计算机应用 ›› 2005, Vol. 25 ›› Issue (12): 2911-2913.

• 计算机网络技术 • 上一篇    下一篇

移动IPv6动态家乡代理地址发现的安全性研究

李刚   

  1. 中国科学技术大学电子工程与信息科学系
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2005-12-01 发布日期:2005-12-01

Research on the security of mobile IPv6 dynamic home address discovery

LI Gang   

  1. Department of Electronic Engineering and Information Science,University of Science and Technology of China,Hefei Anhui 230027,China
  • Received:1900-01-01 Revised:1900-01-01 Online:2005-12-01 Published:2005-12-01

摘要: 分析了动态家乡代理地址发现过程的安全特性,提出了一个对此过程进行安全保护的方案。该方案通过移动节点和家乡代理之间的双向认证和对家乡代理地址列表进行加密传输的方法,对动态家乡代理地址发现过程提供了安全保护,使该过程能够抵御恶意节点的拒绝服务攻击和对家乡链路信息的窃取。对这一方案的性能进行了评估,并在移动IPv6示范网络中进行了实现。

关键词: 移动IPv6, 动态家乡代理地址发现, 任播地址, IPsec

Abstract: The security feature of DHAAD(Dynamic Home Agent Address Discovery) procedure was analyzed,and a solution was proposed to protect it.The solution authenticated the bi-directional DHAAD messages between mobile node and home Agent,and encrypted the home Agent address list in the message from home Agent to mobile node.The solution can protect the DHAAD procedure against Denial-of-Service attack and the theft of information on home link.Then the evaluation of the solution was given,and it was realized in the Mobile IPv6 demonstration network.

Key words: mobile IPv6, Dynamic Home Agent Address Discovery(DHAAD), anycast address, IPsec

中图分类号: