Research On IP Layer Mobile Security Framework For IPv6

With the rapid development of wireless communication technology, more and more users begin using wireless devices to connect to the Internet. The wireless environment is characterized by openness, thus makes it vulnerable to the threat of attacks. As a new generation of mobile communication protocol, Mobile IPv6 not only has the same security threats with the wireless environment, but also faces with its own protocol security vulnerabilities. In response to these security threats, this paper studies the mobile security deeply, and an IPSec-based IP layer security architecture is proposed. In this paper registration for correspondent node, access registration and security handover is discussed respectively.1. Transmission security. IPSec is difficult to apply to the mobile environment for the absence of mutual trust in the security system. In this paper, the security of end-to-end transmission between any two nodes is implemented by using the improved IPSec protocol in the mobile IPv6 network.2. Access authentication technology in Mobile wireless network. In this paper, a mutual mobile IP authentication technology with high efficiency is put forward, which uses the improvement of the existing IKEv2.3. A handover authentication method based on fast-hierarchical handoff mobile IPv6 is proposed. The authentication method is designed to meet the demands of fast-handover mechanism in hierarchical mobile IPv6 topology. By using the combination of messages of IKEv2 stage 1 and the fast handoff, access authentication and registration after the handoff of mobile node can be achieved. Also less number of interactive information and better security of handoff process are obtained.Through the safety and feasibility analysis of schemes described above and the usage of such solutions, the security protection for the mobile environment is obtained, the mobile environment handover efficiency and other performances of the environment are enhanced greatly.