A Study on constructing IPv6 ubiquitous environment with network security

构建IPv6泛在网络安全环境研究

• 批准号: 17500037
• 负责人: NISHIMURA Kouji
• 金额: $ 2.24万
• 依托单位: HIROSHIMA UNIVERSITY
• 依托单位国家: 日本
• 项目类别: Grant-in-Aid for Scientific Research (C)
• 财政年份: 2005
• 资助国家: 日本
• 起止时间: 2005 至 2006
• 项目状态: 已结题
• 来源: https://kaken.nii.ac.jp/en/grant/KAKENHI-PROJECT-17500037/
• 关键词: IPv6; Information Outlet System; Ubiquitous; Mobility Support; Localized Mobility Management; MAT

1. Implementation and evaluation of IPv6 information outlet systemThe prototype of information outlet system has been implemented on small PC with wireless LAN interface. Although the feature of user authentication is now omitted, it is easy to implement because the movement notification becomes the trigger of authentication. As the use of using packet filter and address translation may become an impediment in working IPsec and the End-to-End communication, the bridge-type system had been examined. Currently, the routed-type system has been examined, because it is congenial to the management on information outlet system and MAT.2. Investigation for constructing ubiquitous environmentThe information outlet system which provides mobility support has been examined. No modification to mobile node is required by limiting the scalability of the network to the local one which is managed with unique policy. The function of managing mobility such as address translation is shifted from mobile node to network. This is called, Localized Mobility Management. The experimental network has also been constructed. The network consists of several IPv6 subnets and the information outlet systems with mobility support are installed in each subnet.3. Investigation of a possibility for realizing mobility supportThe investigations of the functions regarding mobility support, requirements of use and its scale have been examined. It is possible to realize mobility support by single-large L2 network in such a local area network. But, for example, the ARP requests for unused addresses may cause serious broadcast storm. Then it is confirmed that the division of single-large L2 network into small L3 networks is required for this purpose.

1. IPv6信息出口系统的实现与评价信息出口系统原型已在具有无线局域网接口的小型PC机上实现。虽然现在省略了用户认证的特征，但由于移动通知成为认证的触发器，因此易于实现。由于使用包过滤器和地址转换可能会成为工作流和端到端通信的障碍，因此研究了桥式系统。目前，路由型系统已经被审查，因为它适合于信息出口系统和MAT的管理。构建泛在环境的研究提供移动性支持的信息出口系统已被检查。通过将网络的可扩展性限制为使用唯一策略管理的本地网络，不需要对移动的节点进行修改。诸如地址转换的管理移动性的功能从移动的节点转移到网络。这就是所谓的本地化移动管理。实验网络也已建成。该网络由多个IPv6子网组成，每个子网都安装了支持移动性的信息出口系统.对实现移动性支持的可能性进行了调查对有关移动性支持的功能、使用要求及其规模进行了研究。在这样的局域网中，可以通过单个大型L2网络来实现移动性支持。但是，例如，对未使用地址的阿普请求可能会导致严重的广播风暴。然后，它被证实，单大型L2网络划分为小型L3网络是必要的。

项目成果

Address Assignment and Movement Notification Protocols for MAT-MONET

MAT-MONET 的地址分配和移动通知协议

• 发表时间: 2005
• 期刊: IEICE Technical Report MoMuC2005-72(2005-11)
• 作者: D.Kajiwara;D.Ueura;T.Fujita;K.Maeda;R.Aibara;K.Nishimura;S.Kishiba
• 通讯作者: S.Kishiba

MAT : A Network Architecture for Supporting Node Mobility in Wireless Networks

MAT：支持无线网络中节点移动性的网络架构

• 发表时间: 2005
• 期刊: Draft-inayat-mat-00. txt, Internet Draft, IETF
• 作者: Tashima;K.;Fujita;T.;Kishiba;S.;Nishimura;K.;Maeda;K.;Aibara;R.;上浦 大智;藤田 貴大;相原 玲二;岸場 清悟;田島 浩一;上浦 大智;R.Inayat
• 通讯作者: R.Inayat

ネットワーク特性の変化を考慮したシームレスハンドオーバの現実

考虑网络特性变化的无缝切换的现实

• 发表时间: 2005
• 期刊: インターネットコンファレンス2005論文集
• 作者: Kajiwara;D.;Ueura;D.;Fujita;T.;Maeda;K.;Aibara;R.;Nishimura;K.;Kishiba;S.;R.Inayat;上浦 大智
• 通讯作者: 上浦 大智

Performance Evaluation of MAT : A Mobility Support Architecture without Non-Optimal Routing

MAT 的性能评估：无非最优路由的移动支持架构

• 发表时间: 2006
• 期刊: Proc. Internet Conference 2006 (ISSN 1341-870X) No.45
• 作者: R.Aibara;T.Fujita;S.Kishiba;K.Tashima;K.Nishimura;K.Maeda
• 通讯作者: K.Maeda

Performance Evaluation of Multiple IP Address Mapping Servers for MAT

MAT 的多个 IP 地址映射服务器的性能评估

• 发表时间: 2006
• 期刊: IEICE Technical Report IA2006-23(2006-10)
• 作者: S.Kishiba;T.Fujita;K.Tashima;K.Nishimura;K.Maeda;R.Aibara
• 通讯作者: R.Aibara