Security protocol for Frame Relay

Abstract

This paper considers the protection of traffic using the Frame Relay service. First, we briefly describe the structure and functionality of the Frame Relay interface. Differences between the PTTs and the private vendor community with respect to Frame Relay interface are outlined. Then, we consider why the existing security protocols are inadequate in protecting the Frame Relay traffic effectively. This leads to the proposal of a new security sublayer (SFRC) which provides Secure Frame Relay Connections. Initially, we discuss the choice behind the placement of the SFRC sublayer within the Frame Relay interface. Then, we present the security services provided by the SFRC sublayer, the structure of the protocol data unit it employs for secure transfer of data and the types of MIB objects controlling its functionality. Finally, we suggest some supplementary security services not directly supported by the SFRC entities for future consideration.

References

1. [1] CCITT Recommendation X.25, FASCICLE VIII.2, IXTH Plenary Assembly 1988 (Blue Book) [Study Group VII].
2. [2] CCITT Recommendation X.2, FASCICLE VIII.2, IXTH Plenary Assembly 1988 (Blue Book) [Study Group VII].
3. [3] "Digital Subscriber signalling system No. 1 (DSS 1). Signalling specification for frame mode bearer service", CCITT Recommendation Q.933.
4. [4] IEEE, "IEEE Standard for Local and Metropolitan Area Networks: Overview and architecture", IEEE Standards 802-1990.
5. [5] "Core aspects of Q.922 for use with frame relaying bearer service", Annex A to CCITT Recommendation Q.922, Draft 1992 (Blue Book).
6. [6] Elke Gronert, "MANs Make Their Mark in Germany", Data Communications, May 1992.
7. [7] W. A. Doeringer, D. Dykeman, M. Kaiserwerth, B. W. Meister, H. Rubin and R. Wiliamson, "A Survey of light-Weight Transport Protocols for High-Speed Networks", IEEE Transactions on Communications, Vol. 38, No. 11, November 1990.
8. [8] Andre Danthine, "Esprit project OSI 95: New transport services for high-speed networking", Computer Networks and ISDN Systems, Vol. 25, November 1992.
9. [9] "Standard for Interoperable Local Area Network (IAN) Security (SILS) - Part B-Secure Data Exchange (SDE)", IEEE 802.10b, November 1990.
10. [10] "Information Processing Systems - Open Systems Interconnection Reference Model - Security Architecture", ISO 7498/2, 1988.
11. [11] International Organization for Standardization, "Information Processing Systems - Open Systems Interconnection Reference Model - Security Architecture", ISO 7498/2, 1988.
12. [12] SDNS Program Office, SDN.401, Revision 1.2, "Security Protocol 4 (SP4)", July 1988.
13. [13] ISO/IEC DIS 10736, "Transport Layer Security Protocol (TLSP)", December 1991.
14. [14] SDNS Program Office, SDN.301, Revision 1.3, "Security Protocol 3 (SP3)", July 1988.
15. [15] ISO/IEC CD 11577, "Network Layer Security Protocol (NLSP)", November 1991.

Index Terms

• Networks

  • Network protocols

• Security and privacy

• Social and professional topics

  • Computing / technology policy

    • Computer crime