Patent ID: 8498414

Claim:
A method of making communications over a public IP network by a mobile node more secure, said method being implemented by a home agent at a network node, comprising: receiving in a signature request message at said network node, a first network address for said mobile node, said first network address being logically linked with a second network address and said first and second addresses being cryptographically derived from keys of a backward key chain generated by said mobile node, said second network address being used by said mobile node to communicate with said home agent; generating a cryptographic signature binding said first network address for the mobile node with said second network address for the home agent; sending to said mobile node a signature response message including said cryptographic signature; validating said first network address by verifying the logical link between said first and second network addresses; if said first address is validated, generating a domain name for said mobile node; and registering said domain name and said first network address with a trusted domain name server to create an association between said domain name and said first network address.