WO2009012676A1

WO2009012676A1 - A method and equipment for generating care of address and a method and system for improving route optimization security

Info

Publication number: WO2009012676A1
Application number: PCT/CN2008/071269
Authority: WO
Inventors: Chunqiang Li
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2007-07-25
Filing date: 2008-06-11
Publication date: 2009-01-29
Also published as: CN101106568B; CN101106568A

Abstract

A method and equipment for generating care of address and a method and system for improving route optimization security are provided, the present invention belongs to the mobile communication field. The method that generates the care of address includes steps: the interface ID is generated by the one-way function using the HoA as the input; CoA is generated by combining the interface ID and prefix of an external network that is visited by the MN. The method that improves the route optimization security includes steps: CoA is generated by using the above method; MN and CN performs RRP; MN signs BU information using the private key to obtain the binding authorization data; MN transmits the BU information including HoA, CoA and he binding authorization data to CN, CN validates it using the public key, if it passes, the communication between the MN and the CN under the mode of route optimization. The equipment includes a identifier generation module and a care of address generation module. The system includes MN and CN. The CoA generated by the present invention limits the attack because the mobile mechanism is misapplied, and the communication security is improved under the mode of the mobile IPv6 route optimization.

Description

Method and apparatus for generating care-of address and method and system for improving route optimization security

The present invention relates to the field of mobile communications, and in particular, to a method and apparatus for generating a care-of address and a method and system for improving route optimization security. Say

Background technique

With the rapid development of computer network technology and mobile communication technology, there is a demand for mobile mobility.

IPV6 is a solution for mobility at the network layer. There are three basic network entities in mobile IPv6: MN (Mobile Node), CN (Correspondent Node, communication node or communication peer), and HA (Home Agent). A mobile node can be uniquely identified by HoA (Home Address), which is a global unicast routable address assigned to the mobile node. The Mobile IPv6 specification requires that the mobile node move from one link to another without interrupting the ongoing communication using the home address, and the mobility of the node is transparent to the transport layer and other higher layer protocols.

When the mobile node roams to the foreign network, it will generate a CoA (Care of Address) in a certain way, and notify the home agent through the BU (Binding Update). The home agent intercepts the message sent to the mobile node's home network to communicate with the mobile node, and then forwards the message to the mobile node through the tunnel mode. When the mobile node sends a message to the communication node, the packet is encapsulated and sent to the home agent. The home agent decapsulates the tunnel message and forwards it to the communication node. After receiving the message, the communication node returns a BA (Binding Acknowledge) message to confirm the BU message. Such a communication method in which a mobile node and a communication node transit through a home agent is called a triangular routing mode. The two-corner routing mode increases the communication delay, the overhead of the packet header that communicates with the mobile node is large, the burden of the mobile node's home link is increased, and the route may not be optimized enough. Another communication mode of the mobile node and the communication node is a route optimization mode, that is, the current location information (ie, CoA) of the mobile node is notified to the communication node by the BU, and the communication node and the mobile node do not go through the home agent transfer but directly Communication. In the route optimization mode, if the BU message is not protected, the communication between the mobile node and the communication node is vulnerable to attack. For example, if the attacker replaces the CoA in the BU message with a forged CoA, the mobile node cannot receive the message sent by the communication node; the attacker can also replay the BU message previously sent by the mobile node, and the communication node will follow the The old address in the BU message sends the data packet instead of its current location; if the CoA is not checked, the malicious node can also forge the BU message to use a victim node address as the CoA, thereby causing the communication node to send a large amount of data to the victim node. In the prior art, when a mobile IPv6 node generates a care-of address, the interface identifier may adopt a method of randomly selecting one data as an interface identifier, or may generate an interface identifier according to the MAC address of the mobile node. In the process of implementing the present invention, the inventors have found that at least the following problems exist in the prior art for generating a care-of address: For a method of randomly selecting one data as an interface identifier, the communication node cannot obtain the verification information of the care-of address; The method of generating the interface identifier and the care-of address, when the communication node and the mobile node are not in the same subnet, the packet header sent by the mobile node to the communication node does not carry the MAC address of the mobile node, so the communication node cannot Verifying the care-of address; Since the care-of address cannot be verified, the mobile node and the communication node are very insecure when communicating, such as the communication node sending data to the wrong care-of address and so on.

In order to improve the security of route optimization, there is a prior art that generates a Kbm (Binding Management Key) by using a RRP (Return Routability Procedure) method, and protects the MN by using Kbm. BU and BA messages between the CN and the CN. When the MN communicates with the CN in the route optimization mode, the return route reachability process is executed first, and then Kbm is generated. When the peer registration is performed, the binding authorization data is generated by Kbm to protect the integrity of the BU and the BA. Referring to Figure 1, the process of returning the reachable route is as follows:

The MN sends a HoTI (Home Test Init) message to the CN. The inner source IP address of the message is HoA (for tunneling by the home agent to the CN), and requests to obtain a home secret generation token (Home Keygen Token) ), which can also carry a cookie (a random number generated by MN - a small dessert). After the CN receives the HoTI message, the following method is used to calculate the home secret generation token:

Home Keygen Token = First (64, HMAC-SHA1 (Ken, HoA | Nonce | 0));

Where Ken is the secret that only CN knows, and Nonce is a random number generated by CN. After generating the home secret generation token, the CN sends the home secret generation token to the HoT (Home Test, Home Test) message (ie, the response message to the HoTI message) to the MN, and will also receive the received HoTI message. The cookie is placed in the HoT message.

In addition, the MN also sends a CoTI (Care of Test Init) message to the CN, transmits the MN's CoA to the CN, and requests a Care-of Keygen Token, which can also be carried. Cookie. After the CN receives the CoTI message, the following method is used to calculate the handover secret generation token:

Care-of Keygen Token = First (64, HMAC-SHA1 (Ken, CoA ( Nonce | 1 ));

The values of Ken and Nonce are the same as above. After generating the handover secret generation token, the CN sends the handover secret generation token to the MN (Care of Test) message (that is, the response message to the CoTI message), and also sends the received cookie to the MN. Send it in the CoT message.

