Policy-Based Distributed Security Management Scheme in MIPv6

Security has become a critical requirement of MIPv6 which will play an important role in next generation mobile network. Although some effective solutions have been proposed, but there is still a serious problem existed which concerns about security compatibility between MIPv6 node (MN) and the access network (AN). A policy-based distributed security management method is presented to solve this problem. A distributed defensive structure is integrated with MIPv6 to build a policy-based distributed architecture. Security policies can be exchanged within or between different security domains during MNpsilas movement, so a dynamic security management scheme can be set up against the topology change of AN. Experiment shows the feasibility of our proposal.