Design and Modeling of Secure Wireless Mesh Networks

安全无线网状网络的设计和建模

• 批准号: 293201-2012
• 负责人: Yang, Cungang
• 金额: $ 1.31万
• 依托单位: Ryerson University
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2014
• 资助国家: 加拿大
• 起止时间: 2014-01-01 至 2015-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=548212
• 关键词: Design; Modeling; Secure; Wireless; Mesh

This proposal focuses on the design and modeling of secure wireless mesh networks(WMNs). The IEEE WMNs standard, 802.11s, is not mature enough to address security concerns of WMNs. To enhance the security of 802.11s WMNs, the first goal of this proposed research is to investigate methodologies of security and efficient techniques so as to make a single-operator WMNs secure and resilient to attacks. In this study, a generic security package will be studied to support fast authentication and exposure-resilient key management. A role-based access control model (RBAC) will be designed to support clients' authorization. A heterogeneity-aware framework for group key management will be studied for the single-operator WMNs. Future large-scale WMNs are expected to comprise numerous mesh networks, each administered by an independent network operator. Different network operators may collaborate to provide continuous connectivity to roaming users for supporting seamless services, such as voice-over-IP, e-conference, e-news, and online games. The second goal of the proposed research is to investigate methodologies of security techniques so as to make roaming in multi-operators WMNs seamless, secure, and efficient. To achieve this research objective, a new trust model is to be developed so that different mesh networks do not require establishing the roaming agreements and clients are no longer bound to any specific network operator. Instead, a client acquires a ticket from a third-party broker whereby to realize seamless roaming across mesh networks administrated by different operators. A secure and fast inter-operator handover scheme will be developed to support client's seamless crossing the boundary of mesh domain boundaries. A general role-based access control will be studied to ensure the authorization of mesh clients. An efficient billing protocol will be developed to foster node cooperation. This study, particularly the consideration and implementation of the fast handoff mechanism, and new trust- and role-based access control models, will be used as the direction and guidance for us to develop a systematic design methodology and to model wireless mesh networks for various applications.

该方案主要研究安全无线Mesh网络(WMN)的设计和建模。IEEE无线网状网标准802.11s还不够成熟，无法解决无线网状网的安全问题。为了提高802.11s无线网状网的安全性，本研究的首要目标是研究安全的方法论和高效的技术，以使单一运营商的无线网状网具有安全性和抗攻击能力。在这项研究中，将研究一个通用的安全包来支持快速认证和抗暴露的密钥管理。将设计一个基于角色的访问控制模型(RBAC)来支持客户端的授权。针对单运营商无线网状网，研究了一种异构性感知的组密钥管理框架。未来的大规模无线网状网预计将包括大量的网状网，每个网状网由独立的网络运营商管理。不同的网络运营商可以协作为漫游用户提供连续连接，以支持无缝服务，例如IP语音、电子会议、电子新闻和在线游戏。本研究的第二个目标是研究安全技术的方法论，以便在多运营商无线网状网中实现无缝、安全和高效的漫游。为了实现这一研究目标，需要开发一种新的信任模型，使得不同的Mesh网络不需要建立漫游协议，并且客户不再绑定到任何特定的网络运营商。取而代之的是，客户端从第三方中介获得票证，从而实现跨由不同运营商管理的网状网络的无缝漫游。将开发一种安全、快速的运营商间切换方案，以支持客户无缝跨越网状域边界。研究了一种通用的基于角色的访问控制，以保证Mesh客户端的授权。将开发一种高效的计费协议来促进节点合作。这项研究，特别是快速切换机制的考虑和实现，以及新的基于信任和角色的访问控制模型，将作为我们开发系统设计方法和为各种应用建立无线Mesh网络模型的方向和指南。