• The KIPS Transactions:PartC
• /
• v.8C no.6
• /
• pp.721-730
• /
• 2001

Nowadays corporation networks are growing rapidly and they are needed to communicate with branch offices. Therefore, a VPN (Virtual Private Network) appears to reduce the cost of access and facilitate to manage and operate the enterprise network. Along with this trend, many studies have been done on VPN. It is important that the performance issues should be considered when VPN protocols are applied. However, most of them are limited on the tunneling methods and implementation of VPN and a few studies are performed on how installation of VPN affects the network. Therefore, in this paper, a testbed is constructed and VPN protocols are installed on it. Real traffic is generated and transmitted on the testbed to test how installing a VPN affects the network. As a result, layer 3 VPN protocol shows lower network performance than layer 2 VPN protocols. And we realize that the combination of L2TP and IPSec is the better method to install VPN than using IPSec only in the aspects of performance and security.

• The Transactions of the Korean Institute of Electrical Engineers D
• /
• v.53 no.9
• /
• pp.638-643
• /
• 2004

Middleware enables different networking devices and protocols to inter-operate in ubiquitous home network environments. The UPnP(Universal Plug and Play) middleware, which runs on a PC and is based on the IPv4 protocol, has attracted much interest in the field of home network research since it has versatility The UPnP, however, cannot be easily accessed via the public Internet since the UPnP devices that provide services and the Control Points that control the devices are configured with non-routable local private or Auto IP networks. The critical question is how to access UPnP network via the public Internet. The purpose of this paper is to deal with the non-routability problem in local private and Auto IP networks by improving the conventional Control Point used in UPnP middleware-based home networks. For this purpose, this paper proposes an improved Control Point for accessing and controlling the home network from remote sites via the public Internet, by adding a web server to the conventional Control Point. The improved Control Point is implemented in an embedded GNU/Linux system running on an ARM9 platform. Also this paper implements the security of the home network system based on the UPnP (Universal Plug and Play), adding VPN (Virtual Private Network) router that uses the IPsec to the home network system which is consisted of the ARM9 and the Embedded Linux.

• Proceedings of the IEEK Conference
• /
• 2001.06a
• /
• pp.387-390
• /
• 2001

In this paper, we propose methods for designing the Virtual Private Network (VPN) which guarantees a strict Quality of Service (QoS) over A TM networks. The required Quality of Service is a very strict Cell Loss Probability, and it is guaranteed by pro riding equivalent bandwidth which is computed so that the provided bandwidth is sufficient to guarantee that requirement. We consider two network architectures for constructing VPM, the customer pipe scheme and the Hose scheme, and we propose a method to compute the amount of the required bandwidth for the two schemes. Finally, we investigate the implication of the scheme via numerical experiments.

• Review of KIISC
• /
• v.9 no.4
• /
• pp.3-10
• /
• 1999

현재의 산업 상황은 제한적인 내부 네트워크의 사용만으로는 충분히 뒷받침할수 없 는 새로운 업무형태로 바뀌었다. 기업에서는 내부 네트워크의 구성뿐만 아니라 증가하는 지 사나 이동 근무자나 재택근무자들을 지원하기 위한 네트워크 확장이 필요하게 되었다. 그러 나 기존 네트워크 구성에서 사용하던 전용선이나 PSTN을 이용하는 방법은 많은 비용 때문 에 기업에 과중한 부담을 가져오게 되었으며 이에 대한 해결책으로 VPN이 제안되었다. VPN은 공중망을 매개로 한 가상적인 네트워크 구성으로서 네트워크 확장에 소요되는 비용 을 크게 절감하고 네트워크 관리를 용이하게 하였다. 특히 근래에 인터넷 사용자가 급격하 게 증가하면서 보안 솔루션으로서의 IP 기반 VPN에 대한 관심이 집중되고 있다, 본 고에서 는 VPN 기술의 전반적인 내용에 대해 소개하고 VPN의 핵심기술이라 할수 있는 터널링 기 술을 IPsec 중심으로 살펴보기로 한다.

