专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明授权

US08369246B2 Method and apparatus for sending and receiving multicast packets on a multicast tree 有权
标题翻译：在组播树上发送和接收组播数据包的方法和装置
公开(公告)号：US08369246B2
公开(公告)日：2013-02-05
申请号：US12450555
申请日：2008-02-04
申请人： Haibo Wen
发明人： Haibo Wen
IPC分类号： H04L12/28
CPC分类号： H04L45/04 , H04L12/18 , H04L12/2861 , H04L12/4641 , H04L45/02 , H04L45/16 , H04L45/48
摘要： The present invention relates to a solution for taking a network equipment in a communication network as a root node to generate a logical topology tree for a subscriber terminal which requests the sending of multicast packets, and then generating a multicast tree on the logical topology tree with the network device as the root node, so as to forward the multicast packets. With the solution of sending a multicast packet to the subscriber terminal, it can effectively save the network bandwidth resource and reduce the transmission delay of multicast packet.
摘要翻译：本发明涉及一种将通信网络中的网络设备作为根节点的解决方案，用于为请求发送组播分组的用户终端生成逻辑拓扑树，然后在逻辑拓扑树上生成多播树，网络设备为根节点，从而转发组播报文。通过向用户终端发送组播报文的方式，可以有效的节省网络带宽资源，减少组播报文的传输延迟。

32. 发明授权

US07853783B2 Method and apparatus for secure communication between user equipment and private network 有权
标题翻译：用户设备和专网之间的安全通信的方法和装置
公开(公告)号：US07853783B2
公开(公告)日：2010-12-14
申请号：US11616937
申请日：2006-12-28
申请人： FanXiang Bin , QingShan Zhang , YingLan Jiang , RenXiang Yan , HaiBo Wen , ZheMin Ding
发明人： FanXiang Bin , QingShan Zhang , YingLan Jiang , RenXiang Yan , HaiBo Wen , ZheMin Ding
IPC分类号： H04L29/06
CPC分类号： H04L63/0272 , H04L63/0428 , H04L63/06 , H04L63/08
摘要： It is an object of the present invention to provide a new technical solution of supporting special secure communication between user equipment which is located in an external network and an private network the user equipment belongs to. Specifically, transmitted data is encrypted/decrypted and authenticated by using pre-stored root keys corresponding to specific private networks and the agreed encryption/decryption and authentication algorithm at the user equipment and an access device. The manner of generating the encryption/decryption keys and authentication key is simplified, and the complexity of the access device at the private network end is reduced on the premise of not degrading the security grade. The technical solution of the present invention is highly flexible and extensible and can achieve better user experience.
摘要翻译：本发明的目的是提供一种支持用户设备所属的外部网络的用户设备之间的特殊安全通信的新技术方案。具体地说，通过使用与特定专用网络相对应的预先存储的根密钥以及在用户设备和接入设备处的约定的加密/解密和认证算法来对发送的数据进行加密/解密和认证。简化了生成加密/解密密钥和认证密钥的方式，在不降低安全等级的前提下，减少了私网端的接入设备的复杂度。本发明的技术方案是高度灵活和可扩展的，可以实现更好的用户体验。

33. 发明申请

US20070157309A1 METHOD AND APPARATUS FOR SECURE COMMUNICATION BETWEEN USER EQUIPMENT AND PRIVATE NETWORK 有权
标题翻译：用户设备和私有网络之间的安全通信的方法和装置
公开(公告)号：US20070157309A1
公开(公告)日：2007-07-05
申请号：US11616937
申请日：2006-12-28
申请人： FanXiang Bin , QingShan Zhang , YingLan Jiang , RenXiang Yan , HaiBo Wen , ZheMin Ding
发明人： FanXiang Bin , QingShan Zhang , YingLan Jiang , RenXiang Yan , HaiBo Wen , ZheMin Ding
IPC分类号： G06F15/16 , H04L9/00 , G06F12/14 , G06F17/00 , H04L9/32 , G06F9/00 , G06F11/30
CPC分类号： H04L63/0272 , H04L63/0428 , H04L63/06 , H04L63/08
摘要： It is an object of the present invention to provide a new technical solution of supporting special secure communication between user equipment which is located in an external network and an private network the user equipment belongs to. Specifically, transmitted data is encrypted/decrypted and authenticated by using pre-stored root keys corresponding to specific private networks and the agreed encryption/decryption and authentication algorithm at the user equipment and an access device. The manner of generating the encryption/decryption keys and authentication key is simplified, and the complexity of the access device at the private network end is reduced on the premise of not degrading the security grade. The technical solution of the present invention is highly flexible and extensible and can achieve better user experience.
摘要翻译：本发明的目的是提供一种支持用户设备所属的外部网络的用户设备之间的特殊安全通信的新技术方案。具体地说，通过使用与特定专用网络相对应的预先存储的根密钥以及在用户设备和接入设备处的约定的加密/解密和认证算法来对发送的数据进行加密/解密和认证。简化了生成加密/解密密钥和认证密钥的方式，在不降低安全等级的前提下，减少了私网端的接入设备的复杂度。本发明的技术方案是高度灵活和可扩展的，可以实现更好的用户体验。

