Middlebox context transfer for multimedia session support in all-IP networks

ABSTRACT

This paper describes a mechanism of forwarding secure state information associated to communication sessions, between middleboxes belonging to different Radio Access Networks (RANs). The transfer of state information among RANs could support service integrity and continuity by maintaining a mobile user's multimedia sessions which may otherwise be dropped and also minimize security vulnerabilities. The paper demonstrates how the context transfer protocol could be employed for this purpose to forward certain security information from the old to the new middlebox to support multimedia session maintenance during mobility and also at the same time notify the previous middlebox to close unnecessary open ports for improved security and resolve vulnerability. A number of test scenarios are used to demonstrate how middleboxes could intervene with multimedia sessions during mobility and show how context transfer can provide a solution for improving the performance in the multimedia session re-establishment as well as enhancing middlebox security.

REFERENCES

• 1: Tafazolli, R. Technologies for the Wireless Future, John Wiley & Sons (2005).
• 2: Niebert, N. et.al. "Ambient Networks: AN Architecture for Communication Networks Beyond 3G, IEEE Wireless Communication Magazine, Vol. 11, No 2, April 2004.
• 3: Carpenter, B. "Middleboxes: Taxonomy and Issues", RFC3234, Internet Engineering Task Force, February 2002.
• 4: Frantzen, M. Kerschbaum, F. Schultz, Fahmy, E. and Fahmy, S. A framework for understanding vulnerabilities in firrewalls using a dataflow model of firewall internals,. Computers and Security, vol. 20, no. 3, pp. 263--270, May 2001.
• 5: Schultz, E. When firewalls fail: lessons learned from firewall testing,. Network Security, pp. 8.11, Feb 1997.
• 6: Kempf, J. "Problem Description: Reasons For Performing Context Transfers Between Nodes in an IP Access Network", RFC 3374, Internet Engineering Task Force, September 2002.
• 7: Loughney, J. Nakhjiri, M. Perkins, C. Koodli, R. "Context Transfer Protocol (CXTP)", RFC 4067, Internet Engineering Task Force, July 2005.
• 8: Georgiades, M. Akhtar, N. Politis, C. Tafazolli, R. "AAA Context Transfer for Seamless and Secure Multimedia Services over all-IP Infrastructures", European Wireless Conference, February 2004.
• 9: Politis, C. et al, "Hybrid Mobility Management with Context Transfer Capabilities for All-IP Networks", IEEE Wireless Communications Magazine, Vol. 11, No 4, , August 2004.
• 10: Georgiades, M. et.al. "Enhancing mobility management protocols to minimize AAA impact on the handoff performance", to appear in Elsevier International Journal for the Computer and Telecommunications Industry, 2005.
• 11: Kohlmayer, F. et.al., "Ambient Network Security Architecture", AN project deliverable D7.2, December 2005.
• 12: http://www.linux-firewall-tools.com/ftp/firewall/rc.firewall.ipchains
• 13: http://hostap.epitest.fi/
• 14: http://cs.hut.fi/Research/Dynamics/
• 15: http://www.comet.columbia.edu/cellularip/

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.1 Network Architecture and Design

General Terms:
Design, Performance, Security

Keywords:
context transfer mobility, middleboxes, multimedia sessions in systems beyond 3G, security