• Journal of KIISE:Information Networking
• /
• v.33 no.3
• /
• pp.218-230
• /
• 2006

The enterprise service network is composed of internet, intranet and DMZ. The design rationale of Mobile IP is providing of seamless mobility transparency without regarding to the type of network topology and services. However, Mobile IP specification does not include the mobility support in case of using VPN environment and define the access scenarios to get into the VPN intranet without disturbing existing security policy. In this paper, we propose an authentication method using AAA infrastructure and keying material exchange to enable an user in internet to be able to access the intranet through the VPN gateway. Finally, performance analysis for the proposed scheme is provided.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.19 no.5
• /
• pp.1097-1103
• /
• 2015

In order to build network infrastructure to implement the aforementioned advantages enabling smart device users to work anywhere, professional support and expensive VPN devices are required. This is a barrier to supplying VPN devices to small and medium-sized institutes. To address this issue, this study aims to implement OpenVPN, OpenSSH and iproute based on the OpenWRT platform which is an embedded OS for open networks in affordable open wired/wireless gateway H/W platforms to support the inter-network VPN. In addition, the network environment can be maintained optimal by applying a "multi-queuing real-time traffic shaping technology" to VPN tunnels, although channel quality changes.

• Annual Conference of KIPS
• /
• 2000.04a
• /
• pp.1123-1128
• /
• 2000

현재 사용되는 전자 지불 시스템은 전자 상거래의 기본 요소인 기밀성, 인증, 메시지 무결성, 부인 방지, 재사용 방지 등을 위하여 공개키 방식의 연산을 수행한다. 그러나, 이러한 공개키 방식은 많은 시스템 연산 수행을 요구한다는 단점이 있다. 이에 본 논문에서는 현재 네트웍 보안에 많이 사용되고 있는 VPN( Virtual Private Network )을 이용하여 대칭키 기반의 전자 지불 시스템을 설계함으로써 좀 더 안전하고 효율적인 전자 지불을 수행하고자 하였다.

• Proceedings of the Korean Operations and Management Science Society Conference
• /
• 2000.04a
• /
• pp.679-682
• /
• 2000

현재 기업은 정보통신과 컴퓨터 기술의 비약적인 발전으로 본사와 지사 사이의 정보의 교환이 중요한 문제로 대두되고 있다. 특히 재택근무에 대한 관심이 높아지고 있으며 이에 대한 방편으로 RAS(Remote Access Server) 및 VPN(Virtual Private Network)에 대한 연구가 활발히 이루어지고 있다. 본 연구에서는 VPN 및 RAS서버의 효율적인 구축 방법을 제시하고자 한다.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2002.11a
• /
• pp.601-604
• /
• 2002

가상사설망(VPN)은 인터넷을 통하여 특정한 영역의 커뮤니터를 통합적으로 연결하여 상호간의 정보 전달을 인터넷을 통하여 통신하는 방법 중의 하나이다. 따라서, 가상사설망의 경우 정보보호를 위한 알고리즘의 성능분석이 필수적이다. 따라서, 본 논문에서는 VPN 게이트웨이 데이타의 정보보호를 위한 IPSec에 적용 가능한 알고리즘을 시간 복잡도와 공간 복잡도에 대해 성능을 분석한다.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.32 no.4B
• /
• pp.191-199
• /
• 2007

Mobile node has to register its current location to Home Agent when it moves to another network while away from home. However, the registration procedure cannot be completed successfully when Home Agent is protected by the VPN gateway which guards MN's home network and discards the unauthorized packets incoming from outside as a lack of security association(SA) between the Care-of address and security policy of the home network so that the binding registration message without SA is discarded smoothly by the VPN gateway. This paper presents the authentication and key exchange scheme using the AAA infrastructure for a user in Internet to access the home network behind the VPN gateway. By defining the role of authentication and tunnel processing for each agent or relay entity, this paper presents the procedure to register the current location to its Home Agent with secure manner. Performance result shows cost improvement up to 40% comparing with existing scheme in terms of the packet loss cost, the property of mobility and traffic.