A Flow-Based Authentication Handover Mechanism for Multi-Domain SDN Mobility Environment

摘要

The long authentication handover delay is the greatest challenge in multi-domain SDN environment. In order to solve this prob-lem, an authentication handover mechanism under multi-SDN domain (AHMMD) is pro-posed in this paper. In AHMMD, firstly, when the mobility entity accesses the network for the first time, its identity and service attributes are authenticated by the flow authentication protocol, which is designed based on the asymmetric encryption key; secondly, when the mobility entity moves to the neighbor do-main, the authentication information will be delivered from the current controller to the neighborhood controller through a security communication channel. In order to promote the efficiency, a handover time prediction al-gorithm is adopted in AHMMD. Experimental results based on our AHMMD prototype have shown that the handover delay decreases by 50% while the handover cost decreases by 60%.