We demonstrate, for the first time, 100Gb/s OTU4 over 400GE PLE (Private Line Emulation) across a packet network with OTN like service over a packet backbone. With the decrease of interest in OTN and emergence of IP over DWDM, PLE is an attractive proposal in the IETF for provisioning leased-lines (which continue to be high-margin services for providers). PLE involves the mapping of high-speed OTN services (OTU4 typically, but also OTU2) on to packets and use a smart signaling infrastructure of the packet switched network to provision pseudo-wires. We developed PLE hardware and interfaces it with IP routers to create 100Gb/s OTU4 over 400Gb/s Ethernet. We showed deterministic latency and low jitter in addition to significant network-wide power saving (up to 50%). Results also conform to the requirements of traditional circuit (OTN) communication.

Blockchains are designed for trustworthy and transparent execution of transactions involving multiple parties. An important class of applications requires data to be shared selectively among mutually anonymous transacting peers while retaining the tamper-resistant evidentiary and validation features of a blockchain. KYC validations of corporate customers by banks is one example, where both banks and customers benefit from sharing process and data on a blockchain network. However, sharing of confidential KYC data must be authorized by customers, and a bank-customer relationship must be kept secret from other banks in the network. In this paper, we describe the design and implementation of a smart contract for consent-driven and double-blind data sharing on the Hyperledger Fabric blockchain platform. We show how a KYC application was built around this model to address the needs of the banks while meeting regulatory requirements.

Interoperable identity and trust management infrastructure plays an important role in enabling integrations in cloud computing environments. In the past decade or so, several web-based workflows have emerged as de-facto standards for user identity and resource access across enterprises. Establishing correctness of such web protocols is of immense importance to a large number of common business transactions on the web. In this paper, we propose a framework for analyzing security in web protocols. A novel aspect of our proposal is bringing together two contrasting styles used for security protocol analysis. We use the inference construction style, in which the well-known BAN logic has been extended to reason about web protocols, in conjunction with, an attack construction style that performs SAT based model-checking to rule out certain active attacks. The result is an analysis method that shares simplicity and intuitive appeal of belief logics, at the same time covers a wider range of protocols, along with an ability to automatically find attacks. To illustrate effectiveness, case study of a leading web identity and access management protocol is presented, where application of our analysis method results in a previously unreported attack being identified.

In this paper, we consider issues arising in partial replication of directories and motivate the need for filter based techniques which replicate query results rather than subtrees. A filter based replication model and a lightweight filter synchronization protocol are proposed. An efficient means of implementing the protocol based on the concepts of `change state' is described. A real enterprise directory and a real workload have been used for performance evaluation.

Directories have become an important component of the enterprise security and identity management middleware. This paper describes a novel filter based replication model for lightweight directory access protocol (LDAP) directories. Instead of replicating entire subtrees from a directory information tree (DIT), only entries matching a filter specification are replicated. Efficient algorithms for selecting such filters, keeping them synchronized with the master copy and for using them to answer directory queries have been proposed. Advantages of the filter based replication framework over existing subtree based mechanisms have been demonstrated for a real enterprise directory using real workloads

This paper describes a novel filter based replication model for lightweight directory access protocol (LDAP) directories. Instead of replicating entire subtrees from the directory information tree (DIT), only entries matching a filter specification are replicated Advantages of the filter based replication framework over existing subtree based mechanisms have been demonstrated for a real enterprise directory using real workloads.

In networks with mobile nodes, power consumption is an important constraint due to the limited battery power available at the mobile nodes. Reduction of power consumption in mobile devices can be achieved by keeping these devices in a low power (standby) mode during periods of inactivity. This may, however, result in increased end-to-end delays leading to violation of the quality of service (QoS) parameters. We propose medium access control (MAC) scheduling policies for centrally controlled TDD wireless systems. The proposed policies reduce the power consumption of mobile devices by putting them into low power mode intelligently, using probabilistic estimates of inactivity based on the previous traffic arrival pattern. The policies ensure that the QoS parameters such as end-to-end packet delays are not violated.