Samsung Electronics Co., Ltd.

Yonsei University

Kang-Young Moon

Byung-Chang Kang

Byung-Gu Choe

Young-Keun Park

Sou-Hwan Jung

Taek-Jung Kwon

An Internet Protocol version 4/Internet Protocol version 6 (IPv4/IPv6) integrated network system includes at least one first node for creating identification information capable of identifying each secret key shared with at least one second node, and for exchanging the created identification information with each second node in a secure negotiating process. Each second node creates identification information capable of identifying each secret key shared with each first node, and performs the secure negotiating process based on the secret keys corresponding to the identification information exchanged through the secure negotiating process. Thereby, secure communication complying with Security Architecture for the Internet Protocol (IPSec) can be implemented based on the secret keys in the IPv4/IPv6 integrated network system of a Network Address Translation-Protocol Translation (NAT-PT) environment.

Secure communication system and method of IPv4/IPv6 integrated network system

An IP address look-up device is for looking up an IP address of an IP packet in order to forward the IP packet. The device includes a ternary CAM including pairs of data string and mask string, with the data string having a prefix of an IP address and the mask string representing a length of the prefix, and having routing entries stored in physical segments, respectively, without regard to order of prefix length, the ternary CAM functioning to compare a search key as a destination address of the IP packet to be forwarded, with the routing entries, set a match line of a matching routing entry, and output a mask string of the matching routing entry; and a priority encoder functioning to compare prefix lengths of mask strings outputted in correspondence to set match lines when at least one match line is set in the ternary CAM, determine, as an LPM entry, a routing entry corresponding to a longest mask string, and output a physical address of the LPM entry on the basis of a match line of the LPM entry.

Internet protocol address look-up device

An Internet Protocol address look-up method for looking up an Internet Protocol address of an Internet Protocol packet in order to forward the Internet Protocol packet uses a ternary content addressable memory (CAM) which has routing entries, each including a pair of data strings having a prefix of an Internet Protocol address and a mask string representing a length of the prefix, which compares a search key as a destination address of the Internet Protocol packet to be forwarded with the routing entries, which sets a match line of a matching routing entry, and which outputs a mask string of the matching routing entry. The method comprises the steps of: comparing prefix lengths of mask strings outputted in correspondence to set match lines when at least one match line is set in the ternary content addressable memory (CAM); and determining, as a longest prefix matching (LPM) entry, a routing entry corresponding to a mask string having the longest prefix length.

Growing community of inventors

Yongin-shi, South Korea

Kang-Young Moon