专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

11. 发明申请

US20110119737A1 METHOD AND DEVICE FOR DISTRIBUTED SECURITY CONTROL IN COMMUNICATION NETWORK SYSTEM 有权
标题翻译：通信网络系统中分布式安全控制的方法和设备
公开(公告)号：US20110119737A1
公开(公告)日：2011-05-19
申请号：US13003430
申请日：2009-06-16
申请人： Haibo Wen , Chunyan Yao , Jun Zheng , Songwei Ma
发明人： Haibo Wen , Chunyan Yao , Jun Zheng , Songwei Ma
IPC分类号： H04L9/00
CPC分类号： H04L63/1466 , H04L63/0218 , H04L63/0263 , H04L63/0876 , H04L63/10 , H04L63/126 , H04L63/20 , H04W12/08 , H04W88/08 , H04W88/14
摘要： With migration of network technology and more and more requirements of user equipment for accessing to Internet, the network security faces more and more severe situation. There is provided a method for distributed security control in communication network system and the device thereof in order to improve security and operatability of network operator. In the method, firstly the network controller establishes a network security control mechanism, which is used for a second network device to check the validity of the data package from the user equipment; secondly, the network controller sends the network security control mechanism to the second network devices; lastly, the second network device checks the validity of the data package from the user equipment according to the network security control mechanism, and discards the data package if the data package is invalid. With the present invention, security and operatability of the communication network maybe improved greatly, particularly, the functionality of address anti-spoofing can be implemented in the network with a WLAN architecture in centralized control. (FIG. 2)
摘要翻译：随着网络技术的转移和用户设备对Internet的需求越来越多，网络安全面临着越来越严重的局面。提供了一种通信网络系统中的分布式安全控制方法及其设备，以提高网络运营商的安全性和可操作性。在该方法中，首先网络控制器建立网络安全控制机制，用于第二网络设备，从用户设备检查数据包的有效性; 其次，网络控制器向第二网络设备发送网络安全控制机制; 最后，第二网络设备根据网络安全控制机制检查用户设备的数据包的有效性，如果数据包无效，则丢弃数据包。通过本发明，可以大大提高通信网络的安全性和可操作性，特别是在具有集中控制的WLAN架构的网络中可以实现地址反欺骗的功能。（图2）

12. 发明授权

US08086908B2 Apparatus and a method for reporting the error of each level of the tunnel data packet in a communication network 有权
标题翻译：用于报告通信网络中隧道数据分组的每个级别的错误的装置和方法
公开(公告)号：US08086908B2
公开(公告)日：2011-12-27
申请号：US12309599
申请日：2007-07-03
申请人： Qingshan Zhang , Songwei Ma , Renxiang Yan , Haibo Wen , Fanxiang Bin
发明人： Qingshan Zhang , Songwei Ma , Renxiang Yan , Haibo Wen , Fanxiang Bin
IPC分类号： G06F11/00
CPC分类号： H04L63/0272 , H04L63/16 , H04L63/164 , H04L63/20
摘要： The invention provides methods and devices for reporting and parsing the errors of a packet based on IPSec protocol family in a communication network. Concretely, the reserved field in ICMP security failure message is used to denote the error type at the second level of the error in the packet. With the aid of the solution provided by the invention, it is possible to report the error types for a tunnel packet which has an error in detail. And the source termination device can ascertain the error types of a tunnel packet, so as to eliminate the error.
摘要翻译：本发明提供了用于在通信网络中基于IPSec协议族报告和解析分组的错误的方法和装置。具体来说，ICMP安全失败消息中的保留字段用于表示数据包中第二级错误的错误类型。借助于本发明提供的解决方案，可以详细报告具有错误的隧道分组的错误类型。源终端设备可以确定隧道报文的错误类型，以消除错误。

13. 发明授权

US08880026B2 Method and apparatus for providing network services to a mobile user equipment 有权
标题翻译：向移动用户设备提供网络服务的方法和装置
公开(公告)号：US08880026B2
公开(公告)日：2014-11-04
申请号：US13513241
申请日：2009-12-22
申请人： Haibo Wen , Fanxiang Bin
发明人： Haibo Wen , Fanxiang Bin
IPC分类号： H04M1/66 , H04W12/08 , H04W84/04
CPC分类号： H04W12/08 , H04L63/0807 , H04W48/16 , H04W76/12 , H04W84/045
摘要： The present invention provides a method and apparatus of providing network services to a mobile user equipment, where the mobile user equipment is connected to a fixed access network via a Femtocell base station and thus connected to the mobile core network. The mobile core network provides an access token to a Femtocell base station. The Femtocell requests the fixed access network with the access token to perform network resource configuration for the mobile user equipment. The mobile user equipment establishes a network service connection based on the network resource configuration. In this way, technically, it may be guaranteed that the mobile user equipment can be legal listened. Dependent on different service attributes of the mobile user equipment, different network access manners may be implemented, such that operators of mobile and fixed access networks may reasonably commercially apportion the charges based on their respective network resource occupation situations.
摘要翻译：本发明提供了一种向移动用户设备提供网络服务的方法和装置，其中移动用户设备经由毫微微小区基站连接到固定接入网络，并因此连接到移动核心网络。移动核心网络向毫微微蜂窝基站提供接入令牌。毫微微小区请求具有接入令牌的固定接入网对移动用户设备执行网络资源配置。移动用户设备基于网络资源配置建立网络服务连接。这样在技术上可以保证移动用户设备可以合法听。根据移动用户设备的不同服务属性，可以实现不同的网络访问方式，使得移动和固定接入网络的运营商可以基于其各自的网络资源占用情况来合理商业地分摊费用。

