[특허]Wireless network security mechanism including reverse network address translation

[미국특허] Wireless network security mechanism including reverse network address translation 원문보기

IPC분류정보
국가/구분	United States(US) Patent 등록
국제특허분류(IPC7판)	G06F-015/16
출원번호	UP-0979409 (2004-11-02)
등록번호	US-7516174 (2009-07-01)
발명자 / 주소	Tashjian, Robert W. Vakil, Sumit Wang, Jing
출원인 / 주소	Cisco Systems, Inc.
대리인 / 주소	Baker Botts L.L.P.
인용정보	피인용 횟수 : 8 인용 특허 : 53

초록 ▼

Methods, apparatuses and systems directed to preventing unauthorized access to internal network addresses transmitted across wireless networks. According to the invention, mobile stations are assigned virtual client network addresses that are used as the outer network addresses in a Virtual Private Network (VPN) infrastructure, as well as unique internal network addresses used as the inner network addresses. In one implementation, the virtual client network addresses have little to no relation to the internal network addressing scheme implemented on the network domain. In one implementation, all clients or mobile stations are assigned the same virtual client network address. A translation layer, in one implementation, intermediates the VPN session between the mobile stations and a VPN server to translate the virtual client network addresses to the internal network addresses based on the medium access control (MAC) address corresponding to the mobile stations. In this manner, the encryption inherent in the VPN infrastructure prevents access to the internal network addresses assigned to the mobile stations.

대표청구항 ▼

What is claimed is: 1. In a wireless network system comprising an access point providing wireless service to a mobile station and a Virtual Private Network (VPN) server operative to establish a VPN session with the mobile station, a method comprising intercepting an address assignment message from a network address configuration server to the mobile station, wherein the mobile station has a unique link layer address, wherein the network address configuration server is operative to provide internal network addresses to requesting mobile stations, and wherein the address assignment message contains an internal network address for the mobile station; associating, in a data structure, the unique link layer address of the mobile station with the internal network address provided by the network address configuration server in the address assignment message; replacing the internal network address in the address assignment message with a virtual network address; and forwarding the modified address assignment message to the mobile station; intermediating a VPN session between the VPN server and the mobile station; wherein the VPN session involves the exchange of encapsulated packets comprising an encapsulating VPN header including an outer network address corresponding to the mobile station, and wherein as to packets sourced from the mobile station, replacing the virtual network address used by the mobile station as the outer network address in the encapsulating VPN headers with the internal network address corresponding to the mobile station. 2. The method of claim 1 further comprising associating the unique link layer address of the mobile station with the internal network address provided by the network address configuration server. 3. The method of claim 1 further comprising as to packets sourced from the VPN server to the mobile station, replacing the internal network address corresponding to the mobile station in the encapsulating VPN headers of the packets with the virtual network address corresponding to the mobile station. 4. The method of claim 1 wherein the virtual network address is a non-routable address. 5. The method of claim 1 wherein the virtual network address is an Internet Protocol (IP) address. 6. The method of claim 5 wherein the virtual client network address is a first host address corresponding to a subnet consisting of a network address, a broadcast address, the first host address, and a second host address. 7. The method of claim 6 wherein the VPN server is configured with the second host address. 8. The method of claim 1 wherein the virtual network address is uniform for all mobile stations. 9. The method of claim 1 wherein the network address configuration server is a Dynamic Host Configuration Protocol (DHCP) server.

