Efficient Architecture with Early Security Key Exchange and Robust Header Compression for Mobile IPv6

• Main Authors: Tin-Yu Wu, 吳庭育
• Other Authors: Han-Chieh Chao
• Format: Others
• Language: en_US
• Published: 2007
• Online Access: http://ndltd.ncl.edu.tw/handle/75047201442641278936

博士 === 國立東華大學 === 電機工程學系 === 95 === Due to the improvement and popularization of wireless network technology, wireless network offers users a more convenient way to surf on the Internet and connect to the Internet at anytime and anywhere. Thus, wireless network changes traditional Internet users’ habits. However, wireless network also has some problems that traditional network does not have, like the limited wireless network channels, the low calculating power of the mobile terminals, the low power that the battery can offer and many more security problems. If we want to achieve real “mobile,” we have to adopt Mobile IPv6 technology for wireless network users because the general wireless network can only offer the mobile terminal to connect to the Internet under the scope of wireless network signals. To solve the above-mentioned problems, some mechanisms are proposed, but there is not a complete mechanism that focuses on the roaming of Mobile IPv6. Therefore, we propose some mechanisms to solve these problems in this dissertation. First, we would like to focus on the security problem. To encrypt is one of the methods to solve the security problem at present. According to most researches, the longer bits the encryption key has, the higher the security level will be. Nevertheless, to process the long-bit encryption key needs higher calculating power and the light and thin mobile terminal cannot produce such high calculating power. We believe that Security Access Gateway (SAG) is effective in solving this problem. SAG can offer all equipments of its area high calculating power, fulfill the need to encrypt and set up a security domain. Furthermore, in order to achieve high security transmitting method like P2P, we use multi-layers encrypt technology to process two encrypt mechanisms. From the wire side to the Internet, we use SAG with high calculating power to establish long-bit key to encrypt. From the mobile terminal to SAG, we use the short encryption key to construct the end-to-end security. Next, while considering the problem about utility rate of wireless network bandwidth, we use Robust Header Compression (RoHC) header compression technology to increase the bandwidth utility rate. After RoHC header compression technology compresses the header, a 1 to 2-byte Context ID (CID) will be produced to replace the original packet header. To compress the header will enlarge the size of payload of each packet’s payload. Finally, we use Early Binding Updates (EBU) to combine Mobile IPv6 technology to wireless network so that users can gain access to wireless network by roaming. During the handover process, we use the transferred argument to reestablish in the new domain. Thus, users can continue to use the security channel and RoHC header compression before handoff. In order to lower the latency of handoff, we better Early Binding Update mechanism and use handoff identification mechanism to replace Return Routability (RR) identification mechanism with complicated Internet Key Exchange (IKE) and complete a mechanism with low latency, low calculating handoff mechanism and high security.