Method for crossing firewall under mobile environment

Abstract

A method for solving firewall traversal by using the extended AAA protocol in the mobile IPv6 environment is to use the AAA extension protocol that defines the interaction between AAA servers and the AAA protocol extension messages that communicate with the firewall respectively. At the layer level, the comprehensive integration of AAA and mobile IPv6 protocols is realized. Under the premise of ensuring the minimum modification of the existing filtering rules of the firewall, the filtering rules of the firewall are dynamically adjusted, that is, the home domain AAA server and the foreign domain AAA server are connected with Communication with IPv6 firewalls in other regions, so that normal communication can be realized between various network element entities under the protection of firewalls and using the mobile IPv6 protocol. The method includes three steps: registration authentication and firewall policy adjustment, communication process, AAA session termination and firewall policy restoration. It is based on the actual networking environment of mobile IPv6 and the AAA factors that must be considered in large-scale applications in the future. The firewall proposed Way through.

Description

technical field [0001] The present invention relates to a method for traversing a firewall in a mobile environment, to be precise, relates to a method for solving the problem of a firewall by using an AAA (Authentication, Authorization, Accounting) method of authentication, authorization, and accounting in a mobile Internet protocol IPv6 environment. The traversal problem belongs to the technical field of mobile Internet security. Background technique [0002] Due to the rapid development of the Internet, the Internet protocol IPv4 has been widely used and has become the de facto industry standard. However, with the rapid increase in the number of Internet users and the widespread recognition and adoption of IP technology, the IPv4 protocol has gradually exposed its shortcomings. For this reason, in the past ten years, the research on the next generation IP protocol has been gradually paid attention to and launched. IPv6, as a new generation of IP protocol, has been standa...

AI Technical Summary

Problems solved by technology

The disadvantage of this solution is that the mobile IPv6 protocol needs to be modified, and the signaling interaction is cumbersome, the effect of using UDP encapsulation is also unknown, and the consideration of the firewall modification strategy is not sufficient

[0014] In view of the progress of the current mobile IPv6 standardization, the lack of support of the existing firewall technology for the mobile IPv6 protocol, and the fact that there are not many existing feasible solutions for this problem, how to solve the problem of how to solve the problem of mobile IP terminals passing through the IPv6 firewall to achieve reliable communication New topics researched by industry insiders

Images