Social VPN
 |
The topic of this article may not meet Wikipedia's general notability guideline. Please help to establish notability by adding reliable, secondary sources about the topic. If notability cannot be established, the article is likely to be merged, redirected, or deleted. (September 2008) |
| Stable release | 0.5.1 / February 7, 2011 |
|---|---|
| Platform | Cross-platform |
| Size | 1002 KB |
| Type | VPN |
| License | GNU GPL |
| Website | http://www.socialvpn.org/ |
The term Social VPN refers to a virtual private network that is created among individual peers, automatically, based on relationships established by them through a social networking service. A SocialVPN aims at providing peer-to-peer network connectivity between a user and his or her friends, in an easy to set up manner that hides from the users the complexity in setting up and maintaining authenticated/encrypted end-to-end VPN tunnels.
Contents |
[edit] Architecture
An architecture of a SocialVPN is described in.[1] The approach is based on a centralized infrastructure where users authenticate, discover their friends and exchange cryptographic public keys, and a peer-to-peer overlay which is used to route messages between VPN endpoints.
[edit] Packet capture and injection
A SocialVPN uses a virtual network interface (such as tap/tun devices in Windows and Unix systems) to capture and inject IP packets from a host. Once captured, packets are encrypted, encapsulated, and routed over an overlay network.
[edit] Security
A SocialVPN uses online social networks to distribute public keys and advertise node address to friends. The acquired public keys are used to establish encrypted communication between two endpoints. Symmetric keys are exchanged during the process of establishing an end-to-end link by two SocialVPN peers.
[edit] Routing
Routing in the SocialVPN is peer-to-peer. One approach that has been implemented uses a structured P2P system for sending IP packets encapsulated in overlay messages from a source to destination.
[edit] Private IP address space
A SocialVPN uses dynamic IP address assignment and translation to avoid collision with existing (private) address spaces of end hosts, and to allow the system to scale to the number of users that today's successful online social network services serve (tens of millions). Users are able to connect directly only to a small subset of the total number of users of such a service, where the subset is determined by their established relationships.
[edit] Naming
A SocialVPN uses names derived from the social network service to automatically assign host names to endpoints. These names are translated to virtual private IP addresses in the overlay by a loop-back DNS virtual server.
[edit] Related systems
The MIT Unmanaged Internet Architecture (UIA) has a similar system that provides ad-hoc, zero-configuration routing infrastructure for mobile devices, but the ad-hoc connections are not established through a social networking infrastructure.[2] The idea of a "Friend Net" which is similar in nature to a SocialVPN has been put forth in a 2002 blog entry.[3] Hamachi is a related zero-configuration VPN, which uses a different security architecture not based on social networks.[4] The leafnetworks VPN also supports the creation of networks using the Facebook API.
[edit] Software
An open-source SocialVPN implementation based on the Facebook social network service and the Brunet P2P overlay is available for Windows and Linux systems under MIT license. It creates direct point-to-point secure connections between computers with the help of online social networks, and supports transparent traversal of NATs. The application is in alpha testing phase.
This SocialVPN implementation is a P2P application that is part of a structured peer-to-peer overlay. It uses this P2P overlay to create a direct connection between two computers. This connection is used to tunnel IP traffic between the two computers. In order to enable IP connectivity between two computers, they advertise their P2P node address (as well as public keys for secure communication) to each other through an online social network. Once each node acquires the node address (and public keys), an IP-to-nodeAddress mapping is created. IP packets can then be routed to the appropriate p2p node.
[edit] References
- ^ R. Figueiredo, P. O. Boykin, P. St. Juste, D. Wolinsky, "SocialVPNs: Integrating Overlay and Social Networks for Seamless P2P Networking", in Proceedings of IEEE WETICE/COPS, Rome, Italy, June 2008.
- ^ Bryan Ford, Jacob Strauss, Chris Lesniewski-Laas, Sean Rhea, Frans Kaashoek, and Robert Morris, "Persistent Personal Names for Globally Connected Mobile Devices", in Proceedings of the 7th USENIX Symposium on Operating Systems Design and Implementation (OSDI '06), Seattle, WA, November 2006.
- ^ Lucas Gonze "Friendnet", blog entry (2002-12-15). Retrieved on 2008-09-23.
- ^ LogMeIn Hamachi Security Architecture.
[edit] External links
|
||||||||||||||
