Decentralized Secure Communication across NAT

conference paper

English

When a host in a public network needs to open a connection to another one which is behind a network address translator the connection cannot be established in an ordinary way because of the translation. An approach called “UDP hole punching” allows opening such connection. This article deals with this approach to propose security architecture for communication using IPv4 protocol, introducing so called “implicit security” concept. Key benefits of this concept are ability to connect with any host behind network address translator using just a host’s domain name. Encryption and authentication of all data transmitted through this connection right from the packet sender to the real local receiver is a matter of course. Secure channel is established automatically on-demand and is independent on any application. No additional modification of current standards like NAT, IP v4 or DNS is required.

IPv4, DNS, secure communication, TCP protocol

Lubomír Cvrk Jiří Mišurec Petr Daněček

2005

24. 10. 2005

89-953729-5-8

Proceedings 2nd International Conference on Electronics, Hardware, Wireless and Optical Communications

10

23

14