Abstract Mobile IP Onternet Protocol) enables access to the Internet anywhere with one IP address, hence, providingthe flexibility that is required by today’s growing mobile work force. Deploying Mobile IP introduces newsecurity h a t s that if not carefully addressed can have severe consequences for home organizations. IPSec is acommonly used protection mechanism that is employed in this context. IPSec requires a flexible keymanagement scheme to provide cryptographic keys to communicating entities. A commonly used public keybased key management system is SKIP (Simple Key-Management for Internet Protocols). In this paper weconsider the scenario where a laptop that is enabled with secure Mobile IP connection using SKIP, is stolenand the aim is to protect the private key stored in the laptop. We propose a method of protecting the privatekey in which the secret stored in the laptop cannot be used to determine the private key. We also introduce amethod of ‘disabling’ the stored secret such that even when the laptop is stolen, there is no need for changingthe private key. An important property of our system is that it does not add extra messages to the existingSKIP implementation.
['Rungrat Wiangsripanawan', 'Rei Safavi-Naini', 'W. Susdo']
Securing mobile IP enabled laptop