Bearer control of encrypted data flows in packet data communications

Abstract

In a communication session in which data flows with encrypted data packets pass through a monitoring intermediary for data traffic control. The encrypted data packets include SPIs (Secured Parameter Indexes) which are used to identify SAs (Security Associations) for data decryption. During the initial signaling process for the communication session, the nodes seeking the communication session include the SPIs in the signaling messages and send the signaling messages through the monitoring intermediary which in turn matches the SPIs of the signaling messages with the corresponding SPIs extracted from the data packets. In enforcing data traffic control, the monitoring intermediary allows data flows to pass through if comparison matches in the SPIs are found. Otherwise, the data flows are rejected.

Description

[0001] Priority claims under 35 U.S.C § 119 [0002] This application for patent claims priority to U.S. Provisional Application No. 60 / 588,664, filed July 15, 2004, entitled "Service Based Bearer Control for Mobile IP Co-located Care of Address," which is assigned to its recipient and is expressly incorporated herein by reference. technical field [0003] The present invention relates generally to packet data communications, and more particularly to monitoring and controlling the flow of packet data during packet data communications. Background technique [0004] The global interconnection of networks allows quick and easy access to information regardless of geographical distance. FIG. 1 shows a simplified schematic diagram of the global connectivity of the network generally referred to as the Internet, generally referred to by the reference numeral 20 . The Internet 20 is essentially many networks connected together with different hierarchical levels. The Internet 20 op...

AI Technical Summary

Problems solved by technology

Thus, monitoring of encrypted data packets presents particular challenges

Images