3com Corporation

Utstarcom, Incorporated

Madhvi Verma

Satish Amara

Janakiraman Senthilnathan

Rohit Verma

A mobile node may roam away from its home network to a foreign network. The mobile node may communicate using the Mobile Internet Protocol, and it may use Internet Protocol security to communicate with its home network. A foreign agent on the foreign network and a home agent on the home network may dynamically link a policy to be used for a Internet Protocol security session between the foreign agent and the home agent. The foreign agent and the home agent may dynamically create a filter to be used for the Internet Protocol Security session.

Method to provide dynamic internet protocol security policy service

A system and method are shown for establishing tunnel connections across multiple networks of differing types. A tunnel media translator device is connected to both a first and second network of different types. The translator receives a tunnel connection set-up request (SCCRQ) from a tunnel initiator on the first network. The translator uses the value from a host name field of the SCCRQ to obtain an address for a tunnel endpoint on the second network, through the use of either pre-configured static tables or a host name resolution service. The translator creates a dynamic table entry that contains the address and tunnel identifier value for the tunnel initiator from the SCCRQ message and the address of the tunnel endpoint obtained from resolving the host name. The translator inserts the address for the tunnel endpoint into a destination address field of the SCCRQ and its own address on the second network into a source address field of the SCCRQ and re-transmits the SCCRQ onto the second network. The translator will receive a tunnel connection set-up reply (SCCRP) from the tunnel endpoint and will use the address of the tunnel endpoint and the destination tunnel identifier for the tunnel initiator from the SCCRP to find the matching dynamic table entry. The translator will insert the address of the tunnel initiator from the dynamic table entry into the destination address field of the SCCRP and its own address on the first network into the source address field of the SCCRP and re-transmit the SCCRP onto the first network. Subsequent tunnel packets received by the translator for the connection are translated using the address and tunnel identifier for the tunnel initiator from the tunnel packet to find the dynamic table entry, inserting the address of the tunnel endpoint from the dynamic table entry into the destination address field of the tunnel packet, and re-transmitting the tunnel packet.

Growing community of inventors

Schaumburg, IL, United States of America

Madhvi Verma