• Proceedings of the Korea Information Processing Society Conference
• /
• 2007.11a
• /
• pp.1266-1269
• /
• 2007

IPv6 환경에서는 NDP(Neighbor Discovery Protocol)를 이용한 주소 자동 설정 메커니즘을 지원한다. 그러나, NDP 는 메시지 내 중요 정보가 네트워크 상에 그대로 노출됨으로 인해 각종 공격에 취약하다. 이러한 취약성을 극복하기 위해, CGA(Cryptographically Generated Address)를 사용하여 주소의 소유권 증명이 가능한 SEND(SEcure Neighbor Discovery)가 도입되었다. 그러나 SEND 는 높은 비용 연산으로 인해 모바일 기기 등에 적용하는데 한계점을 가진다. SEND 의 한계점을 보완하고자 해쉬 함수를 이용해 주소 자동 설정에 사용되는 임시 주소를 감추는 기법이 제안되었다. 이 기법은 DAD(Duplicate Address Detection) 과정 중 SEND 수준의 보안을 제공하면서도 빠르게 동작할 수 있는 장점을 갖는다. 본 논문에서는 리눅스 환경에서 제안 기법을 구현해 보고, 주소 생성 시간 측정 및 DAD 과정에서 드러난 서비스 거부 공격에 대한 안전성을 검증한다.

• The KIPS Transactions:PartC
• /
• v.19C no.2
• /
• pp.99-118
• /
• 2012

In PMIPv6-based network, mobile nodes can be made smaller and lighter because the network nodes perform the mobility management-related functions on behalf of the mobile nodes. The one of the protocols, Fast Handovers for Proxy Mobile IPv6(FPMIPv6)[1] has studied by the Internet Engineering Task Force(IETF). Since FPMIPv6 adopts the entities and the concepts of Fast Handovers for Mobile IPv6(FMIPv6) in Proxy Mobile IPv6(PMIPv6), it reduces the packet loss. Conventional scheme has proposed that it cooperated with an Authentication, Authorization and Accounting(AAA) infrastructure for authentication of a mobile node in PMIPv6, Despite the best efficiency, without begin secured of signaling messages, PMIPv6 is vulnerable to various security threats such as the DoS or redirect attAcks and it can not support global mobility between PMIPv. In this paper, we analyze Kang-Park & ESS-FH scheme, and then propose an Enhanced Security scheme for FPMIPv6(ESS-FP). Based on the CGA method and the pubilc key Cryptography, ESS-FP provides the strong key exchange and the key independence in addition to improving the weaknesses for FPMIPv6. The proposed scheme is formally verified based on Ban-logic, and its handover latency is analyzed and compared with that of Kang-Park scheme[3] & ESS-FH and this paper propose inter-domain fast handover sheme for PMIPv6 using proxy-based FMIPv6(FPMIPv6).

• Proceedings of the IEEK Conference
• /
• 2003.07d
• /
• pp.1601-1604
• /
• 2003

본 논문에서는 PDA. Hand PC(HPC)등과 같은 모바일 단말에 운영체제로써 Embedded Linux를 채택하였을 경우 고려해야 할 Hardware 사양, I/O interrupt latency에 따른 성능. 스케줄링 정책에 따른 성능에 대하여 논한다. 대상 타겟으로 사용한 HPC 의 하드웨어 사양에 설명하고, Embedded Linux와의 연동에 있어서 문제점을 살펴본다. 또한 각종 I/O device들의 Interrupt latency에 따른 성능저하와 스케줄링 정책에 의한 성능저하에 대하여 분석하고. 해결 방안에 대하여 논한다. 마지막으로 실제 예로서 Mobile IPv6 S/W Stack을 이용한 실제 검증을 수행하고 성능 향상 방안을 제시한다.

• Proceedings of the IEEK Conference
• /
• 2006.06a
• /
• pp.5-6
• /
• 2006

iSCSI is a block-oriented storage access protocol that enables a user to recognize a remote storage as their own local block device through general TCP/IP networks. This paper presents an alternative approach to overcome the limited storage space of mobile devices based on the iSCSI initiator driver in IPv6 environment, which was originally designed for wired networks.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• v.9 no.2
• /
• pp.807-810
• /
• 2005

