摘要
Mobile IPv6的消息交互需要IPSec来提供安全保护,但什么时候建立IPSec安全关联会对Mobile IPv6的安全性、效率、计算量产生较大影响。传统的方法是当移动节点移动到外地网络之后需要时才建立,分析表明该方法效率低、计算量大、安全性差,不符合应用要求。本文提出移动节点在家乡网络中提前建立保护Mobile IPv6消息交互的安全关联,并给出了具体的方法。分析表明新方案较传统方法具有时延少、计算量小、效率高、安全性强的特点。
IPSec is required to protect the messages exchanges of Mobile IPv6. But when IPSec security association is created will greatly influence the security, efficiency and computation of the Mobile IPv6. By the usual method, security associations are created after a mobile node moves away from its home networks. But with low security level and efficiency as well as heavy computation, this way cannot meet the practical applications. A novel scheme is proposed that security associations for the protection of Mobile IPv6 are created before a mobile node moves away from its home networks. Analysis indicates that the novel scheme have the advantages of small delay, light computation, high efficiency and robust security over the old one.
出处
《通信学报》
EI
CSCD
北大核心
2004年第6期102-108,共7页
Journal on Communications
基金
国家"863"计划基金资助项目(2002AA143021)
2003教育部优秀青年教师基金资助项目
2003教育部科学技术研究重点基金资助项目
