Abstract: A folded module includes a housing, a carrier provided in the housing, and a rotation holder provided on the carrier and including a reflective member. The carrier is rotatable, with respect to the housing, around a first axis formed by one rotating shaft ball, the rotation holder is rotatable with respect to the carrier around a second axis formed by two ball members, and the first axis and the second axis intersect each other, and the one rotating shaft ball and the two ball members are provided together on a plane on which both the first axis and the second axis are provided.

Abstract: A mobile communication terminal device equipped with a replaceable communication module and a back cover thereof are provided. The mobile communication terminal device includes: a host processor configured to control and operate the mobile communication terminal device; a baseband processing unit configured to process a mobile communication protocol; and a radio frequency (RF) signal processing unit configured to wirelessly communicate with a mobile communication network, wherein the host processor, the baseband processing unit and the RF signal processing unit are further configured to be implemented as modules that are attachable to or detachable from a printed circuit board (PCB) of the mobile communication terminal device.

Abstract: A VPN (Virtual Private Network) gateway virtualizes a logical gateway corresponding to a VPC (Virtual Private Cloud) group of a connected user terminal, based on a virtual address of the user terminal, and logically connects the logical gateway to the database corresponding to the VPC group to provide VPC service to the user terminal.

Abstract: Disclosed are a system for managing virtual private networks (VPNs) includes: terminals configured to transmit user data; a manager configured to transmit information for concealing networks and managing the VPNs; border gateways configured to decrypt the user data and perform a network address translation (NAT) procedure and a filtering procedure on the decrypted user data based on the information; and servers configured to receive the user data subjected to the NAT procedure and the filtering procedure, wherein the filtering procedure is a procedure discarding the user data to be transferred to the servers that are not allowed so as to allow the terminals to access only the allowed servers, the NAT procedure is a procedure changing an Internet protocol (IP) address used in a first network to an IP address used in a second network, and the first network and the second network are different networks.

Abstract: A packet scheduling method and apparatus which allows multiple flows that require data transmission to the same output port of a network device such as a router to fairly share bandwidth. The packet scheduling method includes calculating an expected time of arrival of a (k+1)-th packet subsequent to a currently input k-th packet of individual flows by use of bandwidth allocated fairly to each of the flows and a length of the k-th packet; in response to the arrival of the (k+1)-th packet, comparing the expected time of arrival of the (k+1)-th packet to an actual time of arrival of the (k+1)-th packet; and scheduling the (k+1)-th packet of each flow according to the comparison result.

Abstract: In a system for providing an IPTV service, if a multicast address of an IPTV channel received from a head-end is a multicast address requested by a mobile node through a tunnel, an end router confirms a care of address (CoA) of the mobile node corresponding to the multicast address of the IPTV channel, sets the multicast address in the first header of broadcasting traffic, sets the CoA of the mobile node in the second header of the broadcasting traffic, and then sends the broadcasting traffic.

Abstract: An apparatus of controlling a data traffic in a packet based mobile communication system and a method thereof according to the present invention are disclosed. The apparatus of controlling a data traffic in a packet based mobile communication system according to another aspect of the present invention includes an extracting unit configured to, if a message which requests to create a dedicated bearer, extract at least one characteristic parameter included in the received message, a determining unit configured to determine whether the dedicated bearer is set through the load distribution gateway based on the at least one extracted characteristic parameter, an already set regulation or condition; and a creating unit configured to create a message which requests to set the dedicated bearer as a result of the determination.

Abstract: Provided are a method of packet forwarding and an apparatus therefor. In the method, a method performed in a network apparatus includes receiving at least one packet, providing the at least one packet to a network controller through a data plane when flow information to forward the at least one packet is not available and receiving a message including the flow information to forward the at least one packet from the network controller through a control plane. Therefore, the method and the apparatus may increase an efficiency of packet forwarding by simplifying procedure of configuring flow rules on newly input packets.

Abstract: A mobile communication terminal device equipped with a replaceable communication module and a back cover thereof are provided. The mobile communication terminal device includes: a host processor configured to control and operate the mobile communication terminal device; a baseband processing unit configured to process a mobile communication protocol; and a radio frequency (RF) signal processing unit configured to wirelessly communicate with a mobile communication network, wherein the host processor, the baseband processing unit and the RF signal processing unit are further configured to be implemented as modules that are attachable to or detachable from a printed circuit board (PCB) of the mobile communication terminal device.

Abstract: A packet scheduling apparatus and method to fairly share network bandwidth between multiple subscribers and to fairly share the bandwidth allocated to each subscriber between multiple flows are provided. The packet scheduling method includes calculating first bandwidth for each subscriber to fairly share total bandwidth set for the transmission of packets between multiple subscribers; calculating second bandwidth for each flow to fairly share the first bandwidth between one or more flows that belong to each of the multiple subscribers; and scheduling a packet of each of the one or more flows based on the second bandwidth.

