Abstract: The invention provides a method for trust relationship detection between a core and access network for a user equipment. The gist is that a security tunnel establishment procedure is used so one entity, be it part of the core network or be it the user equipment itself, is provided with information to determine whether the access network is trusted or untrusted. The information may comprise a first IP address/prefix, which is initially assigned to the user equipment, upon attaching to the access network. The necessary information may further comprise a second IP address/prefix, which is an address/prefix that is allocated at a trusted entity of the core network. Depending which entity determines the trust relationship of the access network, it might be necessary to transmit either the first IP address/prefix or the second IP address/prefix or the first and the second IP address/prefix using the security tunnel establishment procedure.

Abstract: The invention relates to a method for packet switched data transmission in a local network, the local network comprising a mobile node and a plurality of interconnected connection anchor points each with a link at which the mobile node can attach. The method comprises the steps of detecting a movement of the mobile node from a first connection anchor point to a second connection anchor point, the mobile node communicating via a tunneled connection between the first and second connection anchor point, maintaining the existing tunneled connections between the second connection anchor point and the first connection anchor point, and enabling new connections between the mobile node and correspondent nodes using addresses that are topologically correct.

Abstract: The current invention relates to a method for a network attachment procedure and a user equipment in a wireless mobile network, the wireless mobile network comprising a user equipment with a temporary identity and at least one mobility management entity. The method comprises the steps of providing an estimation whether the user equipment is unknown at the mobility management entity and sending the user equipment's temporary identity during the network attachment procedure. If the user equipment has been estimated to be unknown at the at least one mobility management entity, the user equipment's identity is sent during the network attachment procedure. These steps are carried out by the user equipment.

Abstract: The invention relates to a method for routing packets in a system of packet-switched networks comprising a plurality of home agents, at least one mobile node and at least one correspondent node, the mobile node having at least a first home address and communicating with the correspondent node over a first of the plurality of home agents.

Abstract: A technology is disclosed in which, when a normal mobile node (that does not newly provide a dedicated function) is used, signaling for reconfiguring a tunnel during a mobile node movement is reduced and, furthermore, packet loss is reduced. In the technology, when an MN moves from under the control of an AR2 that is a movement origin to be under the control of an AR3 that is a movement destination, the AR3 receives an NS transmitted from the MN to the AR2. The AR3 that receives the NS destined to the AR2 transmits a “Location Update” to the AR2. The AR2 that receives the “Location Update” uses an MN management table of the relevant MN and creates “Prefix Information” and returns the “Prefix Information” to the AR3. A tunnel is established between access routers of the AR2 and AR3 through use of the “Prefix Information”, and a packet destined to the MN is transferred to the MN via the tunnel.

Abstract: The present invention relates to a method and computer-readable medium for loop detection in data packet communication utilizing a tunnel in a network comprising a plurality of nodes. The method comprises the steps of, when a first node transmits a data packet, encoding an identification of the first node in at least two header fields of the data packet to be transmitted, and when the first node receives a data packet, analyzing the at least two header fields of the data packet, deciding if a loop exists by determining if the data packet was sent by the first node itself, based on the analysis of the at least two header fields of the data packet.

Abstract: The current invention relates to a method for a network attachment procedure and a user equipment in a wireless mobile network, the wireless mobile network comprising a user equipment with a temporary identity and at least one mobility management entity. The method comprises the steps of providing an estimation whether the user equipment is unknown at the mobility management entity and sending the user equipment's temporary identity during the network attachment procedure. If the user equipment has been estimated to be unknown at the at least one mobility management entity, the user equipment's identity is sent during the network attachment procedure. These steps are carried out by the user equipment.

Abstract: A first aspect of the invention relates to a method for verifying an attachment of a mobile node to a network element in a network. A second aspect of the invention relates to a method to be implemented in a mobility anchor node, which detects whether a race condition between registration messages occurs and resolves the most recent location of a mobile node. A third aspect of the invention relates to a method for detecting whether a binding cache entry for a mobile at a correspondent node has been spoofed and to a method for registering a care-of address of a mobile node at a correspondent node. A fourth aspect of the invention relates to a method for providing from a mobile node to a local mobility anchor information on an attachment of a mobile node to a network element.

Abstract: A first aspect of the invention relates to a method for improving security at a local mobility anchor implementing both a network-based and a host-based mobility management scheme for managing the mobility of a mobile node. It suggests a method for verifying an attachment of a mobile node (MN) to a network element in a network. A second aspect of the invention relates to a method to be implemented in a mobility anchor node, which detects whether a race condition between registration messages occurs and resolves the most recent location of a mobile node. A third aspect of the invention relates to a method for detecting whether a binding cache entry for a mobile at a correspondent node has been spoofed and to a method for registering a care-of address of a mobile node at a correspondent node.

