Towards a Secure Network Virtualization Architecture for the Future Internet

In this paper we discuss the Global Virtualization Architecture (GVA) that enables communications between network entities according to the way they refer to each other rather than understanding the constraints of particular networks. Our approach is to instantiate a virtual network that is based on identities of network entities and their demands on security and network capabilities. An entity may be physical e.g. a human user, a device, or any

thing

, or abstract, such as a computer program, service, group, or role. Each entity is identified by a set of attributes so that connections can be 1 to 1, 1 to many, or many to many. We call this a Virtual Group Network (VGN). VGNs are independent of location and device, and their properties may change with time as entities move.