Security issues in a CDPD wireless network

The Cellular Digital Packet Data (CDPD) system provides a digital data overlay for the AMPS cellular system. CDPD can operate either in dedicated or non-dedicated channel mode at the base station. This paper examines the performance of CDPD over fading channels for both dedicated and non-dedicated channels with Nakagami-faded interference.

Cellular Digital Packet Data (CDPD) is a technology that provides digital packet-switched data services through standard analog cellular channels. CDPD is implemented as an overlay to existing cellular networks allowing data to be sent in packets during idle times on the cellular voice channels. This overlay implementation makes use of existing cellular infrastructure, simultaneously transmitting voice and data from the same device. A cellular communication network has significant advantages over its wireline counterparts. Mobility and ease of use are two particularly attractive features to a large population of field employees. Based upon well known world standards, CDPD will provide connectivity anywhere anytime-a true realization of the well sought dream of having information at your fingertips. >

A web-based camera (webcam) is expected to enhance construction site monitoring, which may result in better project control. However, in most cases, webcams are located on the outside of a building because their mobility is limited by cable wiring, thus occasionally the view of the camera is blocked as the project develops. If a webcam is integrated with emerging wireless network technologies such as IEEE 802 or Cellular Digital Packet Data (CDPD), construction professionals may be able to utilize the webcam to monitor interior construction operations without worrying about getting the network cables wired on the congested and dynamic construction job site. Especially, the CDPD technology should enable the webcam to transmit captured photos from any construction site as far as the cellular phone service is available. However, with the speed of CDPD (19.2 Kilobits per second), it would take as long as 6 minutes to send one Mega pixel digital image. One may ask if construction professionals could figure out operations implemented at the job site by observing a 6 minute interval time-lapsed photo set. How many mistakes should we anticipate when interpreting the time-lapsed photo set with this time interval? To what extent can the frame rate of the webcam be lowered for monitoring construction operations at the job site? To answer these questions, we then produced time-lapsed photos of brickwork at three different construction sites with various time intervals and investigated error rates in identifying construction crew’s productivity using these time-lapsed photos. This paper presents a preliminary result of our investigation.

Early Cellular Digital Packet Data (CDPD) deployments have been a valuable learning experience for the cellular carriers that established them. The purpose of this paper, is to discuss the practical aspects of CDPD systems, based on such experience. Guidelines for the planning, deployment and management of cellular data networks are presented. This paper is intended for cellular service providers but may also benefit application developers who wish to understand the issues faced by carriers with respect to wireless data. The specific topics covered in this paper include deployment strategies, frequency planning and customer engineering. The conclusion emphasizes the importance of a well-developed strategy, coupled with the adaptability to meet the changing needs of an evolving customer base.

The Cellular Digital Packet Data (CDPD) system is the first public wireless data ever deployed in the US. As its traffic continues to grow, potential new customers require to know the platform's quality-of-service (QoS) performance data prior to subscribing to the service. Consequently, network planners are searching for a simple model which can provide QoS analysis instantly, rather than conducting long (and costly) simulations. This paper provides such model. CDPD uses a random-access MAC layer protocol known as the DSMA/CD, to control the users packet transmission on the reverse link. In general, the success of the transmitted packets, as well as the delay incurred, depends heavily on both: the efficiency with which the DSMA/CD controls packet collisions, and the degree of error-free reception provided by the physical layer. Therefore, one must consider the joint operation of the two in order to produce quotable realistic traffic performance figures. This paper focuses on the joint operation of the two named layers.

We present an end to end adaptive video coding and transmission system that is designed for the Cellular Digital Packet Data (CDPD) wireless networks. The proposed system consists of (1) an embedded wavelet bit-plane coding algorithm, which is capable of adapting the compression ratio to the available bandwidth; (2) an efficient and error resilient fixed-length packetization scheme based on randomization in the wavelet domain; and (3) a feedback rate control algorithm, which is capable of estimating the available network bandwidth based on the acknowledgement information received by the server. Experimental results show that our system achieves good perceptual quality while maintaining high bandwidth utilization.

