Although relatively rare, encapsulating peritoneal sclerosis (EPS) is nonetheless a major concern within the renal community. Risk of developing EPS is associated with long-term peritoneal dialysis. Surgery now offers better outcomes. Research into EPS continues to focus on imaging and early detection methods, genetics, biomarkers and preventive strategies. No previous studies have examined patients' experiences of EPS, or their perception of the effect of EPS on health-related quality of life. Aims: The aim of the present study was to explore the experience of patients who have undergone surgery for EPS in one centre in the north of England. Methods: Nine participants were recruited out of a total of 18 eligible. Most participants were interviewed twice conducted on two occasions over a 12-month period. This was October 2009 to October 2010. Analysis: Interpretative data analysis was conducted, following the philosophical tradition of hermeneutics. Following the first interview a summary was sent to each participant before the second interview. Both interviews were analysed and are presented as themes. Results: EPS presents the biggest challenge these patients have had to face since developing chronic kidney disease. Three major themes were identified each with subcategories: 1. Understanding EPS -self interpretation, 'not being heard', gaps in information and knowledge, diagnosis shock and relief-confronting death 2. EPS an embodied experience- endurance, bodily awareness from others and within, struggles with eating 3. Adjustments and Transitions 'A journey of survival'- losses, support structures and their impact and locating self. Conclusions: The findings of this study highlight a number of important issues relevant to clinical practice, including lack of information and understanding of EPS, particularly its early symptoms, the extent of the surgery and the support required. At the time patients transfer from peritoneal to haemodialysis, the provision of adequate information about the risks and potential early signs of EPS may improve not only their experiences but in addition may assist its early detection.

Made available in DSpace on 2014-06-11T19:26:11Z (GMT). No. of bitstreams: 0 Previous issue date: 2005-03-10Bitstream added on 2014-06-13T19:54:12Z : No. of bitstreams: 1 silveira_pem_me_rcla.pdf: 1044102 bytes, checksum: ec031486253a59e35753f9c89b32799c (MD5) / A geração de resíduos de construção civil constitui um grande problema ambiental. Em Piracicaba, SP, são geradas aproximadamente 620 toneladas/dia deste resíduo. O problema acarreta diversos prejuízos ambientais, tais como: disposição irregular dos resíduos agregando lixo e atraindo animais transmissores de doenças; entulhos em vias públicas e córregos afetando a drenagem e a estabilidade de encostas; degradação visual urbana; redução da vida útil de aterros e de recursos minerais não renováveis. O município busca atender às exigências da Resolução 307 do CONAMA, empreendendo ações para o reaproveitamento desses resíduos como agregado para pavimentação, fechamento de valas e confecção de artefatos de concreto. Há, entretanto, necessidade de sua utilização em maior escala, possibilitando que estes materiais passem a constituir alternativas economicamente viáveis. Assim, propõe-se sua utilização como agregado no compósito solo-cimento. Foram investigadas propriedades físicas, tecnológicas e químicas de misturas contendo resíduo de construção civil reciclado e solo em diferentes proporções resíduo/solo. Verificou-se que as misturas nas proporções de 50%, 75% e 100% atendem às especificações tecnológicas para emprego como solo-cimento. Quanto aos aspectos químicos, foram detectados alguns contaminantes em quantidade superior aos valores permitidos pela legislação. Todavia, a utilização do resíduo como agregado no solo-cimento se mostrou exeqüível e eficiente no encapsulamento destes contaminantes. / The generation of wastes of Civil Construction is a huge environment problem. In Piracicaba-SP, approximately 620 tons of these wastes are generated every day. This problem results in several environmental damages such as: irregular placing of wastes accumulating trash and attracting animals capable to transmit illness; rubble on public roads and streams affecting draining and stability on slopes; urban visual degradation; reduction of shelf-life of the levellings and non-renewable mineral sources. The town tries to attend to the requirements of the Resolution No. 307 of CONAMA, undertaking actions to re-use these wastes as aggregate for paving, closing of ditches and confection of artifact of concrete. There is, however, the necessity to use it in bigger scale, enabling these materials to become feasible economical alternatives. Therefore, it is proposed to use it as aggregate on the composite soil-cement. It has been researched its physical properties, technological and chemical of moistures containing recycled wastes of Civil Construction and soil in different proportions residue/soil. It was noticed that on the proportions 50%, 75% and 100% attend to the technological specifications for the use as soil-cement. As far as the chemical aspects are concerned, it was detected some contamination in higher quantity than the one allowed by legislation. However, the utilization of the residue as aggregate in the soil-cement showed to be feasible and efficient in the encapsulating process of these contaminated items.

