专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08379092B2 System and method for providing application service using image data 有权
标题翻译：使用图像数据提供应用服务的系统和方法
公开(公告)号：US08379092B2
公开(公告)日：2013-02-19
申请号：US12678967
申请日：2008-05-14
申请人： Yun Kyung Lee , Jong Wook Han , Geon Woo Kim , Deok Gyu Lee , Kyo Il Chung , Jong Soo Jang
发明人： Yun Kyung Lee , Jong Wook Han , Geon Woo Kim , Deok Gyu Lee , Kyo Il Chung , Jong Soo Jang
IPC分类号： H04N5/225
CPC分类号： H04N7/18 , H04L65/4084 , H04L65/605 , H04N21/21 , H04N21/23
摘要： There is provided a system and method for providing an application service using image data. One image data processing server collects images (for example, still images and moving images) captured by various kinds of image capturing apparatuses, such as CCTV systems and processes the collected images into data required to provide application services. A plurality of application service servers only provide processed data of the image data processing server without requiring an additional process to a display device of a user. Accordingly, the configuration of each of the application service servers is simplified to thereby reduce manufacturing costs.
摘要翻译：提供了一种使用图像数据提供应用服务的系统和方法。一个图像数据处理服务器收集诸如CCTV系统的各种图像捕获设备捕获的图像（例如，静止图像和运动图像），并将收集的图像处理为提供应用服务所需的数据。多个应用服务服务器仅提供图像数据处理服务器的处理数据，而不需要对用户的显示设备的附加处理。因此，简化了各应用服务服务器的配置，从而降低制造成本。

2. 发明授权

US08307441B2 Log-based traceback system and method using centroid decomposition technique 有权
标题翻译：基于Log的追溯系统和使用重心分解技术的方法
公开(公告)号：US08307441B2
公开(公告)日：2012-11-06
申请号：US12669633
申请日：2007-11-21
申请人： Jong Hyun Kim , Geon Lyang Kim , Seon Gyoung Sohn , Beom Hwan Chang , Chi Yoon Jeong , Jong Ho Ryu , Jung Chan Na , Jong Soo Jang , Sung Won Sohn
发明人： Jong Hyun Kim , Geon Lyang Kim , Seon Gyoung Sohn , Beom Hwan Chang , Chi Yoon Jeong , Jong Ho Ryu , Jung Chan Na , Jong Soo Jang , Sung Won Sohn
IPC分类号： G06F11/34
CPC分类号： H04L45/00 , H04L45/12 , H04L63/1416 , H04L63/1425 , H04L63/1441 , H04L2463/146
摘要： There are provided a system and method for tracing back an attacker by using centroid decomposition technique, the system including: a log data input module collecting log data of an intrusion alarm from an intrusion detection system; a centroid node detection module generating a shortest path tree by applying a shortest path algorithm to network router connection information collected by a network administration server, detecting a centroid node by applying centroid decomposition technique removing a leaf-node to the shortest path tree, and generating a centroid tree whose node of each level is the detected centroid node; and a traceback processing module requesting log data of a router matched with the node of each level of the centroid tree, and tracing back a router identical to the log data of the collected intrusion alarm as a router connected to a source of an attacker by comparing the log data of the router with the log data of the collected intrusion alarm. According to the system and method, an attacker causing a security intrusion event may be quickly detected, a load on the system is reduced, and a passage host exposed to a danger or having weaknesses may be easily recognized, thereby easily coping with an attack.
摘要翻译：提供了一种通过使用质心分解技术跟踪攻击者的系统和方法，该系统包括：日志数据输入模块，从入侵检测系统收集入侵警报的日志数据; 质心节点检测模块，通过对网络管理服务器收集的网络路由器连接信息应用最短路径算法，生成最短路径树，通过应用质心分解技术检测质心节点，去除叶节点到最短路径树，并生成每个级别的节点是检测到的质心节点的质心树; 以及回溯处理模块，请求与质心树的每个级别的节点匹配的路由器的日志数据，并且通过比较来跟踪与收集的入侵警报器的日志数据相同的路由器作为连接到攻击者的源的路由器路由器的日志数据与收集的入侵报警的日志数据。根据系统和方法，可以快速地检测到导致安全入侵事件的攻击者，系统上的负载减少，并且易于识别暴露于危险或具有弱点的通道主机，从而容易地应对攻击。

