Publication detail

Decentralized Secure Communication across NAT

Lubomír Cvrk Jiří Mišurec Petr Daněček

Original Title

Decentralized Secure Communication across NAT

Type

journal article - other

Language

English

Original Abstract

When a host in a public network needs to open a connection to another one which is behind a network address translator the connection cannot be established in an ordinary way because of the translation. An approach called “UDP hole punching” allows opening such connection. This article deals with this approach to propose security architecture for communication using IPv4 protocol, introducing so called “implicit security” concept. Key benefits of this concept are ability to connect with any host behind network address translator using just a host’s domain name. Encryption and authentication of all data transmitted through this connection right from the packet sender to the real local receiver is a matter of course. Secure channel is established automatically on-demand and is independent on any application. No additional modification of current standards like NAT, IP v4 or DNS is required.

Keywords

IPv4, DNS, secure communication, TCP protocol

Authors

Lubomír Cvrk Jiří Mišurec Petr Daněček

RIV year

2005

Released

1. 11. 2005

Location

Soul

ISBN

1738-6438

Periodical

International Transaction on Computer Science and Engineering

Year of study

1

Number

23

State

Republic of Korea

Pages from

121

Pages to

134

Pages count

14

BibTex

@article{BUT46612,
  author="Jiří {Mišurec} and Petr {Daněček} and Lubomír {Cvrk}",
  title="Decentralized Secure Communication across NAT",
  journal="International Transaction on Computer Science and Engineering",
  year="2005",
  volume="1",
  number="23",
  pages="14",
  issn="1738-6438"
}