WiFiWiFi –– What’sWhat’s Next?Next?
Paul S. Henry AT&T Labs - Research [email protected] October 2, 2002 Wi-Fi: The Hype
Internet
•Plug in the card Wi-Fi: The Hype
Internet
•Plug in the card •Find an access point (esp free hotspot) •Presto! 11 Mb/s Internet connection •David vs Goliath – end of DSL, broadband cable and 3G cellular! •If problems, try Pringles! Wild About Wi-Fi Rising from the grass roots, high-speed wireless Internet connections are springing up everywhere. Tune in, turn on, get e-mail. Sometimes for free. 6/10/02 The Corner Internet Network vs. 2 Tinkerers Say They've Found the Cellular Giants a Cheap Way to Broadband March 4, 2002 June 10, 2002 High Speed, Freed Motley Crew Beams No-Cost Broadband to New York August 15, 2001 The Beat Goes on….
Want Broadband With Your Fries? McDonald's serves WLAN broadband in Japan The Register, May 2002
Wi-Fi Makes Broadband Painless Wall Street Journal, Feb 4, 2002
Why Not Try Wi-Fi? Time.com, June 2002 Warming to Wi-Fi The network technology…has sparked a kind of populist movement. 'Hot spots' are sprouting all over. LATimes 4/18/02
Above the Crowd: Why Wi-Fi Is The Next Big Thing Fortune 3/5/01 Worldwide WLAN Installed Base (millions of transceivers)
Source: Sports Illustrated
120
100
80
60
40
20 Source: IDC
0 1998 1999 2000 2001 2002 2003 2004 2005 2006 IP Telephones
18
16
14
12
10 Worldwide Installed 8 base, IP telephones
6
4
2
0 2000 2001 2002 2003 2004 2005 2006 Moore’s Law
25
20
15
Moore's Law 10
5
0 2000 2001 2002 2003 2004 2005 2006 2007 Corning Share Price The Central Question
Will the telecom bust ever end? The Central Question What’s next for WiFi? Blessings from the Gods
Bill Gates, Dec ‘01: If any one technology has emerged in the past few years that will be explosive in its impact, it's 802.11.
Bob Lucky, May ’02: WiFi is the only real exciting stuff going on right now WLAN Family Tree
Proprietary WaveLAN,WaveLAN, RangeLAN RangeLAN Implementations 900900 MHz, MHz, 1-2 1-2 Mb/s Mb/s
802.11802.11 2.42.4 GHz, GHz, 2 2 Mb/s Mb/s
Higher Higher frequency, bit rate bit rate
Wi-Fi 802.11a Wi-Fi 5 802.11b802.11b 802.11a 5 GHz 11Mb/s11Mb/s 5 GHz Higher bit rate
Wi-Fig? Quality of Service 802.11g802.11g Capability 5454 Mb/s Mb/s 802.11e802.11e The Wireless Road Warrior
Corporate Intranet Firewall
Mobility manager Cellular Internet network
Public hotspot The Wireless Road Warrior •Reproduce the Office Desktop Experience •Always-on •Hassle-free security •Autoconfiguration
Corporate Intranet Firewall
Mobility manager Cellular Internet network
Public hotspot The Wireless Road Warrior •Reproduce the Office Desktop Experience •Always-on •Hassle-free security •Autoconfiguration
Corporate Intranet Firewall
Mobility manager Cellular Internet network
Public hotspot The Wireless Road Warrior •Reproduce the Office Desktop Experience •Always-on •Hassle-free security •Autoconfiguration
Corporate Intranet Firewall
Mobility manager Cellular Internet network
Public hotspot The Wireless Road Warrior •Reproduce the Office Desktop Experience •Always-on •Hassle-free security •Autoconfiguration •Natural extension to dial-up remote access •2003 – 2007 Projected WiFi Revenues Corporate •Equipment: $2B – 4.5B Intranet Firewall •Public Hot Spot: $1B – 8B
Mobility manager Cellular Internet network
Public hotspot Key Challenges for WiFi #1 G 1. Ease of Use – a long way to go V 2. Security – the clock is ticking I 3. Mobility – WiFi technology ☺ – WiFi service 4. Network management – more headaches for IT groups 1. Ease of Use
Cannot Connect Bob Lucky, January ’02 Spectrum
A sure way to stop a meeting is to offer the participants network connectivity.
