• Title/Summary/Keyword: gateway solution

Search Result 71, Processing Time 0.029 seconds

A security problem and its solution in Ipsec (IPsec의 보안상 문제점과 해결방안)

  • Kim, Jung-Hyun;Won, You-Jip;Im, Eul-Gyu
    • Proceedings of the IEEK Conference
    • /
    • 2006.06a
    • /
    • pp.37-38
    • /
    • 2006
  • In this paper, we describe a security problem of IPsec. And we propose a solution for this problem. The problem is a fragility of IPsec Gateway which is used in tunnel mode. The role of IPsec Gateway is encrypting or decrypting IPsec packets. Because of the role of IPsec Gateway, IPsec Gateway suffers overhead for decrypting numerous packets. Adversaries can easily attack IPsec Gateway using a DDoS attack. To solve this problem, we propose the "Priority based Random Packet Drop" method. In this method, the white list which is a list of normal users is created. After that, according to the frequency of uses, the method marks priorities of random drops to the white list. If anomalous traffic appeared, this method will drop many packets which consist of anomalous traffic. In simple experiment, we show our solution is proper to defend IPsec Gateway. For this experiment, we use empirical backbone traffic which includes DoS attacks.

  • PDF

The Study of Gateway Control Module Using SAE J1939 Protocol (SAE J1939 프로토콜기반 Gateway 제어모듈 개발에 관한 연구)

  • Ko, Youngjin;Kim, Doyeong
    • Transactions of the Korean Society of Automotive Engineers
    • /
    • v.21 no.1
    • /
    • pp.128-136
    • /
    • 2013
  • This study presents the development of Gateway Control Module using SAE J1939 protocol for the commercial vehicles. Presently, the load rate of CAN bus is increased by the single network composition and addition of new ECUs for development of intelligent vehicles. Because the embedded system of the integrated network control function has the errors of the CAN bus caused by the increase of ECU, it is needed for development of commercial vehicles. Also, this study presents the development of smart functions that can diagnosis CAN bus errors, fault diagnosis of ECU and basic function that arbitrates CAN bus between ECUs of commercial vehicle. GCM was designed for 4channel separation about Gateway function as solution of load rate decrease and smart functions. HILS(Hardware in the loop simulation)system that can achieve simulation about CAN Messages of all systems on vehicle was applied to evaluate performance and verification of all functions and performance. The load rate on CAN bus was decreased at using functions what was delivery, block and process of GCM. Through this, it was enabled to organize systematic architecture for gateway.

An automatic Notification Service Using the OSGi Service Platform and SMS module

  • Kang, Kyu-Chang;Kang, Dong-Oh;Lee, Jeon-Woo
    • 제어로봇시스템학회:학술대회논문집
    • /
    • 2002.10a
    • /
    • pp.55.1-55
    • /
    • 2002
  • In the era of home automation, we need more context-aware and intelligent service applications than before. For these applications, a service gateway as a platform is required to bridge the gap between external data networks to internal home networks. Also, the sonics gateway enables customers to receive new classes of home services. The OSGi service platform is a good solution for the service gateway since it can deliver new applications dynamically from a broader network. In the near future, every home will be equipped with a residential gateway powered by the OSGi, and will demand value-added service applications, such as home security monitoring and safety alerts. In this pa...

  • PDF

Design and Implementation of the WAP gateway based on CDMA Environment (CDMA 환경에 기반 한 WAP Gateway 설계 및 구현)

  • Ahn, Hye-Hwan;Youn, Hee-Yong;Choo, Hyun-Seung;Lee, Hyung-Soo;Ham, Kyoung-Sun
    • Proceedings of the Korea Information Processing Society Conference
    • /
    • 2002.04b
    • /
    • pp.1559-1562
    • /
    • 2002
  • This paper proposes what MASTER/SLAVE design and implementation of the WAP Gateway in currently implemented Internet and CDMA Infrastructure environment to provide mobile content service to mobile terminals such as PDA, handhold computer, and notebook. We can see the local WAP network by using the CDMA emulator of the Racal Instrument mobile solution provider.

  • PDF

Construction of Embedded Data Synchronization Gateway (임베디드 자료동기화 게이트웨이 구축)

  • Park, Ju-Geon;Park, Kee-Hyun;Woo, Jong-Jung
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.14 no.2
    • /
    • pp.335-342
    • /
    • 2010
  • Nowadays, the major manufacturer of the mobile devices has offered its own solution for the data synchronization. But each manufacturer uses its proprietary data synchronization method so that the compatibility of data can not be guaranteed. To solve such problems, a gateway is needed to convert different forms of data into a unified form of data and vice versa. Some problems have been found in the experiments with the previously implemented gateway. First, a bottleneck state might arise if a number of mobile devices request data synchronization simultaneously. Second, the gateway itself would become a serious vulnerable point to an attack during the process of converting received data. The proposed gateway can solve this bottleneck state and security issue since it converts data and processes synchronization request in a mobile device. In this paper, the proposed gateway is constructed and the results of some experiments with the gateway are presented. According to the results, the proposed gateway operates properly and it is relatively insensitive to the bottleneck state.

