ncp engineering
ncp engineering has made its ipsec vpn client compatible with the windows 8 operating system .
reach ncp engineering on its blog, vpn haus, and on linkedin, twitter or youtube .
* only available in conjunction with ncp volume license server or ncp secure enterprise management server .
ncp engineering claims that its new android ipsec vpn client is a first for the android 4. 0 operating system .
ncp engineering universal android ipsec vpn client for the android 4. 0 platform can enable enterprises to securely connect with one another .
the ncp secure entry client and the ncp secure client – juniper edition can be downloaded from ncp’s website; a free, 30 - day trial of version 9. 31 is available .
mark snow (ncp) school of pv and renewable energy engineering university of new south wales nsw 2052, sydney australia m. snow @ urltoken
germany, austria, switzerland ncp engineering gmbh, dombuehler str. 2, 90449 nuremberg, germany + 49 911 99 68 - 0 sales @ urltoken
europe, asia and pacific ncp engineering gmbh, dombuehler str. 2, 90449 nuremberg, germany + 49 911 99 68 - 333 sales @ urltoken
everyone says secure the iot network, but the issue is how. julian weinberger, director of systems engineering at ncp engineering, which specializes in remote network access, advocates machine - to - machine connections via vpn – perhaps not surprising stance, considering his position .
31 also optimizes sim card use through automatic access point name management ncp engineering today announced the availability of a new version of the entry (http: / / www .
ncp engineering gmbh headquarters germany dombuehler str. 2 90449 nuremberg phone: + 49 (911) 99 68 - 0 fax: + 49 (911) 99 68 - 299
while not necessarily game - changing in the vpn space, the ncp engineering universal android ipsec vpn client is helping enterprises communicate in the way that ipsec has promised, said pironti .
ncp engineering, a remote - access technology provider that develops third - party ipsec vpn client alternatives, recently announced a preview version of its ncp secure android client, a third - party android ipsec vpn client for the android 4. 0 platform. ncp will offer the preview through june 30 with updated versions to follow, including an ipsec vpn client for apple ios, said rainer enders, chief technology officer at ncp .
the americas (north america, central america, south america) ncp engineering, inc. , 601 cleveland street, clearwater, fl 33755 + 1 650 316 - 6273 sales @ urltoken
ncp engineering, inc. headquarters north america 678 georgia ave. sunnyvale, ca 94085 phone: + 1 (650) 316 - 6273 fax: + 1 (650) 251 - 4155
jianqing he china national engineering research centre for human settlements 19, che gong zhuang st. 100044 beijing china hejq @ urltoken
be representative of a significant class or type of engineering project, where there is no extant exceptional site to consider for inclusion .
ncp offers a premium vpn solution for juniper networks srx firewalls. after many years of working together, the two companies have intensified their collaboration in a technology partnership with a complete vpn solution consisting of juniper srx gateways, the new ncp exclusive remote access clients and the ncp exclusive remote access management .
resources will be assessed primarily for their engineering significance, but also for their historical significance with respect to their impact on canadian history and canada' s development. a forty - year rule is also applied to preclude the selection of engineering landmarks of the present era .
rossana paparella department of civil, environmental and architectural engineering padua university via marzolo, 9 it - 35131 padova italy rossana. paparella @ urltoken
ncp is a manufacturer of software solutions for high - security company communication over public networks and the internet .
ncp engineering, a nurenburg - based supplier of remote access security systems, aims to double the number of seats using its virtual private network (vpn) client software with an oem deal with watchguard technologies, a global provider of network security systems .
ncp engineering, a nurenburg - based supplier of remote access security systems, aims to double the number of seats using its virtual private network (vpn) client software with an oem deal with watchguard technologies, a global provider of network security systems .
in an interview with julian weinberger, director of systems engineering for ncp engineering, a leading company in remote access vpn solutions, he explained that the workforce for all businesses, not just in the enterprise, is becoming more mobile. the most important thing that any company can do to prevent an attack on its network is to secure not only the devices, but also the network itself .
andrea giovanni mainini architecture, built environment and construction engineering department politecnico di milano via ponzio, 31 it - 20133 milano italy andreagiovanni. mainini @ urltoken
katharina simon (ncp) lehrstuhl städtebau bergische universität wuppertal haspeler str. 27 de - 42285 wuppertal germany ksimon @ urltoken
miljana horvat (ncp) department of architectural science ryerson university 350 victoria st. m5b 2k3 toronto canada mhorvat @ urltoken
we have a mixed os environment and several of our staff work from home on occasion, which adds another layer of complexity to our vpn. ncp engineering offered the most intelligent, compatible client on the market, and we haven' t had any problems since installation .
