Dynamic and Easily Manageable Approach for Secure IP VPN Environments. (Une Approche Dynamique et Facilement Administrable pour des Environments IPVPN Sécurisés)

The increased use of the global Internet and IP-based applications have paved the way for service providers to offer new network services to their customers. The telecommunications’ world reflects and embodies a fundamental shift in how service providers do business without depending on ISP core networks that offer service oriented networks that bundles valueadded services (such as packet telephony and e-commerce) on top of transport services. Also as network services become increasingly complex and network-intensive, customers want to tap the outsourcing potential of service provider services for cost savings. Thus to offer cost effective network services, service providers will be challenged to deploy their services over public networks like the Internet and heightened by changes in business customer networks. In this dissertation, we introduce a CE-based VPN approach that offers different management network services in behalf of customers. This approach shifts the management hassles from customer’s side to the VPN service provider. Yet by using this approach service providers have only to care about managing customers edge devices that are the gateways to the customers’ networks. This approach is a centralized solution, where everything, including VPN creation, deployment and membership management, is under the control of a single Management Operation Point (MOP). This thesis focuses on three key aspects: management, dynamism and security. We also investigate the use of our approach to offer group communication services (e.g. Multicast service) and to manage and secure web services, yet other fields of applications are possible, like the dynamic management of firewalls or VoIP.