Authentication for Mobile IPv6

We present a protocol for authenticating Mobile IPv6 connections, addressing requirements established in the relevant Internet Draft [2]. The protocol imposes minimal computational requirements on mobile nodes, uses as few messages as possible, and may be adapted to resist denial of service attacks. Our protocol has two parts, an initialization phase and an update phase. The initialization phase can take advantage of local public-key infrastructure, a bidirectional chain of trust, or operate without prior authenticating information. Each execution of the update phase uses the shared secret established in the previous phase to maintain security of the mobile connection. We have formally verified the correctness of the protocol using the finite-state analysis tool Mur , which has been used previously to analyze hardware designs and security properties of several protocols.