Method to provide dynamic Internet Protocol security policy service

Abstract

A mobile node may roam away from its home network to a foreign network. The mobile node may communicate using the Mobile Internet Protocol, and it may use Internet Protocol security to communicate with its home network. A foreign agent on the foreign network and a home agent on the home network may dynamically link a policy to be used for a Internet Protocol security session between the foreign agent and the home agent. The foreign agent and the home agent may dynamically create a filter to be used for the Internet Protocol Security session.

Description

FIELD OF THE INVENTION [0001] The present invention relates generally to network communications. More specifically, it relates to a method for providing dynamic Internet Protocol policy service. BACKGROUND OF THE INVENTION [0002] A mobile node may use the Mobile Internet Protocol (“Mobile IP”) to roam away from its home network, and the mobile node may establish a connection with a foreign network. The mobile node may securely communicate with its home network using a protocol such as Internet Protocol security (“IPsec”). IPsec may be used communicate between a Foreign Agent (“FA”) and a Home Agent (“HA”). The FA can receive packets from the mobile node. The FA can then use IPsec, for example, to encrypt the packets from the mobile node and forward them through the virtual tunnel to the HA. The HA may then receive the packets and decrypt them to retrieve the original message. A similar process may be used to send packets from the HA to the FA, which can ultimately be routed to the m...

AI Technical Summary

Benefits of technology

"The present invention provides a method for dynamic Internet Protocol security policy service, which solves problems associated with traditional Internet Protocol security communications. The method allows for the dynamic liking and creating of filters for identifying packets that receive Internet Protocol security processing between a foreign agent and a home agent. These filters can be removed when the IPsec session ends. Overall, the invention provides a more efficient and effective means for secure communication over the Internet."

Problems solved by technology

This method for defining FA-HA pairs is not easily scalable, and can require a large amount of time to create and store all the possible FA-HA pairs.

Searching through a large filter list can be a time-consuming and computationally intensive process, and it may slow the speed with which the FA or HA can process the packet.

Images