Patent Application
20090313379
The present invention relates to packet communication in a mobile environment and in particular to a method, infrastructure node, mobile node and network in a mobile IP enabled network.
In the ever increasing mobile communication arena packet data based communication protocols are becoming increasingly important. The users have a desire to be able to communicate when and where they chose and preferably with mobility possibilities. In order to provide high quality communication for the users, the service providers are providing a multitude of communication protocols and the devices used for communication also have a multitude of communication interfaces. However, the users have a desire to keep connections open when changing between different communication protocols and/or different communication gateways (such as different base stations or wireless access points). For this purpose different solutions has been proposed for handling roaming and handover between different communication gateways when the user moves from one location to another. One such solution involves an Internet Protocol (IP) for mobility, the so called Mobile IP standard (MIP).
Mobile IP (v4 and v6) is a protocol defined by IETF that allows IP packets to reach a mobile node independent of where the mobile node attaches to an IP network, e.g. the Internet. Without Mobile IP (or alternate mobility solution), packets destined to a mobile node's IP address will be routed using the regular IP routing mechanisms to the network where the IP address is topologically located (the “home network”). However, a mobile node may, when away from home, connect to a different network. Mobile IP solves the routing problem by introducing a mobility agent at the home network (“Home Agent”) that registers the current location of the mobile node and forwards all traffic that arrives at the home network to the mobile nodes current point of attachment, the so-called Care-of-Address.
Work is ongoing in 3GPP to define multi access mobility to integrate 3GPP with non-3GPP access technologies. MIP is a candidate that is considered in 3GPP to solve multi access mobility.
In Mobile IP, IP addresses are used extensively to identify the different actors such as Home Agent (HA), Foreign Agent (FA) and Mobile Node (MN). Those IP addresses may reveal information about the network topology, the number of network entities etc. If Mobile IP is deployed in commercial scale in 3G mobile networks, this is a problem. The mobile operators traditionally want to hide such information from competitors. If MIP shall be used as multi access mobility protocol in 3GPP, it would therefore be beneficial if Mobile IP could be deployed without revealing IP address information about the core network entities.
Even though the MIP client in the terminal knows the address it does not mean the address is directly visible to the end-user, the MIP client does not need to be available to the end-user. But, it is possible to hack an application in a laptop and also to hack the phone to reveal information.
In some cases, it may be accepted to exchange IP address information, e.g. between trusted roaming partners. However, it should be avoided to reveal such information to anyone, in particular to end-users. As an example, in a GPRS network, the IP addresses of the SGSN and GGSN entities are not known by the end-user terminal. The IP addresses may however be known by roaming partners.
The table below shows which entities know about different IP addresses. A “*” indicates where an IP address of a core network entity is revealed to the end user.
The object of the present invention is to provide such a tool that remedies some of the above mentioned problems, this is done in a number of ways wherein according to a first aspect, a communication infrastructure node in a mobile communication network is provided, and arranged to communicate with at least one mobile node with a first communication protocol and at least one host server, the infrastructure node further arranged to communicate with the mobile node with a second communication protocol in a packet based mobility enabled network, the infrastructure node comprising a processor arranged with functionality for acting as a Care-of-Address (CoA) identifying device for connecting a host address in the second communication protocol to a network identifier for hiding network topology information in the second communication protocol network for the mobile node connected to the infrastructure node and the processor further arranged to use session management signaling of the first communication protocol as bearer of Internet Protocol (IP) based mobility control information of the second communication protocol. The network identifier may optionally be temporary.
The node may be arranged to receive registration request information sent from the mobile node together with session management information. The node may be further arranged to send registration response information to the mobile node together with session management information.
The network identifier may be arranged as to be translated using at least one of a domain name server (DNS) or AAA server (Authentication, Authorization, and Accounting). The session management signaling may be a Packet Data Protocol (PDP) context. The session management signaling may be at least one of IKE (Internet Key Exchange) and IPSec (IP security protocol) SA (Security Association).
The node may be further arranged to replace a home agent IP address from a packet header in a data packet before forwarding the data packet to the mobile node. The node may be further arranged to recalculate a checksum, based on home agent IP address, provided in data packets forwarded to the mobile node.
