WO2009056024A1

WO2009056024A1 - A method, system and device for registration of mn in ipv6 network

Info

Publication number: WO2009056024A1
Application number: PCT/CN2008/072524
Authority: WO
Inventors: Sachin Dutta; Shanxiang Mao
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2007-10-29
Filing date: 2008-09-25
Publication date: 2009-05-07
Also published as: CN101426002A; CN101426002B

Abstract

A method, system and device for registration of MN in IPv6 network is disclosed. The method includes: receiving a BU message from a MN, and judging whether the home address of the MN is involved in a safety union list in which the home address of the MN involved can not be used by other MNs. If the home address of the MN is involved in the safety union list, sending a BA message that involves a binding complete information to the MN, and buffering the binding of the home address and the current CoA of the MN. Advantages of the invention: decreasing the time of registration to the HA , preventing the registration to the HA from suffering DOS attacking and packet discarding and connection interrupting, which is caused by time delay of the registration.

Description

Mobile node registration method, system and device for Internet Protocol version 6 network

The present invention relates to a technology for implementing mobility of a mobile node (MN, Mobile Node) in Internet Protocol Version 6 (IPv6), and more particularly to a MN registration method, system and apparatus for an IPv6 network. Background technique

Mobile IPv6 is a protocol for implementing MN mobility in an IPv6 network. When a MN moves over an IPv6 network, it can maintain its reachability without changing its home address. Implementing MN mobility in an IPv6 network involves three types of entities: MN, Home Agents (HA), and Correspondence Nodes (CNs), where MNs can move and access IPv6 networks through different links. The network side, but always maintains its reachability through its home address; HA, is the router in the MN home network, when the MN moves to other networks, registers the current care-of address with the HA, HA will MN's home address and The care-of address is bound to establish a tunnel between the HA and the MN. The HA intercepts the message sent to the home address of the MN in the home network of the MN. After encapsulation, the packet is forwarded to the MN through the tunnel between the HA and the MN. In the care-of address of the HA registration; CN, the node communicating with the MN, when sending the message to the MN, the message is sent to the home network of the MN, and the message is sent to the home address of the MN, and the CN may be another MN. Can be a fixed node.

FIG. 1 is a schematic structural diagram of a system for implementing MN mobility in an IPv6 network, as shown in the following figure, including: MN, HA, and CN, where the network where the MN is currently located is not its home network, and the MN interacts with the HA through the IPv6 network. HA interacts with the CN through the IPv6 network. When the CN sends a packet to the MN, the packet carries the home address of the CN and the Media Access Control (MAC) address of the HA. After the packet passes through the IPv6 network, the packet is carried by the MAC address carried by the packet. The HA intercepts, and the HA re-encapsulates the packet carrying the current care-of address of the MN according to the current care-of address corresponding to the home address of the MN, and sends the packet to the MN through the IPv6 network. In order to implement MN mobility in an IPv6 network, that is, the MN moves to a network other than the home network to send and receive messages, usually three steps are required: The first step is a dynamic HA discovery mechanism, that is, whenever the MN moves to the hometown Outside the network, the MN tries to discover the HA in the home network; the second step is the registration step, that is, the MN registers with the HA, registers the current care-of address with the HA, and the HA transfers the home address of the MN and the current transfer. The address is bound, the tunnel between the HA and the MN is established, and the home address of the MN is set in the home address list. The third step is message transmission, that is, the MN communicates with the tunnel established between the HA and the MN. The text transmission receives the message sent by the HA to the current care-of address registered by the MN.

When the subsequent MN interacts with the HA again, the HA finds that the home address of the MN has been stored by querying the home address list, that is, the MN has been registered, so the subsequent registration is not performed, and the message interaction is directly performed.

In order to transmit the message, the MN must register the current care-of address with the HA, that is, perform the second step. FIG. 2 is a flow chart of the method for registering the MN to the HA in the prior art, and the specific steps are as follows:

Step 201: The MN sends a binding update request message to the HA.

Step 202: After receiving the binding update request message, the HA performs verification on the MN. Step 203: After the HA passes the verification of the MN, the HA initiates Duplicate Address Detection (DAD) to perform duplicate address detection on the home address of the MN.

In this step, the HA needs to obtain the home address of the MN, such as being carried by the binding update request message.

