The Design And Implementation Of Identity Authentication System In Ad Hoc Network Based On IPv6

Mobile Ad Hoc network is a new paradigm of wireless network, whose application is getting wider and wider and the research on it has already become one important direction in mobile communication technology. Ad Hoc network has the features such as vulnerable wireless links, bad security and dynamical topology. Ad Hoc network is very crisp and more vulnerable compared to traditional network and it is very hard to design secure scheme of Ad Hoc network.The main contents discussed in this thesis are as follows. Based on an in-depth analysis of security threats in Ad Hoc network, a cross-layer design is provided; a model of identity authentication system in Ad Hoc Network based on IPv6 is proposed, which deploys authentication mechanism in network layer and application layer to provide stronger security. Mobile IPv6 protocol is adopted in network layer. An improved Binding Update protocol(IBUP) is proposed to solve the disadvantages of two existing Binding Update protocols(RR protocol, CAM-DH protocol) adopted in Mobile IPv6; the IBUP provides identity authentication of node, prevents from attack such as DoS and other attacks, minimizes asymmetric cryptographic operations in Mobile Nodes with constraint computational power, and the security and efficiency of IBUP are analysed. In the application layer of clustered Ad Hoc network Hybrid Authentication System(HAS) and secret key administration model are proposed; member nodes in the cluster of Ad Hoc network adopt identity-based authentication, and use their ID as public key without the third infrastructure; head nodes between the cluster adopt certificate-based authentication, distributed CA system. The HAS is implemented by the software development tool VC.Through IBUP in the network layer and HAS in the application layer designed in this thesis, a secure and fast identity authentication with low cost, high scalability and strong operatability is provided in Ad Hoc Network based on IPv6.