异构网络接入认证技术研究

各种无线传输技术在覆盖面积、频谱带宽及时延方面都有一定的局限性,能有效解决上述局限性的＂异构网络高速无线接入＂概念日益受到广泛关注,但是,要对异构网络的接入认证技术进行一体化设计是一项具有挑战性的课题。重点分析如何利用动态安全关联技术改善移动认证架构,研究异构网络和移动终端的统一认证及安全接入,有效提升移动终端在不同网络间切换的安全性能。     

B3G无线异构网络的切换技术研究

移动性管理技术是实现异构网络融合的关键技术之一,而切换管理对移动性管理显得尤为重要.针对未来异构网络的特点,本文研究了相应的切换机制,并对不同方案进行了比较分析.结果表明,两种混合式方案具有较好的切换性能,极具应用潜力.     

WLAN场景的IPv6宽带接入认证技术

介绍了WLAN接入现有技术,根据现有技术分析了WLAN宽带接入技术在IPv6演进过程中面临的挑战,并根据IPv6本身的特点提出了现有技术改造和演进方案,同时也对IPv6宽带部署阶段,如何更好地进行WLAN接入控制做出了研究和分析。     

垂直交换管理的集合架构

Recent advances in hardware technology have made it possible for mobile devices to interface with multiple networks of different types. In this paper, an IEEE 802.21 Media Independent Handover (MIH) based handover management architecture containing four modules is proposed and the multihoming technology is adopted to achieve Make-Before-Break vertical handover. Then the paper presents the performance analysis of the architecture and simulation in ns-2. The results substantiate the effi cacy of the architecture in improving the handover performance signifi cantly compared with the traditional Mobile IPv6 (MIPv6) based vertical handover. Besides, we design and implement this handover management architecture in our test-bed. The experimental results in a real network environment show that our proposed architecture can not only support the Make-before-break handover, but also guarantee the scalability because of the modulized design.     

A Fast IMS Service Recovery Mechanism for the Handover Over MIH-Capable Heterogeneous Networks

IP multimedia subsystem (IMS) is the core multimedia network in the next generation all-IP environment. It provides access independence for multimedia applications across fixed and mobile access networks. When a roaming IMS subscriber connects to IMS through mobile access networks, handover becomes a critical issue; this needs to be addressed. Since IMS concerns application layer handover for session mobility, the application layer handover takes a long time for recovering the suspended sessions according to the standard IMS session reestablishment procedure. This introduces noticeable service interruption to end users and cannot be tolerated for real-time applications. In this paper we propose a fast IMS service recovery mechanism to shorten the service recovery latency by combining the IEEE 802.21 Media Independent Handover service and the IRTF Media-Independent Pre-Authentication frameworks. The proposed mechanism performs the necessary IMS registration and QoS re-negotiation procedures in advance of lower-layer handover. Thus it reduces the service recovery latency for suspended services. With parallel design in time, the proposed mechanism is able to shorten overall handover relevant latency as well. Technical examination shows that it is easy to deploy the proposed mechanism in current multimedia service environments.     

交互式异构无线网络垂直切换的中间件架构

异构无线网络研究的关键之一在于按照用户的应用要求,在不同网络之间实现垂直切换。文章面向多模移动终端提出交互式垂直切换中间件架构,描述了架构的功能组成体系,阐明了在多模移动终端上交互式简单快速地设置垂直切换所需参数或权重的界面。给出了按层次分析法AHP进行垂直切换的中间件实现流程的一个例子。     

采用IEEE802.21 MIH服务优化FMIPv6切换的方案

针对IEEE802.21标准所定义的介质无关切换功能（MIHF）,讨论了两种利用MIHF来优化FMIPv6切换的方案,即增加原语和参数与增加信息报告的方式;并在此基础上提出了一种将两者结合,与用户事件（MIH_User）共同来改进切换延迟的方案。     

Inter Radio Access Technology [IRAT] Handover Algorithms for Heterogeneous Wireless Networks

Wireless Personal Communications - Inter-system handover is important for 4G/5G networks as these heterogeneous wireless networks (HWNs) have integrated different radio access technologies with...     