Submitted by Rebeka Godeiro (rebeka_carvalho@hotmail.com) on 2018-05-09T17:32:18Z No. of bitstreams: 1 ANTONIO JOELSON NETTO - DISSERTAÇÃO ZOOTECNIA 2018.pdf: 913340 bytes, checksum: af0fe11a0d7288ce5e387a196c89df8d (MD5) / Made available in DSpace on 2018-05-09T17:32:18Z (GMT). No. of bitstreams: 1 ANTONIO JOELSON NETTO - DISSERTAÇÃO ZOOTECNIA 2018.pdf: 913340 bytes, checksum: af0fe11a0d7288ce5e387a196c89df8d (MD5) Previous issue date: 2018-02-26 / Capes / A ureia é amplamente utilizada na dieta de ruminantes como fonte de nitrogênio não proteico (NNP) em substituição parcial ás fontes de proteína verdadeira, devido seu baixo custo por unidade de nutriente e alta capacidade de disponibilizar amônia como fonte de nitrogênio para produção de proteína microbiana. No entanto, há uma preocupação quanto a sua utilização em níveis elevados na dieta animal, devido o baixo aproveitamento do nitrogênio amoniacal, e principalmente pela possibilidade de intoxicação do rebanho. O presente estudo propôs-se a obter e caracterizar microesferas de cera de carnaúba contendo ureia. Os sistemas microencapsulados foram investigados quanto a rendimento e eficiência de microencapsulação, além de caracterizados por técnicas de Termogravimetria, Calorimetria exploratória diferencial, Espectroscospia na região do Infravermelho, Microscopia eletrônica de varredura, determinação de umidade e atividade de água,. As formulações (2:1) e (4:1) apresentaram altos índices de retenção de ureia, além de bons rendimentos, atestando a adequação da escolha da cera de carnaúba e também da técnica de liofilização para obter os sistemas microencapsulados. A cera de carnaúba proporcionou a inibição da higroscopicidade da ureia, prevenindo sua petrificação durante armazenamento e, portanto, facilitando sua homogeneização com os demais ingredientes da dieta. Desta forma, a partir das constatações feitas, a cera de carnaúba apresenta-se como um encapsulante promissor para obtenção de micropartículas contendo ureia para possível liberação lenta, em que, de acordo com o presente estudo, entre as duas formulações desenvolvidas, recomenda-se a UM2 (2:1), visto que apresentou melhor rendimento e é o sistema com maior conteúdo de ureia, proporcionando maior aporte de nitrogênio não proteico (NNP) de liberação lenta para o animal. / Urea is widely used in the diet of ruminants as a source of non-protein nitrogen (NNP) in partial substitution to true protein sources, due to its low cost per unit of nutrient and high capacity to provide ammonia as a source of nitrogen for the production of microbial protein. However, there is a concern about its use at high levels to the animal diet, due to the low utilization of ammoniacal nitrogen, and mainly due to the possibility of intoxication of the herd. The present study aimed obtaining and characterizing urea-containing carnauba wax microspheres. The microencapsulated systems were investigated in terms of microencapsulation efficiency and yield, and also characterized by techniques of Thermogravimetry, Differential scanning calorimetry, Fourier transform infrared Spectroscopy, Scanning electron microscopy, moisture content, and water activity. The formulations presented high urea retention rates, as well as good yields, attesting the adequacy of carnauba wax and also the lyophilization technique to obtain the microencapsulated systems. Carnauba wax provided the inhibition of the hygroscopicity of urea, preventing its petrification during storage, facilitating its homogenization with other ingredients of the diet. Carnauba wax is a promising encapsulant for the production of urea microparticles for possible slow release, in which, according to the present study, between the two formulations developed, it is recommended the formulation UM2 (2:1), since it presented better yield and is the system with higher content of urea, providing a higher supply of slow release non-protein nitrogen (NNP) to the animal.

