Security Research On Heterogeneous Integrated Network Based On MIPv6

With the developing technology and people's demand on connecting network at anywhere and anytime, the future wireless network is becoming movable and heterogeneously integrated. Since the next generation network is all IP net, MIPv6 based heterogeneous integrated network is one of the most possible trend for the mobile network. New security problems are brought out because of the mobility in MIPv6 and the combination of heterogeneous networks, and it is necessary to study the security technology in the MIPv6 based heterogeneous integrated network accordingly. The secure mobility management problem, secure handover efficiency and dynamic home agent address discovery are researched in this paper. The main work is as fallows:(1) Because different nets may employ different security mechanisms, when mobile nodes handover between them, the security problems may exist and need to be solved. The multi-level security model is set up to describe the MIPv6 based heterogeneous integrated network. After analyzing the problem in continuous handover, we design security handover policy using multi-level security policy. The policy is safe by formal analyzing.(2) The delay in MIPv6 secure handover may affect real-time communications. Based on analyzing the handover and authentication procedures, we adopt hierarchical AAA structure, AAA management area divided by DiffServ QoS technology and fast MIPv6 based address setting after authentication to build the fast authentication procedure. A math model is also set up to analyze the delay and a new method is put out to solve the"Ping-Pong"handover problem.(3) The IPSec and its security association management are important to end-to-end security. After analyzing the management between mobile nodes in MIPv6 based network, we point out the deficiency of IKEv2 and MOBIKE protocol. An improved security association management scheme is put forward based on IKEv2. The scheme decreases the negotiation times and is safer than MOBIKE.(4) The dynamic home agent address discovery is a special procedure in MIPv6. After the security demands of the procedure analyzed, the threshold group digital signature is improved and mutual authentication protocol is designed according to anycast address communication and the asymmetry between mobile node and home link. Also, a communication protocol is designed based on the standard dynamic home agent address discovery and proved safe by BAN logic.