Peer-to-Peer Wireless Network Confederation (P2PWNC) Mobile Multimedia Laboratory Athens University of Economics and Business Athens MMAPPS Meeting, September , 2003

10/09/2003MMAPPS P2PWNC2 of 40 Overview Introduction Internals Usage Demo Issues

10/09/2003MMAPPS P2PWNC3 of 40 Introduction

10/09/2003MMAPPS P2PWNC4 of 40 Background P2PWNC: A P2P approach to WISP roaming Substantial autonomy for the roaming partners Easy for networks to participate: less administrative overhead Provisions for identity and location privacy

10/09/2003MMAPPS P2PWNC5 of 40 Terminology Visited Domain  Providing Peer User Devices: Unique Hardware (MAC) Address Home Domain  Consuming Peer Registered Users: Unique P2PWNC ID ( ) Peer Names  Domain Names aueb.gr bt.com Consuming Peer Providing Peer

10/09/2003MMAPPS P2PWNC6 of 40 Service Fundamentals Ubiquitous wireless Internet access Rules and accounting Lightweight devices ( WLAN interface, TCP/IP and a web-browser ) QoS Device mobility

10/09/2003MMAPPS P2PWNC7 of 40 Usage

10/09/2003MMAPPS P2PWNC8 of 40 Usage Scenario 1. User visits a peer domain 3. Uses P2PWNC ID to login 2. Activates device 4. Accesses the Internet 5. Leaves or turns off device

10/09/2003MMAPPS P2PWNC9 of 40 Before Authentication

10/09/2003MMAPPS P2PWNC10 of 40 Before Authentication

10/09/2003MMAPPS P2PWNC11 of 40 Login

10/09/2003MMAPPS P2PWNC12 of 40 Successful Visitor Login

10/09/2003MMAPPS P2PWNC13 of 40 Internals

10/09/2003MMAPPS P2PWNC14 of 40 Session Types Only roaming sessions require a P2P negotiation 1. visiting users 2. their own roaming users 3. their own registered users when at home Rules have no meaning for users when at home Peers keep track of: Two session types: local and roaming

10/09/2003MMAPPS P2PWNC15 of 40 Layered Peer Architecture P2PWNC Application WLAN Service Network Services Authentication Packet sniffer Firewall Rate control Wireless tools Routing / NATDHCP Visitor Negotiation WLAN listenerWLAN object calls

10/09/2003MMAPPS P2PWNC16 of 40 Initial Events P2PWNC Application WLAN Service Network Services Authentication DHCP 4. CGI receives user credentials 1. IP address leased 2. MAC address is new 3. New device event 5. Authentication succeeded 6. New login event

10/09/2003MMAPPS P2PWNC17 of 40 Local Events GUI

10/09/2003MMAPPS P2PWNC18 of 40 Local Sessions GUI

10/09/2003MMAPPS P2PWNC19 of 40 Local Sessions WLAN Service Local SessionsRoaming Sessions TrafficDurationUserRate TrafficDurationUserRate Traffic DetailsDurationUserRate getUsers() getTrafficDetails() getDuration() getRate()

10/09/2003MMAPPS P2PWNC20 of 40 Roaming Sessions GUI

10/09/2003MMAPPS P2PWNC21 of 40 Roaming Sessions WLAN Service getUser() getTrafficDetails() getDuration() getRate() Roaming Sessions Consumer Stub Consumer Stub Consumer Stub Consumer Stub Consumer Stub Consumer Local Sessions WLAN Service Visited domainHome domain

10/09/2003MMAPPS P2PWNC22 of 40 Visitor Negotiation Visitor Negotiation MMAPPS Negotiation Visitor Session WLAN Visitor Negotiation MMAPPS Negotiation Listener WLAN Visited domain - Provider Home domain - Consumer 1. Visitor credentials check 2. Negotiate 3. Request service 4a. MMAPPS negotiation 4b. Balance check 5. Start 6. Balance OK: Proceed

10/09/2003MMAPPS P2PWNC23 of 40 Visitor Logout Timeout-based logout Provider and consumer GUIs updated Provider and consumer declare session terminated Balances updated

10/09/2003MMAPPS P2PWNC24 of 40 Rules and Policies GUI

10/09/2003MMAPPS P2PWNC25 of 40 Breaking the Rules If rule is broken, consuming peer receives a negotiation abort Provider can configure rule with one parameter ( benevolence ) Even then, provider can provide some connection time “for free”

10/09/2003MMAPPS P2PWNC26 of 40 QoS GUI

10/09/2003MMAPPS P2PWNC27 of 40 QoS Scheme Split link bandwidth into two parts: home and visitors Current scheme is inflexible Allocate guaranteed bandwidth for specific locally registered users Allocate guaranteed percentage of visitor bandwidth for specific domains

10/09/2003MMAPPS P2PWNC28 of 40 Demo

10/09/2003MMAPPS P2PWNC29 of 40 Demo Setup aueb.grbt.com switch Channel 01 SSID aueb.gr Mode Ad hoc Channel 11 SSID bt.com Mode Ad hoc

10/09/2003MMAPPS P2PWNC30 of 40 Network Settings GUI

10/09/2003MMAPPS P2PWNC31 of 40 User Accounts GUI

10/09/2003MMAPPS P2PWNC32 of 40 Issues

10/09/2003MMAPPS P2PWNC33 of 40 Accounting Events Volume-based events A rule, similar to the current one, taking these under consideration Time-based events QoS-based events

10/09/2003MMAPPS P2PWNC34 of 40 Lightweight Clients We assumed no special software on the client device Consuming peer is not aware of the actual service May be required, however, to verify received service authoritatively Who else can independently observe the provider?

10/09/2003MMAPPS P2PWNC35 of 40 Offline Peers Password-based authentication cannot work A user’s home domain may be offline No consumer peer available to negotiate on the user’s behalf Could the user device act as a peer? Could another peer act as the user’s home?

10/09/2003MMAPPS P2PWNC36 of 40 DNS Substitute Resolve this to the peer’s current IP address ( which may change ) Need to support unique, logical, location-independent peer names Enhanced MMAPPS Search? Based on a DHT? not just ‘aueb.gr’ or ‘bt.com’ but also ‘Elias_Athens_ADSL_Peer’

10/09/2003MMAPPS P2PWNC37 of 40 More General Issues That take peer heterogeneity into account? Efficient rules Distributed accounting Secure, fault-tolerant

10/09/2003MMAPPS P2PWNC38 of 40 Privacy Hide current location from home peer Location privacy ( untraceability ) Identity privacy ( anonymity ) Hide real P2PWNC ID from visited peer

10/09/2003MMAPPS P2PWNC39 of 40 Privacy Architecture Peer ‘P’ Peer ‘A’ (mix 1) Peer ‘B’ (mix 2) Peer ‘C’ “My P2PWNC ID is (Credentials include real ID and a mix chain -- encrypted using nested public-key encryptions) { MIX, B, { MIX, C, { STOP, X } C } B } A { MIX, C, { STOP, X } C } B { STOP, X } C

10/09/2003MMAPPS P2PWNC40 of 40 Thank You