This duplicate address detection process ensures that the MN leaves the home network to other networks. Other nodes that do not belong to the same home network are configured with the same home address as the MN. If the other node is configured with the same home address as the MN, the registration process will not succeed, and the HA will send a binding confirmation message to the MN to notify the MN that the DAD failed, that is, when the MN is not in the home network. The other nodes are configured with the home address used by the MN.

进行 Using the process of step 203 to perform DAD detection, the subsequent MN home can be guaranteed The uniqueness of the binding between the home address and the current care-of address ensures the uniqueness of the tunnel between the MN and the HA, and ensures that the home address of the MN is reachable when transmitting the text.

Step 204: After the HA performs the time when the DAD process reaches the timer setting (the minimum set time is 1 second), no other MN uses the home address of the MN.

Step 205: The HA sends a binding acknowledgement message to the MN, carries the successful binding information, and generates a binding cache of the home address of the MN and the current care-of address on the HA, and establishes a tunnel between the HA and the MN. Set the home address of the MN to the home address list.

Before the MN's current care-of address is bound to the home address of the MN, the current care-of address of the MN needs to be obtained, and the current care-of address of the MN may be sent by the MN through the binding update request message.

After the tunnel between the HA and the MN is established, the HA exists as an agent of the MN home address, and the HA directly saves the home address of the MN, and receives the message sent to the home address to the MN. The tunnel is sent to the current care-of address of the MN through the tunnel established with the MN.

The process shown in FIG. 2 is the first registration of the MN to the HA outside the home network, and in the subsequent registration process, if the MN moves again, the DAD detection may not be performed, that is, the home address of the MN is determined to be In the established home address list, the home address and the current care-of address are directly re-bound to complete the tunnel establishment between the HA and the MN.

In the process of the first registration of MN to HA, there are two problems, which are explained below.

The first problem, the possibility of a DOS (Denial of Service) attack during the registration process, is because there is a time interval when the MN leaves the home network to move to other networks, at this time. In the interval, the MN's home address can be used by other MNs, and it is highly likely that other MNs will configure the same home address as the MN's home address during this time interval. In this way, the DAD process performed by the HA will fail, and the MN cannot successfully register with the HA and cannot accept the mobile service. So even if the HA stores the MN's home address (such as HA) With the manually configured home address of the MN, the HA still allows the other MNs on the home network to have the same home address as the MN during the time interval that must exist during the MN's movement.

The second problem, the registration time in the registration process is a very important parameter, because the delay in the registration process will result in the discarding of the message transmitted by the MN and the interruption of the existing connection of the MN. In the method shown in FIG. 2, the delay when the MN moves is a set time (at least 1 second) introduced by the DAD process, so the registration time takes at least 1 second, and the delay is the MN. After the binding update request message is sent and waiting for the minimum timeout between the binding confirmation messages, during the registration process of the MN, the DAD process should normally be timed out, thereby indicating that the MN home address on the HA is not otherwise The MN uses, only when the DAD process fails, that is, after the HA sends the binding update request message and quickly receives the binding confirmation message, the registration failure process is faster.

In summary, the applicant found in the process of implementing the present invention that the root cause of the above two problems is that the first registration time of the MN to the HA is too long, and how to reduce the time of MN to HA registration becomes a Problems to be solved. Summary of the invention

The embodiment of the invention provides a MN registration method, system and device for an IPv6 network, which can ensure that the time for MN to HA registration is reduced.

An embodiment of the present invention provides a method for registering a mobile node of an IPv6 network, including: after receiving a binding update request sent by a mobile node, determining whether the home address of the mobile node is in a set of security associations, the security alliance The home address of the mobile node protected in the list is not accepted when requested by other nodes;

If the home address of the mobile node is in the security association list, a binding confirmation message carrying the successful binding information is returned to the mobile node, and the binding of the mobile node's home address and the current care-of address is cached.

The embodiment of the present invention further provides a mobile node registration system for an IPv6 network, including: a mobile node, configured to send a binding update request to a home agent, and receive a home agent. A binding confirmation message sent with the binding success information;

a home agent, configured to receive a binding update request sent by the mobile node, and detect that the home address of the mobile node is in the set security association list, and return a binding confirmation that carries the binding success information to the mobile node. The message generates a binding cache that maps the mobile node's home address to the current care-of address.

