A wireless sensor network is a self-configuring network of mobile nodes connected by wireless links where the nodes have limited capacity and energy. In many cases, the application environment requires the design of an exclusive network topology for a particular case. Cluster-based network developments and proposals in existence have been designed to build a network for just one type of node, where all nodes can communicate with any other nodes in their coverage area. Let us suppose a set of clusters of sensor nodes where each cluster is formed by different types of nodes (e.g., they could be classified by the sensed parameter using different transmitting interfaces, by the node profile or by the type of device: laptops, PDAs, sensor etc.) and exclusive networks, as virtual networks, are needed with the same type of sensed data, or the same type of devices, or even the same type of profiles. In this paper, we propose an algorithm that is able to structure the topology of different wireless sensor networks to coexist in the same environment. It allows control and management of the topology of each network. The architecture operation and the protocol messages will be described. Measurements from a real test-bench will show that the designed protocol has low bandwidth consumption and also demonstrates the viability and the scalability of the proposed architecture. Our ccluster-based algorithm is compared with other algorithms reported in the literature in terms of architecture and protocol measurements.

/pdf/a-cluster-based-architecture-to-structure-the-topology-of-31vjlv7dc6.pdf

A Cluster-Based Architecture to Structure the Topology of Parallel Wireless Sensor Networks

The use of IPSec for securing communication between nodes of wireless and mobile AD-HOC networks has traditionally been considered difficult.We describe an IPSec-based architecture and implement for ad-hoc networks that can seamless handle node mobility and IP address change.The approach can be used for securing application traffic and mobility management and protocol traffic.A certificate-based approach that adds in dynamic key generation and distribution is used for creating security associations between nodes.

Securing AD-HOC networks using IPSec

The inter-operation among heterogeneous wireless networks is crucial to support ubiquitous mobility and seamless roaming. Handoffs across wireless networks in separate administrative domains should ensure uninterrupted service and authenticity of the entities involved. However, the re-authentication of a mobile node (MN) during a handoff across administrative domains typically involves several round trips to the home domain which produce long latencies. A new authentication protocol based on the use of proof tokens is presented in this paper which allows a MN to authenticate in a foreign domain without requiring communication with its home domain. Moreover, the foreign domain is only required to have a trust relationship with any one of MN's previously visited domains, and not necessarily with the home domain. Our objective is to provide an improved authentication approach for ubiquitous mobility and seamless roaming that does not compromise the security of the handoff process while providing low delays.

/pdf/inter-domain-authentication-for-seamless-roaming-in-4bjy2ylrs7.pdf

Inter-domain Authentication for Seamless Roaming in Heterogeneous Wireless Networks

In the very near future, we shall witness the coexistence of networks with heterogeneous link layer technologies. Such networks will naturally overlap each other and mobile users will need to frequently handoff among them for a number of reasons, including the quest for higher speeds and/or lower cost. Handoffs between such hybrid networks should be fast enough to support demanding applications, like multimedia content delivery, but also secure enough since different network providers are involved. This gets even more complicated considering that network providers may not simultaneously be multimedia service providers as it is the case today. In order to support security operations in a large scale the employment of an AAA protocol is mandated; however, this adds more delay to the handoff process. This article analyses and compares the prominent methods proposed so far that optimize the secure handoff process in terms of delay and are suitable for uninterruptible secure multimedia service delivery.

Survey of secure handoff optimization schemes for multimedia services over all-IP wireless heterogeneous networks

A system, method, and computer program product for establishing mutual trust on a per-deployment basis between two software modules For example, the first software module may be a Websphere (WS) Information Integrator (II) deployment instance, and the second software module may be a plugin instance By executing for this deployment an initial handshake between the software modules, both modules identify themselves and exchange digital certificates received from a trusted certification authority and respective public keys Subsequent communications for this deployment between the software modules proceed with each module encrypting its communications with the public key of the other module; thereby establishing mutual trust between the software modules for each deployment

System and method for establishing mutual trust on a per-deployment basis between two software modules

In this paper, we describe a secure cluster-routing protocol based on a multilayer scheme in ad hoc networks. This work provides scalable, threshold authentication scheme in ad hoc networks. We present detailed security threats against ad hoc routing protocols, specifically examining cluster-based routing. Our proposed protocol, called "authentication based on multilayer clustering for ad hoc networks" (AMCAN), designs an end-to-end authentication protocol that relies on mutual trust between nodes in other clusters. The AMCAN strategy takes advantage of a multilayer architecture that is designed for an authentication protocol in a cluster head (CH) using a new concept of control cluster head (CCH) scheme. We propose an authentication protocol that uses certificates containing an asymmetric key and a multilayer architecture so that the CCH is achieved using the threshold scheme, thereby reducing the computational overhead and successfully defeating all identified attacks. We also use a more extensive area, such as a CCH, using an identification protocol to build a highly secure, highly available authentication service, which forms the core of our security framework.

