Automotive Industry Requirements for NEMO Route Optimization IETF71, MEXT WG 12/03/2008 draft-ietf-mext-nemo-ro-automotive-req-00 Roberto Baldessari Thierry.

Slides:



Advertisements
Similar presentations
RSVP-TE Extensions for SRLG Configuration of FA
Advertisements

© 2006 NEC Corporation - Confidential age 1 November SPEERMINT Security Threats and Suggested Countermeasures draft-ietf-speermint-voipthreats-01.
Security Threats and Security Requirements for the Access Node Control Protocol (ANCP) IETF 67 - ANCP WG November 5-10, 2006 draft-moustafa-ancp-security-threats-00.txt.
Resource PKI: Certificate Policy & Certification Practice Statement Dr. Stephen Kent Chief Scientist - Information Security.
Securing the Border Gateway Protocol (S-BGP) Dr. Stephen Kent Chief Scientist - Information Security.
Home Network Models Vijay Devarapalli draft-ietf-nemo-home-network-models-02 NEMO WG, IETF 62.
An Operational Perspective on BGP Security Geoff Huston GROW WG IETF 63 August 2005.
Lesson 11-Virtual Private Networks. Overview Define Virtual Private Networks (VPNs). Deploy User VPNs. Deploy Site VPNs. Understand standard VPN techniques.
Mobile IP version 6 Route Optimization Security Design Background draft-ietf-mip6-ro-sec-01 MIP6 WG Nikander, Arkko, Aura, Montenegro, Nordmark TUESDAY,
Route Optimization Requirements for Operational Use in Aeronautics and Space Exploration Mobile Networks (draft-eddy-nemo-aero-reqs-01) Wes Eddy – Verizon.
A Vehicular Ad Hoc Networks Intrusion Detection System Based on BUSNet.
Light Weight Access Point Protocol (LWAPP) IETF 57 Pat Calhoun, Airespace.
IPv6 Home Networking Architecture - update IETF homenet WG Interim meeting Philadelphia, 6 th Oct 2011 draft-chown-homenet-arch-00.
TCP/SYN Attack – use ACL to allow traffic from TCP connections that were established from the internal network and block packets from an external network.
Dynamic Firewalls and Service Deployment Models for Grid Environments Gian Luca Volpato, Christian Grimm RRZN – Leibniz Universität Hannover Cracow Grid.
Req1 - Separability Old: –An RO scheme MUST have the ability to be bypassed by traffic types that desire to use bidirectional tunnels through an HA. New:
Draft-mickles-v6ops-isp-cases-01.txt September 19, 2002 Cleveland Mickles V6OPS ISP Breakout Session.
NEMO Requirements and Mailing List Discussions/Conclusions T.J. Kniveton - Nokia Pascal Thubert - Cisco IETF 54 – July 14, 2002 Yokohama, Japan.
Prefix Delegation Protocol Selection T.J. Kniveton MEXT Working Group IETF 70 - December ’07 - Vancouver.
DHCP - Prefix Delegation for NEMO Ralph Droms (Cisco) Pascal Thubert (Cisco) 59th IETF, NEMO WG.
Draft-li-mpls-network-virtualization-framework-00IETF 88 SPRING WG1 Framework of Network Virtualization Based on MPLS Global Label draft-li-mpls-network-virtualization-framework-00.
Dynamic Virtual Networks (DVNE) Margaret Wasserman & Paddy Nallur November 11, 2010 IETF Beijing, China.
1 Julien Laganier MEXT WG, IETF-79, Nov Authorizing MIPv6 Binding Update with Cryptographically Generated Addresses
Dynamic Management of Multiple Mobile Routers Manabu Tsukada, Thierry Ernst, Ryuji Wakikawa and Koshiro Mitsuya Graduate School of Media and Governance,
Interdomain Routing Security. How Secure are BGP Security Protocols? Some strange assumptions? – Focused on attracting traffic from as many Ases as possible.
0 NAT/Firewall NSLP Activities IETF 60th - August 2nd 2004 Cedric Aoun, Martin Stiemerling, Hannes Tschofenig.
IETF69 - NEMO WG1 NEMO: Deployments and Requirements From a Consumer Electronics Perspective draft-ng-nemo-ce-req-00.txt Chan-Wah Ng
Module 5: Designing Security for Internal Networks.
Guidance for Running Multiple IPv6 Prefixes (draft-liu-v6ops-running-multiple-prefixes-02) Bing Liu, Sheng Jiang (Speaker), Yang Bo IETF91
NEMO Re-chartering IETF 67 – November 9, 2006 T.J. Kniveton.
63rd IETF - NEMO WG1 NEMO Multihoming Issues NEMO Multihoming Issues draft-ietf-nemo-multihoming-issues-03.txt Chan-Wah Ng Paik Eun-Kyoung Thierry Ernst.
