基于家乡代理的绑定更新验证机制  

Binding update message authentication mechanism based on home agent

作　　者：李向丽[1] 窦锦身 李一航[1] 

机构地区：[1]郑州大学信息工程学院,河南郑州450001

出　　处：《计算机工程与设计》2014年第8期2655-2659,共5页Computer Engineering and Design

基　　金：河南省重点科技攻关基金项目(112102310073);河南省教育厅自然科学研究计划基金项目(2010A520040)

摘　　要：为解决MIPv6路由优化中存在的节点易受攻击等安全问题,提出一种基于家乡代理的绑定更新验证机制。在移动节点MN已经向家乡代理HA绑定更新的情况下,进行MN和通信对端CN的身份验证,以实现绑定消息的完整性。多次使用对称加密机制,保证绑定更新过程的安全性,提高了计算效率。安全性分析结果表明,该方案能够抵御常见的攻击行为。通过NS模拟工具进行仿真,仿真结果表明,与RRP机制相比,该机制在时间性能上有一定优势。To solve the security issues that nodes are vulnerable for MIPv6 in the routing optimization, a new binding update message authentication mechanism was proposed based on home agent. The authentication and the message integrity between the mobile node and the correspondent node were secured on the premise that the binding update between the mobile node and the home agent had completed. Symmetric encryption was repeatedly used to assure the security of the binding update process and to enhance the efficiency. The security analysis reveals that this mechanism can resist the common attacks. This mechanism was simulated on the NS and the simulation results show it has a better efficient performance than RRP.

关 键 词：路由优化 家乡代理 身份验证 绑定更新 对称加密 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]