公开(公告)号：US20140355440A1

公开(公告)日：2014-12-04

申请号：US13955795

申请日：2013-07-31

Applicant: Electronics and Telecommunications Research Institute

Inventor： Kyoung-Soon KANG ,  Kyeong Ho LEE ,  Byungjun AHN ,  Ki Cheol JEON ,  Hea Sook PARK

IPC: H04L12/851

CPC classification number: H04L47/24 ,  H04L47/822

Abstract: An apparatus for allocating a network bandwidth includes an information collection unit configured to collect flow information of a network; and a traffic check unit configured to check traffic of the collected flow information. Further, the apparatus includes a traffic respond unit configured to suppress the network bandwidth depending on a check result of the traffic; and a control unit configured to the information collection unit, the traffic check unit, and the traffic respond unit.

Abstract translation: 用于分配网络带宽的装置包括：信息收集单元，被配置为收集网络的流信息; 以及流量检查单元，被配置为检查所收集的流信息的流量。 此外，该装置包括：业务响应单元，被配置为根据业务的检查结果来抑制网络带宽; 以及控制单元，被配置为信息收集单元，交通检查单元和交通响应单元。

公开(公告)号：US20140313887A1

公开(公告)日：2014-10-23

申请号：US14089018

申请日：2013-11-25

Applicant: Electronics and Telecommunications Research Institute

Inventor： Young Min KIM ,  Boo Geum JUNG ,  Hea Sook PARK ,  Byungjun AHN ,  Kyeong Ho LEE

IPC: H04W28/06

CPC classification number: H04W28/06 ,  H04L47/2475 ,  H04L67/2819

Abstract: The present invention provides an apparatus for optimizing traffic of packets produced in a user terminal and a remote node with a WAN link between the user terminal and the remote node. The apparatus includes a flow information table configured to have identification information about the respective packets that are managed in the apparatus, a packet processing module configured to analyze the packets to determine whether the respective packets are identified in the flow information table, and an optimization module configured to optimize the packets in compliance with the optimization option specified in the respective identified packets.

Abstract translation: 本发明提供一种用于在用户终端和远程节点之间具有WAN链路的用户终端和远程节点中产生的分组的流量优化的装置。 该装置包括流信息表，被配置为具有关于在该装置中管理的各个分组的识别信息，分组处理模块，被配置为分析分组以确定在流信息表中是否识别了各个分组，以及优化模块 被配置为根据在各自识别的分组中指定的优化选项优化分组。

公开(公告)号：US20140189867A1

公开(公告)日：2014-07-03

申请号：US14080439

申请日：2013-11-14

Applicant: Electronics and Telecommunications Research Institute

Inventor： Boo Geum JUNG ,  Young Min KIM ,  Kyoung-Soon KANG ,  Kyeong Ho LEE ,  Hea Sook PARK

IPC: H04L29/06

CPC classification number: H04L63/1458

Abstract: An OpenFlow switch in an OpenFlow environment includes an attack determination module to collect statistical information on packet processing with respect to incoming packets to be processed in the OpenFlow switch at a predetermined period interval to determine whether a DDoS attack occurs. The Openflow switch also includes an attack responding module to perceive a feature of the DDoS attack by using the incoming packets introduced into the OpenFlow switch after the determination of the occurrence of the DDoS attack and process the incoming packets in line with the perceived feature of the DDoS attack. Therefore, it is possible to determine and responds to DDos attacks in the OpenFlow switches.

Abstract translation: OpenFlow环境中的OpenFlow交换机包括攻击确定模块，用于以预定周期间隔收集关于要在OpenFlow交换机中处理的输入分组的分组处理的统计信息，以确定是否发生DDoS攻击。 Openflow开关还包括一个攻击响应模块，用于在确定DDoS攻击发生后，通过使用引入到OpenFlow交换机中的传入数据包来感知DDoS攻击的特征，并处理传入的数据包符合 DDoS攻击 因此，可以确定并响应OpenFlow交换机中的DDos攻击。

公开(公告)号：US20150074247A1

公开(公告)日：2015-03-12

申请号：US14245032

申请日：2014-04-04

Applicant: Electronics and Telecommunications Research Institute

Inventor： Kyoung-Soon KANG ,  Kyeong Ho LEE ,  Byungjun AHN ,  Ki Cheol JEON ,  Hea Sook PARK

IPC: H04L12/24

CPC classification number: H04L41/082

Abstract: A method for setting up a computing environment, which includes: storing data for setting up computing environments necessary for the update of a plurality of client terminals that are connected through a network; receiving information about computing environments that are configured on the client terminals from the client terminals; upon receiving a request for the update from the client terminals, classifying the client terminals that share the same system image; and transferring the latest version of the data for setting up the computing environments which are higher than the client terminals of the client terminals; and updating the classified client terminals with the latest version of the data.

Abstract translation: 一种用于建立计算环境的方法，包括：存储用于设置通过网络连接的多个客户终端的更新所需的计算环境的数据; 从客户终端接收关于在客户终端上配置的计算环境的信息; 在从客户终端接收到更新的请求时，对共享相同系统映像的客户终端进行分类; 并传送最新版本的数据，用于设置高于客户终端的客户终端的计算环境; 并用最新版本的数据更新分类的客户终端。

公开(公告)号：US20140307558A1

公开(公告)日：2014-10-16

申请号：US14147883

申请日：2014-01-06

Applicant: Electronics and Telecommunications Research Institute

Inventor： Hak Suh KIM ,  Ki Cheol JEON ,  Byungjun AHN ,  Kyeong Ho LEE ,  Hae Sook PARK

IPC: H04L12/803

CPC classification number: H04L47/125 ,  H04L47/32

Abstract: A method of controlling congestion of network equipment that connects networks with each other, includes determining a type of congestion based on a location of the network equipment; and identifying a network connection section having a strong possibility of occurrence of congestion based on the type of congestion, and setting a critical congestion bandwidth that is used to determine the occurrence of congestion. Further, the method includes identifying users required for equal distribution of traffic upon occurrence of congestion based on the critical congestion bandwidth; and equally distributing traffic to the identified users based on the critical congestion bandwidth, and then dropping an excess of arriving traffic over the equally distributed traffic, thereby performing avoidance of the congestion.

Abstract translation: 一种控制网络连接网络的拥塞的方法，包括基于网络设备的位置来确定拥塞类型; 以及基于所述拥塞的类型来识别具有强烈发生拥塞的可能性的网络连接部分，以及设置用于确定拥塞发生的关键拥塞带宽。 此外，所述方法包括基于所述关键拥塞带宽来识别发生拥塞时业务的相等分配所需的用户; 并且基于关键拥塞带宽向所识别的用户平均地分配业务，然后将超过到达的业务量超过均匀分布的业务量，从而避免拥塞。