The log security check unit generates a monitoring log based on the log generation policies, and checks whether the monitoring log complies with a log setting format. If the monitoring log complies with the log setting format, the log transmission unit transmits the security log to the outside, thereby performing the outside network security.

    Abstract translation: 网络安全装置包括管理单元,安全策略监视单元,安全监视单元,日志安全检查单元和日志传输单元。 管理单元从外部接收网络安全设备设置信息,安全策略和日志生成策略。 安全策略监控单元检查安全策略是否符合设置的格式。 如果安全策略符合设定的格式,则安全监控单元监视通信节点是否按照安全策略进行通信。 日志安全检查单元根据日志生成策略生成监控日志,并检查监控日志是否符合日志设置格式。 如果监控日志符合日志设置格式,则日志发送单元将安全日志发送到外部,从而执行外部网络安全。

    Physical unidirectional communication apparatus and method

    公开(公告)号:US09749011B2

    公开(公告)日:2017-08-29

    申请号:US14790074

    申请日:2015-07-02

    Abstract: A physical unidirectional communication apparatus and method intended to utilize a structure that exploits an electrical signal by which data cannot be transmitted and to guarantee the reliability of data transmission via a transmission method that uses the structure. The physical unidirectional communication apparatus includes a unidirectional data transmission line, a data reception status transmission line, an internal network connection system unit for performing communication with an internal network transmission host and transmitting transmission data to an external network connection system unit through the unidirectional data transmission line, and the external network connection system unit for performing communication with an external network reception host, receiving the transmission data from the internal network connection system unit, generating reception status information of the transmission data, and transmitting the reception status information to the internal network connection system unit through the data reception status transmission line.

    Method for transmitting and receiving fake communication data and terminal performing the same
    7.
    发明授权
    Method for transmitting and receiving fake communication data and terminal performing the same 有权
    用于发送和接收假通信数据的方法以及执行该伪通信数据的终端

    公开(公告)号:US09338646B2

    公开(公告)日:2016-05-10

    申请号:US14474250

    申请日:2014-09-01

    Abstract: A technology for preventing leakage of personal information from traffics of terminals by transmitting and receiving fake communication data artificially generated so that an attacker does not identify normal communication between terminals is provided. A method for transmitting fake communication data includes: making a response request to whether or not a fake communication application is presented in an opponent terminal using an address book registered in a terminal; receiving a response corresponding to the response request and selecting targets to and from which the fake communication data are to be transmitted and received in a terminal list corresponding to the received response; controlling a communication amount depending on the selected targets; and transmitting the fake communication data to a corresponding receiving terminal depending on a control result.

    Abstract translation: 提供一种用于通过发送和接收伪造的通信数据来防止个人信息从终端的流量泄漏的技术,从而使攻击者不识别终端之间的正常通信。 用于发送假通信数据的方法包括:使用登记在终端中的地址簿对对手终端中是否呈现假通信应用做出响应请求; 接收对应于所述响应请求的响应,并且在对应于接收到的响应的终端列表中选择要发送和接收假通信数据的目标; 根据所选择的目标控制通信量; 以及根据控制结果将假通信数据发送到对应的接收终端。

Patent Agency Ranking