Designing the mobile IPv6 security protocol

Network Mobility (NEMO), derived from Mobile Internet Protocol version 6 (MIPv6) technology, has been evolving and expanding in very rapidity manner across very short period of time. In MIPv6 technology, the Access Router (AR) plays important roles such as provide sessions connectivity and safe-guarding communications protocol. Whereas in NEMO, the routers in the communication chains are essentially the moving targets and hence the Mobile Router (MR). The MR too, inherits the basic functionalities of AR. In the basic MIPv6 and NEMO modus operandi, when the Mobile Network Notes (MNN) roamed away from home link and attached to some other foreign link, the MNNs are also addressable via a secondary address named as Care-of Address (CoA). The MNN essentially registered its primary CoA to the router on its own home link and thus registering the router to be its Home Agent (HA). These communication sets, and the ingredients of the communication will be managed via Binding Updates (BU) and the Binding Acknowledgement (BAck). Since the NEMO is using MIPv6 as the backbone, NEMO also inevitably inherits many design difficulties and problems that the MIPv6 seen. Such as using the Internet Protocol Security (IPSec) with end-to-end tunneling and using nonce value within the BU to serve as part of the authentication process and many more. In this paper, we illustrate the scenario of authentication problems involving NEMO movements and the flaw in security design. With the aim of succeeding IPSec we then propose a much better solution which is the use of Random Number, coupled with PKI concept.

A DNS-assisted Simultaneous Mobility Support Procedure for Mobile IPv6

To deal with increasing number of the mobile devices and real-time applications in the next generation wireless IPv6 networks, effective mobility management has become a critical problem. IETF proposed mobile IPv6 (MIPv6) and its fast handoff protocol (FMIPv6) to provide mobility management for this demand. In this paper, we propose a seamless handoff scheme, which reduces the handoff delay by using an advanced care-of address (CoA) provisioning and testing method, for real-time applications based on FMIPv6. In our proposal, collision-free CoA is proactively prepared and the time for CoA testing is removed from the FMIPv6 handoff delay to achieve seamless handoff. The simulation results show that our proposal outperforms the current schemes on the aspect of handover delay.

Due to the proliferation of handheld mobile devices, multimedia applications like Voice over IP (VoIP), video conferencing, network music, and online gaming are gaining popularity in recent years. These applications are well known to be delay sensitive and resource demanding. The mobility of mobile devices, running these applications, across different networks causes delay and service disruption. Mobile IPv6 was proposed to provide mobility support to IPv6-based mobile nodes for continuous communication when they roam across different networks. However, the Route Optimization procedure in Mobile IPv6 involves the verification of mobile node's reachability at the home address and at the care-of address (home test and care-of test) that results in higher handover delays and signalling overhead. This paper presents an enhanced procedure, time-based one-time password Route Optimization (TOTP-RO), for Mobile IPv6 Route Optimization that uses the concepts of shared secret Token, time based one-time password (TOTP) along with verification of the mobile node via direct communication and maintaining the status of correspondent node's compatibility. The TOTP-RO was implemented in network simulator (NS-2) and an analytical analysis was also made. Analysis showed that TOTP-RO has lower handover delays, packet loss, and signalling overhead with an increased level of security as compared to the standard Mobile IPv6's Return-Routability-based Route Optimization (RR-RO).

An enhanced fast handover with seamless mobility support for next-generation wireless networks

Notes that cellular is the inevitable future architecture for the personal communication service system (PCS). This is important for wireless mobile communications and will eventually be integrated with the Internet. Recent initiatives to add mobility to the Internet and packet data services for the next generation cellular systems are being considered by many mobile service providers, and providing a seamless support for IP‐based packet switched services is an important issue. Mobile Internet Protocol version 6 (Ipv6) is a new version of the Internet Protocol that was standardized by the Internet Engineering Task Force (IETF). It supports mobility and is presently being standardized by the IETF Mobile IP Working Group. Discusses the current cellular support based on Ipv6 and points out the shortfalls of using Mobile IP. Highlights protocols especially for mobile management schemes which can optimize a high speed mobile station moving among small wireless cells.