After receiving the HoT and CoT messages returned by the CN, the MN performs a cookie check respectively. After the verification is passed, the home secret generation token is taken out from the HoT, and the secret generation token is taken out from the CoT, and then the Kbm is calculated as follows:

Kbm = SHA1 (Home Keygen Token | Care-of Keygen Token ). When the MN initiates the peer registration with the CN, the MAC (Message Authentication Code) is generated by using the above Kbm, and the binding authorization data is placed in the BU message. After the CN receives the BU message, the Kbm is generated by the same method. Then, a MAC is generated to verify the MAC in the BU message, thereby determining the correctness of the received BU message.

When the MN deregisters the binding relationship with the CN, only the HoTI and HoT can be executed in the return route reachable process, then the CN generates only the home secret generation token, and the MN and the CN calculate the Kbm as follows:

Kbm = SHA1 (Home Keygen Token) ;

The generated Kbm is then used to generate the MAC in the BU message as a verification of the BU message.

In the process of implementing the present invention, the inventors have found that at least the following problems exist in the above prior art:

After the MN has not sent a BU message to bind the HoA to the CoA, the attacker can illegally obtain the HoT message and the CoT message, and use the same method to calculate and generate the Kbm, thereby forging the BU message. Causes the CN to send the data to the wrong address. For example, the attacker sneaked out the CoT message sent by the CN to MNa, extracted the handover secret generation token, intercepted the HoT message sent by the CN to the MNb, extracted the home secret generation token, and then calculated the Kbm, and the CoAa Binding with the HoTb sends a BU message to the CN. The BU can be verified and accepted by the CN. Therefore, the traffic sent by the CN to the MNb through route optimization is redirected to the MNa, resulting in reduced security of data transmission. Summary of the invention

In order to improve the security of generating a care-of address, an embodiment of the present invention provides a method and apparatus for generating a care-of address. The technical solution is as follows:

A method of generating a care-of address, the method comprising:

Generating an interface identifier by using a one-way function operation with the mobile node's home address as input;

The interface identifier is combined with a prefix of an external network accessed by the mobile node to generate a care-of address.

An apparatus for generating a care-of address, the apparatus comprising:

An interface identifier generating module, configured to generate an interface identifier by using a one-way function operation with the home address of the mobile node as an input; the care-of address generating module, configured to use the interface identifier generated by the interface identifier generating module and the external access of the mobile node The prefix of the network is combined to generate a care-of address.

The above technical solution has the following beneficial effects:

By inputting the home address HoA of the mobile node MN and using the one-way function operation to generate the interface identifier and the care-of address CoA, the CN can obtain the verification information of the care-of address, which limits the attack caused by the misuse of the mobile mechanism, and improves the attack. Mobile IPv6 CoA security.

In order to improve the security of route optimization communication, the embodiment of the invention provides a method for improving route optimization security. And system. The technical solution is as follows:

In one aspect, the embodiment of the present invention provides a method for improving route optimization security, where the method includes: the mobile node generates an interface identifier by using a one-way function operation with the home address as an input;

The mobile node combines the interface identifier with a prefix of an external network accessed by the mobile node to generate a care-of address;

The mobile node and the communication node perform a return route reachability process by using the home address and the care-of address, and then generate the same binding management key respectively;

The mobile node and the communication node respectively generate binding authorization data by using the binding management key generated by the mobile node, and the mobile node sends a binding update message including the home address, the care-of address, and the binding authorization data generated by itself to the mobile node. Communication node

After receiving the binding update message, the communication node verifies the binding authorization data in the binding update message, and if the binding authorization data generated by itself is consistent, the mobile node is allowed to perform routing with the communication node. Communication in optimized mode.

On the other hand, the embodiment of the present invention further provides a method for improving route optimization security, where the method includes: the mobile node generates an interface identifier by using a one-way function operation with the home address as an input, and the home address is passed through a cryptographic method. Generate

The mobile node and the communication node perform a return route reachability process by using the home address and the care-of address; the mobile node signs a binding update message with its own private key as the binding authorization data of the binding update message; Sending, by the mobile node, the binding update message that includes the home address, the care-of address, and the binding authorization data to the communication node, and carrying the public key of the mobile node in the binding update message;

After receiving the binding update message, the communication node extracts the public key of the mobile node, and uses the public key of the mobile node to verify the binding authorization data in the binding update message. The mobile node is then allowed to communicate with the communication node in a route optimization mode.

In one aspect, an embodiment of the present invention provides a system for improving route optimization security, where the system includes a mobile node and a communication node, and the mobile node includes:

a care-of address generating module, configured to generate an interface identifier by using a one-way function operation with the home address of the mobile node as an input; and combining the interface identifier with a prefix of an external network accessed by the mobile node to generate a care-of address;

a key generation module, configured to perform a return route reachability process by using the home address and the care-of address generated by the care-of address generation module together with the communication node, and then generate a binding management key; An authorization data generating module, configured to generate binding authorization data by using a binding management key generated by the key generation module, and a sending module, configured to send a care-of address generated by the home address, the care-of address generating module, and a binding update message of the binding authorization data generated by the authorization data generating module to the communication node;

The communication node includes:

a key generation module, configured to perform a return route reachability process by using the home address and the care-of address generated by the care-of address generation module together with the mobile node, and then generate a key generation module generated by the mobile node Bind the management key with the same management key;

An authorization data generating module, configured to generate binding authorization data by using a binding management key generated by a key generation module of the communication node;

a receiving module, configured to receive a binding update message sent by the sending module;

And a comparison module, configured to compare the binding authorization data in the binding update message received by the receiving module with the binding authorization data generated by the authorization data generating module of the communication node;

And a control module, configured to allow the mobile node to perform communication in a route optimization mode with the communication node when the comparison module matches the result.

On the other hand, the embodiment of the present invention further provides a system for improving route optimization security, where the system includes a mobile node and a communication node, and the mobile node includes:

a care-of address generating module, configured to generate an interface identifier by using a one-way function operation by using a home address of the mobile node as an input; and combining the interface identifier with a prefix of an external network accessed by the mobile node to generate a care-of address, where the hometown The address is generated by a cryptographic method;

Returning a route reachable execution module, configured to perform a return route reachability process by using the home address and the care-of address generated by the care-of address generation module together with the communication node;

An authorization data generating module, configured to sign, by using a private key of the mobile node, a binding update message as binding authorization data of the binding update message;

a sending module, configured to send the binding update message that includes the home address, the care-of address generated by the care-of address generating module, and the binding authorization data generated by the authorization data generating module, to the communication node, and The binding update message carries a public key of the mobile node;

The communication node includes:

Returning a route reachable execution module, configured to perform a return route reachability process by using the home address and the care-of address generated by the care-of address generation module together with the mobile node;

a verification module, configured to extract a public key of the mobile node in a binding update message received by the receiving module, and use The public key of the mobile node verifies the binding authorization data in the binding update message;

And a control module, configured to allow the mobile node to perform communication in a route optimization mode with the communication node when the verification module passes the verification.

