改进的快速层次移动IPv6方案

F-HMIPv6有效地结合了快速切换和层次移动管理模型,首先介绍了F-HMIPV6的工作原理,然后分析了其中存在的问题。提出了一种改进的方案,该方案能进一步减少分组丢失,同时减少隧道建立的时间。     

Security analysis of fast inter-LMA domain handover scheme in proxy mobile IPv6 networks

The PMIPv6 is vulnerable to various security threats such as the DoS or redirect attacks. In this paper, we analyzed the Kang–Park & ESS-FH scheme, and proposed an Enhanced Security scheme for FPMIPv6 (ESS-FP). Based on the CGA method and the public key Cryptography, ESS-FP provides a strong key exchange and key independence in addition to improving the weaknesses of FPMIPv6. The proposed scheme was formally verified based on Ban-logic, and its handover latency was analyzed and compared with that of the Kang–Park scheme & ESS-FH. In addition, we proposed an inter-domain fast handover scheme for PMIPv6 using the proxy-based FPMIPv6.     

An enhanced cross-layer fast handover scheme for mobile IPv6 in the IEEE 802.16e networks

The IEEE 802.16e standard enhances the IEEE 802.16 for the mobility support. Mobile stations can move while receiving services, thus ongoing IP sessions may be maintained during a handover in the IEEE 802.16e. To reduce handover latency, the idea of cross-layer handover which incorporates layer 2 handover with IP layer has been devised. Various cross-layer handover schemes supporting fast handover in the IEEE 802.16e networks have been proposed. However, the problem of the conventional cross-layer fast handover schemes is that they are heavily influenced by the new address confirmation latency which is the most time-consuming procedure. In this paper, we propose an enhanced cross-layer fast handover scheme which is not susceptible to the new address confirmation latency. Detailed performance analysis is performed in terms of the signaling costs and the handover latencies to show the effectiveness of the proposed scheme compared with the conventional ones. The results of the performance evaluation confirm the effectiveness of the proposed scheme.     

改进的分层移动IPv6网络中快速切换方法

分层移动IPv6加入移动锚点来管理同一域内的移动，减少注册开销，从而能极大地减少切换延迟。但对于不同域间的移动，这种分层的结构并不能很好地解决切换延迟。提出一种分层移动IPv6网络中基于流的快速切换方法，将业务流状态分析与分层结构的思想有效地结合起来，有助于减少切换延迟以及丢包率。分析结果表明，该方法比现有的分层移动IPv6以及基于流的快速切换方法有着更好的性能。     

一种基于HMIPv6网络的域间切换改进方案

针对层次型移动IPv6网络的域间切换中的切换延迟和丢包问题,提出一种使用转交地址池改进原来DAD的检测方法来减少切换延迟,采用双路径通信方式降低丢包率的域间切换的改进方案。理论分析改进前后的切换延迟,使用NS-2工具对改进协议进行仿真。实验结果表明,改进方案在切换时延和丢包率方面表现出较好的优越性。     

移动WiMAX网络中跨层快速切换的研究*

针对移动WiMAX网络中,基于FMIPv6和DAD (duplicate address detection)机制的快速切换存在着开销大和检测时延长的问题,提出了一种跨层快速切换的策略。新策略在FMIPv6基础上,使用了mSCTP协议和ODAD (optimistic DAD)机制,成功地消除了FMIPv6协议中建立隧道的开销和减少了DAD地址检测的时延。仿真结果显示,新的切换策略将切换时延和分组丢失分别降低了65%和60%。     

基于移动IPv4/IPv6演进云计算框架设计*

为满足云计算平台的资源需求,充分利用异构网络资源建设云计算基础平台,设计了一种基于移动IP技术的IPv4/IPv6虚拟机在线迁移框架。该框架的实现需利用设计的云计算控制引擎为核心转换连接异构网络并在NAT-PT与隧道技术协作下完成。框架建立的网络结构适用于IPv4虚拟机与IPv6虚拟机之间的无缝迁移,并可向客户端跨IPv4/IPv6网络提供云计算服务。该框架可应用于IPv4/IPv6过渡期间云计算基础平台建设。     

基于HMIPv6的域间无缝切换方案

在利用移动IPv6协议进行节点的移动性管理过程中,切换问题是影响管理性能的最关键因素之一.因此,需对移动IPv6切换性能进行优化,HMIPv6正是对移动IPv6进行优化的一种协议.但在HMIPv6协议中还存在域间切换问题,在分析了域间切换问题产生的基础之上,给出了主要解决的思路,并提出了基于提前绑定更新选项的HMIPv6域间无缝切换方案--S-EBUO,以优化移动IPv6切换延迟和分组发送延迟,最后利用NS-2网络模拟器仿真实验证明了方案的可行性和优越性.     