34. 发明授权

US08509233B2 Method and apparatus for requesting multicast, processing and assisting multicast request 有权
标题翻译：用于请求组播，处理和协助组播请求的方法和装置
公开(公告)号：US08509233B2
公开(公告)日：2013-08-13
申请号：US13003399
申请日：2009-06-01
申请人： Chunyan Yao , Jianbin Chen , Haibo Wen , Fanxiang Bin , Jun Zheng
发明人： Chunyan Yao , Jianbin Chen , Haibo Wen , Fanxiang Bin , Jun Zheng
IPC分类号： H04L12/28
CPC分类号： H04L12/1886 , H04L45/125 , H04L45/16 , H04L47/806
摘要： According to at least one particular embodiment of the present invention, in an ASM-based RP, when the RP receives a multicast transmission request from a multicast source, it processes said multicast transmission request of the multicast source according to the multicast transmission request and remaining resources available for multicast forwarding in the RP. When using the methods and apparatuses provided in the present invention, by means of reasonable controls on the multicast transmission request conducted by the RP according to its resource situation, the hardware processing loads and the port traffic load of RP can be effectively maintained within an appropriate range, thereby avoiding resource exhaustion, and the disadvantageous impact of new multicast services on the existing services can be also avoided.
摘要翻译：根据本发明的至少一个具体实施例，在基于ASM的RP中，当RP从组播源接收到组播传输请求时，根据组播传输请求处理组播源的组播传输请求，并保持可用于RP中组播转发的资源。当使用本发明提供的方法和装置时，通过根据其资源状况对RP进行的组播传输请求进行合理的控制，能够有效地维护RP的硬件处理负载和端口流量负载，从而避免资源枯竭，同时也可以避免新组播业务对现有业务的不利影响。

35. 发明授权

US08509153B2 Method and apparatus for forwarding packets in IPV6 access code 有权
标题翻译：用于在IPV6访问码中转发数据包的方法和装置
公开(公告)号：US08509153B2
公开(公告)日：2013-08-13
申请号：US13002729
申请日：2008-08-26
申请人： Haibo Wen , Gang Liu
发明人： Haibo Wen , Gang Liu
IPC分类号： H04Q7/00 , H04L12/28
CPC分类号： H04L45/745 , H04L12/2858 , H04L69/16 , H04L69/167 , H04W8/26 , H04W80/04 , H04W88/16
摘要： In view of the technical problems that exist during implementing IP address anti-spoofing in an access node device in an IPv6 access network, the present invention proposes a packet forwarding method and apparatus in an IPv6 Access Node, for forwarding a packet from a Residential Gateway. In the method, the access node device first receives a packet from the Residential Gateway, then obtains a network prefix in a source UPv6 address of the packet, judges whether the network prefix in the source IPv6 address of the packet is a valid network prefix of a CPN corresponding to the Residential Gateway, and if yes, forwards the packet finally. Particularly, in the present invention the access node device can automatically obtain valid network prefix using technical means such as snooping a network prefix allocation reply message. Therefore, the present invention greatly increases operation efficiency and security of the IPv6 access network and simplifies network management of the IPv6 access network.
摘要翻译：鉴于在IPv6接入网中的接入节点设备中实现IP地址反欺骗时存在的技术问题，本发明提出了IPv6接入节点中的分组转发方法和装置，用于从住宅网关。在该方法中，接入节点设备首先从住宅网关接收分组，然后获取分组的源UPv6地址中的网络前缀，判断分组的源IPv6地址中的网络前缀是否为有效的网络前缀对应于住宅网关的CPN，如果是，则转发该分组。特别地，在本发明中，接入节点设备可以使用诸如窥探网络前缀分配回复消息的技术手段自动获得有效的网络前缀。因此，本发明大大提高了IPv6接入网的运行效率和安全性，简化了IPv6接入网的网络管理。

