Secure wireless mobile communications

• US 20040103311A1
• Filed: 11/27/2002
• Published: 05/27/2004
• Est. Priority Date: 11/27/2002
• Status: Abandoned Application

• Current Assignee: Telcordia Technologies Incorporated (Telefonaktiebolaget LM Ericsson)
• Original Assignee: Telcordia Technologies Incorporated (Telefonaktiebolaget LM Ericsson)
• Inventors: Wong, Kuok-Shoong, Joa-Ng, Mario, Atkins, Derek, Barton, Melbourne
• Application Number:
  US10/305,817
• Publication Number:
  US 20040103311A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/164 at the network layer

Abstract

Secure wireless communications for a mobile host over any wireless interface within a wireless network is provided by a security gateway. The security gateway is situated and configured within the mobile host'"'"'s home network of the wireless network such that it provides the only point of access between the wireless network and the home network. Additionally, the security gateway is separate and distinct from the mobile host'"'"'s home agent within the home network. A single tunnel mode security association is established between the mobile host'"'"'s wireless interface and the security gateway'"'"'s network interface on the home network. This single tunnel mode security association remains established as the mobile host moves between foreign networks and provides secure wireless communications to the mobile host whether the mobile host is in the home network or the foreign networks.

Claims

1. A security gateway for a wireless communications network that comprises a home network and a plurality of foreign networks, the home and foreign networks being interconnected by a backbone network, the security gateway comprising:

at least two network interfaces wherein the first interface is intended to be connected to the backbone network and the second interface is intended to be connected to the home network and wherein the security gateway provides the only point of access to the home network;

a routing module for forwarding data packets between the first and the second interfaces; and

a security processing module wherein the security processing module maintains a single tunnel mode security association with a mobile host intended to be associated with the home network and wherein the intended single tunnel mode security association with the mobile host provides the mobile host with secure communications over any wireless interface through which the mobile host communicates in the wireless network.

2. The security gateway of claim 1 further comprising a security server module, which provides the mobile host with security association management data and secure keys for the mobile host'"'"'s intended security association.

3. The security gateway of claim 1 wherein the security processing module maintains a plurality of single tunnel mode security associations with a plurality of mobile hosts.

4. A wireless communications network comprising:

a home network with one or more wireless interfaces for providing access to a mobile host associated with the home network;

a plurality of foreign networks each comprising one or more wireless interfaces for providing access to the mobile host when the mobile host moves to the foreign networks; and

a backbone network interconnecting the home network and plurality of foreign networks;

said home network including a security gateway that interfaces the home network to the backbone network, wherein the security gateway comprises a security processing module that maintains a single tunnel mode security association with the mobile host and wherein the single tunnel mode security association provides the mobile host with secure communications over the home network wireless interfaces and the wireless interfaces of the plurality of foreign networks.

5. The wireless communications network of claim 4 wherein the home network comprises a home agent with a mobility management protocol that assists the mobile host in moving between the home network and foreign networks.

6. The wireless communications network of claim 5 wherein the mobility management protocol is Mobile IP (Internet Protocol) and the security processing module executes IPSec.