Dynamic proxy distribution method and system for mobile VPN

Abstract

The invention relates to arrangement method of dynamic proxy of mobile VPN and its system, which can build the virtual private network between at least one external network and one internal network and can reach the safe roaming of at least one mobile node in said external network. The invention uses the external local proxy which can be dynamically arranged near the mobile node in said roaming external network as the register proxy of said mobile node, to make the mobile node only need to register at said external local proxy when it is roaming in the same external network, without the registering at the internal local proxy (i-HA) of said internal network-the Internet Engineering Task Force. So the handoff delay and the end to end delay between proxies when in roam can be reduced most while the invention can fully combine the VPN of internet communication security protocol safe control.

Description

technical field [0001] The present invention is a dynamic agent (Home Agent) assignment (Assignment) method and system of a mobile virtual private network (Mobile Virtual Private Network), in particular about a VPN on the Internet communication security protocol framework, which dynamically assigns external agents A device provides a method and system for mobile node registration. Background technique [0002] A virtual private network (Virtual Private Network, referred to as VPN) is a wide area network (such as the Internet) that can use a wide area network (such as the Internet) to establish a dedicated network channel between a remote user's computer and a server on a local network for data transmission, and provide a convenient As safe as inside a closed private LAN. [0003] A VPN therefore has the following basic requirements in order to ensure security: [0004] 1. User authentication: VPN must be able to verify user identity and strictly control it. Only registered...

AI Technical Summary

Problems solved by technology

[0019] But in the method of known Internet Engineering Task Force, can produce two problems, the first is where should the external home agent 21 be placed most appropriate? The second is can this external local proxy be trusted to be safe?

[0020] Since in the method of the known Internet Engineering Task Force, a fixed (Static) external local agent 21 is built in the external network 20, if there are several subnets (Subnet) in the external network 20, how to arrange this The placement location of the external home agent 21 will affect the handoff (Handoff) time delay between the foreign agent (FA) and the external home agent 21 between the roaming subnets, and the end-to-end connection between the roaming subnets. End-to-End time delay problem

Images