14. 发明授权

US08655990B2 Access device routing device and method thereof supporting stateless address configuration communication network 有权
标题翻译：接入设备路由设备及其支持无状态地址配置通信网络的方法
公开(公告)号：US08655990B2
公开(公告)日：2014-02-18
申请号：US11995499
申请日：2006-05-19
申请人： Keyao Zhu , Haibo Wen , Renxiang Yan , Yinglan Jiang , Fanxiang Bin , Qingshan Zhang
发明人： Keyao Zhu , Haibo Wen , Renxiang Yan , Yinglan Jiang , Fanxiang Bin , Qingshan Zhang
IPC分类号： G06F15/177
CPC分类号： H04L29/12216 , H04L61/2007 , H04L61/6059
摘要： The present invention relates to an IPv6-based access device, edge router and method for stainless address configuration for IPv6 user equipment in an Ethernet access network, wherein, the access device adds the relay agent ID indicating the access device itself and the relevant port identifier indicating the user equipment to a router solicitation message sent by the user equipment in the form of a newly defined option, and forwards the message to the relevant edge router; and the edge router configures a dedicated address prefix for the user equipment according to the relay agent ID and port identifier, combines the address prefix, the relay ID and the port identifier into a router response message, and sends the response message to the relevant access equipment indicated by the relay ID; the access device sends a router advertisement message only including the address prefix via the line port indicated by the port identifier to user equipment. By allocating the dedicated address prefix to every data subscriber line for IPv6 service, IPv6 stainless address configuration is achieved to solve the security and scalability problems in the prior art.
摘要翻译：本发明涉及一种以太网接入网中IPv6用户设备的基于IPv6的接入设备，边缘路由器和不锈钢地址配置方法，其中，接入设备将指示接入设备本身的中继代理ID和相关的端口标识指示用户设备以新定义的选项的形式由用户设备发送的路由器请求消息，并将消息转发到相关边缘路由器; 并且边缘路由器根据中继代理ID和端口标识符为用户设备配置专用地址前缀，将地址前缀，中继ID和端口标识符组合到路由器响应消息中，并将响应消息发送到相关访问设备由继电器ID指示; 接入设备通过端口标识符指示的线路端口向用户设备发送仅包含地址前缀的路由器通告消息。通过为IPv6服务的每个数据订户线分配专用地址前缀，实现了IPv6不锈钢地址配置，以解决现有技术中的安全性和可扩展性问题。

15. 发明授权

US08813195B2 Method and apparatus for authenticating a user equipment 有权
标题翻译：用于认证用户设备的方法和装置
公开(公告)号：US08813195B2
公开(公告)日：2014-08-19
申请号：US13576488
申请日：2010-03-09
申请人： Haibo Wen , Fanxiang Bin , Songwei Ma
发明人： Haibo Wen , Fanxiang Bin , Songwei Ma
IPC分类号： H04W12/06
CPC分类号： H04L63/0815 , H04L63/0884 , H04W12/06 , H04W84/045
摘要： The present invention relates to a Femtocell providing services to a UE, and it proposes a method for authenticating a UE registered in a first operating domain of a communication network (e.g. a mobile core network), when the UE requests the service provided by a second operating domain (e.g. a fixed access network, a backhaul network). An authentication server in the first operating domain allocates the needed information to access the service provided by the second operating domain for the UE, and stores. After receiving the needed information, the UE sends an authentication request message to an authentication server in the second operating domain, wherein the authentication server in the second operating domain forwards the authentication request message to the authentication server in the first operating domain.
摘要翻译：本发明涉及向UE提供业务的毫微微小区，并且提出了一种用于认证在通信网络（例如移动核心网络）的第一操作域中注册的UE的方法，当UE请求由第二个操作域（例如固定接入网，回程网）。第一操作域中的认证服务器分配所需的信息以访问由UE的第二操作域提供的服务，并存储。在接收到所需的信息之后，UE向第二操作域中的认证服务器发送认证请求消息，其中第二操作域中的认证服务器将认证请求消息转发到第一操作域中的认证服务器。

