WO2014098562A2 - A system and a method for facilitating mobile internet protocol communication - Google Patents

A system and a method for facilitating mobile internet protocol communication Download PDF

Info

Publication number
WO2014098562A2
WO2014098562A2 PCT/MY2013/000259 MY2013000259W WO2014098562A2 WO 2014098562 A2 WO2014098562 A2 WO 2014098562A2 MY 2013000259 W MY2013000259 W MY 2013000259W WO 2014098562 A2 WO2014098562 A2 WO 2014098562A2
Authority
WO
WIPO (PCT)
Prior art keywords
pass
terminal
address
session
component
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/MY2013/000259
Other languages
French (fr)
Other versions
WO2014098562A3 (en
Inventor
Mohd Ariff Abdullah
Shariq Haseeb
Muhammad Faheem Mohd Ezani
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Mimos Bhd
Original Assignee
Mimos Bhd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Mimos Bhd filed Critical Mimos Bhd
Publication of WO2014098562A2 publication Critical patent/WO2014098562A2/en
Publication of WO2014098562A3 publication Critical patent/WO2014098562A3/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/50—Address allocation
    • H04L61/5076—Update or notification mechanisms, e.g. DynDNS
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0442—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W80/00—Wireless network protocols or protocol adaptations to wireless operation
    • H04W80/04—Network layer protocols, e.g. mobile IP [Internet Protocol]

