Secure address proxying using multi-key cryptographically generated addresses

In a server, a method for providing a network address to a network device, comprising:

• receiving from the network device a request for the network address, the request including a public key associated with the network device;
• sending the network device the network address, the network address being generated using the public key of the network device and a public key associated with the server, wherein the network address expires after a predetermined term;
• and
• receiving a renewal request from the network device to renew the term of the network address, the renewal request being signed using a private key associated with the network device.

In a mobile terminal, a method for generating a network address that can be defended by a proxy, comprising:

• sending request to the proxy;
• receiving a reply from the proxy responding to the request, the reply including a public key associated with the mobile terminal and a signature associated with the mobile terminal;
• creating the network address from the public key associated with the mobile terminal and a public key associated with the proxy, wherein the network address expires after a predetermined term;
• and
• renewing the term of the network address by the mobile terminal sending the proxy a renewal request signed using a private key associated with the mobile terminal.

In a proxy server, a method for providing a network address associated with a mobile terminal, comprising:

• receiving a request from the mobile terminal, the request including a public key for the mobile terminal;
• sending a reply to the mobile terminal responding to the request, the reply including a signature created using a public key of the mobile terminal;
• receiving the network address from the mobile terminal, the network address being formed using the public key associated with the mobile terminal and the public key associated with the proxy, wherein the network address received from the mobile terminal expires after a predetermined term;
• and
• renewing the term of the network address by receiving from the mobile terminal a renewal request signed using a private key associated with the mobile terminal.