Diffie-Hellman Key Based Authentication in Proxy Mobile IPv6

Abstract

Wireless communication service providers have been showing strong interest in Proxy Mobile IPv6 for providing network-based IP mobility management. This could be a prominent way to support IP mobility to mobile nodes, because Proxy Mobile IPv6 requires minimal functionalities on the mobile node. While several extensions for Proxy Mobile IPv6 are being developed in the Internet Engineering Task Force, there has been little attentions paid to developing efficient authentication mechanisms. An authentication scheme for a mobility protocol must protect signaling messages against various security threats, e.g., session stealing attack, intercept attack by redirection, replay attack, and key exposure, while minimizing authentication latency. In this paper, we propose a Diffie-Hellman key based authentication scheme that utilizes the low layer signaling to exchange Diffie-Hellman variables and allows mobility service provisioning entities to exchange mobile node's profile and ongoing sessions securely. By utilizing the low layer signaling and context transfer between relevant nodes, the proposed authentication scheme minimizes authentication latency when the mobile node moves across different networks. In addition, thanks to the use of the Diffie-Hellman key agreement, pre-established security associations between mobility service provisioning entities are not required in the proposed authentication scheme so that network scalability in an operationally efficient manner is ensured. To ascertain its feasibility, security analysis and performance analysis are presented.

A public key based PMIPv6 authentication scheme

“…In an one-time key authentication [16], a LMA and a MN share a time-synchronized one-time password function to authenticate each other. There is also a DiffieHellman key agreement based authentication protocol [17]. However, all of these protocols have a common inefficiency in the handover authentication procedure.…”

Comprehensive Protection of Data-Partitioned Video for Broadband Wireless IPTV Streaming

“…For clarity of interpretation of the results, this paper does not model horizontal handovers, though it should be noted these are a real possibility that can disrupt video streams, and in [6] there is a proposal to speed-up connection set-up in WiMAX handovers. Related work on efficient key exchange during mobile roaming can be found in [15].…”

A Handover Security Mechanism Employing the Diffie-Hellman Key Exchange Approach for the IEEE802.16e Wireless Networks

“…According to the IEEE802.16 standard, the optimized handover can skip the security sublayer operation and reuses old keys such as TEKs [1,16], or provide handover support through mobile IPv6 with other proposed schemes [6,12,19,24]. In the DiHam if the serving BS can transfer all required security keys including CSKs Cert(MS), and RS i to the target BS, the target BS can then reuse the TEKs currently employed by the serving BS without the requirements of re-calculating authentication keys and deriving current TEKs resulting in the fact that the AuthenticationReply TEK-Exchange and TEK-Reply messages can be further omitted.…”