• Title/Summary/Keyword: 갱신 프로토콜

Search Result 198, Processing Time 0.033 seconds

Supplement IEEE 802.1X with UMTS 3G Security Architecture Authentication Token (UMTS 3세대 이동망 보안 아키텍쳐의 인증 토큰을 이용한 IEEE 802.1X 프레임워크의 보완)

  • 송창열;조기환
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 2002.10c
    • /
    • pp.553-555
    • /
    • 2002
  • 인증(Authentication)과 암호화 키(Key) 운용 방법론은 통신 서비스 고려시 소홀할 수 없는 중요한 문제이다. 현재 가장 널리 보급되어 사용중인 IEEE 802.11 기술에서도 이와 같은 보안 지원에 문제가 있음이 명백히 드러나고 있다. 포트 컨트롤을 통하여 접속 지점에서부터 통신을 제어하는 IEEE 802.1X는 이를 위한 적절한 보안 해결책이 되고 있고, IEEE 802.11 WGi는 802.1X를 기초로 하는 RSN(Robust Security Network)울 위한 표준화가 진행중이다. 그러나 IEEE 802.1X 프레임워크에서 상호 인증과, 키 분배 및 갱신 정책은 채택하는 인증 프로토콜에 강하게 의존하는 약점을 가지고 있다. 따라서 본 논문에서는 UMTS 보안 아키텍처의 인증 토큰(Authentication Token)을 추가하여 IEEE 802.1X 프레임워크에 상호 인증 및 키 갱신 구조를 포함하도록 하였다.

  • PDF

An Internet Gateway Based Link State Routing for Infrastructure-Based Mobile Ad Hoc Networks (인프라구조 기반의 이동 애드혹 네트워크를 위한 인터넷 게이트웨이 중심의 링크상태 라우팅 프로토콜)

  • Lee, Sung Uk;Ngo, Chi-Trung;Han, Trung-Dinh;Kim, Je-Wook;Oh, Hoon
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.37B no.10
    • /
    • pp.859-876
    • /
    • 2012
  • Since the existing protocols separated mobility management part and routing protocol part in their design and used a flooding, they suffer from the high control overhead, thereby limiting performance. In this paper, we use a tree-based mobility management method and present a simple and efficient routing protocol that exploits the topology information which is built additionally through mobility management. Thus, the mobility management and the routing protocol closely cooperate to optimize control overhead. Furthermore, we use a progressive path discovery method to alleviate traffic congestion around IG and a unicast-based broadcast method to increase the reliability of message delivery and to judge link validity promptly. The proposed protocol reduces control overhead greatly and works in a stable manner even with the large number of nodes and high mobility. This was proven by comparing with the AODV protocol that employs the hybrid mobility management protocol.

Efficient New Routing Protocol for Mobile Ad Hoc Networks (이동 애드혹 네트워크을 위한 새로운 라우팅 프로토콜 기법)

  • Ngo, Van-Vuong;Jang, Jaeshin
    • Proceedings of the Korean Institute of Information and Commucation Sciences Conference
    • /
    • 2015.10a
    • /
    • pp.815-818
    • /
    • 2015
  • AODV routing protocol, one of the most studied routing protocols for the Mobile Ad hoc Network (MANET), uses the number of hops as the metric to choose a path from a source node to a destination node. If the path is deteriorated, it will cause many problems to the communication. In order to improve the performance of the network, we propose AuM-AODV routing protocol that contains an auxiliary metric besides the number of hops. Nodes using AuM-AODV use control packets such as Route Request (RREQ), Route Reply (RREP), and HELLO to exchange information about network topology like AODV routing protocol. AuM-AODV routing protocol is implemented in NS-3 for performance evaluation. We use three performance metrics, that is to say, throughput, packet delivery ratio, and average end-to-end delay. According to numerical results, the new AuM-AODV routing protocol has better performance over three performance metrics than AODV routing protocol.

