Les terminaux mobiles (smartphones et tablettes) sont devenus les terminaux les plus populaires pour accéder à Internet. Cependant, l'écosystème incluant les terminaux mobiles est maintenu opaque à cause des intérêts financiers des différents acteurs : les concepteurs des systèmes d'exploitation et des applications, les opérateurs des "stores", et les FAI. Cette opacité est renforcée par le peu de contrôle qu'ont les utilisateurs sur les informations échangées par leur terminal. Pour résoudre ce problème d'opacité et de manque de contrôle, on a créé une plate-forme, Meddle, qui utilise la redirection de trafic des terminaux mobiles pour analyser et modifier ce trafic. Contrairement aux solutions qui nécessitent d'être implémentées sur le terminal, Meddle combine les techniques de VPN et de "middlebox" pour offrir une solution indépendante de l'OS, du FAI et de l'accès radio. On a utilisé Meddle pour des expérimentations contrôlées et pour une étude utilisateurs approvée par un IRB. On a observé que des applications populaires sous iOS et Android exposaient des informations personnelles dans le traffic réseau en clair et chiffré. On a ensuite exploité Meddle pour prévenir ces fuites d'informations privées. On a également utilisé Meddle pour étudier les caractéristiques réseaux du trafic vidéo sur Internet. On a trouvé que ce trafic dépend fortement du type de terminal, de l'application utilisée pour regarder la vidéo (application native ou navigateur Web) et du contenant (HTML5, Flash, Silverlight). Ce résultat montre qu'un changement dans le terminal, l'application ou le contenant peut avoir un impact important sur le réseau.

La réalité augmentée (RA) mobile consiste à faire coexister en temps-réel des mondes virtuel et réel. La mobilité est facilitée par l'utilisation de nouveaux dispositifs de types smartphones, et mini-PC embarquant un certain nombre de capteurs (visuels, inertiels,...). Ces dispositifs disposent toutefois d'une puissance de calcul limitée, qui peut s'avérer critique au vu des applications envisagées. L'une des solutions est de recourir à des mécanismes de distributions pour répartir les calculs sur un ensemble hétérogène de machines (serveurs ou autre terminaux mobiles). L'objectif de cette thèse est de concevoir une architecture logicielle dédiée à la réalité augmentée distribuée et plus particulièrement aux applications distribuées capable de fonctionner sur des réseaux ad-hoc constitués de terminaux hétérogènes déployées au travers d'un réseau dans un premier temps. Dans un deuxième temps, il conviendra de démontrer l'applicabilité de la solution proposée à des applications concrètes et d'explorer différentes possibilités d'exploitation originales de la distribution dans les applications de Réalité Augmentée en mettant l'accent sur la plus value apportée en terme de fonctionnalités ou d'opérations possibles en comparaison avec une solution de Réalité Augmentée classique (non distribuée) et en comparaison avec les performances des environnements dédiés à la RA existants offrant la possibilité de créer des applications distribuées.

L'Internet of Things (IoT) est caractérisé par l'introduction, auprès des utilisateurs, d'un nombre grandissant d'objets (ou things) capables d'acquérir des données depuis leur environnement et d'agir sur celui-ci, et dotés de capacités de calcul et de communication sophistiquées. Une grande partie de ces objets ont pour avantage d'être mobiles, mais cette particularitéprovoque aussi l'émergence de problèmes nouveaux. Les plus critiques d'entre eux découlent directement de l'Internet actuel, sous une forme amplifiée, et portent sur la gestion du grand nombre d'utilisateurs et d'objets connectés, l'interopérabilité entre des objets aux technologies hétérogènes et les changements d'environnement dus à la mobilité d'un très grand nombre d'objets. Cette thèse se propose d'étudier et de résoudre les problèmes susmentionnés en adaptant l'Architecture Orientée Service (SOA) pour que les capteurs et les actionneurs intégrés aux objets puissent être présentés comme des services et, de fait, réduire le couplage entre ces services et leurs hôtes de façon à abstraire leur nature hétérogène. Toutefois, en dépit de ses avantages, SOA n'a pas été conçue pour gérer une aussi grande échelle que celle de l'IoT mobile. En conséquence, la contribution principale de cette thèse porte sur la conception d'une Thing-based Service-Oriented Architecture repensant les fonctionnalités de SOA, et tout particulièrement les mécanismes de découverte et de composition de services. Cette nouvelle architecture a été mise en oeuvre au sein de MobIoT, un middleware spécifiquement conçu pour gérer et contrôler le très grand nombre d'objets mobiles impliqués dans les opérations propres à l'IoT. Dans le but d'évaluer cette nouvelle architecture, nous avons implémenté un prototype et analysé ses performances au travers de nombreuses expériences qui démontrent que les solutions que nous proposons sont viables et pertinentes, notamment en ce qui concerne le passage à l'échelle.

