Research And Implementation Of Data Tunnel In Wireless Heterogeneous Integrated Networks

The 3rd generation mobile communication system has a high degree of security and perfect billing management function. It can also provide large coverage and nearly universal roaming too. However, its cost of deployment is quite high. As a technique of great promising, wireless LAN are more and more attractive. WLAN can provide higher data rates with lower cost than 3G, but its security mechanism is very fragile. So, the integration of 3G and WLAN can complement each other very well. Even so, there are still a number of security issues in 3G-WLAN interworking. The most prominent one is that, data transport between terminal and packet data gateway(PDG) may go through many intermediate nodes while some of them can not be trusted. As a result, establishing a data tunnel is necessary.This paper presents a protocol-IKEv2 based on EAP-AKA which is used to establish data tunnel in wireless heterogeneous integrated networks. The protocol does not use Pre-Shared key authentication or Digital Signature authentication mode which the original IKEv2 protocol uses, but using EAP-AKA authentication mode which is based on USIM card. This new protocol can provide higher degree of security than Pre-Shared key authentication mode IKEv2. Compared to Digital Signature mode IKEv2, this new protocol does not need the deployment of PKI system, can provide the same level of security in the case of modifying least 3GPP protocol stack.