Method and apparatus for use in a communications network
AssigneeTelefonaktiebolaget LM Ericsson (publ)
InventorWassim Haddad
Life of this patent
Estimating the term…
Abstract
A method is provided for use in a Mobile IP network in which it is determined whether a Mobile Node (10) in a visited network is reachable on a new claimed Care-of Address for the Mobile Node (10) using information relating to a pre-established cryptographic relationship between the Mobile Node (10) and an Access Router (20) of the visited network. It may be determined, through communication between a Home Agent (30) for the Mobile Node (10) in the Mobile Node 10's home network and the Access Router (20), whether such a pre-established cryptographic relationship exists. The existence of such a pre-established relationship would indicate that the Mobile Node (10) is reachable on the claimed Care-of Address.
Claims27
A method, performed by a Home Agent for a Mobile Node operative in a Mobile IP network, of determining whether the Mobile Node is reachable in a visited network using a Care-of Address provided by the Mobile Node, the method comprising:
- receiving, from the Mobile Node, a Care-of Address, identification of an Access Router of the visited network, and information relating to a pre-established cryptographic relationship between the Mobile Node and the Access Router;
- cryptographically verifying, with the Access Router of the visited network, the pre-established cryptographic relationship between the Mobile Node and the Access Router;
- and
- thereafter, forwarding data packets intended for the Mobile Node to the Care-of Address, without again verifying the reachability of the Care-of Address.
A method, performed by an Access Router of a network visited by a Mobile Node operative in a Mobile IP network, of preventing network flooding attacks by the Mobile Node, the method comprising:
- establishing a cryptographic relationship between the Mobile Node and the Access Router;
- and
- cryptographically verifying, to a Home Agent for the Mobile Node, that the Access Router has established a cryptographic relationship between the Mobile Node and the Access Router.
A network node operative as a Home Agent in a Mobile IP network, the node comprising:
- a receiver operative to receive a Binding Update message from a Mobile Node providing a Care-of Address for use by the Mobile Node in a visited network, an identification of an Access Router of the visited network, and information relating to a pre-established cryptographic relationship between the Mobile Node and the Access Router;
- a transmitter operative to transmit at least a cryptographically signed Binding Compete Request message to the Access Router to verify the pre-established cryptographic relationship;
- wherein the receiver is further operative to receive from the Access Router a signed Binding Complete message verifying the pre-established cryptographic relationship;
- and
- a controller operative to control the receiver and the transmitter, and after verifying the pre-established cryptographic relationship, operative to forward data packets intended for the Mobile Node to the Care-of Address.
A network node operative as an Access Router in a Mobile IP network visited by a Mobile Node, the node comprising:
- a receiver operative to receive one or more Network Flooding Defense (NFD) protocol messages from the Mobile Node;
- a transmitter operative to transmit one or more NFD protocol messages to the Mobile Node;
- wherein the NFD message exchange is operative to establish cryptographic relationship between the Access Router and the Mobile Node;
- and
- a controller operative to control the receiver and transmitter;
- wherein the receiver is further operative to receive from a Home Agent of the Mobile Node in the home network of the Mobile Node, a cryptographically signed Binding Compete Request message seeking to verify the pre-established cryptographic relationship between the Access Router and the Mobile Node;
- and
- wherein the transmitter is further operative to transmit to the Home Agent a signed Binding Complete message verifying the pre-established cryptographic relationship.
Dependencies are inferred from the claim text.