Td Foreign Exchange Forecast

Secure authentication mechanism in Mobile Internet Protocol version 6

Secure authentication mechanism in version 6 of the Protocol Mobile Internet

Mojtaba Sadeghi, Hamid Reza Naji Tawfik Zeki

Department of Computer Engineering

University Islamic Azad

Dubai, United Arab Emirates

June 2009

 

Summary

This paper presents a security authentication method for Mobile IPv6. The default is to use IPsec to secure the signaling messages between the node Mobile and other agents in mobile IPv6 networks. Mobile IPv6 Operations include Recognition Day last post messages and thus binding. We propose a new mechanism Fixing of Mobile IPv6 signaling between mobile node and other agents. The method proposed Mobile IPv6 is an optional message authentication and management of cookies that can be added to the existing protocols for IPv6. Also, we study the architecture to integrate the authentication of mobile signals. This architecture is implemented and evaluated. In Mobile IPv4 protocol and some authentication protocols for Mobile IPv6, there are difficulties in meeting time requirements. Is displayed latency can be reduced between IPv6 Mobile Node, Home Agent and Correspondent Node to the creation of a cookie file keeping the mobile node identification.

1.Introduction

The security of a mechanism and protocol depends on the reliability and Internet routing infrastructure. The working protocol between the mobile nodes and a node on the Internet that have no connection or previous relationship, and assume no general specific security infrastructure. When Mobile IPv6 is developed integrated technology allowed users to change their points of connection to Internet at the same time using the same IP connection established earlier. However, authentication and authorization, which are very important functions in wireless networks, no were considered in the design and creation. Therefore, this article examines the integration of MIPv6 authentication and develops integrated systems and architectures as well. The mechanism described in this document is a simplified version of the current protocol, Mobile IPv6. We focus on binding update messages sent by mobile node correspondents. The authentication service is in fact more important protection and inspection services in wireless networks. Design safety mobile network is a critical step in the development and establishment of a network infrastructure. Even if a wireless system offers economical, convenient and efficient network, but must also be installed to prevent the attack and escape damage to data and information. A secure wireless network and I can assure that your data transmissions not intercepted, abuse, misuse by third parties unknown. Unsecured wireless networks are vulnerable to several types of problems, including:

The flight information

Corruption or illegal modification of data

Interception of interaction, transaction and communication

Page misuse of data network resources

Networking and wireless media professionals to ensure the implementation of a framework for authentication, encryption and key management protocols [a]. We focus on the IPv6 Authentication in this document. As a description, authentication is a process verify that the device or user trying to connect to the wireless network should be allowed on the network. Encryption and key management processes and techniques that are more complex and control data to an unauthorized user or device that receives data can not be used.

2. IPv6 Review

Based on recent concerns about the lack of Internet addresses and the desire to offer more features for modern mobile devices, an updated former and the current version Internet Protocol (IP), called IPv4, is established. This new version, called IP version 6 (IPv6), resolves design problems weakness and IPv4 Internet revolutionized in recent years. Over IPv6 addresses are 128 bits. The first 64 bits are used for the link prefix. What is assigned to each link and is advertised by the routers on this link. The second 64 bits of the address belongs to the interface identifier. There are fields of application IPv6 Addresses in different networks. The different applications can be diagnosed by observing a few snippets of code management.

We call the most important fields IPv6 as follows:

– Link Local: An address with a local connection range can be used to communicate within a link node. The packets with addresses that have no links

spent out on the link. The first 64 bits of this address is fixed and we love this: 1111111010 0. . – The local site

Trial 10-bit 54-bit. The link-local addresses with the addresses are unique within a site. The size of a site defined by the site administrator. It may be a small home network with two or three customers, or a university network with hundreds of nodes. The 64-bit addresses local site first look like this: 1111111011 0. . . Identification Subnet –

