Model
for Internetwork security
Concept Model for Internetwork security
When we send our data from one source side to another destination
side, we have to use some transfer techniques like the internet or any other
communication channel by which we are able to send our message.
A security-related transformation on the
information to be sent. Examples include the encryption of the message, which
scrambles the message so that it is unreadable by the opponent, and the
addition of a code based on the contents of the message, which can be used to
verify the identity of the sender.
Some confidentional information shared by the two principals and,
it is hoped, unknown to the opponent. An example is an encryption key used in
conjunction with the transformation to scramble the message before transmission
and unscramble it on reception.
A valued third party may be required to achieve secure
transmission. For example, a third party may be responsible for sharing the
secret information to the two principals while keeping it from any opponent. Or
a third party may be needed to arbitrate disputes between the two principals
concerning the authenticity of a message transmission.
This general model shows that there are four basic tasks in
designing a particular security service:
1.
Design
an algorithm for performing the security-related transformation.
2.
Generate
the secret information to be used with the algorithm.
3.
Develop
methods for the distribution and sharing of secret information.
4.
Specify
a protocol to be used by the two principals that make use of the security
algorithm and the secret information to achieve a particular security service.
0 Comments