이 특허에 인용된 특허 (53) 인용/피인용 타임라인 분석

Milani Carlo (Via Case Nouve ; 30 Vistarino (Pavia) ITX) Moretto Gianantonio (Via Rugabella ; 9 Novedrate (Como) ITX), Apparatus for automatically distributing calls between users and a fleet of mobile stations through a central station.
상세보기
Bare Ballard C., Broadcast isolation and level 3 network switch.
상세보기
Natarajan Kadathur S. ; Jan Yih G. ; Peterson Kenneth M., Centralized dynamic channel assignment controller and methods.
상세보기
Siccardo Paolo L. ; Rao Padmanabha R., Communication system and device using dynamic receiver addressing.
상세보기
Joseph Alexander Dara-Abrams ; Harold Aaron Ludtke ; Thomas Edward Birmingham ; Neil David Matthews GB; Yoshifumi Yanagawa JP; Wim Bronnenberg NL, Data driven interaction for networked control of a DDI target device over a home entertainment network.
상세보기
Sirin Tekinay, Detecting the geographical location of wireless units.
상세보기
Jang, Jae-Shin, Device and method for tracking location of mobile telephone in mobile telecommunication network.
상세보기
Gadir, Omar M. A.; Subbanna, Kartik; Vayyala, Ananda R.; Shanmugam, Hariprasad; Bodas, Amod P.; Tripathy, Tarun Kumar; Indurkar, Ravi S.; Rao, Kurma H., High-availability cluster virtual server system.
상세보기
Gunner Christopher W. (Harvard MA) Harper John A. (Golfe Juan FRX) Shand Ian M. C. (Surrey GBX), Hybrid units for a communication network.
상세보기
Rao Padmanabha R. ; Siccardo Paolo L., Location determination using RF fingerprinting.
상세보기
Hiroaki Koshima JP; Kimio Muya JP; Katsuhiko Kumamoto JP, Location system and method for identifying position of mobile terminal that can communicate based on repeater in radio zone, and mobile terminal that can communicate based on repeater in radio zone.
상세보기
Jaszewski Gary M. ; Fisher David A. ; Chambers Richard C., Method and apparatus for assigning spectrum of a local area network.
상세보기
Yildiz,Kazim Orhan, Method and apparatus for detailed protocol analysis of frames captured in an IEEE 802.11 (b) wireless LAN.
상세보기
Reichmeyer Francis X. ; Luciani James Vincent ; Squire Matthew B., Method and apparatus for remotely configuring a network device.
상세보기
Souissi Slim ; Sawaya Samir A., Method and apparatus for spread spectrum channel assignment.
상세보기
Ammitzboell, Benny L., Method and system for emulating a single router in a switch stack.
상세보기
Calhoun,Patrice R.; O'Hara, Jr.,Robert B.; Friday,Robert J., Method and system for hierarchical processing of protocol information in a wireless LAN.
상세보기
Bhagwat,Pravin; Chaskar,Hemant; King,David C.; Rawat,Jai, Method and system for monitoring a selected region of an airspace associated with local area networks of computing devices.
상세보기
Frank,Ed H.; Martin,Richard, Method and system for providing an intelligent switch in a hybrid wired/wireless local area network.
상세보기
Olsson Bo (Haninge SEX), Method for locating mobile stations in a digital telephone network.
상세보기
Saleh Bilal A. ; Flynn Paul V., Method for positioning gsm mobile station.
상세보기
Leung,Keng; Patel,Alpesh S., Methods and apparatus for virtual private network based mobility.
상세보기
Baum,Robert T.; Voit,Eric A., Methods, apparatus and data structures for preserving address and service level information in a virtual private network.
상세보기
Yokev Hanoch (Ramat Gan ILX) Harel Haim (Herzliya ILX), Pager with reverse paging facility.
상세보기
Rekhter,Yakov; Rosen,Eric C., Peer-model support for virtual private networks having potentially overlapping addresses.
상세보기
Oguchi Naoki,JPX ; Tsuruoka Tetsumei,JPX, Process and apparatus for speeding-up layer-2 and layer-3 routing, and for determining layer-2 reachability, through a plurality of subnetworks.
상세보기
Bims, Harry, Receiver diversity in a communication system.
상세보기
Larsson Erik,SEX ; Kangas Ari,SEX ; Fischer Sven,DEX, Selection of location measurement units for determining the position of a mobile communication station.
상세보기
Smith, Stephen F., Short range spread-spectrum radiolocation system and method.
상세보기
Keith D. McDonald, Signal structure and processing technique for providing highly precise position, velocity, time and attitude information with particular application to navigation satellite systems including GPS.
상세보기
Wax Mati ; Hilsenrath Oliver, Signature matching for location determination in wireless communication systems.
상세보기
Uomori Kenya,JPX ; Nakagawa Masamichi,JPX ; Morimura Atsushi,JPX, Stereoscopic CG image generating apparatus and stereoscopic TV apparatus.
상세보기
Lamberton, Marc; Levy-Abegnoli, Eric; Secondo, Pierre; Thubert, Pascal, System and method for dynamically assigning routers to hosts through a mediator.
상세보기
Iyer, Pradeep J.; Narasimhan, Partha, System and method for monitoring and enforcing policy within a wireless network.
상세보기
Boden,Edward B.; Melville,Mark J.; Monroe,Tod A.; Paxhia,Frank V., System and method for network address translation integration with IP security.
상세보기
Vaudreuil Gregory M. (Dallas TX), System and method for private addressing plans using community addressing.
상세보기
Collins, David Allan, System and method for providing a subscriber database using group services in a telecommunication system.
상세보기
Saha Bikash ; Kingdon Christopher ; Zadeh Bagher ; Hussain Tahir, System and method for time of arrival positioning measurements based upon network characteristics.
상세보기
Shoji Yoshiteru,JPX ; Koshima Hiroaki,JPX ; Ohta Yoshitaka,JPX, System for detecting positional information.
상세보기
Sakagawa,Kazuo, System for server obtaining terminal address via searching address table or via broadcasting to all terminals through exchange in response to terminal address interrogation request.
상세보기
Stapp,Mark; Kinnear, Jr.,Kenneth; Johnson,Richard A.; Kumarasamy,Jayadev, Techniques for dynamic host configuration using overlapping network.
상세보기
Proctor, Jr., James A., Time-slotted data packets with a preamble.
상세보기
Lee,Ju Sup; Choi,Jeong Hyun, VLAN data switching method using ARP packet.
상세보기
Bommareddy, Satish; Kale, Makarand; Chaganty, Srinivas, VPN device clustering using a network flow switch and a different mac address for each VPN device in the cluster.
상세보기
Khalil,Mohamed; Qaddoura,Emad A.; Akhtar,Haseeb, Virtual private network identification extension.
상세보기
Cheng, Pau-Chen; D'Sa, Ajit Clarence; Feng, Jian Hua; Genty, Denise Marie; Wilson, Jacqueline Hegedus, Virtual private network with multiple tunnels associated with one group name.
상세보기
Sugiura Masataka,JPX ; Ishibashi Hiroyoshi,JPX ; Kanaya Etsumi,JPX ; Kubo Toru,JPX ; Yamaguchi Kazuaki,JPX ; Oka Natsuki,JPX, Wireless communication system and method and system for detection of position of radio mobile station.
상세보기
Sugiura Masataka,JPX ; Ishibashi Hiroyoshi,JPX ; Kanaya Etsumi,JPX ; Kubo Toru,JPX ; Yamaguchi Kazuaki,JPX ; Oka Natsuki,JPX, Wireless communication system and method and system for detection of position of radio mobile station.
상세보기
Sugiura Masataka,JPX ; Ishibashi Hiroyoshi,JPX ; Kanaya Etsumi,JPX ; Kubo Toru,JPX ; Yamaguchi Kazuaki,JPX ; Oka Natsuki,JPX, Wireless communication system and method and system for detection of position of radio mobile station.
상세보기
Sugiura Masataka,JPX ; Ishibashi Hiroyoshi,JPX ; Kanaya Etsumi,JPX ; Kubo Toru,JPX ; Yamaguchi Kazuaki,JPX ; Oka Natsuki,JPX, Wireless communication system and method and system for detection of position of radio mobile station.
상세보기
Bims, Harry, Wireless communication system architecture having split MAC layer.
상세보기
Dupray Dennis J., Wireless location using multiple location estimators.
상세보기
Panasik, Carl M.; Siep, Thomas M., Wireless network circuits, systems, and methods for frequency hopping with reduced packet interference.
상세보기

