Distributing a Symmetric Fast Mobile IPv6 (FMIPv6) Handover Key Using SEcure Neighbor Discovery (SEND)
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 14
- Abstract
- Fast Mobile IPv6 requires that a Fast Binding Update is secured using a security association shared between an Access Router and a Mobile Node in order to avoid certain attacks. In this document, a method for provisioning a shared key from the Access Router to the Mobile Node is defined to protect this signaling. The Mobile Node generates a public/private key pair using the same public key algorithm as for SEND (RFC 3971). The Mobile Node sends the public key to the Access Router. The Access Router encrypts a shared handover key using the public key and sends it back to the Mobile Node. The Mobile Node decrypts the shared handover key using the matching private key, and the handover key is then available for generating an authenticator on a Fast Binding Update. The Mobile Node and Access Router use the Router Solicitation for Proxy Advertisement and Proxy Router Advertisement from Fast Mobile IPv6 for the key exchange. The key exchange messages are required to have SEND security; that is, the source address is a Cryptographically Generated Address (CGA) and the messages are signed using the CGA private key of the sending node. This allows the Access Router, prior to providing the shared handover key, to verify the authorization of the Mobile Node to claim the address so that the previous care-of CGA in the Fast Binding Update can act as the name of the key. [STANDARDS-TRACK]
- Publication Date
- 2008-06-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC5269- Link
- https://doi.org/10.17487/RFC5269
- Author(s)
- James KempfRajeev Koodli
- Keyword(s)
- FMIPv6
Latest version of IETF RFC 5269
Document Versions — IETF RFC 5269
-
▶ IETF RFC 5269 (2008-06-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 3447 [Superseded*]
- IETF RFC 3971 [Active*]
- IETF RFC 3972 [Active*]
- IETF RFC 4861 [Active*]
- IETF RFC 5268 [Superseded*]
Bibliographic Reference(s)
- Bradner, S., Mankin, A., and Schiller, J., "A Framework for Purpose-Built Keys (PBK)", Work in Progress, June 2003. Progress. EXTERNAL
- IETF RFC 3756 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC5269.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 5269, Distributing a Symmetric Fast Mobile IPv6 (FMIPv6) Handover Key Using SEcure Neighbor Discovery (SEND). Available at https://doi.org/10.17487/RFC5269
Snippet:
IETF RFC 5269, Distributing a Symmetric Fast Mobile IPv6 (FMIPv6) Handover Key Using SEcure Neighbor Discovery (SEND). Available at https://doi.org/10.17487/RFC5269
HTML (ISO 690 compliant)
Preview:
IETF RFC 5269, Distributing a Symmetric Fast Mobile IPv6 (FMIPv6) Handover Key Using SEcure Neighbor Discovery (SEND). Available at https://doi.org/10.17487/RFC5269
Snippet:
<span class="citation"><cite>IETF RFC 5269</cite>, Distributing a Symmetric Fast Mobile IPv6 (FMIPv6) Handover Key Using SEcure Neighbor Discovery (SEND). Available at <a href="https://doi.org/10.17487/RFC5269" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5269</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 5269, Distributing a Symmetric Fast Mobile IPv6 (FMIPv6) Handover Key Using SEcure Neighbor Discovery (SEND)
doi: 10.17487/RFC5269
url: https://doi.org/10.17487/RFC5269
doi: 10.17487/RFC5269
url: https://doi.org/10.17487/RFC5269
Snippet:
<li> <cite id="bib-rfc5269">IETF RFC 5269</cite>, Distributing a Symmetric Fast Mobile IPv6 (FMIPv6) Handover Key Using SEcure Neighbor Discovery (SEND) <span class="doi">10.17487/RFC5269</span> </li>
Referenced By
- IETF RFC 5268 [Superseded*]
- IETF RFC 5568 [Active*]