Abstract: The present invention relates to a 5G or pre-5G communication system for supporting high data throughput beyond the 4G communication systems such as LTE. A method for a server for supporting the mobility of a user equipment (UE) in a mobile communication network comprises the steps of: establishing an IP flow with the UE utilizing a first IP address to transceive data; receiving a message comprising a second IP address allocated to the UE and an identifier for the IP flow; generating a tunnel interface for communicating with the UE having the second IP address as the ending IP address, and binding the IP flow allocated to the identifier to the generated tunnel interface; and transceiving data with the UE by means of the tunnel interface.

Abstract: A method and a device for managing mobility of a mobile station in an Internet Protocol (IP) based network are provided. The method includes receiving a request for allocation of an IP address from an application, determining a type of IP address to be allocated to the application based on the request for the allocation of the IP address, and allocating the determined type of IP address to the application.

Abstract: The present invention relates to a 5G or pre-5G communication system for supporting high data throughput beyond the 4G communication systems such as LTE. A method for a server for supporting the mobility of a user equipment (UE) in a mobile communication network comprises the steps of: establishing an IP flow with the UE utilizing a first IP address to transceive data; receiving a message comprising a second IP address allocated to the UE and an identifier for the IP flow; generating a tunnel interface for communicating with the UE having the second IP address as the ending IP address, and binding the IP flow allocated to the identifier to the generated tunnel interface; and transceiving data with the UE by means of the tunnel interface.

Abstract: A method for routing data by a Corresponding Mobility Agent (CMA) in a mobile communication system is provided. The method includes managing mobility for a Mobile Station (MS) with a Mobile Access Gateway (MAG), and routing a data packet between a Corresponding Node (CN) and the MS based on a location of the MS, wherein the CMA is mapped to an application server which provides an application service.

Abstract: A method for generating a key hierarchy by a MS in a wireless network is provided. The method includes transmitting an authentication request message to a new BS, receiving an authentication response message as a response message to the authentication request message from the new BS, determining whether to perform a full authentication operation with a H3A server based on the authentication response message, performing the full authentication operation or a crypto-handshake operation with the H3A server based on the determining result, after performing the full authentication operation or the crypto-handshake operation, determining whether a first expected signature value received from the new BS is identical to a first expected signature value calculated by the MS, and if the first expected signature value received from the new BS is equal to a first expected signature value calculated by the MS, determining that an authentication for the new BS has succeeded.

Abstract: A method for optimizing a data-path by a source Base Station (BS) in a mobile communication network includes determining whether a tunnel among new BSs is set up while tracking a data-flow for a Mobile Station (MS), if the tunnel among the new BSs is set up, determining whether there is a bounce-back, if there is at least one bounce-back, transmitting a first message for detecting a root of an arbitrary bounce-back among the at least one bounce-back and setting up a short-cut tunnel to other end of the arbitrary bounce-back, and after transmitting the first message, receiving a second message including bounce-back root information indicating the root of the arbitrary bounce-back from the other end of the arbitrary bounce-back. Other various embodiments including a source BS, a target BS, and a backhaul network are also disclosed.

Abstract: An apparatus and a method for access authentication of a mobile station in a wireless communication system are provided. The method includes receiving a session certificate for the access authentication from a core network, transmitting the session certificate to a new access network during a handover to the new access network, and receiving an authentication result based on the session certificate from the new access network.

Abstract: A method and a device for managing mobility of a mobile station in an Internet Protocol (IP) based network are provided. The method includes receiving a request for allocation of an IP address from an application, determining a type of IP address to be allocated to the application based on the request for the allocation of the IP address, and allocating the determined type of IP address to the application.

Abstract: An apparatus and a method for access authentication of a mobile station in a wireless communication system are provided. The method includes receiving a session certificate for the access authentication from a core network, transmitting the session certificate to a new access network during a handover to the new access network, and receiving an authentication result based on the session certificate from the new access network.

Abstract: A method for generating a key hierarchy by a MS in a wireless network is provided. The method includes transmitting an authentication request message to a new BS, receiving an authentication response message as a response message to the authentication request message from the new BS, determining whether to perform a full authentication operation with a H3A server based on the authentication response message, performing the full authentication operation or a crypto-handshake operation with the H3A server based on the determining result, after performing the full authentication operation or the crypto-handshake operation, determining whether a first expected signature value received from the new BS is identical to a first expected signature value calculated by the MS, and if the first expected signature value received from the new BS is equal to a first expected signature value calculated by the MS, determining that an authentication for the new BS has succeeded.

