• The Journal of Engineering Research
• /
• v.5 no.1
• /
• pp.45-55
• /
• 2004

NAT (Network Address Translation) is an IP address modification protocol that translates private IP address into authentic Internet address. The main features of NAT are to improve network security and to save IP address. Generally speaking, in order to perform its functionality, NAT uses the address information in the packet header. Certain application protocols, however, use the information in the packet data as well as the information in the packet header to perform end-to-end communication. Therefore, to support these types of application protocols, NAT should be able to perform appropriate translation of protocol information in the packet data. In this thesis, we design and implement a method which translates virtual IP information in the packet date into real IP information by using port proxy server.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.26 no.6
• /
• pp.1571-1582
• /
• 2016

One of the issues, which is dealed with in undirectional data transmission technology, is reducing the packet loss in TCP based data transfer. We can decrease the packet loss by using several well known error correction approaches. Although we utilize those previous approaches, the packet loss by both link errror and buffer overflow could be occurred. In this paper, we propose the RED(REliable Data diode). RED also uses the TCP proxy approach for supporting the TCP based data transfer which is similar with the existing unidirectional data transmission technologies. The RED transmission system could alleviate the packet loss caused by buffer overflow by exploiting the delaying transmission of TCP packets. Furthermore, in order to reduce the packett loss caused by link error in the unidirectional transmission link, the RED transmission system transmits one or more duplicated packets to the RED reception system by considering both the remaining resources and packet importance.

• Electronics and Telecommunications Trends
• /
• v.30 no.3
• /
• pp.64-73
• /
• 2015

최근 위성통신은 물리계층의 고속 모뎀, 링크 계층에서의 고효율 패킷처리 기술 등의 발달로 양방향 광대역 멀티미디어 통신 서비스를 제공할 수 있는 기반을 마련하였다. 그러나 긴 전송 지연시간과 유선망에 비해 여전히 높은 패킷 손실률을 갖는 위성링크 고유의 특징은 현재 통신을 위해 가장 많이 사용하는 전송계층 프로토콜인 TCP(Transmission Control Protocol)를 여전히 위성망에서 제대로 동작시키기 어렵게 만들고 있다. 이에 본고에서는 위성망에서 TCP가 갖는 문제점을 해결하기 위해 도입된 PEP(Performance Enhancing Proxy) 기술에 대해서 관련 표준문서에서부터, 다양한 PEP 구성형태, 그리고 응용계층, 전송계층, 네트워크 계층에 따라 각각 적용된 PEP 주요 기술들을 살펴보고, 더불어 해외의 주요 PEP 제품들의 특징들을 분석함으로써 PEP 관련 전반적인 기술동향을 살펴보고자 한다.

• The KIPS Transactions:PartA
• /
• v.15A no.4
• /
• pp.199-210
• /
• 2008

A Clustering based wireless internet proxy server needs a layer-7 load balancer with URL hashing methods to reduce the total storage space for servers. Layer-4 load balancer located in front of server cluster is to distribute client requests to the servers with the same contents at transport layer, such as TCP or UDP, without looking at the content of the request. Layer-7 load balancer located in front of server cluster is to parse client requests in application layer and distribute them to servers based on different types of request contents. Layer 7 load balancer allows servers to have different contents in an exclusive way so that it can minimize the total storage space for servers and improve overall cluster performance. However, its scalability is limited due to the high overhead of parsing requests in application layer as different from layer-4 load balancer. In order to overcome its scalability limitation, in this paper, we propose a distributed layer-7 load balancer by replacing a single layer-7 load balancer in the conventional scheme by a single layer-4 load balancer located in front of server cluster and a set of layer-7 load balancers located at server cluster. In a clustering based wireless internet proxy server, we implemented the conventional scheme by using KTCPVS(Kernel TCP Virtual Server), a linux based layer-7 load balancer. Also, we implemented the proposed scheme by using IPVS(IP Virtual Server), a linux-based layer-4 load balancer, installing KTCPVS in each server, and making them work together. We performed experiments using 16 PCs. Experimental results show scalability and high performance of the proposed scheme, as the number of servers grows, compared to the conventional scheme.

• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.17 no.2
• /
• pp.719-723
• /
• 2016

Owing to the recent increased interest in wireless communication technology and rapid technology development, a range of applied technologies utilizing them are being released. In addition, at school, by adopting an attendance management system using wireless communication technology, attempts to solve problems caused by attendance books are being made. Representative attendance management systems include those using RFID, Bluetooth and clicker. Although these systems have solved the problem of wasting paper and time due to calling and writing attendance, they have other problems of generating additional expenses of purchasing or renting more equipment. To solve all of these problems, this paper suggests prototype system that can manage attendance by using NFC (Near Field Communication), which most smartphones provide. The attendance management system using NFC consists of two applications; one for professors and the other for students. The system solves problems, such as proxy attendance, loss of lesson time and additional cost by automatically managing attendance information using NFC and TCP/IP technologies.

