摘要
针对移动IPv6路由优化中存在的高安全性与低开销不可兼得的问题,借鉴基于加密生成地址CGA(Cryptographically generated addresses)的安全路由优化的优点,提出一种基于Hash生成地址(HGA)的移动IPv6高效安全路由优化方案。该方案通过区分首次绑定和非首次绑定,分别采用不同的绑定更新机制,利用HGA快速生成防伪造、可验证的IPv6地址,在非首次绑定中简化了消息交互过程。理论分析表明,该方案不仅简化了路由优化过程,还提高了其安全性,降低了计算与通信开销。
Aiming at the problem that the high security and the low cost cannot be gained both in route optimisation of mobile IPv6, this paper presents an efficient and secure HGA-based route optimisation scheme for mobile IPv6 by referring to the advantage of cryptographically generated addresses (CGA)-based secure route optimisation. The scheme divides the bindings into the first time and the non-first time,adopts different binding update mechanism separately, and uses H G A to quickly generate the anti-forgery and verifiable IPv6 addresses, then simplifies the message interaction between M N and C N in non-first time binding update process. Theoretical analysis shows that this scheme not only simplifies the route optimisation process, but also improves its security and reduces the computation and communication overheads.
作者
郭志强
王振兴
张连成
孔亚洲
Guo Zhiqiang;Wang Zhenxing;Zhang Liancheng;Kong Yazhou(State Key Laboratory of Mathematical Engineering and Advanced Computing, Zhengzhou 450001 , Henan, China;PLA Information Engineering University, Zhengzhou 450001 , Henan, China)
出处
《计算机应用与软件》
CSCD
2016年第6期105-109,共5页
Computer Applications and Software
基金
国家自然科学基金项目(61402525)
国家高技术研究发展计划基金项目(2012AA012902)
