Mobile IPv6 Research Articles

A Network-Based Seamless Handover Scheme for VANETs

Vehicular ad hoc network (VANET) standards, including IEEE 1609 WAVE and ETSI C-ITS, use IPv6 to interconnect VANET with the Internet. Considering the high vehicle speeds and short communication ranges of road side units (RSUs), such vehicles may suffer from frequent service interruptions. Several VANET IP mobility schemes have been proposed in order to mitigate this problem. However, these only support L3 handover, as the RSUs act as IPv6 access routers (ARs) for vehicles. Some VANET IP mobility schemes reduce the handover latency of the L3 handover but do not fundamentally mitigate the frequency of the L3 handover. As L3 handover indicates that the default router of the vehicle is changing, the vehicle must perform IPv6 configuration, including router discovery and neighbor unreachability detection. Since most L3 handover latency is caused by this IPv6 configuration, the L3 handover involves a higher signaling cost and longer handover latency than the L2 handover. We propose a network-based L2 extension handover scheme for VANET. It decouples the AR functions from the RSU. An AR connects several RSUs via L2 links within its coverage. In this configuration, most inter-AR handovers are replaced with intra-AR handovers, so that the frequency of the L3 handover is decreased substantially. Therefore, the service disruption time caused by default router switching is also reduced, and the deployment of VANET can be made more flexible by decoupling the RSU and the AR. Proxy Mobile IPv6 is adopted in order to support inter-AR handover in the proposed scheme. Furthermore, the scheme supports seamlessness in both the intra-AR and inter-AR handovers with buffering at the AR. The performance analysis and the simulation result reveal that the proposed scheme reduces the signaling cost and handover latency and also shows seamless packet delivery for vehicles.

Securing Locations of Mobile Nodes in Wireless Mesh Network’s

The current deployment of wireless mesh networks requires mobility management to track the current locations of mobile nodes around the network without service interruption. To do so, the Hierarchical Mobile IPv6 protocol has been chosen, which minimises the required signalling by introducing a new entity called the mobile anchor point to act as a local home agent for all visiting mobile nodes in a specific domain. It allows a mobile node to register its local/regional care-of addresses with a mobile anchor point by sending a local binding update message. However, the local binding update is quite sensitive; it modifies the routing to enable mobility in the wireless mesh networks. When a local binding update message is spoofed, an attacker can redirect traffic that is destined for legitimate mobile node either to itself or to another node. This situation leads to an increased risk of attacks. Therefore, this paper contributes to addressing this security issue based on wireless mesh networks by cryptography generation and verification of a mobile node’s local and regional care-of addresses, as well as the application of a novel method to verify the reachability of mobile node at claimed local care-of address. This is called the enhanced mobile anchor point registration protocol. The Scyther tool has been used to ensure the proposed protocol accuracy. Furthermore, the performance, in terms of the mobile anchor point registration delay and signalling overhead, is evaluated by using the OPNET modeller simulator.

An Anonymous Authentication Scheme based on PMIPv6 for VANETs

With the rapid development of wireless network infrastructure and transportation industry, vehicular ad hoc networks (VANETs) have been paid more and more attention. Meanwhile, proxy mobile IPv6(PMIPv6), with its shorter handover delay and lower signaling overhead, is an ideal mobility management approach to exploit the advantages of VANETs. However, security issues become the main obstacle for the combination of PMIPv6 and VANETs. Unfortunately, most scholars’ research focus on the efficiency and security during access authentication of vehicle node, while ignoring the privacy issues which may cause great impact on mobile users. In this paper, we put forward an anonymous authentication scheme based on PMIPv6 for VANETs. The scheme is equipped with pseudonyms, identity-based cryptographic mechanisms, and several salient authentication protocols. According to the security and performance analysis, the proposed scheme owns higher security and efficiency compared with the typical ones.

