Secure Mobile Networking
Abstract:
This project produced a Secure Mobile Network SMN system for secure enclaves or virtual networks among mobile workstations, an integrated Mobile-IPIPSEC system in which Mobile Nodes use 2-way tunnels to securely tunnel packets to the Home Agent. A key focus was tying Mobile-IP and IPSEC directly together. Solutions for distributed access control protocols were designed. Redundant systems overcame single-point-of-failure problems in current Mobile-IP architectures. The SMN multicast ad hoc routing ref IEEE 802.11 protocol uses a source Mobile Node sending a multicast discovery packet to do an expanding ring search for another destination ad hoc host across any number of participating mobile hosts acting as routers. A multicast discovery packet is forwarded until it reaches either the desired Mobile Node or any Agent. SMN Mobile IP works in the multi-hop case by considering the Home Agent one more remote ad hoc node, which may be searched. The Home Agent Redundancy Protocol was developed for sharing mobile registration state between Home Agents. The agents tunnel in parallel to Mobile Nodes, opaque to Mobile-IP. Beacons were implemented using signatures. Signatures were also used to replace Mobile-IPs own authentication system. The concepts were tested on a small wireless network at Portland State.