Patent ID: 8046829
Filing Date: 2011-10-25
Classification: H04L,H04W

Abstract:
1. A method for dynamically and securely establishing a tunnel for a mobile device, comprising: dynamically assigning one or more tunnel endpoint addresses to a client which is not on the same IP-link as an authentication agent depending on an authentication result based on using an authentication protocol source port number in order to address communications, further including that in order to allow a protocol to run between a client and an authentication agent that are not on the same IP-link, not only the IP address of the client but also a source port number of messages sent from the client is used as a device identifier of the client so as to distinguish multiple clients, such that the client device identifier is redefined to enable identification of multiple clients, further including that not only the IP address of the authentication agent but also a source port number of messages sent from the authentication agent is used as a device identifier of the authentication agent, such that the authentication agent's device identifier is redefined to enable identification of multiple authentication agents, further including establishing multiple IPsec tunnels from said client to different endpoints, including dynamically assigning a tunnel endpoint to a new endpoint depending on an authentication result for another endpoint, further including extending PANA protocol such as to dynamically assign a tunnel endpoint address to a PANA client which is not on the same IP-link as a PANA authentication agent depending on a prior PANA authentication result, wherein in order to allow the PANA protocol to run between the PANA client and the PANA authentication agent that are not on the same IP-link, a) for messages sent from the PANA client to the PANA authentication agent, not only the IP address of the PANA client but also the source port number of PANA messages sent from the PANA client is used as a PANA device identifier of the PANA client and b) for messages sent from the PANA authentication agent to the PANA client, not only the IP address of the PANA authentication agent but also the source port number of PANA messages sent from the PANA authentication agent is used as a PANA device identifier of the PANA authentication agent.