Presentation 2005/7/29
Implementation of Encryption Application System in the Upper Layer using 3DES algorithm and Performance Comparison with IPsec in iSCSI Storage Access
Kikuko KAMISAKA, Saneyasu YAMAGUCHI, Masato OGUCHI,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) iSCSI, common protocol in network storage IP-SAN, allows us to reduce management costs and costs of introducing storages by using TCP/IP protocol and Ethenet. To access remote storage securely, IPsec which encrypts transferred data can be employed in iSCSI. However, since 3DES algorithm needs a lot of amount of calculation, the performance of storage access degrade remarkably. In addition, it is difficult to execute encryption processing efficiently, because IPsec layer is located in a lower-level. In this paper, we implemented the system of executing encryption processing in the upper layer instead of IPsec to improve the performance. Furthermore, we simulated the idea of optimization of encryption in the upper layer and measured its performance by running multiple processes in a low-latency environment and a high-latency environment. As a result of analyzing the performance by visualizing TCP packets transfer, our proposed scheme of encryption processing optimization is effective in the high-latency environment.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) iSCSI / IPsec / Network Storage / Encryption / 3DES
Paper # CPSY2005-17
Date of Issue

Conference Information
Committee CPSY
Conference Date 2005/7/29(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Computer Systems (CPSY)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) Implementation of Encryption Application System in the Upper Layer using 3DES algorithm and Performance Comparison with IPsec in iSCSI Storage Access
Sub Title (in English)
Keyword(1) iSCSI
Keyword(2) IPsec
Keyword(3) Network Storage
Keyword(4) Encryption
Keyword(5) 3DES
1st Author's Name Kikuko KAMISAKA
1st Author's Affiliation Ochanomizu University()
2nd Author's Name Saneyasu YAMAGUCHI
2nd Author's Affiliation Institute of Industrial Science, The University of Tokyo
3rd Author's Name Masato OGUCHI
3rd Author's Affiliation Ochanomizu University
Date 2005/7/29
Paper # CPSY2005-17
Volume (vol) vol.105
Number (no) 226
Page pp.pp.-
#Pages 6
Date of Issue