A Study on constructing IPv6 ubiquitous environment with network security

1. IPv6信息出口系统的实现与评价在具有无线局域网接口的小型PC机上实现了信息出口系统的原型。虽然现在省略了用户身份验证的特性，但它很容易实现，因为移动通知成为身份验证的触发器。由于使用包过滤和地址转换可能成为IPsec工作和端到端通信的障碍，因此对桥式系统进行了研究。目前，由于路由式系统适合于信息出口系统和MAT.2的管理，因此对路由式系统进行了研究。构建泛在环境的研究，对提供移动支持的信息出口系统进行了研究。通过将网络的可扩展性限制在本地网络上，不需要修改移动节点，并使用唯一策略进行管理。地址转换等移动性管理功能从移动节点转移到网络中。这叫做本地化移动管理。并建立了实验网络。该网络由多个IPv6子网组成，每个子网都安装了具有移动支持的信息出口系统。对移动支持的功能、使用要求及其规模进行了调查。在这样的局域网中，单个大型L2网络可以实现对移动性的支持。但是，例如对未使用的地址发出ARP请求，可能会引起严重的广播风暴。然后确定为此需要将单个大的L2网络划分为小的L3网络。

1. Implementation and evaluation of IPv6 information outlet systemThe prototype of information outlet system has been implemented on small PC with wireless LAN interface. Although the feature of user authentication is now omitted, it is easy to implement because the movement notification becomes the trigger of authentication. As the use of using packet filter and address translation may become an impediment in working IPsec and the End-to-End communication, the bridge-type system had been examined. Currently, the routed-type system has been examined, because it is congenial to the management on information outlet system and MAT.2. Investigation for constructing ubiquitous environmentThe information outlet system which provides mobility support has been examined. No modification to mobile node is required by limiting the scalability of the network to the local one which is managed with unique policy. The function of managing mobility such as address translation is shifted from mobile node to network. This is called, Localized Mobility Management. The experimental network has also been constructed. The network consists of several IPv6 subnets and the information outlet systems with mobility support are installed in each subnet.3. Investigation of a possibility for realizing mobility supportThe investigations of the functions regarding mobility support, requirements of use and its scale have been examined. It is possible to realize mobility support by single-large L2 network in such a local area network. But, for example, the ARP requests for unused addresses may cause serious broadcast storm. Then it is confirmed that the division of single-large L2 network into small L3 networks is required for this purpose.