Mobile IPv6 Networks Research Articles

MIH-SPFP: MIH-based secure cross-layer handover protocol for Fast Proxy Mobile IPv6-IoT networks

With the proliferation of mobile devices characterizing modern cyber-physical systems, service switching and handoff over large coverage areas become key aspects of the Internet of Things (IoT), mainly when remotely controlling and interacting with mission-critical autonomous vehicles that potentially may cover quite large distances such as driverless cars and Unmanned Aerial Vehicles (UAVs). These requirements can now be fully satisfied by the widespread Fast handover for Proxy Mobile IPv6 (F-PMIPv6) technology, that can be yet considered as a cornerstone in emerging 5G communications, but, unfortunately, such an approach only supports homogeneous handover, that may result in a nontrivial problem due to the heterogeneity in mobile communications technologies characterizing the available cyber-physical solutions and IoT network access devices. Recently, many researchers developed efficient solutions for the integration of F-PMIPv6 and Media Independent Handover (MIH) to allow fast handover in a highly heterogeneous mobile network. However, these models lack the security features which are necessary to protect IoT devices during handoffs. In this paper, a new security protocol, MIH-based secure cross-layer handover protocol for Fast Proxy Mobile IPv6 networks (MIH-SPFP), is proposed, incorporating the features of Secure Protocol for Fast-PMIPv6 (SPFP) into F-PMIPv6-MIH and reducing the security risks during the handover. The proposed solution also provides low latency by reducing the re-authentication path during the inter-Mobile Access Gateway (MAG) handovers. The security of the proposed protocol has been analyzed by using Burrows–Abadi–Needham (BAN) logic and Automated Validation of Internet Security Protocols and Applications (AVISPA) tool and its performance has been evaluated through numerical simulation by selecting “Marathon Broadcasting” as a case study. Results show that the proposed protocol not only effectively secures the handover process but is also more efficient compared with the standard MIH handover solution.

Security analysis and enhanced user authentication in proxy mobile IPv6 networks.

The Proxy Mobile IPv6 (PMIPv6) is a network-based mobility management protocol that allows a Mobile Node(MN) connected to the PMIPv6 domain to move from one network to another without changing the assigned IPv6 address. The user authentication procedure in this protocol is not standardized, but many smartcard based authentication schemes have been proposed. Recently, Alizadeh et al. proposed an authentication scheme for the PMIPv6. However, it could allow an attacker to derive an encryption key that must be securely shared between MN and the Mobile Access Gate(MAG). As a result, outsider adversary can derive MN’s identity, password and session key. In this paper, we analyze Alizadeh et al.’s scheme regarding security and propose an enhanced authentication scheme that uses a dynamic identity to satisfy anonymity. Furthermore, we use BAN logic to show that our scheme can successfully generate and communicate with the inter-entity session key.

Security Vulnerabilities and Improvements of SPAM: a Secure Password Authentication Mechanism for Seamless Handover in Proxy Mobile IPv6 Networks

The main contribution of this paper is to analyze a secure passwordauthentication mechanism (SPAM), proposed by Chuang et al. in 2013(IEEE Syst J.). The SPAM was used for designing a secure handover inProxy Mobile IPv6 (PMIPv6) networks. Chuang et al. in the originalpaper claimed that SPAM provides high security properties and canresist various attacks. However, in this paper we point out thatSPAM is vulnerable to the critical attacks, such as stolen smartcard and off-line dictionary attack, replay attack and impersonationattack. In addition, we show that the identity of MNs and thesession key between MN and MAG can be disclosed by an insiderattacker; resultantly, anonymity and confidentiality between MNs andMAG will be completely broken in SPAM. As a remedy, we also propose an improved scheme which not only conquers the problems of the previous schemes but also provides a reduction in computational cost. Moreover, the proposed scheme provides the user anonymity and untraceability and secure session key agreement. Finally, the security of the improved protocol is proved in the random oracle model.DOI: http://dx.doi.org/10.5755/j01.itc.46.2.12118

Secured Route Optimization and Micro-mobility with Enhanced Handover Scheme in Mobile IPv6 Networks