The 3G mobile network IMT-2000, was launched some years ago and multimedia traffic in the mobile Internet has been increasing with the growth of wireless access links. Next-generation networks need to efficiently transport huge volumes of multimedia traffic with high-quality mobility management. We have proposed an IP-based IMT network platform (IP/sup 2/) for the next-generation mobile network architecture and have studied its mobility management scheme, IP/sup 2/ mobility management protocol (IP/sup 2/MM). IP/sup 2/MM is a network-controlled mobility protocol that deploys mobility functions inside the network and conceals IP mobility from the mobile node. It is also designed to satisfy the requirements of mobile operators. In this paper, we introduce an overview of IP/sup 2/MM and show the comparative evaluation results with mobile IPv6. For the evaluation, we implemented both in our experimental system and compared their performance. The results show that IP/sup 2/MM provides better mobility performance than mobile IPv6, and we conclude that IP/sup 2/MM is an effective and feasible mobility protocol for the next-generation networks of mobile operators.

The current deployment of wireless mesh networks requires mobility management to track the current locations of mobile nodes around the network without service interruption. To do so, the Hierarchical Mobile IPv6 protocol has been chosen, which minimises the required signalling by introducing a new entity called the mobile anchor point to act as a local home agent for all visiting mobile nodes in a specific domain. It allows a mobile node to register its local/regional care-of addresses with a mobile anchor point by sending a local binding update message. However, the local binding update is quite sensitive; it modifies the routing to enable mobility in the wireless mesh networks. When a local binding update message is spoofed, an attacker can redirect traffic that is destined for legitimate mobile node either to itself or to another node. This situation leads to an increased risk of attacks. Therefore, this paper contributes to addressing this security issue based on wireless mesh networks by cryptography generation and verification of a mobile node’s local and regional care-of addresses, as well as the application of a novel method to verify the reachability of mobile node at claimed local care-of address. This is called the enhanced mobile anchor point registration protocol. The Scyther tool has been used to ensure the proposed protocol accuracy. Furthermore, the performance, in terms of the mobile anchor point registration delay and signalling overhead, is evaluated by using the OPNET modeller simulator.

Proxy mobile Internet protocol version 6 (PMIPv6) is a network-based mobility management protocol proposed by Internet Engineering Task Force (IETF), which allows nodes to remain service connectivity while moving around in the IPv6 Internet. PMIPv6 is different from the host-based mobility management protocols (mobile Internet protocol version (MIPv6), hierarchical mobile IPv6 (HMIPv6), fast handover for mobile IPv6 (FMIPv6), and fast handover in hierarchical mobile IPv6 (F-HMIPv6)), whose signaling are transferred among some network entities except mobile node (MN). This paper focuses on the analytical modeling of performance analysis for PMIPv6 and other protocols using IEEE802.16-based wireless metropolitan area networks as the wireless access network. The performances of these protocols are evaluated by some metrics like handover latency, service disruption time, and binding update cost. Numerical results show that PMIPv6 has better performance.

In this paper, a new approach is proposed to reduce handoff operation in IEEE 802.16e network. Traditional mobile approaches, such as mobile IPv6 (MIPv6) and hierarchical MIPv6 (HMIPv6), can support smoothly handoff. These approach, ,unfortunately, suffer large handoff delay and packet lost in macro mobility for mobile users. With the aid of the partner node, DAD operation can be pre-executed by the partner node before the mobile node initialize the handoff request, we propose a cross-layer partner based fast handoff mechanism based on HMIPv6 in IEEE 802.16e network, called as P_HMIPv6 protocol. The P_HMIPv6 protocol is a cross-layer, layer 2 and layer 3, approach. The partner station (PS), which is a new component with relay ability and adopted by our protocol, is a static mobile station (MS). With the aid of the PSs, care-of address (CoA) can be pre-acquired and DAD operation can be pre-executed by the PS before the MS initials the layer 2 handoff. The simulation results show that P_HMIPv6 protocol actually achieves the performance improvements in the handoff delay time and the packet loss.

