会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 1. 发明申请
    • MAC security entity for link security entity and transmitting and receiving method therefor
    • 链路安全实体的MAC安全实体及其发送和接收方法
    • US20060136715A1
    • 2006-06-22
    • US11266627
    • 2005-11-03
    • Kyeong Soo HanKwang Ok KimTae Whan Yoo
    • Kyeong Soo HanKwang Ok KimTae Whan Yoo
    • H04L9/00
    • H04L63/126H04L9/0631H04L9/0637H04L9/3242H04L63/1458
    • An apparatus and method for providing a security function of frames transmitted between optical network terminals (OLTs) and optical network units (ONUs) in an Ethernet passive optical network (EPON) providing media access control (MAC) services are provided. The apparatus includes: a frame classifier distinguishing the type of a frame, and based on the logical link identifier (LLID) of the distinguished frame, determining whether or not the frame is a security link to which a security function is to be applied; a bypass unit delaying a no-security-function frame so that a processing time for converting the security-function-applied frame classified in the frame classifier into an encrypted frame is the same as a time for processing the no-security-function frame; and a parameter generation unit transmitting in relation to each of the LLIDs, a parameter set value including a security-function-application setting signal used in the encryption, decryption and authentication of the frame, a frame decryption signal, an encryption mode selection signal, and an authentication intensity adjustment signal.
    • 提供了一种在提供媒体访问控制(MAC)服务的以太网无源光网络(EPON)中提供在光网络终端(OLT)和光网络单元(ONU)之间传输的帧的安全功能的装置和方法。 该装置包括:区分帧的类型的帧分类器,并且基于识别帧的逻辑链路标识符(LLID),确定帧是否是要应用安全功能的安全链路; 旁路单元延迟无安全功能帧,使得将分类在帧分类器中的安全功能应用帧转换为加密帧的处理时间与用于处理无安全功能帧的时间相同; 以及相关于每个所述LLID发送的参数生成单元,包括在所述帧的加密,解密和认证中使用的安全功能应用设置信号的参数设置值,帧解密信号,加密模式选择信号, 和认证强度调整信号。
    • 3. 发明授权
    • MAC security entity for link security entity and transmitting and receiving method therefor
    • 链路安全实体的MAC安全实体及其发送和接收方法
    • US07797745B2
    • 2010-09-14
    • US11266627
    • 2005-11-03
    • Kyeong Soo HanKwang Ok KimTae Whan Yoo
    • Kyeong Soo HanKwang Ok KimTae Whan Yoo
    • G06F12/14
    • H04L63/126H04L9/0631H04L9/0637H04L9/3242H04L63/1458
    • An apparatus and method for providing a security function of frames transmitted between optical network terminals (OLTs) and optical network units (ONUs) in an Ethernet passive optical network (EPON) providing media access control (MAC) services are provided. The apparatus includes: a frame classifier distinguishing the type of a frame, and based on the logical link identifier (LLID) of the distinguished frame, determining whether or not the frame is a security link to which a security function is to be applied; a bypass unit delaying a no-security-function frame so that a processing time for converting the security-function-applied frame classified in the frame classifier into an encrypted frame is the same as a time for processing the no-security-function frame; and a parameter generation unit transmitting in relation to each of the LLIDs, a parameter set value including a security-function-application setting signal used in the encryption, decryption and authentication of the frame, a frame decryption signal, an encryption mode selection signal, and an authentication intensity adjustment signal.
    • 提供了一种在提供媒体访问控制(MAC)服务的以太网无源光网络(EPON)中提供在光网络终端(OLT)和光网络单元(ONU)之间传输的帧的安全功能的装置和方法。 该装置包括:区分帧的类型的帧分类器,并且基于识别帧的逻辑链路标识符(LLID),确定帧是否是要应用安全功能的安全链路; 旁路单元延迟无安全功能帧,使得将分类在帧分类器中的安全功能应用帧转换为加密帧的处理时间与用于处理无安全功能帧的时间相同; 以及相关于每个所述LLID发送的参数生成单元,包括在所述帧的加密,解密和认证中使用的安全功能应用设置信号的参数设置值,帧解密信号,加密模式选择信号, 和认证强度调整信号。
    • 4. 发明授权
    • Authentication method for link protection in Ethernet passive optical network
    • 以太网无源光网络链路保护认证方法
    • US07730305B2
    • 2010-06-01
    • US11119246
    • 2005-04-29
    • Jee Sook EunTae Whan YooYool KwonKyeong Soo Han
    • Jee Sook EunTae Whan YooYool KwonKyeong Soo Han
    • H04L9/00
    • H04L63/08H04L9/3236H04Q11/0067H04Q2011/0088
    • An authentication method for link protection between an OLT and an ONU newly connected thereto in an EPON, which is implemented in a data link layer to which cryptography is applied. First, an authentication key is distributed to both the OLT and an ONU. The OLT (or ONU) generates first and second random values, generates an authentication request frame containing the random values, and transmits it to the ONU (or OLT). The ONU generates a first hash value according to a hash function using the random values contained in the request frame, and transmits an authentication response frame containing the first hash value to the OLT. The OLT compares the first hash value with a second hash value calculated by it according to the has function using the two random values and an authentication key distributed to it, and transmits an authentication result frame to the ONU.
