HIMALIS: Heterogeneity Inclusion and Mobility Adaptation through Locator ID Separation in New Generation Network

Kafle, Ved P.; Inoue, Masugi

doi:10.1587/transcom.e93.b.478

Cited by 48 publications

(37 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Conceived within the AKARI project [12], the HI-MALIS architecture [13], [14] provides identifier/locator separation with less footprint than the solutions mentioned above, so it is suitable to be used in low power devices, like in sensor networks [15]. However, it identifies entities by their devices and does not include privacy protection or mutual end-to-end authentication and authorization.…”

Section: Related Workmentioning

confidence: 99%

Empowering Security and Mobility in Future Networks with an Identity-Based Control Plane

Martínez-Juliá

Skarmeta

2014

IEICE Trans. Commun.

View full text Add to dashboard Cite

SUMMARYCurrent network technologies, mainly represented by the Internet, have demonstrated little capacity to evolve because of the strict binding of communications to identifiers and locators. While locator namespaces represent the position of communication participants in the graph of a specific protocol, unstructured/plain identifiers represent the position of communications participants in the global network graph. Although they are valid for forwarding packets along communication paths, both views fail to fully represent the actual entities behind communications beyond a simple vertex. In this paper we introduce and evaluate an identitybased control plane that resolves these problems by abstracting communications from identifiers and locators and by using identities to achieve enhanced security, and mobility management operations. This identity-based control plane can then be integrated into different network architectures in order to incorporate the features it provides. This facilitates the evolution capacity of those architectures that separate the information transmission concerns (networking, routing), from end-to-end aspects like security and mobility management.

show abstract

Section: Related Workmentioning

confidence: 99%

Empowering Security and Mobility in Future Networks with an Identity-Based Control Plane

Martínez-Juliá

Skarmeta

2014

IEICE Trans. Commun.

View full text Add to dashboard Cite

show abstract

“…The Heterogeneity Inclusion and Mobility Adaptation through Locator ID Separation (HIMALIS) [18,23,25] also follows the separation of identifiers and locators but, in contrast with LISP and HIP, it provides a higher level of routing scalability while providing an independent node identification scheme, which is different from IP and supports sensor networks (e.g. the Internet of Things).…”

Section: Current Architecture Proposalsmentioning

confidence: 99%

“…For the mobility and multihoming module, we start by reusing the mechanisms used in other network architectures like Mobile IP [11], HIMALIS [18], or MOFI [17]. The policy engine is provided by a XACML [27] module, like XACML-Light [10], and the topology management can be provided by reusing one of the many existing topology engines.…”

Section: Initial Viability Analysismentioning

confidence: 99%

Towards a Secure Network Virtualization Architecture for the Future Internet

Martínez-Juliá

Skarmeta

Galis

2013

The Future Internet

View full text Add to dashboard Cite

Abstract. In this paper we discuss the Global Virtualization Architecture (GVA) that enables communications between network entities according to the way they refer to each other rather than understanding the constraints of particular networks. Our approach is to instantiate a virtual network that is based on identities of network entities and their demands on security and network capabilities. An entity may be physical e.g. a human user, a device, or any thing, or abstract, such as a computer program, service, group, or role. Each entity is identified by a set of attributes so that connections can be 1 to 1, 1 to many, or many to many. We call this a Virtual Group Network (VGN). VGNs are independent of location and device, and their properties may change with time as entities move.

show abstract

“…While each of the above protocols tries to address a specific issue (viz. routing scalability, secured mobility, and multihoming) of the current Internet, HIMALIS (Heterogeneity Inclusion and Mobility Adaptation through Locator ID Separation) [4] proposes a generic architecture, based on the ID/locator split concept, that can natively support mobility, multihoming, scalable backbone routing and heterogeneous protocols in the network layer. These proposals require retrieving ID/locator mapping records to find corresponding locators for the given names or IDs before forwarding packets into the network.…”

Section: Introductionmentioning

confidence: 99%

Design and Implementation of Security for HIMALIS Architecture of Future Networks

Kafle

Inoue

et al. 2013

IEICE Trans. Inf. & Syst.

Self Cite

View full text Add to dashboard Cite

SUMMARYFor flexibility in supporting mobility and multihoming in edge networks and scalability of the backbone routing system, future Internet is expected to be based on the concept of ID/locator split. Heterogeneity Inclusion and Mobility Adaptation through Locator ID Separation (HIMALIS) has been designed as a generic future network architecture based on ID/locator split concept. It can natively support mobility, multihoming, scalable backbone routing and heterogeneous protocols in the network layer of the new generation network or future Internet. However, HIMALIS still lacks security functions to protect itself from various attacks during the procedures of storing, updating, and retrieving of ID/locator mappings, such as impersonation attacks. Therefore, in this paper, we address the issues of security functions design and implementation for the HIMALIS architecture. We present an integrated security scheme consisting of mapping registration and retrieval security, network access security, communication session security, and mobility security. Through the proposed scheme, the hostname to ID and locator mapping records can be securely stored and updated in two types of name registries, domain name registry and host name registry. Meanwhile, the mapping records retrieved securely from these registries are utilized for securing the network access process, communication sessions, and mobility management functions. The proposed scheme provides comprehensive protection of both control and data packets as well as the network infrastructure through an effective combination of asymmetric and symmetric cryptographic functions. key words: ID/locator split architecture, security, new generation network, future network

show abstract

HIMALIS: Heterogeneity Inclusion and Mobility Adaptation through Locator ID Separation in New Generation Network

Cited by 48 publications

References 12 publications

Empowering Security and Mobility in Future Networks with an Identity-Based Control Plane

Empowering Security and Mobility in Future Networks with an Identity-Based Control Plane

Towards a Secure Network Virtualization Architecture for the Future Internet

Design and Implementation of Security for HIMALIS Architecture of Future Networks

Contact Info

Product

Resources

About