Architecture for broadband and mobile VPN over NGN

We propose a method for broadband mobile VPN over NGN, which is suitable for office-LAN access by business users and home-LAN access by consumers. The proposed method creates a channel for VPN communication using SIP signaling, allowing the public network and enterprise networks to perform session-based border control and QoS management. In addition, the proposed method achieves the hand-over of a VPN session using the SIP mobility approach. These features lead to the following advantages. First, the network can protect users´ home gateways from malicious traffic. Second, enterprises can separate VPN gateways from enterprise firewalls and distribute many VPN gateways for each small segment. Third, the network can perform session-based QoS management. Last, the proposed method enables the mobile terminal to continue a VPN session while switching access networks. These advantages are valuable when we make emerging highspeed LAN applications executable over a public wide-area network.