Definitions

  • the present invention relates to a system and a method for facilitating mobile Internet Protocol (IP) communication.
  • IP Internet Protocol
  • the reason behind encapsulating the data in packets is to facilitate the data to be interpretable by an end recipient, and at the same time to ensure that the data is properly addressed to the recipient.
  • those data is just like in real life in which messages are written on a letter to be sent out as mails to the correct recipient.
  • every network terminal for instance a source terminal, a destination terminal and even a transit terminal contain their own IP address to signify their location with respect to the network area they are in.
  • these data packets contain a body where the data is contained and a number of headers that serve to indicate the address of the recipient such that the packets can be sent to the right recipient.
  • Another important factor to ponder is the security of these packets. As the packets are required to travel through unsecured channels for example through what has been considered as vulnerable IP network for example through the Internet or through the mobile IP communication network.
  • the data being encapsulated in the packets achieve three main objectives i.e. the capacity to carry a load i.e. the data through an IP network, to bridge the inconsistency between transmission protocol between or among the diverse networks, and to safeguard the privacy of those data that are usually sensitive and vulnerable to being breached.
  • the existing technology i.e. the existing IP tunneling is, prima facie, able to address such problems and achieve such objectives.
  • the utilization of the mobile IP tunneling is common.
  • routing protocols between the networks systems i.e. between the source network and the mobile destination network.
  • the mobile IP tunneling has been introduced.
  • the mobile IP tunneling generally revolves around forwarding the packets first to a redirecting server (usually called a home agent) and encapsulating the packets with headers (to incorporate the IP address for the intended recipient) before forwarding those packets to the rightful IP recipients.
  • a redirecting server usually called a home agent
  • the mobile IP tunneling is a protocol in a mobile IP environment that involves using encapsulating payload protocol through a delivery protocol.
  • the payload protocol has been defined as the IP communication between a mobile destination terminal and a source terminal whereas the delivery protocol is the IP communication between the mobile destination terminal and a transit terminal.
  • these packets are also required to be encrypted. Besides the packets' encryption, their headers are generally encrypted as well. The headers are encrypted such that no other outsiders or non-intended reader can detect the initial source sender's IP address as well as the intended recipient's address. Such an encryption of the headers entails another level of encapsulation of the packets i.e. the previously encapsulated packets have to be encapsulated again in yet another layer of encapsulation as illustrated in FIG. 1 .
  • the tunneled packet only traverses and lasts for only a certain displacement as ultimately, the packets would be de-encapsulated such that the packet would travel to its intended location on itself. At the outset, this may seem a bit inconvenient because it involves encapsulation and de-encapsulation process which do seem quite undesirable. However, upon closer inspection and multiple usages in our daily life, this mobile IP tunneling could bring other sorts of shortcomings. With reference to FIG. 1 , during transmission from a transit terminal to a mobile destination terminal, additional data capacity for example bits are required in the payload (the body containing the data) in order to accommodate the increasing tunneled header with respect to the pre-tunneled header. As a consequence, the tunneled payload decreases as compared to the pre- tunneled payload.
  • the load (space) for the headers seems to have expanded in light of that the stacked (nested tunnels) nature of the packets and thus, there no longer left enough room for the payload data itself. As such, there are less data per an IP packet. Moreover, this results to lower throughput in terms of payload.
  • the situation would be more dire if the size of the tunneled packets carrying many layers of stacked headers (as seen in FIG. 1 ) surpass the size limit for example the Maximum Transmission Unit (MTU).
  • MTU Maximum Transmission Unit
  • the packet could be fragmentized resulting to overhead and latency issues.
  • the transit terminal which serves to receive and redirect the packets to the mobile destination terminal is deemed quite cumbersome. Other than that, it does seem that the transit of packeted data through a transit terminal "lengthen" the distance between the mobile destination terminal and the source terminal.
  • a system (100) and a method for facilitating mobile Internet Protocol (IP) communication are provided.
  • the system comprises an IP address updating component residing in a mobile destination terminal, an IP communication connecting component residing in a transit terminal, an access requesting component residing in a source terminal, and a session verifying component residing in an intended mobile destination terminal.
  • the IP communication connecting component comprises a destination storage unit and a source storage unit.
  • the session verifying component comprises a pass unsecuring number.
  • the IP address updating component identifies a current IP address of the mobile destination terminal, and forwards an IP address update to the IP communication connecting component.
  • the IP communication connecting component receives and stores the current IP address of the mobile destination terminal on the destination storage unit.
  • the destination storage unit is adapted for storing data related to the mobile destination terminal.
  • the data comprises the IP addresses of the mobile destination terminal and a pass securing member of the mobile destination terminal.
  • the access requesting component forwards a request to establish an IP connection with an intended mobile destination terminal.
  • the IP communication connecting component receives and stores the request in the source storage unit, generates a session pass upon receipt of the request, and forwards the session pass to the session verifying component of the intended mobile destination terminal, and retrieves the IP address and the pass securing member from the destination storage unit, and forwards the IP address, the pass securing member, and the session pass to the access requesting component of the source terminal.
  • the access requesting component secures the session pass with the pass securing member, and forwards the secured session pass to the IP address of the intended mobile destination terminal.
  • the session verifying component unsecures the secured session pass with the pass unsecuring member of the session verifying component, compares the unsecured session pass with the session pass received from the IP communication connecting component, determines whether both of the session passes match with each other, and establishes the IP connection with the source terminal if both of the session passes match.
  • a transit terminal wherein the transit terminal comprises an IP communication connecting component, the IP communication connecting component generates a new session pass on receipt of a access request received from a source terminal to establish an IP connection with an intended mobile destination terminal, the IP communication connecting component further forwards the session pass to the source terminal and the intended mobile destination terminal associated with the access request.
