Telefonaktiebolaget Lm Ericsson (publ)

Christian Vogt

Shinta Sugimoto

Zoltán Turányi

Petri Jokela

Zoltán Richárd TURÁNYI

A first packet is received from a client over an internal network destined for a remote node of an external network. The first packet includes a source IP address having an internal network portion that identifies a location of the client in the internal network and an external network portion that identifies a location of the internal network accessible by the external network. An obfuscation operation is performed on the internal network portion of the source IP address of the first packet to conceal the location of the client in the internal network and the internal network portion of the source IP address of the first packet is rewritten with the obfuscated internal network portion while maintaining the current external network portion of the source IP address. Thereafter, the first packet is transmitted to the remote node over the external network.

Network topology concealment using address permutation

A method of routing traffic in a communications network employing Proxy Mobile IP is disclosed. According to the method, a traffic flow has been transferred from a first interface of a multi-homed mobile node, having a first IP address, to a second interface of the multi-homed mobile node, having a second IP address. The method further involves, at the mobile node and at a mobility anchor function, performing forward and reverse address translation between the first IP address and the second IP address.

Method and apparatus for use in a communications network

A method and apparatus for use in a Proxy Mobile IP communications network. An anchor point function serves at least one mobile host. The anchor point function generates an IP address for use by the mobile host, the address being generated using cryptographic materials owned by the anchor point function. The anchor point function can then perform signalling on behalf of the mobile host, using the IP address generated for the mobile host and at least part of the cryptographic materials used to generate the IP address.

A system and method for generating a set of IP addresses for access multi-homing in an Internet access network. A generating host obtains from the network a set of IPv6 subnet prefixes for a plurality of available Internet Service Providers, ISPs. The generating host generates a single IPv6 interface identifier from the subnet prefixes and cryptographically binds the subnet prefixes with the single IPv6 interface identifier. A remote peer verifies that all of the IP addresses belong together by independently generating the IPv6 interface identifier from the same set of subnet prefixes and comparing the result with the IPv6 interface identifier generated by the generating host.

System and method for access network multi-homing

In response to an ACTIVATE PACKET DATA PROTOCOL (PDP) CONTEXT REQUEST message from a host, including a global reachability request option that requests a global IP address and a global port to be allocated to the host, a serving gateway transmits a CREATE PDP CONTEXT REQUEST message to an Internet gateway device. The CREATE PDP CONTEXT REQUEST message includes the global reachability request option. In response to a CREATE PDP CONTEXT RESPONSE message from the Internet gateway, where the CREATE PDP CONTEXT RESPONSE message includes a global reachability response option specifying therein a global IP address and a global port allocated to the host, the serving gateway transmits an ACTIVATE PDP CONTEXT ACCEPT message to the host, where the ACTIVATE PDP CONTEXT ACCEPT message includes the global reachability response option. As a result, the host does not need to establish a separate connection session to the Internet gateway device to acquire the same.

Method for address translator traversal in 3GPP networks

The present invention the present invention concerns a method for optimizing a route between a mobile node and a correspondent node in mobile Internet protocol networks. The mobile node is served by an anchor point being a node, e.g. a mobile IP home agent. According to the method the anchor point generates a Multi-key Cryptographically Generated Address (MCGA) for the mobile node. The MCGA is generated using at least the public keys of the mobile node and the anchor point. The anchor point assigns and registers the generated MCGA as a home address for the mobile node and sends a binding update message to the correspondent node on behalf of the mobile node. The binding update message includes at least a signature of the MCGA signed by the anchor point. Thereby route optimization can be performed such that data packets can be exchanged between the mobile node and the correspondent node without routing the packets via the anchor point.

Growing community of inventors

San Jose, CA, United States of America

Christian Vogt