Orientador: Carlos de Almeida Nóbrega / Banca: Gilda Carneiro Ferreira / Banca: José Carlos Chitolina / A geração de resíduos de construção civil constitui um grande problema ambiental. Em Piracicaba, SP, são geradas aproximadamente 620 toneladas/dia deste resíduo. O problema acarreta diversos prejuízos ambientais, tais como: disposição irregular dos resíduos agregando lixo e atraindo animais transmissores de doenças; entulhos em vias públicas e córregos afetando a drenagem e a estabilidade de encostas; degradação visual urbana; redução da vida útil de aterros e de recursos minerais não renováveis. O município busca atender às exigências da Resolução 307 do CONAMA, empreendendo ações para o reaproveitamento desses resíduos como agregado para pavimentação, fechamento de valas e confecção de artefatos de concreto. Há, entretanto, necessidade de sua utilização em maior escala, possibilitando que estes materiais passem a constituir alternativas economicamente viáveis. Assim, propõe-se sua utilização como agregado no compósito solo-cimento. Foram investigadas propriedades físicas, tecnológicas e químicas de misturas contendo resíduo de construção civil reciclado e solo em diferentes proporções resíduo/solo. Verificou-se que as misturas nas proporções de 50%, 75% e 100% atendem às especificações tecnológicas para emprego como solo-cimento. Quanto aos aspectos químicos, foram detectados alguns contaminantes em quantidade superior aos valores permitidos pela legislação. Todavia, a utilização do resíduo como agregado no solo-cimento se mostrou exeqüível e eficiente no encapsulamento destes contaminantes. / The generation of wastes of Civil Construction is a huge environment problem. In Piracicaba-SP, approximately 620 tons of these wastes are generated every day. This problem results in several environmental damages such as: irregular placing of wastes accumulating trash and attracting animals capable to transmit illness; rubble on public roads and streams affecting draining and stability on slopes; urban visual degradation; reduction of shelf-life of the levellings and non-renewable mineral sources. The town tries to attend to the requirements of the Resolution No. 307 of CONAMA, undertaking actions to re-use these wastes as aggregate for paving, closing of ditches and confection of artifact of concrete. There is, however, the necessity to use it in bigger scale, enabling these materials to become feasible economical alternatives. Therefore, it is proposed to use it as aggregate on the composite soil-cement. It has been researched its physical properties, technological and chemical of moistures containing recycled wastes of Civil Construction and soil in different proportions residue/soil. It was noticed that on the proportions 50%, 75% and 100% attend to the technological specifications for the use as soil-cement. As far as the chemical aspects are concerned, it was detected some contamination in higher quantity than the one allowed by legislation. However, the utilization of the residue as aggregate in the soil-cement showed to be feasible and efficient in the encapsulating process of these contaminated items. / Mestre

Submitted by MARCIO TULIO MATHEUS SANTOS null (marciotulio@globo.com) on 2018-04-03T12:14:14Z No. of bitstreams: 1 DISSERTAÇÃO - MARCIO TULIO - 26-03-2018 CORRIGIDA VF.pdf: 2812609 bytes, checksum: 292ece5efee66c9b2d09ec3d1956148c (MD5) / Approved for entry into archive by ROSANGELA APARECIDA LOBO null (rosangelalobo@btu.unesp.br) on 2018-04-03T12:55:34Z (GMT) No. of bitstreams: 1 santos_mtm_me_bot.pdf: 2812609 bytes, checksum: 292ece5efee66c9b2d09ec3d1956148c (MD5) / Made available in DSpace on 2018-04-03T12:55:34Z (GMT). No. of bitstreams: 1 santos_mtm_me_bot.pdf: 2812609 bytes, checksum: 292ece5efee66c9b2d09ec3d1956148c (MD5) Previous issue date: 2018-02-23 / Os biopolímeros podem combinar a degradabilidade “in vivo” com a boa biocompatibilidade e, desta forma, podem ser usados como agentes encapsulantes com o objetivo de libertarem compostos bioativos. Dentro do grupo dos