摘要
身份与移动轨迹隐私保护是MIPv6研究与应用领域的一个关注热点。针对移动节点的移动消息和应用数据易受恶意流量分析而暴露身份并被定位追踪的问题,提出一种支持身份隐匿并防范定位追踪的MIPv6地址隐私保护机制,即IMTP机制。首先,通过自定义移动消息选项Encryptedword、与本地地址作异或变换,实现了移动节点身份的隐私保护;然后,借助任意节点互相认证技术完成位置代理随机任命,从而隐蔽移动节点的转交地址,实现了MIPv6节点移动轨迹的隐私保护。仿真结果表明,IMTP机制具备隐私保护能力强、资源开销少、对标准MIPv6协议改动小且良好支持路由优化等优势,还具有部署灵活、扩展性强等优点。IMTP机制提供的身份与移动轨迹双重隐私保护将更有利于降低特定移动节点通信数据的截获概率,从而保障移动节点间的通信安全。
Nowadays, privacy protection for identity and trajectory has been a hot point in research and application field of Mobile IPv6 （ MIPv6）. Targeting on the problem that the mobile message and application data of mobile node suffers from malicious data analysis to expose its identity and to be located and tracked, an MIPv6 address privacy protection mechanism named IMTP was proposed, which supports hidden identity and prevents location tracking. In the first place, by applying self- defining mobile message option Encryptedword and making XOR transformation with home address, IMTP achieved the privacy protection of MIPv6 node identity. In the second place, by means of the mutual authentication technique among any nodes, this mechanism completed the randomly appointing of location proxy and bided the care of address of mobile node, thus to realize the privacy protection of MIPv6 node trajectory. The result of simulation indicates that IMTP has the higher quality of privacy protection and low resource cost. Meanwhile, it not only modifies a little of the standard MIPv6 protocol and well supports routing optimization, but also possesses flexible deployment, strong scalability and other advantages. The dual privacy protection for identity and trajectory provided by IMTP will be benefit to reduce the probability that specific mobile node communication data would be intercepted, thus to guarantee the communication security among the mobile nodes.
出处
《计算机应用》
CSCD
北大核心
2016年第8期2236-2240,2245,共6页
journal of Computer Applications
基金
国家自然科学基金资助项目(61402526)~~
关键词
移动IPV6
身份与移动轨迹
异或变换
随机任命
互相认证
Mobile IPv6 （MIPv6）
identity and moving trajectory
XOR transformation
randomly appointing
mutual authentication