이 특허를 인용한 특허 (8) 인용/피인용 타임라인 분석

Staats, Erik P., Bridged distributed device control over multiple transports method and apparatus.
상세보기
Tabares, Modesto, Connectivity between cloud-hosted systems and on-premises enterprise resources.
상세보기
Brown, Michael Stephen; Little, Herbert Anthony, Method and electronic device for content sharing.
상세보기
Brown, Michael Stephen; Little, Herbert Anthony, Method and electronic device for content sharing.
상세보기
Sergeev, Andrew; Zemlerub, Evgeny; Ben-Sa'adon, Eyal, Method and system for facilitating the establishment of a virtual private network in a cellular communication network.
상세보기
Nagata, Nami, Routing control method and system.
상세보기
Guo, Chuanxiong; Yuan, Jun; Zhang, Qian; Zhu, Wenwu, Virtual connectivity with local connection translation.
상세보기
Guo, Chuanxiong; Yuan, Jun; Zhang, Qian; Zhu, Wenwu, Virtual connectivity with subscribe-notify service.
상세보기

활용도 분석정보

상세보기

다운로드

내보내기

활용도 Top5 특허

해당 특허가 속한 카테고리에서 활용도가 높은 상위 5개 콘텐츠를 보여줍니다.
더보기 버튼을 클릭하시면 더 많은 관련자료를 살펴볼 수 있습니다.

