移动IPv6安全性

文章分析了在IPv6网络中引入移动IP协议可能给网络带来的安全隐患，并讨论了移动IPv6所采用的安全技术．包括如何用IPsec协议和往返可路由过程来保护移动IPv6信令安全的机制。     

基于移动IP的SIP协议

移动IP是3G网络实现各种移动业务的关键技术。SIP是提供和实现IP业务的重要协议。未来移动IP网络由于受到地址空间不足的限制,必然要从IPv4发展到IPv6,本文主要讨论SIP协议在IPv6中的应用,并提出了在IP异构网络中实现SIP协议的方式。     

移动IPv6的安全性探讨

移动IP(Mobile IP)多应用于无线环境,除了要面对所有无线网络所固有的安全威胁外,还需要处理由移动性引入的新的安全问题,这必然导致移动IP相对于有线Internet显得更加脆弱。论文从移动IPv6的基本原理入手,分析移动IPv6存在的安全隐患及几种典型的攻击方法,并对其安全性进行了简单的探讨。     

移动IPv6实施的关键问题及在CDMA网络中的应用

IPv4的NAT缺陷、缺乏固定地址限制了CDMA网络中移动IP业务的发展,CDMA移动网络向IPv6承载过渡是必然趋势。本文探讨了移动IPv6在CDMA网络中的应用,着重分析了CDMA网络中应用移动IPv6所面临的服务质量、安全、认证、DNS自动发现、演进等问题,并对现有CDMA网络实体的改动加以阐述。     

基于IPv6的移动数据网络发展探讨

IPv6在设计时充分考虑了移动需求,并将移动IPv6作为IPv6的基本组成部分,因此IPv6在移动环境下可更好地支持端到端以及多媒体业务.随着IPv6标准的成熟,移动网络中逐渐引入IPv6也成为通信网络的重要发展方向.本文首先介绍移动数据通信和IPv6技术的发展现状,然后探讨了在移动网络中引入IPv6的策略,并给出了3G网络环境下IPv6地址分配方式以及移动IP技术的发展现状,分析了移动IPv6协议的优点,列举了需要进一步研究的问题,最后给出了结论和建议.     

中国IPv6务实发展的冷思维

移动IP技术是移动通信和IP技术的深层融合,它可以使每一个用户终端都具有网络节点的能力, 能够随时随地获取信息,从而实现人们梦想的无处不在的多媒体通信,移动IP技术也因此倍受业内人士的关注和重视。本期推出的“移动IP”专题,从移动IP系统的解决方案、安全性分析、IPv6与IPv4的比较、IPv6在3G/4G中的应用以及我国在发展IPv6中应注意的问题等几个方面对移动IP技术进行了探讨,希望对业界有所帮助。     

从IPv4到IPv6演进策略的研究与分析

IPv6和IPv4比较,它彻底解决了地址空间耗尽和路由表爆炸等问题,而且为IP协议注入了新的内容,使支持安全、主机移动及多媒体成为IP协议的有机组成部分.协议的设计使路由器处理报文更加简便,扩展性也更好.但是如何完成从IPv4到IPv6的转换是IPv6发展需要解决的第一个问题.现有的几乎每个网络及其连接设备都支持IPv4,因此要想很快完成从IPv4到IPv6的转换是不切实际的.IPv6必须能够支持和处理IPv4体系的遗留问题.本文对于从IPv4到IPv6网络的过渡问题进行了策略性的研究与分析,并从运营的角度对于不同的演进策略进行了优缺点和应用环境的分析,同时对于由此而带来的路由器进化问题进行了相关的阐述.     

移动IPv6的发展

传统移动通信采用的是电路交换技术，这种方式不适用于移动数据业务和移动多媒体业务。采用电路交换的无线网络将逐步改造为以IP分组交换为基础的无线网络，并最终实现无处不在的无线多媒体通信的梦想。介绍了移动IP的产生及移动IPv4存在的问题．移动IPv6的基本原理以及IPv6为移动分组网络带来的好处。     

