Patent ID: 8434142
Filing Date: 2013-04-30
Classification: H04L,H04W

Abstract:
1. A method performed by a mobile node (MN) of a mobile internet protocol (MIP) network to prevent an attacker on a path between a home agent (HA) associated with the MN and a correspondent node (CN) to hijack a session between the MN and the CN, wherein the MN includes a microprocessor, the method comprising the steps of: transmitting and receiving, by the MN, first messages to and from the HA and the CN as part of participating in a first return routability procedure, including generating a first binding management key (Kbm); generating a first proof of knowledge (PoK) by hashing the first Kbm; transmitting and receiving, by the MN, second messages to and from the HA and the CN as part of participating in a second return routability procedure, including generating a second Kbm; generating a first binding update and binding acknowledgement (BU/BA) key by hashing the second Kbm and the first PoK; transmitting, by the MN, a first binding update (BU) message to the CN with the first BU/BA key, wherein the first BU message is authenticated by the CN using the first BU/BA key that is independently derived by the CN; and in response to a first binding acknowledgement (BA) message received from the CN, authenticating the first BA message using the first BU/BA key, whereby the attacker is prevented from hijacking the session without possessing the first PoK.