Mobile IPv6 Security Framework Using Transport Layer Security for Communication between the Mobile Node and Home Agent
RFC 6618, “Mobile IPv6 Security Framework Using Transport Layer Security for Communication between the Mobile Node and Home Agent”, is an Experimental document published in May 2012 by J. Korhonen, B. Patil, H. Tschofenig, D. Kroeselberg. The canonical text is published by the RFC Editor.
Abstract
Mobile IPv6 signaling between a Mobile Node (MN) and its Home Agent (HA) is secured using IPsec. The security association (SA) between an MN and the HA is established using Internet Key Exchange Protocol (IKE) version 1 or 2. The security model specified for Mobile IPv6, which relies on IKE/IPsec, requires interaction between the Mobile IPv6 protocol component and the IKE/IPsec module of the IP stack. This document proposes an alternate security framework for Mobile IPv6 and Dual-Stack Mobile IPv6, which relies on Transport Layer Security for establishing keying material and other bootstrapping parameters required to protect Mobile IPv6 signaling and data traffic between the MN and HA. This document defines an Experimental Protocol for the Internet community.
What “Experimental” means
Describes a specification that is part of a research or development effort, published so the community can gain experience with it.
The canonical text of RFC 6618 is hosted at rfc-editor.org. Available in TXT,HTML.
- RFC 6617 Secure Pre-Shared Key Authentication for the Internet Key Exchange Protocol
- RFC 6619 Scalable Operation of Address Translators with Per-Interface Bindings
- RFC 6616 A Simple Authentication and Security Layer and Generic Security Service Application Program Interface Mechanism for OpenID
- RFC 6620 FCFS SAVI: First-Come, First-Served Source Address Validation Improvement for Locally Assigned IPv6 Addresses
- RFC 6615 Definitions of Managed Objects for IP Flow Information Export
- RFC 6621 Simplified Multicast Forwarding
- RFC 6614 Transport Layer Security Encryption for RADIUS
- RFC 6622 Integrity Check Value and Timestamp TLV Definitions for Mobile Ad Hoc Networks