Patent ID: 7516486

Claim:
A method of mobile Internet Protocol communication between a private network and a roaming mobile terminal, said private network including a home agent for said roaming mobile terminal and a gateway through which said communication passes and which provides security protection for said private network, the mobile internet protocols of said communication including security association bundles each including a security association between said roaming mobile terminal and said gateway for inbound communication and another security association for outbound communication, the method comprising the steps of: in response to a handover of communication, causing a care-of IP address (MN Co @) of said roaming mobile terminal to change to a new care-of IP address (MN New Co @), said roaming mobile terminal updates its inbound security association from said gateway so that it can receive packets sent to it with said new care-of IP address (MN New Co @) as destination, said roaming mobile terminal sends a first signalling message with said home agent as destination in a secure tunnel to said gateway, said first signalling message indicating said new care-of IP address (MN New Co @) in secure form to said home agent, the inbound security association of said gateway from said roaming mobile terminal accepts said first signalling message without checking its source address, said gateway forwards said first signalling message within said private network to said home agent, said home agent checks the validity of said first signalling message and, if it is valid, updates its address data and sends a second signalling message to said gateway indicating said new care-of IP address (MN New Co @), and said gateway updates its outbound security association with said roaming mobile terminal in response to the new care-of IP address (MN New Co @) indicated.