性能一直是网络移动投入实际运营的瓶颈所在,而现有认证机制产生的延时使之雪上加霜.文中为多穴嵌套移动网络的接入路由器Mesh引入一种高效的双向认证机制,基于此提出最优路径选择算法和接入失效快速恢复算法,以提高移动网络的整体性能,尤其是延时的降低.文中,基于固定AAA基础设施和动态可信邻居的安全关联转移被用于减少路由器Mesh的认证延时,其行为评估机制降低了路由器攻击或欺骗对路径评价的影响;基于顶层接入路由器网络前缀的移动路由器转交地址配置被用于消除嵌套接入环境下的多角路由和隧道嵌套问题,而必要时临时隧道和反向路由头可以替代随切换而来的绑定过程以缩短切换延时,最后通过接入路由器评价生成到达Internet的最优路径.定性分析与仿真分析表明,由于异域网络间建立安全关联的高效性,加上行为评估、路径评估和快速切换产生的性能优化作用,文中的安全Mesh在吞吐量、传输延时和切换延时方面较同类方案更加高效.%Performance is always the bottleneck for deploying network mobility (NEMO), and the delay resulting from existing authentication mechanism makes it even worse. This paper in-troduces an efficient authentication method for access router (AR) mesh of multihomed and nes-ted mobile networks, with path selection and fast handover support to promote whole perform-ance of mobile networks, especially to reduce the delay. First a mutual authentication method is presented based on fixed AAA infrastructure and dynamic trusted neighbors, integrated with a behavior evaluation mechanism. And based on this authentication method the algorithms for opti-mal path selection and recovery of access failure are proposed. In the solution, security associa-tion (SA) transfer is to cut down the authentication delay; multi-angular routing and tunnel-in-tunnel problem in nested situation can be eliminated through the Care-of-Address (CoA) configu-ration of mobile router based on top-level AR prefix; temporary tunnel and reverse routing header (RRH) may be borrowed to leave out the binding procedure in handover; AR evaluation will pro-duce an optimal path to the Internet. Analysis shows that, with efficient SA establishment be-tween mobile networks and the foreign networks, expected node behavior evaluation, and opti-mized route, the solution in this paper is more efficient than the counterparts in terms of through-put, packet delay and handover delay.
展开▼
