The locator/ID separation paradigm has been widely discussed to resolve the serious scalability issue that today's Internet is facing. Many researches have been carried on with this issue to alleviate the routing ...The locator/ID separation paradigm has been widely discussed to resolve the serious scalability issue that today's Internet is facing. Many researches have been carried on with this issue to alleviate the routing burden of the Default Free Zone (DFZ), improve the traffic engineering capabilities and support efficient mobility and multi-homing. However, in the locator/ID split networks, a third party is needed to store the identifier-to-locator pairs. How to map identifiers onto locators in a scalable and secure way is a really critical challenge. In this paper, we propose SS-MAP, a scalable and secure locator/ID mapping scheme for future Internet. First, SS-MAP uses a near-optimal DHT to map identifiers onto locators, which is able to achieve the maximal performance of the system with reasonable maintenance overhead relatively. Second, SS-MAP uses a decentralized admission control system to protect the DHT-based identifier-to-locator mapping from Sybil attacks, where a malicious mapping server creates numerous fake identities (called Sybil identifiers) to control a large fraction of the mapping system. This is the first work to discuss the Sybil attack problem in identifier-to-locator mapping mechanisms with the best knowledge of the authors. We evaluate the performance of the proposed approach in terms of scalability and security. The analysis and simulation results show that the scheme is scalable for large size networks and can resistant to Sybil attacks.展开更多
Current mobility management solutions based on ID/Locator separation are not easily deployed and cannot solve routing scalability and mobility problems. This paper proposes a novel network architecture based on ID/Loc...Current mobility management solutions based on ID/Locator separation are not easily deployed and cannot solve routing scalability and mobility problems. This paper proposes a novel network architecture based on ID/Locator separation and suggests a new mobility management solution. This solution solves the problem of scalability in the network and also provides better support for mobility. It can be easily deployed because no modification of the mobile host’s protocol stack is required. The identifier contains some routing information; so the solution provides intrinsic interworking with traditional mobile hosts. Because the mapping systems are distributed to the edge networks, robustness of the whole system is enhanced and handover delay is decreased.展开更多
Legacy IP address-based access control has met many challenges, because the network nodes cannot be identified accurately based on their variable IP addresses. “Locator/Identifier Split” has made it possible to buil...Legacy IP address-based access control has met many challenges, because the network nodes cannot be identified accurately based on their variable IP addresses. “Locator/Identifier Split” has made it possible to build a network access control mechanism based on the permanent identifier. With the support of “Locator/Identifier Split” routing and addressing concept, the Identifier-based Access Control (IBAC) makes net-work access control more accurate and efficient, and fits for mobile nodes’ access control quite well. Moreover, Self-verifying Identifier makes it possible for the receiver to verify the packet sender’s identity without the third part authentication, which greatly reduces the probability of “Identifier Spoofing”.展开更多
To solve the problem of multiple moving sources passive location, a novel blind source separa- tion (BSS) algorithm based on the muhiset canonical correlation analysis (MCCA) is presented by exploiting the differe...To solve the problem of multiple moving sources passive location, a novel blind source separa- tion (BSS) algorithm based on the muhiset canonical correlation analysis (MCCA) is presented by exploiting the different temporal structure of uncorrelated source signals first, and then on the basis of this algorithm, a novel multiple moving sources passive location method is proposed using time difference of arrival (TDOA) and frequency difference of arrival (FDOA) measurements. The key technique of this location method is TDOA and FDOA joint estimation, which is based on BSS. By blindly separating mixed signals from multiple moving sources, the multiple sources location problem can be translated to each source location in turn, and the effect of interference and noise can also he removed. The simulation results illustrate that the performance of the MCCA algorithm is very good with relatively light computation burden, and the location algorithm is relatively simple and effective.展开更多
Electrical insulation faults produce partial discharges(PD),which can be analysed to identify specific types of defects.PD clustering is a widely used method to identify PD sources,although its success depends largely...Electrical insulation faults produce partial discharges(PD),which can be analysed to identify specific types of defects.PD clustering is a widely used method to identify PD sources,although its success depends largely on the feature maps used.In this paper,three widely used feature maps,or separation maps,are compared:chromatic,energy wavelet with principal component analysis(EW-PCA),and time-frequency(TF).To compare and evaluate,five scenarios with multi-PD environments with noise were developed.The clustering ability of the maps was evaluated using two performance indicators:intercluster distance and intracluster distance.The results indicate that the EW-PCA map performed the best in all scenarios,correctly identifying the largest number of data points and producing the clearest and most distinct clusters.The TF map created distinct clusters in several scenarios,but not all.The chromatic map created distinct clusters in all scenarios but was not as well defined as the other two separation maps.Given the results,it is important in fieldwork to use a wide range of PD clustering,accompanied by performance metrics that support a less biased decision tailored to the test object.展开更多
基金supported in part by National Key Basic Research Program of China (973 program) under Grant No.2007CB307101,2007CB307106National Key Technology R&D Program under Grant No.2008BAH37B03+2 种基金Program of Introducing Talents of Discipline to Universities (111 Project) under Grant No. B08002National Natural Science Foundation of China under Grant No.60833002China Fundamental Research Funds for the Central Universities under Grant No.2009YJS016
文摘The locator/ID separation paradigm has been widely discussed to resolve the serious scalability issue that today's Internet is facing. Many researches have been carried on with this issue to alleviate the routing burden of the Default Free Zone (DFZ), improve the traffic engineering capabilities and support efficient mobility and multi-homing. However, in the locator/ID split networks, a third party is needed to store the identifier-to-locator pairs. How to map identifiers onto locators in a scalable and secure way is a really critical challenge. In this paper, we propose SS-MAP, a scalable and secure locator/ID mapping scheme for future Internet. First, SS-MAP uses a near-optimal DHT to map identifiers onto locators, which is able to achieve the maximal performance of the system with reasonable maintenance overhead relatively. Second, SS-MAP uses a decentralized admission control system to protect the DHT-based identifier-to-locator mapping from Sybil attacks, where a malicious mapping server creates numerous fake identities (called Sybil identifiers) to control a large fraction of the mapping system. This is the first work to discuss the Sybil attack problem in identifier-to-locator mapping mechanisms with the best knowledge of the authors. We evaluate the performance of the proposed approach in terms of scalability and security. The analysis and simulation results show that the scheme is scalable for large size networks and can resistant to Sybil attacks.
