Abstract: Disclosed is a method for updating DNS of host in IPv6 stateless address auto-configuration, wherein an option is added in the RS message sent by a host and/or RA message sent by a router, said option including information for negotiation of updating DNS of host. Based on said information, the host negotiates with the router to determine whether the host or the router register, the mapping between the global address of the host and the full domain name of the host, to a DNS server, to complete updating the DNS of the host. This invention enables the host to correctly identify the matching relation between domain name suffix information and address prefix, and achieves the negotiation of updating DNS domain name between the host and the router. Since DNS updating is performed by a router instead of the host, the DNS updating would become simple and safe.

Abstract: The present invention relates to an IPv6-based access device, edge router and method for stainless address configuration for IPv6 user equipment in an Ethernet access network, wherein, the access device adds the relay agent ID indicating the access device itself and the relevant port identifier indicating the user equipment to a router solicitation message sent by the user equipment in the form of a newly defined option, and forwards the message to the relevant edge router; and the edge router configures a dedicated address prefix for the user equipment according to the relay agent ID and port identifier, combines the address prefix, the relay ID and the port identifier into a router response message, and sends the response message to the relevant access equipment indicated by the relay ID; the access device sends a router advertisement message only including the address prefix via the line port indicated by the port identifier to user equipment.

Abstract: There is provided a method, apparatus, system and corresponding computer program product for providing an inter-domain service. The method comprises: user equipment agent subscribing a service provided by at least one other domain from a domain it belongs to; the user equipment agent acquiring information for accessing the subscribed service from the domain it belongs to; the user equipment agent accessing the subscribed service through the at least one other domain directly based on the acquired information without going through the domain it belongs to.

Abstract: The invention provides methods and devices for reporting and parsing the errors of a packet based on IPSec protocol family in a communication network. Concretely, the reserved field in ICMP security failure message is used to denote the error type at the second level of the error in the packet. With the aid of the solution provided by the invention, it is possible to report the error types for a tunnel packet which has an error in detail. And the source termination device can ascertain the error types of a tunnel packet, so as to eliminate the error.

Abstract: The present invention provides a method and device of communicating mobile multicast service in the fixed network by coupling, via the fixed network, a mobile base station to the mobile communication system of a mobile core network. In the present invention, a multicast service channel is established between gateway used for connecting a fixed network with mobile core network and an edge routing device in the fixed network, for communicating the mobile multicast service from mobile core network; while the edge routing device provides, in the access/convergence network of the fixed network, mobile multicast service for the mobile base station. With application of the device and method in the present invention, network resource of the fixed network may be saved, and payload of each network device is relieved.

Abstract: Method and apparatus for decreasing multi-cell feedback overhead is provided in the present invention. Wherein a mobile user terminal equipment utilizes a first period to feedback short-term channel direction information of a serving base station, utilizes a second period to feedback long-term channel direction information of neighboring base stations, further, the mobile user terminal equipment utilizes a third period to feedback long-term relative amplitude information, utilizes a fourth period to feedback short-term relative phase information, wherein the first period is shorter than the second period, and the third period is longer than the fourth period.

Abstract: The present invention provides a method and device for hierarchical configuration of domain name in IPv6 network. Said method comprises: a) negotiating a unique user network's name between a user and a network SP; b) a client terminal device at the user network side obtaining prefix of IPv6 network address and suffix of the user network's domain name by sessioning with a network access device, said suffix of the user network's domain name being consisting of the user network's name and suffix of the network SP's domain name; c) the network access device further informing the network SP's DNS server of establishing the resource record of said user network's domain name server; d) said client terminal device conducting the address configuration and providing domain name service for hosts at the user network side according to the obtained prefix of IPv6 network address and suffix of the user network's domain name.

Abstract: It is an object of the present invention to provide a new technical solution of supporting special secure communication between user equipment which is located in an external network and an private network the user equipment belongs to. Specifically, transmitted data is encrypted/decrypted and authenticated by using pre-stored root keys corresponding to specific private networks and the agreed encryption/decryption and authentication algorithm at the user equipment and an access device. The manner of generating the encryption/decryption keys and authentication key is simplified, and the complexity of the access device at the private network end is reduced on the premise of not degrading the security grade. The technical solution of the present invention is highly flexible and extensible and can achieve better user experience.

