Secure DHCPv6 that uses RSA authentication integrated with Self-Certified Address

IPv6 is growing in popularity internationally nowadays. In this paper, we propose a secure DHCPv6 system that uses RSA authentication and Self-Certified Address to improve the access safety. By appending Certificate Option to DHCPv6 messages, the system guarantees the integrity of the messages. In addition, the system allocates addresses which can be verified by the address itself. With the benefits of Certificate Option and Self-Certified Address, the system prevents DHCPv6 from various network attack such as Man-in-Middle attack and Denial-of-Service attack. It also provides strict access control of the network by checking whether the address is obtained from the DHCPv6 server or not. We implement the system on dibbler which is an opensource DHCPv6 software and validate it in our campus network.