안전한 모바일 IPv6 바인딩 갱신을 위한 개선된 프로토콜

Abstract

In MIPv6, unauthenticated binding updates expose the involved MN and CN to various security attacks. Thus, protecting the binding update process becomes of paramount importance in the MIPv6, and several secure binding update protocols have been proposed. In this paper, we propose a novel protocol for the secure binding updates in MIPv6, which can resolve the drawbacks of the Deng-Zhou-Bao’s protocol [2], by adopting Aura’s CGA scheme with two hashes [9]. Aura’s scheme enables our protocol to achieve stronger security than other CGA-based protocols without a trusted CA, resulting in less cost of verifying the HA’s public key than the Deng-Zhou-Bao’s protocol. Through the comparison of our protocol with other protocols such as the Deng-Zhou-Bao’s protocol, CAM-DH and SUCV, we show that our protocol can provide better performance and manageability in addition to stronger security than other approaches.