A multi-domain security policy distribution architecture for dynamic IP based VPN management

Nowadays, VPN technologies are frequently used to secure communications between remote sites. If creating a VPN is under control, managing it is still problematic. The main problem is providing scalability in the deployment process. Deploying a VPN means that some common security rules have to be shared between partners. But tools for doing this are not interoperable because of lack of standards. Moreover the security rules sharing must be dynamic to follow the need of today requirements for collaborative working. Proposals for this purpose fail to offer a sound solution to the policy distribution issues between multiple independent administrative domains. In this paper we propose an upgradeable architecture enabling policy distribution for multiple purposes.