The subnet of 16 bits are used to differentiate the sites and the first 10 bits 38 bits 16-bit final. Protocol transitions are not easy and transition from IPv4 to IPv6 is no exception. Protocol transitions are typically deployed by installing and configuring the new protocol on all nodes in the network and verify all nodes and router operations work properly. Although it may be possible in a small or medium organization, the challenge of making a rapid transition protocol in a large organization is difficult. Moreover, given the scope of the rapid transition from IPv4 to IPv6 Internet is an impossible question. Designers recognize that the transition from IPv4 to IPv6 IPv6 will take years and may not be organizations or hosts within organizations that continue to use IPv4 indefinitely [1]. IPv6 solves the limitations of IPv4 network address, replacing the current 32 bit IPv4 addresses with addresses of 128 bits. Different elements were considered during the IPv6 design. One outcome of this review is on the needs of future markets. We assume that the future of the Internet market was based on increased safety, efficiency high, and mobility [7]. Another issue the successful design of IPv6 is the way of the transition from IPv4 Internet. This type of transition involved with different software, hardware, protocol and infrastructure problems. Fortunately, IPv6 has been developed to work with IPv4 network protocol as well. By creating a tunnel IPv6 packet transfer or the creation of a tunnel packet transfer protocol, IPv6 support without fundamental changes. When a mobile node is far to be the home agent is, sends your current location information in the official entry. Any node that wants to start the interaction and communication with used mobile node address of the House of mobile node of this communication and the sending of parcels. The home agent intercepts these data packets, and use by tunnels packets for the mobile node care management. In fact Mobile IPv6 uses the attention of management. But to support the optimization of routes a direct connection between the mobile node and corresponding node, the corresponding node will be encapsulated IPv6 IP header. Mobile IPv6 technology allows a mobile node to move within the Internet infrastructure without losing an established connection of age. This means that mobile node to be accessible at any time by a correspondent node must have an address that does not change. In fact, this address belongs to the subnet of the home network. In Mobile IPv6 the address name, home address or Hoa. If the mobile node will be available on your home network, all packets that want to achieve, you can reach through the usual way of routing. In this situation, the intake officer is topologically correct for the mobile node. But if the mobile node moves to another subnet, you need to update a nursing home topologically This address belongs to this new network. Since the mobile node will not be accessible by its HoA as well. Home Agent is responsible for receiving all packets destined to the mobile node, when the mobile node in another home network. Each time the intake officer receives a packet, it would establish a tunnel to take care of the current node address Field. This shows that the mobile node needs to update your agent about your current home care address regularly. It means Home Agent to send all packets destined to node address mobile homes, for its continued care of the address in the visited network. These packets are sent through a tunnel to the mobile node. We note that the tunnel is initiated from the home agent and terminates in the mobile node. Mobile IPv6 operates as transparent to the applications of upper layers. Every time the mobile node wants to send a packet to the corresponding node, you can send it directly to your address.

 

3. Mobile IPv6 Security

  3.1. Data encryption and authentication protocol

One way to ensure that unauthorized users or systems to access and mobile wireless network is to encrypt your data and files. The encryption method known and fundamental WEP (Wired Equivalent Privacy), has unfortunately been considered weak and full transient. technology operates in a WEP key or password shared to avoid unauthorized access. Who is the WEP key or even more can be incorporated and misuse of the wireless network. There has no mechanism or technique in the WEP key for automatically change this, and some tools were produced that can break a WEP key very fast even less than 60 seconds! This means you will not be long for an attacker to access a WEP-encrypted wireless network. We can say the procedure RADIUS server is to receive user requests and user authentication, and finally to the NAS and all the information to provide services. The authentication protocol provides a centralized security system for controlling access to network resources. Lightweight Directory Access Protocol or LDAP is called another authentication protocol, which defines the information organized and accessible. As we know an authentication protocol is a set of rules for communication between server and clients. For the implementation of LDAP, network administrators can control which users and clients more easily with centralized and secure information about the user [12]. There are other authentication mechanisms for mobile customers, the combination RADIUS, EAP, and LDAP is the most common and available on its use in business today. Each component has an associated open source software that is available free for network administrators to download, configure and use. So with the equipment room, install an authentication system is inexpensive [15].