خسارات وارد شده به شبکه گاز شهری در یک زلزله می­تواند زیان­های زیادی از جمله خسارت ناشی از آتش­سوزی در شبکه زیر ساخت، و خسارت ناشی از قطع خدمات رسانی، تعمیر و تعویض اعضای شبکه، را در بر داشته باشد. در این مقاله یک مدل آتش­سوزی پیشنهاد شده است. مدل پیشنهادی در یک مدل نیمه احتمالاتی مرسوم برای برآورد خسارت­های مختلف ناشی از آسیب دیدن شبکه گاز شهری، به کار برده شده است. هدف از این کار توسعه یک ابزار قابل اعتماد جهت تخصیص بهتر منابع می­باشد. در مدل آتش­سوزی پیشنهادی اثر عواملی همچون چگالی گاز، خصوصیات گاز منتشر شده در شهر، توزیع خطوط اصلی به عنوان منابع اشتعال، و سرعت باد، در نظر گرفته شده است. به دلیل وجود چندین عامل مرتبط به هم، در مدل برآورد خسارت ترکیبی از متغییرهای احتمالاتی و تعینی به کار برده شده است. اثرات اقتصادی گسترش آتش، قطع خدمات گاز، و خسارت به شبکه گاز، نیز با استفاده از مدل با ساختار نیمه احتمالاتی مشابه و با استفاده از توابع وزنی، شبیه سازی شده است. ارزیابی سناریوهای مختلف آتش­سوزی در مدل برآورد خسارت امکان­پذیر می­باشد. از مدل پیشنهادی در مثال­های واقعی از سناریو­های زلزله در ناحیه شهری استفاده شده است و نتایج آن مورد بررسی قرار گرفته است.

Security analysis of fast inter-LMA domain handover scheme in proxy mobile IPv6 networks

The PMIPv6 is vulnerable to various security threats such as the DoS or redirect attacks. In this paper, we analyzed the Kang–Park & ESS-FH scheme, and proposed an Enhanced Security scheme for FPMIPv6 (ESS-FP). Based on the CGA method and the public key Cryptography, ESS-FP provides a strong key exchange and key independence in addition to improving the weaknesses of FPMIPv6. The proposed scheme was formally verified based on Ban-logic, and its handover latency was analyzed and compared with that of the Kang–Park scheme & ESS-FH. In addition, we proposed an inter-domain fast handover scheme for PMIPv6 using the proxy-based FPMIPv6.

Localized paging in proxy mobile IPv6 networks

In Proxy Mobile IPv6 (PMIPv6) networks, proxy registrations are performed even for idle mobile nodes (MNs), resulting in unnecessary signaling traffic and protocol cost. Although there have been many paging techniques aimed at reducing the unnecessary location updates, those are mainly focused on telecommunication systems and how to adopt IP paging schemes in PMIPv6 is not yet well studied. In this paper, we introduce a new paging scheme that optimizes paging performance in a localized manner. The proposed localized paging scheme pages the idle MN through a mobility access gateway (MAG) while the operation is transparent to a local mobility anchor (LMA) in a PMIPv6 network domain. In this way, a bottleneck risk at the LMA can be avoided, without a huge requirement of buffer size and paging singling cost. We develop a thorough analytical model for evaluating the performance of the proposed scheme, compared with a LMA-based paging scheme in terms of the buffer size requirement and signaling cost. Analytical results demonstrate that the proposed paging scheme can significantly reduce the signaling cost for PMIPv6, achieving a less buffer size requirement and of course shorter paging delay, compared with those of the LMA-based paging scheme.

Tunneling-based Routing and Handover Decision Model for Proxy Mobile IPv6 Networks

Tunneling-based Routing and Handover Decision Model for Proxy Mobile IPv6 Networks

Enhanced Tunneling Technique for Flow-Based Fast Handover in Proxy Mobile Ipv6 Networks

In the Mobile IPv6 network, each node is highly mobile and handoff is a very common process. When not processed efficiently, the handoff process may result in large amount of packet loss. If the handover process is performed without appropriate connection verification and through specified tunnels, then this may result in inappropriate traffic flow since the required traffic redirection may not happen in this case. To overcome these issues, we propose to develop an Enhanced Tunneling Technique for Flow-based Fast Handover in Proxy Mobile IPv6 Networks. In this technique, the packets are buffered to minimize the packet loss during handover and then the Flow based Fast Handover techique is employed to ensure that the traffic is redirected to the new subnet after handover process. Thus ensuring efficient network operation.

On Bandwidth-efficient Handoff Scheme for PMIPv6 Networks

In this paper, we propose a novel bandwidth-efficient handoff scheme for proxy mobile IPv6 networks. Mobile nodes (MNs) are classified as either slow or fast; first, though, to implement a bandwidth-efficient handoff scheme, an MN should be registered in a microcell. The microcell is overlapped to handle an overflow session request, which is nested; in a macrocell, an overflow session request makes a request to return from the boundary of the new microcell. If idle session traffic is in a cell, it is requested by the target microcell. If the total systemic traffic load is not very large, the proposed scheme provides the best bandwidth efficiency and a more favorable quality of service (QoS) for an MN without the incurrence of a large systemic processing cost.

