Architecture for broadband and mobile VPN over NGN

We propose a method for broadband mobile VPN over NGN, which is suitable for office-LAN access by business users and home-LAN access by consumers. The proposed method creates a channel for VPN communication using SIP signaling, allowing the public network and enterprise networks to perform session-based border control and QoS management. In addition, the proposed method achieves the hand-over of a VPN session using the SIP mobility approach. These features lead to the following advantages. First, the network can protect users' home gateways from malicious traffic. Second, enterprises can separate VPN gateways from enterprise firewalls and distribute many VPN gateways for each small segment. Third, the network can perform session-based QoS management. Last, the proposed method enables the mobile terminal to continue a VPN session while switching access networks. These advantages are valuable when we make emerging highspeed LAN applications executable over a public wide-area network.