Methods and apparatus for dynamic session key generation and rekeying in mobile IP

In a Home Agent supporting Mobile IP, a method of authenticating a Mobile Node, comprising:

• receiving a Mobile IP registration request by the Home Agent from a Mobile Node, the Mobile IP registration request identifying the Mobile Node;
• sending a request message by the Home Agent to a AAA server, the request message identifying the Mobile Node;
• receiving a reply message by the Home Agent from the AAA server, the reply message including key information associated with the Mobile Node;
• deriving a key by the Home Agent from the key information, the key being a shared key between the Mobile Node and the Home Agent, wherein deriving the key from the key information does not include decryption of the key information;
• and
• sending a Mobile IP registration reply by the Home Agent to the Mobile Node, wherein the Mobile IP registration reply does not include the key in any form.

In a Mobile Node, a method of registering with a Home Agent supporting Mobile IP, comprising:

• sending a Mobile IP registration request from the Mobile Node to the Home Agent;
• receiving a Mobile IP registration reply by the Mobile Node from the Home Agent, the Mobile IP registration reply indicating that the Mobile Node is to derive a key to be shared between the Mobile Node and the Home Agent, wherein the Mobile IP registration reply does not include the key to be shared between the Mobile Node and the Home Agent in any form;
• and
• deriving a key to be shared between the Mobile Node and the Home Agent from key information stored at the Mobile Node, wherein deriving the key from the key information does not include decryption of the key information.

A computer-readable medium storing thereon computer readable instructions for generating a shared key between a Home Agent and a Mobile Node in a server adapted for authentication, authorization, and accounting, comprising:

• instructions for receiving a request message from a Home Agent, the request message identifying the Mobile Node;
• instructions for deriving key information from a key or password associated with the Mobile Node;
• and
• instructions for sending a reply message to the Home Agent, the reply message including the key information associated with the Mobile Node, thereby enabling the Home Agent to derive a shared key to be shared between the Mobile Node and the Home Agent from the key information, wherein the reply message does not include the shared key in any form.

A server adapted for authentication, authorization, and accounting, the server being adapted for generating a shared key between a Home Agent and a Mobile Node, comprising:

• a processor;
• and
• a memory, at least one of the processor and the memory being adapted for:
• receiving a request message from a Home Agent, the request message identifying the Mobile Node;
• deriving key information from a key or password associated with the Mobile Node;
• and
• sending a reply message to the Home Agent, the reply message including the key information associated with the Mobile Node, thereby enabling the Home Agent to derive a shared key to be shared between the Mobile Node and the Home Agent from the key information, wherein the reply message does not include the shared key in any form.

A server adapted for authentication, authorization, and accounting, the server being adapted for generating a shared key between a Home Agent and a Mobile Node, comprising:

• means for receiving a request message from a Home Agent, the request message identifying the Mobile Node;
• means for deriving key information from a key or password associated with the Mobile Node;
• and
• means for sending a reply message to the Home Agent, the reply message including the key information associated with the Mobile Node, thereby enabling the Home Agent to derive a shared key to be shared between the Mobile Node and the Home Agent from the key information, wherein the reply message does not include the shared key in any form.

A computer-readable medium storing thereon computer-readable instructions for authenticating a Mobile Node in a Home Agent supporting Mobile IP, comprising:

• instructions for receiving a Mobile IP registration request from a Mobile Node, the Mobile IP registration request identifying the Mobile Node;
• instructions for sending a request message to a AAA server, the request message identifying the Mobile Node;
• instructions for receiving a reply message from the AAA server, the reply message including key information associated with the Mobile Node;
• instructions for deriving a key from the key information, the key being a shared key between the Mobile Node and the Home Agent, wherein deriving the key from the key information does not include decryption of the key information;
• and
• instructions for sending a Mobile IP registration reply to the Mobile Node, wherein the Mobile IP registration reply does not include the shared key in any form.

A Home Agent supporting Mobile IP, the Home Agent being adapted for authenticating a Mobile Node, comprising:

• a processor;
• and
• a memory, at least one of the processor and the memory being adapted for:
• receiving a Mobile IP registration request from a Mobile Node, the Mobile IP registration request identifying the Mobile Node;
• sending a request message to a AAA server, the request message identifying the Mobile Node;
• receiving a reply message from the AAA server, the reply message including key information associated with the Mobile Node;
• deriving a key from the key information, the key being a shared key between the Mobile Node and the Home Agent, wherein deriving the key from the key information does not include decryption of the key information;
• and
• sending a Mobile IP registration reply to the Mobile Node, wherein the Mobile IP registration reply does not include the shared key in any form.

A Home Agent supporting Mobile IP and adapted for authenticating a Mobile Node, comprising:

• means for receiving a Mobile IP registration request from a Mobile Node, Mobile IP the registration request identifying the Mobile Node;
• means for sending a request message to a AAA server, the request message identifying the Mobile Node;
• means for receiving a reply message from the AAA server, the reply message including key information associated with the Mobile Node;
• means for deriving a key from the key information, the key being a shared key between the Mobile Node and the Home Agent, wherein deriving the key from the key information does not include decryption of the key information;
• and
• means for sending a Mobile IP registration reply to the Mobile Node, wherein the Mobile IP registration reply does not include the shared key in any form.

A computer-readable medium storing thereon computer-readable instructions for registering a Mobile Node with a Home Agent supporting Mobile IP, comprising:

• instructions for sending a Mobile IP registration request to the Home Agent;
• instructions for receiving a Mobile IP registration reply from the Home Agent, the Mobile IP registration reply indicating that the Mobile Node is to derive a key to be shared between the Mobile Node and the Home Agent, wherein the Mobile IP registration reply does not include the key to be shared between the Mobile Node and the Home Agent in any form;
• and
• instructions for deriving a key to be shared between the Mobile Node and the Home Agent from key information stored at the Mobile Node, wherein deriving the key from the key information does not include decryption of the key information.

A Mobile Node adapted for registering with a Home Agent supporting Mobile IP, comprising:

• a processor;
• and
• a memory, at least one of the processor and the memory being adapted for:
• sending a Mobile IP registration request to the Home Agent;
• receiving a Mobile IP registration reply from the Home Agent, the Mobile IP registration reply indicating that the Mobile Node is to derive a key to be shared between the Mobile Node and the Home Agent, wherein the Mobile IP registration reply does not include the key in any form;
• and
• deriving a key to be shared between the Mobile Node and the Home Agent from key information stored at the Mobile Node, wherein deriving the key from the key information does not include decryption of the key information.

A Mobile Node adapted for registering with a Home Agent supporting Mobile IP, comprising:

• means for sending a Mobile IP registration request to the Home Agent;
• means for receiving a Mobile IP registration reply from the Home Agent, the Mobile IP registration reply indicating that the Mobile Node is to derive a key to be shared between the Mobile Node and the Home Agent, wherein the Mobile IP registration reply does not include the key in any form;
• and
• means for deriving a key to be shared between the Mobile Node and the Home Agent from key information stored at the Mobile Node, wherein deriving the key from the key information does not include decryption of the key information.