The above technical solution has the following beneficial effects:

By generating a care-of address CoA based on the home address HoA of the mobile node MN, the return route reachability procedure RRP is performed using the CoA; then the binding management key Kbm is calculated, and the binding authorization data is generated by using Kbm, which is used for the BU The message is verified. When the HoA is generated by CGA (Cryptographically Generated Addresses), the BU message is verified by using the MN's private key to sign the BU message as the binding authorization data. After the verification is passed, the MN and the MN are authenticated. The CN can perform communication in the route optimization mode, which limits the attacks caused by the misuse of the mobile mechanism, and improves the security of the communication in the route optimization mode of the mobile IPv6. DRAWINGS

1 is a schematic diagram of a return route reachable process in the prior art;

2 is a flowchart of a method for generating a care-of address according to Embodiment 1 of the present invention;

3 is a structural diagram of an apparatus for generating a care-of address according to Embodiment 2 of the present invention;

4 is a flowchart of a method for improving route optimization security according to Embodiment 3 of the present invention;

FIG. 5 is a structural diagram of a system for improving roadway optimization security according to Embodiment 4 of the present invention; FIG.

6 is a flowchart of another method for improving route optimization security according to Embodiment 5 of the present invention;

FIG. 7 is a structural diagram of another system for improving route optimization security according to Embodiment 6 of the present invention. detailed description

In order to make the objects, the technical solutions and the advantages of the present invention more apparent, the embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

In the embodiment of the present invention, a care-of address CoA is generated on the basis of the home address HoA of the mobile node, and the return route reachable process RRP is performed by using the CoA, and then the binding management key Kbm is calculated, and the binding authorization data is generated by using Kbm. To verify the BU message; when the HoA is generated in the CGA mode, the BU message is verified by using the MN's private key signature BU message as the binding authorization data; after the verification is passed, the MN and the CN can perform the communication in the route optimization mode. .

Example 1

Referring to FIG. 2, an embodiment of the present invention provides a method for generating a care-of address, which specifically includes:

Step 101: Generate an identifier OID by a one-way function operation with the HoA of the MN as an input. Among them, the formula for calculating the operation using the one-way function PRF (Pseudo Random Function) is as follows:

OID = PRF (Expression);

The Expression can be the HoA of the MN, or the combination of the network prefix (Subnet Prefix) and the HoA of the external network accessed by the MN; the PRF is a one-way cryptographic function, which can be MD5, SHA-1, SHA256 or AES- One-way function such as XCBC-PRF. Therefore the above formula can take many forms, for example:

OID = SHA-1 (HoA);

Or OID = MD5 (HoA I Subnet Prefix) and so on.

Step 102: After generating the OID, the MN processes the OID to obtain an interface identifier (Interface ID) of 64 bits in length. If the length of the OID exceeds 64 bits, there are several ways to process it. For example, it can be processed as follows:

CoA interface identifier:

Interface ID = Abs (64, n, OID);

That is, the first 64 bits starting from the n bit are selected as the interface ID from the OID. When the CoA is generated for the first time, n=0 can be selected. When the address conflicts, the interface identifier and the corresponding CoA can be regenerated by changing the value of n. Where n is a preset start bit;

It can also be processed as follows: The OID is divided into multiple blocks according to 64 bits. If the last block in the division process is less than 64 bits, the content of the corresponding length is arbitrarily added to 64 bits from other blocks, assuming that the OID is divided into N blocks, respectively For: Blockl, Block2, ..., BlockN, the interface identifier can be calculated as follows:

Interface ID = Blockl ©Block2 ten...10 BlockN;

The operator ten can be a "AND", "OR (OR)" or "Exclusive (XOR)" bitwise logical operator. Step 103: After generating the interface identifier of the CoA, the MN combines the prefix Subnet Prefix of the accessed external network with the interface identifier to generate a CoA of the MN.

For example, if the prefix Subnet Prefix is 0x31223344 and the interface identifier is 0x55667788, then 0x31223344 and 0x55667788 are connected together to get 0x3122334455667788, which is the MN CoA.

When the HoA of the MN is generated by the CGA method, the foregoing step 101 may be specifically as follows:

The MN's HoA is combined with the MN's public key as an input, or the prefix of the external network accessed by the MN is combined with the HoA and the public key as input, and the interface identifier is generated by a one-way function operation, that is, the Expression may also include the MN. Public key information.

Further, in the foregoing method, the step of performing duplicate address detection on the generated CoA may be further added: determining whether the generated CoA is the same as the used IP address in the network, and if the same, that is, an address conflict is found, Regenerate the interface ID of the interface ID according to the following steps, and then regenerate an available CoA: Modify the value of the starting bit n, and increase the increment based on the original, that is, n= n + increment, where increment is preset. The quantity can be a fixed value of 1, 2, 3, 4, 5, 6, 7, 8, 16, 32, etc., and then operated by the following formula: Interface ID = Abs (64, n, OID).

In this embodiment, by using the HoA of the MN as an input, the interface identifier and the CoA are generated by using a one-way function operation, so that the CN can obtain the verification information of the care-of address, which limits the attack caused by the misuse of the mobile mechanism, and improves the mobile IPv6.

CoA security; By performing address check on the generated CoA, address conflicts in the network can be avoided, and the security of generating care-of addresses is improved. Example 2

Referring to FIG. 3, an embodiment of the present invention provides an apparatus for generating a care-of address, which specifically includes:

(1) an interface identifier generating module 201, configured to generate an interface identifier by using a one-way function operation with the home address of the mobile node as an input;

(2) The care-of address generation module 202 is configured to combine the interface identifier generated by the interface identifier generation module 201 with the prefix of the external network accessed by the mobile node to generate a care-of address.

The interface identifier generation module 201 may specifically include:

1) a combination unit, configured to combine a prefix of an external network accessed by the mobile node with a home address of the mobile node;

2) A generating unit is configured to input the data obtained by combining the combined units as an input, and generate an interface identifier by a one-way function operation.

