DocumentCode
3086412
Title
End to End Ipsec Support across Ipv4/Ipv6 Translation Gateway
Author
Ahmad, Nazrul M. ; Yaacob, Asrul H.
Author_Institution
Fac. of Inf. Sci. & Technol., Multimedia Univ., Ayer Keroh, Malaysia
fYear
2010
fDate
22-23 Sept. 2010
Firstpage
222
Lastpage
227
Abstract
The presence of IPv4/IPv6 translation gateway provides transparent routing mechanism to IPv4-only nodes and IPv6-only nodes which trying to establish communication from disparate address realms. However, the mechanism breaks TCP/IP intrinsic functionalities that results in IPSec cannot be applied in this environment. The existing solutions to address the compatibility issues between translation gateway and IPSec are either to enhance the translation gateway operation or to modify IPSec architecture especially on IKE negotiation process. By realizing the fact that most of the intermediate networking devices such as translation gateway are beyond the end nodes administration, this paper discusses the existing solutions to improve IKE negotiation in order to ensure end to end IPSec interoperability across translation gateway. Inspired by this solution, this paper proposes new IKE authentication by using Address Based Keys with certificateless signature to alleviate the limitation of traditional pre-shared keys and Public Key Infrastructure (PKI).
Keywords
Internet; computer network security; cryptographic protocols; network servers; peer-to-peer computing; public key cryptography; transport protocols; IKE authentication; IKE negotiation process; IPSec architecture; IPSec interoperability; IPv4 translation gateway; IPv6 translation gateway; TCP/IP intrinsic functionality; address based key; certificateless signature; end node administration; end to end IPSec support; intermediate networking device; public key infrastructure; transparent routing mechanism; Authentication; IP networks; Logic gates; Payloads; Peer to peer computing; Servers; Certificateless Signature; IKE Authentication; IPSec; IPv4/IPv6 Translation Gateway;
fLanguage
English
Publisher
ieee
Conference_Titel
Network Applications Protocols and Services (NETAPPS), 2010 Second International Conference on
Conference_Location
Kedah
Print_ISBN
978-1-4244-8048-7
Electronic_ISBN
978-0-7695-4177-8
Type
conf
DOI
10.1109/NETAPPS.2010.47
Filename
5635802
Link To Document