A Cross-Layer Key Management Scheme for MIPv6 Fast Handover over IEEE 802.11 Wireless LAN

Abstract

A new key management and security scheme is proposed to integrate Layer Two (L2) and Layer Three (L3) keys for secure and fast Mobile IPv6 handover over IEEE 802.11 Wireless Local Area Network (WLAN). Unlike the original IEEE 802.11-based Mobile IPv6 Fast Handover (FMIPv6) that requires time-consuming IEEE 802.1x-based Extensible Authentication Protocol (EAP) authentication on each L3 handover, the newly proposed key management and security scheme requires only one 802.1x-EAP regardless of how many L3 handovers occur. Therefore, the proposed scheme reduces the handover latency that results from a lengthy 802.1x-based EAP. The proposed key management and security scheme is extensively analyzed in terms of security and performance, and the proposed security scheme is shown to be more secure than those that were previously proposed.

A Comprehensive Review of Enhancements and Prospects of Fast Handovers for Mobile IPv6 Protocol

“…to an AP in the IEEE 802.11 domain), it would require a key at L2 for secure link-layer communications. Similar to [170], another cross-layer based key management scheme is proposed in [171], in which the L2 key is derived from a L3 key in an IEEE 802.11 network. In the proposed scheme, the handover key, which the MN would require at the NAR's subnet, is generated and shared proactively with NAR, while the MN is still connected to the PAR's link.…”