  • the method comprising the steps of identifying a current IP address of a mobile destination terminal and forwarding an IP address update to an IP communication connecting component of the system using an IP address updating component of the system; receiving and storing the current IP address of the mobile destination terminal on a destination storage unit using the IP communication connecting component, the destination storage unit being for storing data related to the mobile destination terminal; forwarding a request to establish an IP connection with an intended mobile destination terminal using an access requesting component; receiving and storing the request in the source storage unit using the IP communication connecting component; generating a session pass upon receipt of the request using the IP communication connecting component; forwarding the session pass to a session verifying component of the intended mobile destination terminal using the IP communication connecting component; retrieving the IP address and a pass securing member from the destination storage unit, and forwarding the IP address, the pass securing member, and the session pass to the access requesting component of the source terminal using the IP communication connecting component; securing the session pass with the pass securing member, and forwarding the secured
  • the IP address updating component resides in the mobile destination terminal whereas the IP communication connecting component resides in a transit terminal.
  • the IP communication connecting component comprises a destination storage unit and a source storage unit.
  • the data comprises the IP addresses of the mobile destination terminal and the pass securing member in relation to the mobile destination terminal; It is an object of the present invention to provide a system and a method for facilitating mobile IP communication without the mobile IP tunneling.
  • the delivery of more data in one IP packet is expected that also signifies a higher throughput of data for example in comparison to the mobile IP tunneling.
  • MTU Maximum Transmission unit
  • FIG. 1 shows the Internet Protocol (IP) flow of the data packet between networks from a source terminal to a mobile destination terminal using the conventional mobile IP tunneling.
  • IP Internet Protocol
  • FIG. 2 shows a diagram depicting the linkage of all the components involved in the system and the method of the present invention.
  • FIG. 3 shows a flowchart depicting the top level flow involved in the method of the present invention.
  • FIG. 4 shows a flowchart depicting the IP address update in an IP address updating component of a mobile destination terminal of the present invention.
  • FIG. 5 shows a flowchart depicting the IP address update in an IP communication connecting component of a transit terminal of the present invention.
  • FIG. 6 shows a flowchart depicting the session assignment in the IP communication connecting component of the transit terminal of the present invention.
  • FIG. 7 shows a flowchart depicting the session assignment in the access requesting component of a source terminal of the present invention.
  • FIG. 8 shows a flowchart depicting another example of a session assignment in the access requesting component of a source terminal of the present invention.
  • FIG. 9 shows a flowchart depicting the session assignment in a session verifying component of the mobile destination terminal of the present invention.
  • FIG. 10 shows how the IP address updating component of the mobile destination terminal updates the IP communication connecting component of the transit terminal.
  • FIG. 1 1 shows how the access requesting component of the source terminal requests the IP communication connecting component for an IP session.
  • FIG. 12 shows how the IP communication connecting component forwards the session pass to the access requesting component, and the session pass, the IP address, and the pass securing member to the session verifying component.
  • FIG. 13 shows how the access requesting component forwards the session pass secured using the pass securing member to the session verifying component.
  • FIG. 14 shows how the session verifying component unsecures the received secured session pass to verify the source terminal and once the IP connection between the source terminal and the mobile destination terminal is established, the mobile destination terminal starts to receive data packets from the source terminal.
  • FIG. 15 shows how the IP address updating component updates the IP communication connecting component when the mobile destination terminal changes its position therefore changing its IP address (receiving from other most adjacent local network), whilst the IP communication connecting component updates the destination storage unit.
  • FIG. 16 shows that when the source terminal reaches a timeout, the access requesting component forwards a request to establish an IP connection using the existing session pass.
  • FIG. 17 shows how the IP communication connecting component assigns a new session pass.
  • the present invention relates to a system (100) and a method for facilitating mobile IP communication.
  • the system (100) and the method shall be described according to the preferred embodiments of the present invention and by referring to the accompanying description and drawings.
  • limiting the description to the preferred embodiments of the invention and to the drawings is merely to facilitate discussion of the present invention and it is envisioned that those skilled in the art may devise various modifications without departing from the scope of the appended claim.
  • the system (100) for facilitating mobile Internet Protocol (IP) communication comprises an IP address updating component (310), an IP communication connecting component (320), an access requesting component (330), and a session verifying component (340).
  • IP address updating component (310) and the session verifying terminal (340) reside in a mobile destination terminal (30).
  • the IP communication connecting component (320) resides in a transit terminal (20).
  • the access requesting component (330) resides in a source terminal (10).
  • the IP communication connecting component (320) comprises a destination storage unit (510) and a source storage unit (520).
  • the session verifying component (340) comprises a pass unsecuring member (222).
  • the IP communication connecting component (320) tracks the IP address (210) of the mobile destination terminal (30) through the destination storage unit (510), and handles the IP connection between the source terminal (10) and the mobile destination terminal (30) through the source storage unit (520).
  • the IP address updating component (310) identifies the current IP address (210) of the mobile destination terminal (30).
  • the IP address updating component (310) achieves this by detecting whether there is any change in the network attached to the mobile destination component (30). If this is the case, this indicates that there is a change in the current IP address (210) of the mobile destination terminal (30) and the IP address updating component (310) only forwards an IP address update (410) to the IP communication connecting component (320).
  • the IP address updating component (310) is adapted to update the IP communication connecting component (320) regarding the current IP address (210) of the mobile destination terminal (30).
  • An example regarding the change of network attached to the mobile destination network (30) is also illustrated in FIG. 15-17.
  • the IP communication connecting component (320) receives and stores the current IP address (210) of the mobile destination terminal (30) on the destination storage unit (510).
  • the destination storage unit (510) is adapted to store data related to the mobile destination terminal (30).
  • the data comprise the IP addresses (210) of the mobile destination terminal (30) and a pass securing member (220) in relation to the mobile destination terminal (30).
  • the IP communication connecting component (320) upon receiving the current IP address (210) of the mobile destination terminal (30) from the IP update address updating component (310), checks whether the current IP address (210) has already been stored in the destination storage unit (510); if the current IP address (210) has been stored in the destination storage unit (510); the destination storage unit (510) is updated; and if the current IP address (210) has not been stored in the destination storage unit (510); and the current IP address (210) is stored as a new IP address (210) in the destination storage unit (510).
  • the access requesting component (330) forwards a request to establish an IP connection with an intended mobile destination terminal (32).