Moving Target Defense for Securing SCADA Communications

In this paper, we introduce a framework for building a secure and private peer to peer communication used in supervisory control and data acquisition networks with a novel Mobile IPv6-based moving target defense strategy. Our approach aids in combating remote cyber-attacks against peer hosts by thwarting any potential attacks at their reconnaissance stage. The IP address of each host is randomly changed at a certain interval creating a moving target to make it difficult for an attacker to find the host. At the same time, the peer host is updated through the use of the binding update procedure (standard Mobile IPv6 protocol). Compared with existing results that can incur significant packet-loss during address rotations, the proposed solution is loss-less. Improving privacy and anonymity for communicating hosts by removing permanent IP addresses from all packets is also one of the major contributions of this paper. Another contribution is preventing black hole attacks and bandwidth depletion DDoS attacks through the use of extra paths between the peer hosts. Recovering the communication after rebooting a host is also a new contribution of this paper. Lab-based simulation results are presented to demonstrate the performance of the method in action, including its overheads. The testbed experiments show zero packet-loss rate during handoff delay.

Effects of fixed and roaming CN on MIPv6 networks

Mobile Internet protocol version 6 (MIPv6) is a protocol that allows mobile nodes (MNs) to remain accessible while moving in the IPv6 network, providing users with a form of transparency in spite of the mobility. Mobile networks consist of different nodes such as the MN, correspondent node (CN), home agent (HA), foreign agent or router (FA or FR) and mobile router (MR). One of the vital nodes in a mobile network is CN, a node that communicates with the MN. In the future, in times of need, for instance, during wars, disasters or natural hazards, an MN may require the services of a CN in order to roam. In this paper, we analyse the effect of fixed and roaming CN on MIPv6 networks. The results show that, with a fixed CN, the delay variation performance, end-to-end delay and packet received are better than having a roaming CN in the mobile networks. This requires the attention of researchers, especially when all the communicating nodes (i.e., MN and CN) are roaming in the mobile networks to reduce the delay and packet drop, especially during the handover process.
 Keywords: MIPv6, fixed CN, roaming CN, MN, HA and FA.
 
 

Quantitative Evaluation for PMPIv6 Multicast Fast Reroute Operations

This paper evaluates Proxy Mobile Internet Protocol Version 6 (PMIPv6) multicast fast reroute operations using quantitative analysis. The motivation is to cater the fast growth of mobile data traffic consumption and its networking technologies. Hence it is significance to enhancing the present techniques. Multicast enabled PMIPv6 is a mobile multicast networking management protocol that is highly acceptable in handling mobile data traffic. This paper briefly highlights the methodology, architecture and processes involved to produce the quatitative equations for each parameter. The quantitative parameters discussed are packet loss cost and handover latency.

Simulation Analysis for Multicast Context Delivery Network Mobility Management

The objective of this paper is to presents analyses for multicast network mobility management using NS3. It is mainly to verify the proposed network architecture and its activities. NS3 is a network simulator that implements virtually network prototype that is close to real implementation. Network mobility management has become a popular topic in networking research due to its ability to mitigate mobile IPv6 problems. However the standard network mobility management only introduced to support unicast traffic. Hence this paper integrates context transfer and multicast fast reroute, and implements this integration to the standard network mobility management. This implementation enables multicast to network mobility management with high network performance support. The analyses focus on the throughput performance. The analyses of this simulator are hereby presented.

Throughput and Handover Latency Evaluation for Multicast Proxy Mobile IPV6

The objective of this paper is to present performance analysis of a new enhanced mobile multicast network mobility management scheme. The initial developed network mobility management called Proxy Mobile IPv6 (PMIPv6) is based on unicast network support. This paper enabled multicast support in network mobility management and named it as MPMIPv6. Additionally this enhancement also provides better network performance with the new context transfer operations and fast reroute operations. In brief, this paper also describes other current mobile multicast schemes. The new scheme is evaluated using mathematical analysis and NS3.19 simulator. Theoretically this scheme reduces service recovery time, total signalling cost, handover latency, and packet loss for multicast communication. However for this paper, the analysed parameters are throughput and handover latency. Both mathematical and simulation results exhibit better network performance for multicast environment compared to the standard benchmark scheme.

