Patent ID: 8289929

Claim:
In a mobile IP network, comprising an access network with which a mobile terminal is currently associated and wherein said access network is other than a native IP network of said mobile terminal, a first mobile network associated with said access network and operative to provide mobile services therefore and a second mobile network that is a native IP network of said mobile terminal, a method for providing secured mobile IP services to said mobile terminal, said method comprising creating a virtual mobile node representing said mobile terminal and associated with said access network, wherein said virtual mobile node is operative to communicate with at least one Home Agent associated with said second mobile network and to retain a first security authentication key for enabling secured communications between said virtual mobile node and said second mobile network; wherein said virtual mobile node is located separately from a network access server associated with said access network and operative to participate in an initial authentication to be carried when said mobile terminal is authenticated by said second mobile network, wherein said network access server is adapted to use a second security authentication key derived from a security authentication key already available at the network access server, to enable exchange of secured communications between said access network and said mobile terminal, and wherein said network access server is operative to enable said virtual mobile node to apply the first security authentication key, said method comprising the steps of: initiating a request for receiving services by said mobile terminal; initiating an authentication process carried between said mobile terminal and an access authentication and authorization server associated with said second mobile network; upon completing successfully the authenticating process, instigating a virtual mobile node entity which represents said mobile terminal and is associated with said access network on behalf of the authenticated mobile terminal; sending a protected registration request message to said at least one Home Agent, wherein said Registration Request message is protected by using said first security authentication key; sending a protected registration reply message by said at least one Home Agent to said virtual mobile node wherein said registration reply message is protected by using said first security authentication key; at the access network, allowing traffic transmitted to and received from said mobile terminal, to pass via a selected access point and/or a Foreign Agent located in said access network.