Mobile IPv4 Authentication Using Pre-Stored Security Parameters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional Mobile IPv4 is inefficient for supporting high mobility and security in mobile communication systems, particularly when Access Terminals move between heterogeneous networks, leading to time delays in access and call processing due to security and database management processes.
Innovation Solution
A method and system that improves Mobile IPv4 by generating a Security Parameter Index (SPI) and security key for mutual authentication between an Access Terminal and a Home Agent in a new network, enabling efficient address allocation, authentication, and call setup through a registration request message, database verification, and mobility binding information generation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional Mobile IPv4 is used for mobility support, then mobility functionality is provided to Access Terminals, but time delay occurs in access and call processing due to security and database management processes
Solution Approach 1:
The patent applies preliminary action by pre-generating and storing security parameters (SPI and security keys) in the Home Agent database before mobility events occur. When an Access Terminal moves to a new network, the Home Agent can immediately verify authentication information using pre-stored parameters, eliminating the need for real-time database queries and reducing processing time significantly.
Solution Approach 2:
The patent extracts the security verification process from the general mobility management流程 by implementing a dedicated security parameter verification mechanism. The Home Agent separately manages security parameters in its database, allowing security authentication to be performed independently and efficiently without blocking other mobility management functions.
2Reliability
If security verification and database management processes are performed during mobility, then secure communication is ensured, but processing time increases
Solution Approach 1:
Security parameters including SPI (Security Parameter Index) and security keys are pre-generated and stored in the Home Agent database before the Access Terminal actually moves. This preliminary preparation allows the Home Agent to perform rapid authentication verification using pre-stored parameters, ensuring security while minimizing processing time during actual mobility events.
Solution Approach 2:
The patent creates and stores copies of security parameters (SPI and security keys) in the Home Agent database in advance. These copied parameters are then used for rapid authentication verification during mobility events, eliminating the need for real-time key generation or complex database operations and thus reducing processing time while maintaining security.
3Adaptability or versatility
If Mobile IPv4 is used in heterogeneous networks, then mobility support is provided across different access technologies, but efficiency decreases due to protocol limitations
Solution Approach 1:
The patent implements a universal security parameter management mechanism that works across heterogeneous networks (UMB, WiMAX, etc.). The Home Agent database stores security parameters that can be used for authentication in multiple different network types, allowing a single unified approach to mobility management that maintains both adaptability to different networks and operational efficiency.
Solution Approach 2:
The patent changes the approach from dynamic security parameter generation to using pre-configured security parameters (SPI and keys). This parameter change enables faster authentication processes while maintaining compatibility across different network types, thus improving productivity without sacrificing the adaptability needed for heterogeneous network support.
Data Source
AI summary
A method is provided for managing mobility of an Access Terminal (AT) in a mobile communication system using a Mobile Internet Protocol (MIP). The method includes generating, by an AT that has entered a new network, a Security Parameter Index (SPI) and a security key for mutual authentication with a Home Agent (HA) of the new network, sending, by the AT, a registration request message including authentication information including the SPI, the authentication information being generated using the security key, upon receipt of the registration request message, searching, by the HA, a database for the SPI included in the authentication information, verifying the authentication information according to the search result, upon successful verification of the authentication information, generating, by the HA, mobility binding information of the AT, and sending, by the HA, a registration response message including the HA's IP address.