The limitation in current NEMO scenario -Problem Statement draft-zhao-nemo-limitations-ps-00.txt John.zhaoJohn.zhao(Huawei technology shanghai R&D) Ke.
Nemo RO taxonomy P. Thubert, M. Molteni (Cisco) C. Ng (Panasonic) H. Ohnishi (NTT) E. Paik (Seoul Nat. Univ.) 59th IETF, NEMO WG.
Implications of Trust Relationships for NSIS Signaling (draft-tschofenig-nsis-casp-midcom.txt) Authors: Hannes Tschofenig Henning Schulzrinne.
1 NEMO: Requirements Analysis NEMO: Requirements Analysis draft-eddy-nemo-aero-reqs-02.txt draft-baldessari-c2ccc-nemo-req-01.txt draft-ng-nemo-ce-req-01.txt.
1 Alternative (Future) Proposals for MIPv6 Security MIP6 BOF/WG IETF-57 Jari Arkko, Ericsson Research NomadicLab Charlie Perkins, Nokia Research Center.
IETF70 - MEXT WG1 NEMO: Deployments and Requirements NEMO: Deployments and Requirements From a Consumer Electronics Perspective draft-ng-nemo-ce-req-01.txt.
GEONET Brainstorming Document. Content Purpose of the document Brainstorming process / plan Proposed charter Assumptions Use cases Problem description.
59 th IETF – NEMO Working Group 1 NEMO Multi-homing Issues Prepared for 59 th IETF NEMO WG By Chan-Wah NG, Eun-Kyoung PAIK, Thierry ERNST, Julien CHARBON.
PAGE 1 A Firewall Control Protocol (FCON) draft-soliman-firewall-control-00 Hesham Soliman Greg Daley Suresh Krishnan
IETF70 - Mobopts RG1 On Mobile IPv6 Optimization and Multihoming draft-ng-mobopts-multihoming-00.txt Chan-Wah Ng
Routing Information Protocol
0 NAT/Firewall NSLP IETF 63th – August 2005 draft-ietf-nsis-nslp-natfw-07.txt Martin Stiemerling, Hannes Tschofenig, Cedric Aoun.
Draft Policy Merge IPv4 ISP and End-User Requirements 59.
2003/3/1856th IETF NEMO WG1 Basic Network Mobility Support draft-wakikawa-nemo-basic-00.txt Ryuji Wakikawa Keisuke Uehara
March 20th, 2001 SIP WG meeting 50th IETF SIP WG meeting Overlap signalling handling
NSIS NAT/Firewall Signaling NSIS Interim Meeting Romsey/UK, June 2004 Martin Stiemerling, Hannes Tschofenig, Cedric Aoun.
GEONET Brainstorming Document. Content Purpose of the document Brainstorming process / plan Proposed charter Assumptions Use cases Problem description.
IP Address Location Privacy and Mobile IPv6: Problem Statement draft-irtf-mobopts-location-privacy-PS-00.txt Rajeev Koodli.
Paris, August 2005 IETF 63 rd – mip6 WG Mobile IPv6 bootstrapping in split scenario (draft-ietf-mip6-bootstrapping-split-00) mip6-boot-sol DT Gerardo Giaretta,
Homenet Routing IETF 83, Paris Acee Lindem, Ericsson.
63rd IETF - Monami6 BoF1 NEMO Multihoming Issues for Monami6 NEMO Multihoming Issues for Monami6 draft-ietf-nemo-multihoming-issues-03.txt Chan-Wah Ng.
ETSI TC ITS Status on Standardization Martin ARNDT ETSI ESP © ETSI All rights reserved M2M Market and Technology Opportunities
 Attacks and threats  Security challenge & Solution  Communication Infrastructure  The CA hierarchy  Vehicular Public Key  Certificates.
NEMO RO Use Case, Issues & Requirements in the MANEMO Scenarios.
DOTS Requirements Andrew Mortensen November 2015 IETF 94 1.
th IETF NEMO WG 1 NEMO RO Problem Space Prepared for 55 th IETF By Pascal Thubert (Cisco), Ng Chan Wah & Takeshi Tanaka (Panasonic)
Thoughts on Bootstrapping Mobility Securely Chairs, with help from James Kempf, Jari Arkko MIP6 WG/BOF 57 th IETF Vienna Wed. July 16, 2003.
V4 traversal for IPv6 mobility protocols - Scenarios Mip6trans Design Team MIP6 and NEMO WGs, IETF 63.
Emerging Solutions in Network Time Synchronization Security
J.W. Atwood PIM WG 2010/03/23 The KARP Working Group J.W. Atwood PIM WG 2010/03/23
NEMO Basic Support Protocol IETF 60, San Diego
Goals of soBGP Verify the origin of advertisements
Softwire Security Update
Valid Cisco Exam Study Material - Cisco Questions Answers Realexamdumps.com
Brief Introduction to IEEE P802.1CF
COS 561: Advanced Computer Networks
draft-lazzeri-pce-residual-bw-00
draft-ipdvb-sec-01.txt ULE Security Requirements
BGP Security Jennifer Rexford Fall 2018 (TTh 1:30-2:50 in Friend 006)
Presentation transcript:

