KR20010066996A - ASIC of VPN using IP-Sec(internet protocol-security) - Google Patents

Abstract

PURPOSE: A one chip type IP(Internet Protocol) security based VPN(Virtual private Network) production method is provided to produce the IP security function by an ASIC(Application Specific Integrated Circuit) for using variously the functions of the VPN. CONSTITUTION: The method comprises steps of embedding an IP security program, defined by an RFC(Requests For Comments), in an ASIC, setting a coding/decoding algorithm at an external position of the ASIC to accept currently used various coding algorithms, and producing TCP-IP IO structure for making an Internet access easy. The ASIC device can be directly inserted in internal circuit of a conventional computer system or be interfaced with the conventional computer system.

Description

ASIC of VPN using IP-Sec (internet protocol-security)}

The present invention is to make it easy for anyone to use, by universalizing the security of communication / voice on public network network by converting IP-Sec, which is a key component of VPN (Virtual Private Network), to ASIC.

Currently, in order to function as a virtual private network (VPN), S / W must be installed in a computer system or a dedicated VPN device must be used.

This current method introduces significant limitations in use, cost and operational difficulties.

According to the present invention, the IP-Sec, which is the main function of the virtual private network (VPN) function, is made to ASIC so that the VPN function can be used in various ways.

According to the IP-Sec (internet protocol-security) method defined in the world standardized Request for comments (RFC),

Develop a program that can use ASIC micro code to make and embed directly in ASIC semiconductor,

The part of IP-Sec encryption and decryption is located outside the ASIC semiconductor to enable I / F.

The input / output part of the internet is embedded in the ASIC semiconductor to make the ASIC semiconductor into a gateway type semiconductor.

By doing so, it is possible to have flexibility (various kinds of encryption algorithms) in encryption / decryption, and to make the design of input / output into gateway type so that it can be easily inserted into electronic circuits.

The present invention is to maintain the security by encrypting voice and data on the Internet by ASIC VPN (Virtual Private Network).

More detailed explanation is as follows.

In Figure 1, the IP-Sec defined by the RFC creates a separate program that can be embedded in the ASIC and reflects it in the ASIC design, and the encryption algorithm ③ that encrypts / decrypts the IP-Sec is placed outside the ASIC. It is possible to flexibly cope with the encryption algorithm and to make the connection to the Internet by making the input / output of this ASIC semiconductor into the TCP-IP structure④. In addition, the method of using this ASIC semiconductor (Figure 2) can be used by directly inserting into the existing computer system internal circuit ⓑ and directly connected to the Internetⓒ, or by configuring a separate PCB (circuit) to interface with the computer system. have.

The present invention can be used not only for various purposes but also for miniaturization and light weight by making IP-Sec, a key element of the virtual private network (VPN) function, into a single semiconductor. In addition, it can be applied to all devices used in the public network in the future by maintaining the security of voice / data communicating in the public network.

Claims (3)

ASIC semiconductor chipping of IP-Sec based on RFC Designed to place encryption algorithm among IP-Sec functions externally A method of embedding the interface between the ASIC and the outside inside the ASIC semiconductor using the TCP / IP method