Securing Vehicular IPv6 Communications

A common practice is applying security after a network has been designed or developed. We have the opportunity of not committing this error in vehicular networks. Apart from particular works in the literature, ETSI TC ITS has defined general security services for (vehicular) cooperative systems. However, existent efforts do not pay the needed attention to the integration of IPv6 yet. The potential of IPv6 in the field is being described within ISO TC 204, above all, but further work is needed for a proper integration of security. This work follows this direction, and a reference vehicular communication architecture considering ETSI/ISO regulations, uses Internet Protocol security (IPsec) and Internet Key Exchange version 2 (IKEv2) to secure IPv6 Network Mobility (NEMO). A key advance is also the implementation and experimental evaluation of the proposal in a challenging vertical handover scenario between 3G and 802.11p. The performance of the secured NEMO channel is widely analyzed in terms of the movement speed, bandwidth, traffic type or signal quality, and it is concluded that the addition of IPv6 security only implies a slight reduction in the overall performance, with the great advantage of providing confidentiality, integrity and authenticity to the communication path.

Improved Authentication of Binding Update Protocol in Mobile IPv6 Networks

We propose the efficient and secure Ticket based Binding Update (TBU) protocol for MIPv6 networks. In our TBU protocol, when MN first executes the BU, its Correspondent Node (CN) issues a ticket to MN. This ticket assist that it is able to do efficiently the BU whenever Mobile Node (MN) requires the BU for the future. The proposed TBU protocol need not be repeated equal BU course whenever the MN moves to foreign link or network, and is able to be executed in environment of not operating the Home Agent (HA), and also easies scalability. We describe security analysis through attack scenarios by comparing previous protocol schemes.

Cryptanalysis and Improvement of "A Secure Password Authentication Mechanism for Seamless Handover in Proxy Mobile IPv6 Networks".

Proxy Mobile IPv6 is a network-based localized mobility management protocol that supports mobility without mobile nodes’ participation in mobility signaling. The details of user authentication procedure are not specified in this standard, hence, many authentication schemes have been proposed for this standard. In 2013, Chuang et al., proposed an authentication method for PMIPv6, called SPAM. However, Chuang et al.’s Scheme protects the network against some security attacks, but it is still vulnerable to impersonation and password guessing attacks. In addition, we discuss other security drawbacks such as lack of revocation procedure in case of loss or stolen device, and anonymity issues of the Chuang et al.’s scheme. We further propose an enhanced authentication method to mitigate the security issues of SPAM method and evaluate our scheme using BAN logic.

Comments on “SPAM: A Secure Password Authentication Mechanism for Seamless Handover in Proxy Mobile IPv6 Networks”

Recently, Chuang et al. have introduced a secure password authentication mechanism for seamless handover in Proxy Mobile IPv6 (SPAM). SPAM aimed at providing high-security properties while optimizing the handover latency and the computation overhead. However, it is still vulnerable to replay and malicious insider attacks, as well as the compromise of a single node. This paper formally and precisely analyzes SPAM based on the Burrows–Abadi–Needham logic, followed by its weaknesses and related attacks.

The Mobility Solutions of IPv6-Based Network

Mobile IPv6 is an extension of traditional IP that can provide mobility support at the network layer.The article lists the status of IPv6 network to analyze the technical characteristics of the next-generation network.Problem to be solved on the IPv6 network mobility conditions and the implementation of mobility.This dissertation researches the mechanism of Mobile IPv6 deeply and analyzes all phases of communication in detail.Formed a set of network solutions in the network provided by the internet server provider.

Performance analysis of DNS-assisted global mobility management scheme in cost-optimized proxy mobile IPv6 Networks

Proxy Mobile IPv6 (PMIPv6) is designed to provide a network-based localized mobility management protocol, but it does not handle the global mobility of hosts. In this paper, we propose a location management scheme based on Domain Name System (DNS) for PMIPv6. In this proposed scheme, DNS as a location manager provides PMIPv6 for global mobility. In addition, a paging extension scheme is introduced to PMIPv6 in order to support large numbers of mobile terminals and enhance network scalability. To evaluate the proposed location management scheme, we establish an analytical model, also formulate the location update and the paging cost, and analyse the influence of the different factors on the total signalling cost. The performance results show how the total signal cost changes under various parameters.

Safety Strategy Research on Mobile IPv6 Network Anti-Invasion

Through the discussion of the mobile IPv6 intrusion detection model, analysis of mobile IPv6 communication technology, the solutions are given to prevent mobile IPv6 network intrusion behavior for providing the security policy.