The packet based mobility protocol may be at least one of Mobile Internet Protocol, i.e. MIP, Host Identity Protocol, i.e. HIP, or IKEv2 Mobility and Multihoming, i.e. MOBIKE.
According to a second aspect of the present invention, a method for hiding topology information in a mobile communication network is provided, comprising a first and second communication protocol, the method comprising the steps of:
The method may be arranged to receive registration request information sent from the mobile node together with session management messages. The method may be further arranged to send registration response information to the mobile node together with session management messages.
The network identifier may be arranged as to be translated using at least one of a domain name server (DNS) or AAA server (Authentication, Authorization, and Accounting).
The session management message may be a Packet Data Protocol (PDP) context.
The session management message may be at least one of IKE (Internet Key Exchange) and IPSec (IP security protocol) SA (Security Association).
The method may be arranged to replace a home agent IP address from a packet header in a data packet before forwarding the data packet to the mobile node. The method may be arranged to recalculate a checksum, based on home agent IP address, provided in data packets forwarded to the mobile node.
The second communication protocol may be at least one of Mobile Internet Protocol, i.e. MIP, Host Identity Protocol, i.e. HIP, or IKEv2 Mobility and Multihoming, i.e. MOBIKE.
A third aspect of the present invention, a mobile node for use in a mobile communication network is provided, wherein the mobile node is arranged with processing means for connecting to an infrastructure node in the communication network with specific session management control messages for a first communication protocol for the mobile communication network and adding mobile, Internet Protocol, i.e. IP, control messages for a second communication protocol to the session management messages.
The second communication protocol may be at least one of Mobile Internet Protocol, i.e. MIP, Host Identity Protocol, i.e. HIP, or IKEv2 Mobility and Multihoming, i.e. MOBIKE.
One of the advantages of the present invention is thus that it is possible to hide topology information about the infrastructure from the user or user equipment which is of interest of the network owners and operators.
These and other aspects of the invention will be apparent from and elucidated with reference to the embodiments described hereinafter.
In the following the invention will be described in a non-limiting way and in more detail with reference to exemplary embodiments illustrated in the enclosed drawings, in which:
In
The present invention concerns a communication method for mobile nodes that connect to communication gateways different from a set home location to which the mobile node is logically attached, it is in these cases interesting for the user of the mobile node to be able to connect even though it is not in the home network and still maintain a mobile environment, i.e. for instance when moving 10 from one gateway 3 to another gateway 5 and thus changing communication path 9 while still keeping an established connection to an application server 8. This kind of mobility protocol is for instance provided for by Mobile IP (MIP), which is well known in the art.
Returning now to
The main objective of the present invention is to hide topology information of the infrastructure network, for instance IP address information about Foreign Agent and Home Agent to the end-user terminal (Mobile Node), but also hide information about other infrastructure components that may be involved in the communication protocol. The invention accomplishes this in two steps:
With session management messages is meant control messages that are used for setting up the mobile node's connection to the infrastructure.
It should be noted that some access technologies reveal the IP address of the access edge node. For example, I-WLAN (Interworking-Wireless Local Area Network) mobile nodes know the IP address of a PDG (Packet Data Gateway). For these access technologies there may be limited benefits with hiding the FA IP address if the FA is located in the PDG.
The present invention as exemplified in the above embodiment works for MIP v4 where a Foreign Agent Care-of Address (FA CoA) is used. In an IPv6 network a different approach may be used for instance using NAPT (Network address port translation) and/or ALG (Application Layer Gateway) functionality. The process of getting a care-of-address is much simpler in MIPv6 using IPv6 with stateless auto configuration or with auto configuration using DHCPv6 (Dynamic Host Configuration Protocol), since there is no foreign agent care-of-address, only collocated care-of-addresses will be used. It is also possible to use different IPv6 functionality to improve operation of mobile nodes, for instance, home agents may use the functionality of neighbor discovery and its proxy advertisement to intercept data packets intended for the mobile node. The situation for a system not using an FA will be described in more detail in relation to
An implementation of MIP over GTP (GPRS tunneling protocol) is shown illustrated in
The AEN (Access Edge Node) exemplifies a Packet Core Network Node, typically an evolved GSN (GGSN or GSN+); however, other network nodes may be used for implementing the same type of functionality providing session management functions, e.g. an Access Core Gateway (ACGW).
