The Research And Implementation Of Remote Access Virtual Private Network On The Mobile Terminal Device

Virtual Private Network (VPN) is a wide applied way to provide network services. Withthe rapid development of Internet and wireless technology, VPN plays an increasinglyimportant role in the application of networks. Although it offers enterprise users moreconvenience and more freedom for accessing their private network, the freedom also bringchallenges to the traditional technology of VPN. When accessing private network andexchanging important data, users need credible support of mobility and security provided bythe remote access technology. Virtual Private Dial-up Network (VPDN) is the primarytechnology for the mobile VPN users at the present time. Along with the development ofCDMA 2000 1X Packet Network, the wireless VPDN (WVPDN), which is based on theCDMA 1x network, provides great convenience for users to agilely access Intranet without theconstraint of time and location.First of all this dissertation introduces some important technologies with regard to VirtualPrivate Network and mainly describes the architecture of IPSec used in the mobile VPNsolution proposed by this thesis. Then the dissertation points out the secure problems andshortcomings of current VPN technology for mobile users by analyzing these methods indetail. Most importantly this paper proposed a solution to make it possible to access Intranet bysecurely get through gateways, called MIP-IPSec VPN Solution, which combines the IPSecprotocols and research results of the mobile IP systems by former researchers in my lab. Thissolution needs simple changes in the basic mobile IP protocols. Furthermore, it integrates theexcellent accessing mobility of Mobile IP with the high security of IPSec in order to provide atransparent and convenient network environment for the enterprise users. Finally, we designand implement an IPSec security module which is the most important part of our solution. Theimplementation work lays a solid foundation for the combination with the former mobile IPsystem and the final MIP-IPSec VPN system.Mostly the implementation of security systems was put in practice on the foreignoperating systems. As a result, the security of the whole system is enslaved to the operatingsystem though the upper level applications have enough security, because we cannotunderstand the inner situation and functions of the operating system. Based on suchconsideration the dissertation implements the IPSec security module on Hopen operatingsystem which has an independent knowledge patent. This module is researched and developedindependently on the basis of our own technology and we can preferably control the systemfrom the lower level OS to the upper level applications. In a word the work of the dissertationshows great practical significance for the future research.