MIPv6 Binding Lifetime Extension MOBOPTS RG IRTF/IETF-60 Jari Arkko - - PowerPoint PPT Presentation

mipv6 binding lifetime extension
SMART_READER_LITE
LIVE PREVIEW

MIPv6 Binding Lifetime Extension MOBOPTS RG IRTF/IETF-60 Jari Arkko - - PowerPoint PPT Presentation

MIPv6 Binding Lifetime Extension MOBOPTS RG IRTF/IETF-60 Jari Arkko (jari.arkko@nomadiclab.com) Christian Vogt (chvogt@tm.uka.de) 1 Outline of the Presentation Reasons for optimization RFC 3775 approach to lifetimes Our proposed


slide-1
SLIDE 1

1

MIPv6 Binding Lifetime Extension

MOBOPTS RG IRTF/IETF-60 Jari Arkko (jari.arkko@nomadiclab.com) Christian Vogt (chvogt@tm.uka.de)

slide-2
SLIDE 2

2

Outline of the Presentation

  • Reasons for optimization
  • RFC 3775 approach to lifetimes
  • Our proposed alternative approach

Simple - no config, no fancy crypto, one new option Based on exponentially earned lifetime credit

  • Analysis

Up to 70-fold decrese in amount of signaling

slide-3
SLIDE 3

3

Reasons for Optimizations

slide-4
SLIDE 4

4

Reasons for Optimization

  • RFC 3775 RR efficiency:

– Generally requires 6 messages (376 bytes) – These are per movement and per peer – And two round-trips

  • Not a problem for current normal usage

– Not issue upon movements because the rest of stack uses even more messages

  • However, it can still be an issue when

– Nodes don’t move that often – The rest of the stack becomes faster

slide-5
SLIDE 5

5

Nodes that do not move often

  • Movement frequencies

– Movement is inherently infrequent on many link layers (GSM, UMTS, CDMA) – While frequent movements can happen on some link layers (WLAN), it is unlikely to be the most common case

  • RFC 3775 RR causes 7.16 bits/s, if a

node wishes to keep its RO state up

  • This is not that significant, but waking

up every few minutes may be

slide-6
SLIDE 6

6

RFC 3775 Approach to Lifetimes

slide-7
SLIDE 7

7

RFC 3775 Approach to Lifetimes

time Movement

slide-8
SLIDE 8

8

RFC 3775 Approach to Lifetimes

time RR protocol exchange Movement

slide-9
SLIDE 9

9

RFC 3775 Approach to Lifetimes

time Binding expires RR protocol exchange Movement

slide-10
SLIDE 10

10

RFC 3775 Approach to Lifetimes

time Binding expires RR protocol exchange Movement Lifetime max 7 minutes

slide-11
SLIDE 11

11

Why Have the Max Limit?

  • It limits so called time shifting attacks
  • If there was no limit, I could visit your

network today and launch an amplified DoS attack on it next month

  • With current RR, you have to have very

recent physical presence to do it

slide-12
SLIDE 12

12

Our Proposed Alternative Approach

slide-13
SLIDE 13

13

The Basic Idea

  • RFC 3775 rationale for limiting lifetimes

is valid but there are other ways to do it besides the fixed limit

  • We apply a “lifetime credit” based limit
  • A node that just appeared for the first

time gets a very short lifetime

  • A node that has been on the same

place for a long time will get a longer lifetime

slide-14
SLIDE 14

14

The Exponentially Growing Lifetime

time Movement

slide-15
SLIDE 15

15

The Exponentially Growing Lifetime

time 1st RR run Movement Lifetime0= 2 min

slide-16
SLIDE 16

16

The Exponentially Growing Lifetime

time 2nd RR run 1st RR run Movement Lifetime0= 2 min Lifetime1= 3 min

slide-17
SLIDE 17

17

The Exponentially Growing Lifetime

time nth RR run 3rd RR run 2nd RR run 1st RR run Movement Lifetime0= 2 min Lifetime1= 3 min Lifetimen= 8 hrs

slide-18
SLIDE 18

18

Protocol Details

  • The Lifetime Credit Authorization

mobility option (inside a BU) carries the request for using this type of lifetimes

  • Includes an authenticator which shows

knowledge of all past Kbm values at this location

– Kcredit = hash(KbmN | hash(KbmN-1 | …))

  • Movement resets the lifetime back to its

initial value

slide-19
SLIDE 19

19

Analysis

slide-20
SLIDE 20

20

Security

  • We argue that this lifetime assignment -- even

if different from RR -- is at least as fair and secure as in RR

– First binding(s) after a movement have smaller lifetime than in RR -- less exposure to time shifting attacks – Subsequent bindings can have a large (up to 8 hrs) lifetime – But the involved nodes must have “invested” physical presence on the link to achieve this for much longer time (at least 24 hrs)

slide-21
SLIDE 21

21

Efficiency

  • For seldomly moving mobile nodes,

there is less signaling

  • 70-fold improvement in the steady state

(from 7 bits/s to 0.1 bits/s)

  • Nodes that expect to stay in one place

at most 7 minutes should use the RFC 3775 method

slide-22
SLIDE 22

22

Questions?