• Title/Summary/Keyword: Translation Protocol

Search Result 77, Processing Time 0.026 seconds

An End-to-end IPSec Security Mechanism considering NAT-PT (NAT-PT를 고려한 단대단 IPSec 보안 메커니즘)

  • 현정식;황윤철;정윤수;이상호
    • Journal of KIISE:Information Networking
    • /
    • v.30 no.5
    • /
    • pp.604-613
    • /
    • 2003
  • Network Address Translation-Protocol Translation(NAT-PT) is an IPv4/IPv6 translation mechanism, as defined in RFC2766, allowing IPv6-only devices to communicate with IPv4-only devices and vice versa. But NAT-PT has the restriction that applies to IPv4 NAT where NAT-PT does not provide end-to-end security, which is a major goal of IPSec. Therefore it cannot support security services such as confidentiality, authentication, and integrity. In this paper, we propose secure NAT-PT(SNAT-PT) and the corresponding secure host architecture to support IPSec security service. And also tunneling scheme using dummy IP header is presented to show the valid operation of end-to-end IPSec protocol on the proposed architectures.

Design and Implementation of the Internetworking Architecture between IPv4 and IPv6 in IMS based Mobile networks (IMS기반 이동패킷망에서의 IPv4/IPv6 연동구조 설계 및 구현)

  • You, Seugn-Kwan;Kim, Young-Han
    • Journal of the Institute of Electronics Engineers of Korea TC
    • /
    • v.43 no.11 s.353
    • /
    • pp.168-174
    • /
    • 2006
  • In this paper, we propose an architecture for communication between the IPv4-based UA and the IPv6-based UA in IMS based Mobile Networks, and design and implement the IMS protocol Translator for verification of the architecture. For the design of the internetworking between the IPv4 and the IPv6, we analyze the transition mechanisms and investigate the protocol translator. The IMS protocol translator is composed of the IMS-ALG(IP Multimedia Subsystem - Application Level Gateway) and TrGW(Translation Gateway), and the conformance of these components are verified by experiments.

Extended Security Policy Protocol that considers NAT-PT (NAT-PT를 고려한 확장된 보안정책 프로토콜)

  • Hyun, Jeung-Sik;Hwang, Yoon-Cheol;Um, Nam-Kyoung;Lee, Sang-Ho
    • The KIPS Transactions:PartC
    • /
    • v.10C no.5
    • /
    • pp.549-556
    • /
    • 2003
  • In this paper, we describe security policy protocol to provide end-to-end IPSec security service that considers characteristics of NAT-PT. NAT-PT is describing IP address translation and protocol translation for communication on heterogeneous IP network by one of the technology that is proposed by IETF to provide communication between IPv4 and IPv6 network in transitional step to evolve by IPv6 network to IPv4 network. But NAT-PT has the limitation on security one of the essential requirement of Internet. Therefore, we propose the extended security protocol that offers a security policy negotiation that should be achieved for the first time to provide end-to-end IPSec security service that considers NAT-PT in this paper.

Design and Implementaion of IPv4/IPv6 Translation Protocol (IPv4/IPv6 변환 프로토콜의 설계 및 구현)

  • Park, Seok-Cheon;Lee, Gwang-Bae
    • The KIPS Transactions:PartC
    • /
    • v.8C no.6
    • /
    • pp.783-792
    • /
    • 2001
  • It is well known that, in the near future, the lifetime of the IPv4 address space will be limited and available 32-bit IP network addresses will not be left any more. In order to solve such IPv4 address space problem in an effective way, the transition to the new version using IPv6 architecture is inevitably required. At present, it is impossible to convert IPv4 into IPv6 at a time, since the coverage and the size of today's Internet is too huge. Therefore, the coexistence of both IPv4 and IPv6 must be arranged in a special and practical fashion for rapid conversion on the whole. IP protocol translation has been proposed to ease the translation of the Internet from IPv4 to IPv6. This paper presents the design and implementation of a transparent transition service that translates packet header as they cross between IPv4 and IPv6 networks. IPv4/IPv6 Translation Protocol is written in c source code and is tested by the local test recommended by ISO, which has the most excellent error detection function. The test was processed with a test scenario and it was found that the results were successful.

  • PDF

A Study of an NAT Protocol using Virtual IP Information in the TCP Segment (TCP 세그멘트내의 가상 IP 정보를 이용하는 NAT 프로토콜에 대한 연구)

  • Hwang, Jae-Yong;Ju, Gi-Ho
    • The Journal of Engineering Research
    • /
    • v.5 no.1
    • /
    • pp.45-55
    • /
    • 2004
  • NAT (Network Address Translation) is an IP address modification protocol that translates private IP address into authentic Internet address. The main features of NAT are to improve network security and to save IP address. Generally speaking, in order to perform its functionality, NAT uses the address information in the packet header. Certain application protocols, however, use the information in the packet data as well as the information in the packet header to perform end-to-end communication. Therefore, to support these types of application protocols, NAT should be able to perform appropriate translation of protocol information in the packet data. In this thesis, we design and implement a method which translates virtual IP information in the packet date into real IP information by using port proxy server.