simon ford, ncp' s international sales director, said he believes the deal will more than double the number of seats using ncp products for remote access from around one million now to 2. 2 million by the end of 2008 .
ncp customers presently include the german national bank, lufthansa, hsh nordbank, amb generali, and the man automotive group .
discover the benefits of the next generation network access technology by ncp. learn more about the simplicity and efficiency of an integrated vpn solution .
the purpose of the nsf grfp (national science foundation graduate research fellowship program) is to help ensure the vitality and diversity of the scientific and engineering workforce of the united states .
ncp secure android client volume edition version 3. 00 rev 29870 for android 4. 4 and above free 10 day evaluation copy. download documentation
the ncp secure client – juniper edition is specifically tailored to enable juniper customers using the junos and screenos platforms to extend endpoint flexibility and security .
daiva jakutyte - walangitang (ncp) energy department ait, austrian institute of technology giefinggasse 2 at - 1210 vienna austria daiva. walangitang @ urltoken
version 9. 31 includes ncp’s path finder technology (which is used in conjunction with ncp’s hybrid ipsec / ssl vpn gateway) and friendly net detection, among other essential features for secure remote access. for government organizations and enterprises using fips inside, it also complies with the standard’s requirements .
the supplier of remote access clients says the new version, the ncp secure enterprise client 9. 31, can work for tablet and desktop computers .
françois garde (ncp) esiroi / piment university of la réunion 117 rue général ailleret 97430 le tampon, reunion island france francois. garde @ urltoken
maria wall (ncp) energy and building design lund university p. o. box 118 se - 221 00 lund sweden maria. wall @ urltoken
dynamics including vibration and stability, nonlinear dynamics, experimental methods. applications to nonlinear dynamics of elastic cables, nonlinear fluid - structure interaction, dna supercoiling, sports engineering, mems inertial sensor applications, vehicle systems, axially moving materials .
ncp secure 3g / 4g update version 2. 00 build 85 windows client version 9. 02 build 005 and higher support for current gprs / umts cards supported 3g / 4g hardware
check the what' s new page for the latest version of the client and any news relative to older versions. further information on ncp secure entry clients can be found here .
i think ncp' s client is yet another sign that android is maturing beyond its consumer - grade roots, rendering the platform more acceptable to enterprise it ,
she said .
daniele vettorato (ncp) energy strategies and planning, institute for renewable energy european academy eurac bozen / bolzano via a. volta 13 it - 39100 bolzano italy daniele. vettorato @ urltoken
since its inception in 1986, ncp engineering has delivered innovative software that allows enterprises to rethink their remote access, and overcome the complexities of creating, managing and maintaining secure network access for staff. ncp’s award - winning product line spans the spectrum of remote access, from ipsec / ssl vpns to endpoint firewalls and network access control (nac) functions. the company’s products support organizations with complex remote user needs, and that want to leverage the latest end - devices to increase staff productivity, reduce network administration and adapt policy changes on - the - fly. each solution is interoperable with existing third - party software or hardware .
annemie wyckmans (ncp) department of architectural design, history and technology, faculty of architecture and fine art norwegian university of science and technology (ntnu) no - 7491 trondheim norway annemie. wyckmans @ urltoken
1) it illustrates a nationally important historical theme in maritime navigation. 2) it is an important engineering achievement related to its primary functions. 3) it is a superior or representative example of an architectural type. 4) it is nationally symbolic of the canadian maritime tradition .
features of the ncp secure enterprise client 9. 31 include a function that issues warnings and prompts if users fail to log on to hotspots without wi - fi connections having established, and which creates suitable connection profiles .
ipsec standards, pkcs # 12 - based certificates, xauth and pre - shared keys. ncp says that it functions with any gateway: the company explicitly mentions cisco, juniper, lancom and sonicwall products. a free
and multivendor support from a client like ncp' s is important to enterprises that have heterogeneous vpns - - such as enterprises that grew through acquisitions or deploy different products in branch offices, noted lisa phifer, president of core competence, inc .
ncp secure communications offers more than elaborate products and solutions. on top of that we provide you with all services you need for impeccable operation of your vpn: update service, hotline support, training, workshops and technical support at your office .
in addition to windows mobile, it will announce support for symbian devices next week .
we are watching (google' s) android environment to decide how we will approach it ,
ford said, adding ncp is also watching the voip market carefully .
