1. Update on SEND Keys Draft draft-kempf-mipshop-handover-key-00.txt James Kempf DoCoMo Labs USA kempf@docomolabs-usa.com Rajeev Koodli Nokia rajeev.koodli@nokia.com

2. Outline Problem Review of SEND Handover Key exchange Handover Key use Changes since draft-kempf-mobopts- handover-key-01.txt Current Status

3. The Problem How does the PAR know the FBU is from a MN authorized to change routing? MN pAR nAR Is this guy authorized?

4. Review of SEND Access Router RSA Key IPv6 CGA A1 Access Point Router Solicitation + A1 + CGA Option New Host A1 DAD: Neighbor Solicitation + CGA Option Sometime Later Router Advertisement + Signature

5. Handover Key Exchange Access Router Access Point Router Solicitation + A1 + CGA Option MN Router Advertisement + Signature + E( K A1 ) A1 – K A1... Handover Key Table Generate Handover Key E(KA1) = encrypt( RSA Public Key for A1, K A1 ) KA1 Decrypt + Store K A1

6. Handover Key Use MN pAR nAR FBU for A1 + Binding Auth MAC(K A1 ) A1 – K A1... Handover Key Table Retrieve K A1 + Check MAC MAC OK! FMIP Tunnel

7. Changes Since draft-kempf- mobopts-handover-key-01.txt Draft now specialized for FMIPv6 only –New title Mobile node identity based on the CGA key –Handover key assigned based on the CGA key –Allows mobile node to configure multiple addresses with the same key Authentication algorithm is configurable –Allows algorithm agility Signaling optimization technique described –Allows MN using active RA solicitation to obtain a handover key with no extra over the air signaling

8. Current Status Undergoing review prior to becoming a WG draft Please send comments!