Abstract: Disclosed is a method for updating DNS of host in IPv6 stateless address auto-configuration, wherein an option is added in the RS message sent by a host and/or RA message sent by a router, said option including information for negotiation of updating DNS of host. Based on said information, the host negotiates with the router to determine whether the host or the router register, the mapping between the global address of the host and the full domain name of the host, to a DNS server, to complete updating the DNS of the host. This invention enables the host to correctly identify the matching relation between domain name suffix information and address prefix, and achieves the negotiation of updating DNS domain name between the host and the router. Since DNS updating is performed by a router instead of the host, the DNS updating would become simple and safe.

Abstract: The invention provides methods and devices for reporting and parsing the errors of a packet based on IPSec protocol family in a communication network. Concretely, the reserved field in ICMP security failure message is used to denote the error type at the second level of the error in the packet. With the aid of the solution provided by the invention, it is possible to report the error types for a tunnel packet which has an error in detail. And the source termination device can ascertain the error types of a tunnel packet, so as to eliminate the error.

Abstract: The present invention provides a method and device for hierarchical configuration of domain name in IPv6 network. Said method comprises: a) negotiating a unique user network's name between a user and a network SP; b) a client terminal device at the user network side obtaining prefix of IPv6 network address and suffix of the user network's domain name by sessioning with a network access device, said suffix of the user network's domain name being consisting of the user network's name and suffix of the network SP's domain name; c) the network access device further informing the network SP's DNS server of establishing the resource record of said user network's domain name server; d) said client terminal device conducting the address configuration and providing domain name service for hosts at the user network side according to the obtained prefix of IPv6 network address and suffix of the user network's domain name.

Abstract: The present invention relates to an IPv6-based access device, edge router and method for stainless address configuration for IPv6 user equipment in an Ethernet access network, wherein, the access device adds the relay agent ID indicating the access device itself and the relevant port identifier indicating the user equipment to a router solicitation message sent by the user equipment in the form of a newly defined option, and forwards the message to the relevant edge router; and the edge router configures a dedicated address prefix for the user equipment according to the relay agent ID and port identifier, combines the address prefix, the relay ID and the port identifier into a router response message, and sends the response message to the relevant access equipment indicated by the relay ID; the access device sends a router advertisement message only including the address prefix via the line port indicated by the port identifier to user equipment.

Abstract: A method and system uses geometry-driven feature point analysis to synthesize images including for example facial expressions. Given the feature point positions (geometry) of an expression, the method automatically synthesizes the corresponding expression image, which has photorealistic and natural looking expression details.

Abstract: It is an object of the present invention to provide a new technical solution of supporting special secure communication between user equipment which is located in an external network and an private network the user equipment belongs to. Specifically, transmitted data is encrypted/decrypted and authenticated by using pre-stored root keys corresponding to specific private networks and the agreed encryption/decryption and authentication algorithm at the user equipment and an access device. The manner of generating the encryption/decryption keys and authentication key is simplified, and the complexity of the access device at the private network end is reduced on the premise of not degrading the security grade. The technical solution of the present invention is highly flexible and extensible and can achieve better user experience.

Abstract: There have been provided in the present invention a method for establishing a dynamic tunnel of securely accessing to a private LAN and apparatus therefor. In the method of the present invention, a source tunnel server is disposed on a routing device through which a source host receives/transmits IP data packets, while a destination tunnel server is disposed on a routing device through which a destination host receives/transmits IP data packets. Subsequently, a secure communication tunnel is established automatically rather than manually between the source and destination tunnel servers, without requiring any IP address to be provided for the access servers with respect to corresponding private LANs. Moreover, the communication tunnel can be canceled upon completion of communications.

Abstract: The present invention provides a method for network service selection and authentication in an IPv6 access network, a scheme for stateless auto-configuration and devices thereof. A NSP Information option containing the IPv6 address of a NSP edge router and a NSP name is defined in RA messages. A NSSA Information option is defined in RS option fields. The present invention enables IPv6 stateless auto-configuration in an access network. The new NSP Information option, the way of “one time authentication per subscriber network per NSP” and the use of IPv6 routing header promote the efficiency of IPv6 stateless auto-configuration and reduce the NSP selection and authentication traffic. The present invention provides an efficient solution for network service selection and authentication without introducing any other message exchange between terminals and access nodes.

Abstract: A method and system uses geometry-driven feature point analysis to synthesize images including for example facial expressions. Given the feature point positions (geometry) of an expression, the method automatically synthesizes the corresponding expression image, which has photorealistic and natural looking expression details.