130 likes | 233 Views
“ DATA SECURITY IN X.25 NETWORKS ”. Advisor:. Mr. Anisur Rahman. INTRODUCTION. X.25 : An ITU-T protocol for WAN Communication. User to Network Interfacing (UNI); DTE – DCE Interface. Many channels share one physical connection. Security mechanism: Data Encryption for secrecy
E N D
“DATA SECURITY IN X.25 NETWORKS” Advisor: Mr. Anisur Rahman
INTRODUCTION • X.25 : An ITU-T protocol for WAN Communication. • User to Network Interfacing (UNI); DTE – DCE Interface. • Many channels share one physical connection. • Security mechanism: • Data Encryption for secrecy • Data & Entity Authentication for preserving Data Integrity
X.25 Network Devices • DTE – Data Terminal equipment • DCE – Data Circuit-terminating Equipment • PSE – Packet Switching Exchange • PAD – Packet Assembler / Disassembler
Virtual Circuits • Virtual Call • Two Types of Virtual Circuits: • Switched virtual circuit (SVC): Phone call • Permanent virtual circuit (PVC): Leased lines • Up to 4095 VCs on one X.25 interface
X.25 Protocol Suite • PLP – Packet Layer Protocol • LAPB – Link Access Procedure – Balanced • X.21bis Protocol
Threats to Data Security in X.25 • Passive Wiretap : Tapping into the carrier medium and reading the data. • Active Interference : Modification of Data during transmission.
Security Requirements • Operational • Secure Key Management • Approval
X.25 Security Problem • The Key Management Problem • General • Layer 6 and 7 • Layer 3
Basis of Solution • Unit Unique RSA Keys • Key Encrypting Keys (KEKs) • Data Encrypting Keys (DEKs)
Fast RSA Processing • Completely automated key management across the network • Relies on RSA for the secure mechanisms • Reliant on RSA co-processor in each crypto unit • Power to perform a 512-bit RSA decryption under a second
CONCLUSION • Developed to overcome the problems inherent in transmitting the data over low quality copper wires. • Ensured reliable transmission of data over WAN with supported speed of up-to 56 Kbps. • Added overhead and processing imposed on the transmission to achieve high level of reliability was a drawback. • But still remains cost effective and viable alternative for low speed connectivity among many locations.