  • PDF

Analysis and Design of Functional Blocks for IIPv4/IPv6 Protocol and Address Translation (IPv4/IPv6 프로토콜 및 주소변환 기능의 요소기술 분석 및 설계)

  • 이승민;진재경;민상원
    • Journal of KIISE:Information Networking
    • /
    • v.30 no.1
    • /
    • pp.117-125
    • /
    • 2003
  • IPv6 (IP version 6), which was standardized by the IETF (Internet Engineering Task Force) to cope with existing IPv4 problems, needs several approaches for interoperation with IPv4. The internetworking of IPv6 with IPv4 is an important key to the deployment of the next generation Internet. As the solutions to the transition mechanism, both tunneling and translator methods have been proposed. In this paper, we analyze functional elements for implementation design of a transition mechanism based on the NAT-PT (NAT-Protocol Translation), and propose an extension algorithm that uses ports for effective use of global IPv4 addresses. The algorithm presented in this paper is a method of combining NAT-PT with Port Translation mechanism. The algorithm does not assign an IPv4 address to the host that needs IPv4 address, but allocates a single temporary IPv4 address and a port number in order to identify host.

Gateway Architecture for Ubiquitous Access to ZigBee-Based Sensor Networks (ZigBee 기반 센서 네트워크로의 유비쿼터스 접근을 위한 게이트웨이 아키텍처)

  • Heo, Ung;Peng, Qiu;You, Kang-Soo;Choi, Jae-Ho
    • The Journal of the Korea Contents Association
    • /
    • v.10 no.8
    • /
    • pp.73-83
    • /
    • 2010
  • This paper investigates protocol architecture of a Web-ZigBee gateway for interconnecting TCP/IP-based networks and ZigBee/IEEE802.15.4-based wireless sensor networks. The Web-ZigBee gateway delivers data between the TCP/IP network and the ZigBee network. Since those two networks have different communication protocols, a protocol translation mechanism is needed. Herein, we propose a method to deliver query messages from the Internet to the sensor network and receive data from sensors. The protocol translation is performed in the translation layer that is placed above the two application layers, i.e., the Internet application layer and ZigBee application layer. Among various interfaces, we use CGI programming to take care of translation functions efficiently. The CGI manages query information from a client on the Internet and data from the ZigBee sensor network. Whereas the TCP/IP enabled sensor network overlays two heterogeneous communication protocols, overlaying layers increase the complexity and cost of implementing the sensor network. On the contrary, the sensors in our gateway-based system are not only light (because each communication protocol works independently without overlaying), but also efficient because the translation layer mostly alleviates header overloading.

Design and Implementation of IPv6-support FTP-ALG (IPv6 지원 FTP-ALG 설계 및 구현)

  • 홍용근;이주철;신명기;김형준
    • Proceedings of the Korean Institute of Information and Commucation Sciences Conference
    • /
    • 2002.11a
    • /
    • pp.652-655
    • /
    • 2002
  • The next generation Internet Protocol IPv6 that is appeared to solve the exhausting problem is now widely deployed in a testbed or commercial site. To successfully deploy IPv6, interoperation with exist IPv4 hosts and routers and interactions with many IPv4 applications are more important. The NAT-PT (Network Address Translation-Protocol Translation) among IPv6 transition mechanism enables the communication between IPv4 and IPv6 host with translating IPv4 address and IPv6 address. But for DNS and FTP, another specific mechanism is needed when internet address is included in packet payload area. This paper describes the design and implementation of IPv6-support FTP-ALG, (Application Layer Gateway) to enable FTP service between IPv4 node and IPv6 node.

  • PDF

Korean Translation of the CARE guidelines (CARE 지침 한국어판 제작)

  • Lee, Seung Min;Shin, Ye Sle;Nam, Dong Woo;Choi, Do Young
    • Journal of Acupuncture Research
    • /
    • v.32 no.4
    • /
    • pp.1-9
    • /
    • 2015
  • Objectives : The aim of this study is to develop the official Korean translation of the CARE guidelines. Methods : CARE guidelines were developed in 2013 though a consensus of experts led by the CARE group. It is the first reporting guideline for case reports that includes a 13-item checklist. We contacted the main author of the original manuscript and obtained permission to develop the Korean translation. The translation process followed a systematic protocol designated by the CARE group which included an independent back translation and confirmation from the original author. Results : The Korean translation of the CARE guidelines was completed with approval from the original author. The Korean checklist is posted on the official website (www.care-statement.org) and the final translation of the manuscript is introduced in this article as an appendix. Conclusions : We hope that this will help introduce the CARE guidelines to Korean authors and other stakeholders, induce a more active use of reporting guidelines, and eventually contribute to the overall improvement of the reporting quality of case reports published in Korean literature.

A study on IWU functions interconnecting LANs via B-ISDN (B-ISDN을 경유한 LAN간 접속 IWU 기능에 관한 연구)

  • 이종영;조용구;오영환
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.21 no.7
    • /
    • pp.1746-1755
    • /
    • 1996
  • In this paper, we propose the protocol stact and the server functions of IWU which interconnects distributed LAN's users by using of B-ISDN. The protocol stact of interconnecting IWU under consideration users TCP/IP in upper layer. TCP/IP is popular communication protocol in interconnecting distributed LANs. The interconnecting IWU has server functions for transfering datagrams to B-ISDN such as address translation, fragment and reassembly, CL server, signalling and traffic control. We analyze the performance ofinterconnecting IWU with M/M/1/K queueing model and obtain the throughput and buffer size of interconnecting IWU.

  • PDF