Location-independent packet routing and secure access in a short-range wireless networking environment

• US 7,113,599 B2
• Filed: 10/18/2003
• Issued: 09/26/2006
• Est. Priority Date: 09/08/2000
• Status: Expired due to Fees

• Current Assignee: Reefedge Networks LLC (IPNav)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Singhal, Sandeep Kishan, Park, Yoonho, Gopal, Ajei Sarat, Neves, Richard Kent, Anand, Rangachari
• Primary Examiner(s): Peeso, Thomas R.
• Application Number:
  US10/688,576
• Publication Number:
  US 20040086123A1
• Time in Patent Office: 1,074 Days
• Field of Search: 380/270, 380/37
• US Class Current: 380/270
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/25 of the same type
• CPC Class Codes: H04L 61/2521 Translation architectures other than single NAT servers
• CPC Class Codes: H04L 61/2539 Hiding addresses; Keeping addresses anonymous
• CPC Class Codes: H04L 61/255 Maintenance or indexing of mapping tables
• CPC Class Codes: H04L 61/5084 Providing for device mobility network addressing or numbering for mobility support in wireless networks H04W8/26; mobile IP H04W80/04
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 40/00 Communication routing or communication path finding
• CPC Class Codes: H04W 8/12 between location registers or mobility servers
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]
• CPC Class Codes: H04W 84/10 Small scale networks; Flat hierarchical networks
• CPC Class Codes: H04W 88/08 : Access point devices

Abstract

The present invention provides methods, systems, and computer program instructions for providing location-independent packet routing and secure access in a wireless networking environment (such as that encountered within a building), enabling client devices to travel seamlessly within the environment. Each client device uses a constant address. An address translation process that is transparent to the client and server is automatically performed as the device roams through the environment, enabling efficient client migration from one supporting access point to another. The secure access techniques provide user-centric authentication and allow policy-driven packet filtering, while taking advantage of encryption capabilities that are built in to the hardware at each endpoint.

Claims

1. A method of enabling location-independent packet routing in a short-range wireless networking environment, comprising steps of:

providing one or more portable client devices, each of the client devices identified by a constant client address and equipped with a short-range wireless communications capability for communicating in the short-range wireless networking environment;

providing one or more application servers, each of the application servers equipped for communicating over the short-range wireless networking environment;

transmitting a packet from a selected one of the application servers to a selected one of the client devices, wherein the transmitted packet is received at a home agent associated with the selected client device;

forwarding, by the home agent, the received packet to a foreign agent through which the selected client device is currently communicating;

receiving, by the foreign agent, the forwarded packet; and

forwarding, by the foreign agent, the received forwarded packet to the selected client device.

2. The method according to claim 1, wherein a fixed host is chosen as the home agent associated with the selected client device.

3. The method according to claim 1, wherein an identification of the selected one of the client devices determines which of a plurality of home agents is associated with the selected client device.

4. The method according to claim 1, wherein an identification of a user of the selected client device determines which of a plurality of home agents is associated with the selected client device.

5. The method according to claim 1, wherein a central server is selected as the home agent associated with the selected client device.

6. The method according to claim 1, wherein the step of forwarding by the home agent further comprises the step of consulting a repository to determine through which of a plurality of foreign agents the selected client device is currently communicating.

7. A method of enabling location-independent packet routing in a short-range wireless networking environment, comprising steps of:

providing one or more portable client devices, each of the client devices identified by a constant client address and equipped with a short-range wireless communications capability for communicating in the short-range wireless networking environment;

providing one or more application servers, each of the application servers equipped for communicating over the short-range wireless networking environment;

transmitting a packet from a selected one of the client devices to a selected one of the application servers, wherein the transmitted packet is received at a foreign agent through which the selected client device is currently communicating; and

forwarding, by the foreign agent, the received packet to the selected application server.

8. The method according to claim 7, further comprising the steps of:

consulting a repository, responsive to receiving the transmitted packet, to determine a network address and port number to be used for identifying the selected client device;

modifying the received packet to use the determined network address and port number in place of a client network address and port number contained therein; and

using the modified packet in the forwarding step.

9. A method of enabling location-independent packet routing in a short-range wireless networking environment, comprising steps of:

providing one or more portable client devices, each of the client devices identified by a constant client address and equipped with a short-range wireless communications capability for communicating in the short-range wireless networking environment;

providing one or more application servers, each of the application servers equipped for communicating over the short-range wireless networking environment; and

transmitting packets between selected ones of the client devices and selected ones of the application servers using intermediary agents that enable transparent roaming by at least one of the selected client devices and/or the selected application servers.

10. The method according to claim 9, wherein the intermediary agents enable the transparent roaming using address translation of source addresses in outbound ones of the transmitted packets and of destination addresses in inbound ones of the transmitted packets.

11. The method according to claim 10, wherein at least two of the selected client devices share a particular home agent.

12. The method according to claim 11, wherein at least two of the selected client devices share a particular home agent.

13. The method according to claim 9, wherein the intermediary agents include a home agent associated with each of the selected client devices.

14. The method according to claim 13, wherein the home agent associated with at least one of the selected client devices is determined using administrative policy.

15. The method according to claim 11, further comprising the step of dynamically changing the home agent associated with at least one of the selected client devices.

16. The method according to claim 15, wherein the dynamically changing step occurs responsive to a failure of the home agent associated with the at least one selected client device.

17. The method according to claim 15, wherein the dynamically changing step further comprises the steps of:

dynamically assuming, by a new home agent to be associated with the at least one selected client device, a network address used to identify the home agent that was previously associated with the at least one selected client device; and

dynamically updating a repository which records the association of the previous home agent with the at least one selected client device, such that the repository now records the association of the new home agent with the at least one selected client device.

18. A system for enabling Location-independent packet routing in a short-range wireless networking environment, comprising:

one or more portable client devices, each of the client devices identified by a constant client address and equipped with a short-range wireless communications capability for communicating in the short-range wireless networking environment;

one or more application servers, each of the application servers equipped for communicating over the short-range wireless networking environment; and

intermediary agents for transparently transmitting packets between selected ones of the client devices and selected ones of the application servers even though at least one of the selected client devices and/or the selected application servers may roam from one location to another in the short-range wireless networking environment.

19. Computer program instructions embodied on one or more computer readable media, the computer program instructions adapted for enabling location-independent packet routing in a short-range wireless networking environment and comprising:

computer program instructions for transmitting a packet from a selected one of one or more portable client devices to a selected one of one or more application servers, each of the client devices and application servers equipped for communicating in the short-range wireless networking environment, wherein the transmitted packet is received at a foreign agent through which the selected client device is currently communicating; and

computer program instructions for forwarding, by the foreign agent, the received packet to the selected application server.