# US 8,751,796 B2 · Method and apparatus for use in a communications network > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,751,796 B2 - Document ID: US8751796B2 - Status: Granted - Kind: B2 - Application number: 12/738,694 - Filed: 2008-09-18 - Published: 2010-11-11 - Granted: 2014-06-10 - Earliest claimed: 2007-10-17 - Assignees: Telefonaktiebolaget L M Ericsson (publ) - Applicants: Christian Vogt; Shinta Sugimoto - Inventors: Christian Vogt; Shinta Sugimoto - Web page: https://patentgrep.com/patent/US8751796B2 ## CPC - H04L 61/5084: Providing for device mobility (network addressing or numbering for mobility support in wireless networks H04W8/26; mobile IP H04W80/04) - H04L 61/35: {involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function} - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04W 12/069: using certificates or pre-shared keys - H04W 8/082: {for traffic bypassing of mobility servers, e.g. location registers, home PLMNs or home agents} - H04W 8/26: Network addressing or numbering for mobility support - H04W 80/04: Network layer protocols, e.g. mobile IP [Internet Protocol] - H04W 88/182: {Network node acting on behalf of an other network entity, e.g. proxy} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method and apparatus for use in a Proxy Mobile IP communications network. An anchor point function serves at least one mobile host. The anchor point function generates an IP address for use by the mobile host, the address being generated using cryptographic materials owned by the anchor point function. The anchor point function can then perform signalling on behalf of the mobile host, using the IP address generated for the mobile host and at least part of the cryptographic materials used to generate the IP address. ## Claims ### Claim 1 A method for use in a Proxy Mobile Internet protocol (IP) communications network, the method comprising: at an anchor point function serving at least one mobile host through a remote access router, generating an IP address for use by the mobile host, the IP address being generated at least in part using cryptographic materials solely owned by the anchor point, wherein the cryptographic materials comprise a public/private key pair owned by the anchor point function; and performing, at the anchor point function, signaling on behalf of the mobile host, using the IP address generated for the mobile host and at least part of the cryptographic materials used to generate the IP address. ### Claim 2 (depends on 1) The method according to claim 1, further comprising using a modifier value specific to the mobile host, in combination with the cryptographic materials to generate the IP address. ### Claim 3 (depends on 2) The method according to claim 2, further comprising: i. comparing the IP address of the mobile host with IP addresses previously generated by the anchor point; and ii. in the event that the IP address of the mobile host is the same as a previously generated IP address, using a further modifier value to generate a further IP address and repeating steps i and ii. ### Claim 4 (depends on 1) The method according to claim 1, further comprising: providing the public key of the anchor point function to a remote node, the public key to be used by the remote node to authenticate the IP address of the mobile host. ### Claim 5 (depends on 1) The method according to claim 1, further comprising using the IP address to perform Enhanced Route Optimization with a correspondent node. ### Claim 6 (depends on 5) The method according to claim 5, further comprising: receiving a temporary home keygen token from a correspondent node; sending the temporary home keygen token, the IP address of the mobile host, and at least part of the cryptographic materials to the correspondent node, the cryptographic materials for use in authenticating the IP address of the mobile host; receiving a Care-of keygen token from the correspondent node; and sending from the anchor point on behalf of the mobile host, a Binding Update message to the correspondent node, the Binding Update message comprising the temporary home keygen token, the Care-of keygen token in case of a complete Binding Update message, and at least part of the cryptographic materials, the cryptographic materials for use in authenticating the IP address of the mobile host. ### Claim 7 (depends on 6) The method according to claim 6, further comprising: sending a permanent home keygen token, the IP address of the mobile host, and at least part of the cryptographic materials to the correspondent node; receiving a further Care-of keygen token from the correspondent node; and sending from the anchor point on behalf of the mobile host, a Binding Update message to the correspondent node, the Binding Update message comprising the permanent home keygen token, the further Care-of keygen token in the case of a complete Binding Update message, and at least part of the cryptographic materials, the cryptographic materials for use in authenticating the IP address of the mobile host. ### Claim 8 An anchor point function for use in a proxy mobile communications network, the anchor point function serving at least one mobile host through a remote access router, comprising: a receiver for communicating with the at least one mobile host served by the anchor point function through the remote access router; a processor for generating an Internet protocol (IP) address for use by the at least one mobile host, the IP address being generated at least in part using cryptographic materials solely owned by the anchor point function, wherein the cryptographic materials comprise a public/private key pair owned by the anchor point function; and a transmitter for sending signaling on behalf of the mobile host, the signaling using the IP address generated for the mobile host and at least part of the cryptographic materials used to generate the IP address. ### Claim 9 (depends on 8) The anchor point function according to claim 8, wherein the processor is arranged to use a modifier value specific to the mobile host in combination with the cryptographic materials to generate the IP address. ### Claim 10 (depends on 9) The anchor point function according to claim 9, wherein the processor is further arranged to compare the IP address of the mobile host with IP addresses previously generated by the anchor point and, in the event that the IP address of the mobile host is the same as a previously generated IP address, the processor is arranged to use a further modifier value to generate a further IP address. ### Claim 11 (depends on 8) The anchor point function according to claim 8, further comprising: a second transmitter for sending the public key of the anchor point function to a remote node, the public key to be used by the remote node to authenticate the IP address of the mobile host. ### Claim 12 (depends on 8) The anchor point function according to claim 8, further comprising: a second receiver for receiving a temporary home keygen token from a correspondent node; a second transmitter for transmitting the temporary home keygen token, the IP address of the mobile host, and at least part of the cryptographic materials to the correspondent node, the cryptographic materials for use in authenticating the IP address of the mobile host; a third receiver for receiving a Care-of keygen token from the correspondent node; and a third transmitter for sending, on behalf of the mobile host, a Binding Update message to the correspondent node, the Binding Update message comprising the temporary home keygen token, the Care-of keygen token in the case of a complete Binding Update message, and at least part of the cryptographic materials, the cryptographic materials for use in authenticating the IP address of the mobile host. ### Claim 13 (depends on 12) The anchor point function according to claim 12, further comprising: a fourth transmitter for sending a permanent home keygen token, the IP address of the mobile host, and at least part of the cryptographic materials to the correspondent node; a fourth receiver for receiving a further Care-of keygen token from the correspondent node; and a fifth transmitter for sending, on behalf of the mobile host, a Binding Update message to the correspondent node, the Binding Update message comprising the permanent home keygen token, the further Care-of keygen token in the case of a complete Binding Update message, and at least part of the cryptographic materials, the cryptographic materials for use in authenticating the IP address of the mobile host. ### Claim 14 An access router for use in a Proxy Mobile Internet protocol (IP) communications network, the access router comprising: a receiver for receiving from an anchor point function remote from the access router signaling relating to a mobile host served by the anchor point function; and a transmitter for forwarding the signaling to a correspondent node, the signaling comprising packets defining an IP source address as an IP address generated by the anchor point for use by the mobile host, the IP address having been generated at least in part using cryptographic materials solely owned by the anchor point, wherein the cryptographic materials comprise a public/private key pair owned by the anchor point function.