Abstract: Disclosed is a method providing secure mobility for a terminal in a mobile system comprising at least two IP based sub-networks. The method comprises to detect a change of the IP based sub-network by the terminal. The connection parameters of the terminal are updated so as to be connected with a new IP based sub-network. Further, the security requirements of the new IP based sub-network are detected, and the security associations of the terminal to the new IP based sub-network are adapted to the security requirements of the new IP based sub-network.

Abstract: The invention allows providing a fixed access point for a terminal device. One of multiple access points is assigned to serve as a fixed access point for a terminal device based on a received identifier of the terminal device. A notification about the assignment of the fixed access point is transmitted to at least one of the terminal device and a gateway node serving the terminal device. As a result, Mobile IP based handover between GPRS and WLAN will be seamless. Furthermore, the invention allows using a dedicated gateway for infected terminals to provide quarantined access to network services.

Abstract: A method for configuring a device for communication is disclosed. In the method the device accesses a communication network where after it may be detected at a network element that the device needs to be provided with at least one configuration parameter. Information regarding the at least one configuration parameter is then determined and sent to the device. The device can then be configured in accordance with information received from the network element.

Abstract: Session continuity is supported by placing suitable functionality in a communications device and a communications system. In a communications device, a first interface is provided for transmitting data via an access network. A virtual interface corresponding to the first interface also is provided. Communications via the access network take place using the first interface and sending data between the first interface and the virtual interface. In a communications network, it is detected that a communications device is establishing communications via an access network. A network address used earlier by the communications device is determined, and the network address is retained when the communications device communicates via the access network.

Abstract: The invention proposes a method for controlling a connection between a first network node and a second network node, wherein the connection is controlled by a packet filtering function filtering packets such that a packet is discarded in case a source address and/or a destination address do not comply with a filtering rule, wherein the packet filtering function is configured at a connection set up, and at least one of the first or second network node is adapted to change its address, the method comprising the steps of informing, the packet filtering function about the new address of the network node having changed its address, and updating the packet filter of the packet filtering function by using the new address of the network node having changed its address. The invention also proposes a corresponding network system comprising at least a network node and a packet filtering network element. Furthermore, the invention proposes a corresponding packet filtering network device.

Abstract: A method for ensuring continuity of a communication session when a user equipment hands over from a first communication network to a second cellular communication network is provided. The method, in one embodiment, includes the steps of performing an authentication procedure for a packet data session with the second network while still being attached to the first network and simultaneously performing a packet data session establishment procedure with the second network while still being attached to the first network.

Abstract: A mechanism for providing a mobile node with reliable information for location privacy decisions in connection with an address update process that gives the correspondent node a chance to deduce the location of the mobile node is provided. According to one embodiment of the invention, an indication is given when an address update process needs to be performed for optimizing routing between a mobile node and a correspondent node. In response to the indicating step, the correspondent node may be authenticated, the authentication yielding identity information about the correspondent node. Based on the identity information, a route optimization decision may be made based on whether or not the address update process is to be performed, and the address update process may be carried out depending on the decision.

Abstract: A method for performing a change of a connection of a mobile entity from a first network access entity to a second network access entity, wherein a global address of the first network access entity is not known to the mobile entity is provided. According to one embodiment, the method includes the step of sending a message including information for identifying the first network access entity from the mobile entity to the second network access entity which enables the second network entity to direct traffic to the first network entity. According to another embodiment, the invention also provides a method for the reverse direction. Namely, the invention provides a method for sending IP signaling from the mobile entity or from the first network access entity towards the second network access entity, whose global IP address is not known by the mobile entity or first network access entity.

Abstract: The invention relates to a method and system for managing data flow between Mobile Nodes (MNs), Access Routers (AR) and peer nodes (HA, CNs), wherein, when a Mobile Node makes handover from one Access Router (AR) to new Access Router (AR2, AR3, . . . ARn), a decision is made whether to command the first Access Router (AR1) to act as an Anchor Access Router and forward data from the peer nodes (HA, CNs) to the Mobile Node via the new Access Router (AR2, AR3, . . . ARn), or to send an update of the new position of the mobile node to a peer node (HA, CN). The decision is made based on at least one of the following criterias: -the number of peer nodes (HA,CN1, CN2, . . . CNn) to which it has ongoing sessions, -the time elapsed from a previous update sent to the peer nodes (HA, CNs), -the traffic activity between the peer node(s) (HA, CN1, CN2, . . .

Abstract: The present invention concerns a method and system for optimizing transport efficiency between a Mobile Node and a Correspondent Node in a Mobile IP network. A short Mobile Node Identifier is assigned to the Mobile Node. A Mobile Node Identifier Destination Option header comprising the assigned Mobile Node Identifier is used instead of the prior art Home Address Destination Option header in subsequent packets between the Mobile Node and the Correspondent Node.