Abstract: The openness of wireless links and the mobility of nodes in mobile IP bring potential security threats to the registration of mobile nodes. To address the problem of registration security of mobile nodes, a USBKey aided registration authentication protocol is proposed. The protocol protects the mobile node’s private key through the USBKey to enhance the security of mobile registration, and realizes the authentication of relevant protocol entities and encryption of registration information by combining the digital envelope technology and digital signature technology. The analysis shows that the protocol can guarantee the integrity and confidentiality of the registration information, effectively resist the common security attack, ensure the registration security of the mobile nodes, and has less registration authentication delay than that of the related protocols.

Key words: USBKey, mobile IP, authentication, registration security

摘要： 移动IP中无线链路的开放性和节点的移动性，给移动节点的注册带来潜在的安全威胁。针对移动节点的注册安全问题，提出了一种USBKey辅助的注册认证协议。该协议通过USBKey保护移动节点的私钥以加强移动注册的安全性，结合数字信封技术与数字签名技术，实现相关协议实体的身份认证和注册信息的安全保护。分析结果表明，该协议可保证注册信息的完整性和机密性，可以有效抵御常见的安全攻击，保证移动节点的注册安全，并且比多数相关协议的注册认证迟延更小。

关键词: USBKey, 移动IP, 身份认证, 注册安全