Mobile IP joins forces with AAA

摘要

We present a set of requirements for a new security architecture for mobile IP, organized according to a progressively more detailed model of operation. The first requirements follow from the natural model for operation used in today's Internet, with special attention focused on the kinds of existing security associations that have evolved over the last few years. From this model, additional needs can be associated with the need for machine configuration and, in particular the dynamic allocation of an IP home address for a mobile client that wishes to use mobile IP. From the requirements and the natural trust model, a message flow has been engineered. With the proposals currently under consideration in the IETF a mobile node becomes truly able to roam throughout the Internet, while on the other hand needing substantially less administrative attention. It only needs a password and an NAI to formulate its global passport. If the existing Internet becomes integrated with telephone and mobile cellular infrastructures, Mobile IP may lead the way to economical communications anywhere in the world. The interaction between mobile IP entities and accounting, authentication, and authorization (AAA) services supplies the missing piece to enable operators to make a business case for offering mobile IP wireless data to their customers.