The embodiment of the invention also provides a home agent, including:

a receiving module, configured to receive a binding update request sent by the mobile node, and obtain a home address of the mobile node, and send the home address of the mobile node to the detection module;

a sending module, configured to send, to the mobile node, a binding confirmation message that receives the binding success information received from the detecting module;

a detection module, configured to detect, in the set security association list, the home node address of the mobile node, and send a binding confirmation message carrying the binding success information to the sending module and the processing module;

And a processing module, configured to receive, from the detecting module, a binding confirmation message that carries the binding success information, and generate a binding cache that uses the mobile node's home address and the current care-of address.

In the embodiment of the present invention, a security association list is established in the HA, and the extended home address list exists. The home address of the mobility MN is saved in the security list for protection, so that other MNs in the home network are not configured. The home address of the multicast, so that in the registration process of the MN to the HA, and the registered home address is not in the home address list, the MN home address re-detection can be performed without using the DAD process. The MN is directly registered to ensure that the home address of the MN that is moved to other networks is not configured by other MNs in the home network as the home address of other MNs, thereby saving the time taken for the DAD process and ensuring the MN to The time for HA registration is reduced, avoiding the possibility of being attacked by DOS due to excessive time in the MN registration process with the HA, and the problem of packet drop or interruption of existing connections. DRAWINGS 1 is a schematic structural diagram of a system for implementing MN mobility in an IPv6 network according to the prior art;

2 is a flow chart of a method for registering a MN to HA in the prior art;

FIG. 3 is a flowchart of a method for registering a MN to an HA according to an embodiment of the present invention; FIG. 4 is a flow chart of a method for transmitting a message by a HA as a proxy of a MN according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of a system for registering a MN to an HA according to an embodiment of the present invention; FIG. 6 is a schematic structural diagram of an HA according to an embodiment of the present invention;

detailed description

The embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

Prior Art The time during which the MN registers with the HA is too long because the HA performs the DAD process. Therefore, in order to save the time that the MN registers with the HA, the delay of the MN registration during the mobile process is reduced, and the possibility of being attacked by the DOS due to the long time in the registration process of the MN to the HA and the packet drop or existing connection are avoided. The interruption problem of the embodiment of the present invention does not perform the DAD process in the process of the MN registering with the HA, but ensures that the home address of the MN is not configured by other MNs in the same home network. Therefore, in the embodiment of the present invention, a security association list is pre-established on the HA, and the security association list is generated dynamically or manually, and exists as an extended home address list, and the home address of the mobility MN is saved in the security association list. Protecting so that other MNs in the home network do not configure the home address in the security association list, so that during the registration process of the MN to the HA, the home address involved in the registration process is not in the established home address list. It can be detected in the security association list. If the MN's home address has been configured, the MN's home address can be guaranteed to be moved to other networks without using the DAD process to perform MN's home address re-detection. It is not configured by other MNs in its home network as the home address of other MNs and registers the MN.

In the embodiment of the present invention, the security association list established in the HA may be based on the interconnection. List of security associations (SAs) of the network protocol security (IPsec, IP Security), and exists as an extended home address list in the HA, which is used for the local link address and global address of the MN as the home address in the list. The address is protected. Each home address in the SA list can also be identified by an identifier that does not need to be assigned to the home address used by other MNs.

The specific implementation of the present invention includes several parts: The first part performs the setting process of the security association list, and protects the home address in the security association list so that other nodes do not use the home address; the second part, The registration process when the MN with the home address in the security association list moves to the non-home network, the home address involved in the registration process is not in the established home address list; the third part, after completing the registration process of the second part, The HA associates the home address of the MN with the MAC address of the HA, multicasts through the neighbor advertisement message, and notifies other nodes that the HA exists as a proxy of the MN. After receiving the announcement message, the other node sends a message to the MN. The home address of the MN and the associated MAC address can be carried, and the HA intercepts the packet according to its own MAC address, and sends the packet to the corresponding care-of address according to the home address of the carrying MN, so as to receive the packet.

The three sections are described in detail below.

In the first part, the security association list is set on the HA. The home address in the SA list is manually IPSEC. Of course, other dynamic methods can also be used to obtain the configuration. For example, HA obtains the MN from other network entities in the home network. After the home address, set it in the Security Alliance list.

