An application of the context transfer protocol : IPsec in a IPv6 mobility environment

Fabien Allard (1) , Jean-Marie Bonnin (2)

1 FT - France Télécom, Division R&D, Issy Les Moulineaux (France Télécom)
2 RSM - Département Réseaux, Sécurité et Multimédia

The use of the internet must be able to be in confidence for users but security provisioning has a cost for Internet Service Providers (ISPs). In a mobility context, this security must be set up from scratch after each handover and for each customer. Therefore, a mechanism has been designed in standardisation bodies: the Context Transfer. This mechanism aims to transfer suitable information between equipments in order to reduce handover time. The benefit for an operator would then be a same security level during and after handover in mobile networks but with a cost as lower as possible. After a state of the art of context transfer for security, this paper quickly presents the Context Transfer Protocol (CXTP) defined at the Internet Engineering Task Force (IETF). Then, it defines the IPsec context and finally, it describes a CXTP-based solution to transfer this context between two access routers in a IPv6 mobility environment.

Mots clés: CXTP; Network security; IPsec; SAD; SPD; Internet key exchange; Network mobility; Mobile IPv6; Handover time optimisation; Mobile networks

Domaines: Multimédia [cs.MM]; Réseaux et télécommunications [cs.NI]

Fabien Allard, Jean-Marie Bonnin. An application of the context transfer protocol : IPsec in a IPv6 mobility environment. BWIA'07 : International workshop on Broadband wireless Internet access, 21 août, Ottawa (ON), Canada, Aug 2007, Ottawa, Canada. ⟨hal-02900943⟩