Patent ID: 8108677

Claim:
A method of authenticating a transport packet stream in a managed packet network comprising the steps of: receiving at a RACF (Resource and Admission Control Function) a request for service from a client application transmitted through a service control function; authenticating each packet of said transport packet stream, using a session key, based on session flow parameters associated with said transport packet stream without regard to identity of a client; creating at said RACF a session key, K F , for a session flow F to be established; passing a quantity to the service control function from which another quantity X can be determined, wherein X is included in a token to be passed to said client application, wherein said session key is determined from X; and creating a ticket, t, for a border gateway to be contacted, where t=K BGW (F, K F ), wherein K BGW is a key shared between the RACF and border gateway.