摘要： 基于扩展的三方Diffie-Hellman 算法，提出了移动节点、通信节点和家乡代理三者之间分配共享密钥以解决移动IPv6 在优化三角路由的过程中所要求的安全绑定更新问题的新机制，命名为DH-3 机制；设计出了DH-3 的整个安全绑定更新过程；并对DH-3 机制和此领域最有效的CAM-DH 机制从安全性以及移动节点计算要求的角度作了比较和分析。DH-3 机制不仅提高了移动IPv6 安全性，而且突破了CAM-DH 机制对移动节点计算能力要求过高的局限，很好地解决了移动Ipv6 环境下的安全绑定更新问题。

关键词: 移动IPv6；绑定更新；三方Diffie-Hellman

Abstract: To solve the security problems of binding update in mobile IPv6, this paper designs a new security mechanism on how to distribute session key among the mobile node, home agent and correspond node, based on the trilateral Diffie-Hellman algorithm, and names this mechanism DH-3. This paper not only designs the whole binding process, but also gives an analysis and comparison between the DH-3 and the latest CAM-DH protocol from the aspect of security and computing demand on the mobile node, and concludes that DH-3 breaks through the localization of the CAM-DH mechanism on the high demand of the computing ability and commendably solves the problem of security binding update in mobile IPv6

Key words: Mobile IPv6; Binding update; Trilateral Diffie-Hellman