• Journal of Internet Computing and Services
• /
• v.6 no.5
• /
• pp.11-25
• /
• 2005

In MIPv6 environment, an important design consideration for public key based binding update protocols is to minimize asymmetric cryptographic operations in mobile nodes with constraint computational power, such as PDAs and cellular phones, For that, public key based protocols such as CAM-DH. SUCV and Deng-Zhou-Bao's approach provides an optimization to offload asymmetric cryptographic operations of a mobile node to its home agent. However, such protocols have some problems in providing the optimization. Especially, CAM-DH with this optimization does not unload all asymmetric cryptographic operations from the mobile node, while resulting in the home agent's vulnerability to denial of service attacks. In this paper, we improve the drawbacks of CAM-DH. Furthermore, we adopt Aura's two hash-based CGA scheme to increase the cost of brute-force attacks searching for hash collisions in the CGA method. The comparison of our protocol with other public key based protocols shows that our protocol can minimize the MN's computation overhead, in addition to providing better manageability and stronger security than other protocols.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.12 no.8
• /
• pp.1391-1400
• /
• 2008

In recent yeats, SCTP is known as the next transport layer protocol for connection-oriented and reliable data transfer after TCP/UDP. The SCTP was developed on the basis of the existing TCP and was designed to eliminate defects of TCP. SCTP has the different characteristic of multi-streaming and multi-homing from TCP. In this paper, we studied the defects of the performance of communication using the traits of multi-homing. And we evaluated the efficiency for each application services on the basis of SCTP of IPv6. Also, we analysed the delay time of a packet using SCTP and TCP. We noticed that the efficiency of SCTP is better than that of TCP.

• Journal of the Institute of Electronics Engineers of Korea CI
• /
• v.42 no.5
• /
• pp.21-30
• /
• 2005

Recently, a mobile IPv6 binding update protocol using Address Based Keys (BU-ABK) was proposed. This protocol applies Address Based Keys (ABK), generated through identity-based cryptosystem, to enable strong authentication and secure key exchange without any global security infrastructure. However, because it cannot detect that public cryptographic parameters for ABKs are altered or forged, it is vulnerable to man-in-the-middle attacks and denial of service attacks. Furthermore, it has heavy burden of managing the public cryptographic parameters. In this paper, we show the weaknesses of BU-ABK and then propose an enhanced BU-ABK (EBU-ABK). Furthermore, we provide an optimization for mobile devices with constraint computational power. The comparison of EBU-ABK with BU-ABK shows that the enhanced protocol achieves strong security while not resulting in heavy computation overhead on a mobile node.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.31 no.11B
• /
• pp.960-968
• /
• 2006

HMIPv6 improved the handover management of basic MIPv6 by introducing the new protocol agent MAP. In this new protocol, MAP instead of the Mobile Node intercepts all packets and redirects the packets to CoA of the Mobile Node. However, this process may degrade the network performance due to the centralization phenomenon of registration occurring in the hierarchical MAP structure. ffe propose two schemes to improve real time traffic performance. First proposal is a MAP selection mettled in which MAP is selected based on traffic characteristics. And we also propose differentiated traffic processing scheme with multi-level queues when Home Agent or Correspondent Nodes process Binding Update messages. Performances of the proposed scheme are analyzed. Analysis result shows that our model has good performance in the respect of location update cost and total cost of Mobile Nodes.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.35 no.7A
• /
• pp.688-696
• /
• 2010

The Proxy Mobile IPv6 (PMIPv6) is a network localized mobility management protocol that is independent of global mobility management protocols. In a single mobility domain (LMD), the mobile node (MN) is not involved in any IP mobility-related signaling and uses only its PMIPv6 home address for all its communication. Subsequently, when the MN moves into another LMD, the MN must change its PMIPv6 home address. In such a circumstance, host-based mobility signaling is activated. Thus, the nature of the network-based mobility of the PMIPv6 cannot be retained. Additionally, if the MN does not support global mobility, it cannot maintain communication with its correspondent node (CN). In this paper, we propose a solution for global mobility support in PMIPv6 networks, called Global-PMIPv6 that allows current communication sessions of a MN without mobility protocol stacks to be maintained, even when the MN moves into another LMD. Thus, Global-PMIPv6 retains the advantages of the PMIPv6 for global mobility support. We then evaluate and compare network performance between our proposed solution and PMIPv6.

