Method and apparatus for transmitting data in a system using network address translation

• US 7,649,897 B2
• Filed: 12/31/2002
• Issued: 01/19/2010
• Est. Priority Date: 10/12/2002
• Status: Expired due to Fees

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Nah, Jae-hoon, Sohn, Sung-won, Kim, Geon-woo
• Primary Examiner(s): HO, DUC CHI
• Application Number:
  US10/334,939
• Publication Number:
  US 20040071149A1
• Time in Patent Office: 2,576 Days
• Field of Search: 726/3, 726/11, 726/12, 726/14, 726/15, 370/389, 370/400, 370/401
• US Class Current: 370/401
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/167 Adaptation for transition between two IP versions, e.g. between IPv4 and IPv6 translation of Internet protocol [IP] addresses H04L61/2503

Abstract

There are provided an apparatus and method for transmitting data in a network system using network address translation. The method for transmitting data includes the steps of receiving a global network address corresponding to a local network address from a router using network address translation; encoding data using the global network address; and transmitting the encoded data to an external host on the global network via the router. Since the network address to be translated through the network address translation can be anticipated and substituted in real time during the transmission of the data, a variety of security services can be provided without significant modifications to the existing system, and accordingly, it is anticipated that the Internet protocol version 6 can be increasingly used.

Claims

1. A data transmitting method in an internal host, comprising:

receiving a global network IP address of the internal host, wherein the global network IP address is obtained by translation in a router from a local network IP address of the internal host;

encoding data—

the local network address_using the global network IP address of the internal host;

transmitting the encoded data using the global network IP address as a source address of a packet header to the external host; and

setting security association with the external host before receiving the global network IP address, wherein the router assigns the global network IP address corresponding to the local network IP address while the setting is performed.

2. The method for transmitting data according to claim 1, wherein the encoding data includes obtaining a transport check sum of the data using the global network IP address.

3. The method for transmitting data according to claim 1, wherein the encoding data includes producing an authentication header for the data using the global network IP address.

4. The method of transmitting data according to claim 1, wherein the encoding data includes performing an encapsulating security payload (ESP) for the data using the global network address.

5. A data transmitting apparatus in an internal host, comprising:

a router connector for receiving a global network IP address of the internal host, wherein the global network IP address is obtained by translation in a router from a local network IP address of the internal host;

a data processor for encoding the local network address using the global network IP address of the internal host;

a data transmitter for transmitting the encoded data using the global network IP address as a source address of a packet header to the external host;

a security association setting unit for setting security association with the external host, wherein the router assigns the global network IP address corresponding to the local network IP address while security association is negotiated by security association setting unit.

6. The apparatus for transmitting data according to claim 5, wherein the data processor includes a check sum generator for obtaining a transport check sum of the data using the global network IP address.

7. The apparatus for transmitting data according to claim 5, wherein the data processor includes a header generator for producing an authentication header for the data using the global network IP address.

8. The apparatus of transmitting data according to claim 5, wherein the data processor includes an encapsulating unit for performing an encapsulating security payload (ESP) for the data using the global network address.

9. A computer readable recording medium that stores a computer program which when executed by a processor implements a data transmitting method in an internal host, the method comprising:

receiving a global network IP address of the internal host, wherein the global network IP address is obtained by translation in a router from a local network IP address of the internal host;

encoding data—

the local network address using the global network IP address of the internal host;

transmitting the encoded data using the global network IP address as a source address of a packet header to the external host; and

setting security association with the external host before receiving the global network IP address, wherein the router assigns the global network IP address corresponding to the local network IP address while the setting is performed.