The coupling of mobility and quality-of-service with security is a challenge that should be addressed in future wireless overlay systems. The mobility of a node can disrupt or even intermittently disconnect an ongoing real-time session because a secure handover must be performed to ensure continuous connectivity. The duration of the such interruptions is called disruption time or handover delay and can heavily affect the user satisfaction. The handover procedure needs to protect its integrity and confidentiality-otherwise, the packets may be rerouted to a malicious node and the legitimate handover may not be performed. The security procedure to ensure this should not lengthen significantly the handover delay to provide good quality real-time services. In this paper, we focus on the network-layer mobility, specifically, on Mobile Internet protocol version 6 (MIPv6) since it is the natural candidate for providing such mobility in future systems. To solve the problem of on-path attackers and prevent leakage of secrets, we propose a security architecture for MIPv6 based on leakage resilient-authenticated key establishment (LR-AKE) protocol and its cooperation with public key infrastructure. The proposed architecture prevents against on-path attackers which was not addressed in the specifications of MIPv6, and also provides robustness against leakage of secret values. Using analytical models, we evaluate MIPv6 handover delay for real-time services. We identify the crucial factors affecting the handover delay among transmission delays of MIPv6, security and LR-AKE messages, queueing delays and en/decryption delays.
[1]
Donald E. Eastlake,et al.
US Secure Hash Algorithm 1 (SHA1)
,
2001,
RFC.
[2]
Stephen T. Kent,et al.
Security Architecture for the Internet Protocol
,
1998,
RFC.
[3]
Sajal K. Das,et al.
Performance Optimization of VoIP Calls over Wireless Links Using H.323 Protocol
,
2003,
IEEE Trans. Computers.
[4]
Hugo Krawczyk,et al.
A Security Architecture for the Internet Protocol
,
1999,
IBM Syst. J..
[5]
SeongHan Shin,et al.
Leakage-Resilient Authenticated Key Establishment Protocols
,
2003,
ASIACRYPT.
[6]
Charles E. Perkins,et al.
IP Mobility Support
,
1996,
RFC.
[7]
Pekka Nikander,et al.
Mobile IP Version 6 Route Optimization Security Design Background
,
2005,
RFC.
[8]
Charles E. Perkins,et al.
Mobility support in IPv6
,
1996,
MobiCom '96.
[9]
Sajal K. Das,et al.
Performance optimization of VoIP calls over wireless links using H.323 protocol
,
2002,
Proceedings.Twenty-First Annual Joint Conference of the IEEE Computer and Communications Societies.
[10]
SeongHan Shin,et al.
Efficient and Leakage-Resilient Authenticated Key Transport Protocol Based on RSA
,
2005,
ACNS.
[11]
Randall J. Atkinson,et al.
IP Encapsulating Security Payload (ESP)
,
1995,
RFC.
[12]
Dan Harkins,et al.
The Internet Key Exchange (IKE)
,
1998,
RFC.