When another node sends a request message to the HA, such as a neighbor request (NS, Neighbor Solicitation), a home address is requested. After the HA finds that the home address is not set in the home address list, it finds the setting in the security association list. In the middle, the response is replied to other nodes, such as replying to the other node neighbor announcement (NA, Neighbor Advertisement), carrying the information that the home address cannot be used. In this way, the home address in the security association list set by HA is protected.

When the MN is in the home network, according to the prior art, other nodes receive NA messages from the MN and the home network's HA indicating that the MN's home address has been used. Then the home address of the MN is protected.

In the embodiment of the present invention, NA may carry information indicating that the home address and associated MAC address of the MN cached by the cache of other nodes are not updated, that is, the over-ridebit is set to 0, and other nodes that receive the NA are received. The cache is not updated; if the NA carries information indicating the home address and associated MAC address of the MN cached by the cache of other nodes, it carries the home address and associated MAC of the MN that is cached by the cache that updates other nodes. The address information, ie over - ridebit is set to 1.

the second part

FIG. 3 is a flowchart of a method for registering a MN to an HA according to an embodiment of the present invention, where specific steps are as follows:

Step 301: The MN moving to the other network sends a binding update request message to the HA of the home network when registering.

Step 302: After receiving the binding update request message initiated by the MN, the HA performs verification on the MN, and the verification succeeds, and step 303 is performed; if the verification fails, step 305 is performed.

This step is an optional step. The HA may also not verify the received binding update request message, that is, the authentication function is not set in the HA, which can reduce the complexity of the HA processing. At this time, the HA determines all the received bindings. The update request message is verifiable.

Step 303: The HA detects whether the home address of the MN is in the security association list, and if yes, step 304 is performed; if no, step 305 is performed.

In this step, the home address of the MN in the set SAE list is protected, that is, the HA does not accept the request of the other node to request the home address in the SA list.

Step 304: The HA does not perform DAD detection on the home address of the MN, returns a binding acknowledgement message to the MN, carries the successful binding information, and generates the MN on the HA. The binding address of the home address and the current care-of address, and establish a tunnel between the HA and the MN, and set the home address of the MN to the home address list.

In this step, since the MN's home address is set in the security association list, and the security association list is used to protect the stored home address from being used by other nodes, the home address in the security association list can be guaranteed. The uniqueness of the MN is used, so the HA does not need to perform DAD detection on the home address of the MN, and does not need to perform the time required for the DAD process detection, thereby saving the registration time.

The current care-of address of the MN needs to be obtained before the current care-of address of the MN is bound to the home address of the MN. The current care-of address of the MN may be sent by the MN through a binding update request message.

Step 305: After the HA passes the verification of the MN, the HA starts the DAD, and performs duplicate address detection on the home address of the MN.

Step 306: After the HA performs the time when the DAD process reaches the timer setting (the minimum set time is 1 second), no other MN uses the home address of the MN.

Step 307: The HA sends a binding acknowledgement message to the MN, carries the successful binding information, and generates a binding cache of the home address of the MN and the current care-of address on the HA, and establishes a tunnel between the HA and the MN. Set the home address of the MN to the home address list.

Before performing step 302 shown in FIG. 3, the method further includes: HA determining whether the home address of the MN is in the established home address list, and if so, directly executing 304; if not, performing step 303.

the third part

After the home address in the security association is registered, that is, after performing step 304, the HA notifies the HA as the proxy of the MN home address, that is, the HA associates the home address of the MN with the MAC address of the HA, and carries the neighbor announcement. In the message, multicast is performed, so that other nodes that receive the message through multicast know that the HA exists as the proxy of the MN home address. At this time, after receiving the neighbor advertisement message, the other node associates the home address of the MN with the MAC address of the HA for caching, such as being cached in the neighbor cache of other nodes. In the neighbor announcement message, an identifier may also be carried, Indicates whether other MNs need to update their neighbor cache, such as setting over-ride to 1. When sending a packet to the MN, the MN's home address and the associated MAC address can be carried. The HA intercepts the packet according to its own MAC address, and sends the packet to the corresponding care-of address according to the home address of the MN, so that the MN can receive.

In the embodiment of the present invention, the nodes each have a neighbor cache, and the home address of the MN and the associated MAC address are cached.