IPC	Description
A	생활필수품
A62	인명구조; 소방(사다리 E06C)
A62B	인명구조용의 기구, 장치 또는 방법(특히 의료용에 사용되는 밸브 A61M 39/00; 특히 물에서 쓰이는 인명구조 장치 또는 방법 B63C 9/00; 잠수장비 B63C 11/00; 특히 항공기에 쓰는 것, 예. 낙하산, 투출좌석 B64D; 특히 광산에서 쓰이는 구조장치 E21F 11/00)
A62B-1/08	.. 윈치 또는 풀리에 제동기구가 있는 것

내보내기 구분	파일저장 인쇄 메일전송
구성항목	기본정보 상세정보 관리번호, 국가코드, 자료구분, 상태, 출원번호, 출원일자, 공개번호, 공개일자, 등록번호, 등록일자, 발명명칭(한글), 발명명칭(영문), 출원인(한글), 출원인(영문), 출원인코드, 대표IPC 관리번호, 국가코드, 자료구분, 상태, 출원번호, 출원일자, 공개번호, 공개일자, 공고번호, 공고일자, 등록번호, 등록일자, 발명명칭(한글), 발명명칭(영문), 출원인(한글), 출원인(영문), 출원인코드, 대표출원인, 출원인국적, 출원인주소, 발명자, 발명자E, 발명자코드, 발명자주소, 발명자 우편번호, 발명자국적, 대표IPC, IPC코드, 요약, 미국특허분류, 대리인주소, 대리인코드, 대리인(한글), 대리인(영문), 국제공개일자, 국제공개번호, 국제출원일자, 국제출원번호, 우선권, 우선권주장일, 우선권국가, 우선권출원번호, 원출원일자, 원출원번호, 지정국, Citing Patents, Cited Patents
저장형식	Text(ASCII format) Excel format PIAS분석(.xls)
메일정보	받는사람 (필수) @ 보내는사람 (선택) @ 제목 내용 KISTI 검색결과 이메일 서비스
안내	총 건의 자료가 검색되었습니다. 다운받으실 자료의 인덱스를 입력하세요. (1-10,000) 검색결과의 순서대로 최대 10,000건 까지 다운로드가 가능합니다. 데이타가 많을 경우 속도가 느려질 수 있습니다.(최대 2~3분 소요) 다운로드 파일은 UTF-8 형태로 저장됩니다. 파일의 내용이 제대로 보이지 않을실 때는 웹브라우저 상단의 보기 -> 인코딩 -> 자동선택 여부를 확인하십시오. ~ Text(ASCII format) Excel format

연합인증

[미국특허] Wireless network security mechanism including reverse network address translation 원문보기

초록 ▼

대표청구항 ▼

연구과제 타임라인

이 특허에 인용된 특허 (53) 인용/피인용 타임라인 분석

이 특허를 인용한 특허 (8) 인용/피인용 타임라인 분석

활용도 분석정보

활용도 Top5 특허

관련 콘텐츠

특허 원문 보기

IPC 상위 출원인

AI-Helper ※ AI-Helper는 오픈소스 모델을 사용합니다.

선택된 텍스트

연합인증

[미국특허] Wireless network security mechanism including reverse network address translation 원문보기

초록 ▼

대표청구항 ▼

연구과제 타임라인

전체(0) 논문(0) 특허(0) 보고서(0)

전체(0) 논문(0) 특허(0) 보고서(0)

이 특허에 인용된 특허 (53) 인용/피인용 타임라인 분석

이 특허를 인용한 특허 (8) 인용/피인용 타임라인 분석

활용도 분석정보

활용도 Top5 특허 더보기

관련 콘텐츠

특허 원문 보기

IPC 상위 출원인

AI-Helper ※ AI-Helper는 오픈소스 모델을 사용합니다.

선택된 텍스트

활용도 Top5 특허