{"title":"面向IPv6的端口控制协议和对等通信安全机制的设计与实现","authors":"Lei YAN , Qin ZHAO , Zi-wei HU , Xin LI","doi":"10.1016/S1005-8885(14)60512-4","DOIUrl":null,"url":null,"abstract":"<div><p>Recently, the number of personal intelligent equipment increases rapidly which makes the internet protocol version 6 (IPv6) transition more imperative. Port control protocol (PCP) is one of the important IPv4-in-IPv6 tunnel technologies. Meanwhile, with the increasing demand to communicate or share files between terminal equipment, it is necessary to realize the peer to peer communication to support the transmission of data directly between the terminal equipment without a third-party server. In this paper, the structure of user access network and the deployment of the IPv6 transition technology based on IPv4-in-IPv6 tunnel are analyzed comprehensively, based on which the internet protocol security (IPSec) solution is chosen to protect the security of PCP message and the transport layer security (TLS) solution is chosen to protect the security of the peer-to-peer communications. A system for the authorization and distribution of digital certificates is designed for the TLS solution. Finally, the open source software Openswan is used to implement the IPSec solution, and the open source software OpenSSL is used to implement the TLS solution.</p></div>","PeriodicalId":35359,"journal":{"name":"Journal of China Universities of Posts and Telecommunications","volume":"21 ","pages":"Pages 52-58"},"PeriodicalIF":0.0000,"publicationDate":"2014-07-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/S1005-8885(14)60512-4","citationCount":"1","resultStr":"{\"title\":\"Design and implementation of IPv6 oriented security mechanisms of port control protocol and peer-to-peer communication\",\"authors\":\"Lei YAN , Qin ZHAO , Zi-wei HU , Xin LI\",\"doi\":\"10.1016/S1005-8885(14)60512-4\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"<div><p>Recently, the number of personal intelligent equipment increases rapidly which makes the internet protocol version 6 (IPv6) transition more imperative. Port control protocol (PCP) is one of the important IPv4-in-IPv6 tunnel technologies. Meanwhile, with the increasing demand to communicate or share files between terminal equipment, it is necessary to realize the peer to peer communication to support the transmission of data directly between the terminal equipment without a third-party server. In this paper, the structure of user access network and the deployment of the IPv6 transition technology based on IPv4-in-IPv6 tunnel are analyzed comprehensively, based on which the internet protocol security (IPSec) solution is chosen to protect the security of PCP message and the transport layer security (TLS) solution is chosen to protect the security of the peer-to-peer communications. A system for the authorization and distribution of digital certificates is designed for the TLS solution. Finally, the open source software Openswan is used to implement the IPSec solution, and the open source software OpenSSL is used to implement the TLS solution.</p></div>\",\"PeriodicalId\":35359,\"journal\":{\"name\":\"Journal of China Universities of Posts and Telecommunications\",\"volume\":\"21 \",\"pages\":\"Pages 52-58\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2014-07-01\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"https://sci-hub-pdf.com/10.1016/S1005-8885(14)60512-4\",\"citationCount\":\"1\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Journal of China Universities of Posts and Telecommunications\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://www.sciencedirect.com/science/article/pii/S1005888514605124\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q4\",\"JCRName\":\"Computer Science\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Journal of China Universities of Posts and Telecommunications","FirstCategoryId":"1085","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S1005888514605124","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q4","JCRName":"Computer Science","Score":null,"Total":0}
引用次数: 1
摘要
近年来,个人智能设备数量的迅速增加,使得互联网协议版本6 (IPv6)的过渡更加迫切。端口控制协议(Port control protocol, PCP)是IPv4-in-IPv6隧道的重要技术之一。同时,随着终端设备之间通信或文件共享的需求日益增加,有必要实现点对点通信,以支持终端设备之间不需要第三方服务器直接传输数据。本文综合分析了用户接入网的结构和基于IPv4-in-IPv6隧道的IPv6转换技术的部署,在此基础上选择了互联网协议安全(IPSec)方案来保护PCP报文的安全性,选择了传输层安全(TLS)方案来保护对等通信的安全性。为TLS解决方案设计了一个数字证书的授权和分发系统。最后,采用开源软件Openswan实现IPSec解决方案,采用开源软件OpenSSL实现TLS解决方案。
Design and implementation of IPv6 oriented security mechanisms of port control protocol and peer-to-peer communication
Recently, the number of personal intelligent equipment increases rapidly which makes the internet protocol version 6 (IPv6) transition more imperative. Port control protocol (PCP) is one of the important IPv4-in-IPv6 tunnel technologies. Meanwhile, with the increasing demand to communicate or share files between terminal equipment, it is necessary to realize the peer to peer communication to support the transmission of data directly between the terminal equipment without a third-party server. In this paper, the structure of user access network and the deployment of the IPv6 transition technology based on IPv4-in-IPv6 tunnel are analyzed comprehensively, based on which the internet protocol security (IPSec) solution is chosen to protect the security of PCP message and the transport layer security (TLS) solution is chosen to protect the security of the peer-to-peer communications. A system for the authorization and distribution of digital certificates is designed for the TLS solution. Finally, the open source software Openswan is used to implement the IPSec solution, and the open source software OpenSSL is used to implement the TLS solution.