3. 发明授权

US08230503B2 Method of extracting windows executable file using hardware based on session matching and pattern matching and apparatus using the same 有权
标题翻译：基于会话匹配和模式匹配的硬件提取Windows可执行文件的方法及使用该可执行文件的方法
公开(公告)号：US08230503B2
公开(公告)日：2012-07-24
申请号：US12503288
申请日：2009-08-17
申请人： Byoung Koo Kim , Seung Yong Yoon , Ik Kyun Kim , Jin Tae Oh , Jong Soo Jang , Hyun Sook Cho
发明人： Byoung Koo Kim , Seung Yong Yoon , Ik Kyun Kim , Jin Tae Oh , Jong Soo Jang , Hyun Sook Cho
IPC分类号： H04L29/06
CPC分类号： H04L63/145 , G06F21/564
摘要： A method and apparatus for extracting a windows executable file that can search for a pattern related to windows executable files among a large quantity of network packets using a hardware-based session tracking and pattern matching technology and that can extract all packets included in the corresponding session are provided. The method of extracting a windows executable file includes: collecting incoming packets having a payload according to a session of a reference packet having an MZ pattern; performing a portable executable (PE) pattern matching for the collected incoming packets; and forming a PE file based on at least one incoming packet satisfying the PE pattern matching.
摘要翻译：一种用于提取Windows可执行文件的方法和装置，其可以使用基于硬件的会话跟踪和模式匹配技术在大量网络分组中搜索与Windows可执行文件相关的模式，并且可以提取包括在相应会话中的所有分组被提供。提取Windows可执行文件的方法包括：根据具有MZ模式的参考分组的会话收集具有有效载荷的传入分组; 对所收集的传入分组执行匹配的便携式可执行（PE）模式; 以及基于满足PE模式匹配的至少一个输入分组形成PE文件。

4. 发明申请

US20120167222A1 METHOD AND APPARATUS FOR DIAGNOSING MALICOUS FILE, AND METHOD AND APPARATUS FOR MONITORING MALICOUS FILE 审中-公开
标题翻译：用于诊断恶性病毒文件的方法和装置，以及用于监测恶性病毒文件的方法和装置
公开(公告)号：US20120167222A1
公开(公告)日：2012-06-28
申请号：US13335811
申请日：2011-12-22
申请人： Ik Kyun KIM , Yang-Seo CHOI , Byoung-Koo KIM , Seung Yong YOON , Youngjun HEO , Dae Won KIM , Il AHN CHEONG , Jintae OH , Jong Soo JANG
发明人： Ik Kyun KIM , Yang-Seo CHOI , Byoung-Koo KIM , Seung Yong YOON , Youngjun HEO , Dae Won KIM , Il AHN CHEONG , Jintae OH , Jong Soo JANG
IPC分类号： G06F21/00
CPC分类号： G06F21/563
摘要： An apparatus for diagnosing malicious files includes a information transferring unit configured to receive information regarding a malicious file distributed in a management network and an execution file generated by assembling packets collected from the management network; an anti-virus engine configured to determine whether or not the execution file is malicious to generate information regarding a new malicious file; and a management unit configured to transfer the information regarding the malicious file and the information regarding the new malicious file to a terminal device on the management network through the information transferring unit.
摘要翻译：用于诊断恶意文件的装置包括：信息传送单元，被配置为接收关于分发在管理网络中的恶意文件的信息和通过组合从管理网络收集的分组而生成的执行文件; 配置为确定所述执行文件是否是恶意的以产生关于新的恶意文件的信息的反病毒引擎; 以及管理单元，被配置为通过信息传送单元将关于恶意文件的信息和关于新的恶意文件的信息传送到管理网络上的终端设备。