In the embodiment of the present invention, in FIG. 3, the set link layer address compatible identifier (L) may be carried in the binding update message sent by the MN, where the identifier is used to indicate that the HA needs to be the link locality of the MN. The home agent of the address and the global address, when the registration is completed, the HA multicast neighbor announcement message carries the link local address of the MN as the home address and the association information of the global address and the MAC address of the HA, and receives the message. The node updates its own cache. When the binding update message sent by the MN does not carry L or does not set L, the HA acts as a proxy for the global address of the MN. When the registration is completed, the HA multicast neighbor announcement message carries the MN's global address as the home address. The association information of the address and the MAC address of the HA, the node receiving the message updates its own cache, at this time, the link local address of the MN can be used by other nodes.

4 is a flow chart of a method for transmitting a message by the HA as a proxy of the MN according to an embodiment of the present invention, and the specific steps are as follows:

Step 401: After the HA registers with the MN that leaves the home network, associate the home address of the MN with the MAC address of the HA, and carry the multicast in the neighbor announcement message.

In this step, the neighbor announcement message further carries an identifier indicating whether the other node updates the cache. If the over-ride is set to 1, the identifier needs to be updated.

Step 402: The other node that receives the neighbor announcement message learns that the HA exists as the proxy of the MN home address, updates its own cache, and caches the MAC address of the associated HA and the home address of the MN.

Step 403: The other node sends a message to the MN, carrying the home address of the MN and the associated MAC address.

Step 404: The HA intercepts the packet according to its own MAC address, and sends the packet to the corresponding care-of address according to the home address of the carrying MN, so that the MN receives the packet. In this way, the MN that moves outside the home network receives the message, and the other nodes that send the message do not perceive that the MN has moved outside the home network.

FIG. 5 is a schematic diagram of a system for registering a MN to an HA according to an embodiment of the present invention, including

MN 501 and HA 502, where

The MN 501 is configured to send a binding update request to the HA 502, and receive a binding acknowledgement message that is sent by the HA 502 and carries the binding success information.

The HA 502 is configured to receive a binding update request sent by the MN 501, and detect the MN.

The home address of the 501 is returned to the MN 501 in the set security association list, and the binding confirmation message carrying the binding success information is returned to the MN 501, and the binding cache of the home address of the MN 501 and the current care-of address is generated on the HA 502. At the same time, a tunnel between the HA 502 and the MN 501 is established.

The HA 502 detects that the home address of the MN 501 is in the set of the security association list, and is also used to determine that the home address of the MN 501 is not set in the home address list.

The HA 502 is further used to set the home address of the MN 501 in the home address list.

In the embodiment of the present invention, the HA 502 is further configured to detect that the home address of the MN 501 is not set in the security association list, and then register the MN 501 according to the prior art, and send a binding confirmation that carries the binding success information. Message.

In the embodiment of the present invention, the system further includes other nodes, configured to send the NS to the HA 502, requesting to use the home address of the MN 501.

The HA 502 is further configured to receive the NS, and after finding that the home address of the MN 501 is not set in the home address list, determining that the home address of the MN 501 is set in the security association list, returning to the other node to carry the request that cannot be used. Hometown address of NA.

In the embodiment of the present invention, the HA 502 is further configured to: after the MN 501 registers, multicast the announcement message carrying the associated home address of the MN 501 and the MAC address of the HA 502 to other nodes, and intercept according to the MAC address of the MAC address. The packet sent to the MN 501 is sent to the corresponding care-of address according to the home address of the MN 501 carried in the packet. The other node, after receiving the announcement message, updates its own cache with the associated home address of the MN 501 and the MAC address of the HA 502. When the message is sent to the MN 501, the message carries the associated message. The home address of the MN 501 and the MAC address of the HA 502.

FIG. 6 is a schematic structural diagram of an HA according to an embodiment of the present invention, including a receiving module 610, a sending module 620, a detecting module 630, and a processing module 640, where

The receiving module 610 is configured to receive a binding update request sent by the MN, and obtain the home address of the MN, and send the home address of the MN to the detecting module 630.

The sending module 620 is configured to send, to the MN, a binding confirmation message that is received by the detecting module 630 and carries the binding success information.

