Loading patent…
AssigneeNokia Corporation
InventorsTarja Pirttimaa, Jyrki Polet
Estimating the term…
The present invention relates to a method and network element for providing secure access to a packet data network, wherein a first source information is derived from a message received from a terminal device (40, 60), and is compared with a second source information derived from a packet data unit used for conveying said message, or derived from a security association set up between the terminal device and the data network. A protection processing for protecting the packet data network from a fraudulent user attack is then initiated based on the comparing result. Thereby, a simple and efficient protection mechanism can be provided without sending any additional information or providing any additional fields in the message.
A method for providing secure access to a packet data network, said method comprising:
A method according to any one of the preceding claims, wherein said protection processing comprises a processing for dropping said message if said comparing step leads to the result that said first source information and said second source information do not indicate the same location.
A method according to any one of the preceding claims, wherein said protection processing comprises a processing for dropping said message if said comparing step leads to the result that said first source information and said second source information do not match.
A method according to any one of the preceding claims, wherein said first source information is an IP address.
A method according to any one of the preceding claims, wherein said second source information is at least a part of an IP source address of an IP datagram.
A network element for providing secure access to a packet data network, said network element (30) comprising:
Dependencies are inferred from the claim text.