Pervasive Pixels Network Services Angelos Keromytis Jason Nieh

Pervasive Pixels Network Services Angelos Keromytis Jason Nieh Henning Schulzrinne Dept. of Computer Science Columbia University Pervasive Pixels - NSF site visit

Overview n Enabling interactive communications n n n mobility user creation of services event notification interaction with legacy telephone system Access control and privacy System monitoring and management 3/12/2021 Pervasive Pixels - NSF site visit

Pervasive Pixels integrates. . . n n Chime for cooperation on a spatial communications metaphor CINEMA for n n unified synchronous & asynchronous communications interoperation with telephone system Virtual Display System Architecture for application sharing KX for system monitoring 3/12/2021 Pervasive Pixels - NSF site visit

Mobility n n today: terminal mobility = same terminal, different networks Pervasive Pixels: n n personal mobility = same person, different terminals (seq. & parallel), different sessions session mobility = move on-going sessions between terminals n 3/12/2021 e. g. , mobile PDA and public display Pervasive Pixels - NSF site visit

User creation of services n control reachability: n n n classical telecom: carrier provides small menu of services CINEMA: user-created services n n how, by whom, when, where, what format cgi (web-like scripting) CPL (XML rule set) Java servlets active (application-layer) networks – filters installed remotely 3/12/2021 Pervasive Pixels - NSF site visit

Event notification n Fundamental abstraction n but only approximated in Internet today: n n email – asynchronous delivery web – “pull’’ (poll) only presence – people events only In Pervasive Pixels, pursuing several models: n n Siena-based content filtering SIP-based inter-domain notification n 3/12/2021 working on IETF standardization (SIMPLE) Pervasive Pixels - NSF site visit

Interaction with legacy telephone system n Need to be able to interwork with n n cell & landline phones combinations of PSTN and Internet connectivity, e. g. , n n n video, collaboration, status via laptop (Internet), audio via phone Will use departmental PBX + gateway 3/12/2021 Pervasive Pixels - NSF site visit

CINEMA – Columbia Internet Extensible Multimedia Architecture n CINEMA = set of servers and services that support Session Initiation Protocol (SIP) n n Internet standard co-developed by PI services: n n n audio/video conferencing unified messaging conference recording Voice. XML voice control interface for interaction via phone protocol conversion H. 232 - SIP 3/12/2021 Pervasive Pixels - NSF site visit

CINEMA components Cisco 7960 My. SQL sipconf user database LDAP server rtspd RTSP media server conferencing server (MCU) sipd RTSP proxy/redirect server unified messaging server Pingtel Nortel Meridian PBX T 1 sipum Cisco 2600 T 1 Voice. XML server SIP sipvxml Phone. Jack interface sipc SIP-H. 323 converter sip-h 323 3/12/2021 Pervasive Pixels - NSF site visit plug'n'sip wireless 802. 11 b

Virtual display system architecture n serve applications across a network n n n adaptive applications n n X 11, Citrix, Sun. Ray: static cross-platform, application-independent bandwidth availability end-system compute power proxy services integration with conferencing 3/12/2021 Pervasive Pixels - NSF site visit

System monitoring and management n n n Kinesthetics e. Xtreme (KX) monitor interplay of Pervasive Pixel components using Siena event notification systems 3/12/2021 Pervasive Pixels - NSF site visit

Security n Mechanisms: n n Security of communications: standard security protocols (SSL, IPsec) Security of stored data: NFS over IPsec, Dis. CFS Privacy (presence, other information) Physical access control: swipe card readers, proximity badges 3/12/2021 Pervasive Pixels - NSF site visit

Security – authentication n multiple authentication and identification mechanism: n n n swipe card fingerprint i-button ring IR/RF badge radio location 3/12/2021 Pervasive Pixels - NSF site visit

Security n With mechanisms in place, we need policies to control them n n Ease of configuration Flexibility 3/12/2021 Pervasive Pixels - NSF site visit

Trust management (TM) n n n Application-independent mechanism for specifying and evaluating application-specific policies Policies can be expressed in terms of credentials (certificates with additional information) Key. Note is an instance of a TM system n n Efficient policy compliance checking Delegation inherent in the system -> decentralized management 3/12/2021 Pervasive Pixels - NSF site visit

Sample Key. Note Policy Authorizer: "POLICY" Licensees: Henning (public key) Conditions: app_domain == "web access control" && date >= "20020101" && date <= "20021231" && web_server == "www. cs. columbia. edu" && url ~= "^/people/hgs/. *" && (encryption_algorithm == "3 DES" || encryption_algorithm == "AES") -> "permit"; 3/12/2021 Pervasive Pixels - NSF site visit

Sample Key. Note credential Authorizer: Henning (public key) Licensees: Kathy (public key) Conditions: app_domain == "web access control" && date >= 20020311" && date <= 20020311" && web_server == "www. cs. columbia. edu" && url = "/people/hgs/for_kathy. html" -> "permit"; Signature: Signer by Henning's public key 3/12/2021 Pervasive Pixels - NSF site visit

Access control with Key. Note n Embedded in IPsec (IKE), SSL (module for Apache) n n n part of the DARPA-funded STRONGMAN project work in progress on Dis. CFS fine-grained access control on remote files using credentials Used for server-based or P 2 P file sharing Extensible to other applications/protocols (e. g. , interacting users in virtual worlds, privacy considerations) Abstraction layer on top of Key. Note to make configuration easier for end-users 3/12/2021 Pervasive Pixels - NSF site visit

On-going work in security n n Integration between Key. Note and CPL Token- and biometrics-based credentials n n i-button fingerprint recognition voice recognition IR+RF badges 3/12/2021 Pervasive Pixels - NSF site visit