16. 发明申请

US20120304259A1 METHOD AND APPARATUS FOR AUTHENTICATING A USER EQUIPMENT 有权
标题翻译：用于认证用户设备的方法和装置
公开(公告)号：US20120304259A1
公开(公告)日：2012-11-29
申请号：US13576488
申请日：2010-03-09
申请人： Haibo Wen , Fanxiang Bin , Songwei Ma
发明人： Haibo Wen , Fanxiang Bin , Songwei Ma
IPC分类号： H04W12/06 , G06F21/00
CPC分类号： H04L63/0815 , H04L63/0884 , H04W12/06 , H04W84/045
摘要： The present invention relates to a Femtocell providing services to a UE, and it proposes a method for authenticating a UE registered in a first operating domain of a communication network (e.g. a mobile core network), when the UE requests the service provided by a second operating domain (e.g. a fixed access network, a backhaul network). An authentication server in the first operating domain allocates the needed information to access the service provided by the second operating domain for the UE, and stores. After receiving the needed information, the UE sends an authentication request message to an authentication server in the second operating domain, wherein the authentication server in the second operating domain forwards the authentication request message to the authentication server in the first operating domain.
摘要翻译：本发明涉及向UE提供业务的毫微微小区，并且提出了一种用于认证在通信网络（例如移动核心网络）的第一操作域中注册的UE的方法，当UE请求由第二个操作域（例如固定接入网，回程网）。第一操作域中的认证服务器分配所需的信息以访问由UE的第二操作域提供的服务，并存储。在接收到所需的信息之后，UE向第二操作域中的认证服务器发送认证请求消息，其中第二操作域中的认证服务器将认证请求消息转发到第一操作域中的认证服务器。

17. 发明申请

US20120238247A1 METHOD AND APPARATUS FOR PROVIDING NETWORK SERVICES TO A MOBILE USER EQUIPMENT 有权
标题翻译：向移动用户设备提供网络服务的方法和装置
公开(公告)号：US20120238247A1
公开(公告)日：2012-09-20
申请号：US13513241
申请日：2009-12-22
申请人： Haibo Wen , Fanxiang Bin
发明人： Haibo Wen , Fanxiang Bin
IPC分类号： H04W72/04 , H04W12/06
CPC分类号： H04W12/08 , H04L63/0807 , H04W48/16 , H04W76/12 , H04W84/045
摘要： The present invention provides a method and apparatus of providing network services to a mobile user equipment, where the mobile user equipment is connected to a fixed access network via a Femtocell base station and thus connected to the mobile core network. The mobile core network provides an access token to a Femtocell base station. The Femtocell requests the fixed access network with the access token to perform network resource configuration for the mobile user equipment. The mobile user equipment establishes a network service connection based on the network resource configuration. In this way, technically, it may be guaranteed that the mobile user equipment can be legal listened. Dependent on different service attributes of the mobile user equipment, different network access manners may be implemented, such that operators of mobile and fixed access networks may reasonably commercially apportion the charges based on their respective network resource occupation situations.
摘要翻译：本发明提供了一种向移动用户设备提供网络服务的方法和装置，其中移动用户设备经由毫微微小区基站连接到固定接入网络，并因此连接到移动核心网络。移动核心网络向毫微微蜂窝基站提供接入令牌。毫微微小区请求具有接入令牌的固定接入网对移动用户设备执行网络资源配置。移动用户设备基于网络资源配置建立网络服务连接。这样在技术上可以保证移动用户设备可以合法听。根据移动用户设备的不同服务属性，可以实现不同的网络访问方式，使得移动和固定接入网络的运营商可以基于其各自的网络资源占用情况来合理商业地分摊费用。

18. 发明申请

US20090204850A1 APPARATUS AND A METHOD FOR REPORTING THE ERROR OF EACH LEVEL OF THE TUNNEL DATA PACKET IN A COMMUNICATION NETWORK 有权
标题翻译：用于报告通信网络中隧道数据包的每个级别的错误的装置和方法
公开(公告)号：US20090204850A1
公开(公告)日：2009-08-13
申请号：US12309599
申请日：2007-07-03
申请人： Qingshan Zhang , Songwei Ma , Renxiang Yan , Haibo Wen , Fanxiang Bin
发明人： Qingshan Zhang , Songwei Ma , Renxiang Yan , Haibo Wen , Fanxiang Bin
IPC分类号： G06F11/07
CPC分类号： H04L63/0272 , H04L63/16 , H04L63/164 , H04L63/20
摘要： The invention provides methods and devices for reporting and parsing the errors of a packet based on IPSec protocol family in a communication network. Concretely, the reserved field in ICMP security failure message is used to denote the error type at the second level of the error in the packet. With the aid of the solution provided by the invention, it is possible to report the error types for a tunnel packet which has an error in detail. And the source termination device can ascertain the error types of a tunnel packet, so as to eliminate the error.
摘要翻译：本发明提供了用于在通信网络中基于IPSec协议族报告和解析分组的错误的方法和装置。具体来说，ICMP安全失败消息中的保留字段用于表示数据包中第二级错误的错误类型。借助于本发明提供的解决方案，可以详细报告具有错误的隧道分组的错误类型。源终端设备可以确定隧道报文的错误类型，以消除错误。

