Research On IP Security Of Sarellite Communications

As TCP/IP has successfully applied in terrestrial networks,IP technologies about satellite networks also make great development.In recent years,along with the increasing need for communication security,network security technologies have also become the researching hotspot.The application of security protocol is one of the most important means of protecting communication link security.IPSec has been successfully use in terrestrial networks,but because of the particularity(high errorrate?bandwidth asymmetry ect.)of space environment,IPSec could not be use in space communication directly.For the sake of using low overhead security protocol to protect space links,The CCSDS has specified a set of protocol which are suitable for special space link.One of them,known as Space Communications Protocol Standards-Security Protocol(SCPS-SP),is a functional cousin to IPSEC,through contains most of IPSEC?s capabilities,but with only 2 bytes of overhead per IP packet.This makes it a prime candidate for use in the space segment.The reduced overhead has its price,however,and SCPS-SP is not interoperable with IPSEC.The NGSI architecture solution is to use a trusted security gateway that can convert between IPSEC and SCPS-SP.Such an interoperable gateway has been created by modifying the existing SCPS gateway to add IPSEC functionality.The biggest enemy of security problem is complexity of security Protocol itself.In this paper,the SCPS-SP?IPSec and �trusted� gateways are systemic analyzed respectively.The Drawbacks of IPSec and �trusted� gateways are also well reinforced.At last the �trusted� gateway has already been tested in good performance.This paper will therefore have an active impact on the future design and implementation of security under satellite communication systems.