MIAKO net Public Wireless Internet Service in Kyoto

MIAKO. net Public Wireless Internet Service in Kyoto Yasuo OKABE Academic Center for Computing and Media Studies, Kyoto University okabe@i. kyoto-u. ac. jp 10/7/2020 24 th APAN Xian 1

Overview n n n Introduction of our past research project MIAKO. net public wireless Internet service Requirements for true ubiquitous networking Taxonomy of wireless LAN (WLAN) roaming architecture 10/7/2020 24 th APAN Xian 2

What is MIAKO. net? Mobile Internet Access in Kyoto n n A Grass-roots Project for Free Public Wireless Internet Service Objectives q q n To revitalize the stagnant economy of Kyoto by making it a ubiquitous city Evaluating up-to-date Internet technologies (including IPv 6) in the field with citizens Organization q Sponsors n q Supported by n n 10/7/2020 SCCJ (NPO), Kyoto University, ASTEM RI TAO(FY 01), JSPS(FY 01 -03), METI(FY 02), NICT(FY 04) MBA, Intel, etc. and many citizens! 24 th APAN Xian 3

JR Kyoto Station Building, 10/7/2020 24 th APAN Xian Mar. 2002 4

　JR Kyoto Station - Coverage 10/7/2020 24 th APAN Xian 5

井筒八ツ橋北座茶店 (Kita. Za) A sweetshop and café just in front of 南座 (Minami. Za) 10/7/2020 24 th APAN Xian 6

　ねねの道 (Nene’s walk) 　 10/7/2020 24 th APAN Xian 7

　高台寺(Kou. Dai. Ji) 10/7/2020 24 th APAN Xian 8

　新風館(Shin. Pu. Kan) 10/7/2020 24 th APAN Xian 9

　鴨川 (Kamo Gawa) 10/7/2020 24 th APAN Xian 10

　京都市内 (Coverage in Kyoto City) 10/7/2020 24 th APAN Xian 11

MIAKO. net n Period of time q q q n Preparation starts in Dec. 2001 Pilot Service provided during Apr. 2002 － Mar. 2005 Commercial service by Kyoto Inet (a local ISP) since Apr. 2005 － Number of access points q q 10/7/2020 Approx. 300 in Nov. 2003 Approx. 100 now 24 th APAN Xian 12

MIAKO. net ― Technologies n Testbed for q Authentication n n q mobility n n q Native IPv 6 and LIN 6 based mobility MIS Mobile IPv 4 Application n n 10/7/2020 MISP (http: //www. mbassoc. org) VPN based P 2 P Vo. IP servece (MIAKO. phone) IP multicast streaming (MIAKO. cast) 24 th APAN Xian 13

Requirements for True Ubiquitous Networking ― Design Goals of MIAKO. net n Free Wireless Internet Service q q n Users don’t have to pay any money. Cost is paid by the hosts of access points instead. True Ubiquitous Networking q A host of access points can set up an access points at any place he wants. Providing free wireless Internet connection to your guest anywhere is indispensable for ubiquitous networking. OMOTENASHI - hospitality to your guests 10/7/2020 24 th APAN Xian 14

Is FREE service really possible? n We already have Internet Infrastracuture. q Most of office/shops/houses have broadband access. n n Providing it to visitors is feasible q q n ADSL (1～ 10 Mbps) ⇒ FDDH (100 Mbps～ 1 Gbps) We rarely consumes the bandwidth fully Wireless service needs little cost. The issue is security q Risk of providing network access to unknown visitors n n 10/7/2020 Access to the private network can be prohibited but Malicious access to the Internet is hard to limit 24 th APAN Xian 15

Security in public wireless Internet services n For users: q q n Eavesdropping, MIM (man-in-the-middle)attack Inpersonation For hosts of access points q Accounting (in paid service) q Avoiding anonymous use 10/7/2020 24 th APAN Xian 16

Wireless Interenet Service by a single ISP CN Internet ISP’s private network Auth Server 基地局 ISP Mutual Authentication MN 10/7/2020 24 th APAN Xian 17

　WLAN roaming among ISPs Internet (exapmple) • i. Pass • Eduroam CN Home ISP AAA server Roam ISP Access points auth MN 10/7/2020 24 th APAN Xian 18

Self-managed　Free. Spot　（Free Service） CN Internet AP AP Owner attacker 10/7/2020 24 th APAN Xian Mobile node 19

Concept of Autonomous Distributed Public Wireless Internet n “自律” autonomous q n APs and Ass are distributed in the Internet 発信者特定 CN AS Cost q n AAA “分散” distributed q n Assume no pre-negotiated trust between MN and AP Host of AP do not have to manage AS AP Security q No worse than conventional wired Internet service 10/7/2020 24 th APAN Xian MN 20

Implementation in MIAKO. net CN Internet VPN server AP AP hosts Users’ own or By ISP MN 10/7/2020 24 th APAN Xian 21

How to use MIAKO. net 2 VPN server 1. We managed VPN servers 2. 3 the Interne t 2 AP pass only VPN protocols (PPTP, IPsec, SST, L 2 TP, ssh, openvpn) No WEP SSID=MIAKO DHCP server 10/7/2020 3. AP assigns IP address to a client The client connects to his VPN server The client access to servers on the Internet via the VPN 1 24 th APAN Xian 22

Security for users n Problems and solutions q q q Tapping ⇒ encryption Spoofing ⇒ authentication Fake access points ⇒ two-way authentication and encryption (e. g. MSCHAPv 2) n VPN protocols solve these problems q 10/7/2020 Note that AP owners are not necessarily reliable 24 th APAN Xian 23

Security for owners of APs n n Owners voluntary setup APs They won’t have any responsibilities of users’ illegal accesses q q n Sending virus or SPAM mails Attacks to servers VPN solves the problem q q 10/7/2020 VPN server assign its pool address to clients Users’ access is recognized access from VPN server by other hosts VPN server records who was connected Owners do not need to know who was connected 24 th APAN Xian 24

How to get VPN account n n n Kyoto University and Ryukoku University issue permanent VPN account for their staff and students Kyoto. Inet (ISP in Kyoto) issues permanent account for the customers Visitor can get one-day account online by mobile phone q Kyoto. Inet provides VPN server for them q ID is sent to mobile phone by email q Phone company keep who is assigned to the mail address 10/7/2020 24 th APAN Xian 25

VPN server Enterprise LAN 　　Internet VPN-1 Access control (VPN only) VPN-n Wireless Access Area Wireless router VPN server Home network 10/7/2020 24 th APAN Xian 26

Summary n n Security issues of WLAN roaming services Proposal of autonomous distributed public wireless Internet access architecture q q 10/7/2020 MIAKO. net A service model for implementing ubiquitous networking with a grass-roots base WLAN roaming. 24 th APAN Xian 27