Method and system for safe fast switching

Abstract

The invention relates to a safe and fast switch method and a system, comprising: building a safe union between a moving node and an access router of objective network before fast switch; using the safe union to ensure the moving node safely accessed to NAR in the fast switch process of the moving node. The device comprises: a safe union building unit and a safe guard protection executing unit. According to the invention, through adjusting the required parameters in key generation in the fast switch process (namely first building the safe union between the moving node and NAR), the process of generating the sharing key is optimized in the fast switch, thereby ensuring the safe mechanism in data transmission not to affect the fast switch flow, and causing he switch process in a controlled range of the network.

Description

technical field [0001] The invention relates to mobile communication technology, in particular to a method and system for safe and fast switching. Background technique [0002] The mobile IP version 6 (MIPv6, Mobile IP version 6) protocol is a mobile solution proposed by the Internet Engineering Task Force (IETF, Internet Engineering Task Force), which can make the mobile node (MN, Mobile Node) maintain Communication is not interrupted, but it also brings problems such as switching delay and security. [0003] During the handover process, there is a period when the MN cannot determine whether to send or receive data packets, and this period is called handover delay. The main reasons for the handover delay are the delay in the link handover and the operation process of the MIPv6 protocol, such as movement detection, new care-of address (CoA, Care-of Address) configuration, binding update, and so on. In real-time applications such as Voice over IP (VoIP), handover delays are...

AI Technical Summary

Problems solved by technology

[0027] 1. The security mechanism of the existing technology does not generate the shared key completely according to the existing AAA architecture. This asymmetric key generation mechanism is quite different from the existing mechanism, which is not conducive to implementation; at the same time, generating the shared key The calculation of the key is relatively large, which will consume a large amount of computing resources of MN and AR;

[0028] 2. During the handover process, the AAA server is completely unaware of the above-mentioned shared key, which is not conducive to the operator's management of MN handover;

[0029] 3. In the fast switching of the existing prediction mode, if the MN does not receive the FBAck message sent by the PAR, it cannot switch, and the computing resources of the NAR for the shared key are wasted;

[0030] 4. In the rapid switching of the existing reactive mode, security issues will cause switching delays

Images