摘要
众所周知,在移动网络中,路由优化RO(Route Optimization)能够很好地解决移动网络中的"三角路由问题",从而优化整个网络。但也相应带来了地址绑定更新的安全问题。于是RFC3775提出了返回式路由过程协议RR(Return Routability Protocol)来保证路由优化的安全。本文在分析RR协议的安全漏洞基础上,提出了一种基于本地代理证书协议CBHA(Certificate Base On Home Agent)。该协议通过本地代理的公钥证书和签名向通信结点验证了移动结点的本地地址和临时地址的合法性,从而有效地保证了绑定更新BU(Bind Update)消息的安全性。
It is well known that RO (Route Optimization) solves the triangle routing problem well, which greatly improves the network performance.Accordingly RO also brings security issues of BU (Bind Update).So RFC3775 provided RR protocol to protect RO safety. This Paper analyzes the security vulnerabilities in RR protocol and provides the protocol based the public key certificate of Home Agent.The protocol validates the Home Address and Care of Address via the sign and certificate of The Home Agent, which assures t...
出处
《微计算机信息》
北大核心
2008年第9期49-51,共3页
Control & Automation
基金
江西省教育厅基金项目(Z02613)