Fast and Secure Handover Authentication Scheme Based on Ticket for WiMAX and WiFi Heterogeneous Networks

Integrated WiMAX and WiFi networks is of great potential for the future due to the wider coverage of WiMAX and the high data transport capacity of WiFi. However, seamless and secure handover (HO) is one of the most challenging issues in the WiMAX and WiFi heterogeneous networks. In this paper, we present a fast and secure HO authentication scheme based on credential ticket for WiMAX and WiFi heterogeneous networks. In the proposed scheme, Mobile Station (MS) shows its corresponding credential ticket generated by the previously visited Base Station (BS)/Access Point (AP) to the target BS/AP whenever an HO occurs, and then the MS and target BS/AP can complete the mutual authentication and derive their shared session key without interacting with the Authentication, Authorization, and Accounting server, which significantly reduces the HO authentication delay. Moreover, our scheme fulfills the essential security requirements in HO authentication semantics and the formal verification by the AVISPA tool shows that the proposed scheme is secure against various malicious attacks. In addition, the theoretical analysis and simulation indicate that our scheme outperforms the existing HO authentication schemes in terms of communication and computation cost.     

异构无线接入网络中的通用链路层技术

如何实现异构环境下的多种无线接入网络融合以及多种无线接入技术之间的协同工作,是未来移动通信研究的主要内容。通用链路层(GLL)基于可重配置的链路层平台,完成不同无线接入技术的协同工作,从而实现了无缝和无损的垂直切换。通用链路层作为解决异构网络协同工作的一种新型技术,已经引起了相关研究领域的广泛关注。通用链路层可以划分为通用和特殊功能部分,并且在垂直切换中具有一套独特的执行过程。相比其他异构接入方案,通用链路层在切换执行的性能方面具有优势。     

异构无线网络可证安全的接人认证和密钥交换协议

针对异构网络模型BRAIN（Broadband Radio Access for IP based Network）中的安全第一跳通信，提出一种新的基于Canetti-Krawczyk（CK）可证安全模型的双向认证和密钥交换协议．根据该模型方法，首先构造并证明了一种理想环境下的混合密钥交换协议HKE；然后利用现有安全的消息传输认证器构造一个适合BRAIN网络安全第一跳的认证器．最后利用该认证器自动编译理想的HKE协议，得到可证安全和实际可行的PHKE协议．分析比较表明，该协议更安全有效．     

宽带接入网络中的主要认证技术

随着宽带网络建设的迅速扩大,用户数量的急剧增加,迫使我们将宽带网络的可运营性和可管理性的研究放到了首位,具体研究包括用户管理、计费管理、安全管理和业务管理等方面。原网络上较单一的认证方式在某些方面已经不能适应用户量剧增和宽带业务多样化的需求。本文从广东省现有宽带接入网络发展情况出发,介绍了宽带接入网络中主要的三种认证技术,PPPoE、Web+DHCP和IEEE802.1x认证技术。文章中分别介绍了以上三种认证方式的实现方法和特点,并分析了各自的优缺点,目的在于加强对多种认证技术的研究,以便在不同场合和不同发展阶段选用合适的认证方式。     

宽带应用统一接入认证的解决方案

本文提出了面向宽带应用的统一接入认证的概念,介绍了在宽带网络上实现统一接入认证计费系统的解决方案,详细阐述了其功能及实现过程的关键技术。在论述安全性问题时,本文重点介绍了应用层实现安全认证和计费所采用的多种安全机制。     

GHAP: An Efficient Group-based Handover Authentication Mechanism for IEEE 802.16m Networks

IEEE 802.16m is now under consideration by the International Telecommunication Union (ITU) to become the International Mobile Telecommunications (IMT)-Advanced standard. However, handover authentication is a critical issue in this area. In this paper, we propose an efficient group-based handover authentication mechanism, named as GHAP, for correlated mobile stations (MSs) in IEEE 802.16m networks. In our scheme, the correlated MSs who have the similar Signal to Interference-plus-Noise Ratio and history handover information etc. are divided into the same handover group. When the first MS of the handover group members moves from the service base station (BS) to a target BS, the service BS transmits all the handover group members’ security context to the target BS utilizing the security context transfer (SCT) method and then all these MSs in the same handover group can easily perform the handover authentication with the target BS. Different from the conventional SCT schemes, our scheme uses the MSs’ security context as a symmetric key of Cipher-based message authentication code (CMAC) but not the key material of deriving new session key. Therefore, the proposed scheme can effectively resist the domino effect existing in the previous SCT schemes. Moreover, security analysis shows that the proposed scheme also meets the other security requirements in handover authentication semantics. Furthermore, performance analysis demonstrates that the proposed scheme is very efficient in reducing average handover latency.     

基于不同接入技术的IPv6

为了彻底解决目前IPv4遇到的问题并对未来的应用提供更好的支持,Internet工程组的IPng工作组提出了修改IP协议的建议--IPv6.文章描述了在不同的接入技术上整套的IPv6实施,介绍了IPv6存在时这些网络的本质特性,最后给出了结论和IPv6的发展建议.     

