IPv6的安全机制及其对现有网络安全体系的影响

IPv6不但解决了当今IP地址匮乏的问题,并且由于它引入了加密和认证机制,实现了基于网络层的身份认证,确保了数据包的完整性和机密性,因此,可以说IPv6实现了网络层安全。但是,这种安全不是绝对的。并且由于IPv6的安全机制,给当前的网络安全体系带来了新的挑战,致使许多在现有的网络中对保护网络安全中起着重要作用的工具受到巨大的冲击,急需安全专家进一步研究和积累经验,尽快找出合适的解决方法。     

Performance Evaluation of IPv4/IPv6 Networks for Ubiquitous Home-Care Service

Because of rapid development in network technology, Internet usage has become widespread. It allows users with sensing devices to obtain medical data for healthcare, such as physiological signals, voice, and video streams from telemedicine systems, and to send the healthcare data to back-end database systems, creating a ubiquitous healthcare environment. However, this environment requires a widespread and suitable network. IPv6 (Internet protocol version 6) is the next-generation Internet protocol that will be the protocol of future networks; it improves many shortcomings of IPv4. In this paper, we propose an IPv6/IPv4 U-home-care test system and analyze the network's parameters though a series of tests by adjusting network parameters to find the optimal design for applications in the IPv6/IPv4 U-home-care service so as to assure good performance and high quality.     

未来移动通信的核心技术——IPv6

随着Internet数据业务和移动通信技术的迅速发展,基于Ipv4的Internet已不适应当前应用需求。Ipv6作为一种新型的Internet协议,克服了现有标准Ipv4在地址匮乏、路由表过于庞大和服务安全等方面的不足,Ipv6即将取代Ipv4成为下一代互联网的标准并且为未来移动通信提供重要支持。文中概括介绍了IPv6技术的特点和优势,如何实现IPv4到IPv6的过渡,并且讨论了IPv6对下一代移动通信的影响。     

An IPv4-IPv6 translation mechanism for SIP overlay network in UMTS all-IP environment

Both IPv6 and session initiation protocol (SIP) are default protocols for Universal Mobile Telecommunications System (UMTS) all-Internet protocol (IP) network. In the existing mobile telecommunications environments, an IPv6-based UMTS all-IP network needs to interwork with other Internet protocol version 4 (IPv4)-based SIP networks. Therefore, mobile SIP applications are typically offered through an overlay structure over the IPv4-Internet protocol version 6 (IPv6) interworking environments. Based on 3GPP 23.228, we propose an IPv4-IPv6 translation mechanism (i.e., SIPv6 translator) that integrates different IP infrastructures (i.e., IPv4 and IPv6) to provide an overlay network for transparent SIP application deployment. In this paper, we present the architecture and the call flows of the SIPv6 translator. An analytic model is proposed to investigate the fault tolerance issue of our approach. Our study provides guidelines to select appropriate number of processors for fault tolerance.     

IPV4向IPv6过渡技术研究

简要介绍了IPv4（Intemet protocol version4）和IPv6（Intemet protocol version6）,指出了从IPv4向IPv6过渡的必然性．阐述了三种基本的过渡技术在安全性和应用等方面的优势和局限。最后,对当前互联网向IPv6过渡问题进行了总结与展望。     

IPV6和物联网

由于互联网IPv4地址即将用尽,IPv6协议被越来越多的互联网专家和研究者看成是下一代互联网的基础协议。与IPv4相比。IPv6具备了更大的地址空间、更好的可扩展性、更高效的网络传输、更好的安全管理架构和更好的移动支持。除了对传统互联网的网络容量和性能的升级。IPv6在物联网的路由、寻址以及物联网应用基础协议设计之初就提供了很好的支持。本文一方面将从IPv6的基本概念入手,阐述与IPv4的区别,并介绍IPv6在中国的发展;另一方面通过对物联网需求的分析,着重介绍IPv6关键技术在物联网的应用,如6LoWPAN,RPL和CoAP协议,以及IPv6在IETF相关工作组的活动。     

Internet protocols for multimedia communications. I. IPng-thefoundation of Internet protocols

Surveys recent and current standardization work by the Internet Engineering Task Force (IETF) on Internet communication protocols. The author describes the IPng project and the IPv6 protocol that will form the basis for upper-layer protocols such as resource reservation, transport and application level protocols. The IETF decided in 1992 to develop a new version of the Internet Protocol (IP) because the available address space of IP version 4 (IPv4) will probably run out early in the 21st Century. The need for a new IP version provided the opportunity to redesign the protocol and add new functions     

