Many Internet of Things (IoT) services utilize an IoT access network to connect small devices with remote servers. They can share an access network with standard communication technology, such as IEEE 802.11ah. However, an authentication and key management (AKM) mechanism for resource constrained IoT devices using IEEE 802.11ah has not been proposed as yet. We therefore propose a new AKM mechanism for an IoT access network, which is based on IEEE 802.11 key management with the IEEE 802.1X authentication mechanism. The proposed AKM mechanism does not require any pre-configured security information between the access network domain and the IoT service domain. It considers the resource constraints of IoT devices, allowing IoT devices to delegate the burden of AKM processes to a powerful agent. The agent has sufficient power to support various authentication methods for the access point, and it performs cryptographic functions for the IoT devices. Performance analysis shows that the proposed mechanism greatly reduces computation costs, network costs, and memory usage of the resource-constrained IoT device as compared to the existing IEEE 802.11 Key Management with the IEEE 802.1X authentication mechanism.

As the automotive industry adopts Ethernet for in-vehicle network technology, automotive Ethernet has to handle bounded delay traffic. IEEE std 802.1Q introduces the stream reservation protocol (SRP) to reserve resources for time-sensitive traffics. SRP uses bridge-by-bridge propagation for its messages and registers VLAN ID and group address before making Audio-Video (AV) stream reservations. In this study, we propose a simplified SRP scheme over the Software-defined Network (SDN) for in-vehicle bridged networks. The proposed scheme exploits the topology and bridge information of bridged networks. A centralized stream reservation procedure in the scheme replaces the bridge-by-bridge propagation for SRP reservations. The reservation procedure does not require VLAN ID and group address registration. We implemented a prototype of the proposed scheme and showed that reserved flows are well protected when links of bridges are overloaded.

Named Data Networking (NDN) supports the consumer mobility service by letting a consumer reissue an interest. This method is straightforward, but it may cause several drawbacks, including unnecessary handover overhead and long handover delay. We concentrate on the NDN communication model in which the pair of an interest and a data packet is considered a single communication working set (i.e., transaction unit). In this respect, reissuing an interest means creating a new transaction due to the connection damaged by the movement of a consumer. It makes all states of the current transaction useless, and this is where the drawbacks arise. In order to enhance the consumer mobility service, we propose Mobility Link Service (MLS) operated in NDN face which is responsible for management of a connection for a transaction. MLS reuses the existing states of a transaction by establishing a connection for the transaction instead of creating a new one. In addition, MLS in NDN face makes consumer mobility service transparent to the NDN forwarding plane. Therefore, the consumer mobility service and the NDN architecture can evolve independently. The performance evaluation shows that MLS reduces the amount of retransmitted data and handover latency compared with the existing NDN mobility solution.

Vehicular ad hoc network (VANET) standards, including IEEE 1609 WAVE and ETSI C-ITS, use IPv6 to interconnect VANET with the Internet. Considering the high vehicle speeds and short communication ranges of road side units (RSUs), such vehicles may suffer from frequent service interruptions. Several VANET IP mobility schemes have been proposed in order to mitigate this problem. However, these only support L3 handover, as the RSUs act as IPv6 access routers (ARs) for vehicles. Some VANET IP mobility schemes reduce the handover latency of the L3 handover but do not fundamentally mitigate the frequency of the L3 handover. As L3 handover indicates that the default router of the vehicle is changing, the vehicle must perform IPv6 configuration, including router discovery and neighbor unreachability detection. Since most L3 handover latency is caused by this IPv6 configuration, the L3 handover involves a higher signaling cost and longer handover latency than the L2 handover. We propose a network-based L2 extension handover scheme for VANET. It decouples the AR functions from the RSU. An AR connects several RSUs via L2 links within its coverage. In this configuration, most inter-AR handovers are replaced with intra-AR handovers, so that the frequency of the L3 handover is decreased substantially. Therefore, the service disruption time caused by default router switching is also reduced, and the deployment of VANET can be made more flexible by decoupling the RSU and the AR. Proxy Mobile IPv6 is adopted in order to support inter-AR handover in the proposed scheme. Furthermore, the scheme supports seamlessness in both the intra-AR and interAR handovers with buffering at the AR. The performance analysis and the simulation result reveal that the proposed scheme reduces the signaling cost and handover latency and also shows seamless packet delivery for vehicles.