Patent ID: 8160066
Filing Date: 2012-04-17
Classification: H04L,H04W

Abstract:
1. A method for mobile IPv6 data traversing a state firewall, comprising: creating, by a firewall, an entry item of the firewall, wherein the entry item comprises a source Home Address (HoA), a source Care of Address (CoA), a destination HoA, a destination CoA, a source port, a destination port and a protocol number; performing, by the firewall, when a data packet is sent from a mobile node to a communication node through the firewall, a first matching between the source CoA, the destination CoA, the source port, the destination port and the protocol number of the data packet and the source CoA, the destination CoA, the source port, the destination port and the protocol number in the entry item; allowing, by the firewall, the data packet to traverse the firewall if the first matching is successful; if the first matching is unsuccessful, determining, by the firewall, whether the data packet contains a Home Address Destination Option, extracting the source HoA from the Home Address Destination Option if the data packet contains the Home Address Destination Option, and performing a second matching between the source HoA extracted from the Home Address Destination Option, the destination CoA, the source port, the destination port and the protocol number of the data packet and the source HoA, the destination CoA, the source port, the destination port and the protocol number in the entry item; and replacing, by the firewall, the source CoA in the entry item by the source CoA of the data packet if the second matching is successful, and allowing the data packet to traverse the firewall.