the ncp solution includes the central remote access management system (sem) and managed clients for various end devices such as laptops, tablet pcs and smartphones and various operating systems. these products can only be used together. with this powerful solution customers benefit from :
the ncp secure clients bundle support of mobile connect cards, one - time password token and certificate support through a public key infrastructure (pki), in addition to a dynamic personal firewall, an internet dialer / connector and seamless roaming across all network connections .
a comprehensive vpn solution with central management including vpn clients, vpn gateway, high availability services (failsafe server, load balancing server) and remote access vpn management services providing administration, communication and security (network access control). ncp delivers
next generation network access technology .
ncp secure entry macos client version 3. 00 rev 38902 macos 10. 13 high sierra, macos 10. 12 sierra, os x 10. 11 el capitan, os x 10. 10 yosemite important: when updating from os x 10. 10 to os x 10. 11
weinberger also said that ncp’s vpn solutions are not available straight to smbs. they have been adopted by value - added resellers, who in turn provide the service to smb clients. in this way, smbs don’t have to provide dedicated staff to secure their data—the reseller becomes a “trusted partner, an expert. ”
the ipsec vpn client software is equipped with an intuitive graphical user interface that is simple enough for any end user to understand and control. ncp’s solutions also allow for safe and secure connections to corporate networks with a single click—and without needing to worry about firewall settings, device compatibility, connection negotiation or policy requirements .
ncp secure entry windows client version 11. 10 rev 39753 windows 10, 8. x, 8 (also tabletpc; but not windows rt 8. x), 7, (all 32 / 64 bit) for this software release you will have to purchase a new license key for the version 11. x
ncp' s android ipsec vpn client will integrate with any ipsec gateway vendor, including cisco, juniper, fortinet and sonicwall, added enders .
[ enterprises ] that use ipsec can now look forward to increased security on a much broader platform base that they can support into the company network, which is significant .
secure data communication is now one of the most important foundations of the business world – for employees, m2m, iiot, corporate networks or secure links to partners and suppliers. each of these scenarios come with their own challenges. with leading technology, ncp’s vpn solutions and security applications are cost effective, secure, and easy to use from anywhere .
vpn path finder technology: highly secure mobile computing - even in ipsec - hostile remote access environments. the vpn path finder technology is a new remote access technology, developed by ncp. it removes a major restraint in communication within ipsec vpns since it allows for data connections from unknown networks, whose firewall settings deny ipsec communication and only allow internet access to web browsers .
in most it departments, remote access to central data bases and company resources is a hot topic. the market offers a huge variety of remote access solutions, with each solution reflecting the strategical orientation of its producer. ncp' s designs its products only according to the wishes of the customers, the usability of the solution, its compatibility and the profitability of all remote access components in a virtual private network (vpn). our passion is to develop universally applicable software components that allow for highly secure integration of tele - work places into a central data network. numerous successful projects, awards and case studies underpin our expertise in remote access. ncp' s
next generation network access technology
provides you with a one - stop solution :
this video describes the vicious circle
clientless
ssl vpn. people say that ipsec based virtual private networks are way too complex. ssl vpns are
clientless
and simple to use. the ncp secure enterprise client is far ahead of conventional ipsec or ssl vpn fat clients. it breaks the â€žvicious circle of ssl vpn
, and offers the following benefits: - full network access - easy installation - easy handling - comprehensive solution and - high cost savings
ncp volume license server software for central distribution and management of any number of volume licenses version 2. 00 rev 19725 download release notes microsoft windows (32 & 64 bit): windows 8 & 7 microsoft windows (32 & 64 bit) server: windows 2003 r2 32 - bit, windows 2008 sp2 32 / 64 - bit, windows 2008 r2 sp1 64 - bit web browser: windows internet explorer v. 8. 0 or newer mozilla firefox v. 7. 0 or newer
3. 1 extra - territorial commemorations 3. 2 commemoration of cemeteries 3. 3 churches and buildings still in religious use 3. 4 archaeological sites 3. 5 facades of historical structures integrated into modern developments 3. 6 identification of historic districts of national significance 3. 7 identification of schools of national significance 3. 8 monuments which themselves have commemorative purpose 3. 9 commemoration of movable heritage property 3. 10 identification of parks and gardens of national significance 3. 11 identification of rural historic districts of national significance 3. 12 country grain elevators 3. 13 assessing sites associated with persons of national historic significance 3. 14 built heritage of the modern era 3. 15 framework for identifying and assessing settlement patterns 3. 16 historic engineering landmarks 3. 17 assessing the national historic significance of lighthouses 3. 18 aboriginal cultural landscapes 3. 19 shipwrecks of national historic significance in canada
also, from a monetary standpoint, smbs may not need an entire intelligence solution, says weinberger. he recommends they consider security basics: a firewall, sufficient username and password security measures, virus scanning software and encryption. a vpn gateway with a client such as ncp’s vpn client encrypts traffic passing from user devices that are outside of the company—notebooks, smartphones or tablets—where a username and password is used to authenticate the person for access to the company network. once authenticated, all traffic passing back and forth through the vpn is encrypted. so even if someone was nearby trying to “sniff packets” of data passing through, the data would be safely encrypted. this works great for restaurants where management and company networks can be encrypted while the business provides open wi - fi for customers .
