Abstract: There are provided a method, a system, and a computer-readable recording medium for processing network traffic. A method for processing network traffic using a switching application specific integrated circuit (ASIC) includes generating, by a software forwarder operated in a software-based network operating system, a message including network processing information, transmitting the message to a switch manager operated in a hardware-based network operating system, learning, by the switch manager, the network processing information, and controlling the switching ASIC with reference to the learned information.

Abstract: There are provided a function processing apparatus and function processing method dynamically process network function using commands. A function processing apparatus includes a communication unit for performing communication with at least one user interface and at least one software component, and a controller for, if first command related information is received from the at least one software component, forming a command tree on the basis of the first command related information and transmitting the first command related information to the at least one user interface, and, if second command related information is received from at least one user interface, transmitting the second command related information to a software component corresponding to the second command related information.

Abstract: Provided are methods of ensuring network continuity performed at a local gateway, a fixed gateway, and a network device. The method of ensuring network continuity performed at a local gateway includes establishing a tunnel with a fixed gateway serving as a relay between an Internet service server and the local gateway, and performing communication with the fixed gateway through the tunnel. Therefore, even when the type of an uplink signal received by a local gateway changes or the local gateway is in an uplink signal shadow area, a terminal connected to the local gateway can be provided with a seamless Internet service.

Abstract: A system including software enables the running software to he upgraded without stopping any service. A system including software includes a task block loaded into a memory the task block being communicable with the outside through a message, and a dynamic module block loaded into the memory, the dynamic module block being symbolically linked with the task block to provide a service corresponding to the message.

Abstract: Disclosed are a logical network separation method and apparatus. The logical network separation method includes generating a first hash key on the basis of address information included in a service request packet, generating hash information on the basis of a transmission property of the service request packet corresponding to the first hash key when the same hash key as the first hash key is not in the hash table, and generating the policy about the reception of the service response packet corresponding to the service request packet on the basis of a destination of the service request packet. Accordingly, it is possible to block a cyber attack such as hacking, a malicious program, etc.

Abstract: A method and an apparatus of integrative network management, which provide connection between private networks and real-time connection according to various policies depending on security or a quality of service (QoS), manages information required to provide the connection, and controls connection by using the managed information in order to defend and cope with various types of cyber attacks and fundamentally invalidate a cyber attack.

Abstract: An operation method of a VPN security apparatus includes receiving a service request from a client, dynamically allocating a fake address of a VPN apparatus connected to a service server, which provides the service requested by the client, and transmitting the fake address allocated to the VPN apparatus to the client and the VPN apparatus.

Abstract: A method and an apparatus for controlling a life-cycle of a process for a network operating system. The method includes, by a process manager, transmitting a first initialize command to processes in a system service space and registering processes that respond to the first initialize command when an operation of the network operating system starts; confirming failure statuses of the registered processes and controlling the registered processes to execute a designated service; transmitting, when the processes in the system service space execute the service, a second initialize command to processes in a networking service space and a networking application space and registering processes that respond to the second initialize command; and confirming failure statuses of the processes registered in response to the second initialize command and allocating roles to the respective processes in the networking service space and the networking application space.

Abstract: A mobility control device, a mobile communication device, and mobility providing method providing a mobility service based on a tunnel in an environment with multiple mobile networks. A method for providing a mobility service in an environment with multiple mobile networks includes; receiving, by a mobility control device, positional information from a mobile communication device; acquiring, by the mobility control device, communication quality information in an area corresponding to the positional information for each of the multiple mobile networks, and transmitting, by the mobility control device, the communication quality information to the mobile communication device.

Abstract: A system for balancing a data traffic load of a mobile communication device having multiple interfaces includes: an interface state management unit monitoring whether a failure occurs in a plurality of wireless interfaces included in a mobile communication apparatus; an interface quality management unit calculating load balancing ratios to be set for the plurality of wireless interfaces, respectively based on information on the plurality of wireless interfaces; and an interface control unit distributing data traffics to the plurality of respective wireless interfaces based, on the load balancing ratios.

Abstract: Disclosed are a method of controlling a process based on a network operation mode and an apparatus therefor. A process controlling method performed in a network device includes determining an operation mode for an operating system of the network device, determining an entity for controlling a process based on the determined operation mode, and controlling the process through the determined entity. According to the present invention, it is possible to control a process lifecycle through the same interface regardless of the network operation mode.

