PMIPv6中基于安全关联的移动网络本地轻型认证机制

针对PMIPv6域中移动网络(NEMO)提出了一种基于安全关联的本地轻型认证机制.该机制在认证、授权和计费(AAA)架构的基础上,整合身份认证和地址注册过程,采用优化的切换策略和扩展的安全关联,将切换和认证过程限定在本地PMIPv6域中.性能分析表明,该机制在实现用户和网络之间双向认证的同时能够抵抗篡改等多种攻击,有效保护地址注册信息,提升NEMO的安全性,并在计算开销和认证时延方面优于现有机制.

A Lightweight Local Authentication Mechanism for Network Mobility in Proxy Mobile IPv6 Network Based on Security Associations

Abstract： A local light authentication mechanism based on security associations (LLAMSA) for network mobility (NEMO) in Proxy Mobile IPv6 Network was proposed. Based on the architecture of authentication, and authorization and accounting (AAA), the mechanism of optimized routing policy and extended security association was used to integrate authentication and address registration process, making the handover and authentication process to be limited in the local PMIPv6 domain. The performance analysis shows that LLAMSA not only implements the mutual authentication but also resists tamper attacks to protect the address registration information, improving the safety of NEMO. The performance of computation cost and authentication delay is better than existing mechanisms.