| With the rapid development of Internet, the design for technology of personal communication makes people touch Internet everywhere. Mobile IP can provide this kind of service. In 21 century,the problems of IPv4 occurs more and more. There are many disadvantages about IPv4, such as the shortage of IP address, the inflation of router tables, providing little QoS and service of security. To solve the shortage of IP address and the mobility of computer,IETF puts forward Mobile IPv6. Mobile IPv6 can solve such a question as , when user moving, it can keep its normal communication. But at the same time it can bring some new questions such as when mobile node is moving in foreign link,how to authentication and authorization the mobile node, and how to ensure the request of binding and registration is legal. To prevent the currish node's attack, it is need to authentication this package. When it comes to the services provided by the commercial network for the public, how to record the range of online time ,when mobile node in foreign link, and how to collect resource consumption data for billing, and how to account it ,and so on. AAA is the solution to all these kinds of questions.AAA is the combination of Authentication, Authorization and Accounting functionality. From the first application, Kerberos, to the most widely application ,RADIUS, AAA application is used to provide the dial service. With the overwhelmingly increasing scale of the network, the old technology of AAA can not be fit for modern network. With the mobile IP, IETF working group published a new standard and requirement of AAA. By now the main discuss of AAA in IETF draft is the authentication, authorization and accounting of mobile IPv4.Mobile IPv6 is different from mobile IPv4, the application of routing and the auto configuration of address is changed. So IPv6 is fitter than IPv4 for mobility support. Applied IPSec in AAA is the base requirement to solve the security of AAA.Diameter is the new AAA protocol based on mobile IP. It is based on the RADIUS protocol. It is designed to be used as the AAA protocol between two peers. Diameter is backward compatible with RADIUS and can send RADIUS information package. In mobile IP, Diameter has many types of nodes, that is Diameter agent, Diamter proxy, Diameter redirection, and Diameter protocol switch.All these nodes connect with peer to peer, combine a Diameter network.Diameter node is peer to peer connection, that is to say, when Diameter node starts, it can dynamically set up a socket, which is based on TCP or SCTP transport protocol. For a Diameter node, its peers attempt to set up sockets with every node he knows, when starting its protocol stack.Peer to Peer makes any node initiate Disconnect-Peer-Request message. When the Peer received this message, it replied Disconnect-Peer- Answer message. Then it stops this connection. Any kind of disconnection, except system failure, must wait till timeout and attempt to rebuild another peer connection.Nowadays, Diameter is still a draft which is extension for mobile IPv4. Because of the difference between mobile IPv6 and mobile IPv4,we can't simply apply the mobile IPv4 model in mobile IPv6. We must change some applications.In this paper, a new authentication model based on the distribution of Ticket is put forward. Linux OS and MIPL module are chosen to implement the model. Source code of Linux kernel is free. Linux OS has stability, safety, high performance and extensionable. Linux kernel begin to support IPv6 in version 2.2.X. MIPL is free software base on Linux. The newest version implement in Linux easily. In this circumstance, we bring forward a new model base on the distribution of Ticket and implement a Diameter software in mobile IPv6.When mobile node move to visit realm frequently, it must send an authentication request each time. If AAAv haven't save its information, it must send an Authentication-Mobile-Request message to authenticate this node. When we use Ticket, it can not send this messag... |
PDF Full Text Request