When the home address of the mobile node is generated by a cryptographic method, the interface identifier generating module 201 may specifically include:

1) a combination unit, configured to combine the home address of the mobile node with the public key of the mobile node, or combine the prefix of the external network accessed by the mobile node with the home address and the public key;

The above device may further include:

The length processing module is configured to determine whether the length of the interface identifier generated by the interface identifier generating module 201 exceeds 64 bits, and if yes, set a start bit, starting from the start bit, and taking 64 bits as a new interface identifier. Send to the care-of address generation module 202.

Wherein, the above device may also include:

a length processing module, configured to determine whether the length of the interface identifier generated by the interface identifier generating module 201 exceeds 64 bits, and if yes, divide the interface identifier into multiple blocks according to 64 bits, if the last block is less than 64 bits, From its Any content in the block whose corresponding length is taken is added to 64 bits, and then bit logic operations are performed on the plurality of blocks, and the result of the operation is sent to the care-of address generation module 202 as a new interface identifier.

In order to avoid address conflicts, the above apparatus may further include:

The address checking module is configured to: when the care-of address generating module 202 generates the care-of address, determine whether the care-of address is the same as the used IP address in the network, if the same, set the increment, and set the start bit of the length processing module. The quantity is summed, and the result of the operation is a new start bit, taking 64 bits as an interface identifier and generating a new care-of address.

In this embodiment, the interface identifier generation module 201 takes the HoA of the MN as an input, generates a interface identifier by using a one-way function operation, and the care-of address generation module 202 generates a CoA according to the interface identifier, so that the CN can obtain the verification information of the care-of address, which limits the The attack caused by the misuse of the mobile mechanism improves the security of the mobile IPv6 CoA. The address check module performs an address check on the generated CoA to avoid address conflicts in the network and improve the security of generating the care-of address. Example 3

Referring to FIG. 4, an embodiment of the present invention provides a method for improving route optimization security, which specifically includes the following steps: Step 301: The MN generates an interface identifier by using a one-way function operation with HoA as an input.

Step 302: The MN combines the interface identifier with the prefix of the external network accessed by the MN to generate a CoA.

Further, the duplicated address detection may be performed on the generated CoA, that is, whether the generated CoA is the same as the used IP address in the network. If the address conflict occurs, the interface ID is regenerated according to the following steps. Then regenerate an available CoA:

Modify the value of the initial starting bit n, and increase the increment on the original basis, that is, n= n + increment, where the incremental increment can be 1, 2, 3, 4, 5, 6, 7, 8, 16 Fixed values such as 32, and then operate with the following formula: Interface ID = Abs (64, n, OID).

Step 303: The MN and the CN both use the HoA of the MN and the generated CoA to perform a return route reachability process.

When the MN first initiates the registration with the CN, the CN generates the home secret generation token and the handover secret generation token respectively in the return route reachability process, and transmits the secret generation token to the MN through HoT and CoT.

When the MN does not register the CN with the peer for the first time, only the CoTI and the CoT can be executed in the return route reachable process, and the CN only generates the handover secret generation token and transmits it to the MN through the CoT.

When the MN deregisters the binding relationship with the CN, only the HoTI and the HoT can be executed in the process of returning the reachable route, and the CN generates only the home secret generation token and transmits it to the MN through the HoT.

Step 304: The CN generates Kbm according to the token generated in the return route reachable process, and the MN generates Kbm according to the token extracted from the received test response message; the Kbm generated by the MN is the same as the Kbm generated by the CN. Step 305: The MN and the CN respectively generate binding authorization data by using the respective generated Kbm.

Step 306: The MN sends a BU message including the HoA and the CoA of the MN to the CN, and carries the binding authorization data generated by the MN in the BU message.

In order to avoid consuming excessive computing resources, the MN may further set a minimum time interval for performing RRP and sending a BU message. Accordingly, the CN may also limit the maximum number of BU messages received per unit time according to requirements, and the like.

Step 307: After receiving the BU message, the CN verifies the binding authorization data in the BU message, and compares the binding authorization data generated by the CN with the binding authorization data in the BU message. If they are consistent, the CN and the CN are allowed. The MN performs communication in the route optimization mode. If it is inconsistent, it indicates that the BU message received by the CN is incorrect at this time, and the MN and the CN are not allowed to perform communication in the route optimization mode.

Further, the step of verifying the CoA in the BU message may be added before the binding authorization data in the CN verification BU message (step 307), as follows:

The CN extracts the HoA of the MN from the received BU message, and generates a temporary CoA according to the same method as the steps 301 to 302 according to the HoA, and then compares the generated CoA and the CoA in the BU message to be consistent. If the agreement is consistent, the binding authorization data is verified. If the current BU message is incorrect, the original BU message may be a forged BU message. The MN and the CN are not allowed to perform communication in the route optimization mode.

In this embodiment, the handover address CoA is generated on the basis of the home address HoA of the mobile node MN, and the return route reachability procedure RRP is performed by using the CoA, and then the binding management key Kbm is calculated, and the binding authorization data is generated by using Kbm. It is used to verify the BU message. After the verification is passed, the MN and the CN can communicate in the route optimization mode, which limits the attack caused by the misuse of the mobile mechanism, thereby improving the security of the communication in the route optimization mode of the mobile IPv6. . Before verifying the binding authorization data, the CoA in the BU message can be further verified, which can further improve the security of the communication in the route optimization mode. Example 4

Referring to FIG. 5, an embodiment of the present invention further provides a system for improving route optimization security, specifically including a mobile node 401 and a communication node 402.

The mobile node 401 includes:

(1) The care-of address generation module 4011 is configured to generate an interface identifier by using a one-way function operation with the home address of the mobile node 401 as an input; and combining the interface identifier with a prefix of the external network accessed by the mobile node 401 to generate a care-of address;

(2) a key generation module 4012, configured to perform a return route reachability process with the care-of address generated by the home address and the care-of address generation module 401 together with the communication node 402, and then generate a binding management key;

(3) an authorization data generating module 4013, configured to generate a binding by using a binding management key generated by the key generation module 4012. Authorization data;

(4) a sending module 4014, configured to send a binding update message including a home address, a care-of address generated by the care-of address generating module 4011, and a binding authorization data generated by the authorization data generating module 4013 to the communication node 402;

Communication node 402 includes:

(1) The key generation module 4021 is configured to use the home address and the care-of address generation module together with the mobile node 401.

