203 results about "STUN" patented technology

Embodiments of the invention achieve a very high success rate in multilayer peer-to-peer connection across firewalls and network address translators (NATs) using a single port on the local host. In one embodiment, a system of providing peer-to-peer connection comprises a plurality of host devices disposed behind corresponding NATs; and a plurality of STUN servers. Each host device includes a first socket bound to a first private port and a second socket bound to a second private port. Each host device sends a first STUN packet through the first socket to a first STUN server and a second group of STUN packets through the second socket to the STUN servers via public ports of the corresponding NAT. The STUN servers identify the public port numbers of the public ports. Each host device is configured to calculate a predicted public port number of the corresponding NAT for the second socket, based on the public port numbers of the public ports for the first socket and the second socket, the predicted public port number to be used for peer-to-peer connection between the second socket of the host device and other host devices.

An approach provides interdomain traversal to support packetized voice transmissions. A signaling message is received for establishing a voice call from a first endpoint associated with a first domain to a second endpoint associated with a second domain. The first endpoint queries a STUN (Simple Traversal of UDP (User Datagram Protocol)) server to determine information relating to a firewall and network address translator that the first endpoint is behind, and to log into a TURN (Traversal Using Relay NAT (Network Address Translation)) server configured to establish a media path between the first endpoint and the second endpoint. A first proxy server serving the first endpoint communicates with an ENUM (Electronic Number) server to convert a directory number corresponding to the second endpoint to a network address. The first proxy server communicates with a second proxy server serving the second endpoint to establish the voice call. The STUN server, the TURN server and the ENUM server are maintained by service provider. The first endpoint is authenticated to permit exchange of a media stream over the media path. The media stream is relayed, if the first endpoint is successfully authenticated.

In order to realize NAT traversal communication at low cost and without fail, local communication terminals connected as subordinates of a first router having a UPnP™ function obtain an IP address and a port number, both to be converted by a NAT function of the first router, on the basis of a UPnP™ protocol to register them in a relay server as exchange information for the NAT traversal. Local communication terminals connected as subordinates of a second router without the UPnP™ function specify an IP address to be converted by the NAT function of the second router on the basis of a packet obtained from a STUN server and estimate a port number to be converted by the NAT function of the second router to register them in the relay server as the exchange information for the NAT traversal. The present invention may be applied to a personal computer.

An address management scheme allows a Network Management System (NMS) to manage devices in a private network operating behind a Network Address Translator (NAT) boundary. A device operating in the private network sends a communication to a Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATs) (STUN) server. The STUN server responds by communicating a public NAT IP address and a NAT port number back to the device. The device then provides the NMS with the public NAT IP address, a NAT port number associated with the device, a unique device identifier, and the private device IP address. The NMS stores this information in a table and then accesses this address information to manage the device in the private network. The device then uses the STUN server to identify any changes to the device address information and then sends the changes to the NMS.

A cloud access manager obtains input regarding access control for at least one application deployed on a plurality of virtual machine instances in a cloud computing environment; the virtual machine instances are divided into at least first and second access zones. A cloud access manager registrar located in the cloud computing environment registers internet protocol addresses of external clients as seen from the cloud computing environment; at least some of the addresses are assigned to the clients via network address translation (NAT). Session traversal utility for NAT (STUN) is carried out to determine public internet protocol addresses assigned to the clients via NAT. The cloud access manager controls (i) access of the external clients to the plurality of virtual machine instances; and (ii) access of the plurality of virtual machine instances to each other, based on the registered internet protocol addresses, in accordance with the access zones.

A projectile launched from a conventional weapon; upon impact with a human target the projectile attaches to the target and stuns and disables the target by applying a pulsed electrical charge. The electric round is defined as non lethal ammunition directed to incapacitate a human, to prevent him from moving for a short time, to prevent him from committing a crime and to allow authorized personnel to arrest the target. A novel thin film technology transformer and thin film technology battery produce an electrical shock capable of stunning a human being in a device the size of a conventional bullet. The transformer and battery are smaller and lighter than conventional transformers and batteries with similar power output.

The invention discloses network type detecting method and system. It includes the following steps: loading public network; selecting public network nodes which has two IP addresses; sending request packet to the first or second nodes by STUN protocol; replying the response packet; confirming the network type. The invention can make the user detect the network type without STUN server which can greatly reduce hardware cost, avoid single point of failure.

A network service is made available on a device capable of operating on a first network that is coupled to a second network via a Network Address Translator (NAT). One or more User Datagram Protocol (UDP) messages with an entity of the second network. Based on the exchange of UDP messages, an IP address and port used by the NAT on the second network is determined for purposes of accessing the device on the first network via the second network. The IP address and port are registered with a discovery service of the second network. Network services are requested from the device via the second network using the IP address and port obtained via the discovery service. In one arrangement, the exchange of UDP messages involves the use of Simple Traversal of UDP Through NATs (STUN) messages.

Disclosed are an interworking system between IP networks using different IP address format, an application layer gateway (ALG) server, a network address translator, an interworking method, and a SIP message routing method. The interworking system between a local network using a private IP and a public network using a public IP includes a STUN server and an application layer gateway (ALG) server. The STUN server provides binding information of header information of a public IP binding request. The application layer gateway (ALG) server performs a public IP binding request with header information changed by IP masquerading, and performs routing by applying the received binding information to media receiving address information of a SIP message.

By providing a virtual network interface (1140) to a platform or an operating system wide implementation of the STUN protocol and its TURN extension, the invention allows applications (1110, 1120, 1130) located in a private network behind a NAT to communicate with their respective peers (1321, 1322, 1323) using sockets as usual while still getting the full benefit of the STUN protocol and its TURN extension for NAT traversal purposes.

The invention relates to a network communication area and discloses a method for penetrating the NAT. The method mainly includes: step S1: the communication terminal after the NAT device interacts with the NAT device to get the public network address and/or port behind the NAT from the NAT; step S2: the communication terminal fills the private network address and/or port information of the packet net payload as the public network address and/or port, and send the packets to the NAT device. The invention discloses the corresponding communication terminal and NAT device to support the implementation of the above method. Compared with the existing technology, the invention does not require NAT device to support the ALG (application layer gateway) and need not realize the STUN (UDP simple penetration mode of NAT) protocol, so it eliminates the limit of the static manual configuration.

The present invention overcomes the limitations of the prior art by providing a stun grenade device with an elongated cylindrical body having a cylindrical sidewall and opposed top and bottom end faces. The body includes a delay chamber containing a delay material, and has a number of flash charge chambers each containing a quantity of flash charge material. The body defines a number of ignition passages, each communicating from a respective flash charge chamber to the delay chamber. Each flash charge chamber has at least one exhaust aperture penetrating the top or bottom end face. Each flash charge chamber may be formed in an elongated tubular sleeve inset in a frame of a different material.

A system of a surveillance camera for identifying and incapacitating dangerous intruders is a standard video camera with an additional infrared camera and an electrical stun gun. A data processing module in the camera utilizes body detection and tracking software to scan images received from the camera for human bodies, and a threat detection sensor communicates with the data processing module in order to identify a specific human body in the images as a threat. Once a threat is identified, the camera continually repositions itself so that at any given moment, a remote control can trigger the deployment of the electrical stun gun to incapacitate the threat. The data processing module also scans the facial and retina characteristics of the threat and stores the information in an information storage module at the back of the camera.