US 2011/0035585 A1 · RE-ESTABLISHMENT OF A SECURITY ASSOCIATION

Abstract

According to a first aspect of the present invention there is provided a method of re-establishing a session between first and second IP hosts attached to respective first and second IP access routers, the session previously having been conducted via a previous access router to which said first host was attached, and where a security association comprising a shared secret has been established between the hosts. The method comprises sending a connection request from said first host to said first access router, said request containing an IP address claimed by said second host, a new care-of-address for the first host, and a session identifier. Upon receipt of said connection request at said first access router, the router obtains a verified IP address for said second access router and sends an on link presence request to the second access router, the request containing at least an Interface Identifier part of the second host's claimed IP address, said care-of-address, and said session identifier. Said second access router confirms that said second host is attached to the second access router using the claimed Interface Identifier, sending to the second host said care-of-address and said session identifier. The second access router then reports the presence status to said first access router. Said second host uses said session identifier to identify said security association, and updates the binding cache entry for said first host with the new care-of-address.

Claims16

Dependent claims

A method of re-establishing a session between first and second IP hosts attached to respective first and second IP access routers, the session previously having been conducted via a previous access router to which said first host was attached, and where a security association comprising a shared secret has been established between the hosts, the method comprising:

sending a connection request from said first host to said first access router, said request containing an IP address claimed by said second host, a new care-of-address for the first host, and a session identifier;
at said first access router, upon receipt of said connection request, obtaining a verified IP address for said second access router and sending an on link presence request to the second access router, the request containing at least an Interface Identifier part of the second host's claimed IP address, said care-of-address, and said session identifier;
at said second access router, confirming that said second host is attached to the second access router using the claimed Interface Identifier including sending to the second host said care-of-address and said session identifier, and reporting the presence status to said first access router;
at said second host, using said session identifier to identify said security association, and updating the binding cache entry for said first host with the new care-of-address.

1 more element

Dependencies are inferred from the claim text.

Re-establishment of a security association

Life of this patent

Re-establishment of a security association

Life of this patent

Abstract

Claims16