This research is motivated by the recent developments in the Internet Engineering Task Force (IETF) to support seamless integration of moving networks deployed in vehicles to the global Internet. The effort, known as Network Mobility (NEMO), paves the way to support high-speed Internet access in mass transit systems, e.g. trains; buses; ferries; and planes; through the use of on-board mobile routers embedded in the vehicle. One of the critical research challenges of this vision is to achieve high-speed and reliable back-haul connectivity between the mobile router and the rest of the Internet. The problem is particularly challenging due to the fact that a mobile router must rely on wireless links with limited bandwidth and unpredictable quality variations as the vehicle moves around. In this thesis, the multi-homing concept is applied to approach the problem. With multi-homing, mobile router has more than one connection to the Internet. This is achieved by connecting the mobile router to a diverse array of wireless access technologies (e.g., GPRS, CDMA, 802.11, and 802.16) and/or a multiplicity of wireless service providers. While the aggregation helps addressing the bandwidth problem, quality variation problem can be mitigated by employing advanced traffic engineering techniques that dynamically control inbound and outbound traffic over multiple connections. More specifically, the thesis investigates traffic engineering solutions for mobile networks that can effectively address the performance objectives, e.g. maximizing profit for mobile network operator; guaranteeing quality of service for the users; and maintaining fair access to the back-haul bandwidth. Traffic engineering solutions with three different levels of control have been investigated. First, it is shown, using detailed computer simulation of popular applications and networking protocols(e.g., File Transfer Protocol and Transmission Control Protocol), that packet-level traffic engineering which makes decisions of which Internet connection to use for each and every packet, leads to poor system throughput. The main problem with packet-based traffic engineering stems from the fact that in mobile environment where link bandwidths and delay can vary significantly, packets using different connections may experience different delays causing unexpected arrivals at destinations. Second, a maximum utility flow-level traffic engineering has been proposed that aims to maximize a utility function that accounts for bandwidth utilization on the one hand, and fairness on the other. The proposed solution is compared against previously proposed flow-level traffic engineering schemes and shown to have better performance in terms of throughput and fairness. The third traffic engineering proposal addresses the issue of maximizing operator?s profit when different Internet connections have different charging rates, and guaranteeing per user bandwidth through admission control. Finally, a new signaling protocol is designed to allow the mobile router to control its inbound traffic.

The future Internet will need to cater for an increasing number of powerful devices and entire groups of networks to roam in heterogeneous access networks. The current approach towards meeting such requirements, which is to retrofit mobility solutions to different layers of the protocol stack, has given rise to an increasingly fragmented network control layer. Furthermore, retrofitting solutions in an ad-hoc manner to the protocol stack does not provide consistent support from the network to different applications. This lack of a common control layer for facilitating roaming in heterogeneous networking environments represents a crucial challenge both technically and from a user perspective. To this end, a novel mobility architecture forms the basis and the first part of this dissertation. The work on investigating current network mobility solutions and improving these solutions if deemed necessary, in order to reuse within the novel mobility architecture constitutes the second part of this dissertation. The IETF standard protocol for network mobility was implemented and its performance was analysed on a real networking environment. This enabled to identify problems in the standard which affect the handover and routing performance. To address the identified routing and protocol header overheads of the standard network mobility protocol a novel optimal routing framework, OptiNets was proposed. To address the handover latency issues, optimizations to IPv6 network attachment were incorporated and also an access technology independent multiple interface Make-Before-Break handover mechanism was proposed. The viability of the OptiNets framework and the handover optimizations were demonstrated by analysis and by implementation. A more general external factor that affects the performance of mobile networks which is bandwidth scarcity of Wireless Wide Area Networks was addressed, by proposing a bandwidth fuelling architecture for on-board mobile networks. The feasibility of the bandwidth fuelling architecture was analysed by implementing a prototype and evaluating its performance.

