公开(公告)号：EP2823686B1

公开(公告)日：2016-03-02

申请号：EP13718374.5

申请日：2013-03-04

申请人： ALCATEL LUCENT

发明人： LIANG, Zheng ,  BIN, Fanxiang ,  WEN, Haibo ,  YAO, Chunyan

IPC分类号： H04W74/08

CPC分类号： H04W72/1205 ,  H04W72/04 ,  H04W72/121 ,  H04W74/006 ,  H04W74/08 ,  H04W84/12

公开(公告)号：EP2197161A1

公开(公告)日：2010-06-16

申请号：EP08800617.6

申请日：2008-09-19

申请人： Alcatel Lucent

发明人： YAO, Chunyan ,  WEN, Haibo ,  ZHENG, Jun ,  BIN, Fanxiang

IPC分类号： H04L12/56

摘要： The present invention proposes a method for controlling the uplink transmission of the multicast IP packet sourced from the UE in field of IP packet transmission in access network. According to the technical solution of the present invention, the access devices receives IP packet from the UE, checks the IP packet and determines whether the IP packet is multicast IP packet that is allowed to be accessed. If the access device determines that the IP packet is multicast IP packet that is allowed to be accessed, then it sends the multicast IP packet in multicast form. Via the present invention, the access device can allow the uplink valid multicast IP packet to pass, preferably, determines and intercepts the malicious attacks via multicast IP packet, so as to ensure the DSL access device's support for mobile IPv4, so as to keep the uninterrupted connection of the service to the user when the user moves between different subnets.

摘要翻译： 本发明提出一种用于在接入网络中的IP分组传输领域中控制来自UE的多播IP分组的上行传输的方法。 根据本发明的技术方案，接入设备从UE接收IP分组，检查IP分组，并确定IP分组是否是允许访问的多播IP分组。 如果接入设备确定IP分组是被允许访问的组播IP分组，则以多播形式发送组播IP分组。 通过本发明，接入设备可以允许上行有效的多播IP分组通过，优选地通过多播IP分组来确定和拦截恶意攻击，以确保DSL接入设备对移动IPv4的支持，以保持 当用户在不同子网之间移动时，服务与用户的不间断连接。

公开(公告)号：EP2451213B1

公开(公告)日：2017-03-01

申请号：EP09846681.6

申请日：2009-06-30

申请人： ALCATEL LUCENT

发明人： ZHENG, Jun ,  YAO, Chunyan ,  WEN, Haibo ,  BIN, Fanxiang ,  MA, Songwei

IPC分类号： H04W36/32 ,  H04W36/00 ,  H04W80/04 ,  H04W24/00 ,  H04W24/02 ,  H04W36/08 ,  H04W36/14 ,  H04W48/16 ,  H04W84/12 ,  H04W88/02 ,  H04W88/08 ,  H04W60/00

CPC分类号： H04W36/32 ,  H04W24/00 ,  H04W24/02 ,  H04W36/0033 ,  H04W36/08 ,  H04W36/14 ,  H04W48/16 ,  H04W60/00 ,  H04W80/04 ,  H04W84/12 ,  H04W88/02 ,  H04W88/08

公开(公告)号：EP2317690A1

公开(公告)日：2011-05-04

申请号：EP09806286.2

申请日：2009-06-16

申请人： Alcatel Lucent

发明人： WEN, Haibo ,  YAO, Chunyan ,  ZHENG, Jun ,  MA, Songwei

IPC分类号： H04L9/00

CPC分类号： H04L63/1466 ,  H04L63/0218 ,  H04L63/0263 ,  H04L63/0876 ,  H04L63/10 ,  H04L63/126 ,  H04L63/20 ,  H04W12/08 ,  H04W88/08 ,  H04W88/14

摘要： With migration of network technology and more and more requirements of user equipment for accessing to Internet, the network security faces more and more severe situation. There is provided a method for distributed security control in communication network system and the device thereof in order to improve security and operatability of network operator. In the method, firstly the network controller establishes a network security control mechanism, which is used for a second network device to check the validity of the data package from the user equipment; secondly, the network controller sends the network security control mechanism to the second network devices; lastly, the second network device checks the validity of the data package from the user equipment according to the network security control mechanism, and discards the data package if the data package is invalid. With the present invention, security and operatability of the communication network may be improved greatly, particularly, the functionality of address anti-spoofing can be implemented in the network with a WLAN architecture in centralized control.

