This presentation describes one of current security activities in IETF targeted to support Mobile IP architecture. It includes combined mutual authentication and session key generation protocols for Mobile Nodes (MN)suitable for use at layer-2 in 802.1x networks (such as 802.11 wireless LANs). The protocols apply to scenarios where a Mobile Node (MN) is in a foreign network such as public 802.3 network that uses Home-AAA and Foreign-AAA services. The protocols assume a pre-deployed cryptographically secure pre-shared key present on the MN, and use the 802.1X standard,Extensible Authentication Protocol (EAP) messages, and RADIUS Authentication Servers. The protocols can easily be extended to support the migration from RADIUS to DIAMETER. The protocols can also support wireless transport layers other than 802.1x, such as CDMA-based Cdma2000 or UMTS.

By: Mr. Seymon (Simon) Mizikovsky, Lucent Technologies, USA