[pt] Aplicações para o monitoramento de frotas de veículos e sistemas de logística, coordenação em situações de emergência, monitoramento ambiental ou de gestão de força de trabalho móvel podem usar redes móveis como meio de comunicação, troca de informações e de coordenação entre um número possivelmente grande de nós móveis interligados por uma rede WAN. A maioria desses sistemas requer o monitoramento em tempo real das informações de contexto dos nós móveis, interação com todos os nós participantes, bem como meios de adaptação num cenário muito dinâmico, onde não é possível prever quando, onde e por quanto tempo os nós permanecerão conectados. As soluções atuais ainda não têm recursos essenciais necessários para a comunicação com os nós móveis, tais como a entrega confiável de mensagens, suporte a handover, resistência a conectividade intermitente, mudanças de endereço IP e firewall transversal. Esta tese propõe um modelo de gestão de dados que permite a implantação de uma rede de componentes de provedores de dados com disseminação e transformação rápida e confiável de informações entre milhares de nós móveis interligados através de internet sem fio. Os testes de desempenho indicam que o nosso modelo consegue escalar para milhares de nós móveis e suporta disseminação confiável, rápida e com alta taxa de transferência da informação entre milhares de provedores de contexto e consumidores de contexto móveis. / [en] Applications such as vehicle fleet monitoring and logistic systems, emergency response coordination, environmental monitoring or mobile workforce management, employ mobile networks as means of communication, information sharing and coordination among a possibly very large set of mobile nodes interconnected by a Wide Area Network (WAN). The majority of those systems thus requires real-time tracking of the mobile nodes context information, interaction with all participant nodes, as well as means of adaptability in a very dynamic scenario, where it is not possible to predict when, where and for how long the nodes will remain connected. Despite being a subject of much research, current solutions still lack essential features required for communication with mobile nodes, such as reliable message delivery, handover support, resilience to intermittent connectivity, IP address changes and firewall transversal. This thesis proposes a data management model that enables deployment of a network of Data Provider components with reliable and on-time dissemination and transformation of information among thousands of mobile nodes interconnected through wireless internet. Performance tests indicate that our model scales to thousands of mobile nodes and supports reliable, high throughput and on-time data dissemination between several thousands of mobile Data Providers and Data Consumers.

The capacity to engage in web services transactions on smartphones is growing as these devices become increasingly powerful and sophisticated. This capacity for mobile web services is being realised through mobile applications that consume web services hosted on larger computing devices. This thesis investigates the effect that end-to-end web services security has on the interoperability between mobile web services requesters and traditional web services providers. SOAP web services are the preferred web services approach for this investigation. Although WS-Security is recognised as demanding on mobile hardware and network resources, the selection of appropriate WS-Security mechanisms lessens this burden. An attempt to implement such mechanisms on smartphones is carried out via an experiment. Smartphones are selected as the mobile device type used in the experiment. The experiment is conducted on the Java Micro Edition (Java ME) and the .NET Compact Framework (.NET CF) smartphone platforms. The experiment shows that the implementation of interoperable, end-to-end, mobile web services security on both platforms is reliant on third-party libraries. This reliance on third-party libraries results in poor developer support and exposes developers to the complexity of cryptography. The experiment also shows that there are no standard message size optimisation libraries available for both platforms. The implementation carried out on the .NET CF is also shown to rely on the underlying operating system. It is concluded that standard WS-Security APIs must be provided on smartphone platforms to avoid the problems of poor developer support and the additional complexity of cryptography. It is recommended that these APIs include a message optimisation technique. It is further recommended that WS-Security APIs be completely operating system independent when they are implemented in managed code. This thesis contributes by: providing a snapshot of mobile web services security; identifying the smartphone platform state of readiness for end-to-end secure web services; and providing a set of recommendations that may improve this state of readiness. These contributions are of increasing importance as mobile web services evolve from a simple point-to-point environment to the more complex enterprise environment.