摘要翻译： 随着网络技术的转移和用户设备对互联网的需求越来越多，网络安全面临着越来越严重的形势。 提供了一种通信网络系统中的分布式安全控制方法及其设备，以提高网络运营商的安全性和可操作性。 在该方法中，首先网络控制器建立网络安全控制机制，用于第二网络设备，从用户设备检查数据包的有效性; 其次，网络控制器向网络设备发送网络安全控制机制; 最后，第二网络设备根据网络安全控制机制检查用户设备的数据包的有效性，如果数据包无效，则丢弃数据包。 利用本发明，可以大大提高通信网络的安全性和可操作性，特别是可以在具有集中控制的WLAN架构的网络中实现地址反欺骗的功能。

公开(公告)号：EP2124388A1

公开(公告)日：2009-11-25

申请号：EP07721621.6

申请日：2007-07-03

申请人： Alcatel Lucent

发明人： YAO, Chunyan ,  WEN, Haibo ,  MA, Songwei

IPC分类号： H04L12/18

CPC分类号： H04L12/1886 ,  H04L12/185 ,  H04L45/16

摘要： The present invention provides a method and apparatus for registering to a designated router in a rendezvous point in an anycast group in a multicast communication network, wherein the rendezvous point implements a joint-registering based on registering status of all rendezvous points in the anycast group. The main rendezvous point sends to the designated router the Register Stop message only when all rendezvous points in the anycast group do not need the Register message from the designated router; when any one of other rendezvous points does not need the Register message, sending the Register message to it is stopped. With the method and apparatus of the present invention, the cases resulting in the interruption of subscriber terminal multicast traffic can be reduced, and the CPU resource of the main rendezvous point and bandwidth resources between it and other rendezvous points are saved.

摘要翻译： 本发明提供了一种用于向组播通信网络中的任播组中的会合点向指定路由器注册的方法和装置，其中所述会合点基于所述任播组中的所有会合点的注册状态来实现联合注册。 只有当任播组中的所有会合点不需要来自指定路由器的注册消息时，主会合点才会向指定路由器发送注册停止消息; 当其他会合点中的任何一个不需要注册消息时，将停止发送注册消息。 利用本发明的方法和装置，可以减少导致用户终端组播流量中断的情况，并且节省主会合点的CPU资源和其与其他会合点之间的带宽资源。

公开(公告)号：EP2439876B1

公开(公告)日：2017-04-12

申请号：EP09845390.5

申请日：2009-06-01

申请人： ALCATEL LUCENT

发明人： YAO, Chunyan ,  CHEN, Jianbin ,  WEN, Haibo ,  BIN, Fanxiang ,  ZHENG, Jun

IPC分类号： H04L12/18 ,  H04L12/761 ,  H04L12/927 ,  H04L12/729

CPC分类号： H04L12/1886 ,  H04L45/125 ,  H04L45/16 ,  H04L47/806

公开(公告)号：EP2823686A1

公开(公告)日：2015-01-14

申请号：EP13718374.5

申请日：2013-03-04

申请人： ALCATEL LUCENT

发明人： LIANG, Zheng ,  BIN, Fanxiang ,  WEN, Haibo ,  YAO, Chunyan

IPC分类号： H04W74/08

CPC分类号： H04W72/1205 ,  H04W72/04 ,  H04W72/121 ,  H04W74/006 ,  H04W74/08 ,  H04W84/12

摘要： The invention relates to a method, in an access point of a wireless local area network, of scheduling a radio resource, wherein at least one categorization rule is set in the wireless local area network, and at least one access group is set for a plurality of non-access-point stations served by the access point according to each of the at least one categorization rule, the method comprising the steps of: sending at least one categorization message to at least one of the plurality of stations, each categorization message comprising information about one of all the access groups which are set in the wireless local area network according to the at least one categorization rule; and sending a clear-to-send frame to the plurality of stations to indicate a radio resource allocated to an access group to be protected among all the access groups. The invention can distinctly resolve the contention for radio resource between the stations, effectively limit the number of concurrently contending stations and provide flexibility in access control of an access group.