/pdf/authentication-based-on-multilayer-clustering-in-ad-hoc-46nuc91e4k.pdf

Authentication based on multilayer clustering in ad hoc networks

Mobile and wireless network technology is growing at a rapidly changing in nowadays. Ad hoc networks are a new wireless networking paradigm for mobile host. Ad hoc networks do not rely on any fixed infrastructure such as base stations as mobile switching. Mobile hosts rely on each other to keep the network connected. Ad hoc networks are often designed for specific environments and may have to operate with full availability even in difficult conditions. In this paper, we detail security threat against ad hoc routing protocols, specifically examining CBRP. Our authentication protocol based on CBRP(APBC) design an end-to-end message authentication scheme that relies on mutual trust between nodes in other clusters. The strategy of APBC is to take advantage of the multi-layer architecture that is designed for authentication protocol in CHs(Ciuster Head) using MCH(Main CH). We have proposed an authentication protocol that uses certificates contain Diffie-Hellman key agreement and a multi-layer architecture at the physical layer so that the number of encryption needed, thereby reducing the computational overheads and successfully defeated all identified attacks. We also use new authentication protocol schemes, such as MCH using Challenge-Response identification protocol to build a highly secure and highly available authentication protocol service, which forms the core of our security framework.

An authentication protocol based on CBRP in ad hoc network

Multimedia service in wireless IP networks, most delays and disruptions happening on the handoff of nodes are related to AAA. There were many studies on attempting to reduce the delay happening on the handoffs, and among them, there is the shadow registration as a suitable method for seamless mobility. Shadow registration is a method preparing against the following handoff by registering to all neighboring cells in prior, and is efficient in reducing the handoff delay. However, this method causes heavy traffic as well as the waste of resources. In order to prohibit the increase of traffic among the nodes while having the reducing effect on delay time, we proposes a technique and algorithm for composing region-based shadow registration (RSR) that provides seamless mobility, which does not cause traffic and the waste of resources. We have introduced a cell division scheme for minimal shadow registration and its algorithm. The results of the experiments performed by simulations displayed the identical effect of reducing the delay as shadow registration while significantly reducing the traffic among the nodes.

Efficient mobility management for multimedia service in wireless IP networks

Initial studies in mobile ad hoc routing has considered only the problem of providing efficient routing protocols for finding paths in very dynamic networks, without considering security. Because of this, ad hoc networks are much more vulnerable to security attacks than wired networks or infrastructure based wireless networks. Our proposed protocol incorporates an end-to-end authentication protocol that relies on a mutual trust between nodes in other clusters. The scheme strategy takes advantage of the threshold certification based end-to-end authentication protocol in large ad hoc networks. Our proposed authentication protocol uses certificates containing an asymmetric key using the threshold cryptography scheme. We present detailed security threats against multilayer cluster routing scheme. We successfully included the establishment of mutual end-to-end authentication, the prevention of node identity fabrication, and the secure distribution of provisional session keys using certification threshold key configuration by CCH (control cluster head).

TAKCS: threshold authentication key configuration scheme for multilayer cluster in mobile ad hoc networks

In wireless IP network, most delays and disruptions happening on the handoff of mobile nodes are related to registration This study proposes a technique and algorithm for composing RPSR (region-based predictive shadow registration) that provides seamless mobility, which does not cause traffic and the waste of resources We have introduced a cell division scheme for minimal shadow registration and a mobility estimation model based on inner regions in a cell The mobility estimation model is based on the reducible Markov chain and provides a new handoff probability for shadow registration This scheme can efficiently reduce delay and traffic between nodes for shadow registration

Keun-Ho Lee

Papers

Authentication based on multilayer clustering in ad hoc networks

An authentication protocol based on CBRP in ad hoc network

Efficient mobility management for multimedia service in wireless IP networks

TAKCS: threshold authentication key configuration scheme for multilayer cluster in mobile ad hoc networks

Region-based predictive shadow registration in wireless IP networks