Mobile IP over VPN communication protocol

• US 8,594,024 B2
• Filed: 03/21/2012
• Issued: 11/26/2013
• Est. Priority Date: 11/15/2002
• Status: Expired due to Fees

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Khalil, Mohamed, Muhanna, Ahmad
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): Wong, Blanche
• Application Number:
  US13/506,038
• Publication Number:
  US 20120195266A1
• Time in Patent Office: 615 Days
• Field of Search: None
• US Class Current: 370/328
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]

Abstract

The present invention supports a communication protocol for transmission of information packets between a mobile node and a virtual private network. Information packets are encapsulated and decapsulated along the route as the information packet is forwarded among the various networks on its path to the destination address; either the mobile node on a foreign network or a correspondence node on a virtual private network. A home agent on the virtual private network supports transmitting the information packets, and the information packets are transmitted from the virtual private network from the home agent or a virtual private network gateway.

Claims

1. A home network for communicating within a communications network, wherein the communications network comprises the home network and a foreign network, wherein the home network comprises:

a virtual network;

a correspondence node in the virtual private network;

a home agent in the virtual private network; and

a security gateway between the virtual private network and the home network;

wherein the home agent is configured to;

receive an information packet from the correspondence node;

encapsulate the received information packet with a tunnel address corresponding to the security gateway; and

transmit the encapsulated information packet to the security gateway using the tunnel address; and

wherein the security gateway is configured to forward the encapsulated packet to the mobile node via the foreign network without using an external home agent.

2. The home network of claim 1, further comprising:

a VPN (virtual private network);

wherein the security gateway is VPN gateway, and wherein the tunnel address is an inner tunnel address of the VPN.

3. The home network of claim 1, wherein the security gateway is configured to forward the encapsulated packet to the mobile node via the foreign network without using an external home agent.

4. The home network of claim 1, wherein the security gateway is further configured to encrypt the encapsulated packet, and transmit the encrypted encapsulated packet to the mobile node via the foreign network.

5. The home network of claim 1, further comprising a virtual private network (VPN), wherein the correspondence node is part of the VPN, and wherein the correspondence node is configured to transmit the information packet to the home agent.

6. The home network of claim 1, wherein:

the security gateway is configured to encrypt the encapsulated packet, and forward the encrypted encapsulated packet to the home agent; and

the home agent is configured forward the encrypted encapsulated packet to the mobile node via a foreign agent.

7. The home network of claim 6, wherein the home agent is configured to forward the encrypted packet out of a virtual private network of the home network.

8. The home network of claim 7, wherein the home agent is configured to append a virtual private network inner tunnel address to the encrypted packet before forwarding the encrypted packet out of the virtual private network to the mobile node.

9. The home network of claim 7, wherein the home agent is configured to forward the encrypted packet out of a virtual private network of the home network using a care-of address of the mobile node.

10. The home network of claim 9, wherein the home agent is configured to append the care-of address to the encrypted packet before forwarding the encrypted packet out of virtual private network to the mobile node.

11. The home network of claim 1, wherein the security gateway is configured to forward the encrypted packet out of a virtual private network of the home network.

12. The home network of claim 1, wherein the security gateway is configured to append a virtual private network inner tunnel address to the encrypted packet before forwarding the encrypted packet out of the virtual private network to the mobile node.

13. The home network of claim 11, wherein the security gateway is configured to forward the encrypted packet out of a virtual private network of the home network using a care-of address of the mobile node.

14. The home network of claim 13, wherein the security gateway is configured to append the care of address to the encrypted packet before forwarding the encrypted packet out of virtual private network to the mobile node.

15. The home network of claim 1, wherein the security gateway is a VPN (virtual private network) gateway.

16. The home network of claim 1, wherein the tunnel address is an inner tunnel address of a virtual private network.

17. The home network of claim 1, wherein the communications network comprises a wireless network.

18. The home network of claim 1, wherein the home network comprises a wireless network.