Abstract: The present disclosure relates to a system and a method for managing filtering information of attack traffic, and more particularly, to a system and a method for managing filtering information of attack traffic that may block attack traffic in a front end from which the attack traffic is transmitted by transmitting traffic filtering information, to a first autonomous system of the front end from which the attack traffic is transmitted, through a border gateway protocol (BGP) and by applying, to a relevant router, the transmitted traffic filtering information in the corresponding first autonomous system, when an edge router of a second autonomous system (AS) positioned in a rear end sets the traffic filtering information by detecting the attack traffic.

Abstract: A device for providing forwarding and QoS information in a flow based network environment acquires first information and second information from a flow table therein on the basis of status information of a predetermined flow in order to provide dynamically updated information in a flow based network environment. When it is determined that first information and second information acquired based on a route ID of a series of information are updated, the flow table is updated and the updated information is provided.

Abstract: An apparatus and method for supporting a portable mobile VPN service are provided. The method accesses a public network to generate a security tunnel, maps the generated security tunnel and a VPN address, stands by for authentication of a mobile terminal which desires to access a VPN, authenticates a mobile terminal which desires to access the VPN, and assigns an internal address which is used in the VPN according to the authentication result.

Abstract: An emergency call service system in an Internet Protocol (IP) network and a method thereof are provided. The system includes a policy control server, an emergency call agent, a call agent, and a network manager. The policy control server generates position information of a user terminal by mapping an IP address and local information to an identification (ID) of the user terminal. The emergency call agent detects a suitable emergency center for the user terminal sending an emergency call, and makes an emergency-call connection between the user terminal and the emergency center. The call agent relays the emergency call of the user terminal to the emergency call agent. The network manager stores position information of the user terminal generated through the policy control server, provides the emergency call agent with the position information of the user terminal sending the emergency call, and performs a resource reservation for the emergency-call connection.

Abstract: Disclosed are a system for managing virtual private networks (VPNs) includes: terminals configured to transmit user data; a manager configured to transmit information for concealing networks and managing the VPNs; border gateways configured to decrypt the user data and perform a network address translation (NAT) procedure and a filtering procedure on the decrypted user data based on the information; and servers configured to receive the user data subjected to the NAT procedure and the filtering procedure, wherein the filtering procedure is a procedure discarding the user data to be transferred to the servers that are not allowed so as to allow the terminals to access only the allowed servers, the NAT procedure is a procedure changing an Internet protocol (IP) address used in a first network to an IP address used in a second network, and the first network and the second network are different networks.

Abstract: There is provided a converged access control method using a network access device at an edge node of an IP network of a convergence ALL-IP network that performs authentication control, QoS control, traffic control and mobility control in a consistent manner using a network access device located at penetration nodes of an IP network of a convergence ALL-IP network to effectively accommodate a subscriber network in various access environments, thereby ensuring network flexibility and scalability.

Abstract: A multicasting method and apparatus in a network including a transport multiprotocol label switch (T-MPLS) network and a wavelength division multiplexing (WDM) network are disclosed. At least one of first switches, connected to the T-MPLS network, second switches connected to the WDM network, and a switch hub establishes a multicasting path by using a label switch path (LSP) ID and a label switch router (LSR) ID, in which the first switch on the multicasting path multicasts a T-MPLS signal, the switch hub converts the T-MPLS signal into an optical multicasting signal and multicasts the converted optical multicasting signal, and the second switch receives the optical multicasting signal and multicasts it in units of the T-MPLS signal.

Abstract: There is provided a method and system for detecting and responding to harmful traffic. The system includes a router determining whether or not received data is harmful traffic, by using a dynamic flow identification (DFI) function and a deep packet inspection (DPI) function, sending Cflowd information of the received data, and then encapsulating the received data when the received data is determined to be harmful traffic, a policy & resource control entity receiving the Cflowd information from the router, determining whether or not the received data is harmful traffic by using the received Cflowd information, and then sending a result of the determination to the router, and a security management server receiving the encapsulated data from the router, reconfirming whether or not the encapsulated data is harmful traffic, and then processing the encapsulated data.

Abstract: A call control method for an Internet Protocol (IP)-based mobility service is provided. The call control method for ensuring service continuity in a mobile communication service environment, includes: receiving a call signal message including permanent IP addresses and transport IP addresses from a transmitter terminal and a receiver terminal, and acquiring the permanent IP addresses and the transport IP addresses of the transmitter terminal and the receiver terminal; and performing call control between the transmitter terminal and the receiver terminal on the basis of the transport IP addresses and the permanent IP addresses of the transmitter terminal and the receiver terminal.

Abstract: Provided are a method and apparatus for blocking forged multicast packets.