一种新型的LTE-A网络切换认证协议

针对典型蜂窝网络LTE-A网络的切换认证问题,本文通过引入SDN（Software Defined Network,软件定义网络）,提出了软件定义LTE-A异构网络架构,在中心控制器中共享UE（User Equipment,用户设备）的安全上下文信息,以实现简化切换认证过程,提高认证效率的目标.中心控制器的加入,使蜂窝与核心网通信时需要增加一次信令开销,而LTE-A网络的标准切换认证方法过于复杂,应用在软件定义LTE-A异构网络中,会产生较多的信令开销.基于代理签名的切换认证方法,使UE在验证身份时不用经过核心网,减少了信令开销.在安全性相同的情况下,基于椭圆曲线的加密体系比基于RSA的加密体系计算量更小,有利于减少中心控制器的计算压力.本文采用椭圆曲线代理签名方法,提出了一种新型的切换认证协议,并运用着色Petri网进行建模和仿真分析.仿真结果表明,该协议是有效的,且安全性更高.     

Vertical Handover Solutions Over LTE-Advanced Wireless Networks: An Overview

The convergence of multitude radio access networks forming a cluster of seamless heterogeneous wireless environment has made the wireless communication industry meet the paradigm of always best connected, where various mobile devices are able to access numerous types of applications and services. However, achieving such landmarks could not be possible without difficulties which this paper tries to highlight some of the technical challenges underlying seamless vertical handover. It provides a general overview of the mobility management process including a brief on multi-homing mobility protocol and focuses on vertical handover decision making techniques, hi ghlighting some radio interface standar and analysed some handover approaches. The paper proposes fast intelligent inter-layer network selection as a new handover approach to select the best network among the candidate networks, where Quality of Service, handover delay and improved data bit rates are set to be achieved.     

An Access Selection Functional Architecture for Heterogeneous Multi-Mode Terminals

The convergence of heterogeneous wireless networks is an inevitable trend in broadband wireless communications development. In heterogeneous networks convergence environment, each wireless network can provide ubiquitous, best Quality of Service (QoS) services. The challenge lies in the design of the management system and access selection architecture for heterogeneous multi-mode terminals. A type of management architecture for heterogeneous multi-mode terminal via effective interaction with all protocol layers is adaptable for multi-access standards and technical requirements to achieve seamless access and mobility for multi-mode heterogeneous terminals. As the core subject for research, access selection functional architecture mainly consists of three modules, namely access adaptation, mobility management, and user preference.     

基于用户体验的VLC/WiFi异构网络切换算法

针对可见光通信(VLC)与WiFi组成的异构网络中的网络选择问题,现有工作大多仅关注实际物理网络指标的优化,如信干噪比(SINR)和吞吐量等,而忽视了终端用户的异构需求和服务体验。基于此,该文提出了一种以用户体验质量(QoE)为优化目标的网络切换算法。该算法首先基于平均主观评分(MOS)机制建立离散化的QoE等级模型,然后根据不同网络对应的实际QoE水平给出了相应网络切换准则,当且仅当新网络使得用户QoE等级提升时才进行网络切换,从而在一定程度减小盲目追求容量优化引起的网络切换开销。仿真结果表明,该算法相比现有算法能够在保证QoE水平的前提下显著减小整体的网络切换次数,从而降低网络开销,提升网络性能。      

An Integrated Cosimulation Environment for Heterogeneous Systems Prototyping

In this paper, we present a hardware-software cosimulation environment for heterogeneous systems. To be an efficient and convenient verification environment for the rapid prototyping of heterogeneous systems consisting of hardware and software components, the environment supports (i) modular cosimulation, (ii) cosimulation acceleration, and (iii) integrated user interface and internal representation. For modular cosimulation, we treat software and hardware components as separate processes that communicate with each other only through inter-process communication. We generate interface model automatically and insert between software and hardware components. We can accelerate cosimulation through hardware-emulation using FPGAs which also supports our incremental system prototyping strategy. Finally, to provide an integrated user interface and internal representation consistent with various prototyping tasks, we modified and extended Ptolemy, a cosimulation and cosynthesis environment for heterogeneous systems. The benefits of our cosimulation environment are as follows: expandability of the environment, target architecture and protocol independence, interface transparency, seamless transition to cosynthesis, cosimulation speedup, and convenient cosimulation. As experimental examples, we cosimulated and prototyped several heterogeneous systems successfully, which shows that our environment can be a useful heterogeneous systems specification/verification environment for fast prototyping.