移动IPv6网络基于身份签名的快速认证方法  

A Fast Authentication Mechanism Using Identity Based Signature in Mobile IPv6 Network

作　　者：田野[1] 张玉军[1] 刘莹[1] 李忠诚[1] 

机构地区：[1]中国科学院计算技术研究所

出　　处：《软件学报》2006年第9期1980-1988,共9页Journal of Software

基　　金：No.90604014 (国家自然科学基金);No.20056350 (中国科学院计算技术研究所创新课题)~~

摘　　要：接入认证对移动IPv6网络的部署和应用至关重要,在切换过程中加入认证过程会影响移动IPv6网络的切换性能.当前,对移动IP网络中接入认证的研究大多没有考虑对切换性能的影响.另外,目前许多双向认证机制都是基于证书的方式来实现,无线移动环境的特殊性使得这种方式并不适合无线移动网络.一种适用于移动IPv6网络的基于身份签名的快速双向认证方法被提了出来.该方法使用NAI(networkaccessidentifier)作为公钥,简化了无线移动环境中的密钥管理问题,有效地解决了基于PKI(privatekeyinfrastructure)的认证机制的不足.同时,该方法有效结合了快速切换和接入认证过程,降低了移动过程中由于引入接入认证带来的额外开销.最后,通过性能分析证明该方法比其他方法更有效.Access authentication is important to the deployment and application of mobile IPv6 network, and Authentication in handover procedure will reduce handover performance in mobile IPv6 network. However, many studies for the access authentication in mobile IPv6 network ignore the effect of authentication in handover procedure. Furthermore, many certificate-based authentication schemes are not fit for the wireless mobile environment. To solve these drawbacks, a fast mutual authentication mechanism using Identity-based signature in mobile IPv6 network is proposed. The identity-based signature scheme uses NAI （network access identifier） as public key and simplifies the key management in wireless mobile environment, so it can resolve the deficiency in PKI-based authentication mechanism. An effective combination of the fast handover and authentication can minimize the additional load resulting from authentication in mobile procedure. Performance analysis results show that the proposed mechanism is more efficient than other schemes.

关 键 词：移动IPV6网络 快速认证 基于身份签名 快速切换 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]