Ip Security (Ipsec): Ipv4, Ipv6 - Samsung MFP SECURITY White Paper

SAMSUNG MFP SECURITY
9.3

IP Security (IPSec): IPv4, IPv6

IPSec is an important element between the other network nodes in IP communication. It supports authenticating and
encrypting IP packets between network devices using IPv4 or IPv6. IPSec is used widely without upper layer security
protocols like TLS/SSL or SSH because of the existing layer 3 based on the OSI layer. When IPSec is used between a user
PC and an MFP, print job security and scan job security can be enhanced. When IPSec is used between the Administrator
and an MFP, management data security can be enhanced. IPSec is used to protect IP-based network traffic.
IPSec is designed to provide interoperable, high quality, cryptographically-based security for IPv4 and IPv6. The set of
security services offered includes access control, connectionless integrity, data origin authentication, protection against
replays (a form of partial sequence integrity), confidentiality (encryption), and limited traffic flow confidentiality. These
services are provided at the IP layer, offering protection for IP and/or upper layer protocols.
IPSec uses two protocols to provide traffic security – Authentication Header (AH) and Encapsulating Security Payload
(ESP). Both protocols are described in more detail in their respective Internet Society
•
4302 - IP Authentication Header
•
4835 - Cryptographic Algorithm Implementation Requirements for Encapsulating Security Payload (ESP) and
Authentication Header (AH)
IPSec only supports the pre-shared key method for IPSec authentication. Users can setup pre-shared key values through a
Web UI. IKE protocol is used to establish and manage Security Association (SA) between a printer and a user node in the
AH and ESP services. In IPSec and IKE protocol, the supporting algorithms include the following:
• Diffie-Hellman algorithm: modp 1024, modp 1536, modp 2048, modp 3072, modp 4096, modp 6144 and modp 8192
•
Hash algorithm: SHA1
•
Encryption algorithm: 3DES, AES128,AES192, AES256
•
Integrity algorithm: SHA1
Example if IPSec menu in the Web UI:
Page - 33 Copyright 2014 Samsung Electronics Co., Ltd., All rights
WHITE PAPER
TM
RFCs:
reserved.