Patent ID: 8925048

Claim:
A security method of a mobile node in a server-based mobile IP system, the security method comprising: exchanging, between a mobile node and a server, a first security component by performing a first password-based authentication key exchange (PAK) process; generating a first secure tunnel between the mobile node and the server; transmitting a pseudo password query message (PPQ) from the mobile node to the server through the first secure tunnel; generating, at the server, a pseudo password acknowledgement message (PPA) in response to the PPQ; receiving, at the mobile node and a destination node, the PPA from the server; exchanging, between the mobile node and the destination node, a second security component by performing a second PAK process using the PPA; and generating a second secure tunnel between the mobile node and the destination node for transmitting and receiving data and a control message, wherein generating the first secure tunnel comprises: establishing a security policy using the first security component exchanged by performing the first PAK process; and generating the first secure tunnel according to the established security policy, wherein the established security policy uses a 5-tuple lookup process, and wherein key information, algorithm information, a sequence number, a life time, and a generation time are searched for as a result of the 5-tuple lookup process by using an address and a port number of a source, and an address and a port number of a destination, and a protocol number as indices.