What I want is a “push-to-talk” button on the computer. Configuring the Windows XP Zero-Configuration Wireless Client These instructions must be followed explicitly. Use the drivers that come with Win XP Using even the drivers in the Fall 2001 Orinoco release could cause you to have to reinstall Win XP!
1. The next step to getting on USC's wireless network is to configure Windows to connect using our settings. 2. Click on the Start button and select Control Panel. Click on Network and Internet Connections and then on Network Connections. A new icon labeled Wireless Network Connection will appear. Right- click on this icon and select Properties. 3. Click to highlight the Internet Protocol (TCP/IP) component and then click the Properties button. 4. From the Internet Protocol (TCP/IP) Properties window, click on the Advanced button. 5. Under the DNS tab, click on the Add button from the DNS server addresses, in order of use. Type in the numbers 128.125.253.183 then click on Add. 6. Click on the Add button. Type in the numbers 128.125.253.166 then click on Add. 7. Click on the Add button again. Type in the numbers 128.125.253.136 then click on Add. 8. Select Append these DNS suffixes (in order). 9. Click on the Add button, type in usc.edu then click on Add. 10. Click on the Add button again, type in hsc.usc.edu then click on Add. 11. Under the DNS suffix for this connection, type in usc.edu 12. Make sure that Register this connection's addresses in DNS and Use this connection's DNS suffix in DNS registration are both checked 13. Below the section labeled Preferred Networks is an Add button. Click on it and a new window labeled Wireless Network Properties will pop up. 14. In the Network Name (SSID) field, type USC in uppercase characters. Ensure that both Data Encryption (WEP enabled) and Network Authentication (Shared Mode) are checked. 15. Uncheck the box that says The key is provided for me automatically. The field Network Key should contain the letters GOUSC in uppercase characters. Ensure that the Key format is ASCII characters and the Key length is 40 bits. Click on OK to close this window. 16. Click on the Advanced button and verify that the Access Point (infrastructure) networks only option is selected. Click OK to continue. Click on OK again to exit the Wireless Network Connection Properties window. 17. Continue on next page…. WiFi Configuration and Hotspot Sign-up
Host configuration is a pain for everyone Bothersome on private networks Challenging at public access points (hotspots) A nearly insuperable barrier for technophobes
Auto-configuration is a great convenience for the road warrior… and essential to capture the first-use, walk-up customer. Hotspot sign-up Browser-based, e.g. T-mobile/Starbucks • Simple, but insecure (vulnerable to highjacking, despite SSL) 802.1x (EAP-based) • Secure, but cumbersome (requires pre-arranged account)
Goal: Enable auto-configuration and fully secure sign-up without pre-arranged account We have a long way to go 2. WiFi Security
Security causes Best Buy register ban ZdNet news, May 3, 2002
Security won’t work if not turned on
WEP (Wired Equivalent Privacy) ‘Equivalent’ to Ethernet in-building privacy Private, not secure Vulnerabilities recently exposed • UC Berkeley, Cisco, AT&T
Security Alternatives Improved WEP -- Dynamic keying (TKIP) or block cipher. Simple, convenient, but unproven • Draft standard in progress Secure Virtual Private Network (VPN) -- Bulletproof, but cumbersome and not ‘native’ to Wi-Fi
6/14/02: Best Buy re-activates wireless cash registers No comment on security precautions WEP vs. VPN Physical Building Boundary Building LAN
WEP Assumed secure X Protection
Wild Secure Side Side
VPN Tunnel X VPN Gateway Building LAN
No WEP
Logical Building VPN Boundary Client WEP: Simple, convenient. Needs finalized standard. Delay could kill Wi-Fi momentum
VPN: No WEP, therefore need separate wiring installation. Extensible to off-premises VPN for Remote Access
Building Boundary
Assumed Insecure
Secure Side
Internet VPN Gateway Building LAN
Logical Building Off-prem user Boundary
End-to-end VPN provides protection both on-premises and off. ‘Universal’ WiFi Access 3. Mobility --- Technology
