公开(公告)号：US20150381462A1

公开(公告)日：2015-12-31

申请号：US14702906

申请日：2015-05-04

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Tae Sang CHOI ,  Sang Sik YOON ,  Sae Hoon KANG ,  Ji Young KWAK ,  Young Hwa KIM ,  Sae Hyong PARK ,  Yong Yoon SHIN ,  Ji Soo SHIN ,  Sun Hee YANG ,  Byung Yun LEE ,  Byung Joon LEE

IPC: H04L12/26

CPC classification number: H04L41/0893 ,  H04L43/0817 ,  H04L43/16

Abstract: A system and method for virtualizing SDN-based network monitoring. The system for includes: an information collector, a monitoring component, an information converter, and a resource allocator, in which a user-defined virtual monitor is included so that integrated monitoring may be performed, and expandability may be guaranteed to dynamically respond to a user's, demands.

Abstract translation: 一种用于虚拟化基于SDN的网络监控的系统和方法。 该系统包括：信息收集器，监视组件，信息转换器和资源分配器，其中包括用户定义的虚拟监视器，使得可以执行集成监视，并且可以保证可扩展性以动态地响应于 用户需求。

公开(公告)号：US20210167947A1

公开(公告)日：2021-06-03

申请号：US17107205

申请日：2020-11-30

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Byung Ho CHUNG ,  Sae Hoon KANG ,  Ji Soo SHIN ,  Nam Seok KO ,  Sun Mi KIM

IPC: H04L9/08 ,  H04L9/32

Abstract: Disclosed herein is a system for a secret sharing authentication. The system may include a secret sharing information management server, a client device, and a network device. The secret sharing information management server may store and manage an authentication key capable of being used for secret sharing authentication, by dividing the authentication key into a first secret sharing key shard and a second secret sharing key shard, and allocate the first and second secret sharing key shards. The client device may receive the first secret sharing key shard from the secret sharing information management server and construct an interest packet by using the first secret sharing key shards. The network device may receive the second secret sharing key shard from the secret sharing information management server, and process the interest packet received from the client device on the basis of an ICN(Information Centric Networking) method by performing secret sharing authentication using the second secret sharing key shard and the first secret sharing key shard comprised in the interest packet.

公开(公告)号：US20160261507A1

公开(公告)日：2016-09-08

申请号：US15059769

申请日：2016-03-03

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Ji Young KWAK ,  Sae Hoon KANG ,  Yong Yoon SHIN

IPC: H04L12/803 ,  H04L12/707 ,  H04L12/741 ,  H04L12/721 ,  H04L12/715

CPC classification number: H04L47/125 ,  H04L45/24 ,  H04L45/38 ,  H04L45/64 ,  H04L45/745

Abstract: A method and apparatus for controlling and managing a flow. The apparatus classifies a flow management space into a plurality of spaces, detects a heavy load-flow in the classified flow management space, and adjusts variably the flow management space due to a control traffic processing overhead, transmits the detected heavy load-flow according to a weight of each forwarding path through multi-path routing, and balances traffic.

Abstract translation: 一种用于控制和管理流量的方法和装置。 该装置将流量管理空间分类为多个空间，检测分类流量管理空间中的重负载流，并且由于控制业务处理开销可变地调整流量管理空间，根据 通过多路径路由的每个转发路径的权重，并平衡流量。

公开(公告)号：US20150195183A1

公开(公告)日：2015-07-09

申请号：US14589077

申请日：2015-01-05

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Sae Hyong PARK ,  Sae Hoon KANG ,  Byung Joon LEE ,  Ji Soo SHIN

IPC: H04L12/755

CPC classification number: H04L45/021 ,  H04L41/0816

Abstract: A method and apparatus for managing a flow table is provided. The method includes dividing a flow table into a plurality of states according to occupancy levels of the flow table in a network device; and managing the flow table by reflecting the changed state of the flow table.

Abstract translation: 提供一种用于管理流程表的方法和装置。 该方法包括根据网络设备中的流表的占用等级将流表划分成多个状态; 并通过反映流表的改变状态来管理流表。

公开(公告)号：US20180103091A1

公开(公告)日：2018-04-12

申请号：US15628425

申请日：2017-06-20

Applicant: Electronics and Telecommunications Research Institute

Inventor： Ji Young KWAK ,  Sae Hoon KANG ,  Hyun Joo BAE ,  Gwang Woo PARK ,  Sang Heon PACK ,  Ho Sung BAEK

IPC: H04L29/08 ,  H04L12/24 ,  H04L12/721

CPC classification number: H04L67/1034 ,  H04L41/5025 ,  H04L41/5041 ,  H04L43/08 ,  H04L43/0817 ,  H04L45/127 ,  H04L67/10

Abstract: A method for configuring a service function path (SFP) for a software defined network (SDN) based service function chain (SFC) may comprise configuring a SFC which is a set of ordered service functions (SFs) by reflecting requirements of a flow flowing into a network; generating a primary SFP that is a path through which the flow is to be actually transmitted in the network according to the SFC; generating a secondary SFP against an error of the primary SFP; and controlling a transmission path through which the flow is transmitted to be at least one of the primary SFP and the secondary SFP.