Simulation Analysis for Multicast Context Delivery Network Mobility Management

The objective of this paper is to presents analyses for multicast network mobility management using NS3. It is mainly to verify the proposed network architecture and its activities. NS3 is a network simulator that implements virtually network prototype that is close to real implementation. Network mobility management has become a popular topic in networking research due to its ability to mitigate mobile IPv6 problems. However the standard network mobility management only introduced to support unicast traffic. Hence this paper integrates context transfer and multicast fast reroute, and implements this integration to the standard network mobility management. This implementation enables multicast to network mobility management with high network performance support. The analyses focus on the throughput performance. The analyses of this simulator are hereby presented.

A certificateless public key encryption based return routability protocol for next-generation IP mobility to enhance signalling security and reduce latency

IPv6 mobility is an IETF standard that has added roaming capabilities of mobile node (MN). It allows MNs to travel from one network to another without any distraction in communication service. MNs register their current location to home stations and correspondent hosts via a process known as binding update. In IPv6 mobility, return routability protocol (RRP) is a standard procedure for updating the current location of MNs through binding update message to their communicants. However, RRP has several security threats and issues. Subsequently, RRP was integrated with identity-based encryption for improvement of security. Nevertheless, it suffers from some limitations such as inherent key escrow problem, lack of key revocation, high computational load and latency while providing security. Hence, this paper proposes a novel approach called optimised RRP using certificateless public key encryption to address these issues. The proposed protocol is simulated and validated using Automated Validation of Internet Security Protocols and Applications (AVISPA) – a model checker. Finally, the simulation and numerical results illustrate the extent to which the proposed protocol surpasses the existing method in terms of enhanced security and significant reduction in communication payload with minimised latency.

A Novel Fast Reroute Signaling Cost for Multicast Proxy Mobility

A profound analysis of signaling cost for multicast network mobility management environment. The evaluation is a innovative integration of Multicast only Fast Reroute (MFR) and Context Transfer (CT). This integration is implemented to network mobility environment which is Proxy Mobile IPv6 (PMIPv6). The signaling cost terms is described based on handover process flow of the proposed implementation. This paper introduces and validates a novel enhanced signaling cost procedure for multicast PMIPv6. This procedure helps to improve network mobility performance as mobile multicast traffic usage rises. Through this implementation better signaling cost formula is brought forward. The integration helps to ease usage increment issues.

Implementation of fast handover for proxy mobile IPv6: Resolving out-of-order packets.

Mobile IP allows for location-independent routing of IP datagrams on the Internet. Mobile IP specifies how a mobile node (MN) registers with its home agent and how the home agent routes datagrams to the MN through the tunnel. Current Mobile IP protocols have difficulties meeting the stringent handover delay requirements of future wireless networks. Fast handover for Proxy Mobile IPv6 (FPMIPv6) is used to resolve handover latency and packet loss problems that occur in the Proxy Mobile IPv6 (PMIPv6) protocol. However, while implementing the FPMIPv6 scheme in a testbed, we encounter the out-of-order packet (OoOP) problem. The cause of this problem is the existence of two paths for data transmitted from a correspondent node (CN) to an MN. Since the problem affects the quality of service (QoS) of the network and the performance of the MN, we propose a new scheme using the last packet marker and packet buffering to solve this problem in FPMIPv6. The new Mobile Access Gateway (MAG) can control and deliver the data transmitted via the old path or the new path to an MN in order, using the last packet marker to notify the end of the data delivery in the old path and the packet buffering for holding the data delivered in the new path. We implement both the proposed scheme and FPMIPv6 in a testbed as a real network environment to demonstrate the correctness, cost effectiveness, and performance of the proposed scheme. A performance evaluation reveals that the proposed scheme can handle the OoOP problem efficiently.

