Top Banner
Exploiting BharatNet and WiFi for Secure Operations Devendra Jalihal Dept of EE, IITM, Chennai [email protected]
40

Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

May 01, 2018

Download

Documents

dominh
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Exploiting BharatNet and WiFi for Secure OperationsDevendra JalihalDept of EE, IITM, [email protected]

Page 2: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Outline

Page 3: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Outline● Can Government agencies exploit widespread

presence of BharatNet for secure operations, increased efficiency and reduced cost?

Page 4: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Outline● Can Government agencies exploit widespread

presence of BharatNet for secure operations, increased efficiency and reduced cost?

● Example from a Police Network

Page 5: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Outline● Can Government agencies exploit widespread

presence of BharatNet for secure operations, increased efficiency and reduced cost?

● Example from a Police Network● Are these ideas applicable to other organisations?

Page 6: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

BharatNet Architecture● Connect ALL 2.5 lakh Village Panchayats by high

BW Fiber● Basic architecture: Ring of Rings, for high

availability

Page 7: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

BharatNet Architecture● Connect ALL 2.5 lakh Village Panchayats by high

BW Fiber● Basic architecture: Ring of Rings, for high

availability

Page 8: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Police Network (Privately owned, operated)

HQ

UHF

Page 9: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Police Network (Privately owned, operated)

HF, 3-30 MHz, long range, 1000s km

HQ

UHF

Page 10: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Police Network (Privately owned, operated)

HF, 3-30 MHz, long range, 1000s km

VHF, 30-300 MHz, medium rangeInter district by μ-wave links

HQ

UHF

Page 11: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Police Network (Privately owned, operated)

HF, 3-30 MHz, long range, 1000s km

VHF, 30-300 MHz, medium rangeInter district by μ-wave links

UHF, 300 MHz-3 GHz, Short range (city scale)

HQ

UHF

Page 12: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Police Network (Privately owned, operated)

HF, 3-30 MHz, long range, 1000s km

VHF, 30-300 MHz, medium rangeInter district by μ-wave links

UHF, 300 MHz-3 GHz, Short range (city scale)

HQ

● Advantages: Private, Command communication, voice● Disadvantages: Maintenance heavy, expensive, prone to obsolescence,

voice only

UHF

Page 13: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Police Network (Public)

Page 14: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Police Network (Public)

GSM CUG

Page 15: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Police Network (Public)

2000+ Police stn Police HQ

Crime Database

8 Mbps100 Mbps

100 Mbps

INTERNET

GSM CUG

Page 16: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Police Network (Public)

● Advantages: Distributed, Command communication

● Disadvantages: Insecure (data goes on internet), limited Speed, constrained by congestion

2000+ Police stn Police HQ

Crime Database

8 Mbps100 Mbps

100 Mbps

INTERNET

GSM CUG

Page 17: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Can the Police use BharatNet?

● Can it provide high (extremely high) BW and secure means of communication?

● Can the police own and operate the infra?● Can the police augment their communication

repertois without significant outlay? ● Can the Police effectively beat the game of

technological obsolescence?

Page 18: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Proposed Closed Architecture

Page 19: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Proposed Closed Architecture

For long range: HF/VSAT

UHF HQ

HQ to other Districts

Bharatnet fiber provides back bone, high security VPN intranets

and state-wide voice connections

Trunking Radio

Page 20: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Proposed Closed Architecture

INTERNET

For long range: HF/VSAT

UHF HQ

HQ to other Districts

Bharatnet fiber provides back bone, high security VPN intranets

and state-wide voice connections

Trunking Radio

Page 21: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Proposed Closed Architecture

GSM CUG

INTERNET

For long range: HF/VSAT

UHF HQ

HQ to other Districts

Bharatnet fiber provides back bone, high security VPN intranets

and state-wide voice connections

Trunking Radio

Page 22: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Proposed Arch (main components)

Page 23: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Proposed Arch (main components)

● Police lease dark fiber from BharatNet which connects every Police Stn

– Police own and operate the optical switches – Unlimited BW - Multiple VPNs, VC, VoIP,

Page 24: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Proposed Arch (main components)

● Police lease dark fiber from BharatNet which connects every Police Stn

– Police own and operate the optical switches – Unlimited BW - Multiple VPNs, VC, VoIP,

● Extensive deployment of WiFi

– VoIP provides another layer of communication– Will help in gathering evidence

Page 25: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Proposed Arch (main components)