02.03. Kidnapping and theft of Mobile IPv6

The first difficulty of IP networks, it is hard to know where the information really is. Called IP spoofing attack takes advantage of this weakness. Since the source IP address of a packet does not affect performance capacity, can easily be changed. The attack – called spoofing – is a package of a machine seem to come from somewhere else entirely. Clearly the role of IP address is not reliable at all, because everybody can claim to be the owner of that IP address. Even after the authentication step is not yet secure against session hijacking. This means that after the identification of a person, I can not guarantee that it will be the same person for the remainder of this session. Therefore, all data sources are authenticated during transmission. DSL remains more networks in the world are based on Ethernet or wirelessly. Such networks are often cheap, available worldwide, easy to understand expansion. But the act of spying is easy in these networks, since a node is able to read all the packets transmitted on the LAN. Formally, each NIC only listens and responds to particular packages belonging to it, but it is difficult to ask these devices to listen to all packages during the transition to cable. The first recommendation for all mobile IP networks is the use of data encryption and authentication. But there are still problems in this regard. We need to examine all encryption keys are exchanged during the holidays to communicate. It is a rule the use of encryption keys encryption algorithms to encrypt and decrypt data.

3.3. Mobile node and authentication MAC address

Orderly management attention is a direction of accommodation to that obtained by the mobile node as an IP address local. This IP address is dynamic acquisition, perhaps by a DHCP server or through a foreign agent. After assigning a routable IP address to MN, the mobile node is now able to establish and communicate directly with the home agent, regardless of the external agent. By implementing this method, mobility decapsulation did. Sometimes mobile node uses the mobile node identifier option for communication and allow the intake officer to start using infrastructure available authentication. One step more difficult for an attacker is to find the MAC address of the wireless LAN [7]. Large number of systems can relying on a false MAC address, like a wireless router or client. The attacker can launch a denial of service prove to the wireless access. Directions MAC have been used as a unique identifier for Level 2 Mobile IPv6 networks. As we know the MAC address is unique in the world for all network-based devices. Organizationally Unique Identifier (OUI) assigned to all manufacturers of network equipment especially manufactured goods. In general, the MAC address of a client or a node mobile is used as a parameter identification or a unique identifier for the level of authentication security. When an attacker MAC address changes, which continue to use the wireless card to the destination layer 2 transport, transmission and reception from the same source MAC. Any use 802.11 networking protocol addresses MAC to change, with support from the manufacturer [6]. Linux users can change their MAC address with a specific order or schedule the program to C But users Windows are able to change your MAC address by configuring the properties of the LAN card drivers. We must ensure that the attacker may choose change the MAC address for different reasons [15]. The Mobile IPv6 protocol enables a mobile node to move from one network to another network without having to change your old address IPv6. As a mobile node is always routable and directed by its agent in the country, which is Mobile IPv6 node address. When the mobile node is away from his network home, messages can be sent to the source address of the mobile node. Normally the movement of a mobile node is completely invisible to the transport protocols and other layers.  

 

3.4. Mobile IPv6 accounting

Mobile IPv6 book can be divided into four processes: counting, pricing, pricing and invoicing. In fact, the counting process would be measured and collect resource usage information which is related to a single customer "of services. So the task would be the process of determining the cost price per unit. Then, the charging process to ensure that environmental data on prices use of resources in the amount of money we call load. The tax is paid by the customer. And the customer billing process clearly informs the billing information [7]. In fact accounting of the mobile network by the conservation law records for use by all Users of the source. The main objective would be to check a user, but for security reasons you have to know every time users Login disconnection, and Web sites visited, the amount of loading and unloading, etc.

 

