Patent ID: 7870389

Claim:
In a Home Agent, a method of authenticating a Mobile Node, comprising: establishing by the Home Agent communication with a key distribution center to obtain a first dynamically generated key shared between the Home Agent and the key distribution center; obtaining by the Home Agent a shared session key from the key distribution center using the first dynamically generated key shared between the Home Agent and the key distribution center, the shared session key being a dynamically generated key to be shared by the Home Agent and the Mobile Node; receiving by the Home Agent a first registration request from the Mobile Node, wherein the first registration request received from the Mobile Node requests the shared session key to be shared between the Home Agent and the Mobile Node, sending by the Home Agent a first registration reply to the Mobile Node, the first registration reply including the shared session key; receiving by the Home Agent a second registration request from the Mobile Node, the second registration request identifying a care-of address of the Mobile Node and a home address of the Mobile Node, wherein at least a portion of the second registration request has been encrypted using the shared session key; authenticating by the Home Agent the second registration request using the shared session key; if the second registration request is successfully authenticated, registering the Mobile Node with the Home Agent in order to establish a Mobile IP session such that a binding between the care-of address of the Mobile Node and the home address of the Mobile Node is created, thereby enabling the Home Agent to forward packets addressed to the home address to the Mobile Node at the care-of address; and sending by the Home Agent a second registration reply to the Mobile Node, the second registration reply indicating whether registration of the Mobile Node with the Home Agent is successful.