The care-of address generated by 4011 performs a return route reachability process, and then generates a binding management key identical to the binding management key generated by the key generation module 4012 of the mobile node 401;

(2) an authorization data generating module 4022, configured to generate binding authorization data by using a binding management key generated by the key generation module 4021 of the communication node 402;

(3) The receiving module 4023 is configured to receive a binding update message sent by the sending module 4014.

The matching module 4024 is configured to compare the binding authorization data in the binding update message received by the receiving module 4023 with the binding authorization data generated by the authorization data generating module 4022 of the communication node 402.

(5) The control module 4025 is configured to allow the mobile node 401 to communicate with the communication node 402 in the route optimization mode when the comparison result of the comparison module 4024 is consistent.

The foregoing communication node 402 may further include:

The care-of address matching module is configured to extract the home address of the mobile node 401 from the binding update message received by the receiving module 4023 before the comparison module 4024 is compared, and use the care-of address generation module 4011 according to the home address The method of generating the same care-of address generates a temporary care-of address, and verifies whether the temporary care-of address is consistent with the care-of address in the binding update message. If they are consistent, the comparison module 4024 is triggered to work.

In this embodiment, the care-of address ACA is generated by the care-of address generation module 4011 on the basis of the home address HoA of the mobile node 401MN, and the key generation module 4012 uses the CoA to perform the return route reachability process RRP, and then calculates the binding management key. Kbm, the authorization data generating module 4013 uses Kbm to generate binding authorization data, which is used to verify the BU message. After the verification is passed, the MN and the CN can perform communication in the route optimization mode, which limits the misuse of the mobile mechanism. Attack, thereby improving the security of communication in the mobile IPv6 route optimization mode. Further, the CoA in the BU message is verified by the care-of address matching module, which can further improve the security of the communication in the route optimization mode. Example 5

Referring to FIG. 6, an embodiment of the present invention provides a method for improving route optimization security, which specifically includes the following steps: Step 501: The MN generates an interface identifier by using a one-way function operation with HoA as an input, where the HoA is generated based on a CGA manner. .

In addition, the MN can also use the network prefix (Subnet Prefix) of the external network accessed by the MN and the public key of the MN. The HoA combination is used as an input to generate an interface identifier through a one-way function operation.

Step 502: The MN combines the interface identifier with the prefix of the external network accessed by the MN to generate a CoA.

Modify the value of the initial starting bit n, and increase the increment on the original basis, that is, n= n + increment, where the incremental increment can be 1, 2, 3, 4, 5, 6, 7, 8, 16 , 32, etc. fixed values, and then use the following formula:

Interface ID = Abs (64, n, OID).

Step 503: The MN and the CN both use the HoA of the MN and the generated CoA to perform a return route reachability process.

Step 504: After returning the route reachable process, the MN signs the BU message with the private key of the MN, and acts as the binding authorization data in the BU message, and then sends the BU message to the CN, and carries the CGA parameter information in the BU message. This includes the MN's public key.

Step 505: After receiving the BU message sent by the MN, the CN extracts the public key of the MN in the CGA parameter information in the BU message, and uses the public key to verify the binding authorization data in the BU message. If the verification succeeds, the binding is generated. The entry allows the CN and the MN to communicate in the route optimization mode; if the verification fails, the CN sends an error code to the MN, and does not allow the CN and the MN to perform communication in the route optimization mode.

Further, after the verification is passed, the CN may further generate a random number Ks, and encrypt the random number Ks by using the public key of the MN, and then send the encrypted Ks to the MN in the BA message; and the CN may also use the following The method generates Kbm, and combines Ks with the transfer secret generation token to perform a one-way function operation to generate Kbm, and uses the Kbm to generate binding authorization data as a basis for verifying the BA message;

Kbm = PRF(Ks, Care-ofKeygen Token);

After receiving the BA message, the MN extracts the encrypted random number Ks in the BA message, and decrypts it using the MN's private key to obtain Ks, and generates a new Kbm using the same method as the CN generates the above Kbm: The MN can use the newly generated Kbm to generate new binding authorization data, which is used as the basis for verifying the BU message in the subsequent peer registration process, and can also use the new binding authorization data to verify the BA message, if it is in the BA message. The binding authorization data is consistent, that is, the authentication is passed, and the CN and the MN are allowed to perform communication in the routing mode; otherwise, the CN and the MN are not allowed to perform communication in the routing mode.

Further, the MN may further carry the identifier information in the BU message, indicating that the CoA of the MN is generated by a one-way function operation, and correspondingly, before the binding authorization data in the BU message is verified by the CN, the verification BU message is added. The steps of the CoA are as follows:

The CN initiates verification of the CoA in the BU message according to the identifier information in the received BU message, extracts the drawn HoA from the BU message, and generates a temporary according to the HoA according to the same method as steps 501 to 502. The CoA is then consistent with the CoA in the generated temporary CoA and the BU message. If the CoA is valid, the CoA authentication is passed, and the binding authorization data in the BU message can be verified. If not, the CoA authentication fails. The current BU message is incorrect. It may be a forged BU message. The CN sends an error code to the MN. The CN and the MN are not allowed to communicate in the route optimization mode.

When the CN is required to verify the CoA in the BU message, the MN may also carry the parameter involved in generating the interface identifier in step 502 in the BU message.

Further, when transmitting the BU message, the MN may carry the parameters used by the CGA to generate the HoA in the BU message, for example, the public key information of the MN, the collision count and the modifier (ie, the random number), and the like; Before verifying the CoA in the BU message, you can also add the steps to verify the HoA in the BU message, as follows:

After receiving the BU message, the CN extracts the above parameters, and calculates a temporary HoA by using the same CGA method as in step 501, and then compares with the HoA in the temporary HoA and the BU message. If they are consistent, the HoA verification is performed. The CN can continue to verify the CoA and the binding authorization data in the BU message; otherwise, the HoA authentication fails, indicating that the BU message is incorrect, the CN sends an error code to the MN, and the MN and the CN are not allowed to perform communication in the route optimization mode.

