Patent ID: 8041939
Filing Date: 2011-10-18
Classification: H04L

Abstract:
1. A method of establishing a Host Identity Protocol session between first and second Host Identity Protocol enabled hosts, where at least said second host is located behind a reverse-proxy, the method comprising: providing the reverse-proxy with Diffie-Hellman public keying material of the second host; sending said Diffie-Hellman public keying material from the reverse-proxy to the first host as part of a Host Identity Protocol base exchange procedure and using the Diffie-Hellman public keying material to establish a pair of security associations between the first and second hosts, the security associations being bound to Host Identities of the reverse-proxy and said second host for the purpose of the Host Identity Protocol session; and at the first host, using the Host Identity of the reverse-proxy as the correspondence Host Identity for the Host Identity Protocol session, and, at the second host, using the Host Identity of the reverse-proxy as the originating Host Identity for the Host Identity Protocol session wherein the first and second hosts use Host Identity Protocol.