E2E : an optimized IPsec architecture for secure and fast offload - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès IWSMA '12 : The First International Workshop on Security of Mobile Applications Année : 2012

E2E : an optimized IPsec architecture for secure and fast offload

Résumé

When mobile End Users are offloaded from a Radio Access Network (RAN) to a WLAN, current I-WLAN [1] offloaded architectures consider traffic converging to a common Security Gateway. In this paper, we propose an alternative End-to-End security (E2E) architecture based on the MOBIKEX [2] protocol, which extends the MOBIKE [3] Mobility and Multihoming features to Multiple Interfaces and to the Transport mode of IPsec. The benefits of this E2E architecture are mostly load reduction and a better End User experience. First, E2E offloads the ISP CORE and backhaul networks, then E2E uses IPsec Transport mode instead of Tunnel mode, which removes networking and security overhead. This reduces CPU load by 20%, enhances Mobility and Multihoming operations by about 15%, and makes the system 2.9 times more reactive for detecting modifications of interfaces.
Fichier principal
Vignette du fichier
IWSMA2012_Migault-E2E-Offload-Ipsec.pdf (896.24 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-00756529 , version 1 (23-11-2012)

Identifiants

Citer

Daniel Migault, Daniel Palomares, Emmanuel Herbert, Wei You, Gabriel Ganne, et al.. E2E : an optimized IPsec architecture for secure and fast offload. IWSMA '12 : The First International Workshop on Security of Mobile Applications, Aug 2012, Prague, Czech Republic. pp.365-374, ⟨10.1109/ARES.2012.80⟩. ⟨hal-00756529⟩
131 Consultations
421 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More