Title :
End to End Ipsec Support across Ipv4/Ipv6 Translation Gateway
Author :
Ahmad, Nazrul M. ; Yaacob, Asrul H.
Author_Institution :
Fac. of Inf. Sci. & Technol., Multimedia Univ., Ayer Keroh, Malaysia
Abstract :
The presence of IPv4/IPv6 translation gateway provides transparent routing mechanism to IPv4-only nodes and IPv6-only nodes which trying to establish communication from disparate address realms. However, the mechanism breaks TCP/IP intrinsic functionalities that results in IPSec cannot be applied in this environment. The existing solutions to address the compatibility issues between translation gateway and IPSec are either to enhance the translation gateway operation or to modify IPSec architecture especially on IKE negotiation process. By realizing the fact that most of the intermediate networking devices such as translation gateway are beyond the end nodes administration, this paper discusses the existing solutions to improve IKE negotiation in order to ensure end to end IPSec interoperability across translation gateway. Inspired by this solution, this paper proposes new IKE authentication by using Address Based Keys with certificateless signature to alleviate the limitation of traditional pre-shared keys and Public Key Infrastructure (PKI).
Keywords :
Internet; computer network security; cryptographic protocols; network servers; peer-to-peer computing; public key cryptography; transport protocols; IKE authentication; IKE negotiation process; IPSec architecture; IPSec interoperability; IPv4 translation gateway; IPv6 translation gateway; TCP/IP intrinsic functionality; address based key; certificateless signature; end node administration; end to end IPSec support; intermediate networking device; public key infrastructure; transparent routing mechanism; Authentication; IP networks; Logic gates; Payloads; Peer to peer computing; Servers; Certificateless Signature; IKE Authentication; IPSec; IPv4/IPv6 Translation Gateway;
Conference_Titel :
Network Applications Protocols and Services (NETAPPS), 2010 Second International Conference on
Conference_Location :
Kedah
Print_ISBN :
978-1-4244-8048-7
Electronic_ISBN :
978-0-7695-4177-8
DOI :
10.1109/NETAPPS.2010.47