Browse > Article
http://dx.doi.org/10.3745/KIPSTC.2006.13C.3.267

Improving SUCV Protocol for the Secure Binding Update in MIPv6  

Won You-Seuk (단국대학교 대학원)
Cho Kyung-San (단국대학교 정보컴퓨터학부)
Abstract
The process of binding update for the routing optimization in MIPv6 can make the involved MN (Mobile Node) and CN(Correspondent Node) vulnerable to various attacks. Therefore, securing binding update process becomes an important research issue in the MIPv6, and several secure binding update protocols have been proposed. In this paper, we compare several existing binding update protocols, and analyze the vulnerability of MNs and CNs to the possible attacks and the management overhead of the SUCV(Statistic Uniqueness and Cryptographic Verifiability) which is considered to be superior to other protocols. Then, we propose an advanced protocol to resolve above drawbacks. Through the detailed analysis, we show that our protocol can reduce the computational overhead of MN, enable better management, and achieve a higher level of security against the redirect attacks, DoS(Denial of Service) attacks and brute force attacks, compared to SUCV.
Keywords
MIPv6; Secure Binding Update; Security; SUCV;
Citations & Related Records
Times Cited By KSCI : 3  (Citation Analysis)
연도 인용수 순위
1 T. Aura, et al., 'Cryptographically Generated Addresses (CGA),' dralt-aura-cga-00.txt, 2003. Work in progress
2 T. Koskiahde, 'Security in Mobile IPv6,' Tampere University of Technology, 2002
3 G. O'Shea and M. Roe, 'Child-proof authentication for MIPv6(CAM),' ACM Computer Communication Review, 2001   DOI
4 II-Sun You, YouSeuk Won, Kyungsan Cho, 'A Security Based Protocol for Authentication the Mobile IPv6 Binding Updates,' The KIPS Transactions: Part C, Vol.11, No.5, pp.605-612, 2004
5 Aura, T, Nikander, P. Leiwo. 'DoS-resistant authentication with client puzzles,' Proc. of the Security Protocols Workshop 2000, (Lecture Notes in Computer Science, Vol. 2133) pp.170-181, 2000
6 M. Roe, T. Aura, G. O'Shea, and J. Arkko, 'Authentication of Mobile IPv6 Binding Updates and Acknowledgments,' , 2002. Work in progress
7 R. Deng, et al., 'Defending Against Attacks in Mobile IP,' Proc. of ACM CCS '02, pp.59-67, 2002
8 S. Okazaki, et aI., 'Securing MIPv6 Binding Updates Using Address Based Keys (ABKs),' draft-okazaki-mobileipabk- 01.txt, 2002. Work in progress
9 D. Johnson and C. Perkins, 'Mobility Support in IPv6,' IETF RFC 3775, 2004
10 G. Montenegro, C. Castelluccia, 'Crypto-Based Identifiers (CBIDs): Concepts and Applications,' ACM Transations on Information and System Security, Vol.7, No.1, pp.97-127, 2004   DOI
11 G. Montenegro, C. Castelluccia, 'SUVC IDentifiers and Addresses,' , 2001. Work in progress
12 엄희용, 조경산, 'Mobile IPv6의 빠른 핸드오버 기법의 성능 개선', 한국시뮬레이션학회논문지, 제11권 제1호, pp.1-9, 2002   과학기술학회마을
13 원 유석, 조 경산, 'MIPv6의 안전한 바인딩 갱신을 위한 프로토콜 비교 분석', 정보처리학회 논문지, 제10-C권 제6호, pp.755-762, 2003   과학기술학회마을   DOI
14 이광수, 'MIPv6에서의 바인딩 갱신 인증', TTA 저널, 제 81호, pp.56-65, 2001   과학기술학회마을