Methods and Apparatus for Sending Data Packets to and from Mobile Nodes in a Data Network

Abstract

Methods for transmitting packets using a Mobile IP protocol between a mobile node and a first node in a data network after the mobile node has transmitted data packets to the first node via a first router from a first CoA or CCoA address and by a first security association with the first node. One method includes the mobile node, sending to the first node via a second router using a second CoA or CCoA address, data packets that include an identifier of the mobile node that enables the first node to identify the mobile node as the sender of the data packets during an initial time period after transmission of the data packets via the second router has started, and during the initial time period, the mobile node authenticates the data packets it transmits to the first node using the first security association with the first node.

1 . A method comprising:
 a. a mobile node obtaining a first IP address usable to transmit and receive IP packets through a first router;   b. the mobile node communicating with a first node through the first router;   c. the mobile node using a first protocol for establishing a first security association with the first node, the first security association comprising a cryptographic key and information about a cryptographic algorithm;   d. the mobile node registering the first IP address in the first node using a second protocol and the first security association;   e. the mobile node obtaining a second IP address usable to transmit and receive IP packets through a second router; and   f. the mobile node transmitting IP packets authenticated using the first security association and comprising identifying data of the mobile node through the second router.   
     
     
         2 . The method according to  claim 1 , further comprising
 a. the mobile node using a first protocol for establishing a second security association with the first node, the second security association comprising a cryptographic key and information about a cryptographic algorithm;   b. the mobile node registering the second IP address in the first node using the second protocol and the second security association; and   c. the mobile node transmitting IP packets authenticated using the second security association through the second router   
     
     
         3 . The method according to  claim 1 , wherein the first node comprises a Home Agent of the mobile node. 
     
     
         4 . The method according to  claim 1 , wherein the second protocol comprises IPv4 Mobile IP or IPv6 Mobile IP. 
     
     
         5 . The method according to  claim 2 , wherein the first node comprises a Home Agent of the mobile node. 
     
     
         6 . The method according to  claim 2 , wherein the second protocol comprises IPv4 Mobile IP or IPv6 Mobile IP. 
     
     
         7 . The method according to  claim 1 , wherein the first protocol comprises the ISAKMP protocol (Internet Security Association and Key Management Protocol) or a version or derivative thereof 
     
     
         8 . The method according to  claim 1 , wherein the first protocol comprises the IKEv1 protocol (Internet Key Exchange Protocol version 1) or a version or derivative thereof 
     
     
         9 . The method according to  claim 1 , wherein the first protocol comprises the IKEv2 protocol (Internet Key Exchange Protocol version 2) or a version or derivative thereof 
     
     
         10 . The method according to  claim 1 , further comprising the first protocol using an AAA (Authentication, Authorization and Accounting) server to establish the first security association. 
     
     
         11 . The method according to  claim 1 , wherein the identifying data of the mobile node comprises a NAI (Network Access Identifier). 
     
     
         12 . The method according to  claim 1 , wherein the first IP address is an IPv6 address and the identifying data of the mobile node comprises the Interface ID (Interface Identifier) part of the first IP address. 
     
     
         13 . The method according to  claim 12 , wherein the Interface ID (Interface Identifier) part of the first IP address comprises 64 bits of the 128 bits of the first IP address. 
     
     
         14 . The method according to  claim 13 , wherein the Interface ID (Interface Identifier) part of the first IP address are the last 64 bits of the 128 bits of the first IP address.