An enhanced fast handover with seamless mobility support for next-generation wireless networks

To allow mobile node be always connected regardless of its location on the Internet, mobile IPv6 (MIPv6) is designed for next-generation wireless networks. However, this protocol has some inherent drawbacks: long handoff delay and high packet loss; unbearable for many applications. To improve the performance, mobility protocols such as Fast handovers for MIPv6 (FMIPv6), Fast handover for Hierarchical MIPv6 (F-HMIPv6), Simplified Fast handover for MIPv6 networks (SFMIPv6), are proposed by researchers. But none of them can support seamless mobility. This paper proposes an enhanced fast handover protocol with seamless mobility supports, called enhanced Seamless MIPv6 (e-SMIPv6). Bidirectional tunnels are established among access routers before actual handover; accordingly mobile users can use their previous care-of address within a new visiting network. To reduce the delay related to duplicate address detection, each access router maintains a pool of duplicate-free addresses. To minimize packet loss, access router performs bicasting for roaming node. Our proposal can minimize mobility signaling as much as possible during handoff, which presents an ideal solution for fast moving and ping-pong moving mobile users. To analyze the performance, the city section mobility model is used. Of which numerical results show that e-SMIPv6 yields better performance than FMIPv6.

Cost-effective approach inter-LMA domain management and distributed mobility control scheme in proxy mobile IPv6 networks

The Proxy Mobile IPv6 (PMIPv6) is designed to provide network-based mobility management support to a mobile node (MN) without any involvement of the MN in mobility related signaling; hence, the proxy mobility entity performs all related signaling on behalf of the MN. The new principal functional entities of PMIPv6 are the local mobility anchor (LMA) and the mobile access gateway (MAG). In PMIPv6, all the data traffic sent from the MN gets routed to the LMA through a tunnel between the LMA and the MAG, but it still has a single point of failure (SPOF) and a bottleneck state of traffic. To solve these problems, various approaches directed towards PMIPv6 performance improvements, such as route optimization, have been proposed. However, these approaches add additional signaling to support the MN׳s mobility, which incurs extra network overhead and still provides difficulty when applied to multiple-LMA networks. In this paper, we propose an improved route optimization in PMIPv6-based multiple-LMA networks. All LMAs were connected to the proxy internetworking gateway (PIG), which performs inter-domain distributed mobility control. Each MAG keeps the information of all LMAs in the PMIPv6 domain, so it is possible to perform fast route optimization. Therefore, this method supported route optimization without any additional signaling because the LMA receives the state information of route optimization from the PIG.

Multilayer Hierarchical Model for Mobility Management in IPv6: A Mathematical Exploration

The mobility solution provided by Mobile IPv6 (MIPv6) imposes too much signaling load to the network and enforces large handoff latency to end user. Hierarchical MIPv6 (HMIPv6) on the other hand, is designed by organizing MIPv6 in layered architecture and performs better than MIPv6 in terms of handoff latency and signaling load. Observation shows that, there is still possibility to shrink the handoff latency and the signaling load by further extending HMIPv6 into multiple layers. To explore this possibility of enhanced performance through layered architecture, this paper aimed at mathematical exploration of an N-layered MIPv6 network architecture in order to figure out the optimal levels of hierarchy for mobility management. A widespread analysis is carried out on various parameters such as location update frequency and cost, handoff latency and packet delivery cost. Influence of queuing delay on handoff latency is examined by modeling M/M/1/K queue in the architecture and user mobility is modeled using Markov chain. Analytical investigation reveals that three levels of hierarchy in MIPv6 architecture provide an optimal solution for mobility management.

A novel resource reservation based on cross layer design over mobile internet protocol version 6

Quality of Service (QoS) is an important issue that should be addressed to provide acceptable level of service to the mobile nodes. The assumption is that mobile nodes require the same quality of services as fixed nodes. However, due to the mobility feature within a mobile network, it is difficult to achieve this goal. Besides, routing methods in a mobile IPv6 network deliver packets from a correspondent node to the mobile node and vice versa via specific tunnel. In the tunnel, packets are encapsulated and routers do not have any access to the original packets. This results in the situation where resource reservation cannot be handled at the routers. For this purpose, a new cross layer design called Resource Reservation over Mobile Application (ROMA) is proposed. In this design, modified mobility signaling collects QoS parameters through the network. Then, these parameters are used to make the desired level of QoS for real-time applications. Traffic engineering is also proposed based on effective envelope algorithm to improve network resource utilization. It allows a fraction of traffic to exceed QoS requirements. Simulation is used to evaluate the proposed approach by considering parameters such as the number of reservation request messages, link throughput, and end-to-end delay. Simulation results demonstrate that the proposed approach enhances the link utilization, while maximizing the link throughput in comparison with recent works. The proposed approach also reduces the traffic reroute time when router or link failure occurs in network.