Method of using SIP communicati protocal frame as mobile VPN

Abstract

The method for use in making a mobile node roaming at external network capable of safely communicating with the communication nodes in internal network comprises: setting a first SIP proxy server, an application layer gateway, a second SIP proxy server and an AAA server between the internal network and the external network; when the second SIP proxy server detects the mobile node is closing to the internal network, it modifies the data transmission direction of the communication node information packet, and transmits it to the application layer; the first SIP proxy server authenticates and authorizes the mobile node through the AAA server, and generates a negotiation key that is transmitted to the application gateway; finally the application gateway takes over the transmission between the mobile node and the communication node.

Description

technical field [0001] The present invention relates to a kind of method that uses SIP (Session Initiation Protocol) communication protocol framework as mobile private virtual network (VPN, Virtual Private Network) agent, especially about a kind of solution to Internet Engineering Task Force (Internet Engineering Task Force, IETF) defines a method for problems that mobile VPNs cannot solve. Background technique [0002] A virtual private network (VPN) is a virtual network that can use a wide area network (such as the Internet) to establish a dedicated network channel between a remote user's computer and a server on a local network, providing the same security as in a closed private local area network. network protocol. [0003] A VPN therefore has the following basic requirements in order to ensure security: [0004] 1. User authentication: VPN must be able to verify user identity and strictly control that only registered and authorized users can log in. [0005] 2. Addre...

AI Technical Summary

Problems solved by technology

[0016] In the above-mentioned IETF method, some problems will arise: First, is the security of x-HA21 sufficient? Can it be trusted? Secondly, where is the most appropriate place to place the x-HA21? Improper placement will affect the transfer address (handoff) and end-to-end time delay

In addition, although these three layers of packet headers (internal mobile IP channel information 32, IPSec channel information 33 and external mobile IP (x-MIP) channel information 34) provide the continuity of the information packet when it is delivered, when it is delivered on the external network Confidentiality and transmission capability transmitted from the internal network; however, it shortens the load data of the application layer, so the three-layer packet header also increases the bandwidth consumption and reduces its performance

[0017] In order to solve the problems caused by the mobile VPN defined by the above-mentioned existing IETF, the inventor of this case has devoted himself to research and cooperated with the application of academic theory, and proposed a method of using the SIP communication protocol framework as a mobile VPN agent to avoid The end-to-end long delay of data transmission caused by unnecessary mobile IP channels, taking into account the confidentiality of information packets, can be applied to various untrusted external Information communication between the network and the protected internal network is a reasonable and effective invention to improve the above shortcomings

Images