● Police lease dark fiber from BharatNet which connects every Police Stn

– Police own and operate the optical switches – Unlimited BW - Multiple VPNs, VC, VoIP,

● Extensive deployment of WiFi

– VoIP provides another layer of communication– Will help in gathering evidence

● Database access faster and secure

Page 26: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Proposed Arch (main components)

● Police lease dark fiber from BharatNet which connects every Police Stn

– Police own and operate the optical switches – Unlimited BW - Multiple VPNs, VC, VoIP,

● Extensive deployment of WiFi

– VoIP provides another layer of communication– Will help in gathering evidence

● Database access faster and secure● Trunking Systems (DMR/TETRA/P25) to replace VHF as the primary

means of private comm

– Their BS are connected by Bharatnet

Page 27: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Proposed Arch (main components)

● Police lease dark fiber from BharatNet which connects every Police Stn

– Police own and operate the optical switches – Unlimited BW - Multiple VPNs, VC, VoIP,

● Extensive deployment of WiFi

– VoIP provides another layer of communication– Will help in gathering evidence

● Database access faster and secure● Trunking Systems (DMR/TETRA/P25) to replace VHF as the primary means of

private comm

– Their BS are connected by Bharatnet● HF/VSAT for long range

Page 28: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Proposed Heirarchy of Ring ArchitectureLevel 3 : Dist Police Office in ring

Level 2 : Linking Blocks

Leve1: Linking Village Panchayat

Page 29: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Level 3 Fiber Implementation

BS

BS

BSBS

BS

BS

BS

BS

BS

BS

Trunking System

Data base + storage Server

Router + media converter

Call center + user terminal

Mirror site

TNP HQ

● Advantages: ● Backhaul for trunking BSs in each

district● provides uniform numbering scheme ● WiFi Aps in Police Stn enable IP Voice● High BW enables VC, high speed

access to dB● Data Stays inside

● Disadvantages: Main fiber plant owned by some other agency

Page 30: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Strengths• Trunking systems and exchange

systems are robust, digital and need little maintenance

• Data security due to VPN • Multiple modes of communications

such as video conferencing and VoIP

• Police continue to own all communication equipment as before

• Other than GSM CUG

• Orders of magnitude higher bandwidths than what is presently possible

• Communication during congestion and natural calamities

Page 31: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Strengths• Trunking systems and exchange

systems are robust, digital and need little maintenance

• Data security due to VPN • Multiple modes of communications

such as video conferencing and VoIP

• Police continue to own all communication equipment as before

• Other than GSM CUG

• Orders of magnitude higher bandwidths than what is presently possible

• Communication during congestion and natural calamities

Weaknesses• Multiple frequency

bands needs WPC clearance and license fees

• Main fiber plant is owned by other (government) agencies

Page 32: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Example of a Congestion Communication System

Page 33: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Mahamaham Kumbakonam 2016 Test Deployment of WiFi

• 16 Access Points deployed• 5 with 5.8 GHz

backhaul• 6 with fiber backhaul• 5 with direct cables in

control room

Page 34: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Asterisk IP-PBX Sever

PSTN Interface with 30 simultaneous outside calls

8 port Ethernet switch

5GHz backhaul

WiFi Access Point (connected by cable)

WiFi Access Points (connected by 5GHz backhaul)

5GHz backhaul

Network Elements

CSIPSIMPLE

Page 35: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Congestion Comm System

Page 36: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Congestion Comm System● Advantages

– Provides another layer of communication

– High BW – Both voice and data

– Good solution for congestion communication

– Easy to deploy and Low cost

– Provides backhaul to outside world

Page 37: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Congestion Comm System● Advantages

– Provides another layer of communication

– High BW – Both voice and data

– Good solution for congestion communication

– Easy to deploy and Low cost

– Provides backhaul to outside world

● Disadvantage– May suffer from

interference from unamanaged APs

– Needs intelligent management of channels

Page 38: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Summary

Page 39: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Summary● Many organisations (Govt Offices, Banks, ….) have

similar structure– Needs: Communication BW, database access, many

branches, data security– All face the challenge of rapid obsolescence

Page 40: Exploiting BharatNet and WiFi for Secure Operationswifi-ks.org/archives/files/WiFiKS_5/DJ_IITm_pres.pdf · and WiFi for Secure Operations ... Advantages: Private, Command communication,

Summary● Many organisations (Govt Offices, Banks, ….) have

similar structure– Needs: Communication BW, database access, many

branches, data security– All face the challenge of rapid obsolescence

● A combination of BharatNet and WiFi offers a working solution