IPv4/IPv6 handoff on lock-keeper for high flexibility and security

Abstract

In response to the emerging deployment of IPv6 on network devices, this paper proposes the integration of IPv6 on Lock-Keeper, an implementation of a high level security system for preventing online attacks. It is designed to permit the secure data exchange over physically separated networks in an IPv4-based environment. A new intercommunication module is added to manage IPv4/IPv6 handoff inside the LockKeeper, which provides several benefits. First, the LockKeeper gains the flexibility to work in IPv4/IPv6 environments. Second, an application layer gateway to bridge IPv4 and IPv6 networks is achieved. Third, the IP-layer protocol isolation is realized inside the Lock-Keeper to enhance the security of the protected network by exchanging data between physically separated networks using different IP protocols