Patent ID: 7817607

Claim:
A method in a computerized environment for providing a private, mobile Internet Protocol connection in a shared-pool environment, the method comprising: authenticating a subscriber at a router, (a) wherein the router includes an access control list that matches an IP address of the subscriber to a first private network that the subscriber has authority to access, and (b) wherein the access control list also matches the IP address of the subscriber to a first VLAN from which communications, which are to be forwarded to the subscriber, enter the router; receiving from a server, which is associated with a second private network, a communication that is to be forwarded to the subscriber, wherein the communication is received through a second VLAN; responsive to receiving the communication from the server, referencing the access control list to determine that the second VLAN is not matched with the IP address of the subscriber; and based on the IP address of the subscriber not being matched with the second VLAN through which the communication from the server was received, preventing the communication from being forwarded to the subscriber.