Method and system for securing mobile IPV6 home address option using ingress filtering

A system for securely communicating packets that include the home address destination option in a mobile IPv6 protocol network, comprising:

• (a) a destination for packets sent over a network;
• and
• (b) a mobile node that performs actions, including:
• (i) receiving a care of address that employs an access router to communicate with at least one resource over a visited network;
• (ii) enabling a binding update message from the mobile node to be forwarded by the access router to another node for authentication, wherein the other node sends a binding acknowledgement message to the mobile node if a home IP address included in the binding update message is authentic;
• and
• (iii) if the binding acknowledgement message from the other node is determined by the access router to verify the home IP address for the mobile node, enabling the mobile node to communicate another type of data through the access router with at least one resource over the visited network, wherein until the home IP address is verified by the access router, the mobile node is unable to communicate the other type of data through the access router.

An apparatus for securely communicating packets using the home address destination option in a mobile IPv6 protocol network, comprising:

• (a) a network interface that sends and receives packetized messages;
• and
• (b) a transcoder that performs actions, including:
• (i) enabling a care of address to be provided to a mobile node that employs an access router to communicate with at least one resource over a visited network;
• (ii) enabling a binding update message from the mobile node to be forwarded by the access router to another node for authentication, wherein the other node sends a binding acknowledgement message to the mobile node if a home IP address included in the binding update message is authentic;
• and
• (iii) if the binding acknowledgement message from the other node is determined by the access router to verify the home IP address for the mobile node, enabling the mobile node to communicate another type of data through the access router with at least one resource over the visited network, wherein until the home IP address is verified by the access router, the mobile node is unable to communicate the other type of data through the access router.

A computer-readable medium that includes instructions for performing actions, including:

• (a) providing a care of address to a mobile node that employs an access router to communicate with at least one resource over a visited network;
• (b) enabling a binding update message from the mobile node to be forwarded by the access router to another node for authentication, wherein the other node sends a binding acknowledgement message to the mobile node if a home IP address included in the binding update message is authentic;
• and
• (c) if the binding acknowledgement message from the other node is determined by the access router to verify the home IP address for the mobile node, enabling the mobile node to communicate through the access router with at least one resource over the visited network, wherein until the home IP address is verified by the access router, the mobile node is unable to communicate with any resource through the access router.

A method for securely communicating packets using the home address destination option in a mobile IPv6 protocol network, comprising:

• (a) means for providing a care of address to a mobile node that employs an access router to communicate with at least one resource over a visited network;
• (b) means for enabling a binding update message from the mobile node to be forwarded by the access router to another node for authentication, wherein the other node sends a binding acknowledgement message to the mobile node if a home IP address included in the binding update message is authentic;
• and
• (c) if the binding acknowledgement message from the other node is determined by the access router to verify the home IP address for the mobile node, means for enabling the mobile node to communicate through the access router with at least one resource over the visited network, wherein until the home IP address is verified by the access router, the mobile node is unable to communicate with any resource through the access router.