Research And Implementation Of MIPSec Protocol Stack In Mobile Internet Terminal

As a new generation of mobile communication protocol,MIPv6 realized mobile interconnection in the network layer,but also brings a potential safety problems.IPSec protocol as IPv6 protocol compulsively security mechanism, protect the network layer and the above agreement,provides security protection in the IP layer for end-to-end communication.But IPSec protection is mainly applied between fixed nodes.Using in the MIPv6 environment still existence problem and the mobile equipment processing ability is limited,Equipment's processing capacity can't satisfy IPSec protocol's complex algorithm.Therefore,how to solve IPSec protocol for mobility and the support of the processing capacity insufficient is the key whether current mobile interconnection equipment widely applied in MIPv6.This thesis analyzes the MIPv6 protocol,MIPv6's security mechanism,IPSec security protocols system and its realization in Linux as well as MIPSec realization principle. This thesis gives the mobile IPSec security architecture and the scheme based on mobile IPSec protocol stack,basis the requirement of mobile terminal for mobility and security.Through transforming Linux kernel IPSec part and key management deamon,It realize IPSec protocol's Mobility transformation.Providing specific protect ion for MN and HA's interaction,MN and CN's interaction, MN's switching process.For the problem mobile Internet terminal processing power is limited,This project put forward MIPSec hardware and software collaborative design scheme.The protocol framework using software implementation;IPSec protocol system security alliance consultation of password algorithm adopts hardware realization, namely using FPGA to realize based on ECC exchange and signature algorithm, improving the cryptographic algorithm processing speed and strength.On this basis, we implement a Small scale Mipv6 testbed and test the the protocol stack's functionality and performance to verify the design of mobile IPSec protocol stack in mobile terminal equipment feasibility, this play a positive role on portable mobile terminal further extension and application.