公开(公告)号：US20120147891A1

公开(公告)日：2012-06-14

申请号：US13323178

申请日：2011-12-12

申请人： Hwan-Jo HEO ,  Nam-Seok Ko ,  Woo-Sug Jung ,  Sung-Jin Moon ,  Sung-Kee Noh ,  Jong-Dae Park ,  Byung-Ho Yae

发明人： Hwan-Jo HEO ,  Nam-Seok Ko ,  Woo-Sug Jung ,  Sung-Jin Moon ,  Sung-Kee Noh ,  Jong-Dae Park ,  Byung-Ho Yae

IPC分类号： H04L12/56

CPC分类号： H04L47/125

摘要： A distributed packet processing apparatus capable of distributing packet load across a plurality of packet processing engines is provided. The distributed packet processing apparatus includes a plurality of processing engines each configured to process allocated packets, a first tag generating unit configured to allocate an input packet to a processing engine, which has a processing engine index corresponding to a tag index for the input packet, among the plurality of processing engines, a second tag generating unit configured to calculate a tag index for an output packet, and an index conversion unit configure to convert the tag index for the output packet to one processing engine index among a plurality of processing indexes for the plurality of the processing engines and allocates the output packet to a processing engine having the one processing engine such that loads are distributed among the plurality of processing engines.

摘要翻译： 提供能够跨多个分组处理引擎分发分组负载的分布式分组处理装置。 分布式分组处理装置包括：处理分配的分组的多个处理引擎，第一标签生成单元，被配置为向处理引擎分配输入分组，处理引擎具有与输入分组的标签索引对应的处理引擎索引， 在所述多个处理引擎中，第二标签生成单元，被配置为计算输出分组的标签索引，以及索引变换单元，其将所述输出分组的标签索引转换为多个处理索引中的多个处理索引， 所述多个处理引擎并将所述输出分组分配给具有所述一个处理引擎的处理引擎，使得在所述多个处理引擎之间分配负载。

公开(公告)号：US09374440B2

公开(公告)日：2016-06-21

申请号：US13619711

申请日：2012-09-14

申请人： Nam Seok Ko ,  Sung Kee Noh ,  Jong Dae Park

发明人： Nam Seok Ko ,  Sung Kee Noh ,  Jong Dae Park

IPC分类号： H04L12/26 ,  H04L29/08 ,  H04L12/743

CPC分类号： H04L67/327 ,  H04L45/7457 ,  H04L67/1097 ,  H04L67/2842

摘要： Provided is a packet forwarding structure for supporting network based content caching of aggregate contents. The packet forwarding structure includes: a forwarding table including forwarding information on a content in order to forward a request packet from a terminal; a request list table transmitting the request packet to a destination node according to the forwarding table when the request packet arrives; a content caching information table including the forwarding table, the request list table, and position information on where a content cashed based on a content ID or a content name is stored; and a content server function block storing the cached content.

摘要翻译： 提供了一种用于支持基于网络的聚合内容的内容缓存的分组转发结构。 分组转发结构包括：转发表，其包括转发关于内容的信息，以便从终端转发请求分组; 当所述请求分组到达时，根据所述转发表将请求分组发送到目的地节点的请求列表表; 包含转发表，请求列表表和基于内容ID或内容名称兑现的内容的位置信息的内容缓存信息表被存储; 以及存储缓存的内容的内容服务器功能块。

公开(公告)号：US08885646B2

公开(公告)日：2014-11-11

申请号：US13323178

申请日：2011-12-12

申请人： Hwan-Jo Heo ,  Nam-Seok Ko ,  Woo-Sug Jung ,  Sung-Jin Moon ,  Sung-Kee Noh ,  Jong-Dae Park ,  Byung-Ho Yae

发明人： Hwan-Jo Heo ,  Nam-Seok Ko ,  Woo-Sug Jung ,  Sung-Jin Moon ,  Sung-Kee Noh ,  Jong-Dae Park ,  Byung-Ho Yae

IPC分类号： H04L12/28 ,  H04L12/803

CPC分类号： H04L47/125

摘要： A distributed packet processing apparatus capable of distributing packet load across a plurality of packet processing engines is provided. The distributed packet processing apparatus includes a plurality of processing engines each configured to process allocated packets, a first tag generating unit configured to allocate an input packet to a processing engine, which has a processing engine index corresponding to a tag index for the input packet, among the plurality of processing engines, a second tag generating unit configured to calculate a tag index for an output packet, and an index conversion unit configure to convert the tag index for the output packet to one processing engine index among a plurality of processing indexes for the plurality of the processing engines and allocates the output packet to a processing engine having the one processing engine index such that loads are distributed among the plurality of processing engines.