基金funded by the European Commission funded ICT-FP7 IP Project EFIPSANS under Grant No. INFSO-ICT-215549the National Basic Research Program of China ("973"Program) under Grant No. 2009CB320504
文摘Current mobility management solutions based on ID/Locator separation are not easily deployed and cannot solve routing scalability and mobility problems. This paper proposes a novel network architecture based on ID/Locator separation and suggests a new mobility management solution. This solution solves the problem of scalability in the network and also provides better support for mobility. It can be easily deployed because no modification of the mobile host’s protocol stack is required. The identifier contains some routing information; so the solution provides intrinsic interworking with traditional mobile hosts. Because the mapping systems are distributed to the edge networks, robustness of the whole system is enhanced and handover delay is decreased.
文摘Legacy IP address-based access control has met many challenges, because the network nodes cannot be identified accurately based on their variable IP addresses. “Locator/Identifier Split” has made it possible to build a network access control mechanism based on the permanent identifier. With the support of “Locator/Identifier Split” routing and addressing concept, the Identifier-based Access Control (IBAC) makes net-work access control more accurate and efficient, and fits for mobile nodes’ access control quite well. Moreover, Self-verifying Identifier makes it possible for the receiver to verify the packet sender’s identity without the third part authentication, which greatly reduces the probability of “Identifier Spoofing”.
基金Supported by the National High Technology Research and Development Program of China(No.2009AAJ116,2009AAJ208,2010AA7010422)the National Science Foundation for Post-Doctoral Scientists of China(No.20080431379,200902671)the Hubei Natural Science Foundation(No.2009CDB031)
文摘To solve the problem of multiple moving sources passive location, a novel blind source separa- tion (BSS) algorithm based on the muhiset canonical correlation analysis (MCCA) is presented by exploiting the different temporal structure of uncorrelated source signals first, and then on the basis of this algorithm, a novel multiple moving sources passive location method is proposed using time difference of arrival (TDOA) and frequency difference of arrival (FDOA) measurements. The key technique of this location method is TDOA and FDOA joint estimation, which is based on BSS. By blindly separating mixed signals from multiple moving sources, the multiple sources location problem can be translated to each source location in turn, and the effect of interference and noise can also he removed. The simulation results illustrate that the performance of the MCCA algorithm is very good with relatively light computation burden, and the location algorithm is relatively simple and effective.
基金support of the Secretaría Nacional de Ciencia,Tecnología e Innovación(SENACYT)under Grant IDDSE19-007the Agencia Nacional de Investigación y Desarrollo(ANID)under Grants Fondecyt 1230135 and Fondef TA24I10002the Sistema Nacional de Investigación(SNI)of Panama under Grant 16-2021.
文摘Electrical insulation faults produce partial discharges(PD),which can be analysed to identify specific types of defects.PD clustering is a widely used method to identify PD sources,although its success depends largely on the feature maps used.In this paper,three widely used feature maps,or separation maps,are compared:chromatic,energy wavelet with principal component analysis(EW-PCA),and time-frequency(TF).To compare and evaluate,five scenarios with multi-PD environments with noise were developed.The clustering ability of the maps was evaluated using two performance indicators:intercluster distance and intracluster distance.The results indicate that the EW-PCA map performed the best in all scenarios,correctly identifying the largest number of data points and producing the clearest and most distinct clusters.The TF map created distinct clusters in several scenarios,but not all.The chromatic map created distinct clusters in all scenarios but was not as well defined as the other two separation maps.Given the results,it is important in fieldwork to use a wide range of PD clustering,accompanied by performance metrics that support a less biased decision tailored to the test object.