Dynamic VPN Controller. Secure Information Shering in a Coalition Environment

摘要

Defence R AND D Canada (DRDC) developed the dynamic virtual private network controller (DVC) prototype as a concept demonstrator for the rapid deployment and self-configuration of one or more dynamic coalition virtual private networks (VPNs), and has demonstrated the DVC prototype in both local and international environments. The DRDC DVC prototype is a network boundary protection device that provides access to its protected network infrastructure in a controlled fashion to one or more approved coalition partners without requiring any knowledge of a remote partner's protected network infrastructure. This report describes the design and operation of the DVC prototype, its current state of development, and the ongoing work to evolve the DVC capabilities for policy-based management and dynamic configuration. The DVC prototype provides a flexible, interoperable, application-independent solution for secure information exchange that does not require any knowledge of a remote partner's network infrastructure. The development of the DVC capability supports the strategic C4ISR goal of an enhanced capability for secure information interchange for military operations.