权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

Implementation and evaluation of information socket servers with authentication, encryption, and load-balancing

具有身份验证、加密和负载平衡功能的信息套接字服务器的实现和评估

基本信息

批准号：
14580449
负责人：
NAKANISHI Michio
金额：
$ 2.24万
依托单位：
Osaka Institute of Technology
依托单位国家：
日本
项目类别：
Grant-in-Aid for Scientific Research (C)
财政年份：
2002
资助国家：
日本
起止时间：
2002 至 2003
项目状态：
已结题

来源：
https://kaken.nii.ac.jp/en/grant/KAKENHI-PROJECT-14580449/
关键词：
information socket user authentication user tracing load balancing security PPPoE 認証 PPTP MPPE

项目摘要

Based on the prototype system implemented in 2002, we had planned (1)to implement several authentication method, (2)to implement encryption mechanism, (3)to enhance encryption function with load balancing or clustering function, and (4)to evaluate the prototype server.As for (1) and (2), we implemented mechanism to use one network card of the server both for PPPoE and PPTP simultaneously, which enabled users to select PPPoE and PPTP. As for (2), we implemented MPPE.As for the load balancing of (3), we implemented a function to move a server-client session from one server to another. We also added an API to the server kernel for obtaining internal state like initial vectors of MPPE, then installed it on the clustering server.The experimental service was continued in a COOP cafeteria this year. In2002, we had found two problems ; that students had trouble in installing and setting PPPoE on their own note PCs, and that we had nuisance having to distribute PPPoE modules and to help students to install. Since we implemented (1),(2), and (3), students can choose PPTP which is already installed in Windows98/Me/2000/XP. Students who do require higher throughput can choose PPPoE as before. Also, MPPE is now available for users who need 'secure communication.In conclusion, though information socket subsystem can be constructed by deploying costly network appliance switches, we showed possibility and practical usefulness of the subsystem using cheap switches and PCs.

基于2002年实现的原型系统，我们计划(1)实现多种认证方法，(2)实现加密机制，(3)通过负载均衡或集群功能增强加密功能，(4)对原型服务器进行评估。对于(1)和(2)，我们实现了PPPoE和PPTP同时使用服务器一块网卡的机制，使用户能够选择PPPoE和PPTP。对于(2)，我们实施了MPPE。对于(3)的负载平衡，我们实现了一个将服务器-客户端会话从一台服务器移动到另一台服务器的功能。我们还向服务器内核添加了一个API，用于获取内部状态（如MPPE的初始向量），然后将其安装在集群服务器上。今年，合作社的一家自助餐厅继续提供这项实验性服务。2002年，我们发现了两个问题；学生在他们自己的笔记本电脑上安装和设置PPPoE时遇到了麻烦，我们不得不分发PPPoE模块并帮助学生安装。由于我们实现了(1)、(2)和(3)，学生可以选择已经安装在Windows98/Me/2000/XP中的PPTP。需要更高吞吐量的学生可以像以前一样选择PPPoE。此外，MPPE现在可供需要“安全通信”的用户使用。总之，虽然信息套接字子系统可以通过部署昂贵的网络设备交换机来构建，但我们展示了使用便宜的交换机和pc来构建子系统的可能性和实用性。