Concealment of privacy via VPN in MM-MAN

摘要

Mobile Multimedia Metropolitan Area Network (MM-MAN) network architecture combines both wireless Local Area Network (LAN) and wired point-to-multipoint Passive Optical Network (PON) technologies to provide high-bit-rate transmission for high-mobility business users. This paper proposes a security scenario to fulfill the requirements of users within the MM-MAN in such a hybrid environment. An end-to-end Virtual Private Network (VPN) tunnel deployment scenario over MM-MAN network and how the VPN tunnel is updated during frequent handover between cells to accommodate high-mobility are presented and analyzed. The overload per packet decreases efficiency of bandwidth caused by the VPN security implementation. The Overhead occupies nearly 50% when the payload length is 42packets and 10% when payload length is 576packets. The authors have proposed a scenario for concealment of the address using private addresses, and the new proposal encrypts the user's original IP address within the payload to achieve higher security and reliability.