Trusted Hosts in Host Identity Protocol (HIP)
K.C., Amir (2012)
Metropolia Ammattikorkeakoulu
2012
All rights reserved
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-2012061512730
https://urn.fi/URN:NBN:fi:amk-2012061512730
Tiivistelmä
The goal of the project was to study the possibilities to establish trusted hosts in Host Identity Protocol (HIP) and implement certificate handling in HIP packets. The time complexity and performance while using certificates in HIP packets was also measured. The research project was carried out at Arcada University of Applied Sciences in collaboration with Helsinki University.
The project aimed to implement standard x.509 certification of the public key used as HI (Host Identity) to derive trust between peers. For this purpose, an open source implementation of HIP, OpenHIP v0.7, developed by Boeing Company was modified and extended so that standard x.509 certificate can be encapsulated in HIP packets in order to establish trusted network hosts.
The extension of OpenHIP to support certificate handling in HIP packets was effectively implemented and tested. The results indicate that x.509 certificates can be successfully deployed to derive a trusted relationship between the network hosts. Furthermore, the performance measurement results show that certificate handling does not consume much time for HIP Base Exchange.
Further development of the project can be done to support mobility of the hosts in trusted relationships. Likewise, the current modified version of OpenHIP only supports Debian distributions of Linux, extensions can be made to support other Linux distributions, OSX and Windows platform as well.
The project aimed to implement standard x.509 certification of the public key used as HI (Host Identity) to derive trust between peers. For this purpose, an open source implementation of HIP, OpenHIP v0.7, developed by Boeing Company was modified and extended so that standard x.509 certificate can be encapsulated in HIP packets in order to establish trusted network hosts.
The extension of OpenHIP to support certificate handling in HIP packets was effectively implemented and tested. The results indicate that x.509 certificates can be successfully deployed to derive a trusted relationship between the network hosts. Furthermore, the performance measurement results show that certificate handling does not consume much time for HIP Base Exchange.
Further development of the project can be done to support mobility of the hosts in trusted relationships. Likewise, the current modified version of OpenHIP only supports Debian distributions of Linux, extensions can be made to support other Linux distributions, OSX and Windows platform as well.