  • PDF

An Efficient Dynamic Group Key Agreement for Low-Power Mobile Devices (저전력 모바일 장치에 적합한 효율적인 동적 그룹 키 동의)

  • Cho Seokhyang;Nam Junghyun;Kim Seungjoo;Won Dongho;Lee Hyejoo;Choi Jinsoo
    • The KIPS Transactions:PartC
    • /
    • v.12C no.2 s.98
    • /
    • pp.157-168
    • /
    • 2005
  • Group key agreement protocols are designed to provide a group of parties securely communicating over a public network with a session key. The mobile computing architecture is asymmetric in the sense of computational capabilities of participants. That is, the protocol participants consist of the stationary server(application servers) with sufficient computational Power and a cluster of mobile devices(clients) with limited computational resources. It is desirable to minimize the amount of computation performed by each group member in a group involving low-power mobile devices such as smart cards or personal digital assistants(PDAs). Furthermore we are required to update the group key with low computational costs when the members need to be excluded from the group or multiple new members need to be brought into an existing group. In this paper, we propose a dynamic group key protocol which offers computational efficiency to the clients with low-power mobile devices. We compare the total communicative and computational costs of our protocol with others and prove its suity against a passive adversary in the random oracle model.

Provably-Secure and Communication-Efficient Protocol for Dynamic Group Key Exchange (안전성이 증명 가능한 효율적인 동적 그룹 키 교환 프로토콜)

  • Junghyun Nam;Jinwoo Lee;Sungduk Kim;Seungjoo Kim;Dongho Won
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.14 no.4
    • /
    • pp.163-181
    • /
    • 2004
  • Group key agreement protocols are designed to solve the fundamental problem of securely establishing a session key among a group of parties communicating over a public channel. Although a number of protocols have been proposed to solve this problem over the years, they are not well suited for a high-delay wide area network; their communication overhead is significant in terms of the number of communication rounds or the number of exchanged messages, both of which are recognized as the dominant factors that slow down group key agreement over a networking environment with high communication latency. In this paper we present a communication-efficient group key agreement protocol and prove its security in the random oracle model under the factoring assumption. The proposed protocol provides perfect forward secrecy and requires only a constant number of communication rounds for my of group rekeying operations, while achieving optimal message complexity.

A Ternary Tree-based Authenticated Group Key Agreement For Dynamic Peer Group (동적 피어 그룹을 위한 삼진 트리방식의 인증된 그룹 키 합의 프로토콜)

  • Kim, Ho-Hee;Kim, Soon-Ja
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.22 no.6
    • /
    • pp.1253-1263
    • /
    • 2012
  • As a result of the increased popularity of group oriented applications, the design of an efficient authenticated group key agreement protocol has received a lot of attention. Lee et al. proposed a tree-based group key agreement protocol, which applies a ternary key tree structure and pairing-based cryptography to the key agreement of Dynamic Peer Group. In their protocol, only the group sponsor knows all member's session random keys computes all blinded keys. In addition, when the group sponsor leaves a group, all nodes of the tree should be changed. In this paper, we present the modified protocol that has several sponsors. Since a secret value for each member isn't given to the group sponsor, the key renewing of our protocol is more secure and efficient than that of Lee et al.'s protocol in the previous case. Therefore, our protocol is suitable to Dynamic Peer Groups.

Development of Update Methods for Configuration Data of NETCONF Protocol considering Multiple Network Administrators (다수 네트워크 관리자를 고려한 NETCONF 프로토콜의 설정 데이터 갱신 기법 개발)

  • Lee, Yang-Min;Cha, Mi-Yang;Lee, Jae-Kee
    • Journal of Internet Computing and Services
    • /
    • v.14 no.5
    • /
    • pp.27-38
    • /
    • 2013
  • Currently a number of managers exist to manage heterogeneous networks, in this situation, the NETCONF protocol for efficient network management has been proposed as a new protocol. However, the standard NETCONF protocol stack continuous improvement since the establishment but in four layers still have some problems. Especially in situations where there are multiple administrators, problems are more highlighted in operation layer. In this paper, we focus on these issues and the Operation layer has improved the efficiency and flexibility of operations among NETCONF four layers. Additionally, for the inefficiency of updates improved the device settings based on improved operation techniques. In addition, standard protocol NETCONF did not proposed content layer data structure and we propose standard technique of content layer that can generate configuration structure of devices. Improved the three techniques are applied appropriately to the NETCONF, the proposed method and the existing NETCONF was performed experiment to compare with experimental four factors. Compare key factor are four kind as maintaining the probability of network function, the reaction performance about command, the number of control packets, performance of data creation in content layer. Such factors after performing the experiment, the proposed method in this paper is superior to the existing NETCONF and there was confirmed by analysis Experimental results.

