Research Of Mobile IPv6's Security

Mobile IPv6 has been put forward on the basis of IPv6 and Mobile IPv4. It is good in mobility, Quality of Service, and security. At the present time, the main obstacle to employ Mobile IPv6 formally is the security problem. This thesis emphasizes on the anlaysis to the security of Mobile IPv6 and various kind of attack towards the communication using Mobile IPv6. A solution is gived to solve the attacks in the Mobile IPv6, and some key technologys are considered.First, this thesis proposes a new scheme to integrate AAA to Hierarchical Mobile IPv6 (HMIPv6). AAA authentication and mobility registration are performed together with the sequential registration, and could be handled locally in intra-domain handover cases. Analysis shows that this new scheme is secure and efficient for integrating AAA into HMIPv6 networks.Second, Mobile IPv6 protocol requires security communications. This thesis discusses the protections using IPsec for Mobiel IPv6. IKEv2 is used to establish security associations between two nodes. Because of its security flaw of authentication failure, an improvement protocol is presented. Hierarchical Mobile security associations is presented for the problem that the security associations should be established everytime the node moves.Third, the Signaling between Mobile and Correspondent IPv6 Nodes should be protected. MIPv6 uses binding update message to realize route optimization, which solves the problem of "triangle routing" of MIPv4. But it also exists some security issues. Redirected attack is the one of the urgent problems that RR protocol doesn't solve. This thesis provides a new scheme to protect the binding update message between Mobile and Correspondent IPv6 Nodes. IPSec also used for protecting the binding update message between Mobile and Correspondent IPv6 Nodes.A scheme to establish the security associations between nodes is presented.Being secured enough is the premise of Mobile communication to be widely deployed and used. This thesis will help to design new measures to protect Mobile IPv6, and eventually design a fully secured solution for protecting Mobile IPv6 protocol.