Mobile IPv6 (MIPv6) protocol is a new protocol designed to support the node mobility of IPv6 protocol, which is a basic protocol of the next generation Internet. Protocol testing consists of conformance testing, interoperability testing and performance testing. Protocol emulation testing, which we adopt in this paper, is a way of protocol testing. This paper designs an emulation-based method for performance testing of mobile IPv6 protocol, gives performance evaluation metrics in view of the three kinds of MIPv6 nodes (HA, home agent; MN, mobile node; CN, correspondent node), tests and analyzes MIPL 1.1 on Linux 2.4.26. Our method is easy to implement on commonly used hardware, very convenient to deploy and more flexible compared to most commercial test instruments. As far as we know, this is the first work on the research of performance testing of Mobile IPv6 protocol.

The route optimization operation in Mobile IP Version 6 (MIPv6) allows direct routing from any correspondent node to any mobile node and thus eliminates the problem of "triangle routing" present in the base Mobile IP Version 4 (MIPv4) protocol. Route optimization, however, requires that a mobile node constantly inform its correspondent nodes about its new care-of addresses by sending them binding update messages. Unauthenticated or malicious binding updates open the door for intruders to perform redirect attacks, i.e., malicious acts which redirect traffic from correspondent nodes to locations chosen by intruders. How to protect binding update messages to defend against redirect attacks is a challenging problem given the open environment in which MIPv6 operates. In this paper, we first look at two solutions proposed by the IETF Mobile IP Working Group and point out their weaknesses. We then present a new protocol for securing binding update messages. We also show that our protocol achieves strong security and at the same time is highly scalable to wide spread deployment.

With the functionalities of obtaining new care-of-address (CoA) ahead and building tunnels for packet forwarding during handover, the fast handover scheme has better performance than Mobile IPv6. However, the handover performance is downgraded if mobile node (MN) cannot finish the handover preparation before the associated link is broken. In this paper, we propose an optimistic ready-tunneling (ORT) control scheme to resolve the aforementioned problems. In the proposed ORT scheme, new access router (NAR) can prepare for a new CoA and builds a tunnel for MN ahead when MN enters the domain of NAR. As a result, MN can switch to the new network domain smoothly because of early CoA acquisition and tunnel establishment during handover.

Fast handover protocol provides seamless handover in mobile IPv6 networks by reducing handover latency. One assumption in fast handover is that the MN (Mobile Node) or the network could know or predict the new AR (Access Router) before data transport from the previous AR to the MN is disrupted. In order to achieve this capability, the complexity of predicting the new AR and the diversity of the wireless link technologies should be considered. While it is difficult to know or predict the new AR exactly, a better solution is required to find a reasonable set of candidate ARs (i.e., neighbor ARs) that are likely to be the new AR after a handover. This paper introduces a solution to support a fast handover mechanism using multi-tunnels between MAP (Mobility Anchor Point) and neighbor ARs in HMIPv6 (Hierarchical Mobile IPv6) network. It includes the concepts of Proxy Mobile IP for creation of CoA (Care of Address) and DAD (Duplicate Address Detection). In this protocol, the MN can handover without receiving any information about the new AR and this eliminates difficulties to know or predict exactly the new AR which is not specified in standard fast handover scheme. It decouples layer-2 and layer-3 handover and efficiently reduces handover latency through the minimized number of wireless signaling messages and pre-DAD. It also saves periods of service disruption and prevents packet loss in the case of ping-pong movement of the high-speed MN. The performance of the proposed mechanism is evaluated by simulations under variable conditions.

In the age of technology, most of the network services originally run on large scale and base on complicated systems. When they’re brought into our home, the migration could derive further technical problems due to the change of scale and cost. Home networking structure is often improvised and built up with several types of wireless technology, such as WiMedia and WiFi, inside several small rooms. In addition, people enjoy walking around at home and being served without constraints and service interruption, so the seamless services and mobility within home are a must. This paper describes a novel notion on the transition among wireless connectivities at home which is named Hand-around and efficiently provides seamless network services while moving in heterogeneous and improvised home networking. A developing technique in Mobile IPv6, called multiple care-of addresses (MCoA) registration, is the best candidate to accomplish such seamless services in an all-IP home network. Besides, it’s a pure layer-3 mechanism and hence could more easily apply on and adapt to home services without massively changing the operational flow and system hierarchy, especially suited for services of multimedia, communication and entertainment. This notion also gives a new vision to some scenarios described in Home Gateway Initiative (HGI) document.KeywordsHome networkingHome gatewaySeamless serviceMobile home serviceMultiple care-of address registrationHeterogeneous networks