Patent ID: 7613920

Claim:
A method of avoiding double encryption at a mobile node (MN) that requests a connection with a remote terminal on an untrusted network, comprising the steps of: a) establishing a datapath over a first link between said MN and a base station (BS) and a second link between said BS and said remote terminal, said datapath for serving said connection; b) marking, at said MN, datagrams which must be encrypted during transmission over said second link with a first identifier, the first identifier identifying a first encryption standard; c) marking, at said MN, datagrams which need not be encrypted during transmission over said second link with a second identifier, the second identifier identifying a second encryption standard; d) encrypting, at said MN, datagrams marked with said first identifier according to said first encryption standard; e) encrypting, at said MN, datagrams marked with said second identifier according to said second encryption standard; and f) decrypting, at said BS, only datagrams marked with said second identifier, according to said second encryption standard.