Four. New mechanism

  4.1. Mobility Message Authentication with a cookie file

This section defines an authentication mechanism new option Mobility message that can be used to secure BU and Binding Acknowledgement messages in Mobile IPv6. This mechanism is able to use IPSec or, preferably, as a new mechanism to authenticate the mobile node in communication with the host agent or foreign agent and update Binding binding recognition messages each time we do not have IPSec in our network infrastructure. Simulation of Mobile IPv6 is based on the Mobile IPv6 in Network Simulator 2 (NS2). Overall implementation is based on the docking station, the corresponding node and mobile agents. In fact, the base station agent implement the functionality of the machine agent and foreign agent. The agent set the area of distribution. This area is reset every second. Mobile IPv6 is the official advertising and registers with the host-based agent and foreign agent in the protocol. The registration period for the Mobile IPv6 protocol established by a second. This means that the update recording every second well. For the simulation we have developed a mobile IPv6 network simulated taking into account delays and payloads. Also for simulation authentication code official C + + input file creates a cookie in a file identity. Based on our hypothesis, the mobile node is registered with the agent before leaving home subnet. The mobile node as a personal computer has some details that can be stored in a cookie in a file and then encrypt file [10]. Home Agent must include this option in the BA if it received this option in the relevant business unit Chief Agent and a combination of mobility based security code-shared with the Node [Mobile 2].

 

04.02. Direction of Attention and New BU

After detecting a mobile node has moved, the network, the new CoA allows access to the network, but must inform its Home Agent in the new location the mobile node. This is a great concern for mobility that every time a mobile node lost its connection with its latest router, until it informs its home agent on its new location, all messages sent will be lost and will not be able to send all packets to a correspondent node. In fact, a mobile node registers its new service to deal with its HA by sending a binding update message. The officer recognized this update entry, answering a proof of purchase is required and since then is able to tunnel packets from node address Mobile Homes (HOA) for the mobile node at its new location. In the last step, the mobile node informs its correspondent nodes, the new location and is accessible to the attention of new direction. This means that after registration, the mobile node sends a BU to CN to inform all its new location. Indeed, there is an additional procedure to the rest of the bus are sent the entire central nervous system. Return routability requested (MRI) test.

 

4.3. WAP infrastructure cookies
WAP is a service tool located between the Internet and mobile networks in the service layer. The service layer is to enable of different services for mobile applications and mobile nodes. WAP functions as a secure tunnel from the mobile node to the service layer. All IP packets from one node mobile transport through three layers of mobile networks: the connectivity layer, control layer and service layer.  

4.4. Design and Implementation

Mobile IPv6 authentication is based primarily on the IPv6 protocol functions as a protocol standard neighbor discovery and IPv6 [1]. Clearly, the latency can significantly affect the following components of mobility in IPv6 [13]:

• Motion detection time (DT): The detection time and created for the mobile node when moving to a new location. For example, the discovery of a new router.

• IPv6 care-of address preparation time (RT):

The time between the introduction of motion and configuration a global IPv6 address routable. Test Duplicate Address Detection is part of that time [2].

• It's time to create a context (TC): The time between the creation of a routable address care and the creation of the state context.

• Recording time binding (TR): The delay between sending a signal of unity to the official update data input upon receipt of an update folder recognized.

• Optimization time of the road (a): The time for new sheets attention of management to complete the route optimization with correspondent nodes. This time includes the time return routability procedure where appropriate, be calculated before an update is sent by mobile node to node for connection [8].

In fact, the configuration of Mobile IPv6 total delay (e) can be defined as the sum of the latency as follows:

Formula 1: e = TA + TD + TC + TR + for

 

4.4.1. Time Motion Detection

Detection time Motion (TD) is the sum of two different latency: first, link switching delay (TL2), which is the period for the re-association subnetwork point wireless access and the second, Link-local IPv6 Address Configuration time (TLL), which is the time elapsed between the first time the mobile node responds to about to receive a new advertising all its neighboring nodes. This means that the motion detection time can be defined as:

Option 2: "I t = + TL2

 

4.4.2. Call time address configuration

As we mentioned above setup time CoA (RT) is a departure time from the time of receipt of a notice of router to detect duplicate addresses and Liberation day of the full routing table. To answer your IPv6 stateless auto-configuration is included in:

Formula 3: TA = + + + TPRE TAddConf TRoutUpdt DAST

Meanwhile TPRE is defined as:

Treaty seeking – TrtSol (if the router advertisement is requested)

TrtAdInterval / 2 (if cyclical ad router)

TAddConf is the real-time mobile node needs to set direction and to create a unique address and universally accessible IPv6. Setup time stateful address autoconfiguration, DHCPv6 as care management can be defined as:

Formula 4: TAddConf TDHCPaddReq = + + TDHCPaddResp TRoutUpdat

In fact TDHCPaddReq TDHCPaddResp and represent the delay caused by the transmission of configuration state a careful response through a DHCP server in Mobile IPv6 [9].

