A multilayer IP security protocol for TCP performance enhancement in wireless networks

Authors:
Yongguang Zhang
Affiliations:
HRL Labs., Malibu, CA, USA
Venue:
IEEE Journal on Selected Areas in Communications
Year:
2006

Citing 0
Cited 3

Providing Relative Service Differentiation to TCP Flows over Split-TCP Geostationary Bandwidth on Demand Satellite Networks

WWIC '07 Proceedings of the 5th international conference on Wired/Wireless Internet Communications
Design and performance analysis of CZML-IPSec for satellite IP networks

NPC'07 Proceedings of the 2007 IFIP international conference on Network and parallel computing
Performance-aware security of unicast communication in hybrid satellite networks

ICC'09 Proceedings of the 2009 IEEE international conference on Communications

Quantified Score

Hi-index	0.07

Visualization

Abstract

Transmission control protocol (TCP) performance enhancement proxy (PEP) mechanisms have been proposed, and in some cases widely deployed, to improve TCP performance in all-Internet protocol (IP) wireless networks. However, this technique is conflicted with IP-security (IPsec)-a standard IP security protocol that will make inroad into wireless networks. This paper analyzes the fundamental problem behind this conflict and develops a solution called multilayer IP-security (ML-IPsec). The basic principle is to use a multilayer protection model and a fine grain access control to make IP security protocols compatible with TCP PEP. It allows wireless network operators or service providers to grant base stations or wireless routers limited and controllable access to the TCP headers for performance enhancement purposes. Through careful design, implementation, and evaluation, we show that we can easily add ML-IPsec to existing IPsec software and the overhead is low. We conclude that ML-IPsec can help wireless networks provide both security and performance.