Multi-vendor interoperability -- User’s PC card communicates with any vendor’s access point 802.11b compliance not sufficient Wireless Ethernet Compatibility Alliance (WECA) • Wireless fidelity (WiFi), the de facto standard
Multi-service ‘roaming’ -- User account works on multiple Wireless ISP (WISP) networks Not always-on Mutual agreement among WISPs • WECA – Wireless Internet Service Provider roaming (WISPr) • Interconnect AAA functions (Authentication, Authorization, Accounting) Aggregator (resell WISP services) • Boingo
Always-on mobility – Mobile IP Re-routing of live connections Mobile IP --- Always-on
Home Internet Agent
Foreign Agent Foreign Agent
Foreign Network Foreign Network Mobile IP --- Always-on
Home Internet Agent
Foreign Agent
Foreign Network Foreign Network
Technology – Ericsson, Lucent, Nokia, PCTEL
Trials: Rogers AT&T Wireless, Green Packet/WiFi Metro Mobility --- Hotspot Service
Lessons in broadband wireless from the school of hard knocks Ricochet (Metricom) AT&T Project Angel Teligent Winstar #2 MobileStar VG Cellular model: ubiquity is essential I
Challenge: Establish national (or global) hotspot network Joltage – Micro-hotspot franchise model (~ True Value Hardware). Boingo – Aggregator: Partner with public WLAN operators; sell subscriptions to individuals • Provide settlements, billing, single account, hotspot sniffer • Multi-location, but not always-on T-Mobile HotSpot – Integrated Carrier • Acquire MobileStar’s assets • Set the stage for integration with cellular Joltage (Franchise) Internet
Joltage ~$2/hr, $25/mo
Independent Micro-Hotspots Boingo (Aggregator)
SprintPCS EarthLink GoAmerica (WWAN) $$$
Boingo (~600 hotspot sites)
SMC ~$8/day, $75/mo TSI (Equipment) (Cellular Svcs)
Wireless Wayport SurfnSip AirPath Freenets ISPs T-Mobile HotSpot (Integrated Carrier)
T-Mobile International
Cellular Networks
• ~1200 locations • $29.99/mo single metro, 49.99/mo nationwide • Integrate with cellular? Enter: Goliath(s) Bad news for David….
TOSHIBA Mobility Communications System, which allows users to roam across 802.11b and 3G networks…, is slated for launch in the second quarter of 2003 Infoworld June 24, 2002
Talks Weigh Big Project on Wireless Internet Link The Intel Corporation, I.B.M., AT&T Wireless and several other wireless and Internet service providers including Verizon Communications and Cingular are exploring the creation of a company to deploy a [nationwide] network based on the increasingly popular 802.11 wireless data standard, known as WiFi. [Project Rainbow] NYT July 16, 2002
Lucent Technologies teams with industry leaders to offer secure mobile data solutions for enterprises… via Wireless LANs and 3G Networks PRNewswire JULY 17, 2002 4. Network Management Building LAN Signal integrity at the physical layer is rarely an issue. Signals propagate reliably Minimal wire-to-wire interference Bit errors usually traceable to logical layers (i.e. collisions) #3 G IV Bit errors can be caused by Conventional collisions (as in wired case) Building LAN Reduced signal strength (e.g. user motion) Interference (e.g. distant AP, microwave oven) • Foreign sources especially troublesome
Additional degradation due to capacity mismatch of wired vs wireless Bandwidth hogs Broadcast overload
Automated physical-layer tools needed for large networks. Rogue Access Points
VPN Cable Corporate Gateway or DSL Netgate/ Rogue Intranet YourKey AP
VPN Home user Gateway Rogue APs are Everywhere • Unknown/unauthorized installation AP AP PC Rogue • Naïve/malicious users AP • Gaping security hole • Detection •Fairly easy on corporate premises •Extremely difficult at employee’s home HELP WANTED (Sept. 2003) Wi-Fi certified computer scientists and electrical engineers #4 We’re building a team of world-class self-starters who will shapeG the future of The Next Big Thing. IV If you’ve got what it takes, we offer you a wide range of exciting opportunities in a dynamic, challenging environment. High-profile Wi-Fi initiatives include:
1. Ease of Use 3. Mobility True auto-configuration capability Always-on --- Close and go; open and resume Walk-up subscription Economic viability of hotspots Integration with cellular networks 2. Security Enhanced WEP 4. Network Management Standards leadership Physical-layer management Rogue detection
And speaking of rogues…..
Send your resume to: Bernie Ebbers, CEO Wireless4U, Inc P.O. Box 23 Hamilton, Bermuda