METHOD AND SYSTEM FOR IPSEC SECURITY FOR IPP-USB DATA

摘要

A method of providing security for data being transferred over a Universal Serial Bus (USB) connection, the method comprising: setting an IPsec policy configuration on a host device hand a client device; sending a packet to a first loopback interface on the host device, wherein the first loopback interface configures the packet to be routed to a second loopback interface on the client device; sending the packet from the first loopback interface to an IPsec module for encryption; filtering the packet received from first loopback interface; sending the packet to the client device over the USB connection; injecting the packet into the second loopback interface; sending the packet from the second loopback interface on the client device to the IPsec module on the client device for decryption; and sending the decrypted packet to the second loopback interface on the device application, wherein the packet is received on the client device.

主权项

1. A method of providing security for data being transferred over a Universal Serial Bus (USB) connection, the method comprising:
setting an IPsec policy configuration on a host device and a client device, the IPsec policy configuration including a first loopback interface and an IP address for the host device and a second loopback interface and an IP address for the client device; sending an IP packet to the first loopback interface on the host device, wherein the first loopback interface configures the packet to be routed to the second loopback interface; sending the IP packet from the first loopback interface to an IPsec module on the host device for encryption pursuant to IPsec protocol; filtering the encrypted packet received from first loopback interface and configuring the encrypted packet be sent via USB protocol over the USB connection to the client device; sending the encrypted packet from the host device to the client device over the USB connection; injecting the encrypted packet into the second loopback interface on the client device; sending the encrypted packet from the second loopback interface on the client device to the IPsec module on the client device for decryption; and sending the decrypted packet to the second loopback interface on the client device, wherein the packet is received on the client device.