  • the IP communication connecting component (320) is adapted further for, not in any particular order, receiving and storing the request in the source storage unit (520), generating and assign a session pass (230) upon receipt of the request; forwarding the session pass (230) to the session verifying component (340) of the intended mobile destination terminal (32), and retrieving the IP address (210) and the pass securing member (220) from the destination storage unit (510), and forwarding the IP address (210), the pass securing member (220), and the session pass (230) to the access requesting component (330).
  • the above mentioned order is allowed to follow that shown in FIG. 6.
  • the access requesting component (330) further secures the session pass (230) with the pass securing member (220), and forwards the secured session pass (232) to the IP address (210) of the intended mobile destination terminal (32).
  • the access requesting component (330) forwards a new request to establish an IP connection with the intended mobile destination terminal (32) using the previously received session pass (230), the IP communication connecting component (320) receives and stores the request in the source storage unit (520), generates a new session pass (230) upon receipt of the request, and forwards the new session pass (230) to the intended mobile destination terminal (32) and the source terminal (10).
  • FIG. 8 shows slightly a difference route with regards the error before receiving a reply from the IP communication connecting component (320).
  • FIG. 9 shows the route of steps involved in the session verifying component (340).
  • the session verifying component (340) unsecures the secured session pass (232) with the pass unsecuring member (222), compares the unsecured session pass (232) with the session pass (230) received from the IP communication connecting component (320), determines whether both of the session passes (230) match with each other, and establishes the IP connection with the source terminal (10) if both of the session passes (230) match as shown in FIG. 9 & 14.
  • the source terminal (10) is a corresponding node
  • the transit terminal (20) is a redirect server
  • the mobile destination terminal (30) and the intended mobile destination terminal (32) each are a mobile node.
  • the destination storage unit (510) comprises a binding table (510).
  • the source storage unit (520) comprises a correspondent table (520).
  • the pass securing member (220) is a public key (220) whereas the pass unsecuring member (222) is a private key.
  • the binding table (510) is adapted for keeping track of the mobile node.
  • the correspondent table (520) is adapted for keeping track of the communication sessions between the mobile nodes and the corresponding nodes.
  • the public key (220) is used in a public key distribution for an authentication purpose, whereas the session key (230) is used in a session key (230) distribution for a mobility purpose.
  • the method for facilitating mobile Internet Protocol (IP) communication is implemented using the system (100).
  • the method comprises the steps of identifying a current IP address of a mobile destination terminal and forwarding an IP address update to an IP communication connecting component of the system using an IP address updating component of the system; receiving and storing the current IP address of the mobile destination terminal on a destination storage unit using the IP communication connecting component, the destination storage unit being for storing data related to the mobile destination terminal; forwarding a request to establish an IP connection with an intended mobile destination terminal using an access requesting component; receiving and storing the request in the source storage unit using the IP communication connecting component; generating a session pass upon receipt of the request using the IP communication connecting component; forwarding the session pass to a session verifying component of the intended mobile destination terminal using the IP communication connecting component; retrieving the IP address and a pass securing member from the destination storage unit, and forwarding the IP address, the pass securing member, and the session pass to the access requesting component of the source terminal
  • the IP address updating component (310) and the session verifying terminal (340) reside in a mobile destination terminal (30).
  • the IP communication connecting component (320) resides in a transit terminal (20).
  • the access requesting component (330) resides in a source terminal (10).
  • the IP communication connecting component (320) comprises the destination storage unit (510) and the source storage unit (520).
  • the session verifying component (340) comprises the pass unsecuring member (222).
  • the system (100) comprises an IP address updating component (310), an IP communication connecting component (320), an access requesting component (330), and a session verifying component (340).
  • the IP communication connecting component (320) tracks the IP address (210) of the mobile destination terminal (30) through the destination storage unit (510), and handles the IP connection between the source terminal (10) and the mobile destination terminal (30) through the source storage unit (520).
  • the step of forwarding an IP address update (410) to an IP communication connecting component (320) further comprises the step of forwarding the IP address update (410) to the IP communication connecting component (320) when there is a change in the current IP address (210) of the mobile destination terminal (30).
  • An example regarding the change of network attached to the mobile destination terminal (30) is illustrated in FIG. 15-17.
  • the step of receiving and storing the current IP address (210) of the mobile destination terminal (30) on the destination storage unit (510) further comprises the steps of checking whether the current IP address (210) has been stored in the destination storage unit (510), and updating the destination storage unit (510); wherein if the current IP address (210) has been stored in the destination storage unit (510), the destination storage unit (510) is updated; and if the current IP address (210) has not been stored in the destination storage unit (510), the current IP address (210) is stored as a new IP address (210) in the destination storage unit (510).
  • the method further comprises the steps of:
  • the access requesting component (330) has not received the IP address (210), the pass securing member (220), and the session pass (230) from the IP communication connecting component (320), and if the timeout has not been reached, waiting for the receipt of the IP address (210), the pass securing member (220), and the session pass (230) from the IP communication connecting component (320) using the access requesting component (330).
  • the source terminal (10) is a corresponding node
  • the transit terminal (20) is a redirect server
  • the mobile destination terminal (30) and the intended mobile destination terminal (32) each are a mobile node.
  • the destination storage unit (510) comprises a binding table (510)
  • the source storage unit (520) comprises a correspondent table (520).
  • the pass securing member (220) is a public key (220) whereas the pass unsecuring member (222) is a private key.
  • the binding table (510) is adapted to keep track of the mobile node.
  • the correspondent table (520) is adapted to keep track of the communication sessions between the mobile nodes and the corresponding nodes.
  • the public key (220) is used in a public key distribution for an authentication purpose, whereas the session key (230) is used in a session key (230) distribution for a mobility purpose.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The present invention relates to a system (100) and a method for facilitating mobile Internet Protocol (IP) communication. The system (100) comprises an IP address updating component (310) residing in a mobile destination terminal (30), an IP communication connecting component (320) residing in a transit terminal (20), an access requesting component (330) residing in a source terminal (10), and a session verifying component (340) residing in the mobile destination terminal. The system (100) and the method revolves around keeping track of the mobile destination terminal (30), keeping track of the communication session between the mobile destination terminal (30) and the source terminal (10). The system (100) and the method revolve around the authentication and mobility purposes. FIG. 2