The detecting module 630 is configured to detect, in the set security association list, the MN's home address, and send a binding confirmation message carrying the binding success information to the sending module 620 and the processing module 640.

The detecting module 630 detects that the MN's home address is in the set security association list, and is also used to determine that the MN's home address is not set in the home address list.

The processing module 640 is configured to receive, from the detecting module 630, a binding confirmation message carrying the binding success information, generate a binding cache of the home address of the MN and the current care-of address, and establish a tunnel between the HA and the MN.

The processing module 640 is further configured to set the home address of the MN in the home address list. In the embodiment of the present invention, the detecting module 630 further includes a first detecting submodule, where the first detecting submodule is configured to detect that the home address of the MN is not set in the security association list, and then perform the MN according to the prior art. The registration sends a binding confirmation message carrying the binding success information to the sending module 620 and the processing module 640.

In the embodiment of the present invention, the receiving module 610 further includes a second receiving submodule, configured to: after receiving the NS, determine that the home address of the MN is set in the security association list or/and the home address list, and then return to other nodes to carry Use the NA of the requested home address.

In the embodiment of the present invention, the sending module 620 further includes a third sending submodule, configured to multicast to other nodes to carry the associated home area of the MN after the MN registers. The message of the MAC address of the address and the MAC address is intercepted by the MAC address of the MN, and the message is sent to the corresponding care-of address according to the home address of the MN carried in the message.

Intent, including: HA with address 3ffe::l/64, which stores the home address of the MN (3ff::2/64) in the security association list, and moves to the care-of address of 8ff::2/64 to MN of other networks, CN with address 9ffe::2/64. When the MN moves from the home network to another network, it needs to register with the HA. After the HA determines that the home address of the MN is in the stored security association list, the MN's care-of address 8ff::2/64 and the home address 3ff are ::2/64 Bind the cache and establish a tunnel between the HA and the MN. After the registration is completed, the multicast carries the announcement message of the associated HA's MAC address and the MN's home address, and the CN that receives the message updates its own cache. When transmitting the message, the CN sends a message carrying the home address of the MN 3ff::2/64 and the MAC address of the HA, the message is intercepted by the HA having the MAC address, and the HA passes the MN's home address according to the home address of the MN. The tunnel sends the message to the MN's care-of address 8ff::2/64.

It can be seen from the method, system and device provided by the embodiments of the present invention that the registration time is saved because the DAD process is not performed during the MN to HA registration process. Due to the saving of the registration time, the possibility of being attacked by DOS due to the long time in the registration process of the MN to the HA due to the delay of registration, and the interruption of the message or the interruption of the existing connection may be avoid.

The above is a description of specific embodiments of the present invention, and the method of the present invention can be appropriately modified in a specific implementation process to suit the specific needs of a specific situation. Therefore, it is to be understood that the specific embodiments of the present invention are not intended to limit the scope of the invention.

Claims

Rights request

1. An internet protocol version 6 A mobile node registration method for an IPv6 network, which is characterized in that it comprises:

After receiving the binding update request sent by the mobile node, determining whether the home address of the mobile node is in the set security association list, and the home address of the mobile node protected in the security association list is required to be used by other nodes. Not accepted;

2. The method according to claim 1, wherein before the determining whether the home address of the mobile node is in the set of security associations, the method further includes:

It is determined that the home address of the mobile node is not in the set home address list.

The method according to claim 1, wherein if the home address of the mobile node is in the security association list, the method further includes:

Establish a tunnel between the home agent and the mobile node.

The method according to claim 2 or 3, wherein if the home address of the mobile node is in the security association list, the method further includes:

Setting the home address of the mobile node in the home address list.

5. The method of claim 4, wherein

If the home address of the mobile node is not in the security association list, performing duplicate address detection on the mobile node;

If the mobile node returns the binding confirmation message carrying the successful binding information to the mobile node by using the duplicate address detection, binding the home address of the mobile node and the binding address of the current care-of address Establishing a tunnel between the home agent and the mobile node, and setting a home address of the mobile node in the home address list.

6. The method of claim 1, wherein the security association list is dynamically acquired or statically configured.

7. The method according to claim 2, wherein the process of not accepting when the other node requests to use is:

Receiving a request sent by another node to carry a home address, and finding that the home address is not set in the home address list, determining that the home address is set in the security association list, sending the other node Carry a response indicating that the home address cannot be used.