4.4.3. Care management of recording time

Care address registration period or TR is defined as the transmission delay caused in the recording of the Guard Directorate mobile node home agent.

Form 5: r = RTMN-HA + + BUproc BAproc

5. Create a code for authentication MPV6

In the File menu, select New and then click Project. Click Visual C + + under Project Types, and then we click on Mobile Web Application under Templates.

"In the next step should be to add the following code in the Web.config file:

mode = "Forms"> <authentication

Forms <LoginUrl = "login.aspx" timeout = "60" ="/"> Route

Authorities <passwordFormat = "Clear">

password = "password" /> User>

</ Credentials>

</> Forms

> </ Authentication

<authorization>

"To deny users ="? "/>

> </ Authorization

To add an IPV6 wireless authentication Web form that we make these steps:

First, click Add New Item from the Project menu, click Login.aspx Web Form Mobile and finally write the table.

We can create the following commands in the area of IP mobile controls

Toolbox: Reduce tableExpand this table

Control Type

Control Name

Text Control

Label

Label1

User Type Name

TextBox

txtUserName

Label

Label2

Enter your password

TextBox

txtPassword

Command

cmdLogin

Log

Label

Error

Now you can click connect and open the underlying code.

Then add the following code in the page:

private void cmdLogin_Clk (sender Obj, the arguments of event)

(

if (IsAuthenticated (txtUsername.Text, txtPassword.Text))

(

MobileIPAuthentication.RedirectFromLogin (txtPassword.Text, true);

)

more

(

Error.Text = "Check references";

)

)

Private IsAuthenticated (String user, String password)

(/ / O call to the cookie file that was created for authentication /

if (FormsAuthentication.Authenticate (User, password))

(

return false;

)

more

(

return false;

)

)

We can add a Label control on the page, and change the text of label control

"Mobile IPv6 authenticated!

 

6. Delay calculation and analysis

6.1. Authentication Calculation Time

In this section, calculate and analyze quantitatively the different time phases of authentication on security and system performance of identification and authentication cookies based on IPSec with a hypothesis, which is the first phase of work to establish a link between security and quality of services [3]. Furthermore, the effect on the mobility security authentication mechanism also affects the time of authentication, the cost, the number of exchange of messages, call drop and [so 2]. Encryption and decoded data in each router requires a latency of security operations. We believe that each Mobile Router IPSec network takes the same time. LSEC This latency is measured by the following equation:

Form 7: = Dpacket LSEC

R

Spacket which is the size of data packets (bits) and R is the router encryption processing and the ability to decrypt (in bit / s). Our hypothesis is 1Mbit/Sec R as a normal router. The delay time is defined authentication as the time each time a mobile node sends the authentication request to the time when the mobile node receives the authentication response. The problem is during this period, the data can be transmitted, which can interrupt or even disconnect the connections. Therefore, the call drop increased with increasing travel time authentication [2]. The cost of authentication on the other hand, is defined as the treatment and cost information for cryptography. The total number of messages mobile node, Node and Foreign Agent host could be important if the distance between them is much [14]. Should be considered, the technique of mobility and flow mechanisms often authenticated in different scenarios, because the authentication is initiated when a mobile node to establish a communication session.

Symbol

Description

TTR

transmission time of mobile node

You

Weather Update link

Its

Accused of sending or receiving time

Ted

Time encryption / decryption

Tr

Record Time

T

demand for authentication services and waiting times

Th

Home Agent Update time

Table 1

Form 8:

