一种身份与位置分离环境下基于网络的安全移动性管理协议

针对身份与位置分离(Locator/Identifier Separation Protocol, LISP)环境下的移动性管理问题，提出一种基于网络的安全移动性管理协议LISP-SMCP(Secure Mobility Control Protocol)。以接入网为移动管理区域，LISP-SMCP有效地支持移动节点在区域内切换和区域间切换，并实现本地认证和双向认证。安全性和性能分析结果表明，LISP-SMCP可以防止中间人、重放和消息篡改等网络攻击，且具有较小的认证时延、切换时延和切换阻塞率。

A Network-based Secure Mobility Control Protocol in Locator/Identifier Separation Networks

For the mobility issue in Locator/Identifier Separation Protocol (LISP) networks, a network-based Secure Mobility Control Protocol (LISP-SMCP) is proposed. Taking access networks as different mobile domains, LISP SMCP supports mobile nodes intra-domain handoff and inter-domain handoff efficiently, and achieves local authentication and mutual authentication. The security and performance analysis results show that, LISP-SMCP can resist man-in-the-middle attacks, replay attacks and modified attacks. And it outperforms existing schemes in terms of authentication latency, handoff latency and handoff blocking probability.