There is no doubt about it: Asynchronous Transfer Mode (ATM) traffic will soon connect to the wireless network. Its characteristics are very well adapted to provide a well-balanced mix of voice and data communications. The question here is where will adaptation layers be processed? Should the Wireless Carrier be burdened with converting ATM-based traffic in other interfaces such as Cellular Digital Packet Data, a solution leading to multiple and possibly unmanageable gateway functions? Or should an Air Interface be developed to carry ATM traffic? Pushing ATM adaptation layers closer to the point of consumption of voice, data or video holds many advantages. This paper attempts to shine some light on the subject.

At Carnegie Mellon University in Pittsburgh, staff and students are using mobile computers for various tasks such as transferring lecture notes, sending e-mails, or surfing the net. This possible due to the installation of a wireless network which will cover all 28 academic and administrative buildings on the 40-hectare campus, and provide service to 10000 people. As long as they are on campus, the university community will be able to take advantage of the network. The high speed wireless infrastructure installed at Carnegie Mellon is called Wireless Andrew. Started as a National Science Foundation-funded research network to support Carnegie Mellon's wireless research initiative, the network originally provided coverage in seven campus buildings. The challenges in building such a large network are far from trivial. They include designing the network so that coverage blankets the entire campus, providing enough capacity to handle the campus-wide traffic load. Further, the network must provide highly reliable service. It builds on the university's wired network infrastructure, which currently provides 10-Mb/s and 100-Mb/s Ethernet service. To supply high-speed wireless service to the campus, Lucent WaveLAN equipment has been installed, which uses direct sequence spread-spectrum radio to provide a raw data rate of 2 Mb/s. For wireless access off campus or otherwise out of the range of the WaveLAN network, cellular digital packet data is used.

Cellular digital packet data (CDPD) utilizes sleep mode mechanism to conserve the power of mobile end systems (M-ESs). A timer called T203 determines how quick an M-ES enters the sleep mode, and another timer called T204 determines how often the M-ES wakes up. A large T204 value and a small T203 value can effectively reduce the power consumption at the cost of degrading the frame transmission performance, i.e., more lost frames, longer frame waiting times, and larger waiting variance. When the power consumption budget is determined in a CDPD system design, our study provides guidelines to determine the timer values as well as the buffer size to optimize the frame transmission performance.

Mobile IP is a proposed standard protocol that builds on the Internet Protocol by making mobility transparent to applications and higher level protocols like TCP. Mobile IP (RFC 2002) is a standard proposed by a working group within the Internet Engineering Task Force; it allows the mobile node to use two IP addresses: a fixed home address and a care-of address that changes at each new point of attachment. The article presents the Mobile IP standard in moderate technical detail and points the reader toward a wealth of further information. Is also describes how Mobile IP will change with IP version 6, the product of a major effort within the IETF to engineer an eventual replacement for the current version of IP. Although IPv6 will support mobility to a greater degree than IPv4, it will still need Mobile IP to make mobility transparent to applications and higher level protocols such as TCP. There is a great deal of interest in mobile computing and apparently in Mobile IP as a way to provide for it. A quick Web search for items related to Mobile IP returned over 60,000 hits-impressive even given the notorious lack of selectivity for such procedures. Mobile IP forms the basis either directly or indirectly of many current research efforts and products. The Cellular Digital Packet Data (CDPD), for example, has created a widely deployed communications infrastructure based on a previous draft specification of the protocol. In addition, most major router vendors have developed implementations for Mobile IP.