Tsum TTR = + + + You Ted Ta + Th + Tr + T

6.2. The latency and analysis of our plant

Practices Mobile IPv6 is likely to occur in a private network is implemented through Internet. This means that this situation may imply that foreign agent belongs to a sub-network of another intended to provide mobility services. For accounting and billing from the foreign agent has to monitor the use of their services by mobile nodes. We simulated the authentication protocol for mobile IPv6 mode. In fact, the reason main simulation is the representation of the authentication method of calculation less expensive. A cookie-based authentication is used between the mobile node and the home agent. The second partnership is developed between the agent and agent of Foreign Affairs. With the expansion of wireless security protocols and growth of internets, all networks are trying to extend their networks secure public wireless infrared structure is called a virtual private network or VPN. functionality identity authentication cookie is two phases: In the first phase, the mobile node and home agent involved in the establishment of communication and the second phase, the intake officer and an external agent to communicate to send or receive a cookie file which is part of Mobile IPv6 node. The main difference between these two phases, Phase 1 happen in the same subnet and, of course, is faster and easier to complete, but phase 2 is to establish communication between two different subnet. In phase 2, we recommend establishing a tunnel for safety. The attributes of the cookie file which is especially the MAC address, user name, password and information can further be defined by the encryption algorithm and authentication mechanism. Based on our hypothesis, the authentication message is of maximum size of 4096 bytes or 4 KB, the transmission delay is considered as 40 milliseconds, and we assume 4 Mbps for the ability of our mobile network. IP also latency configuration in the local site is approximately 20 ms and in different subnets this latency is about 160-200 ms in the standard Cisco. On average 180 ms is considered.

Form 9: IPconf-Latn-local = 20 ms,

Formula 10: 180-Latn IPconf global = Msec

There is an additional factor that must be considered. There are additional bytes added to each packet of data sent to control the errors and the routing information as well. The actual number of these codes depends on the size of packets and also the protocol used in the mobile network. In general, a type of data packet will be sent approximately 90% and 10% or a little more spending is General. To post 4 096 4 506 bytes of data bytes actually have to be passed.
In a router with 16 Mbps / transfer speed of the section is equal to 2 Mb / sec. Our cookie file with 4506 bytes will take time about 0.0023 seconds to send, on the assumption that the source file can be sent continuously and the receiver can quickly process and no loss of packets that need to be returned. In 802.11X protocol router advertisement each second. This means that at best, a mobile node can wait around 0 seconds and in the worst case, you may have to wait a second for the advertising router to the side and join him. 0.5 seconds is assumed for all cases as an average waiting whenever a mobile node wants to find and order a router to join the new subnet.

Form 11: File Size (Kbytes)

Elapsed Time + Delay = ——————————— Router (Sec)

Bandwidth Speed (KB / sec)

Action

In IPsec (S)

The cookie ID (Sec)

Result

First exchange

0

0

The survey, the first and second

changes every two are the same

Second Change

(Form 11) =

4506b

2 million b / sec

+ 0.5 = 0.5023sec

0.5023

0.5023

Publication Mandatory Update (Formula 10) Router + Delay

0.6800

Update Required IPsec is a necessity in

Update Response (Form 10)

0.1800

Submit host agent (router delay, 10)

0.5 +0.5 +0.18 = 1.1800

1.1800

Our benchmark mechanism MN HA

Send cookie file of HA to CN (Form 11) =

4506b

2 million b / Sec

+ 0.5 = 0.5023sec

0.5023

HA sends the cookie file created for CN ID

Shipping / Receiving Recognition

Formula 11:

0.5 + 0.5 = 1 sec

1.0000

In recognition of IPsec transactions to update

Encoding / decoding Tunnel

Formula7:

LSEC = = Dpacket

R

4065Byte = 0.0325Sec

125 000 bytes / sec

0.0325

cookie file are used only for

deciphered by security reasons

Care Management

Form 9

IPconf Ms-Latn-local = 20

0.0200

0.0200

Assigning a new IPv6 address to MN

Modified HA

(Form 11) =

4506b

2 million b / sec

+ 0.5 = 0.5023sec

0.5023

0.0023

MIPv6 HA ID already, but in full IPsec

Must update information

Total duration (Form 8) 2.8846 2.2394 dry dry

Table 2: The computing time

Save Time: from 2.8846 to 2.2394 = 0.6452 sec effectiveness in saving time: 22%

7. Conclusion

We have described the authentication mechanism secure your mobile IPv6 and is used in the standard protocol such as IPSec. In the mobile IP network technology, some functions are unconventional because the protocols global labor and infrastructure without any global security issues. The quantitative analysis and design of Mobile IPv6 against creating IPSec authentication more problems on the wireless authentication in IPv6 networks. IPSec World time in our care with 4 KB file 2MB/sec AMD router bandwidth is 2.8846 sec. But in our Cookie authentication mechanism with 2.2394Sec decreases it. This means a saving of time would be 0.6452 and efficiency would Sec.