移动IP技术

随着无线通信技术和便携式终端技术的快速发展,面向固定网络环境的传统IP技术迫切需要更新,以支持主机在网络中的漫游和移动。为此提出了移动IP技术,它是下一代通信网络（NGN）和下一代因特网（NGI）的重要基础技术之一。本讲座分3期介绍该项技术,第1期介绍移动IPv4和移动IPv6的基本原理和关键技术;第2期将介绍移动IP的路由优化技术和安全技术;第3期将介绍移动IP切换技术,并简述移动IP技术的未来发展。     

移动IPv6网络中的切换策略研究

在未来基于IPv6技术的宽带移动网络中,移动主机的IP层切换策略是保证实时业务服务质量的关键问题之一。论文首先分析和比较了在Internet工程任务组(IETF)中三个主要的移动IPv6网络中的切换策略,在此基础上深入研究了将快速切换协议应用于分级移动IPv6网络的方案,并对此进行了仿真。仿真结果表明,该方案可以提高移动用户IP层切换的性能,能改善实时业务的服务质量。     

Mobile IPv6 Security

Mobile IPv6 provides global mobility and location management support for the IPv6 network layer protocol. The design of Mobile IPv6 incorporates security features that differ significantly from its predecessor, Mobile IPv4. Some of the new security features are intended to counter new threats raised by route optimization, while others align Mobile IPv6 security more closely with basic IPv6 security mechanisms. In this paper, we outline the security threats to Mobile IPv6 and describe how the security features of the Mobile IPv6 protocol mitigate them.     

Signaling cost and performance of SIGMA: A seamless handover scheme for data networks

Mobile IP has been developed to handle mobility of Internet hosts at the network layer. Mobile IP (MIP), however, suffers from a number of drawbacks such as requirement of infrastructure change, high handover latency, high packet loss rate, and conflict with network security solutions. In this paper, we describe and evaluate the performance of SIGMA, a Seamless IP diversity‐based Generalized Mobility Architecture. SIGMA utilizes multihoming to achieve seamless handover of mobile hosts, and is designed to solve many of the drawbacks of MIP, including requirement for changes in infrastructure. We first evaluate the signaling cost of SIGMA and compare with that of hierarchical Mobile IPv6 (an enhancement of Mobile IP) by analytical modeling, followed by comparison of handover performance of SIGMA and Mobile IPv6 enhancements. Criteria for performance evaluation include handover latency, packet loss, throughput, and network friendliness. Our results indicate that in most cases SIGMA has a lower signaling cost than Hierarchical Mobile IPv6. Moreover, for a typical network configuration, SIGMA has a higher handover performance over Mobile IP. Copyright © 2005 John Wiley & Sons, Ltd.     

集成AAA的HMIPv6认证与注册方案

在下一代互联网中,需要使用AAA保证网络安全和网络资源合理使用,但是AAA与移动IPv6的结合,对切换性能及网络安全带来影响,而切换与安全是移动环境的关键问题。论文提出了新的解决方案,将HMIPv6与AAA结合,实现认证与注册过程的统一及本地认证,提高切换性能,并在注册与认证的过程中对消息进行加密,保证传输的安全。分析表明,本方案实现了AAA机制与移动管理机制安全高效的融合。     

基于无证书公钥密码体制的密钥管理

移动IPv6是IPv6的子协议,有着巨大的地址空间、对移动性和QoS的良好支持,内嵌的IPSec协议,以及邻居发现和自动配置等诸多优势。然而,移动通信网络链路的开放性、网络拓扑结构的动态性、移动资源的有限性等特点使其容易遭受更严重的安全威胁。针对在移动IPv6环境下,采用无证书的公钥密码体制,部署和实现移动IPv6网络的密钥管理问题。提出了一种新的接入注册解决方案,该方案可以解决具有高敏感性要求移动网络的安全保护问题。     

AAA architecture for mobile IPv6 based on WLAN

Mobility support for Internet devices is quite important for consumer electronics. The number of the hand‐held devices is growing quickly. However, there are not enough IP addresses for the number of the rapidly growing devices in the All‐IP generation. Internet Protocol version 6 (IPv6) was therefore adopted to solve these problems. Our purposed structure is based on IEEE 802.11. However, IEEE 802.11 has a serious security drawback. Further, from the Internet Service Providers' point of view, accounting is a potential problem. A mechanism combining Mobile IPv6 and AAA based on IEEE 802.11 to overcome these problems is essential. Both Internet Protocol version 4 (IPv4) and IPv6 support IP security (IPsec) when data packets are exchanged across the IP network. IPsec operates at the IP layer. It can support system authentication and authorization, However, it lacks a system accounting function. Therefore ISPs cannot establish correct billing for their services. This is the reason why we chose to combine the wireless network and AAA functions. In this paper, the AAA mechanism is used to protect security, with the architecture having authentication, authorization, and accounting functions. We will discuss the benefits of AAA and state the reason why we choose to combine AAA with the mobility architecture. Copyright © 2004 John Wiley & Sons, Ltd.     