摘要翻译： 提供能够跨多个分组处理引擎分发分组负载的分布式分组处理装置。 分布式分组处理装置包括：处理分配的分组的多个处理引擎，第一标签生成单元，被配置为向处理引擎分配输入分组，处理引擎具有与输入分组的标签索引对应的处理引擎索引， 在所述多个处理引擎中，第二标签生成单元，被配置为计算输出分组的标签索引，以及索引变换单元，其将所述输出分组的标签索引转换为多个处理索引中的多个处理索引， 多个处理引擎，并且将输出分组分配给具有一个处理引擎索引的处理引擎，使得负载分布在多个处理引擎之间。

公开(公告)号：US07330469B2

公开(公告)日：2008-02-12

申请号：US10723829

申请日：2003-11-25

申请人： Nam Seok Ko ,  Dong Yong Kwak

发明人： Nam Seok Ko ,  Dong Yong Kwak

IPC分类号： H04L12/54

CPC分类号： H04L45/00 ,  H04L45/742

摘要： Provided are an IP address lookup system and method for forwarding a packet over a data plane of a router. The IP address lookup system includes a forwarding table which has a three-layer table architecture so that it can search for each address group that constitutes an IP destination address of an input packet and a forwarding engine which obtains packet processing information and next hop information for the input packet by searching for the forwarding table using the IP destination address as a search key.

摘要翻译： 提供了一种用于通过路由器的数据平面转发分组的IP地址查找系统和方法。 IP地址查找系统包括具有三层表架构的转发表，以便能够搜索构成输入分组的IP目的地地址的每个地址组，以及获取分组处理信息和下一跳信息的转发引擎 通过使用IP目的地地址作为搜索关键字搜索转发表来输入分组。

公开(公告)号：US08514714B2

公开(公告)日：2013-08-20

申请号：US12899310

申请日：2010-10-06

申请人： Nam Seok Ko ,  Soon Seok Lee ,  Hyunjoo Kang ,  Seong Moon ,  Jong Dae Park ,  Seungwoo Hong ,  Kyeong Ho Lee

发明人： Nam Seok Ko ,  Soon Seok Lee ,  Hyunjoo Kang ,  Seong Moon ,  Jong Dae Park ,  Seungwoo Hong ,  Kyeong Ho Lee

IPC分类号： H04L12/26

CPC分类号： H04L45/38 ,  H04L45/30 ,  H04L47/2441

摘要： A device for providing forwarding and QoS information in a flow based network environment acquires first information and second information from a flow table therein on the basis of status information of a predetermined flow in order to provide dynamically updated information in a flow based network environment. When it is determined that first information and second information acquired based on a route ID of a series of information are updated, the flow table is updated and the updated information is provided.

摘要翻译： 用于在基于流的网络环境中提供转发和QoS信息的设备基于预定流的状态信息从其流表中获取第一信息和第二信息，以便在基于流的网络环境中提供动态更新的信息。 当确定基于一系列信息的路由ID获取的第一信息和第二信息被更新时，更新流表并提供更新的信息。

公开(公告)号：US20120147754A1

公开(公告)日：2012-06-14

申请号：US13324416

申请日：2011-12-13

申请人： Woo-Sug Jung ,  Jong-Dae Park ,  Byung-Ho Yae ,  Sung-Kee Noh ,  Sung-Jin Moon ,  Nam-Seok Ko ,  Hwan-Jo Heo

发明人： Woo-Sug Jung ,  Jong-Dae Park ,  Byung-Ho Yae ,  Sung-Kee Noh ,  Sung-Jin Moon ,  Nam-Seok Ko ,  Hwan-Jo Heo

IPC分类号： H04J3/14

CPC分类号： H04L43/028

摘要： A high-speed content inspection apparatus for minimizing system overhead is provided. The high-speed content inspection apparatus extracts content in unit of sub-pattern by inspecting a payload of a packet in units of sub-pattern, and extract target content by inspecting a correlation between the extracted sub-patterns. If a sub-pattern present at the end of a payload is smaller than a predetermined unit of a sub-pattern, position information of the sub-pattern at the end of the payload is rolled back and the correlation is inspected. Accordingly, without having to add another hardware or high-performance hardware, target content can be efficiently detected in real time.

