An Extended Secure Communication Scheme For Mobile IPv6

In the environment of IPv6, the end-to-end secure communication is extremely important. Because it is unprecedented simple for a computer to obtain an IP address. IPsec could provide various types of end-to-end communication secure protection in the IP layer. However, IPsec is difficult to use, because many complicated parameters are necessarily to be set for security channel. Y. K. Hei and Yamazaki propose an automatic configuration method for setting up the end-to-end secure channels between closed members in using IPsec. It changes the traditional design style that centralizes the individual security consideration, but combines individual with overall security together. And it gives the prominence to the team safety consideration, meanwhile refines the thinking of the security of the individual. Obtaining IPsec/IKE strategy conveniently from other members at any time, and configuring the end-to-end secure communication channel automatically are the most prominent features of the closed members scheme. So this scheme is suitable for the Mobile IPv6 communication field for its flexibility and mobility. Due to the lack of relevant safety communication protection in Mobile IPv6 network, mobile communications are facing severe security threats. It's a great possibility that nodes are imitated and communication is intercepted. Expanded use of the scheme in mobile IPv6 environment can largely mitigate these security threats.Integrated the design thinking of the closed member scheme into the mobile environment consideration, this paper presents a new two layers management mechanism for secure communication scheme. Through construction of a management node dynamically in the mobile IPv6 networks, the new management mechanism solves these problems mentioned above properly. It inherits the design that auto-configuration of the secure communication channel. But it discards the working scheme using mutual advertisement mode between members. Through constructing a dynamic management node in mobile network, the expansion issue of the original solution in mobile IPv6 network environment is properly solved. Meanwhile it gives a reasonable solution for mobile IPv6 secure communication. Finally, to prove the feasibility of the new solution, we make the simulation and analysis of this scheme.