Methods of network access configuration in an IP network

• US 20070086382A1
• Filed: 10/17/2005
• Published: 04/19/2007
• Est. Priority Date: 10/17/2005
• Status: Abandoned Application

• Current Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Narayanan, Vidya, Nakhjiri, Madjid, Venkitaraman, Narayanan
• Application Number:
  US11/251,728
• Publication Number:
  US 20070086382A1
• Time in Patent Office: Days
• US Class Current: 370/331
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]

Abstract

Apparatus performs a method that includes the steps of: receiving (210) a location parameter request for a mobile entity; determining (220) a set of location parameters corresponding to the mobile entity, the set of location parameters comprising at least an identification of a current point of attachment of the mobile entity; and communicating (230) a response comprising at least a portion of the determined set of location parameters. Another method includes the steps of: receiving (310) a message comprising a set of location parameters corresponding to the mobile entity, wherein the set of location parameters is based on an identification of a current point of attachment of the mobile entity; and setting (320) a network access configuration for the mobile entity based on the set of location parameters.

Claims

1. A method comprising the steps of:

receiving allocation parameter request for a mobile entity;

determining a set of location parameters corresponding to the mobile entity, the set of location parameters comprising at least an identification of a current point of attachment of the mobile entity; and

communicating a response comprising at least a portion of the determined set of location parameters.

2. The method of claim 1, wherein:

the location parameter request is included in at least one of a Mobile Internet Protocol (IP) registration request, a Mobile IP binding update, an Internet Key Exchange (IKE) request, a Dynamic Host Configuration Protocol (DHCP) request and an Authentication Authorization and Accounting (AAA) request;

the response is included in at least one of a Mobile IP registration reply, a Mobile IP binding acknowledgement, an IKE reply, a DHCP reply and an AAA reply; and

the set of location parameters is determined based on information included in one of the registration request, the binding update, the IKE request, the DHCP request and the AAA request.

3. The method of claim 2, wherein the information included in at least one of the registration request, the binding update, the IKE request, the DHCP request and the AAA request comprises a care-of address corresponding to the mobile entity.

4. The method of claim 3, wherein the care-of address for the mobile entity has undergone a network address translation, the method further comprising the steps of:

detecting a network address translation of the care-of address for the mobile entity; and

determining the identification of the current point of attachment of the mobile entity based on the network address translation of the care-of address for the mobile entity.

5. The method of claim 1, wherein the response comprises the identification of the current point of attachment of the mobile entity.

6. The method of claim 1, wherein the set of location parameters further comprises a network access configuration setting instruction corresponding to the mobile entity based on the identification of the current point of attachment of the mobile entity, and the response comprises the network access configuration setting instruction for use in setting a network access configuration in the mobile entity.

7. The method of claim 6, wherein the network access configuration setting instruction comprises an instruction to the mobile entity to bypass a Virtual Private Network (VPN) tunnel when communicating at least a portion of its outgoing traffic.

8. The method of claim 7, wherein the network access configuration setting instruction is a temporary instruction based upon at least one reconfiguration parameter.

9. The method of claim 8, wherein the at least one reconfiguration parameter comprises communicating a subsequent instruction to reconfigure the network access configuration in the mobile entity.

10. The method of claim 1, wherein the location parameter request and the response are secured.

11. Apparatus for location determination comprising:

a storage device; and

a processor coupled to the storage device executing instructions stored in the storage device for causing the apparatus to perform the steps of;

receiving a location parameter request for a mobile entity;

determining a set of location parameters corresponding to the mobile entity, the set of location parameters comprising at least an identification of a current point of attachment of the mobile entity; and

communicating a response comprising at least a portion of the determined set of location parameters.

12. The apparatus of claim 11 comprising at least one of a home agent, a location server, an Authentication Authorization and Accounting (AAA) server, and a Virtual Private Network (VPN) gateway.

13. A method comprising the steps of:

receiving a message comprising a set of location parameters corresponding to a mobile entity, wherein the set of location parameters is based on an identification of a current point of attachment of the mobile entity; and

setting a network access configuration for the mobile entity based on the set of location parameters.

14. The method of claim 13 further comprising the step of communicating a location parameter request for the mobile entity, wherein the message is a response to the location parameter request.

15. The method of claim 14, wherein the location parameter request is included in at least one of a Mobile Internet Protocol (IP) registration request, a Mobile IP binding update, an Internet Key Exchange (IKE) request, a Dynamic Host Configuration Protocol (DHCP) request and an Authentication Authorization and Accounting (AAA) request, and the response is included in at least one of a Mobile IP registration reply, a Mobile IP binding acknowledgement, an IKE reply, a DHCP reply and an AAA reply.

16. The method of claim 13, wherein the method is performed in one of a mobile router and a mobile host.

17. The method of claim 16, wherein the mobile host is a mobile network node.

18. The method of claim 13, wherein the set of location parameters comprises the identification of the current point of attachment of the mobile entity, the method further comprising the step of determining the network access configuration for the mobile entity.

19. The method of claim 13, wherein the network access configuration comprises the mobile entity bypassing a Virtual Private Network (VPN) tunnel when communicating at least a portion of its outgoing traffic.

20. The method of claim 13, wherein the set of location parameters comprises a network access configuration setting instruction corresponding to the mobile entity based on the identification of the current point of attachment of the mobile entity, and the network access configuration for the mobile entity is set based on the network access configuration setting instruction.