DOI QR코드

DOI QR Code

Performance Analysis of Proxy-AAA Authentication Scheme in PMIPv6 Networks with Forwarding Mode Supporting

Proxy Mobile IPv6 네트워크에서 포워딩 모드를 지원하는 인증기법의 성능분석

  • 이승현 (성균관대학교 일반대학원 전기전자컴퓨터공학과) ;
  • 신동렬 (성균관대학교 정보통신공학부) ;
  • 정종필 (성균관대학교 정보통신공학부)
  • Received : 2011.09.20
  • Accepted : 2011.12.26
  • Published : 2012.02.29

Abstract

Mobile IPv6 (MIPv6) is a host-based protocol supporting global mobility while Proxy Mobile IPv6 (PMIPv6) is a network-based protocol supporting localized mobility. This paper makes its focus on how to reduce the longer delay and extra cost arising from the combination of authentication, authorization and accounting (AAA) and PMIPv6 further. Firstly, a novel authentication scheme (Proxy-AAA) is proposed, which supports fast handover mode and forwarding mode between different local mobility anchors (LMAs). Secondly, a cost analysis model is established based on Proxy-AAA. From the theoretical analysis, it could be noted that the cost is affected by average arrival rate and residence time.

모바일 IP 환경 내 MN의 이동 과정에서 인증은 초기화되고, 이러한 시작점으로부터 과도한 비용이 발생한다는 전제하에 현재까지 연구는 특정 상황에서의 비용 감소의 요구사항을 명확히 제시하지 못하고 있다. 본 논문에서는 이런 점에 착안한 제안 기법은 계층적 AAA (Authorization, Authentication, Accounting)로부터 발전되어 빠른 인증과 Diameter 프로토콜 기반의 모바일 IP를 지원하며, AAA 서버는 LMA (Local Mobility Anchor)에 배치하여 짧고 간단한 빠른 이동 인증과 계층적 인증을 통해 도메인 내 인증에서의 비용을 줄여준다. 제안하는 Proxy-AAA 기법은 기존 인증기법들과 바인딩 업데이트 기법들을 개선하였으며 도메인 내 이동과 인증뿐만 아니라 도메인 간에서도 적용된다. 이를 수학적 모델링과 성능 평가를 통해 기존의 단점을 보완할 수 있음을 보여준다.

Keywords

References

  1. C. de Laat, G. Gross, L. Gommans, L. Gommans, D. Spence, "Generic AAA Architecture," RFC 2903, August 2000.
  2. P. Calhoun, J. Loughney, E. Guttman, G. Zorn, J. Arkko, "Diameter Base Protocol," RFC 3588, September 2003.
  3. A. Mankin, B. Patil, D. Harkins, et al, "Threat Model introduced by Mobile IPv6 and Requirements for Security in Mobile IPv6," draft-ietf-mobileipipv6- scrty-reqts-02.txt, Internet Draft, May 2001.
  4. Le F, Patil B, Perkins C, et al, "Diameter mobile IPv6 application," Internet Draft, 2004.
  5. Lee S Y, Huh E N, Kim S B, et al, "An efficient performance enhancement scheme for fast mobility service in MIPv6," Proceedings of the International Conference on Computational Science and its Applications(ICCSA'05), pp. 628-637, May 2005
  6. Kim M, Kim M, Mun Y, "A hierarchical authentication scheme for MIPv6 node with local movement property," Proceedings of the International Conference on Computational Science and its Applications(ICCSA'05), pp. 550-558, May 2005.
  7. Song Mei, Wang Li, Song Jun-de, "A secure fast handover scheme based on AAA protocol in mobile IPv6 networks," The Journal of China Universities of Posts and Telecommunications, 15(Sup1), pp. 14-18, 2008.
  8. G. Giaretta, "Interactions between PMIPv6 and MIPv6: scenarios and related issues," draft-ietfnetlmm- mip-interactions-04, June 2009.
  9. J. -F. Guan, et al, "Implementation and analysis of proxy MIPv6," WCM, September 2009.
  10. D. -G. Anderson, "Improving end-to-end availability using overlay networks," Massachusetts Institute of Technology, February 2005.
  11. Jain R, Raleigh T, Graff C, et al, "Mobile Internet access and QoS guarantees using mobile IP and RSVP with location registers," Proceedings of International Conference on Communications(ICC'98), Vol 3, pp. 1690-1695, June 1998.
  12. Lee K, Mun Y, "An efficient macro mobility scheme supporting fast handover in hierarchical mobile IPv6," Proceedings of the International Conference on Computational Science and its Applications (ICCSA'05), pp. 408-417, May 2005.