Method for binding update in mobile ipv6 and mobile ipv6 communication system
AssigneeHuawei Technologies Co., Ltd.
InventorChunqiang Li
Life of this patent
Estimating the term…
Abstract
A method for binding update in the mobile IPv6 is provided. After a binding management key is obtained in a return routability procedure, a home address (HoA) in a binding update (BU) packet is sent in a form of an encrypted option. In the BU process, an HoA index may also be bound. A corresponding mobile IPv6 communication system and a mobile node (MN), a correspondent node (CN), and a home agent (HA) in the communication system are also provided. Thus, the HoA appears only once in an encrypted form in a packet sent to the CN in the BU process, thereby improving the security of the HoA in the BU process.
Claims19
A mobile node (MN) in an IPv6 communication system, comprising:
- a first return routability unit, adapted to perform a return routability procedure (RRP) comprising obtaining keygen tokens from a correspondent node (CN);
- a binding management key (Kbm) unit, adapted to calculate and generate the Kbm based on the keygen tokens;
- and
- a first binding update (BU) unit, adapted to send a BU message to the CN by using a substitute of home address (SHoA) to replace a home address (HoA) of the MN, and carry the HoA encrypted with the Kbm in the BU message.
The MN in an IPv6 communication system according to 1, wherein the BU message further comprises a sequence number;
- and
- the MN further comprises a first sequence number unit adapted to obtain a current sequence number by adding a previous sequence number and a current sequence number increment, and the current sequence number increment is calculated according to the Kbm and the previous sequence number or a previous sequence number increment.
A method for binding update in the mobile IPv6, comprising:
- sending, by a mobile node (MN), a binding update (BU) message to a correspondent node (CN) from a substitute of home address (SHoA), wherein the BU message carries a home address (HoA) encrypted with a binding management key (Kbm), and the Kbm is generated based on keygen tokens received from the CN in a return routability procedure (RRP);
- and
- binding, by the CN, the SHoA, the HoA, and a care-of address (CoA) according to the BU message.
The method for binding update in the mobile IPv6 according to 5, wherein the BU message further comprises a sequence number, the sequence number is a sum of a previous sequence number and a sequence number increment, and the sequence number increment is calculated according to the Kbm and the previous sequence number or a previous sequence number increment.
A mobile IPv6 communication system, comprising a mobile node (MN), a correspondent node (CN), and a home agent (HA), wherein,
- the MN is adapted to send a Care-of Test Init (CoTI) message to the CN, send a Home Test Init (HoTI) message to the HA, receive a Care-of Test (CoT) massage containing a care-of keygen token returned by the CN, receive a Home Test (HoT) message containing a home keygen token forwarded by the HA, generate a binding management key (Kbm) based on the home keygen token and the care-of keygen token, add an encrypted home address (HoA) option carrying an HoA encrypted with the Kbm in a BU message, and send the BU message from a substitute of home address (SHoA) which is used to replace the HoA;
- the HA is adapted to forward the HoTI message to the CN, with carrying the SHoA in a destination option extension header containing an SHoA option of the HoTI message, receive the HoT message sent by the CN, search for the corresponding HoA of the MN according to the SHoA in a Type-2 routing header of the HoT message, and forward the HoT message to the MN in a tunnel mode;
- and
- the CN is adapted to receive the HoTI message forwarded by the HA, replace the HoA with the SHoA to generate the home keygen token, return the HoT message containing the home keygen token to the HA, and carrying the SHoA in the Type-2 routing header of the HoT message, and bind the SHoA, the HoA, and a care-of address (CoA) according to the BU message.
A correspondent node (CN) in an IPv6 communication system, comprising:
- a second return routability unit, adapted to perform a return routability procedure (RRP) comprising returning keygen tokens to a mobile node (MN) in the RRP;
- a binding management key (Kbm) unit, adapted to calculate and generate the Kbm based on the keygen tokens;
- and
- a second binding update (BU) unit, adapted to obtain a home address (HoA) of the MN encrypted with the Kbm from a BU message sent by the MN, and bind a substitute of home address (SHoA) of the MN, the HoA of the MN, and a care-of address (CoA) of the MN.
The CN in an IPv6 communication system according to 16, wherein the BU message further comprises a sequence number;
- and
- the CN further comprises a second sequence number unit adapted to obtain a current sequence number by adding a previous sequence number and a current sequence number increment, and the current sequence number increment is calculated according to the Kbm and the previous sequence number or a previous sequence number increment.
Dependencies are inferred from the claim text.