集成AAA的移动IPv6增强型防火墙系统研究

An Enhanced Mobile IPv6 Firewall System Integrated with AAA

针对移动IPv6防火墙存在的问题,提出了一种集成AAA系统的增强型移动IPv6防火墙系统。该系统中移动节点防火墙在路由级应用,使用AAA系统增强移动IPv6中各通信实体之间的相互认证和授权,决策管理模块负责制定并根据A A A审计结果动态更新移动节点的安全规则,家乡代理负责实现对移动节点最新安全规则的转发使得MN无论何时何地均可以使用最新的安全规则。该系统可实现对移动节点的远程实时监控。

This paper addressed to an enhanced firewall system integrated with AAA, according to the security analysis of Mobile IPv6 Firewall system. In this system, mobile node＇s security rules were applied in router lever, and it used AAA system to supply the Authentication, Authorization and Accounting for each mobile entity in Mobile IPv6. Besides, administrator module in charge of making security rules of Mobile Node and dynamical update, and HA forwarded the Mobile Node＇s newest security rules whenever and wherever MN was not in home network. The Mobile IPv6 firewall system can implement remote real-time control of Mobile Node.