Note that we considered the latency for encryption / decryption through a tunnel from HA to CN, and obviously it takes time and cost to our mechanism [11]. We believe that without a strong security, a protocol and a mechanism in the infrastructure of mobility does not get a positive response. The result shows the time of encryption / decryption is for cookie file identification 0.0325 seconds, this time will be higher for large files. This combination has not been calculated and displayed for the IPsec protocol, because although it is strongly recommended over IPSec, but this is not a necessity [5]. The only drawback of the mechanism of ID cookie would be the creation of cookie files on the server authentication storage. We can not ignore these small files because we noticed the cookie file size is 4KB. Also planning tasks can be configured disk cleaning monthly, weekly or daily. You can delete these files from storage is not useful to avoid any confusion and conflict.

References:

[1] Li Wang, Mei Song, June-song, an effective authentication system for hierarchical mobile IPv6 networks, School of Engineering Electronic Journal of China Universities of Posts and Telecommunications. China, in October 2008.

[2] C. Blondie, O. Casals, Ll. Cerda, N. Wijngaert Van den, G. Willems, P. From Cleyn, comparison of performance "of low-latency Mobile IP Engineering Journal INRIA, Sophia Antipolis, pp. March 2008.

[3] Zhou Huachun?, †, Hongkai Yaju and Zhang Qin, an authentication method for mobile IPv6 and proxy server performance analysis Institute of Electronic Information Engineering of Beijing Jiaotong University, September 2008

[4 Johansson] P. T. Calhoun, C. Perkins, T. Hiller: Diameter Mobile IPv4 Application, IETF RFC 4004, August 2008.

[5] D. Forsberg, Y. Ohba, B. Patil, H. Tschofenig, A. Yegin: Transport Protocol for authentication for network access, IETF draft, December 2007.

[6 MS] Bargh, RJ Hulsebosch, EH Eertink, A. Prasad: Quick methods of authentication for delivery between IEEE 802.11 wireless LAN, ACM Press, September 2004.

[7] S. Glass, T. Hiller, S. Jacobs and C. Perkins. Mobile IP Authentication, authorization and accounting requirements. RFC2977, October 2000.

Narten [8 E] T. Nordmark, W. Simpson, "Neighbor Discovery for IP version 6 (IPv6) IETF RFC2461, August 2005.

[9] K. Chowdhury, A. Yegin: MIP6-boot via DHCPv6 for the integrated scenario, IETF draft, June 2006.

[10] J. Chen and KJR Liu. Joint source channel coding and multi-stream optical network adapter design for video over IP. IEEE Transactions on Multimedia, 4 (1) :3-22 March 2002.

[11] Yanheng Da Wei Liu, Yu Xuegang, Xiaodong Li: Research of Mobile IPv6 protocol implementation based on diameter, IEEE Computer Society, 2006.

[12] p. Funk, S. Blake-Wilson, EAP Tunneled TLS Authentication Protocol Version 1 IETF draft, March 2006.

[13] A. Diab, A. Mitschele-Thiel "Reducing handover latency Mobile IP", 2nd International Conference on modeling and performance evaluation of heterogeneous networks (HET-NET Journal, UK, July 2006.

[14] Greek CF, Maniatis SI, and SI Venieris. Towards the introduction of asymmetric cryptography. In proceedings. Sixth IEEE Symposium on Computers and Communications, 2001, July 2001.

[15] J. C. Chen, YP Wang: Extensible Authentication Protocol (EAP) and IEEE 802.1x: Tutorial and Empirical Experience, IEEE radio communications December 2005

About the Author

Mojtaba Sadeghi
Master of Computer Engineering, Software
IAU University
Dubai,UAE


Leave a comment

Your comment