Key Caching, QoS and Multicast Extensions to Media-Independent Pre-Authentication

Abstract

This present application relates to, among other things, Key Caching, QoS and Multicast extensions and improvements to the Media-independent Pre-Authentication (MPA) framework, a new handover optimization mechanism that has a potential to address issues on existing mobility management protocols and mobility optimization mechanisms. MPA is a mobile assisted, secure handover optimization scheme that works over any link-layer and with any mobility management protocol.

1 . A method for management of an authentication state of a mobile node for media independent pre-authentication with multiple target networks, comprising:
 maintaining a state in an authentication agent of a plurality of neighboring networks for a period of time, and   when the mobile node moves back and forth between said neighboring networks, employing the maintained state in the authentication agent.   
   
   
       2 . A method for management of an authentication state of a mobile node for media independent pre-authentication with multiple target networks, comprising:
 when a mobile node that has been authenticated and authorized by an authentication agent in a current network makes a handover to a target network, holding a security association that has been established between the mobile node and the authentication agent (MPA-SA) for a time period after moving from the current network,   whereby the mobile node does not have to go through an entire authentication signaling to create a new security association when it returns to the current network.   
   
   
       3 . The method of  claim 2 , further including said authentication agent changing a fully authorized state for the mobile node to an unauthorized state after moving from the current network, and changing the unauthorized state to an authorized state when the mobile node comes back to the current network and provides proof of possession of a key associated with the MPA-SA. 
   
   
       4 . The method of  claim 3 , wherein while an MPA-SA is being held at an authentication agent, the mobile node updates the authentication agent when an IP address of the mobile node changes due to a handover. 
   
   
       5 . A system for management of an authentication state of a mobile node for media independent pre-authentication with multiple target networks, comprising:
 said system including a device that is configured such that when a mobile node that has been authenticated and authorized by an authentication agent in a current network makes a handover to a target network, a security association that has been established between the mobile node and the authentication agent (MPA-SA) is held for a time period after moving from the current network, whereby the mobile node does not have to go through an entire authentication signaling to create a new security association when it returns to the current network.   
   
   
       6 . The system of  claim 5 , further including means for caching of keys associated with said MPA-SA. 
   
   
       7 . The system of  claim 6 , wherein said system includes a mobile node that is configured such that after the mobile node has been pre-authenticated to an authorizing agent in a candidate target network and has a MPA-SA, said mobile node continues to keep the MPA-SA while it continues to stay in the current network and even after it handovers to a network that is different from the candidate target network. 
   
   
       8 . (canceled) 
   
   
       9 . (canceled) 
   
   
       10 . (canceled) 
   
   
       11 . (canceled) 
   
   
       12 . (canceled) 
   
   
       13 . (canceled) 
   
   
       14 . (canceled) 
   
   
       15 . (canceled) 
   
   
       16 . (canceled) 
   
   
       17 . (canceled) 
   
   
       18 . (canceled) 
   
   
       19 . (canceled) 
   
   
       20 . (canceled) 
   
   
       21 . (canceled) 
   
   
       22 . (canceled) 
   
   
       23 . (canceled) 
   
   
       24 . (canceled) 
   
   
       25 . (canceled) 
   
   
       26 . (canceled) 
   
   
       27 . (canceled) 
   
   
       28 . (canceled) 
   
   
       29 . (canceled) 
   
   
       30 . (canceled) 
   
   
       31 . (canceled) 
   
   
       32 . (canceled) 
   
   
       33 . (canceled) 
   
   
       34 . (canceled) 
   
   
       35 . (canceled) 
   
   
       36 . (canceled)