基于MIPv6快速切换的家乡注册安全机制

摘要

In order to solve the identity authentication problem of mobile node in fast handoff in MIPv6, this paper proposed a new safety home registration mechanism based on fast handoff in MIPv6. By involving the improved key generation centerbased signature scheme in which KGC only knows users' partial private key and users can generate the pairs of public-private key for signature themselves in the fast handoff in MIPv6, solved the problems of key escrow and key revocation. When using the improved signature, only one message interaction could complete the switching and home registration, and the bidirectional authentication between mobile node and access router was achieved in foreign field. In addition, protected the interaction of the message due to Diffie-Hellman key exchange. After analysis, the home registration system is efficient and secure.%为解决移动IPv6快速切换中移动节点的身份认证问题,提出一种新的基于MIPv6快速切换的家乡注册安全机制.在MIPv6快速切换中引用基于密钥生成中心(KGC)的改进签名方案,该方案中KGC仅知道用户的部分私钥,并且用户可以自己生成用于签名的公私钥对,解决了密钥托管和密钥撤销问题.移动节点和接入路由器运用改进的签名方案签名消息,仅往返一次消息交互就实现快速切换并完成家乡注册,并且在访问域中实现MN与NAR之间的双向认证.另外,利用Diffie-Hellman密钥交换原理保护消息交互过程.经过分析,该家乡注册机制具有高效、安全的特性.