The world is developing an app that alerts my smartphone when a COVID-19 (COrona VIrus Disease 19) confirmed case comes near me. However, regardless of what will be put to practical use first, the COVID-19 tracking system should satisfy the issues of legalization of location tracking and scalability as a public platform used by the world. Additional problems need solutions related to real-time authentication for information gathering, blind naming and privacy of tracked persons, and quality of service on the Query/Reply procedure. This paper proposes the Software-Defined Networking Controller-centric global public platform to monitor and track information for the COVID-19 relevant people and provide real-time information disclosure services to world-wide Centers for Disease Control and Prevention (CDCs) and regular users. The CDC manages a list of people who needs to be monitored related to the COVID-19 and forcibly installs COVID-19 virtual Internet of Things (vIoT) nodes in the form of applications on their smartphones. In addition to these nodes, the vIoT support nodes also engage as information providers to improve the quality of information services. The design of our platform aims to ensure confidentiality and authentication services giving individually different secret keys. In addition, our platform meets system scalability and reduces Query/Reply latency, where the platform accommodates a large number of world-wide CDCs and persons in control per CDC.

The existing LTE mobile system uses the vertical model to handle the session-based security management. However, the goal of this paper is to propose a packet key-based security management scheme on the blockchain control plane to enhance the existing session key-based security scheme and overcome the limitation that the existing vertical model, as well as the Software-Defined Networking (SDN) based horizontal model, confronts within solving end-to-end security management. The proposed blockchain-based security management (BSM) scheme enables each peer to easily obtain the necessary parameters required to manage the packet key-based security system. The important features of the BSM scheme include the renewal process, which enables the different packet data streams to use completely different security parameters for the security management. In addition, because even blind values cannot be exposed to the possible attackers, our BSM scheme guarantees very secure end-to-end data transfer against active attacks such as falsification of data and transactions. Finally, this paper compares the BSM scheme with the existing vertical model to prove the advantageous effects on latency.

Currently, the dual use of IPv4 and IPv6 is becoming a problem. In particular, Network Address Translation (NAT) is an important issue to be solved because of traversal problems in end-to-end applications for lots of mobile IoT devices connected to different private networks. The vertical model is typically used to solve NAT, mobility and security issues for them. However, the existing vertical model has limitations because it handles NAT, mobility and security management one by one. This paper proposes a Blockchain-based Integrated Network Function Management (BINFM) scheme where the NAT, mobility, and security management are handled at once. The proposed scheme is advantageous in that by using blockchain and the Query/Reply mechanism, each peer can easily obtain the necessary parameters required to handle the NAT, mobility, and security management in a batch. In addition, this paper explains how our proposed scheme guarantees secure end-to-end data transfers with the use of one time session key. Finally, it is proved that the proposed scheme improves performance on latency from the viewpoints of mobility and security compared to the existing vertical model. mobile IoT devices connected to private networks in the smart city on the condition that a smart mobility management is provided [10][11][12].In recent decades, preserving privacy and ensuring the security of data have emerged as important issues as confidential information or private data may be revealed by powerful data mining tools [13][14][15]. Therefore, if hackers attack a smart city with lots of IoT devices, the outcome could be far more catastrophic. It is argued that IPv6 offers better security solutions than IPv4, largely due to IPSec, with which IPv6 operates. It is known that widespread adoption of IPv6 will make man-in-the-middle attacks significantly more difficult [16]. IPSec, which works on a layer 3 plane, i.e., the network layer, aims to provide application-layer security in batch by means of securing IP-layer. However, it poses a difficult problem to run end-to-end encryption because of its difficult key exchange protocol between end-to-end IoT peers [17]. Small IoT end points will face a burden when they handles security association data to secure the layer 3 datagram services. So this paper is based on the idea that IPSec is difficult to be realized for mobile IoT devices with the private IP addresses.As depicted in Figure 1, the existing vertical model starts with the NAT management followed by mobility management. Once the NAT and mobility management are made, the security management procedure begins.Static assignment of IP addresses gives adversaries significant advantage to remotely scan networks and identify their targets accurately and quickly. As traditional approaches against this attack, the IP address assignment scheme based on DHCP or NAT has been used. However, they are insufficient to provide proactive countermeasures because the IP mutation is infrequent and traceable. Recently, OpenFlow Random Host Mutation (OFRHM), in whi...

No abstract

No abstract