biopolímeros, os polissacarídeos apresentam vantagens importantes, como alta estabilidade, segurança, hidrofilicidade e biodegradabilidade. Os polissacarídeos têm sido objetos de estudos, apresentando resultados promissores. Este trabalho tem como objetivo, analisar o comportamento de uma matriz biopolimérica a base de amido, quando submetida à radiação ionizante visando seu uso em moldes planares para radioterapia de lesões cutâneas. Foram confeccionadas amostras de matrizes biopoliméricas de amido, constituído de água, amido, glicerina, duas variedades de açúcares na forma de pó, totalmente solúveis em água e produzida através da conversão do amido de milho. Durante o preparo das amostras variou-se as formulações para se obter melhor resistência da película plástica formada. As formações dos filmes de amido, foram realizadas através do método Casting com baixa viscosidade. As amostras foram submetidas à radiação em um acelerador linear clínico (linac) com feixes de raios-X de 10 MV e feixe de elétrons de 4 MeV, 6 MeV, 9 MeV e 12 MeV, e em uma fonte telecobaltoterapia com 1,25 MeV de energia. A dose total de radiação aplicada variou de 20 Gy a 140 Gy, um grupo controle foi mantido sem exposição à radiação. Após o processo de irradiação, foi realizada uma dosimetria das amostras, usando câmaras de ionização e detector Geiger Muller, não houve leitura de radiação residual nas amostras. Em seguida, as amostras foram submetidas a análise espectrofotométrica para avaliação de sua estabilidade e verificar se a radiação induzida alterou os grupos orgânicos e a estrutura primária do biomaterial. A análise de FTIR, mostrou que a radiação aplicada sobre o molde biopolimérico não alterou sua estrutura ou grupos químicos, sendo preservadas as propriedades plastificantes do biomaterial. / Biopolymers can combine "in vivo" degradability with good biocompatibility and, in this way, can be used as encapsulating agents in order to release bioactive compounds. Within the group of biopolymers, polysaccharides have important advantages, such as high stability, safety, hydrophilicity and biodegradability. Polysaccharides has been object of studied, presenting promising results. This work aims to study the properties of biopolymers for use in pharmaceutical applications in the treatment of pathologies and to analyze the behavior of the biopolymer matrix based on starch when submitted to ionizing radiation for its use in planar models for radiotherapy of cutaneous lesions. An extensive bibliographic research was carried out aiming to understand the characteristics, properties and applications of the biopolymers in the health area, having as starch the base of the polymer matrices. Samples of biopolymeric were made matrices, consisting of water, starch, glycerin, two sugar varieties in the form of powder, totally soluble in water and produced through the conversion of corn starch were made. During the preparation of the samples the formulations were varied to obtain better resistance of the plastic film formed. The formations of the starch films were carried out using the casting method with low viscosity. The samples were subjected to radiation in a clinical linear accelerator (linac) with x-ray beams of 10 MV and electron beam of 4 MeV, 6 MeV, 9 MeV and 12 MeV, and in a telecobaltotherapy source with 1.25 MeV of energy. The total applied radiation dose varied from 20 Gy at 140 Gy, a control group was maintained without radiation exposure. After the irradiation process, a dosimetry of the samples was carried out, using ionization chambers and Geiger Muller detector, there was no residual radiation reading in the samples. The samples were then subjected to spectrophotometric analysis to evaluate their stability and to verify if the induced radiation altered the organic groups and the primary structure of the biomaterial. The FTIR analysis showed that the radiation applied on the biopolymer mold did not alter its structure or chemical groups, and the plasticizing properties of the biomaterial were preserved.

