Redesigning of IPSec for interworking with Satellite Performance Enhancing Proxies

Haitham Cruickshank; Muhammad Nasir Mumtaz Bhutta; Martin Moseley; John Ashworth

1st International ICST Workshop on Satellite Communications

Research Article

Redesigning of IPSec for interworking with Satellite Performance Enhancing Proxies

Cite: BibTeX Plain Text

@INPROCEEDINGS{10.1109/ChinaCom.2011.6158321,
    author={Haitham Cruickshank and Muhammad Nasir Mumtaz Bhutta and Martin Moseley and John Ashworth},
    title={Redesigning of IPSec for interworking with Satellite Performance Enhancing Proxies},
    proceedings={1st International ICST Workshop on Satellite Communications},
    publisher={IEEE},
    proceedings_a={SATCOM},
    year={2012},
    month={3},
    keywords={ml-ipsec ipsec pep tcp and http},
    doi={10.1109/ChinaCom.2011.6158321}
}

Haitham Cruickshank
Muhammad Nasir Mumtaz Bhutta
Martin Moseley
John Ashworth
Year: 2012
Redesigning of IPSec for interworking with Satellite Performance Enhancing Proxies
SATCOM
IEEE
DOI: 10.1109/ChinaCom.2011.6158321

Haitham Cruickshank^,*, Muhammad Nasir Mumtaz Bhutta¹, Martin Moseley², John Ashworth²

1: University of Surrey
2: Astrium

*Contact email: H.Cruickshank@surrey.ac.uk

Abstract

Performance Enhancing Proxies (PEPs) are used in satellite networks for better performance of the TCP/IP applications. Multi-layer IPSec (ML-IPSec) resolves the conflict between end-to-end security in standard IPSec and working of PEPs. This paper presents the concept and detailed design of ML-IPSec by breaking the IP datagram into three zones while enabling the intermediate nodes to access the TCP header and HTTP header information. The paper also presents an efficient interworking scheme between ML-IPSec and secure IP multicast using the Logical Key Hierarchy for key distribution

Keywords: ml-ipsec ipsec pep tcp and http

Published: 2012-03-27
Publisher: IEEE

: http://dx.doi.org/10.1109/ChinaCom.2011.6158321