Constructed network test environment of wireless base for confidentiality guarantee of data and safe transmission that is transmited at Mobile node of Wireless Network environment in this paper. And, progressed research about IKEv2's Multiple-Key Exchange mechanism for efficient security transmission that use IPSec that is built-in to basis to IPv6 of Mobile environment. Have several key to single terminal to solve that is seam at hand off packet transmission process of Mobile Node in Wireless Network and Re-setting for Key and Re-exchange problem that happen frequently and studied technology that move. Key exchange protocol that is used for an experiment loads basically in MIPv6 and used IKEv2 protocol that is used for management and distribution of reliable encryption key between both end. Using network simulator of SSFNet(Scalable Simulation Framework Network Models) in this paper Key exchange delay value of IKEv2's security transmission analyzing comparison Performance measure and studied about problem and improvement way accordingly.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2007.05a
• /
• pp.1276-1278
• /
• 2007

무선 네트워크 기술의 발전과 이동성 지원에 대한 사용자의 요구가 증대됨에 따라 모바일 IPv6와 이를 확장한 NEMO (NEtwork Mobility) Basic Support 프로토콜이 등장하였다. 이동네트워크들이 중첩되어 구성될 경우 NBS (NEMO Basic Support) 프로토콜을 사용하는 네트워크에서는 패킷이 네트워크를 구성하는 이동라우터(MR, Mobile Router)의 홈에이전트(HA, Home Agent)를 모두 거치면서 중첩 터널링이 수행되는 핀볼라우팅 문제가 발생한다. 본 논문에서는 이러한 문제점을 해결하기 위해 중첩된 이동네트워크에서 새로운 라우팅 헤더를 사용한 경로최적화 기법을 제안한다. 제안하는 기법은 새로운 IPv6 라우팅 헤더 DH (Destination-information Header)를 정의하고 이를 라우팅 헤더 타입 2를 대신하여 사용함으로써 중첩된 이동네트워크에서의 경로최적화를 구현한다. 이 기법은 기존 기법에 비하여 최적화된 경로로 통신하여 최소 32% 뛰어난 성능향상을 확인할 수 있다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2008.05a
• /
• pp.999-1002
• /
• 2008

Many schemes to reduce the inter-MAP handoff delay in hierarchical mobile IPv6 have been proposed but the previous schemes waste relatively large network resources to decrease the path rerouting delay. In this paper, we propose the 2-layered MAP concept, where the seamless inter-MAP handoff can be supported regardless of path rerouting time. As a result, the waste of wired resources and the rate of the inter-MAP handoff can be reduced. From the performance analysis and simulation, the inter-MAP handoff rate for non-real-time traffic is only about 1/3 of the conventional result. Such advantageous features of the proposed scheme neither incur any increase of the total handoff rate nor require additional MAPs.

• Journal of Korea Multimedia Society
• /
• v.10 no.2
• /
• pp.226-235
• /
• 2007

Recently, the lETF NEMO working group on network mobility is standardizing a basic support for moving networks. We need a handover scheme for achieving the performance of transparency during the movement of mobile routers in nested mobile networks. But existing handover schemes for a mobile host are not suitable for network mobility because the packet transmission delay and traffic increase during mobile router's handover in nested mobile networks. Therefore, we propose a new seamless handover scheme using the bi-casting based on Mobile IPv6 for nested mobile networks in this paper. Compared with the handover schemes using bi-directional edge tunneling for host mobility support on simulation. And, the results show that the proposed handover scheme reduces the packet delay during a mobile router changes the point of attachment in nested mobile networks.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.35 no.7A
• /
• pp.688-696
• /
• 2010

The Proxy Mobile IPv6 (PMIPv6) is a network localized mobility management protocol that is independent of global mobility management protocols. In a single mobility domain (LMD), the mobile node (MN) is not involved in any IP mobility-related signaling and uses only its PMIPv6 home address for all its communication. Subsequently, when the MN moves into another LMD, the MN must change its PMIPv6 home address. In such a circumstance, host-based mobility signaling is activated. Thus, the nature of the network-based mobility of the PMIPv6 cannot be retained. Additionally, if the MN does not support global mobility, it cannot maintain communication with its correspondent node (CN). In this paper, we propose a solution for global mobility support in PMIPv6 networks, called Global-PMIPv6 that allows current communication sessions of a MN without mobility protocol stacks to be maintained, even when the MN moves into another LMD. Thus, Global-PMIPv6 retains the advantages of the PMIPv6 for global mobility support. We then evaluate and compare network performance between our proposed solution and PMIPv6.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2007.05a
• /
• pp.1313-1316
• /
• 2007

모바일을 지원하는 IPv4와 IPv6를 이동성에 관해 비교분석하고 NEMO 에 관련한 이동성에 대한 문제점과 해당 이슈를 찾아 알아보고 문제점을 도출하여 향후 이에 관련한 연구에 관한 방향을 제시 하고자 한다.