An ID/locator split architecture for future networks

Kafle, Ved P.; Otsuki, Hideki; Inoue, Masugi

doi:10.1109/mcom.2010.5402677

Cited by 47 publications

(30 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Conceived within the AKARI project [12], the HI-MALIS architecture [13], [14] provides identifier/locator separation with less footprint than the solutions mentioned above, so it is suitable to be used in low power devices, like in sensor networks [15]. However, it identifies entities by their devices and does not include privacy protection or mutual end-to-end authentication and authorization.…”

Section: Related Workmentioning

confidence: 99%

Empowering Security and Mobility in Future Networks with an Identity-Based Control Plane

Martínez-Juliá

Skarmeta

2014

IEICE Trans. Commun.

View full text Add to dashboard Cite

SUMMARYCurrent network technologies, mainly represented by the Internet, have demonstrated little capacity to evolve because of the strict binding of communications to identifiers and locators. While locator namespaces represent the position of communication participants in the graph of a specific protocol, unstructured/plain identifiers represent the position of communications participants in the global network graph. Although they are valid for forwarding packets along communication paths, both views fail to fully represent the actual entities behind communications beyond a simple vertex. In this paper we introduce and evaluate an identitybased control plane that resolves these problems by abstracting communications from identifiers and locators and by using identities to achieve enhanced security, and mobility management operations. This identity-based control plane can then be integrated into different network architectures in order to incorporate the features it provides. This facilitates the evolution capacity of those architectures that separate the information transmission concerns (networking, routing), from end-to-end aspects like security and mobility management.

show abstract

Section: Related Workmentioning

confidence: 99%

Empowering Security and Mobility in Future Networks with an Identity-Based Control Plane

Martínez-Juliá

Skarmeta

2014

IEICE Trans. Commun.

View full text Add to dashboard Cite

show abstract

“…The hostnames are globally unique. The details of the hostname and ID configuration methods are given in [5]. When the hostname and ID are configured, the public/ private key pair is also generated.…”

Section: Edge Network Security Componentsmentioning

confidence: 99%

“…It then obtains its local locator and network parameters such as the IDs and LLocs of the AA, LNS, and GW as well as the domain name and ID prefix of the home network using a host configuration protocol such as DHCP. The host uses the domain name to configure its global hostname and generates its ID by hashing the global hostname (to 64 bits) and attaching the ID prefix, scope, and version fields values [5]. The host then sends a host registration message containing its hostname, ID, PK, and registration ID (regID) to the AA.…”

Section: Dnr and Hnr Records Registration Securitymentioning

confidence: 99%

“…They need to update the mapping records when hosts change their locators (due to mobility) or add new locators (due to multihoming or renumbering). The Domain Name System (DNS) is not suitable for the fast updates of this type of dynamic mapping records because of the existence of multiple copies of cached records in the global system of DNS servers [5]. It would be impossible to quickly update all the copies when the record changes.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Design and Implementation of Security for HIMALIS Architecture of Future Networks

Kafle

Inoue

et al. 2013

IEICE Trans. Inf. & Syst.

View full text Add to dashboard Cite

SUMMARYFor flexibility in supporting mobility and multihoming in edge networks and scalability of the backbone routing system, future Internet is expected to be based on the concept of ID/locator split. Heterogeneity Inclusion and Mobility Adaptation through Locator ID Separation (HIMALIS) has been designed as a generic future network architecture based on ID/locator split concept. It can natively support mobility, multihoming, scalable backbone routing and heterogeneous protocols in the network layer of the new generation network or future Internet. However, HIMALIS still lacks security functions to protect itself from various attacks during the procedures of storing, updating, and retrieving of ID/locator mappings, such as impersonation attacks. Therefore, in this paper, we address the issues of security functions design and implementation for the HIMALIS architecture. We present an integrated security scheme consisting of mapping registration and retrieval security, network access security, communication session security, and mobility security. Through the proposed scheme, the hostname to ID and locator mapping records can be securely stored and updated in two types of name registries, domain name registry and host name registry. Meanwhile, the mapping records retrieved securely from these registries are utilized for securing the network access process, communication sessions, and mobility management functions. The proposed scheme provides comprehensive protection of both control and data packets as well as the network infrastructure through an effective combination of asymmetric and symmetric cryptographic functions. key words: ID/locator split architecture, security, new generation network, future network

show abstract

“…The difference between hostname and hostID lies in the functions that they fulfill. Hostnames are used for human-comprehensive business (e.g., URL naming [8]), whereas hostID is for machine communication [9]. Translation between them is required (e.g., Domain Name System).…”

Section: Context and Rationalementioning

confidence: 99%

Conception of ID layer performance at the network level for Internet of Things

Batalla

Krawiec

2013

Pers Ubiquit Comput

View full text Add to dashboard Cite

This paper proposes a novel architecture of the ID (IDentifier) layer for Internet of Things, which is embedded in the network level instead of traditional overlay solutions. Our contribution characterizes development of human-readable, hierarchical ID-based unified addressing for both objects and services, corresponding to their locations. In this way, users gain easier access to the IoT resources and native support for multicast. Furthermore, we take advantage of the Networking Named Content approach to specify rules for ID-based data transfer. The network nodes have capabilities to cache forwarded data for handling future requests, what may decrease network overload and facilitate cooperation between applications and sensors which periodically move into sleep mode for saving energy. ID-based routing offers decoupling of identification of objects/services from their location. Awareness of forwarded IoT data together with hierarchical distribution of the network makes feasible the local management of users and objects, that is, the essential IoT processes such as object/service registration, publication, searching and resolution can be managed locally in the network node. This offers high flexibility and manageability and improves response of the system when the number of handled things scales. The paper presents the architecture of the proposed solution for ID layer focusing on modules and mechanisms of the ID network node, as well as detailed description of registration, resolution and forwarding processes. Furthermore, the implementation of the system, performed on Linux-based routers, was tested to confirm the correctness of ID layer processes. The tests show that the performance of ID network node is not worse than the performance of a classical IP Linux router running on an identical physical device.

show abstract

An ID/locator split architecture for future networks

Cited by 47 publications

References 7 publications

Empowering Security and Mobility in Future Networks with an Identity-Based Control Plane

Empowering Security and Mobility in Future Networks with an Identity-Based Control Plane

Design and Implementation of Security for HIMALIS Architecture of Future Networks

Conception of ID layer performance at the network level for Internet of Things

Contact Info

Product

Resources

About