Abstract: A method for optimizing a data-path by a source Base Station (BS) in a mobile communication network includes determining whether a tunnel among new BSs is set up while tracking a data-flow for a Mobile Station (MS), if the tunnel among the new BSs is set up, determining whether there is a bounce-back, if there is at least one bounce-back, transmitting a first message for detecting a root of an arbitrary bounce-back among the at least one bounce-back and setting up a short-cut tunnel to other end of the arbitrary bounce-back, and after transmitting the first message, receiving a second message including bounce-back root information indicating the root of the arbitrary bounce-back from the other end of the arbitrary bounce-back. Other various embodiments including a source BS, a target BS, and a backhaul network are also disclosed.

Abstract: A method for routing data by a Corresponding Mobility Agent (CMA) in a mobile communication system is provided. The method includes managing mobility for a Mobile Station (MS) with a Mobile Access Gateway (MAG), and routing a data packet between a Corresponding Node (CN) and the MS based on a location of the MS, wherein the CMA is mapped to an application server which provides an application service.

Abstract: The present invention relates to a wireless network, and more particularly, a method (*“and system”?*) which a mobile station discovers a neighbor network in an Internet protocol based wireless network, a network management server for enabling the method, and a method of operating the network management server.

Abstract: A method and apparatus for performing a multiple Pre-Shared Key (PSK) based authentication in a single procedure is described, where the multiple PSK based authentication generates a combined credential in a terminal by using a plurality of credentials including a user identifier and the PSK, and authenticates the terminal in an authentication server by using the combined credential.

Abstract: A method and apparatus for authenticating a mobile terminal are provided. A list of potential Network Access Servers (NASs) corresponding to a NAS are maintained in a backend authentication server, authorization information corresponding to each of the potential NASs is transmitted, from the backend authentication server to each of the potential NASs, when the mobile terminal is authenticated via the NAS. The mobile terminal detects whether a new NAS is pre-authenticated, when the mobile terminal moves to a domain of the new NAS, the new NAS detects whether the mobile terminal is pre-authenticated, and the new NAS authenticates the mobile terminal via a Pre-Shared Key (PSK) method, when the mobile terminal and the new NAS are pre-authenticated.

Abstract: Disclosed is a system and a method for communication using different IPs, i.e. a mobile IP supporting mobility and a simple IP, according to the service by a UE. The method includes network initiated IP allocation (i.e. the network allocates different IPs to the UE) and UE initiated IP allocation (i.e. the UE directly requests an IP corresponding to a specific service). As such, the IP is selected and used based on consideration of continuity of the service to be supported by the UE.

Abstract: A Protocol for carrying Authentication for Network Access (PANA) authentication system is provided. The system includes: a PANA client (PaC) which establishes, with a PANA authentication agent (PAA), a first PANA session and a second PANA session independent of the first PANA session, and transmits, to the PAA, a PANA update request packet requesting a binding of the first PANA session and the second PANA session; and a PAA which determines whether the first PANA session and the second PANA session are associated with an identical PaC in response to the PANA update request packet received from the PaC.

Abstract: An apparatus and method for performing local routing in a mobile communication system. In accordance with the method, if a flow between a first Mobile Station (MS) and a second MS is a local routing candidate, an Access Serving Network GateWay (ASN-GW) receives an AAA request message including information indicating start of local routing from an Authorization, Authentication and Accounting (AAA) server, and performs the local routing between the first MS and the second MS after transmitting to the AAA server an AAA response message including information indicating that the local routing will start in response to the AAA request message. The local routing is based on consent among entities involved in the local routing.

Abstract: A Master Session Key (MSK) refresh in a wireless communication system is provided.

Abstract: Disclosed is a system and a method for communication using different IPs, i.e. a mobile IP supporting mobility and a simple IP, according to the service by a UE. The method includes network initiated IP allocation (i.e. the network allocates different IPs to the UE) and UE initiated IP allocation (i.e. the UE directly requests an IP corresponding to a specific service). As such, the IP is selected and used based on consideration of continuity of the service to be supported by the UE.