The IPSec Security Problems and a Cross-layer Security Mechanism for PMIPv6 Handover when an IPSec Security Association is Established on an L2 Direct Link

In a wireless system, the L2 and L3 often have their own individual security mechanisms used to authenticate users and system entities, and protect delivered keys and messages. When a mobile device hands over from one BS to another, the handover latency is usually one of the key factors affecting wireless service QoS. However, a strict security scheme often requires a longer handover delay. Also, a short handover delay often can only perform a simple security processes. Currently the authentication processes of L2 and L3 are independent to each other. In fact, they redundantly authenticate the same entities with two different authentication processes if a L3 connection in its L2 is also connected by a direct link. If we can combine them, then the security level of the connection between the two entities will be higher, and handover delay will be shorter. Therefore, in this study, we design a cross-layer security mechanism based on PMIPv6 fast handover which run on an LTE wireless system.