Method and apparatus for providing security mechanism guaranteeing transparency at transport layer

1. A computer-implemented method of providing a security mechanism guaranteeing transparency at a transport layer, said method comprising:

receiving a data packet from an application program, and searching key information corresponding to the data packet in a key information database;

determining whether to request a key exchange module of an application layer for a new key negotiation according to a result obtained by searching key information; and

performing encrypting/decrypting based on the key information when the key exchange module stores key negotiation information obtained by the new key negotiation in a kernel.

2. The method of claim 1 , wherein the searching of key information comprises:

checking the data packet when the data packet is transmitted to a TCP/UDP protocol from a socket interface.

3. The method of claim 1 , wherein the determining of whether to request the key exchange module for the new key negotiation comprises:

encrypting the data packet based on searched key information when the result obtained by searching key information is positive; and

requesting the key exchange module for a key negotiation when the result is negative.

4. The method of claim 1 , wherein the performing of encrypting/decrypting comprises:

exchanging and negotiating key information between the key exchange module and a node;

storing key negotiation information in the kernel, and driving a request processor on standby; and

encrypting the data packet based on stored key negotiation information and transmitting encrypted data packet.

5. A computer-based apparatus for providing a security mechanism guaranteeing transparency at a transport layer, said apparatus comprising:

a key information search unit for receiving a data packet transmitted from an application program to a TCP/UDP protocol, searching key information corresponding to the data packet in a key database, and determining whether the key database includes key information;

a key request determiner for requesting for a new key, and determining that an encrypting/decrypting processor is on standby if the key database does not include key information corresponding to the data packet; and

an encrypting/decrypting unit for encrypting/decrypting the data packet based on key information output by the key request determiner, and outputting encrypted/decrypted data packet.

6. The apparatus of claim 5 , wherein the key request determiner comprises:

a key exchange unit for exchanging and negotiating key information with a node when the key request determiner requests for the new key; and

a key information storage unit for storing key negotiation information received from the node in the key database, and driving the encrypting/decrypting processor on standby.

7. The method of claim 3 , wherein the determining of whether to request the key exchange module for the new key negotiation further comprises:

performing the key negotiation with the key exchange module based on information in a security policy database.

8. The method of claim 4 , wherein the performing of encrypting/decrypting further comprises:

transmitting the data packet using a character device to the key exchange module; and

performing mutual synchronization with the key exchange module.

9. The apparatus of claim 6 , wherein the key exchange module is adapted to perform key negotiating based on information in a security policy.

10. The apparatus of claim 6 , wherein the encrypting/decrypting unit and the key exchange unit are adapted to transmit data to each other using a character device, and perform mutual synchronization.