A Low Latency Handoff Algorithm for Voice over IP Traffics in the Next Generation Packet-Based Cellular Networks: Cellular Mobile IPv6

In the mobile communication environments, Mobile IP is defined to provide users roaming everywhere and transmit information freely. It integrates communication and network systems into Internet. The Mobile IPv6 concepts are similar to Mobile IP, and some new functions of IPv6 bring new features and schemes for mobility support. Two major problems in mobile environments are packet loss and handoff. To solve those problems, a mobile management scheme – the cellular mobile IPv6 (CMIv6) is proposed. Our approach isbased on the Internet Protocol version 6 and is compatible with the Mobile IPv6 standard. Besides, it also combines with the cellular technologies which is an inevitable architecture for the future Personal Communication Service system (PCS). In this paper, {Cellular Mobile IPv6 (CMIv6)}, a new solutionmigrated from Mobile IPv6, is proposed for mobile nodes moving among small wireless cells at high speed. This is important for future mobile communication trends. CMIv6 can solve the problems of communication break off within smaller cellular coverage during high-speed movement when packet-switched data or the real-time voice messages are transmitted. Voice over IP (VoIP) packets were chosen to verify this system. The G.723.1 Codec scheme was selected because it has better jitter resistance than GSM and G729 in a packet-based cellular network. Simulation results using OPNET show smooth and non-breaking handoffs during high-speed movement.     

Seamless Support for Mobile Internet Protocol Based Cellular Environments

Cellular is the inevitable architecture for the Personal Communication Service system (PCS) in the coming future. Access to the Internet via cellular networks is expected to become an essential portion of future wireless service offerings. Providing seamless support for IP based packet switched services has become an important issue.The Internet Engineering Task Force's (IETF's) mobile IP protocol offers a standard solution for wide-area mobility at the IP layer. However, Mobile IP does not solve all of the problems involved in providing mobile Internet access to cellular users, especially during handoff period. Thus, IPv6 might be a good candidate to solve this problem.IPv6 is a new version of the Internet Protocol that was standardized by the IETF. It supports mobility and is presently being standardized by the IETF Mobile IP Working Group. At the same time, cellular is an inevitable architecture for the Personal Communication Service system (PCS).This paper introduces the current cellular support based on the Mobile Internet Protocol version 6. We will point out the short-falls using Mobile IP and try to emphasize protocols especially for mobile management schemes that can optimize a high speed mobile station moving among small wireless cells. A comparison between those schemes and future work will be presented.     

RSVP Extensions for Real-Time Services in Hierarchical Mobile IPv6

The Mobile IPv6 (MIPv6) provides many great features, such as sufficient addressing space, mobility, and security; MIPv6 is one of the most important protocols for next generation mobile Internet. Simultaneously, with the rapid improvement of wireless technologies, the real-time multi-media IP services such as video on demand, videoconference, interactive games, IP telephony and video IP phone will be delivered in the near future. Thus, to furnish accurate QoS for real-time services is one of the most important thing in the next generation mobile Internet. Although RSVP, which is a resource reservation protocol, processes signaling messages to establish QoS paths between senders and receivers, RSVP was originally designed for stationary networks and not aware of the mobility of MNs. Therefore, this paper proposes a novel RSVP extension to support real-time services in Hierarchical Mobile IPv6 (HMIPv6) environments. For intra-site mobility, the concept of QoS Agent (QA) is proposed to handle the RSVP QoS update messages and provide the advanced reservation models for real-time services. For inter-site mobility, IP multicast can help to invite inter-site QAs to make pre-reservation and minimize the service disruption caused by re-routing the data path during handover. Simulation results show that the proposed scheme over HMIPv6 is more suitable for real-time services than the famous RSVP tunnel-based solution.