Packet transfer scheme using mobile terminal and router for preventing attacks using global address

• US 7,512,126 B2
• Filed: 07/01/2005
• Issued: 03/31/2009
• Est. Priority Date: 09/14/2000
• Status: Expired due to Fees

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Inoue, Atsushi
• Primary Examiner(s): HO, DUC CHI
• Application Number:
  US11/171,296
• Publication Number:
  US 20050237970A1
• Time in Patent Office: 1,369 Days
• Field of Search: 370/401, 370/338, 370/392, 370/466
• US Class Current: 370/392
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 61/5053 Lease time; Renewal aspects
• CPC Class Codes: H04L 61/5076 Update or notification mechanisms, e.g. DynDNS
• CPC Class Codes: H04L 61/5084 Providing for device mobility network addressing or numbering for mobility support in wireless networks H04W8/26; mobile IP H04W80/04
• CPC Class Codes: H04L 61/5092 by self-assignment, e.g. picking addresses at random and testing if they are already in use
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 28/02 Traffic management, e.g. flow control or congestion control
• CPC Class Codes: H04W 8/04 Registration at HLR or HSS [Home Subscriber Server]
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support

Abstract

In a mobile communication network providing an Internet service, the arrived packets are delivered from the nearest neighbor router device to the mobile terminal device according to the need such as when a prescribed application is activated or when a prescribed packet has arrived, by using message exchanges between the nearest neighbor router device and the mobile terminal device, so that it becomes possible to prevent the unnecessary packet attacks from the global Internet.

Claims

1. A method for operating a portable terminal having a TCP/IP module to communicate packets with a mobile communication network, comprising:

receiving a router advertisement message from a neighboring router in the mobile communication network, the router advertisement message containing a network prefix to be used for the mobile communication network;

generating a global address by combining the network prefix and a device ID which is assigned to the portable terminal;

transmitting a notify message to the router, the notify message containing the global address generated;

setting up the TCP/IP module to the global address for utilizing the global address in an application on the portable terminal;

transmitting a first message indicating a start of the application using the global address to the router, when a processing of the application is started; and

transmitting a second message indicating an end of the application using the global address to the router, when the processing of the application is ended.

2. The method according to claim 1, further comprising:

transmitting a router solicitation message to the router, when the global address is required for executing the application on the portable terminal, to receive a router advertisement message.

3. The method according to claim 1, wherein the global address is an IPv6 address.

4. The method according to claim 1, wherein the notify message contains the global address and a MAC address of the portable terminal.

5. The method according to claim 4, further comprising:

transmitting a deletion message to the router, the deletion message indicating deletion or discarding by the router of packets having the global address and the MAC address which are stored in a cache of the router.

6. A method for executing an application on a portable terminal having a TCP/IP module to communicate packets with a mobile communication network, comprising:

storing a network prefix assigned by a neighboring router, the network prefix being available to use the mobile communication network, and storing a device ID assigned to the portable terminal;

generating a global address by combining the network prefix and the device ID, when activating an application by the portable terminal;

transmitting a notify message to the router, the notify message containing the global address generated;

setting up the TCP/IP module to the global address;

transmitting a first message indicating a start of the application using the global address to the router, when a processing of the application is started; and

transmitting a second message indicating an end of the application using the global address to the router, when the processing of the application is completed.

7. The method according to claim 6, further comprising:

transmitting a router solicitation message to the router, when the global address is required for executing the application on the portable terminal; and

receiving a router advertisement message from the router, the router advertisement message containing the network prefix to be stored into a register of the portable terminal.

8. The method according to claim 6, wherein the global address is an IPv6 address.

9. The method according to claim 6, wherein the notify message contains the global address and a MAC address of the portable terminal.

10. The method according to claim 9, further comprising:

transmitting a deletion message to the router, the deletion message indicating deletion or discarding of packets designating the global address and the MAC address which are stored in a cache of the router.

11. The method according to claim 6, wherein the application uses an Internet service using the global address.