关键词: 移动IPv6，接入认证，切换性能，组合公钥，基于身份签名

Abstract: To Mobile IPv6 networks, identify authentication is crucial issues of the network security. This paper proposed a secure identify authentication scheme, which considers inters domain reputation relationship between mobile node home domain and the access domain in the prchandoff procedure and realizes effective mutual authentication between mobile node(MN) and the access domain. Authentication can be accomplished by double private key, HA and MN signing the home registration messages respectively. The access authentication can be accomplished in the visited network instead of the home network, and the handover procedure integrating authentication only needs one round trip.Thcoretical analysis and numerical results show that proposed scheme is more effective in reducing total authentication and handoff delay and the signaling overhead than relative schemes. Based on the security of CPK algorithm and IBS,we prove the access authentication and home registration process handover latency of ours is better than that of the existing solutions and our solution satisfies mutual authentication security,resolves the key escrow efficiently.

Key words: Mobile IPv6, Access authentication, Handover performance, Combined public-key, Identity-based signature