Secure communications between bandwidth brokers

ABSTRACT

In the Differentiated Services (DiffServ) architecture, each domain has a Bandwidth Broker to provide the resources management, primarily bandwidth reservation. In a multi-domain environment, Simple Inter-domain Bandwidth Broker Signaling (SIBBS) protocol is proposed for the inter-domain communication protocol proposed for bandwidth broker communication. Since the information exchanged between BBs are sensitive in sense of Service Level Agreement (SLA), the communications between the inter-domain bandwidth brokers should be protected from attacks. This paper presents the incorporation of the Public Key Infrastructure (PKI) security model for SIBBS. A prototype system with the security elements as well as the implementation of the SIBBS was successfully developed and tested.

REFERENCES

• 1: S. Blake, D. Black, M. Carlson, M. Davies, Z. Wang, and W. Weiss. An Architecture for Differentiated Services. Internet RFC 2475, 1998.
• 2: P. F. Chimento et al. QBone Bandwidth Broker Architecture. Work in Progress, http://sss.advanced.org/bb.
• 3: SIBBS: Simple Inter-domain Bandwidth Broker Signaling, Ben Teitelbaum, Note to the BBAC mailing list, September 1999.
• 4: Carlisle Adams , Steve Lloyd, Understanding PKI: Concepts, Standards, and Deployment Considerations, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 2002
• 5: QBone Architecture vl.0
• 6: R. Housley, W. Ford, W. Polk and D. Solo, Internet X.509 Public Key Infrastructure Certificate and CRL Profile, RFC2459, January 1999.
• 7: R. Geib, TLV Codes-draft: Draft Codes for a simple inter-domain BB specification, version 2
• 8: Volker Sander, The security Environment of SIBBS, http://qbone.internet2.edu/bb/SIBBS-SEC.doc, Jun 2000.
• 9: K. Nichols, S. Blake, F. Baker and D. Black, Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers, RFC2474, December 1998.
• 10: V. Jacobson, K. Nochols and K. Poduri, An Expedited Forwarding PHB, RFC2598, June 1999.
• 11: J. Heinanen, Telia Finland, F. Baker, W. Weiss and J. Wroclawski, Assured Forwarding PHB Group, RFC2597, June 1999.
• 12: R. Bless and K. Wehrle, A Limited Effort Per-Hop Behavior, draft-bless-diffserv-le-phb-00.txt, Internet Draft, Feb 2001
• 13: ITU-T Recommendation X.509 - The Directory: Authentication Framework
• 14: ISO/IEC 9798 - Entity Authentication
• 15: ITU-T Recommendation X.680 - Abstract Syntax Notation One (ASN.1)
• 16: PKCS #1 - RSA Cryptography Standard
• 17: NIST FIPS PUB 180-1: Secure Hash Standard (SHS)

INDEX TERMS

Keywords:
Bandwidth Broker, Public Key Infrastructure, Simple Inter-domain Bandwidth Broker Signaling