in this e - guide we sit down with cimi' s tom knolle to explore some of the emerging sdn service models and how adopting sdn can help to monetise the enterprise network and improve business outcomes .
i agree to techtarget’s terms of use, privacy policy, and the transfer of my information to the united states for processing to provide me with relevant information as described in our privacy policy .
i agree to my information being processed by techtarget and its partners to contact me via phone, email, or other means regarding information relevant to my professional interests. i may unsubscribe at any time .
by submitting my email address i confirm that i have read and accepted the terms of use and declaration of consent .
the company' s client software offers data encryption, personal firewall, ipsec tunnelling and strong authentication via otp tokens or certificate in a public key infrastructure. it is also one of a few vpn clients microsoft has certified for use with both 32 - bit and 64 - bit vista, ford said .
no problem! submit your e - mail address below. we' ll send you an email containing your password .
intuit' s latest ai project - - a digital financial assistant - - could help its customers save money, while breaking new technology ...
a data science development pipeline is critical for digital business. but the sequence of the pipeline must be monitored closely ...
the' garbage in, gospel out' approach to business analytics may be a valid approach for doing big data projects, but cios should ...
news roundup: academic researchers discover android apps secretly recording and sharing video of users' screens. plus, an nso ...
in this week' s risk & repeat podcast, searchsecurity editors discuss identiverse 2018 and how artificial intelligence is being ...
improving cyber resiliency helps organizations manage risk. discover the 14 techniques nist has identified to help achieve cyber ...
cisco, samsung and french carrier orange have completed a successful 5g trial. the companies' fixed wireless network delivered hd ...
the green padlock on websites doesn' t improve network security, so our expert addresses four ways to secure the modern network ...
hewlett packard enterprise has launched a 2u simplivity hci product for virtual desktops. the condensed compute and storage ...
hpe has complemented its recent high - end hyper - converged system with another hci system to fit the space - constrained environments ...
changing business needs and the move toward agile workflows affect how data center managers make decisions about daily operations ...
in a complex stock deal dell once again becomes a public company to flex its muscles against major legacy it rivals, but ...
selecting a service for big data in the cloud can be challenging. expert david loshin explains how usage patterns could lead ...
gdpr influence is touching a hadoop big data world that was immune to many privacy considerations until now. this podcast ...
what' s behind apache parquet' s growing popularity? it may be the file format' s columnar storage orientation, which leads to ...
legal status (the legal status is an assumption and is not a legal conclusion. google has not performed a legal analysis and makes no representation as to the accuracy of the status listed. )
current assignee (the listed assignees may be inaccurate. google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list. )
priority date (the priority date is an assumption and is not a legal conclusion. google has not performed a legal analysis and makes no representation as to the accuracy of the date listed. )
data switching networks characterised by path configuration, e. g. local area networks [ lan ], wide area networks [ wan ]
systems and methods are provided for communicating data. a user terminal is connected to a first data communication network, and a first network node is connected to the first and a second data communication network. a gateway is connected to the second and a third data communication network. the user terminal packetizes data according to protocols corresponding to a protocol stack. the user terminal further transmits packetized data to the gateway via the first network node and via the first and second data communication networks and determines whether the packetized data arrived at the gateway. the user terminal also modifies the packetized data by replacing at least a part of a first header corresponding to a specific protocol of the protocol stack with a replacement. when the gateway receives the packetized data it depacketizes the data and generates, based upon replacement information, a specific payload according to a predefined protocol .
the present application relates to data communication between a user terminal and a gateway, and more particularly relates to methods, systems and computer - readable media to allow for data communications between a user terminal and a gateway via a network node and at least two data communication networks .
the development of computer systems and networks allowed the physical separation of user applications and data storage. for instance, server technology provides for storing any kind of data, such as files, e - mails, databases etc. , on a powerful server computer. thus, smaller and cheaper computer systems, such as user terminals, desktop computers, mobile device etc. could be used to gain access to the server computer and its stored data. for example, companies and offices were able to build up data communication networks between user terminals and server computers or other network storage devices. such data communication networks are also referred to as local area networks (lan), since they are usually limited to a specific geographical area, e. g. a building, a floor, a plurality of rooms etc .