基于MPLS的移动IPv6预测式快速切换方案

针对现有的多协议标签交换（MPLS）和IPv6融合方案存在建立标签交换路径（LSP）所需时延大、丢包率高和无错误恢复处理等问题,提出了一种新的方案。该方案通过定义预测信息表和预测式MPLS移交切换算法,使得移动节点（MN）在移交切换前,根据自身需要选择目的接入路由器（TAR）,以便TAR提前完成其与交叉路由器（CR）的LSP建设,从而实现MN移交切换时延的最小化;另外,所提预测式MPLS移交切换算法使得该方案具有错误恢复的能力;对LSP拓扑结构的改进和采用双播机制能够有效减少切换丢包率。理论和仿真分析表明,所提方案的切换时延和丢包率小于现有方案,且具有错误恢复的能力。     

移动IPv6的切换技术

移动节点在两个不同子网之间移动时将产生切换,移动节点的切换技术是保证实时业务服务质量的关键问题之一.目前,IETF正在开发快速切换和层次型移动IPv6来为移动IPv6提供切换机制.先简单介绍了移动IPv6的原理,在此基础上对移动IPv6的关键技术之一——移动节点越区切换技术作了详细的研究和分析,并给出了一个在层次型移动IPv6模型下的快速切换方案.     

A DHT-based fast handover management scheme for mobile identifier/locator separation networks

Several researches propose the identifer/locator separation architecture to tackle the scaling problems of today’s Internet routing and addressing system.And scalable and seamless mobility support is an important task in mobile identifer/locator separation networks.In this paper,by analyzing the features,such as direct separation,flexible mapping and identifer replacement,we show that the new architecture delivers data packets more efciently and protects location privacy better than traditional mobile IP networks,and is able to implement soft handover conveniently.Then we present a distributed Hash table(DHT)based fast handover management(DFHM)scheme for the new architecture,which improves the reactive handover mode of FMIPv6 and eliminates the duplicate address detection(DAD)and return routability(RR)processes in MIPv6.And we propose a generic analysis framework for handover management.Further,we demonstrate the validity of our framework by simulation and quantifcationally study the efects of network scale and movement velocity.The results show that DFHM has good scalability and low handover latency,and has great advantages in the signaling cost and fast mobility support.     

A DHT-based fast handover mobile identifier/locator management scheme for separation networks

Several researches propose the identifier/locator separation architecture to tackle the scMing prob- lems of today＇s Internet routing and addressing system. And scalable and seamless mobility support is an important task in mobile identifier/locator separation networks. In this paper, by analyzing the features, such as direct separation, flexible mapping and identifier replacement, we show that the new architecture delivers data packets more efficiently and protects location privacy better than traditional mobile IP networks, and is able to implement soft handover conveniently. Then we present a distributed Hash table （DHT） based fast handover management （DFHM） scheme for the new architecture, which improves the reactive handover mode of FMIPv6 and eliminates the duplicate address detection （DAD） and return routability （RR） processes in MIPv6. And we propose a generic analysis framework for handover management. Further, we demonstrate the validity of our framework by simulation and quantificationMly study the effects of network scale and movement velocity. The results show that DFHM has good scalability and low handover latency, and has great advantages in the signaling cost and fast mobility support.     

基于IPv6的移动自组网移动切换方案*

提出了一种基于IPv6的移动自组网移动切换方案IMHM.在没有基础设施的MANET中,IMHM实现了移动节点家乡地址的永久性,即用户采用移动节点的家乡地址与移动节点保持通信,无须参与移动切换过程,移动节点的移动过程及转交地址变更过程对用户透明.对AODV和IMHM的移动切换代价和移动切换延迟等性能参数进行了分析比较,分析结果表明IMHM的移动切换代价更小、移动切换延迟更短.     

