Design and implementation of Network CryptoGate - IP-layer security and mobility support

As the commercial use of the Internet becomes common and the demand for mobile computing through the Internet is emerging, it is necessary to construct a secure mobile environment. This paper presents an implementation. example of such a system: "Network CryptoGate (NCG)", which employs the IETF/Mobile IP and the IETF/IP security on stationary security gateways (NCG servers) and mobile hosts (NCG clients). Using IP security primitives, both packets going into a corporate network and packets going out of the visiting network are securely guarded. This IP security based packet control allows transparent mobile access from anywhere on an IP network with sufficient security support by encrypting and authenticating IP packets. Currently the NCG system is implemented on BSD/OS, Solaris and Windows NT/95. Preliminary performance measurements show that the proposed NCG's IPsec and Mobile IP processings are sufficient in the current Internet environment.