with the development of wide - area networks, such as the internet or public telephone networks, the local area networks could be interconnected and accessed from any geographically independent computing device. further, the computer networks of different organizations can be connected to exchange data, for example, for collaboration. the telephone networks were also capable of transmitting data, and hence allowed the access to a local network from any user terminal connected to a telephone line .
the downsizing of computing devices further expedited the use of external network connections to gain access to a local area network. for instance, the employee of a company is able to access the company' s network and computing devices from home or from a hotel using a mobile device .
the accessibility of local area networks from public networks, however, came with the risk that malicious users were also able to access computing devices and data of a local network, such as that of a company .
a solution to protect a network from outside attacks is a firewall installed on a particular network node. this particular network node is the only device connected to the public or external network and is also connected to the local network. thus, the local network could be separated from the public or external network. examples of such a network node are a proxy server, a gateway, a router or a bridge to name a few .
these devices may also have an integrated firewall to control network traffic between the local network and the wide - area or public network. a firewall blocks many connections from the outside and provides secure access to the local network for authorized computing devices only. one such secure access technique is known as virtual private networks (vpns), where two devices create a secure connection for data communication over a public network. such a virtual private network provides a data communication interface between a user terminal and a gateway that protects a private or local network. for instance, a vpn client can be implemented on any user terminal, for example on a laptop of an employee, which is configured to establish a secure connection to the gateway within the network of his firm. since the gateway and the vpn client can be preconfigured, they are able to authenticate themselves and to exchange security measures, such as cryptographic keys for encrypting and decrypting the data communication .
in addition, particular protocols have been established to allow the exchange of secure information, for example during the setup of a vpn. for instance, a vpn client needs to authenticate itself at the gateway, so that the gateway will allow the access of the local network protected by the gateway. one of these authentication protocols is the internet key exchange protocol (ike) which handles the negotiation of protocols and generates the encryption / authentication keys used by a security protocol. this security protocol may, for example, be internet protocol security (ipsec). other security protocols may be a combination of hypertext transfer protocol (http) and secure socket layer (ssl), also referred to as hypertext transfer protocol secure (https) .
with the growing mobility of user terminals the provision of broadband network connections, such as dsl, also increases. for example, public hotspots providing wireless network connections to their customers or cable - based public access points, such as an internet kiosk or a hotel, become more and more available. these publicly - available networks may also be protected, e. g. using a router or gateway similar to the one described above. again, for security reasons such a router or gateway will only allow particular connections to the wide - area network .
for instance, a hotel may offer to its customers an internet connection via broadband. thus, the router or gateway may allow outgoing connections on particular network ports which are necessary for internet access. using the internet for the end user means in most cases surfing the world wide web with a web browser, e. g. microsoft internet explorer, mozilla firefox, apple safari, etc. the standard communication to visit websites is http - based. further, standardized protocols, e. g. transmission control protocol (tcp), will have standardized ports for network traffic. in the example above, tcp uses ports 80 and 443 for http and https connections, respectively. thus, some providers, such as a hotel or an internet kiosk, may restrict connections to the outgoing ports 80 and 443 .
this restriction to two available ports only may, however, affect the establishment of other secure network connections. in particular, while the average users should not encounter any problems when surfing the web, business users who need secure connections to access their company networks cannot access their headquarters due to the limitation to ports 80 and 443 .
if a secure connection may use a different standardized protocol or another proprietary protocol which does not use one of the above ports, such secure connection may not be established due to the restrictions set by the provider .
it is therefore an object of the invention to provide a method and system for communicating data between two devices via a restrictive network node .
according to an embodiment of the invention, a user terminal for communicating data to and from a predetermined gateway via data communication networks and at least one network node is defined. the user terminal is connected to a first data communication network, and a first network node is connected to the first data communication network and a second data communication network. further, the predetermined gateway is a second network node connected to the second data communication network and a third data communication network. the user terminal comprises means for packetizing data, where the means for packetizing data are adapted to packetize input data according to protocols corresponding to a predetermined protocol stack by forming, for each of the protocols of the predetermined protocol stack, a respective data packet including a respective header and a respective payload segment, and where the means for packetizing data are adapted to output packetized data. the user terminal further includes means for transmitting the packetized data to the predetermined gateway via the first network node and via the first and second data communication networks, and means for determining whether the packetized data arrived at the predetermined gateway. the user terminal also includes means for modifying the packetized data based on an output of the means for determining, where the means for modifying are adapted to replace at least a part of a first header in the packetized data with a replacement. the first header corresponds to a specific protocol of the predetermined protocol stack .