Mobile IPv6-based ad hoc networks: its development and application

The Internet protocol version 6 (IPv6)-enabled network architecture has recently attracted much attention. In this paper, we address the issue of connecting mobile ad hoc networks (MANETs) to global IPv6 networks, while supporting IPv6 mobility. Specifically, we propose a self-organizing, self-addressing, self-routing IPv6-enabled MANET infrastructure, referred to as IPv6-based MANET. The proposed self-organization addressing protocol automatically organizes nodes into tree architecture and configures their global IPv6 addresses. Novel unicast and multicast routing protocols, based on longest prefix matching and soft state routing cache, are specially designed for the IPv6-based MANET. Mobile IPv6 is also supported such that a mobile node can move from one MANET to another. Moreover, a peer-to-peer (P2P) information sharing system is also designed over the proposed IPv6-based MANET. We have implemented a prototyping system to demonstrate the feasibility and efficiency of the IPv6-based MANET and the P2P information sharing system. Simulations are also conducted to show the efficiency of the proposed routing protocols.     

A novel IPv6 traceback architecture using COPS protocol

In any Distributed Denial of Service (DDoS) attack, invaders may use incorrect or spoofed Internet Protocol (IP) addresses in the attacking packets and thus disguise the actual origin of the attacks. This is primarily due to the stateless nature of the Internet. IP traceback algorithms provide mechanisms for identifying the true source of an IP datagram on the Internet ensuring at least the accountability of cyber attacks. While many IP traceback techniques have been proposed, most of the previous studies focus and offer solutions for DDoS attacks done on Internet Protocol version 4 (IPv4) environment. IPv4 and IPv6 networks differ greatly from each other, which urge the need of traceback techniques specifically tailored for IPv6 networks. In this paper, we propose a novel traceback architecture for IPv6 networks using Common Open-Policy Service and a novel packet-marking scheme. We also provide complete underlying protocol details required for traceback support in IPv6 networks. The proposed architecture is on demand and only single packet is required to traceback the attack.     

IPv4／IPv6混合网络中的SIP通信解决方案

IPv6是IP协议的新版本,它最终会取代IPv4成为未来互联网的核心网络协议,然而,过渡时会有一段IPv4与IPv6共存时期。由IETF定义,SIP已成为多媒体通信的最重要技术之一。文中在分析SIP机制和常见的IPv4向IPv6过渡技术的基础上,提出了一种双协议栈与TURN相结合的解决方案。     

Research on network address mapping algorithm in IPv6 private network

Internet protocol version 6 (IPv6)-to-IPv6 network address translation (NAT66) is a new technology, which is proposed to provide the address independence benefit associated with IPv4-to-IPv4 NAT (NAT44) while minimizing the problems. Some corporate network managers may deploy NAT66 in their internal IPv6 network to hide their topology, to utilize multi-homing and so on. This paper introduces the checksum-neutral two-way network address mapping algorithm used in ANT66 to solve the problem of network translation from an IPv6 address to another in global systems engineering (GSE) mode and implements it both in a Linux host and a customer-provided equipment (CPE) router with netfilter/iptables. Meanwhile, this paper gives the experimental results in IPv6 network to show the performance.     

Migration cost optimization for service provider legacy network migration to software-defined IPv6 network

This paper studies a problem for seamless migration of legacy networks of Internet service providers to a software-defined networking (SDN)-based architecture along with the transition to the full adoption of the Internet protocol version 6 (IPv6) connectivity. Migration of currently running legacy IPv4 networks into such new approaches requires either upgrades or replacement of existing networking devices and technologies that are actively operating. The joint migration to SDN and IPv6 network is considered to be vital in terms of migration cost optimization, skilled human resource management, and other critical factors. In this work, we first present the approaches of SDN and IPv6 migration in service providers' networks. Then, we present the common concerns of IPv6 and SDN migration with joint transition strategies so that the cost associated with joint migration is minimized to lower than that of the individual migration. For the incremental adoption of software-defined IPv6 (SoDIP6) network with optimum migration cost, a greedy algorithm is proposed based on optimal path and the customer priority. Simulation and empirical analysis show that a unified transition planning to SoDIP6 network results in lower migration cost.     

