Lightweight Secure Neighbor Discovery Protocol for Low-Power and Lossy Networks

A network component comprising:

• a receiver at a host configured to receive a router advertisement (RA) from a router;
• a processor configured to generate a public key for the host using Elliptic Curve Cryptography (ECC) and to generate a cryptographically generated address (CGA) using the ECC generated public key and an elliptic curve digital signature algorithm (ECDSA);
• and
• a transmitter configured to send the ECC generated public key and the ECDSA generated CGA to the router in a unicast neighbor solicitation (NS) message.

A method implemented by a network apparatus comprising:

• sending a router advertisement (RA) message to a host node;
• receiving a neighbor solicitation (NS) message for address registration comprising a cryptographically generated address (CGA) parameters and digital signature option from the host node;
• registering a CGA for the host node that is indicated in the NS message in a neighbor cache;
• and
• sending a neighbor advertisement (NA) message to inform the host node of successful registration.