公开(公告)号：US20170353387A1

公开(公告)日：2017-12-07

申请号：US15233930

申请日：2016-08-10

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Ji Young KWAK ,  Sae Hoon KANG ,  Hyun Joo BAE

IPC: H04L12/803 ,  H04L12/801 ,  H04L12/721

CPC classification number: H04L47/125 ,  H04L45/28 ,  H04L45/38 ,  H04L47/18

Abstract: Provided is a distributed service function (SF) forwarding system that applies the corresponding service function chain (SFC) to traffic classified by a plurality of service network (SN) controller instances based on an SN overlay structure. Therefore, by selectively combining and executing necessary network functions (SFs) according to a path and traffic made up of defined component services, it is possible to dynamically configure and control one network service.

公开(公告)号：US20160226817A1

公开(公告)日：2016-08-04

申请号：US14993273

申请日：2016-01-12

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Sae Hoon KANG ,  Ji Soo SHIN ,  Sun Hee YANG

IPC: H04L29/12 ,  H04L12/741

CPC classification number: H04L61/103 ,  H04L41/12 ,  H04L45/64 ,  H04L47/25

Abstract: An apparatus and method for resolving a mapping between an address of a physical or virtual node and a physical address on a network, in the SDN in which a network is controlled based on software by a centralized controller. The apparatus may include an address matcher and a controller. The controller may determine all matters related to packet forwarding in a centralized method; and an application for performing desired functions is programmed in the controller, which is then installed therein. Accordingly, the purpose thereof is to provide new network services easily.

Abstract translation: 一种用于解决物理或虚拟节点的地址与网络上的物理地址之间的映射的装置和方法，所述SDN中的基于由集中式控制器的软件来控制网络。 该装置可以包括地址匹配器和控制器。 控制器可以以集中方式确定与分组转发有关的所有事项; 并且在控制器中编程用于执行所需功能的应用程序，然后将其安装在其中。 因此，其目的是容易地提供新的网络服务。

公开(公告)号：US20230155819A1

公开(公告)日：2023-05-18

申请号：US17884748

申请日：2022-08-10

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Ji Soo SHIN ,  Sae Hoon KANG ,  Nam Seok KO

IPC: H04L9/08 ,  H04L9/14 ,  H04L9/30

CPC classification number: H04L9/085 ,  H04L9/14 ,  H04L9/0861 ,  H04L9/3073

Abstract: Disclosed herein are a method for protecting data for information centric in-network computing and a system using the same. The method includes: preparing, at a computing node, a an encryption key pool that includes a security key for sharing a symmetric key used for encrypting result data according to a user's request and matching information; preparing, at an INC agent receiving the user's request, a synchronization key pool for sharing the security key through the matching information; and creating, by the computing node, a processor for executing output processing of the result data and allocating a security key to the processor based on the matching information of the encryption key pool when a security key exists. The security key is allocated to the computing node which is determined to perform the request in the INC agent.

公开(公告)号：US20220182334A1

公开(公告)日：2022-06-09

申请号：US17508875

申请日：2021-10-22

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Sae Hoon KANG ,  Ji Soo SHIN ,  Nam Seok KO

IPC: H04L12/927 ,  H04L12/911 ,  H04L12/721 ,  G06F9/48

Abstract: The present invention relates to an apparatus and method for returning execution result of function in name-based in network distributed computing system. The present invention includes sending a first packet requesting execution of a function to a first node; transmitting a second packet requesting the execution result of the function to a second node; and receiving, after transmitting the second packet, a third packet, which comprises the execution result of the function, from the second node.

公开(公告)号：US20160119189A1

公开(公告)日：2016-04-28

申请号：US14877033

申请日：2015-10-07

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Tae Sang CHOI ,  Chung Lae CHO ,  Sae Hoon KANG ,  Ji Young KWAK ,  Young Hwa KIM ,  Tae Hong KIM ,  Sae Hyong PARK ,  Yong Yoon SHIN ,  Ji Soo SHIN ,  Sun Hee YANG ,  Byung Joon LEE

IPC: H04L12/24 ,  H04L12/66 ,  H04L12/911 ,  H04L29/08 ,  H04L12/46

CPC classification number: H04L41/12 ,  H04L41/0806 ,  H04L41/0896 ,  H04L41/5051 ,  H04L43/0817 ,  H04L43/0823

Abstract: A system for controlling a carrier virtual network is disclosed. The system includes at least one virtual network controller for controlling resources of a carrier virtual network based on customer request information received from a customer network controller, and at least one physical network controller for controlling resources of a carrier physical network based on a service profile received from the at least one virtual network controller. The at least one virtual network controller interworks with the at least one physical network controller in a one to one, one to N (N is an integer equal to or larger than 2), or N to one correspondence.

Abstract translation: 公开了一种用于控制运营商虚拟网络的系统。 该系统包括至少一个虚拟网络控制器，用于基于从客户网络控制器接收到的客户请求信息来控制运营商虚拟网络的资源;以及至少一个物理网络控制器，用于基于所接收的服务简档来控制载波物理网络的资源 来自所述至少一个虚拟网络控制器。 所述至少一个虚拟网络控制器与所述至少一个物理网络控制器以一对一，一至N（N为等于或大于2的整数）或N对应于一个对应。