Efficient Secure Pipe: Achieving Security and Efficiency in IPv6 Networks

• Main Authors: Chih-ying Chang, 張知穎
• Other Authors: Jung-Shian Li
• Format: Others
• Language: en_US
• Published: 2008
• Online Access: http://ndltd.ncl.edu.tw/handle/69618339645045965826

碩士 === 國立成功大學 === 電腦與通信工程研究所 === 96 === For the growth up of the wireless networks, more and more devices need to be connected in the networks. The “network security” issue has become important in recent years. However, the trade-off between the security and efficiency always exits. IP security is considered as the most popular security architecture for the communication between two gateways. But the kind of security solution always brings the larger size packets and long processing time. This thesis proposed a new architecture, called Efficient Secure Pipe. It integrates the payload and header compression mechanisms in IP security architecture to achieve both security and efficiency in IPv6 networks. The traditional header compression algorithms are based on a hop-by-hop architecture. Therefore we present a new header compression algorithm, called IPsecHC for Efficient Secure Pipe, to be performed in a path. The difference between the traditional IPsec and Efficient Secure Pipe is that Efficient Secure Pipe provides different compressions to different traffic types. It is easy to deploy in the wireless IPv6 networks. Furthermore, Efficient Secure Pipe uses only one mode to replace transport mode and tunnel mode in the traditional IPsec. Most importantly, the implementation results show that the compression has active influence on encryption no matter for TCP traffic or RTP streams. Therefore, Efficient Secure Pipe can achieve both security and efficiency.