Hadoop framework has been evolved to manage big data in cloud. Hadoop distributed file system and MapReduce, the vital components of this framework, provide scalable and fault-tolerant big data storage and processing services at a lower cost. However, Hadoop does not provide any robust authentication mechanism for principals’ authentication. In fact, the existing state-of-the-art authentication protocols are vulnerable to various security threats, such as man-in-the-middle, replay, password guessing, stolen-verifier, privileged-insider, identity compromization, impersonation, denial-of-service, online/off-line dictionary, chosen plaintext, workstation compromization, and server-side compromisation attacks. Beside these threats, the state-of-the-art mechanisms lack to address the server-side data integrity and confidentiality issues. In addition to this, most of the existing authentication protocols follow a single-server-based user authentication strategy, which, in fact, originates single point of failure and single point of vulnerability issues. To address these limitations, in this paper, we propose a fault-tolerant authentication protocol suitable for the Hadoop framework, which is called the efficient authentication protocol for Hadoop (HEAP). HEAP alleviates the major issues of the existing state-of-the-art authentication mechanisms, namely operating-system-based authentication, password-based approach, and delegated token-based schemes, respectively, which are presently deployed in Hadoop. HEAP follows two-server-based authentication mechanism. HEAP authenticates the principal based on digital signature generation and verification strategy utilizing both advanced encryption standard and elliptic curve cryptography. The security analysis using both the formal security using the broadly accepted real-or-random (ROR) model and the informal (non-mathematical) security shows that HEAP protects several well-known attacks. In addition, the formal security verification using the widely used automated validation of Internet security protocols and applications ensures that HEAP is resilient against replay and man-in-the-middle attacks. Finally, the performance study contemplates that the overheads incurred in HEAP is reasonable and is also comparable to that of other existing state-of-the-art authentication protocols. High security along with comparable overheads makes HEAP to be robust and practical for a secure access to the big data storage and processing services.

For conventional authentication protocols, distribution of session keys and maintenance of large databases are serious problems especially for large-scale wireless networks. ID-based authentication protocol eliminates the problem while it contributes the heavy computation load. We propose a hybrid end-to-end authentication and key agreement (AKA) protocol which provides authentication and key exchange between both end entities. It not only eliminates the drawbacks of conventional protocols but also reduces the computation load. Services of message confidentiality, caller ID confidentiality, service request intractability, and fraud control are provided. Roaming and handover, are also taken into consideration here.

SE-AKA: A secure and efficient group authentication and key agreement protocol for LTE networks

Most of the existing authentication protocols are based on either asymmetric cryptography like public-key infrastructure (PKI) or symmetric cryptography. The PKI-based authentication protocols are strongly recommended for solving security issues in VANETs. However, they have following shortcomings: (1) lengthy certificates lead to transmission and computation overheads, and (2) lack of privacy-preservation due to revealing of vehicle identity, communicated in broadcasting safety-message. Symmetric cryptography based protocols are faster because of a single secret key and simplicity; however, it does not ensure non-repudiation. In this paper, we present an Efficient, Scalable and Privacy-preserving Authentication (ESPA) protocol for secure vehicular ad hoc networks (VANETs). The protocol employs hybrid cryptography. In ESPA, the asymmetric PKI based pre-authentication and the symmetric hash message authentication code (HMAC) based authentication are adopted during vehicle to infrastructure (V2I) and vehicle to vehicle (V2V) communications, respectively. Extensive simulations are conducted to validate proposed ESPA protocol and compared with the existing work based on PKI and HMAC. The performance analysis showed that ESPA is more efficient, scalable and privacy-preserving secured protocol than the existing work.

The Internet of Vehicles (IoV) is becoming an interesting topic among researchers and it has emerged as a rapidly advancing field within Vehicular Ad-hoc Networks, facilitating intelligent communication between vehicles and the cloud through the integration of Internet of Things (IoT) technologies. The IoV surroundings face serious challenges due to the highly interrelated nature of vehicles and infrastructure in certifying privacy and security. Traditional approaches to authentication lack the strength required to protect against developing fears, leaving systems vulnerable to attacks. This survey addresses the gap by employing formal analysis approaches to prove authentication protocols, targeting to reinforce safety and confidentiality in IoV systems. The IoV communication model consists of Vehicle-to-Vehicle, Vehicle-to-Infrastructure, Vehicle-to-Personal Devices, and Vehicle-to-Cloud. Smart automobiles are equipped with cameras, radars, on-board units, and sensors to help reduce the number of accidents by giving drivers or autonomous vehicles up-to-date information on roads, traffic signals, and other pertinent entities. As human lives are at risk, security and privacy in the IoV communication paradigm are critical and cannot neglected. Security and privacy breaches may cause accidents because the attacker can inject false information into the system as the communication channel is open and unsecured. The researchers proposed many authentication protocols to provide secure communication between IoV entities. Although surveys on IoV security and privacy issues deal with communication and computation costs, they lack formal analysis of the authentication protocols. This survey reviews the informal analysis and formal analysis methods used by various authentication protocols. Furthermore, the challenges and future work are also included in this survey.