ETRI-Knowledge Sharing Plaform

ENGLISH

성과물

논문 검색
구분 SCI
연도 ~ 키워드

상세정보

학술대회 Implementation of 10 Giga VPN Accelerator Board
Cited 0 time in scopus Download 0 time Share share facebook twitter linkedin kakaostory
저자
김기현, 유장희, 정교일
발행일
200602
출처
International Conference on Advanced Communication Technology (ICACT) 2006, pp.1552-1556
협약과제
06MK1500, 고인식 다중생체인식 전용칩셋 기술, 정교일
초록
This paper proposes a VPN Accelerator Board (VPN-AB), a virtual private network (VPN) protocol designed for trust channel security system (TCSS). TCSS supports safety communication channel between security nodes in internet. It furnishes authentication, confidentiality, integrity, and access control to security node to transmit data packets with IPsec protocol. TCSS consists of internet key exchange block, and security association block, IPsec engine block. The internet key exchange block negotiates crypto algorithm and key used in IPsec engine block. Security Association blocks setting-up and manages security association information. IPsec engine block treats IPsec packets and consists of networking functions for communication. The IPsec engine block should be embodied by H/W and in-line mode transaction for high speed IPsec processing. Our VPN-AB is implemented with high speed security processor that supports many cryptographic algorithms and in-line mode. We evaluate a small TCSS communication environment, and measure a performance of VPN-AB in the environment. The experiment results show that VPN-AB gets a performance throughput of maximum 15.645Gbps when we set the IPsec protocol with 3DES-HMAC-MD5 tunnel mode.
KSP 제안 키워드
Communication Environment, Crypto algorithm, Cryptographic Algorithms, Data packet, Engine block, Experiment results, High Speed, IPsec protocol, In-line, Internet Key Exchange(IKE), Safety communication