Orientador: Marco Antônio Rodrigues Fernandes / Resumo: Os biopolímeros podem combinar a degradabilidade “in vivo” com a boa biocompatibilidade e, desta forma, podem ser usados como agentes encapsulantes com o objetivo de libertarem compostos bioativos. Dentro do grupo dos biopolímeros, os polissacarídeos apresentam vantagens importantes, como alta estabilidade, segurança, hidrofilicidade e biodegradabilidade. Os polissacarídeos têm sido objetos de estudos, apresentando resultados promissores. Este trabalho tem como objetivo, analisar o comportamento de uma matriz biopolimérica a base de amido, quando submetida à radiação ionizante visando seu uso em moldes planares para radioterapia de lesões cutâneas. Foram confeccionadas amostras de matrizes biopoliméricas de amido, constituído de água, amido, glicerina, duas variedades de açúcares na forma de pó, totalmente solúveis em água e produzida através da conversão do amido de milho. Durante o preparo das amostras variou-se as formulações para se obter melhor resistência da película plástica formada. As formações dos filmes de amido, foram realizadas através do método Casting com baixa viscosidade. As amostras foram submetidas à radiação em um acelerador linear clínico (linac) com feixes de raios-X de 10 MV e feixe de elétrons de 4 MeV, 6 MeV, 9 MeV e 12 MeV, e em uma fonte telecobaltoterapia com 1,25 MeV de energia. A dose total de radiação aplicada variou de 20 Gy a 140 Gy, um grupo controle foi mantido sem exposição à radiação. Após o processo de irradiação, foi realizada uma dosime... (Resumo completo, clicar acesso eletrônico abaixo) / Abstract: Biopolymers can combine "in vivo" degradability with good biocompatibility and, in this way, can be used as encapsulating agents in order to release bioactive compounds. Within the group of biopolymers, polysaccharides have important advantages, such as high stability, safety, hydrophilicity and biodegradability. Polysaccharides has been object of studied, presenting promising results. This work aims to study the properties of biopolymers for use in pharmaceutical applications in the treatment of pathologies and to analyze the behavior of the biopolymer matrix based on starch when submitted to ionizing radiation for its use in planar models for radiotherapy of cutaneous lesions. An extensive bibliographic research was carried out aiming to understand the characteristics, properties and applications of the biopolymers in the health area, having as starch the base of the polymer matrices. Samples of biopolymeric were made matrices, consisting of water, starch, glycerin, two sugar varieties in the form of powder, totally soluble in water and produced through the conversion of corn starch were made. During the preparation of the samples the formulations were varied to obtain better resistance of the plastic film formed. The formations of the starch films were carried out using the casting method with low viscosity. The samples were subjected to radiation in a clinical linear accelerator (linac) with x-ray beams of 10 MV and electron beam of 4 MeV, 6 MeV, 9 MeV and 12 MeV, and in ... (Complete abstract click electronic access below) / Mestre

Governments, military, corporations, financial institutions and others exchange a great deal of confidential information using Internet these days. Protecting such confidential information and ensuring their integrity and origin authenticity are of paramount importance. There exist protocols and solutions at different layers of the TCP/IP protocol stack to address these security requirements. Application level encryption viz. PGP for secure mail transfer, TLS based secure TCP communication, IPSec for providing IP layer security are among these security solutions. Due to scalability, wide acceptance of the IP protocol, and its application independent character, the IPSec protocol has become a standard for providing Internet security. The IPSec provides two protocols namely the Authentication header (AH) and the Encapsulating Security Payload (ESP). Each protocol can operate in two modes, viz. transport and tunnel mode. The AH provides data origin authentication, connectionless integrity and anti replay protection. The ESP provides all the security functionalities of AH along with confidentiality. The IPSec protocols provide end-to-end security for an entire IP datagram or the upper layer protocols of IP payload depending on the mode of operation. However, this end-to-end model of security restricts performance enhancement and security related operations of intermediate networking and security devices, as they can not access or modify transport and upper layer headers and original IP headers in case of tunnel mode. These intermediate devices include routers providing Quality of Service (QoS), TCP Performance Enhancement Proxies (PEP), Application level Proxy devices and packet filtering firewalls. The interoperability problem between IPSec and intermediate devices has been addressed in literature. Transport friendly ESP (TF-ESP), Transport Layer Security (TLS), splitting of single IPSec tunnel into multiple tunnels, Multi Layer IPSec (ML-IPSec) are a few of the proposed solutions. The ML-IPSec protocol solves this interoperability problem without violating the end-to-end security for the data or exposing some important header fields unlike the other solutions. The ML-IPSec uses a multilayer protection model in place of the single end-to-end model. Unlike IPSec where the scope of encryption and authentication applies to the entire IP datagram, this scheme divides the