Using IKE to send encrypted data in IP packets not encumbered with IPSec headers

摘要

A method of sending streamed data over an IP network from a first node to a second node, the method comprising using Internet Key Exchange (IKE) to establish an IKE security association (SA) between the first and second nodes. A shared secret is established between the first and second nodes using the IKE protocol. The streamed data is encrypted at the first node with a cipher using the shared secret or a key derived using the shared secret. IP datagrams are constructed containing in their payload, segments of the encrypted streamed data, the datagrams not including an IPSec header or headers. The IP datagrams are then sent from the first node to the second node. The IP packets are voice over internet (VOIP) packets.