5. 发明授权

US08014310B2 Apparatus and method for visualizing network situation using security cube 有权
标题翻译：使用安全立方体可视化网络情况的装置和方法
公开(公告)号：US08014310B2
公开(公告)日：2011-09-06
申请号：US12516494
申请日：2007-08-23
申请人： Beom-Hwan Chang , Chi-Yoon Jeong , Seon-Gyoung Sohn , Soo-Hyung Lee , Hyo-Chan Bang , Geon-Lyang Kim , Hyun-Joo Kim , Won-Joo Park , Jong-Ho Ryu , Jong-Hyun Kim , Jong-Soo Jang , Sung-Won Sohn , Jung-Chan Na
发明人： Beom-Hwan Chang , Chi-Yoon Jeong , Seon-Gyoung Sohn , Soo-Hyung Lee , Hyo-Chan Bang , Geon-Lyang Kim , Hyun-Joo Kim , Won-Joo Park , Jong-Ho Ryu , Jong-Hyun Kim , Jong-Soo Jang , Sung-Won Sohn , Jung-Chan Na
IPC分类号： H04L12/26
CPC分类号： H04L63/1441 , H04L63/20
摘要： An apparatus and method for visualizing a network condition related to a network security are provided. The apparatus includes a traffic feature extracting unit, a network condition displaying unit, and a traffic abnormal condition determining unit. The traffic feature extracting unit extracts information including source address, source port, destination address, and destination port from network traffics, selects two of the extracted information, and calculates unique dispersion degrees of two unselected information. The network condition displaying unit displays a two-dimensional cube expressed using the calculated unique dispersion degrees for the classified traffics. The traffic abnormal condition determining unit determines whether the traffics are in an abnormal condition or not based on the two-dimensional security cube.
摘要翻译：提供了一种用于可视化与网络安全相关的网络条件的装置和方法。该装置包括交通特征提取单元，网络状态显示单元和交通异常状况判定单元。流量特征提取单元从网络流量提取包括源地址，源端口，目的地址和目的地端口的信息，选择两个提取的信息，并计算两个未选择信息的唯一色散度。网络条件显示单元显示使用所计算的分类业务的唯一色散度表示的二维立方体。交通异常判定单元基于二维安全立方体来判定是否处于异常状态。

6. 发明授权

US07849187B2 Network status display device and method using traffic pattern map 有权
标题翻译：网络状态显示设备和使用流量模式图的方法
公开(公告)号：US07849187B2
公开(公告)日：2010-12-07
申请号：US11527850
申请日：2006-09-26
申请人： Beom Hwan Chang , Jung Chan Na , Geon Lyang Kim , Dong Young Kim , Jin Oh Kim , Hyun Joo Kim , Hyo Chan Bang , Soo Hyung Lee , Seon Gyoung Shon , Jong Soo Jang , Sung Won Sohn
发明人： Beom Hwan Chang , Jung Chan Na , Geon Lyang Kim , Dong Young Kim , Jin Oh Kim , Hyun Joo Kim , Hyo Chan Bang , Soo Hyung Lee , Seon Gyoung Shon , Jong Soo Jang , Sung Won Sohn
IPC分类号： G06F15/16
CPC分类号： H04L43/028 , H04L43/062 , H04L43/16 , H04L63/1408
摘要： A network status display device using a traffic pattern map is provided. The device includes: a traffic feature extractor extracting a port number of a port having the maximum occupancy of micro-flows and macro-flows for each network address section and host address section with reference to traffic information collected by an external traffic information collector, calculating and storing an occupancy rate of the port; a traffic status display unit making a network traffic pattern map expressed by destination-source network addresses and a host traffic pattern map expressed by destination-source host addresses and displaying the port information stored in the traffic feature extractor on the network traffic pattern map and the host traffic pattern map; and a traffic anomaly determination unit determining whether a network status is abnormal with reference to the network traffic pattern map and the host traffic pattern map and detecting and reporting a harmful or abnormal traffic which causes the abnormal network status. The device can determine whether the anomaly deteriorating the network performance exists and can easily and quickly detect the harmful or abnormal traffic which causes the anomaly by the use of the port information of the port having the maximum occupancy of the micro-flows and the macro-flows for each network address section and each host address section.
摘要翻译：提供了使用业务模式图的网络状态显示设备。该设备包括：流量特征提取器，参考由外部交通信息收集器收集的交通信息，提取每个网络地址部分和主机地址部分具有最大占用微流量和宏流量的端口的端口号，计算并存储所述端口的占用率; 形成由目的地源网络地址表示的网络流量模式图的流量状态显示单元和由目的地 - 源主机地址表示的主机流量模式图，并且在网络流量模式图上显示存储在流量特征提取器中的端口信息，并且主机流量模式图; 以及流量异常判定单元，基于网络流量模式图和主机流量模式图来判断网络状态是否异常，并检测并报告导致异常网络状态的有害或异常流量。该设备可以确定异常是否存在网络性能恶化，并可以通过使用具有微流量最大占用端口的端口信息和宏观流量来轻松快速地检测导致异常的有害或异常流量，每个网络地址部分和每个主机地址部分的流程。

