移动IPv6中基于信任链的绑定更新认证协议  

TRUST CHAIN BASED BINDING UPDATE AUTHENTICATION PROTOCOL IN MOBILE IPv6

作　　者：韦勇[1] 石锐[1] 游红[1] 

机构地区：[1]重庆大学计算机学院,重庆400045

出　　处：《计算机应用与软件》2008年第10期265-267,共3页Computer Applications and Software

摘　　要：移动IPv6可以确保漫游的用户在不中断会话或者连接的情况下继续通信,但是这也导致了很多安全问题。提出了一种在移动节点(MN)和通信对端(CN)之间没有预先建立安全关联(SA)的情况下,对绑定更新(BU)报文进行认证的协议-基于信任链的绑定更新认证协议(TCBUAP)。该协议分为初始阶段和更新阶段,采用椭圆曲线(ECC)认证机制,它对移动节点的计算性能要求很低,使用尽量少的报文并可以通过修改来防范拒绝服务(DoS)攻击,同时满足了安全性和性能要求。Mobile IPv6 offers mobile users in roaming continual communication without needs of stopping session or connection while poses some threats to security. In this paper it proposes Trust Chain based Binding Update Authentication Protocol （TCBUAP） which serves for authenticating binding update message without previous security association between mobile nodes and correspondent nodes. It has two phases, namely initial phase and updating phase. Our protocol employs Elliptic Curve Certification authentication technology, requires minimum numbers of messages and could be modified to prevent the attacks from Denial of Service, which is quite critical for performance constrained mobile nodes. This protocol achieves high level of security and performance requirement as well.

关 键 词：移动IPV6 绑定更新 信任链 认证协议 

分 类 号：TP393.4[自动化与计算机技术—计算机应用技术] TN915.04[自动化与计算机技术—计算机科学与技术]