Sittichivapak, Suvepon

Loading...
Thumbnail Image
Preferred name
Sittichivapak, Suvepon
Alternative Name
Sittichivapak, S.
Sittichivapak, Suvepol
Main Affiliation
Email
suvepon.si@kmitl.ac.th

Settings

Now showing 1 - 2 of 2
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Publication,
    An implementation of internet protocol options for self-authentication
    (2017-11-03)
    Thamthawornsakul, Parinya
    ;
    Sittichivapak, Suvepon
    This paper presents an enhancement of IP (Internet Protocol) standard to support user authentication within the protocol itself. The options field in an IP header is used for carrying specific data to add the ability of self-authentication. The specific data consist of a user identifier, a timestamp, and an HMAC calculated with important data in the IP header. The major purpose is to verify a device owner or a computer user in a local network in real time, before allowing access to restricted networks or the Internet. By this enhancement, the users can be authenticated at IP layer, without needing an additional user authentication process. The self-authentication ability provides a prevention of sending source-spoofed IP packet and also provides a high reliability of identifying the user. In addition, this ability does not require a creation of specific connection and an exchange of security parameters.
  • Loading...
    Thumbnail Image
    Some of the metrics are blocked by your 
    consent settings
    Item type:Publication,
    A design of self-authenticated Internet Protocol for Network Access Control
    (2016-09-06)
    Thamthawornsakul, Parinya
    ;
    Sittichivapak, Suvepon
    This paper presents an application of Internet Protocol Options for enhancing self-authenticated feature to the Internet Protocol. The options consist of Keyed-Hash Message Authentication Code and timestamp. In the network access control system, local network devices needing to access protected networks have to attach the options to packet header before sending to destination through a network access controller or commonly known as a gateway. Internet Protocol packets with options are verified on the gateway, the Keyed-Hash Message Authentication Code is used for checking integrity of data and the timestamp is used for replay attack mitigation. Packets passing all processes would be allowed to access to the protected networks. The design of self-authenticated Internet Protocol provides a protection of sending source spoofed packets from local network causing damage to other networks and also provides high reliability of source identification.