Description

A SYSTEM AND A METHOD FOR FACILITATING MOBILE INTERNET PROTOCOL
COMMUNICATION
FIELD OF THE INVENTION
The present invention relates to a system and a method for facilitating mobile Internet Protocol (IP) communication.
BACKGROUND ART
It is true that it is impossible for data to travel as it is in its original format. When the data are required to travel through a connected network for example through the Internet or through a more cumbersome platform i.e. the mobile IP communication network, the data is required to travel in packets. In other words, it is required to be encapsulated in packets first.
Further to the above, the reason behind encapsulating the data in packets is to facilitate the data to be interpretable by an end recipient, and at the same time to ensure that the data is properly addressed to the recipient. As a comparison, those data is just like in real life in which messages are written on a letter to be sent out as mails to the correct recipient. In this connection, every network terminal, for instance a source terminal, a destination terminal and even a transit terminal contain their own IP address to signify their location with respect to the network area they are in. As such, it is common to observe that these data packets contain a body where the data is contained and a number of headers that serve to indicate the address of the recipient such that the packets can be sent to the right recipient.
Another important factor to ponder is the security of these packets. As the packets are required to travel through unsecured channels for example through what has been considered as vulnerable IP network for example through the Internet or through the mobile IP communication network.
As discussed above, the data being encapsulated in the packets achieve three main objectives i.e. the capacity to carry a load i.e. the data through an IP network, to bridge the inconsistency between transmission protocol between or among the diverse networks, and to safeguard the privacy of those data that are usually sensitive and vulnerable to being breached.
In view of the above, it seems that the existing technology i.e. the existing IP tunneling is, prima facie, able to address such problems and achieve such objectives. Particularly to deliver the packets from a source terminal i.e. a corresponding node to a mobile destination terminal i.e. a mobile node, the utilization of the mobile IP tunneling is common. In a mobile network environment, there exist differences in terms of routing protocols between the networks systems i.e. between the source network and the mobile destination network. As such, it is imperative to bridge the differences in terms of the routing protocols between the network systems. Thus, the mobile IP tunneling has been introduced.
The mobile IP tunneling generally revolves around forwarding the packets first to a redirecting server (usually called a home agent) and encapsulating the packets with headers (to incorporate the IP address for the intended recipient) before forwarding those packets to the rightful IP recipients. In other words, the mobile IP tunneling is a protocol in a mobile IP environment that involves using encapsulating payload protocol through a delivery protocol. The payload protocol has been defined as the IP communication between a mobile destination terminal and a source terminal whereas the delivery protocol is the IP communication between the mobile destination terminal and a transit terminal.
As mentioned above, due to the security concerns, these packets are also required to be encrypted. Besides the packets' encryption, their headers are generally encrypted as well. The headers are encrypted such that no other outsiders or non-intended reader can detect the initial source sender's IP address as well as the intended recipient's address. Such an encryption of the headers entails another level of encapsulation of the packets i.e. the previously encapsulated packets have to be encapsulated again in yet another layer of encapsulation as illustrated in FIG. 1 .
The tunneled packet only traverses and lasts for only a certain displacement as ultimately, the packets would be de-encapsulated such that the packet would travel to its intended location on itself. At the outset, this may seem a bit inconvenient because it involves encapsulation and de-encapsulation process which do seem quite undesirable. However, upon closer inspection and multiple usages in our daily life, this mobile IP tunneling could bring other sorts of shortcomings. With reference to FIG. 1 , during transmission from a transit terminal to a mobile destination terminal, additional data capacity for example bits are required in the payload (the body containing the data) in order to accommodate the increasing tunneled header with respect to the pre-tunneled header. As a consequence, the tunneled payload decreases as compared to the pre- tunneled payload.
Looking closer to the FIG. 1 , the load (space) for the headers seems to have expanded in light of that the stacked (nested tunnels) nature of the packets and thus, there no longer left enough room for the payload data itself. As such, there are less data per an IP packet. Moreover, this results to lower throughput in terms of payload.
The situation would be more dire if the size of the tunneled packets carrying many layers of stacked headers (as seen in FIG. 1 ) surpass the size limit for example the Maximum Transmission Unit (MTU). The packet could be fragmentized resulting to overhead and latency issues.
Among other things, the transit terminal which serves to receive and redirect the packets to the mobile destination terminal is deemed quite cumbersome. Other than that, it does seem that the transit of packeted data through a transit terminal "lengthen" the distance between the mobile destination terminal and the source terminal.
In light of the above, a system and a method for facilitating mobile IP communication that overcome above shortcomings is very much in need.
SUMMARY OF THE INVENTION
According to the present invention, there is provided a system (100) and a method for facilitating mobile Internet Protocol (IP) communication.
According to one aspect of the present invention, the system comprises an IP address updating component residing in a mobile destination terminal, an IP communication connecting component residing in a transit terminal, an access requesting component residing in a source terminal, and a session verifying component residing in an intended mobile destination terminal. The IP communication connecting component comprises a destination storage unit and a source storage unit. The session verifying component comprises a pass unsecuring number. The IP address updating component identifies a current IP address of the mobile destination terminal, and forwards an IP address update to the IP communication connecting component. The IP communication connecting component receives and stores the current IP address of the mobile destination terminal on the destination storage unit. The destination storage unit is adapted for storing data related to the mobile destination terminal. The data comprises the IP addresses of the mobile destination terminal and a pass securing member of the mobile destination terminal.
The access requesting component forwards a request to establish an IP connection with an intended mobile destination terminal. The IP communication connecting component receives and stores the request in the source storage unit, generates a session pass upon receipt of the request, and forwards the session pass to the session verifying component of the intended mobile destination terminal, and retrieves the IP address and the pass securing member from the destination storage unit, and forwards the IP address, the pass securing member, and the session pass to the access requesting component of the source terminal.
The access requesting component secures the session pass with the pass securing member, and forwards the secured session pass to the IP address of the intended mobile destination terminal. The session verifying component unsecures the secured session pass with the pass unsecuring member of the session verifying component, compares the unsecured session pass with the session pass received from the IP communication connecting component, determines whether both of the session passes match with each other, and establishes the IP connection with the source terminal if both of the session passes match.
In accordance with another aspect of the present invention, there is provided a transit terminal, wherein the transit terminal comprises an IP communication connecting component, the IP communication connecting component generates a new session pass on receipt of a access request received from a source terminal to establish an IP connection with an intended mobile destination terminal, the IP communication connecting component further forwards the session pass to the source terminal and the intended mobile destination terminal associated with the access request. According to yet another aspect of the present invention, the method comprising the steps of identifying a current IP address of a mobile destination terminal and forwarding an IP address update to an IP communication connecting component of the system using an IP address updating component of the system; receiving and storing the current IP address of the mobile destination terminal on a destination storage unit using the IP communication connecting component, the destination storage unit being for storing data related to the mobile destination terminal; forwarding a request to establish an IP connection with an intended mobile destination terminal using an access requesting component; receiving and storing the request in the source storage unit using the IP communication connecting component; generating a session pass upon receipt of the request using the IP communication connecting component; forwarding the session pass to a session verifying component of the intended mobile destination terminal using the IP communication connecting component; retrieving the IP address and a pass securing member from the destination storage unit, and forwarding the IP address, the pass securing member, and the session pass to the access requesting component of the source terminal using the IP communication connecting component; securing the session pass with the pass securing member, and forwarding the secured session pass to the IP address of the intended mobile destination terminal using the access requesting component; and unsecuring the secured session pass with a pass unsecuring member, comparing the unsecured session pass with the session pass received from the IP communication connecting component, determining whether both of the session passes match with each other, and establishing the IP connection with the source terminal if both of the session passes match using a session verifying component. The session verifying component resides in the mobile destination terminal; and the session verifying component having a pass unsecuring member.
