Implementation Of Mobile IPv6 In The High Performance Router And Research Into Security Mechanisms

Along with the development of Internet, portable computers and mobile multimedia terminals, more and more users are hoping to access the networks at will with a permanent IP address and primary network configuration parameters in any place by any means, without not being afraid of being interrupted in the on-going communication process. It is hopeful for Mobile IP to achieve this goal.This dissertation is devoted to the research into the implementation of Mobile IPv6 in MNGI core equipment---High Performance Router and security mechanisms, supported by "Military Next Generation Internet (MNGI)" of Communication Technology-oriented Major Research Projects under China National Hi-tech Research Program 863 in the information technology. The main contributions come as follows:Firstly, according to the requirement of the implementation of Mobile IPv6 in the High Performance Router, a solution that the Mobile IPv6 packet must be disposed centrally is proposed in distributed router and a key problem that the data packet must be delivered to the main controlling unit is solved. In the end, the solution's data stream chart is shown.Secondly, the Mobile IPv6 module is designed and implemented in the main controlling unit of the router which is composed of the kernel space and the userliand. In the kernel, Mobile IPv6's input and output processing are designed with the help of the IPsec packet processing architecture XFRM. This design can not only enhance the security of the module, but also can avoid the design of repetitious function and guarantee the size of the Linux's kernel. In the userland, Mobile IPv6 basic function modules are implemented, which does not affect the Linux kernel original structure, but can enhance Mobile IPv6 module's extensibility instead.Thirdly, the Mobile IPv6's home agent conformance test suite Is designed by the Finite State Machine, and added the cooperation part with IPsec. With this test suite, the Mobile IPv6 module in this paper has been tested. The results show that the basic functions for mobile IPv6 can be reliably provided in the high-performance security router.Finally, the improvement program for the establishment of a Mobile IPv6 security association is presented and this improvement solution can not reduce the cost that IKE has to spend for maintaining the security association, but also enhance application efficiency.The main innovations come as follows:Firstly, Mobile IPv6's input and output processing are designed with the help of the IPsec packet processing architecture XFRM.Secondly, Mobile IPv6's home agent conformance test suite is added the cooperation part with IPsec.Finally, the improvement program for the establishment of a Mobile IPv6 security association is presented.