# US 8,542,838 B2 · Method and system for generating and distributing mobile IP key

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,542,838 B2
- Document ID: US8542838B2
- Status: Granted
- Kind: B2
- Application number: 12/350,593
- Filed: 2009-01-08
- Published: 2009-05-07
- Granted: 2013-09-24
- Earliest claimed: 2006-07-12
- Assignees: Huawei Technologies Co., Ltd.
- Applicants: Wenliang Liang; Jianjun Wu
- Inventors: Wenliang Liang; Jianjun Wu
- Web page: https://patentgrep.com/patent/US8542838B2

## CPC

- H04L 9/0836: {using tree structure or hierarchical structure}
- H04L 9/0869: {involving random numbers or seeds}
- H04L 9/321: {involving a third party or a trusted authority}
- H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)}
- H04L 63/0892: {by using authentication-authorization-accounting [AAA] servers or protocols}
- H04W 12/041: Key generation or derivation
- H04W 12/0431: Key distribution or pre-distribution; Key agreement
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 2209/80: Wireless
- H04W 80/04: Network layer protocols, e.g. mobile IP [Internet Protocol]
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A method and system for generating and distributing a mobile IP key are provided. The method mainly includes the following steps. During the course of access validation or re-authorization and re-authentication, a sub-key between a mobile node (MN) and an authentication, authorization, and accounting (AAA) server is computed, and an authentication extension (AE) between the MN and the AAA server is computed according to the sub-key. The AE is carried in a mobile IP registration request or a binding update (BU) request initiated by the MN, a home agent (HA) requests the key from the AAA server according to the AE in the registration request or the BU request, and the AAA server distributes the key to the HA. By using the present invention, a PMIP-client can compute the AE between the MN and the AAA server (MN-AAA-AE) without the need of distributing the key between the MN and the AAA server.

## Claims

### Claim 1

A method for generating and distributing a mobile IP (MIP) key, comprising:
receiving, by a foreign agent (FA), an MIP registration request from a mobile node (MN), wherein the MIP registration request carries a first authentication extension (AE) between the MN and a home agent (HA), and the first AE is generated according to a first key between the MN and the HA computed by using an IP address replacement value of the HA, wherein all bits of the IP address replacement value of the HA are 0 or all bits of the IP address replacement value of the HA are 1;
transmitting, by the FA, the MIP registration request to the HA;
receiving, by the HA, the MIP registration request from the FA;
obtaining, by the HA, from an authentication server, the first key and a second key between the MN and the HA computed by using an IP address of the HA;
validating, by the HA, the first AE in the registration request by using the first key, and transmitting an MIP registration report to the FA after the successful validation, wherein the registration report carries a second AE generated according to the second key; and
transmitting, by the FA, the registration report carrying the second AE to the MN, so that the MN can validate the second AE by using the second key.

### Claim 2 (depends on 1)

The method according to claim 1, wherein
the MIP registration request carries indication information for validating the first AE by using the first key.

### Claim 3

A system for generating and distributing a mobile IP (MIP) key, comprising:
a home agent (HA) and a foreign agent (FA), wherein
the FA is configured to receive an MIP registration request from a mobile node (MN) and transmit the MIP registration request to the HA, wherein the MIP registration request carries a first authentication extension (AE) between the MN and the HA, and the first AE is generated according to a first key between the MN and the HA computed by using an IP address replacement value of the HA, wherein all bits of the IP address replacement value of the HA are 0 or all bits of the IP address replacement value of the HA are 1;
the HA is configured to receive the MIP registration request from the FA, obtain from an authentication server the first key and a second key between the MN and the HA computed by using an IP address of the HA, validate the first AE in the registration request by using the first key, and transmit an MIP registration report carrying a second AE generated according to the second key to the FA after the successful validation; and
the FA is further configured transmit the registration report carrying the second AE to the MN, so that the MN can validate the second AE by using the second key.

### Claim 4

A method for generating and distributing a mobile IP (MIP) key, comprising:
receiving, by a foreign agent (FA), an MIP registration request from a proxy MIP (PMIP) client, wherein the MIP registration request carries a first authentication extension (AE), the first AE is generated according to a first key between a mobile node (MN) and a home agent (HA) computed by using an IP address replacement value of the HA, wherein all bits of the IP address replacement value of the HA are 0 or all bits of the IP address replacement value of the HA are 1;
transmitting, by the FA, the MIP registration request to the HA;
receiving, by the HA, the MIP registration request transmitted by the FA, and obtaining from an authentication server the first key and a second key between the MN and the HA computed by using an IP address of the HA;
validating, by the HA, the first AE in the registration request by using the first key, and transmitting an MIP registration report to the FA after successful validation, wherein the registration report carries a second AE generated according to the second key; and
transmitting, by the FA, the registration report carrying the second AE to the PMIP-client.

### Claim 5 (depends on 4)

The method according to claim 4, wherein
the MIP registration request carries indication information indicating to validate the carried first AE by using the first key between the MN and the HA computed according to the IP address replacement value of the HA.

### Claim 6

A system for generating and distributing a mobile IP (MIP) key, comprising:
a home agent (HA) and a foreign agent (FA); wherein
the FA is configured to receive an MIP registration request from a proxy MIP (PMIP) client and transmit the MIP registration request to the HA, wherein the MIP registration request carries a first authentication extension (AE), the first AE is generated according to a first key between a mobile node (MN) and the HA computed by using an IP address replacement value of the HA, wherein all bits of the IP address replacement value of the HA are 0 or all bits of the IP address replacement value of the HA are 1;
the HA is configured to receive the MIP registration request from the FA, obtain from an authentication server the first key and a second key between the MN and the HA computed by using an IP address of the HA, validate the first AE in the registration request by using the first key, and transmit an MIP registration report carrying a second AE generated according to the second key to the FA after the successful validation; and
the FA is further configured to receive the MIP registration report from the HA, and transmit the registration report carrying the second AE to the PMIP-client.