The IP address updating component resides in the mobile destination terminal whereas the IP communication connecting component resides in a transit terminal.
The IP communication connecting component comprises a destination storage unit and a source storage unit. The data comprises the IP addresses of the mobile destination terminal and the pass securing member in relation to the mobile destination terminal; It is an object of the present invention to provide a system and a method for facilitating mobile IP communication without the mobile IP tunneling.
It is also an object of the present invention to provide a system and a method for facilitating mobile IP communication that reduces the data capacity (i.e. the quantity space of the data) required in a header of a carrier packet for carrying the payload from the source terminal to the mobile destination terminal, therefore increasing the data capacity of a body of the carrier packet itself for example with respect to mobile IP tunneling. In short, the delivery of more data in one IP packet is expected that also signifies a higher throughput of data for example in comparison to the mobile IP tunneling.
It is also an object of the present invention to provide a system and a method for facilitating mobile IP communication that can do away without encapsulation of data packets like in the IP tunneling in order to provide a smoother delivery of data. No de- encapsulating of the data packets is required too.
It is further an object of the present invention to provide a system and a method for facilitating IP communication that can do away without through a transit terminal i.e. an on-behalf receiving server like a redirecting server.
It is also an object of the present invention to provide a system and a method for facilitating IP communication that shorten the path for the traveling IP packets between a source terminal and a mobile destination terminal.
It is also an object of the present invention to provide a system and a method for facilitating mobile IP communication that prevent the size of the carrier packet from exceeding the possible size limit of the carrier packet itself, for example exceeding the Maximum Transmission unit (MTU) such that the packet would not be fragmentized and that problems like overhead and latency can be avoided.
It is further object of the present invention to provide a system and a method for facilitating mobile IP communication that track the mobility of the mobile destination terminal for example in the absence of the mobile IP tunneling.
It is further object of the present invention to provide a system and a method for facilitating mobile IP communication that track the communication sessions between the mobile destination terminal and the source terminal for example in the absence of the mobile IP tunneling.
It is also an object of the present invention to provide a system and a method for facilitating mobile IP communication that can recognize the identity of a mobile destination terminal that move between or among networks for example in the absence of the mobile IP tunneling. It is also an object of the present invention to provide a system and a method for facilitating mobile IP communication that assist a mobile destination terminal to verify a source terminal in a mobile IP communication for example in the absence of the mobile IP tunneling.
It is also final object of the present invention to provide a system and a method for facilitating mobile IP communication in which a session pass can be provided from the transit terminal to the source terminal and the mobile destination terminal such that the session can be secured by the access requesting component of the source terminal using a pass securing member and can be unsecured by the session verifying component of the mobile destination terminal using a pass unsecuring member such that the security of the mobile IP communication can be maintained in a mobile environment for example in the absence of the mobile IP tunneling. The present invention consists of certain novel features and a combination of parts hereinafter fully described and illustrated in the accompanying drawings and particularly pointed out in the appended claims; it being understood that various changes in the details may be without departing from the scope of the invention or sacrificing any of the advantages of the present invention.
BRIEF DESCRIPTION OF THE DRAWINGS
For the purpose of facilitating an understanding of the invention, there is illustrated in the accompanying drawings the preferred embodiments from an inspection of which when considered in connection with the following description, the invention, its construction and operation and many of its advantages would be readily understood and appreciated.
FIG. 1 shows the Internet Protocol (IP) flow of the data packet between networks from a source terminal to a mobile destination terminal using the conventional mobile IP tunneling.
FIG. 2 shows a diagram depicting the linkage of all the components involved in the system and the method of the present invention. FIG. 3 shows a flowchart depicting the top level flow involved in the method of the present invention. FIG. 4 shows a flowchart depicting the IP address update in an IP address updating component of a mobile destination terminal of the present invention.
FIG. 5 shows a flowchart depicting the IP address update in an IP communication connecting component of a transit terminal of the present invention.
FIG. 6 shows a flowchart depicting the session assignment in the IP communication connecting component of the transit terminal of the present invention. FIG. 7 shows a flowchart depicting the session assignment in the access requesting component of a source terminal of the present invention.
FIG. 8 shows a flowchart depicting another example of a session assignment in the access requesting component of a source terminal of the present invention.
FIG. 9 shows a flowchart depicting the session assignment in a session verifying component of the mobile destination terminal of the present invention.
FIG. 10 shows how the IP address updating component of the mobile destination terminal updates the IP communication connecting component of the transit terminal.
FIG. 1 1 shows how the access requesting component of the source terminal requests the IP communication connecting component for an IP session. FIG. 12 shows how the IP communication connecting component forwards the session pass to the access requesting component, and the session pass, the IP address, and the pass securing member to the session verifying component.
FIG. 13 shows how the access requesting component forwards the session pass secured using the pass securing member to the session verifying component.
FIG. 14 shows how the session verifying component unsecures the received secured session pass to verify the source terminal and once the IP connection between the source terminal and the mobile destination terminal is established, the mobile destination terminal starts to receive data packets from the source terminal. FIG. 15 shows how the IP address updating component updates the IP communication connecting component when the mobile destination terminal changes its position therefore changing its IP address (receiving from other most adjacent local network), whilst the IP communication connecting component updates the destination storage unit.
FIG. 16 shows that when the source terminal reaches a timeout, the access requesting component forwards a request to establish an IP connection using the existing session pass. FIG. 17 shows how the IP communication connecting component assigns a new session pass.
DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention relates to a system (100) and a method for facilitating mobile IP communication. Hereinafter, the system (100) and the method shall be described according to the preferred embodiments of the present invention and by referring to the accompanying description and drawings. However, it is to be understood that limiting the description to the preferred embodiments of the invention and to the drawings is merely to facilitate discussion of the present invention and it is envisioned that those skilled in the art may devise various modifications without departing from the scope of the appended claim.
Referring to FIG. 2, according to one aspect of the present invention, the system (100) for facilitating mobile Internet Protocol (IP) communication is shown. The system (100) comprises an IP address updating component (310), an IP communication connecting component (320), an access requesting component (330), and a session verifying component (340). Referring to FIG. 1 & 2, the IP address updating component (310) and the session verifying terminal (340) reside in a mobile destination terminal (30). The IP communication connecting component (320) resides in a transit terminal (20). The access requesting component (330) resides in a source terminal (10). Referring to FIG. 2 again, the IP communication connecting component (320) comprises a destination storage unit (510) and a source storage unit (520). The session verifying component (340) comprises a pass unsecuring member (222). Ultimately, the IP communication connecting component (320) tracks the IP address (210) of the mobile destination terminal (30) through the destination storage unit (510), and handles the IP connection between the source terminal (10) and the mobile destination terminal (30) through the source storage unit (520).
Referring to FIG. 2, 4, & 10, the IP address updating component (310) identifies the current IP address (210) of the mobile destination terminal (30). The IP address updating component (310) achieves this by detecting whether there is any change in the network attached to the mobile destination component (30). If this is the case, this indicates that there is a change in the current IP address (210) of the mobile destination terminal (30) and the IP address updating component (310) only forwards an IP address update (410) to the IP communication connecting component (320). Ultimately, the IP address updating component (310) is adapted to update the IP communication connecting component (320) regarding the current IP address (210) of the mobile destination terminal (30). An example regarding the change of network attached to the mobile destination network (30) is also illustrated in FIG. 15-17.