IPv6过渡研究综述

IPv6已被确定为下一代互联网所使用的协议,现有网络向IPv6网络的过渡问题正成为研究热点.由于现有使用IPv4的互联网规模已经十分庞大,如何保护现有投资,使网络平稳过渡到IPv6是一个非常重要的问题.本文对IPv6过渡中的研究问题进行了综述,总结了IPv6过渡中使用的基本技术,对不同过渡场景下IPv6过渡技术的选择进行了比较和分析,对过渡中的安全问题进行了讨论.并分别从网络拓扑和协议层次角度对IPv6过渡进行了展望,指出了未来研究的方向.     

IPv6: the new Internet protocol

The current version of the Internet protocol (IP) is becoming obsolete because of its limited address space, lack of needed functionality and inadequate security features. The next generation of IP, called IPv6, has now been standardized and will carry TCP/IP networks and applications well into the next century. This article begins with an overview of the role of an internet protocol, looks at the motivation for developing a new version of the IP, and then examines some of its details     

Wireless Sensor Networks in IPv4/IPv6 Transition Scenarios

The wireless sensor networks (WSNs) concept was appeared in the middle of 90s and have been a subject under intensive research in the past few years. Several factors have contributed to this, but the potential for application of WSNs in almost every aspect of day-to-day life is the predominant one. This type of networks has been developed using proprietary solutions instead of standard solutions. More recently, the importance of standards motivated the use of IETF standards in WSNs, making the Internet integration easier. However, more efforts are necessary in order to provide a full integration. The WSNs use mainly IPv6 protocol, but the IPv4 is the predominant one in the Internet. As a consequence, IPv4 to IPv6 transition mechanisms must be provided to allow the interaction between all Internet connected devices independently of the supported IP version. It is also critical to provide a standard application interface to make easier the application development and independently of the hardware platform used. The RESTfull Web services can provide this standard interface. So, combine RESTfull Web services with IPv4 to IPv6 transition mechanisms can increase the WSN services dissemination. The transition mechanisms and the REST Web services are supported in the gateway in order to save the wireless sensor device resources’. The smartphone with Internet connectivity can also be the drive to the WSNs growth, because user-friendly applications can be used to retrieve and collect sensed data. This paper proposes a solution based on REST web services to permit the interaction between a mobile application and the IPv6 compliant WSN.     

对于IPv6网络中服务质量的研究

随着Internet的迅速发展,新型的网络应用对QoS的需求日益迫切,为了使网络能够支持已有的和新出现的多媒体服务与应用,保证通信与服务质量,让网络运营商控制网络资源及其使用,对于QoS的研究越来越重要。首先介绍QoS的相关概念,然后比较IPv4和IPv6对于服务质量的不同支持并具体研究IPv6下对于支持QoS机制的改进。     

IPv6

The Internet is changing - as it has to, because IPv4 does not support enough addresses for everyone alive today, let alone proliferating embedded and mobile devices. This paper discusses the advantages of Internet protocol version 6 (IPv6) over IPv4. The main advantage of IPv6 is the increase in the number of addresses available for networked devices, allowing, for example, each mobile phone and mobile electronic device to have its own IP address     

BGP4+协议研究与应用

边界网关协议(BGP)是当前互联网上应用最广泛的外部网关协议,用于在各自治域系统之间交换网络可达性信息。BGP4+在BGP版本4的基础上进行了扩展,使之携带的路由信息既能支持IPv4也能支持IPv6。介绍了BGP4+对BGP4协议的扩展、BGP4+软件的体系结构和工作过程。通过在IPv6网络环境中的应用,验证了BGP4+软件的邻居关系建立和路由重分发等功能。目前,BGP4+软件已经在基于VxWorks的路由交换机中实现。     

TCP/IP网络层协议的现状与发展前景

Internet技术已经进入了我们生活的方方面面,但随着人们对网络技术应用的日益增长与需求,Internet的TCP／IP协议IPv4已经不能适应网络的发展。本文指出了IPv4的局限性,阐述了下一代网络协议IPv6的特点和发展方向,以及IPv4协议向IPv6协议演进的解决方法。     

IPv6的安全性分析与研究

文章简要介绍了互联网协议的第6个版本(IPv6)提供的新特性,并且在研究现有IP网络中网络层存在的安全问题的基础上,详细讨论了新一代互联网协议IPv6的安全特性,并就IPv6在实施中可能存在的安全问题给出了细致的分析。