in a further embodiment of the invention the means for modifying the packetized data are adapted to provide modified packetized data to the means for transmitting the packetized data, the modified packetized data being packetized data where at least a part of the first header is replaced with the replacement. the means for transmitting the packetized data are further adapted to transmit the modified packetized data to the predetermined gateway via the first network node and via the first and second data communication networks .
according to a further embodiment, the means for modifying the packetized data are adapted to replace the complete first header with a second header .
according to another embodiment, the first header corresponds to a header resulting from packetizing the input data according to the specific protocol of the predetermined protocol stack, and the second header corresponds to a header resulting from packetizing the input data according to a replacement protocol not comprised in the predetermined protocol stack .
in a further embodiment of the invention the means for modifying the packetized data are adapted to provide protocol information to the means for packetizing data, the protocol information identifying the replacement protocol. further, the means for packetizing data are adapted to form the second header according to the protocol information .
in yet another embodiment of the invention the means for modifying the packetized data are adapted to insert a third header into the packetized data .
further, according to an embodiment of the invention, the means for modifying the packetized data are adapted to replace a value of a field of one of the first to third header with a new value .
according to an embodiment, the field is a destination port number field, the value of the destination port number field is a value standardized for the specific protocol of the predetermined protocol stack according to which the input data was packetized, and the new value is a value of a destination port number field standardized for a protocol different from the specific protocol .
according to another embodiment of the invention, the user terminal further comprises means for storing a header configuration of the packetized data, the header configuration including information identifying the replacement. the means for packetizing data are adapted to packetize subsequent input data according to the protocols corresponding to the predetermined protocol stack and according to the header configuration, thereby forming subsequent packetized data having at least a part of a header replaced with a replacement. moreover, the means for transmitting the packetized data are adapted to transmit the subsequent packetized data to the predetermined gateway via the first network node and via the first and second data communication networks .
according to a further embodiment of the invention, the means for determining whether the packetized data arrived at the predetermined gateway are adapted to determine whether a reply message from the predetermined gateway was received at the user terminal .
according to another embodiment, the means for determining whether the packetized data arrived at the predetermined gateway are adapted to determine whether the reply message was received at the user terminal within a predetermined time period after the means for transmitting have transmitted the packetized data .
a further embodiment of the invention relates to a user terminal for transmitting data to a predetermined gateway via data communication networks and at least one network node. the user terminal is connected to a first data communication network, and a first network node is connected to the first data communication network and a second data communication network. further, the predetermined gateway is a second network node connected to the second data communication network and a third data communication network. the user terminal comprises a packetizing unit adapted to packetize input data according to protocols corresponding to a predetermined protocol stack by forming, for each of the protocols of the predetermined protocol stack, a respective data packet including a respective header and a respective payload segment, where the packetizing unit is adapted to output packetized data. the user terminal also includes a transmitting unit adapted to transmit the packetized data to the predetermined gateway via the first network node and via the first and second data communication networks, and a determination unit adapted to determine whether the packetized data arrived at the predetermined gateway. moreover, the user terminal includes a modification unit adapted to modify the packetized data based on an output of the determination unit, where the modification unit is adapted to replace at least a part of a first header in the packetized data with a replacement. the first header corresponds to a specific protocol of the predetermined protocol stack .
according to another embodiment, the modification unit is adapted to provide modified packetized data to the transmitting unit, the modified packetized data being packetized data, where at least a part of the first header is replaced with the replacement. the transmitting unit is adapted to transmit the modified packetized data to the predetermined gateway via the first network node and via the first and second data communication networks .
according to yet another embodiment, the modification unit is adapted to replace the complete first header with a second header .
in a further embodiment of the invention the first header corresponds to a header resulting from packetizing the input data according to the specific protocol of the predetermined protocol stack, and the second header corresponds to a header resulting from packetizing the input data according to a replacement protocol not comprised in the predetermined protocol stack .
according to an embodiment, the modification unit is adapted to provide protocol information to the packetizing unit, the protocol information identifying the replacement protocol, where the packetizing unit is also adapted to form the second header according to the protocol information .
according to yet another embodiment, the modification unit is adapted to insert a third header into the packetized data .
in another embodiment of the invention the modification unit is adapted to replace a value of a field of one of the first to third header with a new value .
