摘要
HMIPv6是MIPv6的扩展。本文提出一种使用基于身份的签名方案,对本地绑定更新进行认证。MN在MAP域内获得RCoA的同时获得基于RCoA身份的公私钥。MN使用基于RCoA生成的私钥签名,MAP使用相应的公钥进行验证,确保无仿冒的节点。并且MN在域内绑定更新和身份验证一次完成,密钥也是在初次进入域时获得,域内移动时MN保留公私钥,无需重新获取。本文提出的方法节省了MN在域内的切换时间,不影响MN与CN通信。
Hierarchical mobile IPv6 is designed to reduce the amount of between the Mobile Node, its Correspondent Nodes, and its Home Agent. Entering a MAP domain, the MN can bind its current location (LCoA) with an address on the MAP's subnet (RCoA). In our paper, an ID-based signature scheme is proposed to authenticate the ownership of the local binding updates. Using this method, local BU and authentication can be accomplished at one time, meanwhile, this method moderates the possibility of attacks from the fake nodes. Moving in one MAP domain, a mobile node holds the secret key without recovering.
出处
《微计算机信息》
2009年第9期72-74,共3页
Control & Automation