Research Of IPv6-Based Network Security Architecture And Authentication Technique

Along with the unceasing expansion of network scale and the exponential growth of network application, the traditional IPv4 protocol has met the needs with difficulty, and the new generation of network protocol IPv6 arises at the historic moment and becomes the next generation Internet standard. Besides, with the network interconnection and varity of network access,security access turns on to be especially important, and the basic solution to this question is authentication, which can be commendably implemented through Diameter protocol as the AAA update edition. The goal of this paper lies in proposing an IPv6-based network security architecture and making a research on authentication technique. The main works in this paper arelisted as follows:(1) The threats of IPv6 network are evaluated ,and what kinds ofsecurity services should be employed in each layer of IPv6 to against the threats are clearly explained. Based on the previous researches, the security architecture of IPv6 networks is introduced, and a set of security techniques matching this architecture is provided.(2) The models and the threats during the authentication process of the network access, which display the security requirement for authentication model, is analyzed. Thus, A new kind of network access user authentication protocol model—NAUA—is described through the global state and the state-transition based description, and is described from its grammar and semantics .(3) The authentication process of diameter which employs CHAP is modeled based on the NAUA. The authentication system is designed and implemented based on Diameter..