The above method generates a handover address CoA based on the home address HoA of the mobile node MN, uses the CoA to perform a return route reachability procedure RRP, and then uses the MN's private key to sign the BU message as the binding authorization data in the BU message. It is used to verify the BU message. After the verification is passed, the MN and the CN can perform communication in the route optimization mode, which limits the attack caused by the misuse of the mobile mechanism, and improves the security of the communication in the route optimization mode of the mobile IPv6. By adding the steps of verifying the HoA and CoA in the BU message and verifying the BA message, the security of the communication in the route optimization mode can be further improved. The HoA is generated based on the CGA, which ensures that the HoTI/HoT message is not required to be generated in the subsequent peer registration, which reduces the routing optimization signaling overhead. It reduces the dependence of the route optimization on the HA and improves the robustness of the system. The delay and complexity of the update of the binding of the mobile node to the communication node during link switching. Example 6

Referring to FIG. 7, an embodiment of the present invention further provides a system for improving route optimization security, specifically including a mobile node 601 and a communication node 602;

Mobile node 601 includes:

(1) The care-of address generation module 6011 is configured to generate an interface identifier by using a one-way function operation with the home address of the mobile node 601 as an input; and combine the interface identifier with the prefix of the external network accessed by the mobile node 601 to generate a care-of address, and the home address passes Cryptographic method generation;

(2) a return route reachable execution module 6012, configured to perform a return route reachability process using the care-of address generated by the home address and the care-of address generation module 6011 together with the communication node 602;

(3) an authorization data generating module 6013, configured to use the private key of the mobile node 601 to sign the binding update message as the binding authorization data of the binding update message;

(4) The sending module 6014 is configured to send a binding update message including the home address, the care-of address generated by the care-of address generating module 6011, and the binding authorization data generated by the authorization data generating module 6013 to the communication node 602, and update the binding The message carries the public key of the mobile node 601;

Communication node 602 includes:

(1) a return route reachable execution module 6021, configured to perform a return route reachable process using the care-of address generated by the home address and the care-of address generation module 6011 together with the mobile node 601;

(2) The receiving module 6022 is configured to receive a binding update message sent by the sending module 6014.

(3) a verification module 6023, configured to extract a public key of the mobile node 601 in the binding update message received by the receiving module 6022, and verify the binding authorization data in the binding update message by using the public key of the mobile node 601;

(4) The control module 6024 is configured to allow the mobile node 601 to perform communication in the route optimization mode with the communication node 602 when the verification module 6023 passes the verification.

To further improve security, the communication node 602 can also include:

The care-of address verification module is configured to: before the verification module 6023 performs verification, extract the home address of the mobile node 601 from the binding update message received by the receiving module 6022, and generate a care-of address according to the home address and the care-of address generation module 6011. The same method generates a temporary care-of address, and verifies whether the temporary care-of address is consistent with the care-of address in the binding update message. If they are consistent, the verification module 6023 is triggered to work.

Further, the sending module 6014 is further configured to carry, in the binding update message, parameters used when generating the home address by using the foregoing cryptographic method, for example, the public key information, the collision count, and the modifier (ie, the random number) of the mobile node 601. And so on; correspondingly, the communication node 602 may further include:

The home address verification module is configured to receive the binding from the receiving module 6022 before the verification module 6023 performs verification. The above parameters are extracted in the update message, and a temporary home address is generated according to the extracted parameters, and the temporary home address is verified to be consistent with the home address in the binding update message. If they are consistent, the verification module 6023 is triggered to work.

Further, the control module 6024 may specifically include:

a new authorization data generating unit, configured to generate a random number when the verification module 6023 passes the verification, using the mobile node

The public key of 601 is encrypted; after the random number is combined with the handover secret generation token generated by the communication node 602 in the process of performing the return route reachability, the one-way function is used to generate a new binding management key; Binding the management key to generate new binding authorization data;

a binding confirmation message sending unit, configured to send a binding confirmation message to the mobile node 601, where the binding confirmation message carries the random number encrypted by the new authorization data generating unit and the generated new binding authorization data;

Correspondingly, the mobile node 601 further includes:

a binding confirmation message receiving module, configured to receive a binding confirmation message sent by the binding confirmation message sending unit, and a binding confirmation message verification module, configured to: after the binding confirmation message receiving module receives the binding confirmation message, extracting The encrypted random number is decrypted by the private key of the mobile node to obtain a random number; according to the random number, a temporary binding management key is generated by the same method as the new authorization data generating unit generates a new binding management key, and according to the method The temporary binding management key generates a temporary binding authorization data in the same manner as the new authorization data generating unit generates new binding authorization data, and then compares the new binding authorization in the temporary binding authorization data and the binding confirmation message. Whether the data is consistent;

And a control module, configured to allow the mobile node 601 to perform communication in the route optimization mode with the communication node 602 when the binding confirmation message verification module matches the result.

The system generates a care-of address CoA based on the home address HoA of the mobile node 601MN by the care-of address generation module 6011, and the return route reachability execution module 6012 uses the CoA to perform a return route reachability procedure RRP, which is used by the authorization data generation module 6013. The MN's private key signature BU message generates binding authorization data, which is used to verify the BU message. After the verification is passed, the MN and the CN can perform communication in the route optimization mode, which limits the attack caused by the misuse of the mobile mechanism, and improves The security of communication in the route optimization mode of mobile IPv6. On the basis of verifying the binding authorization data, the handover address verification module may further verify the CoA in the BU message, and the home address verification module verifies the HoA in the BU message, and the binding confirmation message verification module is The BA message is verified, which can further improve the security of communication in the route optimization mode. The HoA is generated based on the CGA, which ensures that the HoTI/HoT message is not required to be generated in the subsequent peer registration, which reduces the routing optimization signaling overhead. It reduces the dependence of the route optimization on the HA and improves the robustness of the system. The delay and complexity of the update of the binding of the mobile node to the communication node during link switching.

The technical solution in the embodiment of the present invention can be implemented by using software, and the corresponding program can be stored in a readable storage medium. Quality, such as a computer's hard disk or non-volatile memory such as flash memory.

The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., which are within the spirit and scope of the present invention, should be included in the protection of the present invention. Within the scope.

Claims

A method for generating a care-of address, the method comprising:

The method for generating a care-of address according to claim 1, wherein the step of generating an interface identifier by using a one-way function operation with the home address of the mobile node as an input is specifically:

The interface identifier is generated by a one-way function operation by combining the prefix of the external network accessed by the mobile node and the home address of the mobile node as input.

