1 / 6

Washinton D.C., November 2004

Washinton D.C., November 2004. IETF 61 st – mip6 WG. Application Master Session Key (AMSK) for Mobile IPv6 (draft-giaretta-mip6-amsk-00). Gerardo Giaretta Ivano Guardini Elena Demaria Telecom Italia Lab (TILab) Julien Bournelle Maryline Laurent-Maknavicius GET/INT. Motivation.

rhonda
Download Presentation

Washinton D.C., November 2004

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Washinton D.C., November 2004 IETF 61st – mip6 WG Application Master Session Key (AMSK) for Mobile IPv6 (draft-giaretta-mip6-amsk-00) Gerardo Giaretta Ivano Guardini Elena DemariaTelecom Italia Lab (TILab) Julien Bournelle Maryline Laurent-Maknavicius GET/INT

  2. Motivation • MN-HA IPsec SA can be established from a shared secret using IKE with PSK authentication • If network access control is based on EAP the IKE-PSK can be derived from the keying material exported by the authentication method • This requires the definition of an Application Master Session Key (AMSK) for MIPv6 • a key derived from the EAP key hierarchy that can be used by applications (draft-ietf-eap-keying-03)

  3. Operational Flow Home Agent AAA Server EAP exchange EMSK EMSK MIPv6 AMSK derivation MIPv6 AMSK derivation AMSK delivery via AAA-HA protocol

  4. MIPv6 AMSK derivation (1) draft-ietf-eap-keying-03 • KDF (K,L,D,O) = T1 | T2 | T3 | T4 | ... • where: • T1 = prf (K, S | 0x01) • T2 = prf (K, T1 | S | 0x02) • T3 = prf (K, T2 | S | 0x03) • T4 = prf (K, T3 | S | 0x04) • prf = HMAC-SHA1 • K = EMSK • L = key label • D = application data • O = OutputLength (2 bytes) • S = L | " " | D | O draft-giaretta-mip6-amsk-00

  5. MIPv6 AMSK derivation (2) • Key Label = “MIPv6-key” • Application Data = Home Agent Address • sufficient to guarantee the generation of independent AMSKs for different HAs and different MNs • avoiding the insertion of the home address in the application data allows the MN to derive the AMSK even if it does not know its home address (e.g. dynamic home address assignment through IKEv2) • Output Length = 128 bit

  6. Requirements on EAP methods • This solution requires the use of an EAP method capable to export keying material to other applications • Most EAP methods support this capability • EAP-SIM • EAP-AKA • PEAPv2 • EAP-IKEv2 • etc.

More Related