Abstract: Provided are methods of ensuring network continuity performed at a local gateway, a fixed gateway, and a network device. The method of ensuring network continuity performed at a local gateway includes establishing a tunnel with a fixed gateway serving as a relay between an Internet service server and the local gateway, and performing communication with the fixed gateway through the tunnel. Therefore, even when the type of an uplink signal received by a local gateway changes or the local gateway is in an uplink signal shadow area, a terminal connected to the local gateway can be provided with a seamless Internet service.

Abstract: Disclosed is a network service system including a terminal selectively providing packets of an information centric networking (ICN) protocol and an Internet protocol, a smart digital unit (DU) identifying whether the packets provided from the terminal correspond to an ICN protocol packet or an Internet protocol packet to transfer the packets through different paths depending on a type of the identified packet, and an ICN node receiving the ICN protocol packet from the smart DU to provide contents.

Abstract: A home cloud gateway apparatus that is connected to an indoor home network and that provides a service to a client that connects through the network includes an Internet interface unit, a phone exchange unit, a storage unit that stores a virtual computer module, and an authentication processor. The home cloud gateway apparatus provides a virtual computer service by activating the virtualization module that is stored at the storage unit, and provides a phone call service through the Internet and a phone call service through the Internet and a phone network using the Internet interface unit and the phone exchange unit.

Abstract: Disclosed are a system for managing virtual private networks (VPNs) includes: terminals configured to transmit user data; a manager configured to transmit information for concealing networks and managing the VPNs; border gateways configured to decrypt the user data and perform a network address translation (NAT) procedure and a filtering procedure on the decrypted user data based on the information; and servers configured to receive the user data subjected to the NAT procedure and the filtering procedure, wherein the filtering procedure is a procedure discarding the user data to be transferred to the servers that are not allowed so as to allow the terminals to access only the allowed servers, the NAT procedure is a procedure changing an Internet protocol (IP) address used in a first network to an IP address used in a second network, and the first network and the second network are different networks.

Abstract: Provided is a radio frequency identification (RFID) tag device. The RFID tag device includes memory which stores ID information and a second count value, and a certification unit which performs a certification process according to a keyed hash value received from the outside and a result of a comparison between first and second count values received from the outside, and adjusts the second count value.

Abstract: A security method in a server-based mobile IP system is provided. Specifically, in the security method, general data is securely exchanged in addition to a control message that is exchanged between a mobile node and a server or between mobile nodes. Specifically, provided is a method of securely exchanging data by using a mobile node including an mPAK execution module generating necessary keys by exchanging key information with the server while performing a mutual authentication process and negotiating the security policy; and a security module setting a security policy that is negotiated with the corresponding node and applying the security policy to data according to the set security policy when transmitting the data.

Abstract: Provided is a method of establishing a user centric virtual network. The method includes: performing a first tunneling operation between a first tunnel end and an address translation device, which are connected to a first private network, and a tunnel relay device; performing a second tunneling operation between a second tunnel end and an address translation device, which are connected to a second private network, and the tunnel relay device; and performing a third tunneling operation between the tunnel relay device and an end client, wherein a virtual IP is allocated to each of the first and second tunnel ends, the address translation devices, the end client, and the tunnel relay device; and each of the first to third tunneling operations connects routing information on the virtual IP to a corresponding tunnel.

Abstract: Disclosed is a packet processing method in a below binary stack (BBS) structure. A transmission packet processing method includes receiving a packet from a network layer, reassembling a packet for which a first fragmentation has been performed when the received packet is the packet for which the first fragmentation has been performed, encrypting the reassembled packet, performing a second fragmentation for the encrypted packet when the second fragmentation is necessary for the encrypted packet, adding a header to the packet for which the second fragmentation has been performed, and transmitting the packet with the header added thereto through a physical layer. Accordingly, an encryption function can be provided in the BBS structure.

Abstract: Disclosed are a method for constructing a virtual private network, a method for packet forwarding, and a gateway apparatus using the methods. A method for constructing a virtual private network, according to an example embodiment of the present invention, may comprise receiving a first tunnel connection request from the lower gateway, and transmitting a permission message for the first tunnel connection request to the lower gateway; transmitting a second tunnel connection request to the upper gateway, and receiving a permission message for the second tunnel connection request from the upper gateway; and generating a second tunnel, and storing information about the second tunnel in a tunnel routing table.