IPsec Tunnel Management with Kernel Drivers and Filter Engine
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secured communications systems, such as Unisys' Stealth solution and IPsec, face limitations including compatibility issues with IPv6 networks, operating system specificity, and lack of support for legacy systems, as well as inconsistencies in connection parameters and imperfect forward secrecy.
Innovation Solution
A secure communications arrangement that includes a computing system with a user-level services component and a kernel-level callout driver to establish IPsec tunnels, along with a filter engine for authorized endpoints, and a second kernel-level driver for secure tunnel creation using a different security protocol, ensuring compatibility across various networks and operating systems, and achieving perfect forward secrecy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IPsec is implemented for securing communications, then security is improved, but compatibility with legacy operating systems deteriorates
Solution Approach 1:
A gateway appliance is introduced as an intermediary component that bridges legacy operating systems and IPsec-enabled systems. The gateway translates and forwards communications between systems that cannot natively establish IPsec tunnels, thereby maintaining security through IPsec where possible while preserving compatibility with legacy systems through the mediation layer.
Solution Approach 2:
The security architecture is segmented into multiple layers: native IPsec tunnels for compatible systems and gateway-mediated tunnels for legacy systems. This segmentation allows each segment to use the most appropriate security mechanism for its specific requirements, optimizing both security and compatibility across the entire network.
2Reliability
If point-to-point IPsec tunnels are established, then security between two systems is improved, but support for multiple entities within a community of interest deteriorates
Solution Approach 1:
Multiple point-to-point IPsec tunnels are merged into a single multi-homed tunnel that supports multiple endpoints within a community of interest. This consolidation reduces the number of individual tunnel management tasks while maintaining the security benefits of IPsec, allowing one tunnel to serve multiple communication pairs simultaneously.
Solution Approach 2:
The IPsec tunnel implementation is enhanced to provide multi-functionality, enabling a single tunnel infrastructure to support both traditional point-to-point security requirements and multi-entity community of interest communications. This universal approach allows the same tunnel mechanism to serve different communication patterns and security needs.
3Ease of manufacture
If proprietary cryptographic libraries are used, then security implementation is simplified, but trust and acceptance by corporations and governments deteriorates
Solution Approach 1:
The system automatically negotiates and selects between proprietary and standards-based cryptographic libraries based on the capabilities of the communicating systems. This self-service approach allows the system to use proprietary libraries when available for simplified implementation while automatically falling back to trusted standards-based libraries when needed for corporate or government acceptance, without requiring manual configuration.
4Reliability
If kernel-level drivers are used for security, then security enforcement is strengthened, but portability across different operating systems deteriorates
Solution Approach 1:
The gateway appliance acts as an intermediary that provides kernel-level security enforcement for legacy systems without requiring modification of the operating system kernel. By running as a separate entity that mediates communications, it achieves strong security enforcement while maintaining portability across different operating system platforms.
Data Source
AI summary
A secure communications arrangement including an endpoint is disclosed. The endpoint includes a computing system. The computing system includes a user level services component and a kernel level callout driver interfaced to the user level services component and configured to establish an IPsec tunnel with a remote endpoint. The computing system also includes a filter engine storing one or more filters defining endpoints authorized to communicate with the endpoint via the IPsec tunnel. The computing system also includes a second kernel level driver configured to establish a secure tunnel using a second security protocol different from IPsec.