Patent ID: 7072657

Claim:
A network access system serving a mobile device accessing a wide area network from a plurality of access networks, the network access system comprising a network service proxy server which ( 1 ) when requested by the mobile device attached to a first one of the access networks, provisioning a first VPN tunnel between a gateway of a private network and a gateway of that first one of the access networks, the first VPN tunnel comprising a first segment between the network service proxy server and the gateway of that first one of the access networks, and a second segment between the network service proxy server and the gateway of the private network, and ( 2 ) when the mobile device moves from that first one of the access networks to a second one of the access networks, provisioning a second VPN tunnel between the gateway of the private network and a gateway of that second one of the access networks, the second VPN tunnel comprising a first segment between the network service proxy server and the gateway of that second one of the access networks and a second segment which is the second segment of the first VPN tunnel.