36. 发明申请

US20120304259A1 METHOD AND APPARATUS FOR AUTHENTICATING A USER EQUIPMENT 有权
标题翻译：用于认证用户设备的方法和装置
公开(公告)号：US20120304259A1
公开(公告)日：2012-11-29
申请号：US13576488
申请日：2010-03-09
申请人： Haibo Wen , Fanxiang Bin , Songwei Ma
发明人： Haibo Wen , Fanxiang Bin , Songwei Ma
IPC分类号： H04W12/06 , G06F21/00
CPC分类号： H04L63/0815 , H04L63/0884 , H04W12/06 , H04W84/045
摘要： The present invention relates to a Femtocell providing services to a UE, and it proposes a method for authenticating a UE registered in a first operating domain of a communication network (e.g. a mobile core network), when the UE requests the service provided by a second operating domain (e.g. a fixed access network, a backhaul network). An authentication server in the first operating domain allocates the needed information to access the service provided by the second operating domain for the UE, and stores. After receiving the needed information, the UE sends an authentication request message to an authentication server in the second operating domain, wherein the authentication server in the second operating domain forwards the authentication request message to the authentication server in the first operating domain.
摘要翻译：本发明涉及向UE提供业务的毫微微小区，并且提出了一种用于认证在通信网络（例如移动核心网络）的第一操作域中注册的UE的方法，当UE请求由第二个操作域（例如固定接入网，回程网）。第一操作域中的认证服务器分配所需的信息以访问由UE的第二操作域提供的服务，并存储。在接收到所需的信息之后，UE向第二操作域中的认证服务器发送认证请求消息，其中第二操作域中的认证服务器将认证请求消息转发到第一操作域中的认证服务器。

37. 发明申请

US20120238247A1 METHOD AND APPARATUS FOR PROVIDING NETWORK SERVICES TO A MOBILE USER EQUIPMENT 有权
标题翻译：向移动用户设备提供网络服务的方法和装置
公开(公告)号：US20120238247A1
公开(公告)日：2012-09-20
申请号：US13513241
申请日：2009-12-22
申请人： Haibo Wen , Fanxiang Bin
发明人： Haibo Wen , Fanxiang Bin
IPC分类号： H04W72/04 , H04W12/06
CPC分类号： H04W12/08 , H04L63/0807 , H04W48/16 , H04W76/12 , H04W84/045
摘要： The present invention provides a method and apparatus of providing network services to a mobile user equipment, where the mobile user equipment is connected to a fixed access network via a Femtocell base station and thus connected to the mobile core network. The mobile core network provides an access token to a Femtocell base station. The Femtocell requests the fixed access network with the access token to perform network resource configuration for the mobile user equipment. The mobile user equipment establishes a network service connection based on the network resource configuration. In this way, technically, it may be guaranteed that the mobile user equipment can be legal listened. Dependent on different service attributes of the mobile user equipment, different network access manners may be implemented, such that operators of mobile and fixed access networks may reasonably commercially apportion the charges based on their respective network resource occupation situations.
摘要翻译：本发明提供了一种向移动用户设备提供网络服务的方法和装置，其中移动用户设备经由毫微微小区基站连接到固定接入网络，并因此连接到移动核心网络。移动核心网络向毫微微蜂窝基站提供接入令牌。毫微微小区请求具有接入令牌的固定接入网对移动用户设备执行网络资源配置。移动用户设备基于网络资源配置建立网络服务连接。这样在技术上可以保证移动用户设备可以合法听。根据移动用户设备的不同服务属性，可以实现不同的网络访问方式，使得移动和固定接入网络的运营商可以基于其各自的网络资源占用情况来合理商业地分摊费用。

38. 发明申请

US20110134922A1 METHOD AND APPARATUS FOR FORWARDING PACKETS IN IPV6 ACCESS NODE 有权
标题翻译：用于在IPV6访问节点中转发分组的方法和装置
公开(公告)号：US20110134922A1
公开(公告)日：2011-06-09
申请号：US13002729
申请日：2008-08-26
申请人： Haibo Wen , Gang Liu
发明人： Haibo Wen , Gang Liu
IPC分类号： H04L12/56
CPC分类号： H04L45/745 , H04L12/2858 , H04L69/16 , H04L69/167 , H04W8/26 , H04W80/04 , H04W88/16
摘要： In view of the technical problems that exist during implementing IP address anti-spoofing in an access node device in an IPv6 access network, the present invention proposes a packet forwarding method and apparatus in an IPv6 Access Node, for forwarding a packet from a Residential Gateway. In the method, the access node device first receives a packet from the Residential Gateway, then obtains a network prefix in a source UPv6 address of the packet, judges whether the network prefix in the source IPv6 address of the packet is a valid network prefix of a CPN corresponding to the Residential Gateway, and if yes, forwards the packet finally. Particularly, in the present invention the access node device can automatically obtain valid network prefix using technical means such as snooping a network prefix allocation reply message. Therefore, the present invention greatly increases operation efficiency and security of the IPv6 access network and simplifies network management of the IPv6 access network.
摘要翻译：鉴于在IPv6接入网中的接入节点设备中实现IP地址反欺骗时存在的技术问题，本发明提出了IPv6接入节点中的分组转发方法和装置，用于从住宅网关。在该方法中，接入节点设备首先从住宅网关接收分组，然后获得分组的源UPv6地址中的网络前缀，判断分组的源IPv6地址中的网络前缀是否为有效的网络前缀对应于住宅网关的CPN，如果是，则转发该分组。特别地，在本发明中，接入节点设备可以使用诸如窥探网络前缀分配回复消息的技术手段自动获得有效的网络前缀。因此，本发明大大提高了IPv6接入网的运行效率和安全性，简化了IPv6接入网的网络管理。