A new flow-based fast handover method for Mobile IPv6 network with route optimization

Flow-based fast handover method is designed for Mobile IPv6 network. The FFHMIPv6 uses the flow state information to redirect the traffic flow to a new location. This makes it possible that the reception of packets simultaneously with the BU registration process, thus minimizing the delay experienced in the handover. But it does not consider the route optimization. In this paper, a new flow-based fast handover method is proposed which enhanced the existing flow-based fast handover method to support route optimization. The analysis shows that this scheme has a better performance than the existing FFHMIPv6 scheme.     

FSH scheme for high-speed handover and anti-MITM on mobile computing

As an IEEE 802.11-based mobile computing system has been established as the base structure of high-speed wireless network, interest in mobility and security of mobile terminal has increased. To reinforce security, 802.1x and 802.11i using EAP were used in standardized instrument. But it was found to be unsuitable for real time multimedia service because of the time delay. In this paper, we suggest Fast and Secure Handover (FSH) scheme which minimizes time delay in handover authentication process and prevents MITM (Man in the Middle) attack. This scheme carries out re-association process which is necessary for high-speed handover using Inter Access Point Protocol (IAPP) and Old_MSK. To make existing 802.1x-based user certification procedure suitable for high-speed handover, the terminal and pre-handover-accessed Old_AP make Rough_AP to prevent MITM. To do this, Old_AP uses the Old_MSK-used encrypted method which was used to encrypt MAC information of the mobile terminal and Old_AP. Hereby, FSH has been developed to become high-speed handover which has the 802.1x-supported security level and the skill of preventing MITM. In this paper, by simulation (NS-2), we confirmed the superiority in streaming service such as decreased handover time delay and VoIP.     

移动IPv6切换性能测量研究*

在分析移动IPv6切换过程的基础上,设计了移动切换性能测量指标,提出了移动IPv6切换性能测量方法,基于该方法设计并实现了移动IPv6切换性能测量原型系统.该系统能测量从网络层到应用层的移动切换性能,解决了现有测量工具部署繁琐的问题.用该系统在实际的测试网上进行测试实验,实验发现移动IPv6切换对各种网络应用造成了不良影响,而且切换性能随着网络层次的增加越来越差,从网络层往上到应用层切换对网络性能的影响呈不断扩大的趋势.     

异构无线网络的快速垂直切换改进方案

异构无线网络间的切换延迟是影响无线网络融合实时应用的重要问题。采用IEEE802.21标准所定义的媒介独立切换功能（MIHF）,基于FVHMIPv6提出了一种新的快速垂直切换方案,并详细描述了该方案的执行过程。最后的切换分析表明,结合了MIHF的FVHMIPv6方案可以优化和加强原先FVHMIPv6的性能。     

基于HMIPv6的微观快速切换方案

本文基于HMIPv6协议,将组播技术应用于移动锚点(MAP),提出了一个新型微观快速切换方案,在切换过程中它可大大降低服务中断现象.本文最后通过NS-2仿真并与HMIPv6协议进行性能分析比较,结果表明本方案在快速接收数据包等方面具有较好的性能.     

移动云计算中基于身份的轻量级加密方案

针对移动云计算中数据安全和移动用户的隐私保护问题,结合在线离线和外包解密技术,对基于身份加密机制（IBE）中加密和解密算法进行扩展,提出了一种可外包解密的基于身份在线离线加密方案,并证明其安全性,构造出适合于移动云计算环境中轻量级设备保护隐私数据的方案。为了减少移动终端运行IBE的加密和解密开销,利用在线离线技术将IBE的加密分解为离线和在线两个阶段,使得移动设备仅需执行少量简单计算即可生成密文;在此基础上,利用外包解密技术,修改IBE的密钥生成算法和解密算法,增加一个密文转化算法,将解密的大部分复杂计算外包给云服务器,移动设备仅计算一个幂乘运算即可获得明文。与现有IBE方案的性能相比,该方案具有较少的加解密开销,适合于轻量级移动设备。     

移动云计算环境中基于代理的可验证数据存储方案

现有云计算可验证数据存储协议无法直接应用于终端存储和计算能力有限的移动计算环境。针对该问题,提出移动计算环境下基于代理的可验证云存储协议,在终端和云服务器之间引入一个半可信的安全计算代理,利用代理来帮助移动终端用户完成计算密集的操作,从而使得可验证数据存储方案可用于移动计算环境。提出一个具体的可验证数据存储协议,形式化证明了所提协议满足随机预言机模型下的选择明文攻击(CPA)安全,量化分析结果表明协议设计适用于移动计算环境,符合设计目标。