Review: Security Mechanism of Mobile Ipv6 Threats against Binding Update

Review: Security Mechanism of Mobile Ipv6 Threats against Binding Update

A fast handover protocol for 6LoWPAN wireless mobile sensor networks

Wireless sensor networks (WSNs) are finding application in numerous fields. For many of these applications, some or all of the sensor nodes are mobile. Mobility management in WSNs is a challenging and has been the subject of intensive research. In this paper, we propose an IP-based mobility management protocol named Fast handover Proxy Mobile IPv6 for Sensor networks (FPMIPv6-S). FPMIPv6-S provides network-based mobility support for 6LoWPAN WSN when a sensor node moves between two Personal Area Networks. It is an improved version of the PMIPv6 protocol proposed for mobility management in IPv6 networks. FPMIPv6-S messages are carried by RPL protocol. Analytical evaluation of the proposed protocol shows significantly improved performance with respect to network mobility cost (signalling traffic) when compared to PMIPv6 and RPL alone. We also integrated the FPMIPv6-S protocol in the NS-3 simulator and performed a thorough performance comparison of FPMIPv6-S and RPL.

Using Chain of Mobile Access Gateway to Reduce Delay for PMIPv6 Protocol Applied in WLAN

Wireless LAN controller (WLC) is used to manage and control Access points (APs) in Wireless local area network (WLAN). Proxy mobile IPv6 (PMIPv6) protocol supports network-layer mobility in WLC based WLAN. However, it introduces extra delay in delivering packets from the APs to the WLC. We use Mobile access gateway (MAG) chain to reduce packet delay. The handoff delay and packet delivery delay under the proposed scheme are derived, based on which we formulate the delay minimization problem whose solution leads to the optimal MAG chain length. Numerical analysis results indicate that the proposed scheme outperforms the existing scheme in terms of delay in the case when the delay between Local mobility anchor (LMA) andWLC is relatively greater than the delay between two neighboring WLCs. The proposed scheme is able to reduce packet loss resulting from the traditional handoff procedure introduced in the PMIPv6 protocol and that due to delay limitation.

PMIPv6 Integrated with MIH for Flow Mobility Management: A Real Testbed with Simultaneous Multi-Access in Heterogeneous Mobile Networks

The exponential growth of the number of multihomed mobile devices is changing the way how we can connect to the Internet. Our mobile devices are demanding for more network resources, in terms of traffic volume and QoS requirements. Unfortunately, it is very hard to a multihomed device to be simultaneously connected to the network through multiple links. The current work enhances the network access of multihomed devices agnostically to the deployed access technologies. This enhancement is achieved by using simultaneously all of the mobile devices interfaces, and by routing each individual data flow through the most convenient access technology. The proposed solution is only deployed at the network side and it extends Proxy Mobile IPv6 with flow mobility in a completely transparent way to mobile nodes. In fact, it gives particular attention to the handover mechanisms, by improving the detection and attachment of nodes in the network, with the inclusion of the IEEE 802.21 standard in the solution. This provides the necessary implementation and integration details to extend a network topology with femtocell devices. Each femtocell is equipped with various network interfaces supporting a diverse set of access technologies. There is also a decision entity that manages individually each data flow according to its QoS / QoE requisites. The proposed solution has been developed and extensively tested with a real prototype. Evaluation results evidence that the overhead for using the solution is negligible as compared to the offered advantages such as: the support of flow mobility, the fulfil of VoIP functional requisites, the session continuity in spite of flows mobility, its low overhead, its high scalability, and the complete transparency of the proposed solution to the user terminals.

Security analysis and enhanced user authentication in proxy mobile IPv6 networks.

