PMIPv6 network bidirectional access authentication system and method based on classification identity signature

Abstract

The invention provides a PMIPv6 network bidirectional access authentication system and method based on a classification identity signature. The system comprises a plurality of mobile access gateways, a plurality of local mobile anchors, a trusted third party server and a plurality of mobile nodes. The method comprises the steps that trusted channels are built through the mobile access gateways and the local mobile anchors corresponding to the mobile access gateways; system public parameters are generated by the trusted third party server and published; when the mobile nodes are in a home network, the trusted third party server distributes private keys to the local mobile anchors, and the local mobile anchors distribute private keys to the mobile nodes or the mobile access gateways; when a certain mobile node leaves the home network and has access to a certain mobile access gateway of a foreign network for the first time, bidirectional access authentication is carried out; the mobile nodes are in the current access foreign network, and authentication is switched when the current mobile access gateway is switched into another mobile access gateway. According to the system and method, message exchange between the mobile nodes having access between the foreign network and the home network can be eliminated, and the bidirectional access authentication of the mobile nodes and the mobile access gateways is achieved.

Description

technical field [0001] The invention belongs to the field of wireless mobile network security, in particular to a PMIPv6 network two-way access authentication system and method based on hierarchical identity signatures. Background technique [0002] The Proxy Mobile IPv6 (Proxy Mobile IPv6, PMIPv6) protocol supports the mobility of IPv6 nodes by extending the signaling messages between the mobile node (Mobile Node, MN) and the home agent in the mobile IPv6 protocol. The proxy mobile entity in the network handles the mobile node and The signaling interaction between the home agent and participate in the mobility management instead of the mobile node. Since Proxy Mobile IPv6 does not require additional configuration on mobile nodes, the protocol is easy to deploy and will become an important mobility support protocol for next-generation networks. However, proxy mobile IPv6 lacks security considerations, and its openness increases potential security threats. When a mobile nod...

AI Technical Summary

Problems solved by technology

The document "Proxy Mobile IPv6 Authentication Scheme Based on Certificateless Signcryption" uses the certificateless signcryption mechanism for the authentication process of proxy mobile IPv6, which solves the security problem of key management in the wireless environment, but the key negotiation process still exists with the AAA server. interaction, thereby increasing the burden on the AAA server

And this scheme does not discuss how to switch authentication, so it is difficult to apply to the actual network environment

The literature "One-time Key Authentication Protocol for PMIPv6" provides an optimized access authentication scheme for proxy mobile entities, but the communication distance between proxy mobile entities is usually very long, and the communication delay is large, which reduces the handover The efficiency of authentication, and the need for related entities to change keys frequently, increasing communication overhead

It can be seen that in the existing proxy mobile IPv6 access authentication scheme, there are problems such as large system overhead, low authentication efficiency, and poor handover authentication.

[0004] It can be seen that in the above-mentioned authentication mechanism, the authentication information of the MN is stored in the home network or the remote AAA server, and the access authentication of the mobile node must be realized by interacting with the home network, so the authentication delay will vary with the local network and the remote network. The distance between networks increases significantly, which further reduces the efficiency of access authentication

Images