Gateway Strategies for VoIP Traffic over Wireless Multihop Networks

  • Kim, Kyung-Tae;Niculescu, Dragos;Hong, Sang-Jin
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.5 no.1
    • /
    • pp.24-51
    • /
    • 2011
  • When supporting both voice and TCP in a wireless multihop network, there are two conflicting goals: to protect the VoIP traffic, and to completely utilize the remaining capacity for TCP. We investigate the interaction between these two popular categories of traffic and find that conventional solution approaches, such as enhanced TCP variants, priority queues, bandwidth limitation, and traffic shaping do not always achieve the goals. TCP and VoIP traffic do not easily coexist because of TCP aggressiveness and data burstiness, and the (self-) interference nature of multihop traffic. We found that enhanced TCP variants fail to coexist with VoIP in the wireless multihop scenarios. Surprisingly, even priority schemes, including those built into the MAC such as RTS/CTS or 802.11e generally cannot protect voice, as they do not account for the interference outside communication range. We present VAGP (Voice Adaptive Gateway Pacer) - an adaptive bandwidth control algorithm at the access gateway that dynamically paces wired-to-wireless TCP data flows based on VoIP traffic status. VAGP continuously monitors the quality of VoIP flows at the gateway and controls the bandwidth used by TCP flows before entering the wireless multihop. To also maintain utilization and TCP performance, VAGP employs TCP specific mechanisms that suppress certain retransmissions across the wireless multihop. Compared to previous proposals for improving TCP over wireless multihop, we show that VAGP retains the end-to-end semantics of TCP, does not require modifications of endpoints, and works in a variety of conditions: different TCP variants, multiple flows, and internet delays, different patterns of interference, different multihop topologies, and different traffic patterns.

Survey of Technology and Protocol Supporting Stand by Mode Power Saving (대기모드 지원 통신 프로토콜 및 전력절감 기술 연구)

  • Kim, Ho-Joon;Kim, Dong-Wook;Whang, In-Gab
    • Proceedings of the Korean Institute of Information and Commucation Sciences Conference
    • /
    • 2007.10a
    • /
    • pp.911-916
    • /
    • 2007
  • The home gateway, an equipment which works as an gateway for ubiquitous home network, relays all functions of a home network. The home gateway must always be connected in order to provide seamless services. However it gives unfavorable power consumption. Therefore the needs for working in maximum power saving mode while there is no data traffic and for invoking to the normal function when it is necessary. In this paper we survey the technical papers and the standards documents and provide an overview of power saving mode in the home gateway.

  • PDF

Design of small-scale connected service solution for Internet of Things (사물인터넷용 소용량 연결 서비스 솔루션 설계)

  • Kim, Sam-Taek
    • Journal of the Korea Convergence Society
    • /
    • v.8 no.9
    • /
    • pp.25-30
    • /
    • 2017
  • The Connected House is a new type of IT convergence service that combines new communication services with existing IT systems such as M2M, NFC, smart home, and smart grid. It is a future connected life service that connects to any device anytime, anywhere. In this paper, we designed an intelligent gateway, a connected office solution for the Internet of things, which provides a connected life service for the future, and can control various sensors, ZigBee/Z-Wave/NFC and terminal devices. In addition, IP/SIP/IMS cameras and video door phones that are linked to the gateway have been developed to satisfy the quality standards of domestic communication service providers in terms of voice quality, jitter, and frame rate.

Security Gateway Extension Mechanism for Session Recovery in Virtual Private Network (가상 사설망에서의 세션 복구 서비스를 위한 Security Gateway 확장 메커니즘)

  • Kim, Jeong-Beom;Lee, Yun-Jung;Park, Nam-Sub;Kim, Tai-Yun
    • Journal of KIISE:Information Networking
    • /
    • v.29 no.1
    • /
    • pp.77-85
    • /
    • 2002
  • The surge in use of networks has recently increased demands for cryptography. Cryptography, however, can cause various problems because of difficulty of key management. A lot of researchers have been concentrating on the key recovery technique to eliminate the reverse effect of using these kinds of security and to promote positive aspects of using it. They have suggested many key recovery techniques up to the present. we propose a mechanism as a solution, which are employed to reduce the time needed to reconnect SG and the host in Host-to-Gateway in VPNs supporting IPsec, in case they are disconnected. This new mechanism using KRFSH stores information at each session in advance so that users can recall the session information when needed to rebuild the tunnel between SG and the host in a VPN. As a result, the mechanism built into SG will solve the problems above in host-to-gateway VPNs using IPsec.

Design of Remote Management System for Smart Factory

  • Hwang, Heejoung
    • International Journal of Internet, Broadcasting and Communication
    • /
    • v.12 no.4
    • /
    • pp.109-121
    • /
    • 2020
  • As a decrease in labor became a serious issue in the manufacturing industry, smart factory technology, which combines IT and the manufacturing business, began to attract attention as a solution. In this study, we have designed and implemented a real-time remote management system for smart factories, which is connected to an IoT sensor and gateway, for plastic manufacturing plants. By implementing the REST API in which an IoT sensor and smart gateway can communicate, the system enabled the data measured from the IoT sensor and equipment status data to the real-time monitoring system through the gateway. Also, a web-based management dashboard enabled remote monitoring and control of the equipment and raw material processing status. A comparative analysis experiment was conducted on the suggested system for the difference in processing speed based on equipment and measurement data number change. The experiment confirmed that saving equipment measurement data using cache mechanisim offered faster processing speed. Through the result our works can provide the basic framework to factory which need implement remote management system.