• Proceedings of the Korean Information Science Society Conference
• /
• 2001.10c
• /
• pp.280-282
• /
• 2001

무선 어플리케이션 서비스 시스템 구축시 가장 중요한 역할을 담당하는 장비는 WAP(Wireless Application Protocol) 프록시 서버이다 WAP 프록시 서버는 WAP 프로토콜과 인터넷 TCP/IP 프로토콜을 중간에서 변환해 주는 역할을 한다. 따라서, 무선 단말기로부터 요청은 WAP 프록시 서버를 통해 유선망의 서버로 보내지게 되고, 서버로부터 보내진 무선 콘텐츠는 다시 WAP 프록시 서버를 통해 무선 단말기로 전해진다. 이때, 무선 컨텐츠가 WAP 프록시 서버에 캐싱된다면, 동일한 무선 콘텐츠 요청시, 유선망을 거치지 않고도 WAP 프록시 서버에서 무선 컨텐츠를 서비스 할 수 있을 것이다. 본 논문에서는 WAP 프록시 서버에 캐싱 기능을 추가하여, 그 성능을 분석하였다. 성능 측정을 위해 C와 서블릿으로 측정 모듈을 작성 했으며, 웹 브라우저를 통해 실시간으로 측정 결과를 확인 가능하도록 하였다.

• Proceedings of the Korean Information Science Society Conference
• /
• 2004.10c
• /
• pp.553-555
• /
• 2004

본 연구는 정지궤도 위성 환경에서 지상망과 위성망 간의 특성 차이로 인해 필수적으로 행해져야 하는 프로토콜의 변환에 대한 연구이다. 정지궤도 위성 환경은 높은 에러율과 큰 지연시간을 가진다. 또한 기존 지상망과 위성망 간의 높은 전송 지연 차이에 따른 버퍼 혼잡으로 인한 데이터의 손실을 피할 수 없다. 따라서 본 연구에서는 상이한 링크가 혼재된 데이터 네트워크에서 각 링크를 특성에 따라 분할하여 구간별로 독립적인 데이터 전송 및 재전송을 수행하도록 하며 전체적인 데이터 전송 처리량을 향상시키는 Spoofing 기술 및 기존 TCP 프로토콜을 대신하여 위성 프로토콜인 STP(Satellite Transport Protocol)을 적용한 PEP (Performance Enhancing Proxy) 분할 연결을 연구하였다.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.9 no.3
• /
• pp.493-497
• /
• 2005

This paper is about the research of the User Agent implementation under wireless embedded environment, using SIP which is one of protocol components construct the VoIP system. The User Agent is made of the User Agent configuration block, the device thread block to control devices and the SIP stack block to process SIP messages. The device thread consists of the RTP thread and the sound lard device processing block. Futhermore, the SIP stack consist of the worker thread to process proxy events, the SIP transceiver and SIP thread to transfer and receive SIP messages. The H/W platform is a board included the Intel's XScale PXA255 processor, flash memory, SDRAM, Audio CODEC module and wireless LAN threough PCMCIA socket, furthermore a microphone and headphone is used by the audio 1/0. The system has embedded linux kernel 2.4.19. For embedded environment, the function of User Agent and SIP method is diminished. Finally, the resource of system could be reduced about $12.9\%$, compared to overall system resource, by minimizing peripherals control and excepting TCP.

• The Journal of the Korea Contents Association
• /
• v.6 no.12
• /
• pp.169-176
• /
• 2006

Since home network system is usually set up based on the built-in system inside home at the time of construction, it has a difficulty in being compatible with new devices after construction. In this paper, we propose DBS(Dynamic Binding System) that can make links effectively among the devices located in inside and outside of home networks. Implementation of the DBS is based on the ZigBee's binding in WPAN(Wireless Personal Area Network). For this research, we constructed the system consisting of home server that contains proxy server and location server, devices inside home in which tinyOS is embedded, and mobile device that is an emulator. The communication inside home is done by IEEE 802.15.4 protocol and the communication between servers and mobile devices outside home is done by TCP/IP protocol. Regardless of device's address format, the DBS facilitates a link among the devices located inside and outside of home networks. And, introducing a new device into home network can be recognized easily by exchanging messages between devices.

• The Transactions of the Korea Information Processing Society
• /
• v.5 no.6
• /
• pp.1593-1602
• /
• 1998

In this paper, a hybrid firewall system using the screening router, dual-homed gateway, screened host galeway and the application level gateway is proposed, The screened host gateway is comjXlsed of screening router, DMZ and bastion host. All external input traffics are filtered by screening router with network protrcol filtering, and transmitted to the bastion host performing application level filtering, The dual homed gateway is an internlediate equipment prohibiting direct access from external users, The application level gateway is an equipment enabling transmission using only the proxy server. External users can access only through the public servers in the DMZ, but internal users can aeee through any servers, The rule base which allows Telnet only lo the adrnilllslratol is applied to manage hosts in the DMZ According to the equipmental results, denial of access was in orderof Web. Mail FTP, and Telnet. Access to another servers except for server in DMZ were denied, Prolocol c1mials of UDP was more than that of TCP, because the many hosts broadcasted to networds using BOOTP and NETBIOS, Also, the illegal Telnet and FTP that transfer to inside network were very few.