Access Authentication for HMIPv6 with Node Certificate and Identity-Based Hybrid Scheme

Abstract

PDF HTML阅读 XML下载 导出引用 引用提醒 节点证书与身份相结合的HMIPv6 网络接入认证机制 DOI: 10.3724/SP.J.1001.2012.04188 作者: 作者单位: 作者简介: 通讯作者: 中图分类号: 基金项目: 国家自然科学基金(60872040); 中央高校基本科研业务费专项资金(N100417002, N100404004) Access Authentication for HMIPv6 with Node Certificate and Identity-Based Hybrid Scheme Author: Affiliation: Fund Project: 摘要 | 图/表 | 访问统计 | 参考文献 | 相似文献 | 引证文献 | 资源附件 | 文章评论 摘要:接入认证是层次型移动IPv6(HMIPv6)网络安全的基本需求.构建了适于HMIPv6 的分层认证框架,设计了一种节点证书与身份相结合的签名方案,并以此为基础提出了HMIPv6 网络双向接入认证机制.该机制利用基于身份密码技术简化了公钥基础设施的复杂密钥管理过程;以节点证书为接入认证的主要依据,消除了接入网络与家乡网络间的消息交互;采用提出的层次化签名方案,实现了用户与接入网络的双向认证.机制经过简单扩展,能够支持多层HMIPv6 网络的接入认证.性能与安全性分析表明,与传统的及其他基于身份的认证方案比较,所提出的机制拥有更高的认证效率和安全性. Abstract:Access authentication is the basic security requirement of hierarchical mobile IPv6 (HMIPv6) network. A mutual access authentication scheme is proposed in this paper based on hierarchical authentication framework as well as node certificate and identity-based hybrid approach. The scheme adopts identity-based cryptography to simplify the cumbersome key management of PKI. Node certificate is introduced to authenticate entity, which eliminates message interactions between home network and access network. A mutual authentication protocol is achieved using proposed hierarchical signature mechanism. The protocol can also be extended to support access authentication in multi-level HMIPv6 network. Performance and security analysis demonstrates that the proposed scheme outperforms other identity-based proposals in terms of efficiency and security. 参考文献 相似文献 引证文献