An Efficient Dynamic Network Status Update Mechanism for QoS Routing (QoS 라우팅을 위한 효율적인 동적 네트워크 상태 정보 갱신 방안)

  • Kim, Jee-Hye;Lee, Mee-Jeong
    • Journal of KIISE:Information Networking
    • /
    • v.29 no.1
    • /
    • pp.65-76
    • /
    • 2002
  • QoS routing is a routing technique for finding feasible path that satisfies QoS requirements required by application programs. Since QoS routing determines such paths in terms of dynamic network state, it satisfies the requirement of applications and increases the utilization of the network. The overhead is, however, generated by routers to exchange the information of the dynamic state of network. In order to reduce this protocol overhead, a timer based update mechanism is proposed in which router checks the change of the network status periodically and network state information is exchanged if the change is greater than a certain value. Using large update period makes, though, routing performance irresponsive to the parameters which determine the update of the network state of the router. In addition to this, large update period may result in inaccurate network state information at routers and cause resource reservation failure. The resource reservation failure generates additional overhead to cancel the resource reservation of the part of the path. In this paper, we propose mechanisms enhancing the existing network state update policy with respect to these two problems. Performance of the proposed schemes are evaluated through a course of simulation.

Web Display of University Application Records (대학 지원 경쟁률 WEB DISPLAY)

  • 이연구;송정호;이호석
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 1998.10b
    • /
    • pp.324-326
    • /
    • 1998
  • 대학 행정의 전산화 프로젝트는 여러 부분에서 진행되어 왔다. 본 논문은 학사 행정 업무에 관한 프로토타입으로 사용될 목적으로 개발되었으며, 웹에 대학 지원 경쟁률을 실시간으로 사용자에게 보여지도록 했다. 개발 환경은 Unix 운영체제에 오라클 데이터 베이스가 기반이며 호스트 언어로 Pro*C를 사용하였다. 구현 원리는 TCP/IP 프로토콜을 거치지 않고 웹 서버를 이용하여 웹 상에 데이터베이스의 데이터를 주기적으로 갱신하여 보여준다는 점이 특색이다.

Performance Analysis of Mobile IP with Self-Similar Traffic (Self-Similar 트래픽을 갖는 Mobile IP의 성능분석)

  • 김기완;김두용
    • Proceedings of the Korea Society for Simulation Conference
    • /
    • 2001.05a
    • /
    • pp.127-131
    • /
    • 2001
  • 휴대용 단말기와 이동통신 기술의 발달로 무선 네트워크의 사용이 급증하면서 호스트가 이동중에도 지속적인 네트워킹이 가능한 프로토콜들이 개발되고 있다. Mobile IP는 이동 노드(mobile node)가 인터넷상의 임의의 다른 위치에 접속하여 IP 주소를 변경하지 않고, 홈 주소를 이용하여 통신하며 위치에 따른 care-of address에 의해 데이타를 터널링하여 전달받는다. 본 논문에서는 컴퓨터 시뮬레이션을 통해 self-similar 트래픽을 갖는 mobile IP의 성능을 분석한다. 일반적으로 데이타 트래픽, 바인딩 갱신시간, 버퍼관리 방법 등은 핸드오프 동안 mobile LP의 성능에 많은 영향을 비친다. 따라서 시뮬레이션 모델을 이용하여 self-similar 트래픽 환경에서 위에 언급된 성능 파라미터들의 영향을 분석한다.

  • PDF