Automotive Industry Requirements for NEMO Route Optimization IETF71, MEXT WG 12/03/2008 draft-ietf-mext-nemo-ro-automotive-req-00 Roberto Baldessari Thierry Ernst Andreas Festag Massimiliano Lenardi

Background Several automotive projects and consortia are looking at NEMO for deployment of vehicular networks ISO CALM and ETSI TC ITS to request liasons with IETF Draft initiated by C2C-CC, now gathering input from ISO and ETSI too Deployments already presented in past meetings (see MEXT interim meeting 7/02/2008) here focusing only on the requirements

RO Scenarios Highest priority to non-nested NEMO RO case NEMO MR runs on automotive On-board Units (OBU), embedded into car’s electronics CE classification: 1.Another vehicle 2.Dedicated node in the infrastructure a.On the roadside (topologically close to MR) b.In the Internet 3.Arbitrary node in the Internet

Req 1: Separability Switching to RO is subject to policy table Policies include MNP and end points addresses Policies may change dynamically (affecting establishment of new RO sessions) Rationales: avoiding unnecessary RO sessions RO establishment not always worth (external information used to set the policies) privacy protection

Req 2: Security As a minimum security feature, MNP ownership should be checked against off-path attackers I.e. if more sophisticated protection is not applicable, a RR- like procedure is minimum req Req to be extended for better protection -> feedback is needed Automotive MRs likely to be equipped with certificates based on PKI (to be harmonized among different consortia) Given that, the req could include authentication of RO signaling verification of ownership based on the certificate

Req 3: Privacy Protection Exposing the MNP must be limited to CE (obviously) nodes on the path MR-CE Better protection desirable -> feedback is needed If PKI in place, existing IPsec techniques should be applicable to MR-CE

Req 4: Multihoming RO technique must not prevent different NEMO multihoming configurations from working (RFC 4980) (1,n,n): different purpose MNPs/HAs (n,1,1): additional MR added in later stage (n,n,n): combination of the previous

Req 5: Efficient Signaling Signaling for establishment of RO as small as possible Text in the draft outdated we want to remove maximum number of signaling messages and keep the req generic Criterion to choose among different RO solutions

Req 6: Switching HA HA switch considered in ISO CALM, not in C2C-CC RO should not prevent it from working Details not yet available To be provided in next version