Data-centric security is significant in understanding, assessing and mitigating the various risks and impacts of sharing information outside corporate boundaries. Information generally leaves corporate boundaries through mobile devices. Mobile devices continue to evolve as multi-functional tools for everyday life, surpassing their initial intended use. This added capability and increasingly extensive use of mobile devices does not come without a degree of risk - hence the need to guard and protect information as it exists beyond the corporate boundaries and throughout its lifecycle. Literature on existing models crafted to protect data, rather than infrastructure in which the data resides, is reviewed. Technologies that organisations have implemented to adopt the data-centric model are studied. A utopian model that takes into account the shortcomings of existing technologies and deficiencies of common theories is proposed. Two sets of qualitative studies are reported; the first is a preliminary online survey to assess the ubiquity of mobile devices and extent of technology adoption towards implementation of data-centric model; and the second comprises of a focus survey and expert interviews pertaining on technologies that organisations have implemented to adopt the data-centric model. The latter study revealed insufficient data at the time of writing for the results to be statistically significant; however; indicative trends supported the assertions documented in the literature review. The question that this research answers is whether or not current technology implementations designed to mitigate risks from mobile devices, actually address business requirements. This research question, answered through these two sets qualitative studies, discovered inconsistencies between the technology implementations and business requirements. The thesis concludes by proposing a realistic model, based on the outcome of the qualitative study, which bridges the gap between the technology implementations and business requirements. Future work which could perhaps be conducted in light of the findings and the comments from this research is also considered.

Made available in DSpace on 2015-05-14T12:36:56Z (GMT). No. of bitstreams: 1 arquivototal.pdf: 2305795 bytes, checksum: 0e634264f2c488a816479aec2da0cc18 (MD5) Previous issue date: 2010-08-16 / Coordenação de Aperfeiçoamento de Pessoal de Nível Superior / Advances in wireless communication technologies and miniatuziation of mobile devices are leading to great opportunities in the development of applications to explore this new computing frontier. However, the development of applications for such scenarios introduces new challenges, as mobile applications run on resouce-scarce devices and communicate with each other by means of wireless networks, which are characterized by intermittent connections. In order to avoid having to deal with such issues in an ad hoc fashion for every application, middleware platforms are adopted, concealing difficulties raised by mobility from application engineers as much as possible. Due to the asynchronous and loosely coupled communication style, Message-oriented Middleware (MOM) platforms have been commonly adopted for supporting the development of networked mobile applications. However, one of the most significant limitations of current MOM for mobile platforms is that they typically support a single, predefined communication paradigm (e.g., publish/subscribe). Such a restriction limits the scope of applications supported by the middleware. In order to mitigate such a limitation, this paper presents a middleware for mobile devices capable of supporting an extensible set of message-oriented communication paradigms (e.g. tuple spaces, message queue, publish/subscribe). Supported by an integrated architecture, which has been conceived based on a Software Product Line (SPL) approach, the middleware encapsulates common features that deal with mobility issues and provides them as shared, reusable components. Evaluation results show that the overhead introduced by such a multi-paradigm approach is minimal, both in memory footprint and runtime performance. Additionally, an application scenario illustrates how mobile applications may benefit from such an approach. / Os avanços nas tecnologias de comunicação sem fio e a miniaturização dos dispositivos móveis de alta capacidade estão trazendo grandes oportunidades para o desenvolvimento de aplicações que explorem essas novas fronteiras da computação. Entretanto, o desenvolvimento de aplicações nestes cenários traz novos desafios, pois estas operam em dispositivos de recursos limitados e comunicam-se através de redes sem fio, caracterizadas por conexões intermitentes. Para evitar que esses desafios tenham que ser resolvidos de forma improvisada para cada aplicação, plataformas de middleware são utilizadas, liberando os desenvolvedores de aplicações das dificuldades trazidas pela mobilidade. Devido ao seu estilo de comunicação assíncrono e fracamente acoplado, plataformas de Middleware orientado a Mensagens (MOM) têm sido comumente adotadas nestes casos. Entretanto, uma das limitações mais significantes das atuais plataformas de MOM é que elas geralmente dão suporte a um paradigma de comunicação único e predefinido (ex.: publish/subscribe). Essa restrição limita o escopo de aplicações que o middleware pode dar suporte. Para lidar com essa limitação, esta dissertação propõe um middleware para dispositivos móveis capaz de dar suporte a um conjunto extensível de paradigmas de comunicação baseados em mensagens (ex.: espaço de tuplas, filas de mensagens, publish/subscribe). Através de uma arquitetura integrada, a qual foi concebida baseada numa abordagem de Linha de Produto de Software (LPS), o middleware encapsula funcionalidades comuns para lidar com os desafios trazidos pela mobilidade, provendo componentes reusáveis e compartilhados entre os diversos paradigmas. Os resultados da avaliação mostram que o overhead introduzido pela abordagem multi-paradigma é mínimo, tanto em termos de espaço ocupado em memória, quanto em desempenho em tempo de execução. Por fim, com o intuito de ilustrar como aplicações móveis podem se beneficiar dessa abordagem, um cenário de aplicação é descrito.

