• DocumentCode
    3086412
  • Title

    End to End Ipsec Support across Ipv4/Ipv6 Translation Gateway

  • Author

    Ahmad, Nazrul M. ; Yaacob, Asrul H.

  • Author_Institution
    Fac. of Inf. Sci. & Technol., Multimedia Univ., Ayer Keroh, Malaysia
  • fYear
    2010
  • fDate
    22-23 Sept. 2010
  • Firstpage
    222
  • Lastpage
    227
  • Abstract
    The presence of IPv4/IPv6 translation gateway provides transparent routing mechanism to IPv4-only nodes and IPv6-only nodes which trying to establish communication from disparate address realms. However, the mechanism breaks TCP/IP intrinsic functionalities that results in IPSec cannot be applied in this environment. The existing solutions to address the compatibility issues between translation gateway and IPSec are either to enhance the translation gateway operation or to modify IPSec architecture especially on IKE negotiation process. By realizing the fact that most of the intermediate networking devices such as translation gateway are beyond the end nodes administration, this paper discusses the existing solutions to improve IKE negotiation in order to ensure end to end IPSec interoperability across translation gateway. Inspired by this solution, this paper proposes new IKE authentication by using Address Based Keys with certificateless signature to alleviate the limitation of traditional pre-shared keys and Public Key Infrastructure (PKI).
  • Keywords
    Internet; computer network security; cryptographic protocols; network servers; peer-to-peer computing; public key cryptography; transport protocols; IKE authentication; IKE negotiation process; IPSec architecture; IPSec interoperability; IPv4 translation gateway; IPv6 translation gateway; TCP/IP intrinsic functionality; address based key; certificateless signature; end node administration; end to end IPSec support; intermediate networking device; public key infrastructure; transparent routing mechanism; Authentication; IP networks; Logic gates; Payloads; Peer to peer computing; Servers; Certificateless Signature; IKE Authentication; IPSec; IPv4/IPv6 Translation Gateway;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Network Applications Protocols and Services (NETAPPS), 2010 Second International Conference on
  • Conference_Location
    Kedah
  • Print_ISBN
    978-1-4244-8048-7
  • Electronic_ISBN
    978-0-7695-4177-8
  • Type

    conf

  • DOI
    10.1109/NETAPPS.2010.47
  • Filename
    5635802