Design and Implementation of CGA Assignment Mechanism Based on DHCPv6

摘要

Cryptographically Generated Address (CGA) mechanism is useful to protect the host from being spoofed without any security infrastructure. It provides address validation and integrity protection for messages by allowing for a secure association of an IPv6 address, the CGA parameters and a public key. However, it causes a heavy burden for slow or battery-dependant devices because it is resource consuming to generate the CGA. As there is a lack of procedure to enable proper management of CGA generation, a mechanism for delegating the computation of the CGA should be provided to offload the large computational burden for these devices. In this paper, we propose a novel mechanism to delegate the CGA generation procedure to the server of Dynamic Host Configuration Protocol for IPv6 (DHCPv6) to solve the resource consumption problem for these devices. Tests show that our schema can be well supported by DHCPv6.