Made available in DSpace on 2016-08-17T14:53:06Z (GMT). No. of bitstreams: 1 Diego_Souza_Gomes.pdf: 2086164 bytes, checksum: d2a9f245dd16522cb21c6fcb10bb8447 (MD5) Previous issue date: 2009-12-07 / Mobile computing technologies and wireless networks have evolved very quickly. Nowadays, many of the portable devices have significant processing power, storage and communication capacity. At the same time, grid computing technology became an important tool for collaborative work among users and organizations enabling the sharing of computing resources and services through multiple administrative domains. Due to the popularity of mobile computing, users of handheld devices form an important and new segment of the computing grid, assuming both the role of consumers and providers of resources and services. The integration of these two categories of distributed systems aims to extend the capabilities of portable devices, enabling access to a infrastructure of shared resources, as well as provide faster and easier means for grid services users to access information produced by these systems at any time and place. This work describes the MInteGrade (Mobile InteGrade), a software infrastructure that provides access to the InteGrade grid middleware from mobile devices connected through IEEE 802.11 wireless networks in infrastructure mode, and Bluetooth networks in Ad hoc mode. Through this mechanism for access to a computational grid, mobile clients can request the execution of applications on the grid, monitor the execution of applications and view the computation results already completed. The MInteGrade was designed so as to consider the dynamics of wireless networks. Specifically, it supports disconnections of devices and dynamic changes of the Ad hoc network topology, aswell as content adaptation of the output of the grid computations. / Tecnologias de computação móvel e de redes sem fio têm evoluído muito rapidamente, de forma que muitos dos dispositivos portáteis possuem atualmente considerável capacidade de processamento, armazenamento e comunicação. Paralelo a isso, a tecnologia de grades computacionais se consolidou como um ferramental importante para o trabalho colaborativo entre usuários e organizações, através do compartilhamento de recursos e serviços computacionais entre múltiplos domínios administrativos. Devido a esta popularização da computação móvel, usuários de dispositivos portáteis formam um importante e novo segmento da computação em grade, assumindo tanto o papel de usuários como também de provedores de recursos e serviços. A integração dessas duas categorias de sistemas distribuídos, objetiva estender as capacidades dos dispositivos computacionais móveis através do acesso a uma infra-estrutura de recursos compartilhados, além de fornecer aos usuários de serviços de grade meios mais rápidos e fáceis de acesso as informações produzidas por estes sistemas em qualquer hora e lugar. Este trabalho descreve oMInteGrade (Mobile InteGrade), uma infra-estrutura de software para acesso aos serviços do middleware de grade InteGrade a partir de dispositivos móveis conectados através de redes sem fio IEEE 802.11 em modo infraestruturado e redes bluetooth em modo Ad hoc. Através deste mecanismo para acesso a uma grade de computadores, clientes móveis podem solicitar a execução de aplicações na grade, realizar o acompanhamento da execução das aplicações e visualizar o resultado de computações já concluídas. O MInteGrade foi projetado para levar em consideração o dinamismo das redes sem fio, provendo suporte a períodos de desconexão e variações na topologia das redes Ad hoc, bem como a adaptação de conteúdo dos resultados das computações realizadas pela grade.