The method for generating a care-of address according to claim 1, wherein when the home address of the mobile node is generated by a cryptographic method, an interface identifier is generated by a one-way function operation with the home address of the mobile node as an input. The steps are specifically as follows:

Combining the home address of the mobile node with the public key of the mobile node as an input, or combining the prefix of the external network accessed by the mobile node with the home address and the public key as input, and generating by a one-way function operation Interface identifier.

The method for generating a care-of address according to claim 1, wherein the step of generating an interface identifier by using a one-way function operation by using a home address of the mobile node as an input further comprises:

It is judged whether the length of the interface identifier exceeds 64 bits, and if so, a start bit is set, and 64 bits are taken as the interface identifier from the start bit.

Determining whether the length of the interface identifier exceeds 64 bits. If yes, dividing the interface identifier into multiple blocks according to 64 bits. If the last block is less than 64 bits, the corresponding length is taken from other blocks. The content is supplemented into 64 bits, and then bit logical operations are performed on the plurality of blocks, and the result of the operation is identified as an interface.

The method for generating a care-of address according to claim 4, wherein the method further comprises: after generating the care-of address, determining whether the care-of address is the same as the used IP address in the network, if the same Then, the increment is set, and the start bit and the increment are summed, and the result of the operation is a new start bit, and 64 bits are taken as an interface identifier and a new care-of address is generated.

The method for generating a care-of address according to any one of claims 1 to 6, wherein the one-way function is SHA1 or MD5.

A method for improving route optimization security, the method comprising:

The mobile node generates an interface identifier by using a one-way function operation with the home address as an input; The mobile node combines the interface identifier with a prefix of an external network accessed by the mobile node to generate a care-of address;

The method for improving the security of the route optimization according to claim 8, wherein the step of verifying the binding authorization data in the binding update message further comprises:

The communication node extracts a home address of the mobile node from the binding update message, and generates a temporary care-of address according to the home address in the same manner as the mobile node generates the care-of address, and verifies the Whether the temporary care-of address is consistent with the care-of address in the binding update message, and if yes, the step of verifying the binding authorization data in the binding update message is continued.

A method for improving the security of a route, characterized in that the method comprises:

The mobile node generates an interface identifier by using a one-way function operation with the home address as an input, and the home address is generated by a cryptographic method;

The method for improving route optimization security according to claim 10, wherein the step of verifying the binding authorization data in the binding update message by using the public key of the mobile node further includes :

The communication node extracts a home address of the mobile node from the binding update message, and according to the hometown Generating a temporary care-of address in the same manner as the mobile node generates the care-of address, and verifying whether the temporary care-of address is consistent with the care-of address in the binding update message, and if they are consistent, continuing to perform the verification The step of binding the authorization data in the update message.

The method for improving the security of the route optimization according to claim 10, wherein the step of the mobile node transmitting the binding update message and the verifying the binding authorization data after the receiving the communication node further comprises:

And the mobile node carries, in the binding update message, a parameter that is used when the home address is generated by using the cryptographic method, and before the communication node verifies the binding authorization data in the binding update message, Extracting the parameter in the binding update message, and generating a temporary home address by using the cryptographic method according to the parameter, and verifying whether the temporary home address is consistent with the home address in the binding update message, if If yes, the process of verifying the binding authorization data in the binding update message is continued.

The method for improving the security of the route optimization according to claim 10, wherein the step of allowing the mobile node and the communication node to perform communication in the route optimization mode further comprises:

The communication node generates a random number, and encrypts the random number with a public key of the mobile node;

The communication node combines the random number with the handover secret generation token generated by the communication node in the process of performing the return route reachability, and then uses a one-way function to generate a new binding management key; The new binding management key generates new binding authorization data;

The communication node sends a binding confirmation message to the mobile node, where the binding confirmation message carries the encrypted random number and the new binding authorization data;

After receiving the binding confirmation message, the mobile node extracts the encrypted random number, and decrypts the private key of the mobile node to obtain the random number;

And the mobile node generates a temporary binding management key according to the random number in the same manner as the communication node generates the new binding management key, and uses the temporary binding management key according to the temporary binding management key. The communication node generates the temporary binding authorization data by generating the same method as the new binding authorization data;

And the mobile node verifies whether the temporary binding authorization data and the new binding authorization data in the binding confirmation message are consistent, if consistent, allowing the mobile node to perform communication in a route optimization mode with the communication node.

14. An apparatus for generating a care-of address, the apparatus comprising:

An interface identifier generating module (201), configured to generate an interface identifier by using a one-way function operation by using a home address of the mobile node as an input;

The care-of address generation module (202) is configured to combine the interface identifier generated by the interface identifier generation module (201) with the prefix of the external network accessed by the mobile node to generate a care-of address.

The apparatus for generating a care-of address according to claim 14, wherein the interface identifier generating module (201) specifically includes:

a combination unit, configured to combine a prefix of an external network accessed by the mobile node with a home address of the mobile node; a generating unit, configured to input data obtained by combining the combined units as an input, and generate an interface by a one-way function operation Logo.

The apparatus for generating a care-of address according to claim 14, wherein, when the home address of the mobile node is generated by a cryptographic method, the interface identifier generating module (201) specifically includes:

a combination unit, configured to combine a home address of the mobile node with a public key of the mobile node, or combine a prefix of an external network accessed by the mobile node with the home address and a public key;

And a generating unit, configured to input data obtained by combining the combined units as an input, and generate an interface identifier by a one-way function operation.

The device for generating a care-of address according to claim 14, wherein the device further comprises: a length processing module, configured to determine whether the length of the interface identifier generated by the interface identifier generating module (201) exceeds 64 The bit, if yes, sets a start bit from which 64 bits are taken and sent as a new interface identifier to the care-of address generation module (202).

The device for generating a care-of address according to claim 14, wherein the device further comprises: a length processing module, configured to determine whether the length of the interface identifier generated by the interface identifier generating module (201) exceeds 64 a bit, if yes, dividing the interface identifier into a plurality of blocks by 64 bits, and if the last block is less than 64 bits, arbitrarily taking the content of the corresponding length from other blocks to be added to 64 bits, and then The plurality of blocks perform bit logic operations, and the result of the operation is sent to the care-of address generation module (202) as a new interface identifier.