The Proxy Mobile IPv6 (PMIPv6) is a network-based mobility management protocol that allows a Mobile Node(MN) connected to the PMIPv6 domain to move from one network to another without changing the assigned IPv6 address. The user authentication procedure in this protocol is not standardized, but many smartcard based authentication schemes have been proposed. Recently, Alizadeh et al. proposed an authentication scheme for the PMIPv6. However, it could allow an attacker to derive an encryption key that must be securely shared between MN and the Mobile Access Gate(MAG). As a result, outsider adversary can derive MN’s identity, password and session key. In this paper, we analyze Alizadeh et al.’s scheme regarding security and propose an enhanced authentication scheme that uses a dynamic identity to satisfy anonymity. Furthermore, we use BAN logic to show that our scheme can successfully generate and communicate with the inter-entity session key.

Security Vulnerabilities and Improvements of SPAM: a Secure Password Authentication Mechanism for Seamless Handover in Proxy Mobile IPv6 Networks

The main contribution of this paper is to analyze a secure passwordauthentication mechanism (SPAM), proposed by Chuang et al. in 2013(IEEE Syst J.). The SPAM was used for designing a secure handover inProxy Mobile IPv6 (PMIPv6) networks. Chuang et al. in the originalpaper claimed that SPAM provides high security properties and canresist various attacks. However, in this paper we point out thatSPAM is vulnerable to the critical attacks, such as stolen smartcard and off-line dictionary attack, replay attack and impersonationattack. In addition, we show that the identity of MNs and thesession key between MN and MAG can be disclosed by an insiderattacker; resultantly, anonymity and confidentiality between MNs andMAG will be completely broken in SPAM. As a remedy, we also propose an improved scheme which not only conquers the problems of the previous schemes but also provides a reduction in computational cost. Moreover, the proposed scheme provides the user anonymity and untraceability and secure session key agreement. Finally, the security of the improved protocol is proved in the random oracle model.DOI: http://dx.doi.org/10.5755/j01.itc.46.2.12118

SEIP: Secure and seamless IP communications for group-oriented machine to machine communications

The main requirements of machine to machine (M2M) communication in 5G include support of a massive number of low-data-rate devices and very-low-latency data transfer. Addressing these requirements in 5G requires new methods and in this paper we focus on one of the paramount issues, i.e., secure and seamless IP communications for group-oriented M2M communications. We consider a heterogeneous network architecture based on 3GPP standard, in which the handover occurs between E-UTRAN and Non-3GPP access network. We first propose an improved Proxy Mobile IPv6 (PMIPv6) protocol, and further implement the improved PMIPv6 associated with the group-based lightweight authentication scheme to achieve secure and seamless IP communications, named SEIP, which improves handover latency, packet loss, and signaling overhead. Particularly, SEIP performs access authentication process before IP layer (L3) and link layer (L2) handover to reduce handover delay. In addition, it uses packet buffering and forwarding mechanisms to reduce packet loss during the handover period. SEIP can not only fulfill security requirements in previous protocols, but also can successfully resist some sophisticated attacks, such as redirection, DoS attacks, etc. The results of performance analysis illustrate that SEIP achieves better performance in terms of signaling cost on wireless link, handover latency and packet loss compared to several other schemes.

SPFP: Ticket-based secure handover for fast proxy mobile IPv6 in 5G networks

Recently, Chuang et al. introduced a secure password authentication mechanism, called SPAM, for seamless handovers in Proxy Mobile IPv6 (PMIPv6). SPAM aimed at providing high security properties while optimizing handover latency and computation overhead, but as pointed out in this paper SPAM is vulnerable to replay and malicious insider attacks as well as the compromise of a single node. In this paper, a new Security Protocol for Fast PMIPv6, called SPFP, is proposed that provides a ticket-based secure handover for mobile nodes (MNs). In SPFP, a ticket containing authentication materials is used for fast handover authentication when an MN changes its attachment point. Moreover, the MN’s anonymity is supported for preserving location privacy. Detailed operations of initial authentication and handover authentication are presented with message flows. The formal security analysis of SPFP is provided with results of qualitative analysis and quantitative analysis.