according to a further embodiment, the field is a destination port number field, the value of the destination port number field equals a value standardized for a specific protocol of the predetermined protocol stack according to which the input data was packetized, where the new value equals a value of a destination port number field standardized for a protocol different from the specific protocol .
according to yet another embodiment, the user terminal further comprises a storage unit adapted to store a header configuration of the packetized data, the header configuration including information identifying the replacement. the packetizing unit is adapted to packetize subsequent input data according to the protocols corresponding to the predetermined protocol stack and according to the header configuration, thereby forming subsequent packetized data having at least a part of a first header replaced with a replacement. further, the transmitting unit is adapted to transmit the subsequent packetized data to the predetermined gateway via the first network node and via the first and second data communication networks .
according to a further embodiment, the determination unit is adapted to determine whether a reply message from the predetermined gateway was received at the user terminal .
according to another embodiment, the determination unit is adapted to determine whether the reply message was not received at the user terminal within a predetermined time period after the transmitting unit has transmitted the packetized data .
according to a further embodiment, the invention relates to a gateway for communicating data to and from at least one user terminal via data communication networks and at least one network node. the at least one user terminal is connected to a first data communication network, and a first network node is connected to the first data communication network and a second data communication network. further, the gateway, being a second network node, is connected to the second data communication network and a third data communication network. the gateway comprises means for receiving packetized data from a specific user terminal, the packetized data being packetized according to protocols corresponding to a predetermined protocol stack by forming, for each of the protocols of the predetermined protocol stack, a respective data packet including a respective header and a respective payload segment. further, the gateway includes means for detecting a modification to the packetized data, where the means for detecting a modification are adapted to detect whether at least a part of a first header in the packetized data was replaced with a replacement and are adapted to output replacement information indicating at least the first header. the gateway also includes means for depacketizing data, that are adapted to depacketize the packetized data by removing at least one of the respective headers from the packetized data and generating a payload segment according to at least one respective protocol of the predetermined protocol stack. the payload segment is a remaining part of the packetized data after removing the at least one respective header. the gateway also comprises means for transmitting a message to the specific user terminal, where the message indicates that the packetized data arrived at the gateway. the means for depacketizing data are further adapted to generate, based upon the replacement information, a specific payload segment according to a predefined protocol of the predetermined protocol stack. the specific payload segment is associated with the first header .
according to another embodiment, the first header of the received packetized data corresponds to a header resulting from packetizing data according to a replacement protocol, and the replacement protocol is not comprised in the predetermined protocol stack .
according to yet another embodiment, the means for depacketizing data are adapted to remove an additional header from the received packetized data, the additional header being inserted in addition to the modification to the packetized data .
in a further embodiment the means for receiving packetized data are adapted to receive data on at least two network ports, where a first port number corresponds to a value standardized for the predefined protocol and a second port number corresponds to a value standardized for the replacement protocol .
according to a further embodiment, the invention relates to a gateway for communicating data to and from at least one user terminal via data communication networks and at least one network node. the at least one user terminal is connected to a first data communication network, while a first network node is connected to the first data communication network and a second data communication network. the gateway, being a second network node, is connected to the second data communication network and a third data communication network. the gateway comprises a receiving unit adapted to receiving packetized data from a specific user terminal. the packetized data is packetized according to protocols corresponding to a predetermined protocol stack by forming, for each of the protocols of the predetermined protocol stack, a respective data packet including a respective header and a respective payload segment. the gateway also comprises a detecting unit adapted to detect whether at least a part of a first header in the packetized data was replaced with a replacement and adapted to output replacement information indicating at least the first header. the gateway further includes a depacketizer adapted to depacketize the packetized data by removing at least one of the respective headers from the packetized data and generating a payload segment according to at least one respective protocol of the predetermined protocol stack. the payload segment is a remaining part of the packetized data after removing the at least one respective header. the gateway also includes a transmitting unit adapted to transmit a message to the specific user terminal, where the message indicates that the packetized data arrived at the gateway. the depacketizer is adapted to generate, based upon the replacement information, a specific payload segment according to a predefined protocol of the predetermined protocol stack. the specific payload segment is associated with the first header .
according to an embodiment, the first header of the received packetized data corresponds to a header resulting from packetizing data according to a replacement protocol. the replacement protocol is not comprised in the predetermined protocol stack .
according to another embodiment, the depacketizer is adapted to remove an additional header from the received packetized data. the additional header is inserted in addition to the modification to the packetized data .