摘要翻译： 提供了一种用于最小化系统开销的高速内容检查装置。 高速内容检查装置以子图案为单位检查分组的有效载荷，以子图案为单位提取内容，并通过检查提取的子模式之间的相关性来提取目标内容。 如果存在于有效负载结束处的子模式小于子模式的预定单元，则在有效负载结束时的子模式的位置信息被回滚并且检查相关性。 因此，无需添加另一硬件或高性能硬件，可以实时有效地检测目标内容。

公开(公告)号：US20120127858A1

公开(公告)日：2012-05-24

申请号：US13299618

申请日：2011-11-18

申请人： Nam-Seok KO ,  Jong-Dae Park ,  Byung-Ho Yae ,  Sung-Kee Noh ,  Woo-Sug Jung ,  Sung-Jin Moon ,  Hwan-Jo Heo ,  Soon-Seok Lee

发明人： Nam-Seok KO ,  Jong-Dae Park ,  Byung-Ho Yae ,  Sung-Kee Noh ,  Woo-Sug Jung ,  Sung-Jin Moon ,  Hwan-Jo Heo ,  Soon-Seok Lee

IPC分类号： H04L12/26

CPC分类号： H04L47/629 ,  H04L43/0894 ,  H04L47/52 ,  H04L47/525 ,  H04L47/568 ,  H04L47/58

摘要： A packet scheduling apparatus and method to fairly share network bandwidth between multiple subscribers and to fairly share the bandwidth allocated to each subscriber between multiple flows are provided. The packet scheduling method includes calculating first bandwidth for each subscriber to fairly share total bandwidth set for the transmission of packets between multiple subscribers; calculating second bandwidth for each flow to fairly share the first bandwidth between one or more flows that belong to each of the multiple subscribers; and scheduling a packet of each of the one or more flows based on the second bandwidth.

摘要翻译： 提供了一种在多个用户之间公平共享网络带宽并且公平地共享在多个流之间分配给每个用户的带宽的分组调度装置和方法。 分组调度方法包括：计算每个用户的第一带宽，以共享共享用于多个用户之间的分组传输的总带宽; 计算每个流的第二带宽以公平地共享属于多个用户中的每一个的一个或多个流之间的第一带宽; 以及基于所述第二带宽调度所述一个或多个流中的每一个的分组。

公开(公告)号：US20110267949A1

公开(公告)日：2011-11-03

申请号：US13141393

申请日：2009-09-17

申请人： Nam-Seok Ko ,  Sung-Back Hong ,  Bong-Tae Kim ,  Kyeong-Ho Lee

发明人： Nam-Seok Ko ,  Sung-Back Hong ,  Bong-Tae Kim ,  Kyeong-Ho Lee

IPC分类号： H04W28/16

CPC分类号： H04L12/4633 ,  H04W8/082 ,  H04W76/12 ,  H04W80/04

摘要： There are provided a quality of service (QoS)-providing system and a method for providing quality of service for mobile nodes in the QoS-providing system. Under a network environment running a host-based network layer mobility protocol based on tunneling mechanism, the QoS-providing system may be useful to allow effective mobility supports by distributing binding information to the distributed nodes, in order to provide session-based quality of service for tunneled packets between the mobile nodes on the access nodes and distribute traffic load concentrated on the central mobility control platform as well. Also, the QoS-providing system according to one exemplary embodiment of the present invention may be useful to provide the function of hiding locations of mobile nodes since a care-of address of the mobile node is not transferred to a correspondent node and to automatically perform a route optimization procedure even when the mobile node does not directly perform a route optimization procedure.

