Patent ID: 7934094
Filing Date: 2011-04-26
Classification: H04L,H04W

Abstract:
1. A method of authentication and authorization support for Mobile IP version 6 (MIPv6), comprising the steps of: encrypting Extensible Authentication Protocol (EAP) authentication and authorization information in a mobile device operating in a visited network; sending the encrypted EAP authentication and authorization information from the mobile device to a pass-through visited Authentication, Authorization, and Accounting (AAA) client in the visited network utilizing a protocol for carrying authentication information for network access; forwarding the encrypted EAP authentication and authorization information from the pass-through visited AAA client to a pass-through visited AAA server in the visited network; forwarding the encrypted EAP authentication and authorization information from the pass-through visited AAA server in the visited network to a home AAA server in the mobile device's home network; performing an analysis of the encrypted EAP authentication and authorization information by the home AAA server; sending a MIPv6-related challenge message from the home AAA server to the mobile device via the pass-through visited AAA server and the pass-through visited AAA client in the visited network based on the analysis of the encrypted EAP authentication and authorization information; sending a MIPv6-related challenge response message from the mobile device to the home AAA server via the pass-through visited AAA client and the pass-through visited AAA server in the visited network; performing an analysis of the challenge response message contents by the home AAA server; and sending a MIPv6-related authentication and authorization results message from the home AAA server to the mobile device reporting a result of the analysis of the challenge response message contents and providing session parameter information; wherein the pass-through visited AAA client and the pass-through visited AAA server forward all messages in a pass-through manner in which information within Type and Type-Data fields after EAP layer headers is not examined by the pass-through visited AAA client and the pass-through visited AAA server; whereby prior EAP encryption is applied between the mobile device and the home AAA server.