A security architecture and mechanism for data confidentiality in TCP/IP protocols

A method of providing data confidentiality service for secure data communication between two end users through Transmission Control Protocol/Internet Protocol (TCP/IP) protocols is presented. The system call functions of the socket compatibility interface and transport level interface libraries are used for connection establishment, data transfer, and connection release between two TCP/IP end users. A new security architecture consisting of interactive application program, client/server, and security service modules as well as the corresponding security mechanism to provide data confidentiality service is presented.<
>