19. 发明申请

US20080244090A1 Access Device Routing Device and Method Thereof Supporting Stateless Address Configuration Communication Network 有权
标题翻译：访问设备路由设备及其方法支持无状态地址配置通信网络
公开(公告)号：US20080244090A1
公开(公告)日：2008-10-02
申请号：US11995499
申请日：2006-05-19
申请人： Keyao Zhu , Haibo Wen , Renxiang Yan , Yinglan Jiang , Fanxiang Bin , Qingshan Zhang
发明人： Keyao Zhu , Haibo Wen , Renxiang Yan , Yinglan Jiang , Fanxiang Bin , Qingshan Zhang
IPC分类号： G06F15/16
CPC分类号： H04L29/12216 , H04L61/2007 , H04L61/6059
摘要： The present invention relates to an IPv6-based access device, edge router and method for stainless address configuration for IPv6 user equipment in an Ethernet access network, wherein, the access device adds the relay agent ID indicating the access device itself and the relevant port identifier indicating the user equipment to a router solicitation message sent by the user equipment in the form of a newly defined option, and forwards the message to the relevant edge router; and the edge router configures a dedicated address prefix for the user equipment according to the relay agent ID and port identifier, combines the address prefix, the relay ID and the port identifier into a router response message, and sends the response message to the relevant access equipment indicated by the relay ID; the access device sends a router advertisement message only including the address prefix via the line port indicated by the port identifier to user equipment. By allocating the dedicated address prefix to every data subscriber line for IPv6 service, IPv6 stainless address configuration is achieved to solve the security and scalability problems in the prior art.
摘要翻译：本发明涉及一种以太网接入网中IPv6用户设备的基于IPv6的接入设备，边缘路由器和不锈钢地址配置方法，其中，接入设备将指示接入设备本身的中继代理ID和相关的端口标识指示用户设备以新定义的选项的形式由用户设备发送的路由器请求消息，并将消息转发到相关边缘路由器; 并且边缘路由器根据中继代理ID和端口标识为用户设备配置专用地址前缀，将地址前缀，中继ID和端口标识符组合到路由器响应消息中，并将响应消息发送到相关访问设备由继电器ID指示; 接入设备通过端口标识符指示的线路端口向用户设备发送仅包含地址前缀的路由器通告消息。通过为IPv6服务的每个数据订户线分配专用地址前缀，实现了IPv6不锈钢地址配置，以解决现有技术中的安全性和可扩展性问题。

20. 发明授权

US08068493B2 Method and apparatus of joint-registering in multicast communication network 有权
标题翻译：组播通信网中联合注册的方法和装置
公开(公告)号：US08068493B2
公开(公告)日：2011-11-29
申请号：US12448548
申请日：2007-07-03
申请人： Chunyan Yao , Songwei Ma , Haibo Wen
发明人： Chunyan Yao , Songwei Ma , Haibo Wen
IPC分类号： H04L12/56
CPC分类号： H04L12/1886 , H04L12/185 , H04L45/16
摘要： The present invention provides a method and apparatus for registering to a designated router in a rendezvous point in an anycast group in a multicast communication network, wherein the rendezvous point implements a joint-registering based on registering status of all rendezvous points in the anycast group. The main rendezvous point sends to the designated router the Register Stop message only when all rendezvous points in the anycast group do not need the Register message from the designated router; when any one of other rendezvous points does not need the Register message, sending the Register message to it is stopped. With the method and apparatus of the present invention, the cases resulting in the interruption of subscriber terminal multicast traffic can be reduced, and the CPU resource of the main rendezvous point and bandwidth resources between it and other rendezvous points are saved.
摘要翻译：本发明提供一种用于向多播通信网络中的任播组中的会合点中的指定路由器注册的方法和装置，其中所述会合点基于所述任播组中的所有会合点的注册状态来实现联合注册。只有当任播组中的所有会合点不需要来自指定路由器的注册消息时，主会合点才会向指定路由器发送注册停止消息; 当任何其他会合点不需要注册消息时，发送注册消息就停止了。利用本发明的方法和装置，可以减少导致用户终端组播流量中断的情况，并且节省主会合点的CPU资源和其与其他会合点之间的带宽资源。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式