IP datagram into zones. It applies different protection schemes to different zones. When ML-IPSec protects a traffic stream from its source to its destination, it first partitions the IP datagram into zones and applies zone-specific cryptographic protections. During the flow of the ML-IPSec protected datagram through an authorized intermediate gateway, certain type I zones of the datagram may be decrypted and re-encrypted, but the other zones will remain untouched. When the datagram reaches its destination, the ML-IPSec will reconstruct the entire datagram. The ML-IPSec protocol, however suffers from the problem of static configuration of zones and zone specific cryptographic parameters before the commencement of the communication. Static configuration requires a priori knowledge of routing infrastructure and manual configuration of all intermediate nodes. While this may not be an issue in a geo-stationary satellite environment using TCP-PEP, it could pose problems in a mobile or distributed environment, where many stations may be in concurrent use. The ML-IPSec endpoints may not be trusted by all intermediate nodes in a mobile environment for manual configuration without any prior arrangement providing the mutual trust. The static zone boundary of the protocol forces one to ignore the presence of TCP/IP datagrams with variable header lengths (in case of TCP or IP headers with OPTION fields). Thus ML-IPSec will not function correctly if the endpoints change the use of IP or TCP options, especially in case of tunnel mode. The zone mapping proposed in ML-IPSec is static in nature. This forces one to configure the zone mapping before the commencement of the communication. It restricts the protocol from dynamically changing the zone mapping for providing access to intermediate nodes without terminating the existing ML-IPSec communication. The ML-IPSec endpoints can off course, configure the zone mapping with maximum number of zones. This will lead to unnecessary overheads that increase with the number of zones. Again, static zone mapping could pose problems in a mobile or distributed environment, where communication paths may change. Our extension to the ML-IPSec protocol, called Dynamic Multi Layer IPSec (DML-IPSec) proposes a multi layer variant with the capabilities of dynamic zone configuration and sharing of cryptographic parameters between IPSec endpoints and intermediate nodes. It also accommodates IP datagrams with variable length headers. The DML-IPSec protocol redefines some of the IPSec and ML-IPSec fundamentals. It proposes significant modifications to the datagram processing stage of ML-IPSec and proposes a new key sharing protocol to provide the above-mentioned capabilities. The DML-IPSec supports the AH and ESP protocols of the conventional IPSec with some modifications required for providing separate cryptographic protection to different zones of an IP datagram. This extended protocol defines zone as a set of non-overlapping and contiguous partitions of an IP datagram, unlike the case of ML-IPSec where a zone may consist of non-contiguous portions. Every zone is provided with cryptographic protection independent of other zones. The DML-IPSec categorizes zones into two separate types depending on the accessibility requirements at the intermediate nodes. The first type of zone, called type I zone, is defined on headers of IP datagram and is required for examination and modification by intermediate nodes. One type I zone may span over a single header or over a series of contiguous headers of an IP datagram. The second type of zone, called type II zone, is meant for the payload portion and is kept secure between endpoints of IPSec communications. The single type II zone starts immediately after the last type I zone and spans till the end of the IP datagram. If no intermediate processing is required during the entire IPSec session, the single type II zone may cover the whole IP datagram; otherwise the single type II zone follows one or more type I zones of the IP datagram. The DML-IPSec protocol uses a mapping from the octets of the IP datagram to different zones, called zone map for partitioning an IP datagram into zones. The zone map contains logical boundaries for the zones, unlike physical byte specific boundaries of ML-IPSec. The physical boundaries are derived on-the-fly, using either the implicit header lengths or explicit header length fields of the protocol headers. This property of the DML-IPSec zones, enables it to accommodate datagrams with variable header lengths. Another important feature of DML-IPSec zone is that the zone maps need not remain constant through out the entire lifespan of IPSec communication. The key sharing protocol may modify any existing zone map for providing service to some intermediate node. The DML-IPSec also redefines Security Association (SA), a relationship between two endpoints of IPSec communication that describes how the entities will use security services to communicate securely. In the case of DML-IPSec, several intermediate nodes may participate in defining these security protections to the IP datagrams. Moreover, the scope of one particular set of security protection is valid on a single zone only. So a single SA is defined for each zone of an IP datagram. Finally all these individual zonal SA’s are combined to represent the security relationship of the entire IP datagram. The intermediate nodes can have the cryptographic information of the relevant type I zones. The cryptographic information related to the type II zone is, however, hidden