    • 在EPON中与OLT新连接的ONU之间的链路保护的认证方法,其实现在应用了密码术的数据链路层中。 首先,向OLT和ONU分配认证密钥。 OLT(或ONU)生成第一和第二随机值,生成包含随机值的认证请求帧,并发送给ONU(或OLT)。 ONU使用包含在请求帧中的随机值根据散列函数生成第一散列值,并向OLT发送包含第一散列值的认证响应帧。 OLT根据具有两个随机值的功能和分配给它的认证密钥,将第一哈希值与其计算出的第二哈希值进行比较,并将认证结果帧发送给ONU。
    • 6. 发明授权
    • Method and apparatus for dynamically allocating bandwidth by hierarchical weight round robin
    • 通过分层权重循环动态分配带宽的方法和装置
    • US07936765B2
    • 2011-05-03
    • US11948950
    • 2007-11-30
    • Chan KimTae Whan YooBong Tae Kim
    • Chan KimTae Whan YooBong Tae Kim
    • H04L12/28H04L12/56H04J3/16
    • H04Q11/0067H04Q2011/0064H04Q2011/0084
    • Provided are method and apparatus for dynamically allocating unlink bandwidth in Ethernet PON. In the method and apparatus, report value, which are received for each logical link identifications (LLID), is controlled to be less than a maximum gate value set for each LLID in sequence for all of LLIDs without a predetermined interval. A gate having a length corresponding to the restricted report value is generated. LLIDs are grouped into classes and processing is done class by class. For each class processing, if maximum processing time is reached or maximum total allocation is reached, the processing is switched to a lower class. Also each class processing, if any higher class has its maximum yield processing time or maximum yield allocated gate reached, the processing is switched to that higher class.
    • 提供了在以太网PON中动态分配非链路带宽的方法和装置。 在所述方法和装置中,针对每个逻辑链路标识(LLID)接收到的报告值被控制为小于针对所有LLID的每个LLID设置的最大门限值,而不存在预定间隔。 生成与限制报告值对应的长度的门。 LLID被分组成类,处理按类完成。 对于每个类处理,如果达到最大处理时间或达到最大总分配,则将处理切换到较低类。 每个类处理,如果任何一个更高级别具有其最大产出处理时间或达到最大分配量的门限,则将该处理切换到该较高类。
    • 7. 发明授权
    • Apparatus and method for managing traffic using VID in EPON
    • EPON中使用VID管理流量的装置和方法
    • US07751410B2
    • 2010-07-06
    • US11635774
    • 2006-12-07
    • Hoon LeeTae Whan YooJung Hak KimYool KwonBong Tae Kim
    • Hoon LeeTae Whan YooJung Hak KimYool KwonBong Tae Kim
    • H04L12/46
    • H04L47/10H04L12/4645H04L12/66H04L47/20H04L61/103H04L61/6022
    • An apparatus and method for managing traffic using a VID in EPON are provided. The apparatus includes a MAC lookup table, a service classification policy table, a service control policy table, a MAC lookup unit, a first and second classification module, a VID learning unit and a first and second service control module. The apparatus classifies all packets of up/downlink transmission flow using a VID into a VID unit, through the first and second classification modules and manages traffic thereof according to the parameters thereof through the first and second service control modules. Accordingly, a large amount of traffic for numerous subscribers and services thereof, which was cannot be processed by the limitation on embodying a typical switch or router, can be processed according to the present invention.
