Abstract: In order to solve the authentication problem among nodes in the hierarchical MIPv6 handoff, a new fast hierarchical handoff-based authentication mechanism is proposed in MIPv6. By making use of improved identity-based signature scheme and the hierarchical structure of network, the two-way authentication and switching performance between mobile node and the new domain are expounded respectively from two perspectives of intra-domain and inter-domain handoff. The results of analysis show that the proposed fast hierarchical handoff-based authentication mechanism in MIPv6 is highly efficient and safety, and only one message interaction back and forth can achieve the synchronization among handoff, access authentication and binding update.

Key words: mobile IPv6, fast hierarchical handoff, key generation center, authentication, signature, binding update

摘要： 针对移动IPv6（MIPv6）层次化切换中各节点之间的身份认证问题，提出一种新的基于MIPv6快速层次化切换的认证机制。利用改进的IBS签名方案和层次化的网络结构，从域间切换和域内切换两个角度分别论述了移动节点和新访问域之间的双向认证和切换性能的问题。分析结果表明基于MIPv6快速层次化切换的认证机制效率高，安全性好，仅需来回一次消息交互就能实现切换与接入认证和绑定更新的同步。

关键词: 移动IPv6, 快速层次化切换, 密钥生成中心, 认证, 签名, 注册