Defending against redirect attacks in mobile IP

Mobile IP has seen slow deployment for two major reasons; the need for enhancing edge routers with Home Agent/Foreign Agent functionality and the fact that triangle routing in such systems is not efficient. Triangle Routing is defined as the route that must be taken through the Home Agent for any traffic sent by the Correspondent Node to the Mobile Node. This route is triangle in nature and longer than the normal path between the Corresponded Node and the Mobile Node. Many protocols and research efforts have been developed to solve this problem. Internet service Provider (ISP MBG) is one of the proposed techniques used for solving the triangle routing problem in conventional Mobile IPv4. This paper will provide a further study on the performance evaluation of Route Optimization in Mobile IPv4 based on ISP MBG scheme. The proposed technique has been implemented and tested on the Microsoft.net platform. Simulation results prove that the new framework has solved the Triangle Routing Problem in Mobile IP by providing a shorter route with a minimum transmission time for all the datagrams transferred between the Correspondent Nodes and the Mobile Nodes.

Network Mobility (NEMO), derived from Mobile Internet Protocol version 6 (MIPv6) technology, has been evolving and expanding in very rapidity manner across very short period of time. In MIPv6 technology, the Access Router (AR) plays important roles such as provide sessions connectivity and safe-guarding communications protocol. Whereas in NEMO, the routers in the communication chains are essentially the moving targets and hence the Mobile Router (MR). The MR too, inherits the basic functionalities of AR. In the basic MIPv6 and NEMO modus operandi, when the Mobile Network Notes (MNN) roamed away from home link and attached to some other foreign link, the MNNs are also addressable via a secondary address named as Care-of Address (CoA). The MNN essentially registered its primary CoA to the router on its own home link and thus registering the router to be its Home Agent (HA). These communication sets, and the ingredients of the communication will be managed via Binding Updates (BU) and the Binding Acknowledgement (BAck). Since the NEMO is using MIPv6 as the backbone, NEMO also inevitably inherits many design difficulties and problems that the MIPv6 seen. Such as using the Internet Protocol Security (IPSec) with end-to-end tunneling and using nonce value within the BU to serve as part of the authentication process and many more. In this paper, we illustrate the scenario of authentication problems involving NEMO movements and the flaw in security design. With the aim of succeeding IPSec we then propose a much better solution which is the use of Random Number, coupled with PKI concept.

This paper proposes a new mechanism of multiple home agents to realize a stable connection in Mobile IPv6. The new mechanism has multiple home agents instead of only one home agent in the existing specification of Mobile IPv6. In the existing Mobile IPv6 protocol, it takes time to find a new home agent and make it work. A mobile node cannot find that the home agent is down until the mobile node needs to register or update the binding information at the home agent. When a home agent is down and a mobile node is away from home and on a foreign link, the mobile node cannot receive any packets from a newly joining correspondent node. The new mechanism provides multiple home agents with a new binding update message and a new ICMP home agent unreachable error message. The new binding update procedure realizes a fast home agent recovery. This paper describes the result of an experiment which shows how a mobile node works with multiple home agents. We also compare the fast home agent recovery process with existing methods.

This review paper gives a brief insight about Mobile IP, its features and entities constituting Mobile IP environment. The paper explores the working and routing mechanism of Mobile IP with a deep insight about triangle routing in Mobile IP Version 4(MIPv4) and route optimization in Mobile IP Version 6(MIPv6). This paper discusses several security issues regarding Mobile IP implementation. This paper also highlights route optimization problems and focuses on the solution of those problems.

Due to the proliferation of handheld mobile devices, multimedia applications like Voice over IP (VoIP), video conferencing, network music, and online gaming are gaining popularity in recent years. These applications are well known to be delay sensitive and resource demanding. The mobility of mobile devices, running these applications, across different networks causes delay and service disruption. Mobile IPv6 was proposed to provide mobility support to IPv6-based mobile nodes for continuous communication when they roam across different networks. However, the Route Optimization procedure in Mobile IPv6 involves the verification of mobile node's reachability at the home address and at the care-of address (home test and care-of test) that results in higher handover delays and signalling overhead. This paper presents an enhanced procedure, time-based one-time password Route Optimization (TOTP-RO), for Mobile IPv6 Route Optimization that uses the concepts of shared secret Token, time based one-time password (TOTP) along with verification of the mobile node via direct communication and maintaining the status of correspondent node's compatibility. The TOTP-RO was implemented in network simulator (NS-2) and an analytical analysis was also made. Analysis showed that TOTP-RO has lower handover delays, packet loss, and signalling overhead with an increased level of security as compared to the standard Mobile IPv6's Return-Routability-based Route Optimization (RR-RO).

