SECURIM Project

Version Française

Two partners

• department LOR at INT
• department RSM at ENST de Bretagne

Abstract

This project aims to develop a platform in an IPv6 mobility environment which implements the security management functions DHCPv6 and AAA (Authentication, Authorization, Accouting) that are defined by the IETF for the third generation cellular networks (UMTS). As no cellular networks are available, the platform will be limited to an IP network and DHCPv6 and AAA servers/agents distributed over the sites of ENST Bretagne and INT. The DHCPv6 protocol and the AAA protocol called Diameter will be tested and compatibility problems between those two protocols will be identified. Possible improvements of both those protocols will be tested as well.

Project deliverables are available in French only

• Document SP2.1 : Etat de l'art pour DHCPv6 (DHCPv6 state of the art)
• Document SP3.1 : Etat de l'art pour AAA et Diameter (AAA and Diameter state of the art)
• 1st version of document SP2.2 : Critiques et améliorations possible de DHCPv6 (critics and improvements of DHCPv6)
• 1st version of document SP3.2 : Critiques et améliorations possible de Diameter (critics and improvements of Diameter)
• Current Diameter sources: by email

Publications regarding IPsec, IPv6 and Mobile IPv6

• Maryline Laurent, "For a Secure Mobile IP and Mobile IPv6 Deployment", 17th International Conference on Information Security IFIP/SEC'02, Cairo, Egypt, May 2002.
• Maryline Laurent-Maknavicius, Francis Dupont, "Inter-Domain Security for Mobile IPv6", 2nd European Conference on Universal Multiservice Networks ECUMN'02, Colmar, France, April 2002.
• F. Dupont, " Mobile IPv6 security issues ", IPCN'01, IP Based Cellular Network, April 2001.
• M. Achemlal, M. Laurent, " Analyse des fonctions des protocoles IPsec et leur intégration dans un réseau privé virtuel ", Annales des Télécommunications, 2000.
• M. Laurent, " La sécurité d'Internet ", Technique de l'Ingénieur, 2000.
• P. Hébrard, M. Laurent, " Sécurité des technologies internet et intranet : les IPSEC ", Confidentiel Sécurité, No 52, January 1999.
• G. Cizault (collectif), " IPv6 : Théorie et pratique ", Editions O'Reilly, Paris, 1999.

Proposed IETF draft

• S.M. Faccin, F. Le, B. Patil, C.E. Perkins, F. Dupont, M. Laurent, Julien Bournelle, "Mobile IPv6 Authentication, Authorization, and Accounting Requirements", draft-le-aaa-mipv6-requirements-00.txt, February 2002.
• F. Dupont, M. Laurent, Julien Bournelle, "AAA for mobile IPv6", draft-dupont-mipv6-aaa-01.txt , November 2001.
• N. Prigent, J. Marchand, F. Dupont, B. Cousin, M. Laurent-Maknavicius, J. Bournelle, "DHCPv6 Threats", draft-prigent-dhcpv6-threats-00.txt, March 2001.
• F. Dupont, M. Laurent, "AAA for mobile IPv6", draft-dupont-mipv6-aaa-00.txt , February 2001.

Presentations

• M. Laurent, "La sécurité dans l'Internet", tutoriel invité, 6ème conférence maghrébine en Sciences Informatiques, MCSEAI'2000, 1er novembre 2000, Fès, Maroc.
• M. Laurent, "Les vulnérabilité des réseaux IP",
• Sécurité'2000, Paris, 14 juin 2000.
• F. Dupont, "MobiSecv6 Project Presentation ", IPCN, http://www.upperside.fr/baipcn.htm, Paris La Défense, mai 2000.
• Maryline Laurent, "La sécurité dans IP", Séminaire INT, 16-17 mai 2000.
• F. Dupont, O. Charles, "IPsec and Mobility ", IPSEC'2000, http://www.upperside.fr/baipsecy2k.htm, Paris La Défense, octobre 2000.

IETF works

• [Cal00A] R. Calhoun, G. Zorn, P. Pan, H. Akhtar, "Diameter framework document", April 2000.
• [Cal00B] R. Calhoun, A.C. Rubens, H. Akhtar, E. Guttman, "Diameter base protocol", April 2000.
• [Per00] C. Perkins, J. Bound, M. Carney, "Dynamic Host Configuration Protocol for IPv6 (DHCPv6)", May 2000.
• N. Asokan, Patrik Flykt, Charles E. Perkins, Thomas Eklund, "AAA for IPv6 Network Access", draft-perkins-aaav6-02.txt, January 2000.
• Stefano M. Faccin, Franck Le, Basavaraj Patil, Charles E. Perkins, "Diameter Mobile IPv6 Application", draft-le-aaa-diameter-mobileipv 6-00.txt, August 2001.