Referring now to FIG. 2 & 5, the IP communication connecting component (320) receives and stores the current IP address (210) of the mobile destination terminal (30) on the destination storage unit (510). The destination storage unit (510) is adapted to store data related to the mobile destination terminal (30). The data comprise the IP addresses (210) of the mobile destination terminal (30) and a pass securing member (220) in relation to the mobile destination terminal (30). As shown in FIG. 5, the IP communication connecting component (320), upon receiving the current IP address (210) of the mobile destination terminal (30) from the IP update address updating component (310), checks whether the current IP address (210) has already been stored in the destination storage unit (510); if the current IP address (210) has been stored in the destination storage unit (510); the destination storage unit (510) is updated; and if the current IP address (210) has not been stored in the destination storage unit (510); and the current IP address (210) is stored as a new IP address (210) in the destination storage unit (510).
With reference to FIG. 2 & 1 1 , the access requesting component (330) forwards a request to establish an IP connection with an intended mobile destination terminal (32). As shown in FIG. 2, 6 & 12, the IP communication connecting component (320) is adapted further for, not in any particular order, receiving and storing the request in the source storage unit (520), generating and assign a session pass (230) upon receipt of the request; forwarding the session pass (230) to the session verifying component (340) of the intended mobile destination terminal (32), and retrieving the IP address (210) and the pass securing member (220) from the destination storage unit (510), and forwarding the IP address (210), the pass securing member (220), and the session pass (230) to the access requesting component (330). The above mentioned order is allowed to follow that shown in FIG. 6.
Referring to now to FIG. 2, 7, 8, & 13, the access requesting component (330) further secures the session pass (230) with the pass securing member (220), and forwards the secured session pass (232) to the IP address (210) of the intended mobile destination terminal (32).
Referring to FIG. 7, if the source terminal (10) reaches a timeout, the access requesting component (330) forwards a new request to establish an IP connection with the intended mobile destination terminal (32) using the previously received session pass (230), the IP communication connecting component (320) receives and stores the request in the source storage unit (520), generates a new session pass (230) upon receipt of the request, and forwards the new session pass (230) to the intended mobile destination terminal (32) and the source terminal (10). If the access requesting component (330) has not received the IP address (210), the pass securing member (220), and the session pass (230) from the IP communication connecting component (320), and if the timeout has not been reached, the access requesting component (330) waits for the receipt of the IP address (210), the pass securing member (220), and the session pass (230) from the IP communication connecting component (320). FIG. 8 shows slightly a difference route with regards the error before receiving a reply from the IP communication connecting component (320).
FIG. 9 shows the route of steps involved in the session verifying component (340). The session verifying component (340) unsecures the secured session pass (232) with the pass unsecuring member (222), compares the unsecured session pass (232) with the session pass (230) received from the IP communication connecting component (320), determines whether both of the session passes (230) match with each other, and establishes the IP connection with the source terminal (10) if both of the session passes (230) match as shown in FIG. 9 & 14.
As an example, the source terminal (10) is a corresponding node, the transit terminal (20) is a redirect server, the mobile destination terminal (30) and the intended mobile destination terminal (32) each are a mobile node. The destination storage unit (510) comprises a binding table (510). The source storage unit (520) comprises a correspondent table (520). The pass securing member (220) is a public key (220) whereas the pass unsecuring member (222) is a private key.
Referring to FIG. 2, & 10-17, the binding table (510) is adapted for keeping track of the mobile node. The correspondent table (520) is adapted for keeping track of the communication sessions between the mobile nodes and the corresponding nodes. The public key (220) is used in a public key distribution for an authentication purpose, whereas the session key (230) is used in a session key (230) distribution for a mobility purpose.
Referring to FIG. 2-17, according to another aspect of the present invention, the method for facilitating mobile Internet Protocol (IP) communication is implemented using the system (100). The method comprises the steps of identifying a current IP address of a mobile destination terminal and forwarding an IP address update to an IP communication connecting component of the system using an IP address updating component of the system; receiving and storing the current IP address of the mobile destination terminal on a destination storage unit using the IP communication connecting component, the destination storage unit being for storing data related to the mobile destination terminal; forwarding a request to establish an IP connection with an intended mobile destination terminal using an access requesting component; receiving and storing the request in the source storage unit using the IP communication connecting component; generating a session pass upon receipt of the request using the IP communication connecting component; forwarding the session pass to a session verifying component of the intended mobile destination terminal using the IP communication connecting component; retrieving the IP address and a pass securing member from the destination storage unit, and forwarding the IP address, the pass securing member, and the session pass to the access requesting component of the source terminal using the IP communication connecting component; securing the session pass with the pass securing member, and forwarding the secured session pass to the IP address of the intended mobile destination terminal using the access requesting component; and unsecuring the secured session pass with a pass unsecuring member, comparing the unsecured session pass with the session pass received from the IP communication connecting component, determining whether both of the session passes match with each other, and establishing the IP connection with the source terminal if both of the session passes match using a session verifying component. The session verifying component resides in the mobile destination terminal; and the session verifying component having a pass unsecuring member.
Referring now to FIG. 1 & 2, the IP address updating component (310) and the session verifying terminal (340) reside in a mobile destination terminal (30). The IP communication connecting component (320) resides in a transit terminal (20). The access requesting component (330) resides in a source terminal (10).
Referring to FIG. 2 again, the IP communication connecting component (320) comprises the destination storage unit (510) and the source storage unit (520). The session verifying component (340) comprises the pass unsecuring member (222).
The system (100) comprises an IP address updating component (310), an IP communication connecting component (320), an access requesting component (330), and a session verifying component (340).
Ultimately, the IP communication connecting component (320) tracks the IP address (210) of the mobile destination terminal (30) through the destination storage unit (510), and handles the IP connection between the source terminal (10) and the mobile destination terminal (30) through the source storage unit (520).
Referring to FIG. 2, 4, & 10, the step of forwarding an IP address update (410) to an IP communication connecting component (320) further comprises the step of forwarding the IP address update (410) to the IP communication connecting component (320) when there is a change in the current IP address (210) of the mobile destination terminal (30). An example regarding the change of network attached to the mobile destination terminal (30) is illustrated in FIG. 15-17.
With reference to FIG. 2 & 5, the step of receiving and storing the current IP address (210) of the mobile destination terminal (30) on the destination storage unit (510) further comprises the steps of checking whether the current IP address (210) has been stored in the destination storage unit (510), and updating the destination storage unit (510); wherein if the current IP address (210) has been stored in the destination storage unit (510), the destination storage unit (510) is updated; and if the current IP address (210) has not been stored in the destination storage unit (510), the current IP address (210) is stored as a new IP address (210) in the destination storage unit (510). Referring to FIG. 7, the method further comprises the steps of:
if the source terminal (10) reaches a timeout, forwarding a new request to establish an IP connection with the intended mobile destination terminal (32) with the previously received session pass (230) using the access requesting component (330);
receiving and storing the request in the source storage unit (520), generating a new session pass (230) upon the request, and forwarding the new session pass (230) to the intended mobile destination terminal (32) and the source terminal (10) using the IP communication connecting component (320);
if the access requesting component (330) has not received the IP address (210), the pass securing member (220), and the session pass (230) from the IP communication connecting component (320), and if the timeout has not been reached, waiting for the receipt of the IP address (210), the pass securing member (220), and the session pass (230) from the IP communication connecting component (320) using the access requesting component (330).
For example, the source terminal (10) is a corresponding node, the transit terminal (20) is a redirect server, the mobile destination terminal (30) and the intended mobile destination terminal (32) each are a mobile node. The destination storage unit (510) comprises a binding table (510) whereas the source storage unit (520) comprises a correspondent table (520). The pass securing member (220) is a public key (220) whereas the pass unsecuring member (222) is a private key.
Referring to FIG. 2, & 10-17, the binding table (510) is adapted to keep track of the mobile node. The correspondent table (520) is adapted to keep track of the communication sessions between the mobile nodes and the corresponding nodes. The public key (220) is used in a public key distribution for an authentication purpose, whereas the session key (230) is used in a session key (230) distribution for a mobility purpose.
While in the foregoing specification this invention has been described in relation to certain preferred embodiments thereof and many details have been set forth for purpose of illustration, it will be apparent to those skilled in the art that the invention is susceptible to additional embodiments and that certain of the details described herein can be varied considerably without departing from the basic principles of the invention.