摘要翻译： 提供了一种服务质量（QoS）提供系统和一种为QoS提供系统中的移动节点提供服务质量的方法。 在运行基于隧道机制的基于主机的网络层移动性协议的网络环境下，QoS提供系统可能有助于通过向分布式节点分发绑定信息来实现有效的移动性支持，以便提供基于会话的服务质量 对于接入节点上的移动节点之间的隧道分组，并且分配集中在中央移动性控制平台上的业务负载。 此外，根据本发明的一个示例性实施例的QoS提供系统对于提供隐藏移动节点的位置的功能可能是有用的，因为移动节点的转交地址不被传送到通信节点并且自动执行 即使当移动节点不直接执行路由优化过程时，路由优化过程也是如此。

公开(公告)号：US20110023088A1

公开(公告)日：2011-01-27

申请号：US12842194

申请日：2010-07-23

申请人： Nam-Seok KO ,  Soon-Seok Lee ,  Jong-Dae Park ,  Sung-Kee Noh ,  Pyung-Koo Park ,  Seung-Woo Hong ,  Sung-Back Hong ,  Seong Moon

发明人： Nam-Seok KO ,  Soon-Seok Lee ,  Jong-Dae Park ,  Sung-Kee Noh ,  Pyung-Koo Park ,  Seung-Woo Hong ,  Sung-Back Hong ,  Seong Moon

IPC分类号： G06F21/20

CPC分类号： H04L63/1441 ,  H04L63/102

摘要： A traffic analysis and flow-based dynamic access control system and method. The flow-based dynamic access control system for controlling a user's access to an internal communication network through an external communication network includes an access control unit operating in an access control mode in which traffic received from a user is basically blocked, generating state management information of a flow, which is received from the user, based on a specified packet of the flow, and verifying whether access of the flow to the internal communication network is a normal access. As a proactive defense concept of allowing only normal users to access an internal network, a method of blocking attacks from a system contaminated by a worm virus, detecting a cyber attack on a certain system in advance and automatically avoiding the cyber attack, and guaranteeing the quality of normal traffic even under cyber attacks without performance degradation of the internal network is provided.

摘要翻译： 一种流量分析和流量动态访问控制系统及方法。 用于通过外部通信网络控制用户对内部通信网络的访问的基于流的动态访问控制系统包括以访问控制模式操作的访问控制单元，其中从用户接收的业务基本上被阻止，生成状态管理信息 从用户接收的流，基于流的指定分组，以及验证到内部通信网络的流的访问是否是正常访问。 作为只允许正常用户访问内部网络的主动防御概念，阻止来自受病毒感染的系统的攻击的方法，提前检测某个系统的网络攻击并自动避免网络攻击，并保证 提供即使在网络攻击下正常流量的质量，也不会导致内部网络性能下降。

公开(公告)号：US20100272016A1

公开(公告)日：2010-10-28

申请号：US12747729

申请日：2008-12-04

申请人： Nam Seok Ko ,  Ho Yong Ryu ,  Sung Back Hong ,  Young Beom Choi ,  Kyeong Ho Lee ,  Kyung Pyo Jun

发明人： Nam Seok Ko ,  Ho Yong Ryu ,  Sung Back Hong ,  Young Beom Choi ,  Kyeong Ho Lee ,  Kyung Pyo Jun

IPC分类号： H04W40/00

CPC分类号： H04W76/12 ,  H04W8/26 ,  H04W80/045

摘要： A method and system for supporting Internet protocol (IP) mobility independently of the IP version of a transport network are provided. The method includes providing a mobility control apparatus, which maps the home addresses of a plurality of mobile terminals, including first and second mobile terminals, and the Care-of-Addresses (CoAs) of the mobile terminals, and setting a first control tunnel between the mobility control apparatus and the first mobile terminal, the care-of-addresses varying from one transport network to another transport network; setting a second control tunnel between the mobility control apparatus and the second mobile terminal; and enabling the first and second mobile terminals to exchange a data packet with each other through the first and second control tunnels.

摘要翻译： 提供了一种独立于传输网络的IP版本来支持因特网协议（IP）移动性的方法和系统。 该方法包括提供移动性控制装置，其映射包括第一和第二移动终端的多个移动终端的归属地址和移动终端的转交地址（CoAs），并且在第 移动性控制装置和第一移动终端，转交地址从一个传输网络变化到另一个传输网络; 在所述移动性控制装置和所述第二移动终端之间设置第二控制隧道; 以及使得第一和第二移动终端能够通过第一和第二控制隧道彼此交换数据分组。