Patent ID: 6839338

Claim:
A method to dynamically provide Internet Protocol security policy service, comprising the steps of: receiving a connection request sent from a mobile node to a foreign agent, wherein the mobile node uses Mobile Internet Protocol; obtaining at least one policy template for the mobile node, wherein the at least one policy template includes processing information for Internet Protocol security packets sent between the foreign agent and a home agent for the mobile node; negotiating Internet Protocol security parameters with the home agent; creating at least one filter, wherein the at least one filter identifies data packets traveling between the home agent and the foreign agent to receive Internet Protocol security processing, and wherein the at least one filter identifies the at least one policy template to apply to the data packets receiving Internet Protocol security processing; and storing the at least one filter in a list of active filters maintained by the foreign agent, wherein the list of active filters identifies data packets in a plurality of active Internet Protocol security sessions between the foreign agent and respective home agents of other mobile nodes that are registered with the foreign agent.