Abstract: The invention relates to a method for routing packets in a system of packet-switched networks using different internet protocol versions. The system comprises a plurality of home agents, at least one mobile node and at least one correspondent node. A first mobile node is configured with at least one topologically correct internet protocol address of a first internet protocol version and is located in a network supporting at least routing of packets having a header of the first internet protocol version. The method comprises the following steps. Communication is requested with a first correspondent node being configured with at least an internet protocol address of a second internet protocol version and being located in a network supporting at least the routing of packets having a header of the second internet protocol version, by an application on the first mobile node.

Abstract: The invention provides a method for trust relationship detection between a core and access network for a user equipment. The gist is that a security tunnel establishment procedure is used so one entity, be it part of the core network or be it the user equipment itself, is provided with information to determine whether the access network is trusted or untrusted. The information may comprise a first IP address/prefix, which is initially assigned to the user equipment, upon attaching to the access network. The necessary information may further comprise a second IP address/prefix, which is an address/prefix that is allocated at a trusted entity of the core network. Depending which entity determines the trust relationship of the access network, it might be necessary to transmit either the first IP address/prefix or the second IP address/prefix or the first and the second IP address/prefix using the security tunnel establishment procedure.

Abstract: The invention relates to a method for packet switched data transmission in a local network, the local network comprising a mobile node and a plurality of interconnected connection anchor points each with a link at which the mobile node can attach. The method comprises the steps of detecting a movement of the mobile node from a first connection anchor point to a second connection anchor point, the mobile node communicating via a tunnelled connection between the first and second connection anchor point, maintaining the existing tunnelled connections between the second connection anchor point and the first connection anchor point, and enabling new connections between the mobile node and correspondent nodes using addresses that are topologically correct.

Abstract: The present invention relates to a method and computer-readable medium for loop detection in data packet communication utilizing a tunnel in a network comprising a plurality of nodes. The method comprises the steps of, when a first node transmits a data packet, encoding an identification of the first node in at least two header fields of the data packet to be transmitted, and when the first node receives a data packet, analysing the at least two header fields of the data packet, deciding if a loop exists by determining if the data packet was sent by the first node itself, based on the analysis of the at least two header fields of the data packet.

Abstract: The present invention describes a method for signalling to a mobility anchor point a position of a mobile node in a network using a network-based mobility management scheme for managing the mobility of the mobile node, said method comprising receiving, by a network element, from the mobile node, during or after network authentication of the mobile node, a sequence number used by a process implementing a mobile node-based mobility management scheme for managing the mobility of the mobile node, and transmitting, by the network element, to the mobility anchor point a message on a position of the mobile node in the network, wherein said message comprises the received sequence number. A common sequence number variable for BU and PBU messages is used, so that the HA is able to determine a correct transmission order of PBU/BU messages based on the sequence number in the message.

Abstract: A technology is disclosed in which, when a normal mobile node (that does not newly provide a dedicated function) is used, signaling for reconfiguring a tunnel during a mobile node movement is reduced and, furthermore, packet loss is reduced. In the technology, when an MN moves from under the control of an AR2 that is a movement origin to be under the control of an AR3 that is a movement destination, the AR3 receives an NS transmitted from the MN to the AR2. The AR3 that receives the NS destined to the AR2 transmits a “Location Update” to the AR2. The AR2 that receives the “Location Update” uses an MN management table of the relevant MN and creates “Prefix Information” and returns the “Prefix Information” to the AR3. A tunnel is established between access routers of the AR2 and AR3 through use of the “Prefix Information”, and a packet destined to the MN is transferred to the MN via the tunnel.

Abstract: The current application concerns a method, mobile node, home agent and system for route optimisation between a mobile node and at least one correspondent node in a packet switched network, wherein a route via a first home agent is redirected via a second home agent. The mobile node sends an extended home test initiation message comprising following information: authentication data, an address of the correspondent node, a first home address and a second home address. The first home agent receives the extended home test initiation message and sends an extended home test message to the second home agent, the extended home test message comprising the information from the extended home test initiation message. The second home agent receives the extended home test message and a communication is routed between the mobile node and the at least one correspondent node via the second home agent.

Abstract: The invention relates to a method for fast configuring of a default router for a mobile node in a mobile communication system. A default router is used by a mobile node to transmit outgoing data to. The mobile node moves from a first to a second network area, which are respectively connected to a first and second router. In order to update the default router, after changing an attachment of the mobile node to the network, the new second router is adapted to transmit a notification to the mobile node, for changing its default router to the new router. According to the invention, the second router may also transmit a message to inform the mobile node about an expiration of the old first router. The new router may also send a message, including an indication about a new rust-hop router for the outgoing data of the mobile node.

Abstract: The invention relates to a method for routing packets in a system of packet-switched networks comprising a plurality of home agents, at least one mobile node and at least one correspondent node, the mobile node having at least a first home address and communicating with the correspondent node over a first of the plurality of home agents.