Decentralized Secure Communication across NAT

článek v časopise - ostatní, Jost

angličtina

When a host in a public network needs to open a connection to another one which is behind a network address translator the connection cannot be established in an ordinary way because of the translation. An approach called “UDP hole punching” allows opening such connection. This article deals with this approach to propose security architecture for communication using IPv4 protocol, introducing so called “implicit security” concept. Key benefits of this concept are ability to connect with any host behind network address translator using just a host’s domain name. Encryption and authentication of all data transmitted through this connection right from the packet sender to the real local receiver is a matter of course. Secure channel is established automatically on-demand and is independent on any application. No additional modification of current standards like NAT, IP v4 or DNS is required.

IPv4, DNS, secure communication, TCP protocol

Lubomír Cvrk Jiří Mišurec Petr Daněček

2005

1. 11. 2005

Soul

1738-6438

International Transaction on Computer Science and Engineering

1

23

Korejská republika

121

134

14