Method and apparatus for securing communication between a mobile node and a network

A mobile device, comprising:

• wireless communication circuitry for performing wireless communication;
• processing hardware coupled to the wireless communication circuitry, wherein the processing hardware is configured to:
• access a message;
• generate a checksum of the message;
• access a session key, wherein the processing hardware is configured to negotiate the session key prior to accessing the message by:
• initiating a communication session using a protocol;
• receiving a public key within a vendor specific packet of the protocol, wherein the vendor specific packet includes a field indicating that the packet includes data in a format specified by a vendor;
• generating a session key from the public key;
• and
• communicating the session key within an initial request message (RRQ) of the protocol;
• generate an authentication code by performing a one-way hash function on the checksum using the session key;
• generate an output message that includes the message and the authentication code;
• and
• transmit the output message via the wireless communication circuitry, wherein the output message is intended for a first hop IP router.

A non-transitory, computer accessible memory medium comprising program instructions, wherein the program instructions are executable by a mobile device to:

• access a message;
• generate a checksum of the message;
• access a session key, wherein the program instructions are executable to negotiate the session key prior to the accessing the message by:
• initiating a communication session using a protocol;
• receiving a public key within a vendor specific packet of the protocol, wherein the vendor specific packet includes a field indicating that the packet includes data in a format specified by a vendor;
• generating a session key from the public key;
• and
• communicating the session key within an initial request message (RRQ) of the protocol;
• generate an authentication code by performing a one-way hash function on the checksum using the session key;
• and
• generate an output message that includes the message and authentication code, wherein the output message is intended for a first hop IP router.