according to yet another embodiment, the depacketizer is adapted to receive data on at least two network ports, where a first port number corresponds to a value standardized for the predefined protocol and a second port number corresponds to a value standardized for the replacement protocol .
the invention also relates, according to an embodiment, to a system for communicating data via data communication networks and at least one network node. the system comprises a user terminal connected to a first data communication network, a first network node connected to the first data communication network and a second data communication network and a gateway that is a second network node connected to the second data communication network and a third data communication network. the user terminal comprises means for packetizing data adapted to packetize input data according to protocols corresponding to a predetermined protocol stack by forming, for each of the protocols of the predetermined protocol stack, a respective data packet including a respective header and a respective payload segment. the means for packetizing data are also adapted to output packetized data. the user terminal also comprises means for transmitting the packetized data to the gateway via the first network node and via the first and second data communication networks, and means for determining whether the packetized data arrived at the predetermined gateway. further, the user terminal includes means for modifying the packetized data based on an output of the means for determining. the means for modifying are adapted to replace at least a part of a first header in the packetized data with a replacement, where the first header corresponds to a specific protocol of the predetermined protocol stack. moreover, the gateway comprises means for receiving the packetized data from the user terminal via the first network node and via the first and second data communication networks and means for detecting a modification to the packetized data. the means for detecting a modification are adapted to detect whether at least a part of the first header in the packetized data was replaced with the replacement and are adapted to output replacement information indicating at least the first header. the gateway further includes means for depacketizing data that are adapted to depacketize the packetized data by removing at least one of the respective headers from the packetized data and generating a payload segment according to at least one respective protocol of the predetermined protocol stack. the payload segment is a remaining part of the packetized data after removing the at least one respective header. the gateway also includes means for transmitting a message to the user terminal indicating that the packetized data arrived at the gateway. moreover, the means for depacketizing data are adapted to generate, based upon the replacement information, a specific payload segment according to a predefined protocol of the predetermined protocol stack, where the specific payload segment is associated with the first header .
according to an embodiment of the invention, the means for modifying the packetized data are adapted to replace the complete first header with a second header, where the first header corresponds to a header resulting from packetizing the input data according to the predefined protocol of the predetermined protocol stack, and the second header corresponds to a header resulting from packetizing the input data according to a replacement protocol not comprised in the predetermined protocol stack .
according to another embodiment, the means for modifying the packetized data are adapted to provide protocol information to the means for packetizing data, where the protocol information identifies the replacement protocol. the means for packetizing data are also adapted to form the second header according to the protocol information .
according to yet another embodiment, the means for modifying the packetized data are adapted to insert a third header into the packetized data. the means for depacketizing data are further adapted to remove the third header from the received packetized data .
according to a further embodiment, the invention relates to a method for communicating data to and from a predetermined gateway via data communication networks and at least one network node. a user terminal is connected to a first data communication network, and a first network node is connected to the first data communication network and a second data communication network. the predetermined gateway is a second network node connected to the second data communication network and a third data communication network. the method comprises the steps of generating packetized data, where generating comprises packetizing input data according to protocols corresponding to a predetermined protocol stack by forming, for each of the protocols of the predetermined protocol stack, a respective data packet including a respective header and a respective payload segment. further, the method comprises transmitting the packetized data from the user terminal to the predetermined gateway via the first network node and via the first and second data communication networks, and determining whether the packetized data arrived at the predetermined gateway. another method step is modifying the packetized data based on a result of the determining. moreover, modifying comprises replacing at least a part of a first header in the packetized data with a replacement, where the first header corresponds to a specific protocol of the predetermined protocol stack.
ncp engineering is nuremberg-based company produces software for remote access , industrial internet of thing security and information security . ncp 's products use virtual private network ( vpn ) and other technologies like encryption , personal firewalls and electronic certificates in a public key infrastructure ( pki ) to secure data communication . ncp has made its ipsec vpn client compatible with the windows 8 , windows 10 , os x , linux and android operating systems . 
ncp engineering is nuremberg-based company produces software for remote access, industrial internet of thing security and information security. ncp's products use virtual private network (vpn) and other technologies like encryption, personal firewalls and electronic certificates in a public key infrastructure (pki) to secure data communication. ncp has made its ipsec vpn client compatible with the windows 8, windows 10, os x, linux and android operating systems.
ncp engineering is nuremberg-based company produces software for remote access, industrial internet of thing security and information security. ncp's products use virtual private network (vpn) and other technologies like encryption, personal firewalls and electronic certificates in a public key infrastructure (pki) to secure data communication. ncp has made its ipsec vpn client compatible with the windows 8, windows 10, os x, linux and android operating systems.