The device for generating a care-of address according to claim 17, wherein the device further comprises: an address checking module, configured to: after the care-of address generating module (202) generates the care-of address, determine the location Whether the care-of address is the same as the used IP address in the network. If they are the same, the increment is set, and the start bit set by the length processing module and the increment are summed, and the result of the operation is The new start bit, taking 64 bits, is used as an interface identifier and generates a new care-of address.

20. A system for improving route optimization security, characterized in that the system comprises a mobile node (401) and a communication node (402), the mobile node (401) comprising:

a care-of address generating module (4011), configured to generate, by using a one-way function operation, an interface identifier by using a home address of the mobile node (401) as an input; and identifying the interface with an external network accessed by the mobile node (401) The prefix combination generates a care-of address;

a key generation module (4012), configured to use the home address and the referral together with the communication node (402) The care-of address generated by the address generation module (4011) performs a return route reachability process, and then generates a binding management key; an authorization data generating module (4013) for binding management generated by the key generation module (4012) Key generation binding authorization data;

a sending module (4014), configured to send a binding update message including the home address, the care-of address generated by the care-of address generating module (4011), and the binding authorization data generated by the authorization data generating module (4013) to The communication node (402);

The communication node (402) includes:

a key generation module (4021), configured to perform a return route reachability process together with the mobile node (401) using the home address and the care-of address generated by the care-of address generation module (4011), and then generate a a binding management key generated by the key generation module (4012) of the mobile node (401) with the same binding management key;

An authorization data generating module (4022), configured to generate binding authorization data by using a binding management key generated by a key generation module (4021) of the communication node (402);

a receiving module (4023), configured to receive a binding update message sent by the sending module (4013);

a matching module (4024), configured to bind the binding authorization data in the binding update message received by the receiving module (4023) with the authorization data generating module (4022) of the communication node (402) Authorization data for comparison;

a control module (4025), configured to allow the mobile node when the comparison module (4024) compares the results

(401) Communicate with the communication node (402) in the route optimization mode.

21. The system for improving route optimization security according to claim 20, wherein said communication node

(402) also includes:

a care-of address matching module, configured to extract a home address of the mobile node (401) from a binding update message received by the receiving module (4023) before comparing the comparison module (4024), And generating, according to the home address, a temporary care-of address according to the method that the care-of address generation module (4011) generates the care-of address, and verifying whether the temporary care-of address is consistent with the care-of address in the binding update message. If it is consistent, the comparison module (4024) is triggered to work.

A system for improving the security of route optimization, characterized in that the system comprises a mobile node (601) and a communication node (602), the mobile node (601) comprising:

a care-of address generating module (6011), configured to generate an interface identifier by using a one-way function operation with the home address of the mobile node (601) as an input; and identifying the interface with an external network accessed by the mobile node (601) The prefix combination generates a care-of address, and the home address is generated by a cryptographic method;

Returning a route reachable execution module (6012), configured to perform a return route reachability process together with the communication node (602) using the home address and the care-of address generated by the care-of address generation module (6011); An authorization data generating module (6013), configured to sign, by using a private key of the mobile node (601), a binding update message as binding authorization data of the binding update message;

a sending module (6014), configured to send the binding update that includes the home address, the care-of address generated by the care-of address generating module (6011), and binding authorization data generated by the authorization data generating module (6013) Sending a message to the communication node (602), and carrying the public key of the mobile node (601) in the binding update message;

The communication node (602) includes:

Returning a route reachable execution module (6021), configured to perform a return route reachability process together with the mobile node (601) using the home address and the care-of address generated by the care-of address generation module (6011);

a receiving module (6022), configured to receive a binding update message sent by the sending module (6014);

a verification module (6023), configured to extract a public key of the mobile node (601) in a binding update message received by the receiving module (6022), and verify the same by using a public key of the mobile node (601) Binding authorization data in the binding update message;

The control module (6024) is configured to allow the mobile node (601) to communicate with the communication node (602) in a route optimization mode when the verification module (6023) passes the verification.

23. The system for improving route optimization security according to claim 22, wherein said communication node

( 602) also includes:

a care-of address verification module, configured to extract a home address of the mobile node (601) from a binding update message received by the receiving module (6022) before the verification module (6023) performs verification, and according to the The home address is generated by the method in which the care-of address generation module (6011) generates the care-of address, and generates a temporary care-of address, and verifies whether the temporary care-of address is consistent with the care-of address in the binding update message. , triggering the verification module

( 6023 ) Work.

The system for improving route optimization security according to claim 22, wherein the sending module (6014) is further configured to: in the binding update message, carry the cryptography method to generate the hometown The parameters used in the address;

Correspondingly, the communication node (602) further includes:

a home address verification module, configured to extract the parameter from a binding update message received by the receiving module (6022) before the verification module (6023) performs verification, and use the cryptography according to the parameter The method generates a temporary home address, and verifies whether the temporary home address is consistent with the home address in the binding update message. If they are consistent, the verification module (6023) is triggered to work.

25. The system for improving route optimization security according to claim 22, wherein the control module

( 6024) Specifically includes: a new authorization data generating unit, configured to: when the verification module (6023) passes the verification, generate a random number, encrypt the random number with a public key of the mobile node (601); After the communication node (602) combines the handover secret generation token generated in the process of performing the return route reachability, the one-way function is used to generate a new binding management key; and then the new binding management key is used to generate a new Bind authorization data;

a binding confirmation message sending unit, configured to send a binding confirmation message to the mobile node (601), where the binding confirmation message carries the encrypted number encrypted by the new authorization data generating unit and the generated new binding Authorization data;

Correspondingly, the mobile node (601) further includes:

a binding confirmation message receiving module, configured to receive a binding confirmation message sent by the binding confirmation message sending unit, and a binding confirmation message verification module, configured to: when the binding confirmation message receiving module receives the binding After confirming the message, extracting the encrypted random number, and decrypting with the private key of the mobile node (601), obtaining the random number; generating the location according to the random number and the new authorization data generating unit The method of the same new binding management key generates a temporary binding management key, and generates a same method according to the temporary binding management key by generating the new binding authorization data by the new authorization data generating unit. Temporarily binding the authorization data, and then comparing whether the temporary binding authorization data is consistent with the new binding authorization data in the binding confirmation message;

a control module, configured to allow the mobile node when the binding confirmation message verification module matches the result of the comparison

(601) Communicate with the communication node (602) in route optimization mode.