from any intermediate node. The key sharing protocol is responsible for selectively sharing this zone information with the intermediate nodes. The DML-IPSec protocol has two basic components. The first one is for processing of datagrams at the endpoints as well as intermediate nodes. The second component is the key sharing protocol. The endpoints of a DML-IPSec communication involves two types of processing. The first one, called Outbound processing, is responsible for generating a DML-IPSec datagram from an IP datagram. It first derives the zone boundaries using the zone map and individual header field lengths. After this partitioning of IP datagram, zone wise encryption is applied (in case of ESP). Finally zone specific authentication trailers are calculated and appended after each zone. The other one, Inbound processing, is responsible for generating the original IP datagram from a DML-IPSec datagram. The first step in the inbound processing, the derivation of zone boundary, is significantly different from that of outbound processing as the length fields of zones remain encrypted. After receiving a DML-IPSec datagram, the receiver starts decrypting type I zones till it decrypts the header length field of the header/s. This is followed by zone-wise authentication verification and zone-wise decryption. The intermediate nodes processes an incoming DML-IPSec datagram depending on the presence of the security parameters for that particular DML-IPSec communication. In the absence of the security parameters, the key sharing protocol gets executed; otherwise, all the incoming DML-IPSec datagrams get partially decrypted according to the security association and zone mapping at the inbound processing module. After the inbound processing, the partially decrypted IP datagram traverses through the networking stack of the intermediate node . Before the IP datagram leaves the intermediate node, it is processed by the outbound module to reconstruct the DML-IPSec datagram. The key sharing protocol for sharing zone related cryptographic information among the intermediate nodes is the other important component of the DML-IPSec protocol. This component is responsible for dynamically enabling intermediate nodes to access zonal information as required for performing specific services relating to quality or security. Whenever a DML-IPSec datagram traverses through an intermediate node, that requires access to some of the type I zones, the inbound security database is searched for cryptographic parameters. If no entry is present in the database, the key sharing protocol is invoked. The very first step in this protocol is a header inaccessible message from the intermediate node to the source of the DML-IPSec datagram. The intermediate node also mentions the protocol headers that it requires to access in the body portion of this message. This first phase of the protocol, called the Zone reorganization phase, is responsible for deciding the zone mapping to provide access to intermediate nodes. If the current zone map can not serve the header request, the DML-IPSec endpoint reorganizes the existing zone map in this phase. The next phase of the protocol, called the Authentication Phase is responsible for verifying the identity of the intermediate node to the source of DML-IPSec session. Upon successful authentication, the third phase, called the Shared secret establishment phase commences. This phase is responsible for the establishment of a temporary shared secret between the source and intermediate nodes. This shared secret is to be used as key for encrypting the actual message transfer of the DML-IPSec security parameters at the next phase of the protocol. The final phase of the protocol, called the Security parameter sharing phase, is solely responsible for actual transfer of the security parameters from the source to the intermediate nodes. This phase is also responsible for updation of security and policy databases of the intermediate nodes. The successful execution of the four phases of the key sharing protocol enables the DML-IPSec protocol to dynamically modify the zone map for providing access to some header portions for intermediate nodes and also to share the necessary cryptographic parameters required for accessing relevant type I zones without disturbing an existing DML-IPSec communication. We have implemented the DML-IPSec for ESP protocol according to the definition of zones along with the key sharing algorithm. RHEL version 4 and Linux kernel version 2.6.23.14 was used for the implementation. We implemented the multi-layer IPSec functionalities inside the native Linux implementation of IPSec protocol. The SA structure was updated to hold necessary SA information for multiple zones instead of single SA of the normal IPSec. The zone mapping for different zones was implemented along with the kernel implementation of SA. The inbound and outbound processing modules of the IPSec endpoints were re-implemented to incorporate multi-layer IPSec capability. We also implemented necessary modules for providing partial IPSec processing capabilities at the intermediate nodes. The key sharing protocol consists of some user space utilities and corresponding kernel space components. We use ICMP protocol for the communications required for the execution of the protocol. At the kernel level, pseudo character device driver was implemented to update the kernel space data structures and necessary modifications were made to relevant kernel space functions. User space utilities and corresponding kernel space interface were