Authors: Oryema Brian; Seung Man Chun; Cheol Woo Jung; Jong Tae Park
Addresses: KNU-LG Electronics Convergence Research Center, Kyungpook National University, 80 Daehakro, Bukgu, Daegu, 41566, South Korea ' Gyeongbuk Institute of IT Convergence Industry Technology, Gyeongbuk 38463, South Korea ' School of Electronics Engineering, Kyungpook National University, 80 Daehakro, Bukgu, Daegu, 41566, South Korea ' School of Electronics Engineering, Kyungpook National University, 80 Daehakro, Bukgu, Daegu, 41566, South Korea
Abstract: A mobility management protocol based on the constrained application protocol (CoAP), called the CoAP-based mobility management protocol (CoMP), was suggested to counteract the constraints of mobile internet protocol version 6 (MIPv6) in the Internet of Things (IoT) environment. CoMP exchanges Binding Update (BU) messages to manage location changes, but BU messages are subject to security vulnerabilities, such as denial of service (DoS), false BU, session hijacking, and man-in-the-middle (MITM) attacks. In this paper, we extend CoMP by proposing a security scheme based on a private key to protect the BU CoMP messages exchanged between the mobile nodes and clients, referred to as private key-based BU for CoMP (PKBU-CoMP). PKBU-CoMP ensures that mobile nodes check and confirm the address ownership and validity of mobile nodes before performing any BU operation. The performance of PKBU-CoMP is analysed both mathematically and using Cooja simulations.
Keywords: security in internet of things; secure mobility; secure binding; private key in IoT.
International Journal of Ad Hoc and Ubiquitous Computing, 2018 Vol.29 No.1/2, pp.116 - 128
Received: 16 Sep 2017
Accepted: 20 Feb 2018
Published online: 29 Aug 2018 *