7. 发明授权

US07840811B2 Network system and communication methods for securely bootstraping mobile IPv6 mobile node using pre-shared key 失效
标题翻译：使用预共享密钥安全地引导移动IPv6移动节点的网络系统和通信方法
公开(公告)号：US07840811B2
公开(公告)日：2010-11-23
申请号：US11635181
申请日：2006-12-07
申请人： Jae Hoon Nah , Hyeok Chan Kwon , Jong Soo Jang
发明人： Jae Hoon Nah , Hyeok Chan Kwon , Jong Soo Jang
IPC分类号： H04L9/00 , H04L9/32 , G06F11/00
CPC分类号： H04L9/0844 , H04L9/321 , H04L61/203 , H04L61/6059 , H04L63/0272 , H04L63/062 , H04L63/08 , H04L63/0892 , H04L63/164 , H04L2209/80 , H04L2463/061 , H04W12/04 , H04W12/06 , H04W80/04
摘要： Provided is a network system using diameter authentication, authorization and accounting (AAA) infrastructure to support the bootstrapping of a Mobile Internet Protocol version 6 (IPv6) mobile node. The network system includes a mobile node equipped with Mobile IPv6, an attendant which is accessed by the mobile node when the mobile node moves toward a new network, an AAA local server which supports AAA processes for the mobile node in a local network, an AAA home server which supports AAA processes for the mobile node in a home network, and supports initial settings during the bootstrapping of the mobile node, and a home agent which handles binding update (BU) and binding acknowledgement (BA) regarding the mobile node. The AAA home server can configure initial settings for the mobile node that is authenticated by the AAA local server so that the mobile node can be effectively bootstrapped. Then, the AAA home server can distribute an IPsec SA to the mobile node and a home agent, and perform BU and BA based on the initial settings.
摘要翻译：提供了一种使用直径认证，授权和计费（AAA）基础设施来支持移动互联网协议版本6（IPv6）移动节点的引导的网络系统。该网络系统包括移动节点，该移动节点配备有移动IPv6，当移动节点向新网络移动时被移动节点接入的话务员，支持本地网络中的移动节点的AAA进程的AAA本地服务器，AAA 家庭服务器，其支持归属网络中的移动节点的AAA进程，并且在移动节点的引导期间支持初始设置，以及处理关于移动节点的绑定更新（BU）和绑定确认（BA）的归属代理。 AAA家庭服务器可以配置由AAA本地服务器认证的移动节点的初始设置，从而可以有效地引导移动节点。然后，AAA家庭服务器可以将IPsec SA分发到移动节点和归属代理，并且基于初始设置来执行BU和BA。

8. 发明授权

US07831822B2 Real-time stateful packet inspection method and apparatus 有权
标题翻译：实时状态报文检测方法及装置
公开(公告)号：US07831822B2
公开(公告)日：2010-11-09
申请号：US11633174
申请日：2006-12-04
申请人： Seung Yong Yoon , Jin Tae Oh , Jong Soo Jang
发明人： Seung Yong Yoon , Jin Tae Oh , Jong Soo Jang
IPC分类号： H04L9/00 , H04L9/32 , G06F11/00
CPC分类号： H04L63/0227 , H04L63/0254 , H04L67/14
摘要： A real-time stateful packet inspection method and apparatus is provided, which uses a session table processing method that can efficiently generate state information. In the apparatus, a session table stores session data of a packet received from an external network. A hash key generator hashes a parameter extracted from the received packet and generates a hash pointer of the session table corresponding to the packet. A session detection module searches the session table for a session corresponding to the received packet. A session management module performs management of the session table such as addition, deletion, and change of sessions of the session table. A packet inspection module generates state information corresponding to the received packet from both directionality information of the packet and entry header information of the packet stored in the session table and then inspects the packet based on the generated state information.
摘要翻译：提供了一种实时状态包检测方法和装置，其使用可以有效地生成状态信息的会话表处理方法。在该装置中，会话表存储从外部网络接收到的分组的会话数据。哈希密钥生成器从接收到的分组中提取参数，并生成与分组对应的会话表的哈希指针。会话检测模块在会话表中搜索与接收到的分组相对应的会话。会话管理模块执行会话表的管理，例如会话表的会话的添加，删除和更改。分组检查模块从分组的方向性信息和存储在会话表中的分组的条目标题信息两者生成对应于接收到的分组的状态信息，然后基于生成的状态信息来检查分组。

