QoS signaling for mobile IP

• US 20040008689A1
• Filed: 06/20/2003
• Published: 01/15/2004
• Est. Priority Date: 06/20/2002
• Status: Active Grant

• Current Assignee: Intellectual Ventures I LLC (Intellectual Ventures LLC)
• Original Assignee: Spyder Navigations LLC (Intellectual Ventures LLC)
• Inventors: Westphal, Cedric, Chaskar, Hermant
• Granted Patent: US 7,453,851 B2
• Time in Patent Office: Days
• US Class Current: 370/395.21
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]
• CPC Class Codes: H04L 47/767 after changing the attachment point, e.g. after hand-off
• CPC Class Codes: H04L 47/824 Applicable to portable or mobile terminals
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 28/02 Traffic management, e.g. flow control or congestion control
• CPC Class Codes: H04W 28/24 Negotiating SLA [Service Level Agreement]; Negotiating QoS [Quality of Service]
• CPC Class Codes: H04W 36/00 Hand-off or reselection arrangements
• CPC Class Codes: H04W 36/0011 for data sessions of end-to-end connection
• CPC Class Codes: H04W 36/0019 adapted for mobile IP [MIP]
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 8/04 Registration at HLR or HSS [Home Subscriber Server]
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]

Abstract

A quality of service (QoS) signaling packet for arranging QoS connections upon handoff between a mobile node (MN) and a correspondent node (CN) using Internet Protocol (IP), the signaling packet includes one or more QoS flow requirements, one or more classifier parameters, QoS session identification information composed of a previous QoS session ID, a new QoS session ID, and a sequence number. The QoS session IDs are used for establishing a new data path and for added security against spoofing, can be composed of a key-based signature combination of a mobile node'"'"'s new care of address (CoA) and the sequence number. The packet may also include a previous node address and a cookie, both of which are inserted by a previous node. The previous router address is used for backtracking communications and establishing/updating flow tables while the cookie is used for authentification of node-to-node messages.

Claims

1. A telecommunications node comprising a processor configured to generate quality of service (QoS) signaling packets for arranging QoS connections upon handoffs between a mobile node (MN) and a correspondent node (CN) using Internet Protocol (IP), each signaling packet comprising the following packet information:

one or more QoS flow requirements;

one or more classifier parameters;

QoS session identification information comprising a previous QoS session ID, a new QoS session ID, a sequence number and one or more mutable parameters.

2. The node of claim 1 wherein the packet further comprises a signature of the one or more immutable parameters generated with a private key of the mobile node.

3. The node of claim 1 wherein the QoS session identification information further comprises a QoS public key.

4. The node of claim 1 wherein the previous and new QoS session IDs each include a signature of a combination of a respective care of address (CoA) for the MN and the sequence number and generated by a private key of the mobile node.

5. The node of claim 4 wherein the one or more classifier parameters comprise a new CoA for the mobile node, a CoA of the correspondent node and an IP flow label.

6. The node of claim 1 wherein the one or more mutable parameters comprise a router address and a cookie inserted by at least one router that processes the packet.

7. The node of claim 1 wherein the packet information further comprises a negotiation flag, the negotiation flag implying to intermediate routers that a QoS request is non-negotiable.

8. The node of claim 1 wherein the packet information further comprises a notification flag, the notification flag implying that the mobile node should be notified about a reduced QoS offering by intermediate nodes.

9. A method of establishing QoS for handoffs in a mobile IP network comprising at least one mobile node, at least two access nodes, a plurality of QoS controllers and a correspondent node, the method comprises:

receiving a QoS signaling packet at one of the plurality of QoS controllers when the mobile node is attempting to handoff between the at least two access nodes, the signaling packet including one or more classifier parameters, a previous QoS session ID, a new QoS session ID, and a sequence number;

determining whether the previous QoS session ID in the signaling packet matches any QoS session ID stored in one of the controller'"'"'s existing flow states; and

if so, updating the corresponding existing flow state of the controller with the classifier parameters, new QoS session ID and sequence number from the signaling packet.

10. The method of claim 9 wherein the QoS signaling packet further includes a previous node address and a cookie inserted by a previous node and wherein the method further includes extracting the previous node address and the cookie and storing the previous node address and cookie along with the updated existing flow state.

11. The method of claim 10 further comprising inserting a current node address and a new cookie into the signaling packet and forwarding the signaling packet to a next node.

12. The method of claim 9 wherein if the previous QoS session ID does not match any QoS session ID'"'"'s in the controller'"'"'s existing flow states, the controller creates a new flow state and stores the new QoS session ID and sequence number along with the new flow state.

13. The method of claim 10 wherein after extracting the previous node address and the cookie, the method comprises comparing the extracted cookie with a stored cookie value obtained from a previous communication from the previous node, and authenticating the signaling packet if the extracted cookie matches the stored cookie value.

14. The method of claim 9 further comprising identifying the controller receiving the signaling packet as being as a crossover router if, when QoS signaling is in the uplink direction, the controller is the first of the plurality of controllers to have the previous QoS session ID match a QoS session ID stored in the controller'"'"'s existing flow states.

15. The method of claim 9 further comprising identifying a previous controller to the controller receiving the signaling packet as being a crossover router if, when QoS signaling is in the downlink direction, the controller previous QoS session ID does not match a QoS session ID stored in the controller'"'"'s existing flow state.

16. The method of claim 14 further comprising the crossover router sending a TEAR DOWN message to nodes along a segment of a QoS data path not required, the TEAR DOWN message for tearing down QoS that is not required.

17. The method of claim 16 further comprising the nodes receiving the TEAR DOWN message authenticating the TEAR DOWN message based on a cookie in the TEAR DOWN message and a previous cookie stored in the corresponding existing flow state.

18. The method of claim 14 further comprising the crossover router sending a CONFIRM message to nodes along a new segment of a QoS data path, the CONFIRM message for confirming that the new segment has been established.

19. The method of claim 18 further comprising the nodes receiving the CONFIRM message authenticating the CONFIRM messages based on a cookie in the CONFIRM message and a previous cookie stored in the corresponding existing flow state.

20. The method of claim 9 wherein the signaling packet further includes a negotiation flag and the method further initiating a QoS less than what is requested by the signaling packet if the negotiation flag indicates that QoS is negotiable and the controller is unwilling to provide a requested QoS.

21. The method of claim 20 wherein the signaling packet further includes a notification flag and the method further includes indicating to the mobile node the reduced QoS if the notification flag indicates that the mobile node should be notified.

22. A method of authenticating a QoS message having mutable parameters the method comprising:

receiving the message at a node;

extracting a cookie included in the message by a previous node;

comparing a value of the extracted cookie with a cookie value stored in an existing flow state; and

authenticating the message if the extracted cookie value matches the stored cookie value;

else not authenticating the message.

23. The method of claim 22 wherein the message comprises a QoS signaling packet.

24. The method of claim 23 wherein the message comprises a TEAR DOWN message.

25. The method of claim 23 wherein the message comprises a CONFIRM message.

26. A method of authenticating whether a QoS signaling packet was generated by a mobile node in a mobile IP network, the signaling packet including a QoS session ID, a new care of address and a sequence number, the method comprising:

receiving the signaling packet at an intermediate node;

determining whether the QoS session ID in the signaling packet is a private key signature of a combination of the mobile node'"'"'s new care of address and the sequence number by performing a cryptographic verification using a mobile node public key; and

authenticating the signaling packet if the QoS session ID is the combination;

else not authenticating the signaling packet.

27. The method of claim 26 wherein the signaling packet further includes one or more mutable parameters for verifying nodes of a QoS data path.