Though some studies involving general micro-mobility exist, micro-mobility research concerning a mobile node (MN) moving between Mobile Anchor Points (MAP) is lacking. In Hierarchical Mobile IPv6 (HMIPv6), a MN sends a binding update (BU) message to a MAP when the MN performs a handoff. This scheme reduces the handoffs and BUs performance costs. However, the total signaling cost of HMIPv6 rapidly increases with the number of corresponding nodes (CN) for a MN moving among MAPs. In this paper, we propose a scheme based on logical topology with autonomous configuration allowing a MN to move around between MAPs without performing a BU. We perform the performance evaluation for packet delivery and location update costs through a novel analytic approach. We show that the proposed scheme is approximately two times better than the existing one in terms of the total signaling costs through performance analysis. Furthermore, our scheme also reduces the location management cost effectively.

We address mobility management for the internet protocol version 6 in mobile networks, namely mobile IPv6 (MIPv6). To correctly transfer IPv6 packets to a mobile node (MN), the MN has to update its binding to the home network while roaming away from its home network. Mobile IP networks suffer high binding update traffic from high rates of handoffs and long packet delivery delay from the large distance to the home network. In this paper, we introduce a dynamic and distributed domain-based mobility management protocol for MIPv6 to reduce the binding update and packet delivery delay and traffic. We describe the basic protocol operations and examine the performance improvement of our mobility management over the previous mobile IP mobility management method by using simulations. We show that the dynamic approach provides the optimal mobility solution for MIPv6 and the distributed approach can decentralize the network load.

A DNS-assisted Simultaneous Mobility Support Procedure for Mobile IPv6

This paper presents a novel scheme that enables IPv6 mobile networks to perform optimal route optimization. The proposed scheme exploits features of the widely deployed border gateway protocol (BGP). When a mobile network is about to change its point of attachment to the Internet, its mobile router (MR) gets a new care-of-address (CoA) from the visited location and sends a binding update to its home agent (HA). Additionally, MR gets a new temporary network prefix (TNP) at the new location using the prefix delegation protocol. MR then advertises this TNP to its subnet via a router advertisement (RA) message and enables the mobile network nodes (MNNs) to build their own respective CoAs. Simultaneously, this TNP is also sent to the border router (BR) of the home network to enable BR update its BGP routing table. This operation is performed to build an association between the TNP and the mobile network prefix (MNP). BR then notifies its peers of this new update. This procedure will enable any correspondent node (CN) to directly communicate with MNNs, avoiding therefore ingress filtering and reducing both signaling and processing overhead on MR and the home agent (HA). A comparison of the proposed scheme against the NEMO Basic Support scheme, in terms of communication delay, is made via a simple performance analysis.

Mobile IP is a proposed standard protocol that builds on the Internet Protocol by making mobility transparent to applications and higher level protocols like TCP. Mobile IP (RFC 2002) is a standard proposed by a working group within the Internet Engineering Task Force; it allows the mobile node to use two IP addresses: a fixed home address and a care-of address that changes at each new point of attachment. The article presents the Mobile IP standard in moderate technical detail and points the reader toward a wealth of further information. Is also describes how Mobile IP will change with IP version 6, the product of a major effort within the IETF to engineer an eventual replacement for the current version of IP. Although IPv6 will support mobility to a greater degree than IPv4, it will still need Mobile IP to make mobility transparent to applications and higher level protocols such as TCP. There is a great deal of interest in mobile computing and apparently in Mobile IP as a way to provide for it. A quick Web search for items related to Mobile IP returned over 60,000 hits-impressive even given the notorious lack of selectivity for such procedures. Mobile IP forms the basis either directly or indirectly of many current research efforts and products. The Cellular Digital Packet Data (CDPD), for example, has created a widely deployed communications infrastructure based on a previous draft specification of the protocol. In addition, most major router vendors have developed implementations for Mobile IP.

When Mobile IPv6 is deployed in commercial network, a mobile node needs AAA services for authentication, authorization and accounting. AAA and Mobile IPv6 are operated independently. Hence schemes which merge these protocols have been emerged. These schemes enable the mobile node to establish a security association between the mobile node and a home agent, and to perform a home binding update during AAA authentication procedure. But these schemes introduce lots of signal messages and long handover latency during the handover, since Route Optimization mode for Mobile IPv6 is performed using Return Routability procedure. To solve this problem, we propose an optimized scheme which performs Route Optimization mode via the AAA infrastructure between the home agent and a correspondent node instead of Return Routability procedure. For performance evaluation, we analyze handover latency in three scenarios. We then show that the proposed scheme reduces handover latency like the average of 58% compared with the existing scheme