    • 提供了一种用于使用EPON中的VID来管理业务的装置和方法。 该装置包括MAC查找表,服务分类策略表,服务控制策略表,MAC查找单元,第一和第二分类模块,VID学习单元和第一和第二服务控制模块。 该装置通过第一和第二分类模块,使用VID将上行/下行链路传输流的所有数据包分类为VID单元,并通过第一和第二服务控制模块根据其参数来管理其流量。 因此,根据本发明,可以处理不能通过实施典型交换机或路由器的限制来处理大量用户和其服务的大量业务。
    • 9. 发明授权
    • Method and apparatus for processing ethernet data frame in media access control (MAC) sublayer of ethernet passive optical network (PON)
    • 以太网无源光网络(PON)的媒体访问控制(MAC)子层中处理以太网数据帧的方法和装置
    • US07274695B2
    • 2007-09-25
    • US10646062
    • 2003-08-22
    • Seung Hwan KimTae Whan YooHyeong Ho Lee
    • Seung Hwan KimTae Whan YooHyeong Ho Lee
    • H04L12/28H04J3/16H04J3/24
    • H04L1/0061H04L1/0072H04L69/08H04L69/32H04Q11/0066H04Q11/0067H04Q11/0071H04Q2011/0064
    • A method and apparatus for processing Ethernet data frames in a media access control (MAC) sublayer of an Ethernet passive optical network (PON) are provided. The apparatus for processing protocol layers of an Ethernet passive optical network (PON) includes: an Emulation sublayer processing unit which performs cyclic redundancy check (CRC) on information included in a preamble of an Ethernet data frame transferred from a physical layer processing unit, and extracts LLIDs from the preamble; a MAC sublayer processing unit, which has one MAC address corresponding to multiple LLID indexes corresponding to the extracted LLIDs, to perform control and management; a MAC control sublayer processing unit which contains information of the multiple LLID indexes, and performs MAC control on each LLID index; a PON bridge sublayer processing unit which performs a bridge function of the Ethernet PON and tag management of the Ethernet PON; and an Emulated-MAC sublayer processing unit which performs upstream and downstream Ethernet data frame matching, FCS error checking, and PAUSE frame processing. Therefore, an effect exists in that when processing the Ethernet frames, an interface suited to the Ethernet PON system is provided.
    • 提供了一种用于处理以太网无源光网络(PON)的媒体访问控制(MAC)子层中的以太网数据帧的方法和装置。 用于处理以太网无源光网络(PON)的协议层的装置包括:仿真子层处理单元,对从物理层处理单元传送的以太网数据帧的前导码中包括的信息执行循环冗余校验(CRC),以及 从前导码中提取LLID; MAC子层处理单元,其具有对应于与所提取的LLID相对应的多个LLID索引的一个MAC地址,以执行控制和管理; MAC控制子层处理单元,其包含多个LLID索引的信息,并对每个LLID索引执行MAC控制; 执行以太网PON的桥接功能和以太网PON的标签管理的PON桥接子层处理单元; 以及执行上游和下游以太网数据帧匹配,FCS错误检查和暂停帧处理的仿真MAC子层处理单元。 因此,在处理以太网帧时,提供了适用于以太网PON系统的接口。
    • 10. 发明授权
    • Method of controlling FEC in EPON
    • 在EPON中控制FEC的方法
    • US07600171B2
    • 2009-10-06
    • US11005115
    • 2004-12-04
    • Hoon LeeTae Whan YooHyeong Ho Lee
    • Hoon LeeTae Whan YooHyeong Ho Lee
    • G06F11/00H03M13/00G01R31/08H04J3/16
    • H04L1/0009H04L1/0057H04L1/203H04Q11/0066H04Q11/0067H04Q2011/0079H04Q2011/0088
    • A method of controlling a Forward Error Correction (FEC) operation including: configuring a FEC frame to be transmitted between an OLT and an ONU comprising a FEC frame identifier indicating whether FEC should be performed, data, a first flag indicating that FEC should be performed, and a second flag indicating that the FEC frame is to be FEC encoded; initializing the OLT by disabling a FEC function; determining whether the ONU requires FEC to be performed based on a FEC frame identifier received from the ONU; IPG stretching the FEC frame when the ONU requires to FEC to be performed; and transmitting the FEC frame to the ONU after FEC encoding based on the second flag of an input frame to a PCS sublayer from an upper layer. The method controls an effective operation of a FEC of an ONU and an OLT without changing a Round Trip Time (RTT) according to optical link quality in an EPON. Accordingly, FEC is used only if necessary, thereby simplifying the managing of a link, and preventing an excessive 35% reduction of throughput caused by use of unnecessary FEC.
    • 一种控制前向纠错(FEC)操作的方法,包括:配置要在OLT和ONU之间传输的FEC帧,包括指示是否应执行FEC的FEC帧标识符,数据,指示应执行FEC的第一标志 以及指示FEC帧要被FEC编码的第二标志; 通过禁用FEC功能来初始化OLT; 基于从ONU接收到的FEC帧标识来确定ONU是否需要执行FEC; 当ONU需要执行FEC时,IPG扩展FEC帧; 并且基于来自上层的PCS子层的基于输入帧的第二标志的FEC编码之后将FEC帧发送到ONU。 该方法根据EPON中的光链路质量来控制ONU和OLT的FEC的有效操作,而不改变往返时间(RTT)。 因此,仅在必要时使用FEC,从而简化链路的管理,并且防止由于使用不必要的FEC导致的吞吐量的过度的35%的降低。