9. 发明授权

US07818786B2 Apparatus and method for managing session state 有权
标题翻译：用于管理会话状态的装置和方法
公开(公告)号：US07818786B2
公开(公告)日：2010-10-19
申请号：US11298114
申请日：2005-12-08
申请人： Seung Yong Yoon , Jin Tae Oh , Jong Soo Jang
发明人： Seung Yong Yoon , Jin Tae Oh , Jong Soo Jang
IPC分类号： G06F7/04
CPC分类号： H04L63/0254 , H04L63/1458
摘要： An apparatus and method for managing a session state are provided. The apparatus for managing a session state during transmission control protocol (TCP) handshaking includes: a session index unit producing and managing an index including 5-tuple information of a session corresponding to an input packet; a detailed information manager generating and managing an entry by extracting state information of a session in which a predetermined time does not pass after the session has been completely established, to respond to an intrusion detection against the input packet when the index is produced; a brief information manager generating and managing an entry including state information, which includes states of session connection and disconnection and directionality of the input packet, of a session in which a predetermined time elapses after the session has been completely established; and a search unit searching an index of the session corresponding to the input packet in the session index unit, and, if an index does not exist, searching the brief information manager after the session has been completely established.
摘要翻译：提供了一种用于管理会话状态的装置和方法。用于在传输控制协议（TCP）握手期间管理会话状态的装置包括：会话索引单元，产生和管理包括对应于输入分组的会话的5元组信息的索引; 详细信息管理器，通过提取在会话完全建立之后预定时间不通过的会话的状态信息来生成和管理条目，以在产生索引时响应对输入分组的入侵检测; 生成和管理包括状态信息的条目的条目，该状态信息包括在会话已经完全建立之后经过预定时间的会话的会话连接和断开的状态以及输入分组的方向性; 以及搜索单元，在会话索引单元中搜索对应于输入分组的会话的索引，并且如果索引不存在，则在会话完全建立之后搜索简要信息管理器。

10. 发明授权

US07787394B2 Network status display device and method using traffic flow-radar 有权
标题翻译：网络状态显示装置及方法采用交通流雷达
公开(公告)号：US07787394B2
公开(公告)日：2010-08-31
申请号：US11599909
申请日：2006-11-15
申请人： Beom Hwan Chang , Jung Chan Na , Geon Lyang Kim , Dong Young Kim , Jin Oh Kim , Hyun Joo Kim , Hyo Chan Bang , Soo Hyung Lee , Seon Gyoung Sohn , Jong Soo Jang , Sung Won Sohn
发明人： Beom Hwan Chang , Jung Chan Na , Geon Lyang Kim , Dong Young Kim , Jin Oh Kim , Hyun Joo Kim , Hyo Chan Bang , Soo Hyung Lee , Seon Gyoung Sohn , Jong Soo Jang , Sung Won Sohn
IPC分类号： H04L12/66 , G01R31/08 , H04W36/00
CPC分类号： H04L43/045 , H04L43/0817 , H04L43/16
摘要： A network status display device using a traffic flow-radar is provided. The network status display device includes: a traffic feature extractor calculating flow occupancy rates for total flows, micro-flows and macro-flows with respect to each of a plurality of traffic features with reference to traffic information for each traffic feature such as a network address, a port, a transmitting/receiving host address or a protocol collected by an external traffic information collector, and storing the calculation result; a traffic status display unit displaying the flow occupancy rates for each traffic feature calculated and stored in the traffic feature extractor on a radar with dots for each traffic feature; and a traffic anomaly determination unit determining whether a network status is abnormal with reference to the radar for each traffic feature, detecting and reporting the type of the abnormal network status and harmful or abnormal traffic that generates the abnormal network status, when the abnormal status occurs.
摘要翻译：提供了使用交通流量雷达的网络状态显示装置。网络状态显示装置包括：业务特征提取器，参考每个业务特征（例如网络地址）的业务信息来计算关于多个业务特征中的每一个的总流量，微流量和宏流量的流量占用率，端口，发送/接收主机地址或由外部交通信息收集器收集的协议，并存储计算结果; 交通状态显示单元，其显示针对每个交通特征点的雷达上计算并存储在交通特征提取器中的每个交通特征的流量占用率; 以及交通异常判定单元，针对每个流量特征，参照雷达确定网络状态是否异常，检测和报告异常网络状态的类型以及产生异常网络状态的有害或异常流量，当发生异常状态时。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式