Certificate-based Binding Update Protocol (CBU)

1
Certificate-based Binding Update Protocol (CBU)

• draft-qiu-mip6-certificated-binding-update-02.txt
• Feng Bao
• Robert Deng
• Ying Qiu
• Jianying Zhou
• Institute for Infocomm Research (I2R)

2
Do we trust SSL?

• Of Course.
• SSL is successful and efficient.

What are the features of SSL?

• Use strong cryptosystem
• Fewer certificates involved
• (only servers are required certificates and the
  correspondent clients are not)

3
SSL Framework

Embedded the public certificates of CAs,
i.c. GlobalSign MS SecureNet VeriSign
Certificate signed by a CA, e.g. GlobalSign MS
SecureNet VeriSign

Fragment PKI
4
SSL vs CBU

• SSL framework

CBU framework
5
Design Consideration/Goal

• MN authenticates itself to CN sets up a key for
  secure BU
• Employs PKC, secure against powerful intruder
• No PKC operations performed at MNs
• Issue certificate for home link, not MNs (i.
  e., public key binds with home link, not with
  individual IP address)

6
Protocol
EXCH0 contains HAs signature on HoA, gx and a
time stamp it testifies that HoA belongs to HA,
authenticates gx to CN
HA is a security proxy of MN, its transparent to
CN
7
Benefits

• Strong cryptosystem
• Do not need the certificates of mobile devices
• Against session hijacking
• Against MN flooding
• More suitable for fast handover
• Reduce the computing and communication
  requirements on the mobile devices
• High overall performance