The Design And Study On An Identity-based Authentication Architecture For Mobile IPv6

The TCP/IP-based Internet has become the essential part in people's daily life. With the development of mobile communication, a lot of mobile devices such as cell phones, laptops had been used widely. Most of mobile users have such requirement of keeping Internet access and mobile communication with the equivalent service quality of fixed access. Mobile IPv6 protocol with the base of overcoming the drawbacks meets the need of mobile access of Internet.The introduction of mobility brings forth many great changes for existed network mechanism. The authentication for mobile node is the vital part of guaranteeing the network security and carrying on the network management in the mobile IPv6 research fields. So-called Authentication is to solve the user's identification and examine the identification claimed by user, check its legality. Authentication could make Internet Service Provider assure the user's identity to guarantee the secure use of network resource.It is a very vital subject to formally combine the AAA architecture and mobile IPv6 protocol and make them work efficiently. The research orientation of this paper thesis is to bring forth an inter-domain authentication scheme for mobile IPv6 by integrating the existed authentication approaches. The basic technologies for mobile IPv6 and some network security approaches are discussed firstly in this thesis. Then existed mobile AAA architecture and normal authentication protocols are analyzed. The improved NAI authentication and scheme meeting the requirement of mobile circumstance are brought forth in this thesis. In this scheme, the registration progress of mobile node is completed with the use of Diameter protocol. Mobile node could access Internet by using NAI, which resolves the inter-domain management of mobile IPv6. AAA servers could be used as session key distribution center, which simply the authentication model of mobile IPv6. BAN logic method is used to carry on the formalized analysis against the scheme in the thesis.The proposed Identity-based authentication architecture and scheme are realized under Linux platform in the end of this thesis. At last, the test data are analyzed.