provided for updating the security databases. As DML-IPSec ESP uses same Security Policy mechanism as IPSec ESP, existing utilities (viz. setkey) are used for the updation of security policy. However, the configuration of the SA is significantly different as it depends on the DML-IPSec zones. The DML-IPSec ESP implementation uses the existing utilities (setkey and racoon) for configuration of the sole type II zone. The type I zones are configured using the DML-IPSec application. The key sharing protocol also uses this application to reorganize the zone mapping and zone-wise cryptographic parameters. The above feature enables one to use default IPSec mechanism for the configuration of the sole type II zone. For experimental validation of DML-IPSec, we used the testbed as shown in the above figure. An ESP tunnel is configured between the two gateways GW1 and GW2. IN acts as an intermediate node and is installed with several intermediate applications. Clients C11 and C21 are connected to GW1 and GW2 respectively. We carried out detailed experiments for validating our solution w.r.t firewalling service. We used stateful packet filtering using iptables along with string match extension at IN. First, we configured the firewall to allow only FTP communication (using port information of TCP header and IP addresses of Inner IP header ) between C11 and C21. In the second experiment, we configured the firewall to allow only Web connection between C11 and C21 using the Web address of C11 (using HTTP header, port information of TCP header and IP addresses of Inner IP header ). In both experiments, we initiated the FTP and WEB sessions before the execution of the key sharing protocol. The session could not be established as the access to upper layer headers was denied. After the execution of the key sharing protocol, the sessions could be established, showing the availability of protocol headers to the iptables firewall at IN following the successful key sharing. We use record route option of ping program to validate the claim of handling datagrams with variable header lengths. This option of ping program records the IP addresses of all the nodes traversed during a round trip path in the IP OPTION field. As we used ESP in tunnel mode between GW1 and GW2, the IP addresses would be recorded inside the encrypted Inner IP header. We executed ping between C11 and C21 and observed the record route output. Before the execution of the key sharing protocol, the IP addresses of IN were absent in the record route output. After the successful execution of key sharing protocol, the IP addresses for IN were present at the record route output. The DML-IPSec protocol introduces some processing overhead and also increases the datagram size as compared to IPSec and ML-IPSec. It increases the datagram size compared to the standard IPSec. However, this increase in IP datagram size is present in the case of ML-IPSec as well. The increase in IP datagram length depends on the number of zones. As the number of zone increases this overhead also increases. We obtain experimental results about the processing delay introduced by DML-IPSec processing. For this purpose, we executed ping program from C11 to C21 in the test bed setup for the following cases: 1.ML-IPSec with one type I and one type II zone and 2. DML-IPSec with one type I and one type II zone. We observe around 10% increase in RTT in DML-IPSec with two dynamic zones over that of ML-IPSec with two static zones. This overhead is due to on-the-fly derivation of the zone length and related processing. The above experiment analyzes the processing delay at the endpoints without intermediate processing. We also analyzed the effect of intermediate processing due to dynamic zones of DML-IPSec. We used iptables firewall in the above mentioned experiment. The RTT value for DML-IPSec with dynamic zones increases by less than 10% over that of ML-IPSec with static zones. To summarize our work, we have proposed an extension to the multilayer IPSec protocol, called Dynamic Multilayer IPSec (DML-IPSec). It is capable of dynamic modification of zones and sharing of cryptographic parameters between endpoints and intermediate nodes using a key sharing protocol. The DML-IPSec also accommodates datagrams with variable header lengths. The above mentioned features enable any intermediate node to dynamically access required header portions of any DML-IPSec protected datagrams. Consequently they make the DML-IPSec suited for providing IPSec over mobile and distributed networks. We also provide complete implementation of ESP protocol and provide experimental validation of our work. We find that our work provides the dynamic support for QoS and security services without any significant extra overhead compared to that of ML-IPSec. The thesis begins with an introduction to communication security requirements in TCP/IP networks. Chapter 2 provides an overview of communication security protocols at different layers. It also describes the details of IPSec protocol suite. Chapter 3 provides a study on the interoperability issues between IPSec and intermediate devices and discusses about different solutions. Our proposed extension to the ML-IPSec protocol, called Dynamic ML-IPSec(DML-IPSec) is presented in Chapter 4. The design and implementation details of DML-IPSec in Linux environment is presented in Chapter 5. It also provides experimental validation of the protocol. In Chapter 6, we summarize the research work, highlight the contributions of the work and discuss the directions for further research.