摘要： MIPv6的绑定更新过程是其主要安全问题，IETF草案对此给出一种新的基于IKEv2/IPSec协议的绑定更新机制，但是IKEv2协议存在不适合直接应用于移动环境的缺陷。为此，基于Weil对数字签名算法改进了IKEv2协议的缺陷，并在新协议的基础上改进了绑定更新过程。基于应用π演算验证了改进绑定更新机制的认证性。
关键词:
移动IPv6,
绑定更新,
IKEv2协议
Abstract: Mobile IPv6(MIPv6) binding update is primary security question, IETF draft proposes a new binding update mechanism based on IKEv2/IPSec protocol. However, IKEv2 protocol is unsuitable for MIPv6 directly because of flaws. This paper improves IKEv2 protocol based on Weil pairing’s signature arithmetic, as well as the mechanism. The improved mechanism is verified in applied π calculus.
Key words:
Mobile IPv6(MIPv6),
binding update,
IKEv2 protocol
中图分类号:
韩明奎, 潘进, 陈志广, 李波. MIPv6绑定更新机制及验证[J]. 计算机工程, 2011, 37(01): 151-153.
HAN Meng-Kui, BO Jin, CHEN Zhi-An, LI Bei. Mobile IPv6 Binding Update Mechanism and Verification[J]. Computer Engineering, 2011, 37(01): 151-153.