Wednesday, March 30, 2011

IEEE 802.3 Standards


While connecting computers through networks we need to have set of rules/standards for the data to travel from one computer to other computer. The right example for this can be road traffic rules. It's self understood, why we need traffic rules while driving, in same sense for the data packets to travel from one computer terminal to other terminal they should also follow set of rules and regulations.
One such set of rules for the networking traffic to follow is IEEE802 standards. Its developed by IEEE (Institute of Electrical and Electronics Engineers, Inc.) The IEEE is the world's leading professional association for the advancement of technology. It's a non- profit organization offering its members immense benefits.
The standards such as IEEE 802 helps industry provide advantages such as, interoperability, low product cost, and easy to manage standards.
IEEE standards deal with only Local Area Networks (LAN) and Metropolitan Area Networks (MAN). See in the figure below, to know where exactly the IEEE802 standards are used in a OSI layer.
tcp/ip stack_ieee
The IEEE 802 standards are further divided into many parts.
They are,

IEEE 802.1 Bridging (networking) and Network Management
IEEE 802.2 Logical link control (upper part of data link layer)
IEEE 802.3 Ethernet (CSMA/CD)
IEEE 802.4 Token bus (disbanded)
IEEE 802.5 Defines the MAC layer for a Token Ring (inactive)
IEEE 802.6 Metropolitan Area Networks (disbanded)
IEEE 802.7 Broadband LAN using Coaxial Cable (disbanded)
IEEE 802.8 Fiber Optic TAG (disbanded)
IEEE 802.9 Integrated Services LAN (disbanded)
IEEE 802.10 Interoperable LAN Security (disbanded)
IEEE 802.11 Wireless LAN & Mesh (Wi-Fi certification)
IEEE 802.12 demand priority (disbanded)
IEEE 802.13 Not Used
IEEE 802.14 Cable modems (disbanded)
IEEE 802.15 Wireless PAN
IEEE 802.15.1 (Bluetooth certification)
IEEE 802.15.4 (ZigBee certification)
IEEE 802.16 Broadband Wireless Access (WiMAX certification)
IEEE 802.16e (Mobile) Broadband Wireless Access
IEEE 802.17 Resilient packet ring
IEEE 802.18 Radio Regulatory TAG
IEEE 802.19 Coexistence TAG
IEEE 802.20 Mobile Broadband Wireless Access
IEEE 802.21 Media Independent Handoff
IEEE 802.22 Wireless Regional Area Network

Here we discuss most popular and key parts of above list
IEEE 802.3 Ethernet (CSMA/CD)
A method called Carrier Sense Multiple Access with Collision Detection (CSMA/CD) was used to send data over shared single co-axial cable connected to all computers on a network. In this method, the computer terminals (also called as stations) transmits the data over cable whenever the cable is idle, If more than one station transmit at same time and if they collide, the transmission will be stopped by such stations. They will wait for some random time and restart transmission.
The concept of sharing single cable or wire between multiple stations was used for first time in Hawaiian Islands. It was called ALOHA systems; built to allow radio communication between machines located at different places in Hawaiian Islands. Later Xerox PARC built a 2.94 mbps CSMA/CD system to connect multiple personal computers on a single cable. It was named as Ethernet.
Ethernet or IEEE802.3 standards only define MAC (Data link) and Physical layer of standard OSI model.
Don't confuse TCP/IP with Ethernet. TCP/IP defines Transport and network layers.




Wiring and cabling standards of 802.3
There are four cabling standards as per 802.3, each one has evolved over the time for their special advantages.
The four types of cables are,
1. 10Base5
2. 10Base2
3. 10Base-T
4. 10Base-F
The table below compares all four types of cables
Technical NameCable/Wire typeMax. Segment/wire LengthMaximum number of Nodes/SegmentAdvantages
10Base5Thick coaxial500 meters100Long cable length
10Base2RG58 (thin) coaxial185 meters30Low cost
10BaseTTwisted pair (like telephone wire)100 meters1024Easy to maintain
10BaseFFiber-optic2,000 meters1024No noise interference

The 10 in the technical name refer to data speed of 10Mbits/sec.
"Link Integrity" and "Auto-partition" are part of the 10BaseT specification. This means that all network equipment claiming compliance with 10BaseT must support Link Integrity and Auto-partitioning.
10Base5
10 Base5 is also called as ThickNet or thick Ethernet. It uses RG-8 thick coaxial trunk cable, which looks like orange colored garden hose. The cable is tapered with taps called vampire taps in which a pin is carefully forced halfway into the cable's core. The connection can be made to the desired computer network interface card (NIC) from these vampire taps. ThickNet can travel 500 meters per segment, and it can have a maximum of 100 taps per segment. Each tap requires a minimum distance of 2.5 meters before the next tap and has a maximum drop distance of 50 meters. The cable must be terminated with a 50-ohm terminator resistor.
Due to its complex and slow nature 10Base5 is no more preferred. The severe drawback is entire line will fail for any single failure on the trunk. This cable can be termed as obsolete/outdated technology.
The one plus point of ThickNet is that, once it's up and running, it will continue to do so until you tell it otherwise. Although it is slow and unwieldy, 10Base5 technology is very reliable.
Here is the figure showing how the cables are connected to Network Interface Cards inside the computer using 10base5.
10base5 wiring

10Base2
10Base2 is not very different from 10 Base5. The most notable physical difference between 10Base2 and 10Base5 is the size of the co-axial cable. 10Base2 is thinner than the 10Base5 and so is called as ThinNet or thin Ethernet. Another difference is that 10Base2 is set up in a daisy chain. Daisy chain is a wiring scheme in which, for example, device A is wired to device B, device B is wired to device C, device C is wired to device D, et cetera.
10Base2 uses BNC connectors attached to a thin coaxial cable. The maximum segment length of 10Base2 is 185 meters, and the maximum number of devices per segment is 30.
10Base is also outdated/obsolete technology. In rare cases it could be deployed as a backbone for a network.
Here is the figure showing how the cables are connected to Network Interface Cards inside the computer using 10base5.
10base2 wiiring

10Base-T
10Base-T is the most popular cabling method. Its also called Standard Ethernet, or twisted pair, 10Base-T works on a star topology connecting all computers to a hub. It is best used with Category 5 cable (so it can be upgraded to Fast Ethernet) and can have a maximum of three hubs daisy-chained together.
Since it is simple and cheap to implement it is most opted one. The specifications of Standard Ethernet include the following:
It uses RJ45 connectors on unshielded twisted-pair (UTP) cable.
The maximum cable length is 100 meters (before a repeater is needed).
The maximum number of devices per segment is 1,024 (although performance will become quite poor before that number is ever reached).
The 10Base-T standard is best employed within a LAN where cost is a factor-and speed and distance are not.
Link Integrity is concerned with the condition of the cable between the network adapter and the hub. If the cable is broken, the hub will automatically disconnect that port.
Auto partitioning occurs when an Ethernet hub port experiences more than 31 collisions in a row. When this happens, the hub will turn off that port, essentially isolating the problem.

10Base-F
In 10BaseF the twisted copper wires are replaced by a optical fiber. 10Base-F uses a higher quality cabling technology, multimode (or single-mode) fiber-optic cable, to transport data. The particular technology has two subdivisions that must be addressed: the newer 10Base-FL and 10BaseFOIRL.
Because it is older, the 10BaseFOIRL (Fiber-optic Inter-repeater Link) technology doesn't have quite the capabilities of the newer 10Base-FL. With 10BaseFOIRL, you have the following specs:
It's based on IEEE 802.3.
The segment length is 1,000 meters.
There are three sizes of duplex multimode fiber: 50-, 62.5-, or 100-micron. Of these three, 62.5-micron is the most common.
ST or SMA 905 connectors are used by 10BaseFOIRL.
It must be used in a star configuration.
AUI connectors have to be connected to fiber transceivers.
The much-improved 10Base-FL technology offers a different set of specs:
It's based on the 10Base-F IEEE 802.3 spec.
It's able to interoperate with FOIRL and is designed to replace the FOIRL specification.
The segment length is 2,000 meters (if exclusively using 10Base-FL).
The maximum number of devices per segment is two; one is the station and the other is the hub.
The maximum number of repeaters that may be used between devices is two.
NICs with standard AUI ports must use a fiber-optic transceiver.
The benefits of optical fiber are,
No radio or magnetic interference.
Transmissions are safe from electronic bugging,
Cable is extremely lightweight,
10Base-FL fiber-optic technologies are best implemented in long runs where reliability and security are critical.
For More details Visit: http://www.gurukpo.com/