8. The method of claim 7, wherein the response carries information indicating that the other node cache is not updated.

The method according to claim 4, wherein after the setting of the home address of the mobile node in the home address list, the method further includes:

Correlating the home address of the mobile node with a medium access control address, multicasting by using a neighbor announcement message, notifying other nodes as a proxy of the mobile node, and causing the other node to receive the neighbor announcement message, The associated home address of the mobile node and the medium access control address are buffered, and when the message is sent to the mobile node, the message carries the home address of the mobile node and the associated medium Access control address;

Obtaining the packet according to the media access control address, and sending the message to the corresponding care-of address according to the home address of the mobile node carried in the packet.

The method according to claim 9, wherein the neighbor announcement message carries an identifier indicating that the cache of the other node is updated, and the home address and the medium access control address cache of the associated mobile node are cached according to the The logo is carried out.

The method according to claim 9 or 10, wherein the binding update message carries an identifier of a home agent indicating that the home agent needs to be a link local address and a global address of the mobile node;

The associated home address carried by the neighbor announcement message and the media access control address of the home agent are associated information of the link local address and the global address of the home address and the media access control address of the home agent;

Or the binding update message carries an identifier of a home agent indicating that the home agent needs to be the global address of the mobile node; The associated mobile node home address and the home agent's media access control address carried by the neighbor announcement message are associated information of the media address and the media access control address of the home agent.

12. A mobile node registration system for an IPv6 network, comprising: a mobile node, configured to send a binding update request to a home agent, and receive a binding confirmation message that is sent by the home agent and carries the binding success information;

The system according to claim 12, wherein the home agent detects that the home address of the mobile node is in the set security association list, and is further used to determine that the home address of the mobile node is not set. In the home address list.

The system according to claim 13, wherein the home agent is further configured to set a home address of the mobile node in the home address list.

The system according to claim 13, wherein the home agent is further configured to repeat the mobile node when detecting that the home address of the mobile node is not in the set security association list. After the address is detected and passed, the binding confirmation message carrying the successful binding information is returned to the mobile node, and the binding address of the mobile node's home address and the current care-of address is cached, and the mobile node's home address is set. In the home address list.

The system according to claim 12 or 13, further comprising: another node, configured to send a neighbor request to the home agent, requesting to use a home address of the mobile node;

The home agent is further configured to receive the neighbor request, and after determining that the home address of the mobile node is not set in the home address list, determine that the mobile node's home address is set in the security association list. Then, return to the other node to carry a neighbor announcement that cannot use the requested home address.

17. The system of claim 16 wherein said home agent further Further, after the mobile node registers, the multicast message carrying the associated home address of the mobile node and the media access control address of the home agent is multicast to the other node, and is intercepted according to the media access control address of the mobile device. Sending, by the mobile node, the packet to the corresponding care-of address according to the home address of the mobile node carried in the announcement message;

The other node is further configured to: after receiving the announcement message, update the self cache with the associated home address of the mobile node and the media access control address of the home agent, and send the cache to the mobile node. The message carries the associated home address of the mobile node and the media access control address of the home agent.

18. A home agent, characterized by comprising:

The home agent according to claim 18, wherein the detecting module detects that the home address of the mobile node is in the set security association list, and is further used to determine the home address of the mobile node. The processing module is further configured to set a home address of the mobile node in the home address list.

The home agent according to claim 18, wherein the detecting module further comprises:

a first detection sub-module, configured to detect that the home agent address of the home agent is not in the office In the set security association list, after the mobile node performs duplicate address detection and passes, the binding confirmation message carrying the binding success information is sent to the sending module and the processing module.

The home agent according to claim 18, wherein the receiving module further comprises:

The second receiving submodule is configured to: after receiving the neighbor request, determine that the home address of the mobile node is set in the security association list, and return a neighbor announcement carrying the home address that cannot be used to the other node.

The home agent according to claim 18, wherein the sending module further comprises:

a third sending submodule, configured to: after the mobile node registers, multicast an advertisement message carrying the media address of the associated mobile node and a media access control address of the home address to other nodes, according to the media access control The address intercepts the packet sent to the mobile node, and sends the packet to the corresponding care-of address according to the home address of the mobile node carried in the packet.