Improvement of Return Routability Protocol

draft-qiu-mip6-RR-improvement-00.txt

Institute for Infocomm ResearchSingapore

Outline

• Three attacks to RR.

• Our Improvement to RR.

MN2

CN / Server

MN1

Intruder

MN3

Intruder• Collect HoTs and CoTs

at the server edge• Randomly form Kbu• Send BU to CN• Random redirection

Traffic Permutation Attacks

Session Hijacking Attacks

MN1

CN

MN2

Intruder

HA

HoTM

N1

FWD

HoT

MN

1

CoTI MN2 / CoTMN2

Intruder• Get HoTMN1

• MN2 send its own CoTIMN2 and get CoTMN2

• MN2 forges as MN1

Movement Halting Attacks

CoTold

HoTnew

CN / Server

CoA

Intruder

CoA’

Intruder• Get old CoT• Get new HoT’• Form valid Kbu• Redirect to old CoA

HoT’

CoT

The Improvement • HoA and CoA are bound together

HoTI = {HoA, CNA, CoA, HomeInitCookie } CoTI = {CoA, CNA, HoA, CareInitCookie }

HomeKeygenToken = HMAC_SHA1(Kcn, (HoA|Nj|CoA|0)) CareKeygenToken = HMAC_SHA1(Kcn, (CoA|Ni|HoA|1))

Advantages:• Prevent the 3 attacks• No additional cost• No change of RR protocol architecture

Thank You!