Secure universal mobility for wireless Internet

Abstract

The advent of the mobile wireless Internet has created the need for seamless and secure communication over heterogeneous access networks such as IEEE 802.11, WCDMA, cdma2000, and GPRS. An enterprise user desires to be reachable while outside one's enterprise networks and requires minimum interruption while ensuring that the signaling and data traffic is not compromised during one's movement within the enterprise and between enterprise and external networks. We describe the design, implementation and performance of a Secure Universal Mobility (SUM) architecture. It uses standard protocols, such as SIP and Mobile IP, to support mobility and uses standard virtual private network (VPN) technologies (e.g., IPsec) to support security (authentication and encryption). It uses pre-processing and make-before-break handoff techniques to achieve seamless mobility (i.e., with little interruption to users and user applications) across heterogeneous radio systems. It separates the handlings of initial mobility management and user application signaling messages from user application traffic so that VPNs can be established only when needed, thus reducing the interruptions to users.

Seamless proactive handover across heterogeneous access networks

“…The MOBOPTS working group within the IRTF (Internet Research Task Force) and the DNA (Detecting Network Attachment) working group within the IETF have been investigating ways to support optimized handover by using appropriate triggers and events from the lower layers. References [4,7] describe mobility management techniques that consider both security and heterogeneous mobility. Although many of these techniques use cross-layer mechanisms and "make-before-break" algorithms to provide fast-handover, it is desirable to have a standardized method to handle mobility across heterogeneous networks in an efficient manner.…”

Security architectures for B3G mobile networks

“…Such a mechanism is provided by the Mobility and Multihoming IKE (MOBIKE) protocol [9,15], which enables a mobile user with an established VPN to move from one access network to another, without re-establishing the IPsec_SAs. Moreover, Dutta et al [7] design and implement a secure universal mobility architecture, which incorporates standard mobility management protocols, such as Mobile IP, to deploy a mobile VPN.…”

Context awareness in network selection for dynamic environments

“…There are other works that focus on network services, providing security and service continuation for wireless communications [3], and [4], but do not take into account the network selection problem. MDS data analysis techniques have been used for several problems with good results.…”

“…Let us assume that the data is important for the company and that it should be treated as confidential. The decision engine selects as ideal link speed 20 kbps, according to the running applications, since the domain is recognized as the car, the decision engine selects complete mobility (3). The Home/Work value is set as 2 (work).…”

“…3. Section 4 outlines the prototype: domain definition and marking, policy manager and finally, the decision engine where it will be shown how multidimensional scaling, a psychometric algorithm, helps to alleviate decision problems.…”