Fast handover protocol provides seamless handover in mobile IPv6 networks by reducing handover latency. One assumption in fast handover is that the MN (Mobile Node) or the network could know or predict the new AR (Access Router) before data transport from the previous AR to the MN is disrupted. In order to achieve this capability, the complexity of predicting the new AR and the diversity of the wireless link technologies should be considered. While it is difficult to know or predict the new AR exactly, a better solution is required to find a reasonable set of candidate ARs (i.e., neighbor ARs) that are likely to be the new AR after a handover. This paper introduces a solution to support a fast handover mechanism using multi-tunnels between MAP (Mobility Anchor Point) and neighbor ARs in HMIPv6 (Hierarchical Mobile IPv6) network. It includes the concepts of Proxy Mobile IP for creation of CoA (Care of Address) and DAD (Duplicate Address Detection). In this protocol, the MN can handover without receiving any information about the new AR and this eliminates difficulties to know or predict exactly the new AR which is not specified in standard fast handover scheme. It decouples layer-2 and layer-3 handover and efficiently reduces handover latency through the minimized number of wireless signaling messages and pre-DAD. It also saves periods of service disruption and prevents packet loss in the case of ping-pong movement of the high-speed MN. The performance of the proposed mechanism is evaluated by simulations under variable conditions.

Mobile IPv6 (MIPv6) is a presentative protocol which supports global IP mobility. MIPv6 causes a long handover latency that a mobile node (MN) doesnpsilat send or receive packets. This latency can be reduced by using Proxy Mobile IPv6 (PMIPv6). PMIPv6 is a protocol which network supports IP mobility without participation of the MN, and is studied in Network-based Localized Mobility Management (NETLMM) working group of IETF. There is much packet loss during handover in PMIPv6, although PMIPv6 reduces handover latency. In this paper, to reduce packet loss in PMIPv6 we propose Packet Lossless PMIPv6 (PL-PMIPv6) with authentication. In PL-PMIPv6 a previous mobile access gateway (pMAG) registers to a Local Mobility Anchor (LMA) on behalf of a new MAG (nMAG) during layer 2 handoff. Then, the nMAG buffers packets during handover after registration. Therefore, PL-PMIPv6 can reduce packet loss than them in MIPv6 and PMIPv6. Also, we use Authentication,Authorization and Accounting (AAA) infrastructure to authenticate the MN and to receive MNpsilas profiles securely. We shows performance of PL-PMIPv6 through comparison of packet loss during handover of MIPv6, PMIPv6 and PL-PMIPv6.

This paper firstly reviews IP mobility schemes, which are mainly based on Mobile IP and Proxy Mobile IP. The paradigm of Identifier Locator Split (ILS) is known to smoothly solve the problem of overloaded semantics of IP address, which is regarded as the evolutionary direction for future networks. In line with ILS paradigm, the variants or enhanced schemes for Mobile IP could be viewed as implicit ILS schemes, while one permanent home address serves as identifier and one reachable address as locator. All these schemes usually consider multiple networking metrics that include node mobility, latency, multi-homing, universal connectivity, and optimized routing simultaneously. The proposed two schemes in this paper have a focus on low-latency handoff and route optimization, for enhancing Mobile IPv6 and Proxy Mobile IPv6, respectively. In addition, a few evaluation results are provided to show the potential advantages of our proposals, which are followed by real usage scenarios.

Mobility management is a key issue to achieve uninterrupted Internet services in IP based network. In IPv6, the mobility management is realized by its mobile version namely the Mobile IPv6 (MIPv6). The MIPv6 is further extended to Hierarchical MIPv6 (HMIPv6) to reduce handoff latency suffered by mobile nodes and signaling load incurred due to movement if nodes within the micro mobility region defined by HMIPv6. The HMIPv6 is considered as first widely accepted layered architecture for mobility management for IPv6 network. Influenced by the benefits of HMIPv6, many researchers have suggested extension of MIPv6 into multiple layers. However, there is very little work on finding optimal levels of hierarchy in such layered architecture. The focus of this paper is to evaluate the performance of a multilayer (N-layered with N as 5) MIPv6 architecture through experimental testbed. We have observed handoff latency, signaling overhead and tunneling cost and figured out the optimal levels of hierarchy that provides the best acceptable results for all the observed parameters. Since, HMIPv6 outperforms MIPv6 in terms of handoff latency and signaling cost, so we compare our results with HMIPv6. Testbed observation depicts that three levels of hierarchy in MIPv6 architecture provides optimal performance with 27 % reduction in handoff latency and 67 % reduction in signaling overhead compared to single layer architecture like Hierarchical MIPv6 (HMIPv6) protocol.