WP-IBE 적용 Mobile IPSec 연구 = Study on WP-IBE compliant Mobile IPSec

다국어 초록 (Multilingual Abstract)

In the wireless Internet, it is so restrictive to use the IPSec. The MIPv4 IPSec`s path cannot include wireless links. That is, the IPSec of the wireless Internet cannot protect an entire path of Host-to-Host connection. Also wireless circumstance keeps a path static during the shorter time, nevertheless, the IKE for IPSec SA agreement requires relatively long delay. The certificate management of IPSec PKI security needs too much burden. This means that IPSec of the wireless Internet is so disadvantageous. Our paper is to construct the Mobile IPSec proper to the wireless Internet which provides the host-to-host transport mode service to protect even wireless links as applying excellent WP-IBE scheme. For this, Mobile IPSec requires a dynamic routing over a path with wireless links. FA Forwarding is a routing method for FA to extend the path to a newly formed wireless link. The FA IPSec SA for FA Forwarding is updated to comply the dynamically extended path using Source Routing based Bind Update. To improve the performance of IPSec, we apply efficient and strong future Identity based Weil Pairing Bilinear Elliptic Curve Cryptography called as WP-IBE scheme. Our paper proposes the modified protocols to apply 6 security-related algorithms of WP-IBE into the Mobile IPSec. Particularly we focus on the protocols to be applied to construct ESP Datagram.

참고문헌 (Reference)

1 최정현, "전자기밀문서 유출봉쇄 유통시스템 구조 연구" 한국인터넷정보학회 11 (11): 143-158, 2010

2 최정현, "기업비밀유통을 위한 MSEC 기반 그룹 키 관리 프로토콜 설계와 구현 연구" 한국인터넷정보학회 11 (11): 87-110, 2010

3 Salem Itani, "Use of IPSec in Mobile IP" The American Univer- sity of Beirut 2001

4 V. S. Miller, "The Weil Pairing, and Its Efficient Calculation" 17 : 235-261, 2004

5 D. Harkins, "The Internet Key Exchange(IKE)" 2409 : 1998

6 D. Boneh, "The Decision Diffie– Hellman Problem" 48-63, 1998

7 NCSA, "The Case for Elliptic Curve Cryptography"

8 NSA, "Suite B Implementer’s Guide to NIST SP 800-56A"

9 Cheong H, Choi, "Study on IBE-based Crypto- Module Functional Architecture" 419-422, 2010

10 Torsten Braun, "Secure Mobile IP Communication" IEEE Computer Society 586-, 2001

11 M. Bellare, "Relations Among Notions of Security for Public-Key Encryption Schemes, In Advances in Cryptology, CRYPTO '98, Lecture Notes in Computer Science" Springer-Verlag 1998

12 M. Bellare, "Random oracles are practical: A paradigm for designing efficient protocols" 1993

13 H. Choi, "Mobile multi-layered IPsec" 14 (14): 895-913, 2008

14 S. Vaarala, "Mobile IPv4 Traversal across IPsec-Based VPN Gateways" 5265 : 2008

15 G. Appenzeller, "Minimal-Overhead IP Security using Identity Based Encryption"

16 C. Kaufman, "Internet Key Exchange (IKEv2) Protocol" 4306 : 2005

17 F. Baker, "Ingress Filtering for Multihomed Networks" 3704 : 2004

18 D. Boneh, "Identity-Based Encryption from the Weil Pairing" 32 (32): 586-615, 2003

19 Craig A. Shue, "IPSec: Performance Analysis and Enhancements" IEEE 1527-1532, 2007

20 Wei Qu, "IPSec-based secure wireless virtual private network" 2 : 1107-1112, 2002

21 S. Kent, "IP Encapsulat-ing Security Payload(ESP)" 2406 : 1998

22 K. G. Paterson, "ID-based signatures from Pairings on Elliptic Curves"

23 Cheong H. Choi, "IBE based Mobile IP Security" 115-118, 2010

24 Anoop MS, "Elliptic Curve Cryptography"

25 Daniel B. Faria, "Detecting Identity-based Attacks in Wireless Networks Using Signalprints" 43-52, 2006

26 C. Perkins, "Authentication, Authorization, and Accounting (AAA) Registration Keys for Mobile IPv4" 3957 : 2005

27 A. Menezes, "An introduction to pairing-based cryptography"

28 A. Alshamsi, "A Technical Comparison of IPSec and SSL" 2 : 395-398, 2005