Design and implementation of IPv6 oriented security mechanisms of port control protocol and peer-to-peer communication

Abstract

Recently, the number of personal intelligent equipment increases rapidly which makes the internet protocol version 6 (IPv6) transition more imperative. Port control protocol (PCP) is one of the important IPv4-in-IPv6 tunnel technologies. Meanwhile, with the increasing demand to communicate or share files between terminal equipment, it is necessary to realize the peer to peer communication to support the transmission of data directly between the terminal equipment without a third-party server. In this paper, the structure of user access network and the deployment of the IPv6 transition technology based on IPv4-in-IPv6 tunnel are analyzed comprehensively, based on which the internet protocol security (IPSec) solution is chosen to protect the security of PCP message and the transport layer security (TLS) solution is chosen to protect the security of the peer-to-peer communications. A system for the authorization and distribution of digital certificates is designed for the TLS solution. Finally, the open source software Openswan is used to implement the IPSec solution, and the open source software OpenSSL is used to implement the TLS solution.