公开(公告)号：EP2439886A1

公开(公告)日：2012-04-11

申请号：EP09845396.2

申请日：2009-06-03

申请人： Alcatel Lucent

发明人： YAO, Chunyan ,  YU, Hongbin ,  CHEN, Jianbin ,  YANG, Shuigen ,  ZHENG, Jun ,  BIN, Fanxiang

IPC分类号： H04L12/56

CPC分类号： H04L12/189 ,  H04L45/16 ,  H04L45/48 ,  H04W76/40

摘要： The invention proposes method and apparatus in a plurality of rendezvous points for together processing multicast traffics from mobile multicast source. Wherein, a first rendezvous point and at least one second rendezvous point compose an anycast group which is used for sharing the processing task of the multicast data packets of the mobile multicast source point together, the first rendezvous point and the at least one second rendezvous point share a route forwarding table, the route forwarding table comprises corresponding relation among the care-of-address, the home address and the multicast address of one or more multicast sources. The first rendezvous point obtains the multicast data packets, forwards the multicast data packets to the at least one second rendezvous point, when needing to forward the multicast data packets to the at least one second rendezvous point; the first rendezvous point searches the route forwarding table, according to address information of the multicast packet; determines the corresponding shared multicast tree, when the address information matches the care-of address and/or home address and matches the multicast address of an candidate multicast source; and forwards the multicast data packet according to the shared multicast tree.

摘要翻译： 本发明提出了方法和装置，在会合点为统一性多个处理来自移动组播源组播流量。 其中，第一会合点和至少一个第二会合点处选播组组成的所有其用于共享移动组播源点的所述多播数据分组的处理任务在一起时，第一会合点和所述至少一个第二会合点 共享路由转发表，路由转发表包括地址转交中的对应关系，家庭地址和一个或多个组播源组播地址。 第一会合点获得的组播数据包，所述组播数据包发送到至少一个第二会合点转发，当需要将多播数据分组发送到至少一个第二会合点转发; 第一会合点搜索路由转发表，gemäß以解决多播分组的信息; bestimmt相应的共享组播树，当地址信息的转交地址和/或家庭地址匹配和候选组播源的组播地址相匹配; 并转发组播数据包gemäß到共享组播树。

公开(公告)号：EP2732587B1

公开(公告)日：2019-09-04

申请号：EP12797300.6

申请日：2012-06-04

申请人： Alcatel Lucent

发明人： LIANG, Zheng ,  ZHENG, Jun ,  YAO, Chunyan ,  BIN, Fanxiang ,  WEN, Haibo

IPC分类号： H04L12/715 ,  H04L12/723 ,  H04L12/52 ,  H04L12/50 ,  H04L12/24 ,  H04L12/781 ,  H04L12/931

公开(公告)号：EP2323319A1

公开(公告)日：2011-05-18

申请号：EP08800715.8

申请日：2008-08-29

申请人： Alcatel Lucent

发明人： YAO, Chunyan ,  LUO, Xiaojun ,  BIN, Fanxiang

IPC分类号： H04L12/56

CPC分类号： H04W60/00 ,  H04W8/20 ,  H04W80/04 ,  H04W88/182

摘要： The present invention provides an improved solution of registering with a Home Agent HA of a Mobile Node MN, comprising: grouping at lest two Foreign Agents FAs to form a Foreign Agent Group FAG to enable FA members of the FAG to share information of the MN roaming into a FAG coverage area; when any FA member of the FAG receives a registration request for registering a care-of address with the HA sent by the MN, determining whether the MN enters the FAG coverage area for the first time based on the shared MN information; and if the MN enters the FAG coverage area for the first time, the FA forwards the received registration request to the HA; otherwise, the FA directly sends a registration response to the MN. The solution of the present invention greatly reduces registration messages from the MN to the HA, thereby reducing signaling delay produced when the MN moves in the FN. Also, both the MN and the HA in the prior art can be merged into the solution, thereby achieving seamless integration with IPv4, preferably with Mobile IPv4 scheme.

摘要翻译： 本发明提供了一种与移动节点MN的归属代理HA进行注册的改进的解决方案，其包括：至少分组两个外部代理方，以形成外部代理组FAG，以使FAG的FA成员共享MN漫游的信息 进入FAG覆盖区域; 当FAG的任何FA成员接收到由MN发送的HA注册转交地址的注册请求时，基于共享的MN信息确定MN是否首次进入FAG覆盖区域; 并且如果MN首次进入FAG覆盖区域，则FA将接收到的注册请求转发给HA; 否则，FA直接向MN发送注册响应。 本发明的解决方案大大减少了从MN到HA的注册消息，从而减少MN在FN中移动时产生的信令延迟。 此外，现有技术中的MN和HA都可以合并到解决方案中，从而实现与IPv4的无缝集成，优选地与移动IPv4方案。