A Secure Route Optimization Protocol in Mobile IPV6

摘要

Mobile IPV6 allows a mobile node to talk directly to its peers while retaining the ability to move around and change the currently used IP addresses. This mode of operation is called Route Optimization. In this method , the correspondent node learns a binding between the Mobile nodes permanent home address and its current temporary care-of-address. This introduces several security vulnerabilities to Mobile IP. Among them the most important one is the authentication and authorization of binding updates. This paper describes the Route optimization and the security threats created by the introduction of mobility. Based on an in-depth analysis of the security weaknesses existing in the previously proposed protocols, we suggest a high strength security protocol that provides more security than the route optimization.The protocol we suggested here decouples the internetworking layer from the higher layers by introducing a new addressing scheme. This is mainly done as the transport layer is coupled to the IP addresses which are used as locators and identifiers. This protocol makes use of a Diffie Hellman key exchange to provide mutual peer authentication