39. 发明申请

US20110119737A1 METHOD AND DEVICE FOR DISTRIBUTED SECURITY CONTROL IN COMMUNICATION NETWORK SYSTEM 有权
标题翻译：通信网络系统中分布式安全控制的方法和设备
公开(公告)号：US20110119737A1
公开(公告)日：2011-05-19
申请号：US13003430
申请日：2009-06-16
申请人： Haibo Wen , Chunyan Yao , Jun Zheng , Songwei Ma
发明人： Haibo Wen , Chunyan Yao , Jun Zheng , Songwei Ma
IPC分类号： H04L9/00
CPC分类号： H04L63/1466 , H04L63/0218 , H04L63/0263 , H04L63/0876 , H04L63/10 , H04L63/126 , H04L63/20 , H04W12/08 , H04W88/08 , H04W88/14
摘要： With migration of network technology and more and more requirements of user equipment for accessing to Internet, the network security faces more and more severe situation. There is provided a method for distributed security control in communication network system and the device thereof in order to improve security and operatability of network operator. In the method, firstly the network controller establishes a network security control mechanism, which is used for a second network device to check the validity of the data package from the user equipment; secondly, the network controller sends the network security control mechanism to the second network devices; lastly, the second network device checks the validity of the data package from the user equipment according to the network security control mechanism, and discards the data package if the data package is invalid. With the present invention, security and operatability of the communication network maybe improved greatly, particularly, the functionality of address anti-spoofing can be implemented in the network with a WLAN architecture in centralized control. (FIG. 2)
摘要翻译：随着网络技术的转移和用户设备对Internet的需求越来越多，网络安全面临着越来越严重的局面。提供了一种通信网络系统中的分布式安全控制方法及其设备，以提高网络运营商的安全性和可操作性。在该方法中，首先网络控制器建立网络安全控制机制，用于第二网络设备，从用户设备检查数据包的有效性; 其次，网络控制器向第二网络设备发送网络安全控制机制; 最后，第二网络设备根据网络安全控制机制检查用户设备的数据包的有效性，如果数据包无效，则丢弃数据包。通过本发明，可以大大提高通信网络的安全性和可操作性，特别是在具有集中控制的WLAN架构的网络中可以实现地址反欺骗的功能。（图2）

40. 发明申请

US20100111084A1 METHOD AND APPARATUS OF JOINT-REGISTERING IN MULTICAST COMMUNICATION NETWORK 有权
标题翻译：多播通信网络中联机注册的方法与装置
公开(公告)号：US20100111084A1
公开(公告)日：2010-05-06
申请号：US12448548
申请日：2007-07-03
申请人： Chunyan Yao , Songwei Ma , Haibo Wen
发明人： Chunyan Yao , Songwei Ma , Haibo Wen
IPC分类号： H04L12/56
CPC分类号： H04L12/1886 , H04L12/185 , H04L45/16
摘要： The present invention provides a method and apparatus for registering to a designated router in a rendezvous point in an anycast group in a multicast communication network, wherein the rendezvous point implements a joint-registering based on registering status of all rendezvous points in the anycast group. The main rendezvous point sends to the designated router the Register Stop message only when all rendezvous points in the anycast group do not need the Register message from the designated router; when any one of other rendezvous points does not need the Register message, sending the Register message to it is stopped. With the method and apparatus of the present invention, the cases resulting in the interruption of subscriber terminal multicast traffic can be reduced, and the CPU resource of the main rendezvous point and bandwidth resources between it and other rendezvous points are saved.
摘要翻译：本发明提供一种用于向多播通信网络中的任播组中的会合点中的指定路由器注册的方法和装置，其中所述会合点基于所述任播组中的所有会合点的注册状态来实现联合注册。只有当任播组中的所有会合点不需要来自指定路由器的注册消息时，主会合点才会向指定路由器发送注册停止消息; 当任何其他会合点不需要注册消息时，发送注册消息就停止了。利用本发明的方法和装置，可以减少导致用户终端组播流量中断的情况，并且节省主会合点的CPU资源和其与其他会合点之间的带宽资源。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式