Claims

1 . A system (100) for facilitating mobile Internet Protocol (IP) communication comprising:
(i) at least one source terminal (10), wherein said source terminal (10) comprises an access requesting component (330), wherein said access requesting component (330) is adapted to raise an access request and to generate a secured session pass (232) to establish an IP connection with an intended mobile destination terminal (32); (ii) at least one transit terminal (20) comprising an IP communication connecting component (320), said IP communication connecting component (320) is adapted to generate a new session pass (230) on receipt of said access request received from a source terminal (10), said IP communication connecting component (320) is further adapted to forward said session pass (230) to a source terminal (10) and an intended mobile destination terminal (32) associated with said access request; and
(iii) at least one mobile destination terminal (30), wherein said mobile destination terminals (30) being associated with discrete dynamic IP address (210), a pass securing member (220) and a pass unsecuring member (222), wherein said mobile destination terminal (30) having a session verifying component (340), said session verifying component (340) is adapted to unsecure a secured session pass (232) received from a source terminal (10) using said pass unsecuring member (222), compare a unsecured session pass (232) with said session pass (230) received from said transit terminal (20) and establish an IP communication session with a corresponding source terminal (10) if both the session pass match.
2. The system as claimed in claim 1 , wherein said IP communication connecting component (320) is further adapted to receive and store a current IP address (210) and a pass securing member (220) associated with said mobile destination terminal (30), said IP communication connecting component (320) having:
(i) a destination storage unit (510) for storing data including said current IP address (210) and said pass securing member (220) in relation to said mobile destination terminal (30); and
(ii) and a source storage unit (520) to store said access requests raised by said source terminal (10); wherein said IP communication connecting component (320) tracks the IP address (210) of said mobile destination terminal (30) through said destination storage unit (510), and handles the IP connection between said source terminal (10) and said mobile destination terminal (30) through said source storage unit (520); and said IP communication connecting component (320) further upon receiving a current IP address (210) of said mobile destination terminal (30) checks whether the current IP address (210) has already been stored in the destination storage unit (510) and updates said destination storage unit (510) with the current IP address (210) as the new IP address (210) if the current IP address (210) has not been stored in the destination storage unit (510).
3. The system (100) as claimed in claim 1 , wherein and said source terminal (10) associated with said access request is further adapted to receive a session pass (230), a current IP address (210) and a pass securing member associated with an intended mobile destination terminal (32) from said transit terminal (20) to generate said secured session pass (232) using said access requesting component (330).
4. The system (100) as claimed in claim 1 , wherein said access requesting component (330) is further adapted to forward a new access request using the previously received session pass (230) if said source terminal (20) reaches a timeout while waiting for said session pass (230) from said transit terminal (20); said IP communication connecting component (320) receives and stores the request, generates a new session pass (230) upon receipt of the request, and forwards the new session pass (230) to said intended mobile destination terminal (32) and said source terminal (10); and if said access requesting component (330) has not received the IP address (210), said pass securing member (220), and said session pass (230) from the IP communication connecting component (320), and if the timeout has not been reached, the access requesting component (330) waits for the receipt of the IP address (210), the pass securing member (220), and the session pass (230) from the IP communication connecting component (320).
5. The system (100) as claimed in claim 1 , wherein said mobile destination terminal (30) further includes an IP address updating component (310) adapted to identify and forward a current IP address (210) of said mobile destination terminal (30) to said IP communication connecting component (320) when there is a change in the current IP address (210) of said mobile destination terminal (30).
6. A transit terminal (20) for use in the system (100) as described in claim 1 , wherein said transit terminal (20) comprises an IP communication connecting component (320), said IP communication connecting component (320) is adapted to generate a new session pass (230) on receipt of a access request received from a source terminal (10) to establish an IP connection with an intended mobile destination terminal (32), said IP communication connecting component (320) is further adapted to forward said session pass (230) to said source terminal (10) and said intended mobile destination terminal (32) associated with said access request.
7. A method for facilitating mobile Internet Protocol (IP) communication, the method is implemented using a system (100) for facilitating the mobile IP communication, the method comprising the following steps:
(i) identifying a current IP address (210) of a mobile destination terminal (30) and forwarding an IP address update (410) to an IP communication connecting component (320) using an IP address updating component (310), wherein said IP communication connecting component (320) resides in a transit terminal (20) and said IP address updating component (310) resides in said mobile destination terminal (30) and said mobile destination terminal (30) being associated with a discrete pass securing member (220) and a pass unsecuring member (222);
(ii) facilitating a source terminal to raise an access request to establish an IP connection with an intended mobile destination terminal (32) using an access requesting component (330), wherein said access requesting component residing in a source terminal (10);
(iii) generating a new session pass (230) at said transit terminal corresponding to said access request using said IP communication connecting component (320);
(iv) forwarding said session pass (230) to a session verifying component (340) residing in said intended mobile destination terminal (32) and said access requesting component (330) using the IP communication connecting component (320);
(v) securing the session pass (230) with the pass securing member (220), and forwarding the secured session pass (232) to the current IP address (210) of the intended mobile destination terminal (32) using the access requesting component (330); and
(vi) unsecuring the secured session pass (232) with said pass unsecuring member (222), comparing the unsecured session pass (232) with the session pass
(230) received from the IP communication connecting component (320), and establishing the IP connection with the source terminal (10) if both of the session passes (230) match using said session verifying component (340).
8. The method as claimed in claim 7, wherein the step of identifying a current IP address (210) of a mobile destination terminal (30) includes the steps of checking whether the current IP address (210) has been stored on a destination storage unit (510) hosted in IP communication connecting component (320) and updating the destination storage unit (510) along with said pass securing member (220) in relation to said mobile destination terminal (30); wherein if the current IP address (210) has been stored in said destination storage unit (510), said destination storage unit (510) is updated; and if said current IP address (210) has not been stored in said destination storage unit (510), said current IP address (210) is stored as a new IP address (210) in said destination storage unit (510).
9. The method as claimed in claim 7, wherein the step of facilitating a source terminal to raise an access request to establish an IP connection with an intended mobile destination terminal (32) comprises the following steps:
(i) determining if the source terminal (10) reaches a timeout while waiting for said session pass (230) from said transit terminal (20), forwarding a new request to establish an IP connection with the intended mobile destination terminal (32) with the previously received session pass (230) using the access requesting component (330) in the event of said timeout;
(ii) receiving and storing the request in the source storage unit (520), generating a new session pass (230) upon the request, and forwarding the new session pass (230) to the intended mobile destination terminal (32) and the source terminal (10) using the IP communication connecting component (320); and
(iii) verifying if the access requesting component (330) has not received the IP address (210), the pass securing member (220), and the session pass (230) from the IP communication connecting component (320), and if the timeout has not been reached, waiting for the receipt of the IP address (210), the pass securing member (220), and the session pass (230) from the IP communication connecting component (320) using the access requesting component (330).
10. The method as claimed in claim 7, wherein the step of generating a new session pass (230) at a transit terminal includes the following steps:
(i) storing the access request in said IP communication connecting component (320); and (ii) retrieving the IP address (210) and said pass securing member (220) from said IP communication connecting component (320), and forwarding the IP address (210), the pass securing member (220), and the session pass (230) to the access requesting component (330) of said source terminal (10) using said IP communication connecting component (320).
PCT/MY2013/000259 2012-12-20 2013-12-18 A system and a method for facilitating mobile internet protocol communication Ceased WO2014098562A2 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
MYPI2012005529A MY164494A (en) 2012-12-20 2012-12-20 A system and a method for facilitating mobile internet protocol communication
MYPI2012005529 2012-12-20

Publications (2)

Publication Number Publication Date
WO2014098562A2 true WO2014098562A2 (en) 2014-06-26
WO2014098562A3 WO2014098562A3 (en) 2014-08-14

Family

ID=50150755

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/MY2013/000259 Ceased WO2014098562A2 (en) 2012-12-20 2013-12-18 A system and a method for facilitating mobile internet protocol communication

Country Status (2)

Country Link
MY (1) MY164494A (en)
WO (1) WO2014098562A2 (en)

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7069438B2 (en) * 2002-08-19 2006-06-27 Sowl Associates, Inc. Establishing authenticated network connections
US7600113B2 (en) * 2004-02-20 2009-10-06 Microsoft Corporation Secure network channel

Also Published As

Publication number Publication date
WO2014098562A3 (en) 2014-08-14
MY164494A (en) 2017-12-29

Similar Documents

Publication Publication Date Title
CN101572643B (en) Method and system for realizing data transmission among private networks
US10904217B2 (en) Encryption for gateway tunnel-based VPNs independent of wan transport addresses
US10958623B2 (en) Identity and metadata based firewalls in identity enabled networks
US9876760B2 (en) Peer-to-peer connection establishment using turn
US9118687B2 (en) Methods and apparatus for a scalable network with efficient link utilization
US10212233B2 (en) Data transfer in a system of connected things
CN101027888B (en) Method for managing secure connection between access system and remote system, intermediate system and communication system
CN1817013B (en) Terminal and communication system
US8737396B2 (en) Communication method and communication system
US8611358B2 (en) Mobile network traffic management
US7372868B2 (en) Mobile agent connectivity
CN103597794B (en) For providing information about data array associations and for forwarding data array assumptions
US11888818B2 (en) Multi-access interface for internet protocol security
CA2527550A1 (en) Method for securely associating data with https sessions
EP3443729A1 (en) Registration of data packet traffic for a wireless device
US8316226B1 (en) Adaptive transition between layer three and layer four network tunnels
JP4305087B2 (en) Communication network system and security automatic setting method thereof
CN101796769B (en) Internet Protocol Version 6 Transition Method and Apparatus over Internet Protocol Version 4 for Improving Control Server Performance
US20040037284A1 (en) Method for secure packet-based communication between two units via an intermedia unit
CN102209012A (en) Method and system for implementing connection establishment of terminals
EP2127198B1 (en) Authentication and encryption protocol in wireless communications system
CA2565536C (en) Supporting a network behind a wireless station
WO2014098562A2 (en) A system and a method for facilitating mobile internet protocol communication
CN102377829B (en) Based on the communication means of HIP, system and equipment
US10841283B2 (en) Smart sender anonymization in identity enabled networks

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 13830239

Country of ref document: EP

Kind code of ref document: A2

122 Ep: pct application non-entry in european phase

Ref document number: 13830239

Country of ref document: EP

Kind code of ref document: A2