Mobile IPv6 based household network accessing method and its network appliance

Abstract

The invention provides a mobile IPv6-based home network access control method and the network device thereof. And the method comprises: a). an access node to make communication registering with home agent; b). according to the registering result, generating home network access list and recording home address of the access node and binding relation of source address of the network where the access node exists; and c). packeting IP accessing home network and extracting its home address and source address and making matching check for them and some binding item in the access list, to determine whether to allow home network device to access. And the invention uses mobile IPv6 technique, and filters data packets accessing home network in the home network implementation place to be able to implement control of safe access of access nodes of external networks to home network devices, thus simple to implement and having good extensibility.

Description

technical field [0001] The invention relates to the technical field of data communication, in particular to a method and equipment for accessing a local area network in a mobile IPv6 environment. Background technique [0002] With the rapid development of communication and other technologies, the networking and interconnection of household electronic equipment is becoming more and more obvious. In addition to the rapid development of the Internet (Internet), IPv6 and related technologies are becoming more and more mature. IPv6 can provide a huge available address space. All electronic devices can have an addressable IPv6 address, and the home network becomes an always-on network. [0003] Figure 1 is a schematic diagram of a typical home network and its access. Electronic devices (such as computers, TVs, air conditioners, refrigerators, etc.) Access to external network resources, for example: the video service provided by the video server 131 of the network service provider...

AI Technical Summary

Problems solved by technology

[0007] Alternatively, a secure channel is established between the access node (not shown in the figure) of the external mobile network device 112 or the third-party access device 140 and the access node 121 of the visited home network 100. At this time, the external access device You can access any device on the home network at will, and this method has the following defects: (1) Poor scalability: because it requires all nodes in the Internet network to support the rules for establishing secure channels, which is actually impossible; (2) Complicated implementation: It is necessary to define a new message or protocol for establishing a secure channel between access nodes; (3) there is a potential attack: since the secure channel is only between two access nodes, there is a situation where the external access device 112 or After accessing the access node of 140, there may be counterfeit devices in the same subnet to attack the home network

Images