• Journal of the Korea Society of Computer and Information
• /
• v.9 no.3
• /
• pp.171-175
• /
• 2004

This paper proposes a seamless handoff scheme that enables a mobile node to continue a session when moving to an overlapping area. During handoff due to the weakness of signaling, mobile node makes new Care-of Addresses using signals received from access router when MN reaches the edge of its area in addition to its current CoA, and it sends temporary binding update messages to Mobility Anchor Point which manage the area covering MN. MAP receives that binding update messages from MN, and temporarily stores new binding informations from them to its binding cache besides existing binding information for MN. This scheme ensures a seamlessly handoff using multicasting until MN enter a new access router area and sends a confirmed binding update message to MAP.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2004.05a
• /
• pp.1279-1282
• /
• 2004

계층적인 Mobile IPv6 구조에서 실시간 서비스의 확대와 노드의 이동성 증가에 따라 Mobility Anchor Point(MAP)의 부하가 늘어나는 문제가 발생할 수 있다. 본 논문에서는 IETF(internet Engineering Task Force)의 중요한 마이크로 이동성 프로토콜인 HMIPv6의 기본동작을 설명하고 MAP에서 발생할 수 있는 부하를 하위에 있는 라우터에게 분산시키기 위하여 Passive Approach와 Active Approach 두 가지 방법을 제안하였다. Passive Approach는 MAP가 분산 시점을 결정하여 하위의 라우터에게 부하를 분산해주는 방법이고 Active Approach는 임의의 MAP하위에 있는 라우터가 스스로 분산 시점을 결정하여 MAP로 동작하여 MAP에서 발생할 수 있는 부하를 줄이는 방법이다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2011.04a
• /
• pp.631-634
• /
• 2011

IETF(Internet Engineering Task Force)는 신속하고 안전한 이동성 서비스를 위하여 네트워크 자원의 사용을 안전하게 하고 법적으로 보장하는 핵심기술 같은 많은 의미있는 작업들을 해오고 있으며 기존의 MIPv6(Mobile IPv6)에서 핸드오버 지연과 시그널링 오버헤드 같은 문제를 보완하기 위하여 HMIPv6(Hierarchical Mobile IPv6)를 제안하였다. 현재 HMIPv6에 관한 연구의 대부분은 HMIPv6와 AAA(Authentication, Authorization, Accounting) 프로토콜 사이의 상호작용 절차를 최적화하기 위한 방법에 초점을 맞추고 있다. 해당 논문에서는 AAA 절차에서 인증대기를 최소화하는데 중점을 둔 비용효율적인 계층 인증 기법을 제안한다. 이 기법에서는 MAP(Mobility Anchor Point)에 배포되어진 AAA 서버들, 그리고 홈 도메인 안에 있는 AAA 서버를 대신하는 브로커들의 계층적 AAA 아키텍처를 제안한다. 이 시뮬레이션 결과는 제안된 기법이 이전의 전통적인 인증 조합 모델링과 비교하여 핸드오프 지연과 인증대기 시간이 상당히 줄어들었음을 보여준다.

• Journal of the Institute of Electronics Engineers of Korea TC
• /
• v.44 no.4
• /
• pp.49-58
• /
• 2007

Hierarchical Mobile IPv6 (HMIPv6) has been proposed by Internet Engineering Task Force (IETF) to compensate for such problems as handover latency and signaling overhead in employing Mobile IPv6 (MIPv6). HMIPv6 supports micro-mobility within a domain and introduces a new entity, namely mobility anchor point (MAP) as a local home agent. However, HMIPv6 causes load concentration at a particular MAP and longer handover latency when inter-domain handover occurs. In order to solve such problems, this paper establishes a virtual domain (VD) of a higher layer MAP and proposes a MAP changing algorithm in which the routing path changes between mobile node (MN) and correspondent node(CN) according to the mobile position and the direction of the MN before inter-domain handover occurs. The proposed algorithm not only enables complete handover binding-update of the on-link care of address (LCoA) only when inter-domain handover occurs, but concentrated load of a particular MAP is distributed as well. This is because the MNs registered with higher layer MAP and lower layer MAP coexist in the VD. We simulate the performance of the proposed algorithm and compare with HMIPv6.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2003.05b
• /
• pp.1389-1392
• /
• 2003

최근 초고속인터넷의 급속한 확장과 무선 핫스팟(Hotspot)의 등장은 인터넷을 컴퓨터 통신의 중심에 두게 되었다. 이는 다양한 컴퓨터 통신의 매체들이 인터넷으로 통합되는 것을 의미하며 이러한 통합은 통신망의 물리적, 논리적인 구조에 많은 영향을 미치게 되었다. 본 논문은 Mobile IPv6와 VPN이 상호 연동하는 시나리오에서 발생되는 문제들을 추적한다. 끊김 없는 이동성을 제공하기 위해 제시된 솔루션을 분석하여, VPN 게이트웨이와 연동하는 GHA(Gateway Home Agent)의 하드웨어적인 구현을 제안하며 IPSec Based VPN이 아닌 환경과 새로이 제안된 내용들을 추가하여 성능분석이 가능한 테스트 베드의 구축을 제안한다.