Hash Function

A hash function H is a transformation that takes a variable-size input m and returns a fixed-size string, which is called the hash value h (that is, h = H(m)). Hash functions with just this property have a variety of general computational uses, but when employed in cryptography the hash functions are usually chosen to have some additional properties.
The basic requirements for a cryptographic hash function are:
  • the input can be of any length,
  • the output has a fixed length,
  • H(x) is relatively easy to compute for any given x ,
  • H(x) is one-way,
  • H(x) is collision-free.
A hash function H is said to be one-way if it is hard to invert, where "hard to invert" means that given a hash value h, it is computationally infeasible to find some input x such that H(x) = h.

If, given a message x, it is computationally infeasible to find a message y not equal to x such that H(x) = H(y) then H is said to be a weakly collision-free hash function.

A strongly collision-free hash function H is one for which it is computationally infeasible to find any two messages x and y such that H(x) = H(y).

For more details Visit: http://www.gurukpo.com/

Digital Signature

A digital signature is an electronic signature that can be used to authenticate the identity of the sender of a message or the signer of a document, and possibly to ensure that the original content of the message or document that has been sent is unchanged. Digital signatures are easily transportable, cannot be imitated by someone else, and can be automatically time-stamped. The ability to ensure that the original signed message arrived means that the sender cannot easily repudiate it later. A digital signature can be used with any kind of message, whether it is encrypted or not, simply so that the receiver can be sure of the sender's identity and that the message arrived intact. A digital certificate contains the digital signature of the certificate-issuing authority so that anyone can verify that the certificate is real.

How It Works

Assume you were going to send the draft of a contract to your lawyer in another town. You want to give your lawyer the assurance that it was unchanged from what you sent and that it is really from you.
  1. You copy-and-paste the contract (it's a short one!) into an e-mail note.
  2. Using special software, you obtain a message hash (mathematical summary) of the contract.
  3. You then use a private key that you have previously obtained from a public-private key authority to encrypt the hash.
  4. The encrypted hash becomes your digital signature of the message. (Note that it will be different each time you send a message.)
At the other end, your lawyer receives the message.
  1. To make sure it's intact and from you, your lawyer makes a hash of the received message.
  2. Your lawyer then uses your public key to decrypt the message hash or summary.
  3. If the hashes match, the received message is valid.
For more details Visit: http://www.gurukpo.com/

Network Security

                                                                      Encryption

Encryption is the conversion of data into a form, called a cipher text, that cannot be easily understood by unauthorized people. Decryption is the process of converting encrypted data back into its original form, so it can be understood.
The use of encryption/decryption is as old as the art of communication. In wartime, a cipher, often incorrectly called a code, can be employed to keep the enemy from obtaining the contents of transmissions. Simple ciphers include the substitution of letters for numbers, the rotation of letters in the alphabet, and the "scrambling" of voice signals by inverting the sideband frequencies. More complex ciphers work according to sophisticated computer algorithms that rearranges the data bits in digital signals.
In order to easily recover the contents of an encrypted signal, the correct decryption key is required. The key is an algorithm that undoes the work of the encryption algorithm. Alternatively, a computer can be used in an attempt to break the cipher. The more complex the encryption algorithm, the more difficult it becomes to eavesdrop on the communications without access to the key.
Encryption/decryption is especially important in wireless communications. This is because wireless circuits are easier to tap than their hard-wired counterparts. Nevertheless, encryption/decryption is a good idea when carrying out any kind of sensitive transaction, such as a credit-card purchase online, or the discussion of a company secret between different departments in the organization. The stronger the cipher -- that is, the harder it is for unauthorized people to break it -- the better, in general.
for more details visit : http://www.gurukpo.com/