移动IPv6采用路由最优机制(Route Optimization,RO)来提高路由性能。这种机制下,在移动节点和通信节点之间引入了含有IP地址信息的绑定更新(Binding Update,BU),增加了潜在的威胁。对绑定更新的认证是解决路由机制安全问题的关键。本文根据层次证书权威机构的原理,提出了基于友好本地代理的绑定更新认证方法。在全球性的证书权威机构很难实现的情况下,这是一个有效的解决方案,提高了移动IPv6安全性。 Mobile IPv6 uses Route Optimization (RO) to improve routing performance. Under this mechanism, a binding update (Binding Update, BU) containing IP address information is introduced between the mobile node and the correspondent node, which adds potential threats. The certification of binding updates is the key to solving the routing mechanism security issues. Based on the principle of hierarchical certificate authority, this paper proposes a binding update authentication method based on friendly local agent. This is an effective solution for mobile IPv6 security that is difficult to achieve with a global certificate authority.