304. (309) The MN sends the “Activate PDP Context Request” to the Serving AEN. A MIP RRQ is included in the message. Piggybacking RRQ on GPRS SM (TS 24.008) and GTP (TS 29.060) messages could e.g. be done using Protocol Configuration Options Information Elements. The RRQ includes an identity of the HA. This identity was sent to the mobile node at the first registration the mobile node did with the HA.
Selection of HA when accessing the first time could be policy based and done by methods not covered by this invention. The message might include various other parameters. Router advertisements to announce the presence of an FA is not used. Instead it is assumed that the access gateway (serving AEN) has FA functionality. If S-AEN does not have FA functionality, the MN will find that the Activate PDP Context response (message 308) does not contain an RRP.
305. (310) The FA uses the HA identifier included in the RRQ to find the HA IP address. This could be done using e.g. DNS and/or AAA. The HA identifier could be temporary to further hide the topology and changed e.g. each time the user registers.
306. (311) The FA forwards the MIP RRQ to the HA.
307. (312) The HA responds with a MIP RRP.
308. (313) The AEN/FA includes the RRP into the “Activate PDP context response”. Piggybacking RRP on GPRS SM (TS 24.008) and GTP (TS 29.060) messages could e.g. be done using Protocol Configuration Options Information Elements. The FA removes or replaces the HA IP address field in order to hide the address from the MN. (Note 1 below). The MN home address is assigned using this message.
Note 1: This may affect the MIP protocol when using a separate IP address specifically assigned to the mobile node, since the HA IP address is included in the checksum. One solution to this may be for the FA to recalculate a new checksum after changing/removing the address. However, when using a collocated IP address, i.e. an address dynamically received from e.g. a DHCP server, packets may be unwrapped by the foreign agent and forwarded by the FA to the mobile node without recalculating any checksum in the packet. The invention allows an operator to deploy Mobile IP without revealing IP address information about the MIP core network entities to end-user terminals and thereby to competitors.
Another advantage of the invention is that all procedures and messages can be specified by 3GPP. The MIP protocol from IETF need not be affected (however, see note 1 above). Turning now to
The MN 603 will be assigned an HA 604 by some means (e.g. offline configuration or during access setup, this is not specified by the invention). The HA 604 is uniquely identified using an HA NAI (as described previously in this document) that is delivered to the MN 603. The MN 603 will also receive an “HA IP address” that actually belongs to the MIP GW 605 (i.e. the MIP GW acts as NAT/NAPT)
MIP signaling messages (e.g. RRQ and BU (binding update) etc) can be piggy-backed in access specific SM messages as described previously in this document according to the present invention. The MIP GW (AEN/GGSN) 605 resolves the HA NAI (using e.g. AAA or internal DNS) and forwards the messages to the correct HA.
For MIPv6, the signaling messages are protected by IPSec ESP (Encapsulating Security Payload) between MN 603 and HA 604. This means that the MIP GW 605 will not be able to look into any messages to read the HA NAI. A solution is to let the MIP GW be the IPSec tunnel endpoint for all MIPv6 signaling. The communication between MIP GW and HA's takes place on a private network. Another solution is to not protect MIPv6 signaling messages using IPSec, for instance by encapsulating MIPv6 signaling messages in a secure fashion in the SM messages.
User plane (UP): Without an FA, the UP tunnel goes between MN and HA. If the MIP GW acts as a NAT/NAPT, the HA IP addresses may be hidden from the MN. The MIP GW (NAPT) needs to have a mapping between the HA IP address upstream (i.e. between the HA and the MIP GW in
The above discussion has been conducted with Mobile IP as an example; however, other mobility protocols may be used which are based on a host concept, e.g. Host identity protocol (HIP) or MOBIKE (IKEv2 Mobility and Multihoming).
It should be noted that the word “comprising” does not exclude the presence of other elements or steps than those listed and the words “a” or “an” preceding an element do not exclude the presence of a plurality of such elements. The invention can at least in part be implemented in either software or hardware. It should further be noted that any reference signs do not limit the scope of the claims, and that several “means”, “devices”, and “units” may be represented by the same item of hardware.
The above mentioned and described embodiments are only given as examples and should not be limiting to the present invention. Other solutions, uses, objectives, and functions within the scope of the invention as claimed in the below described patent claims should be apparent for the person skilled in the art.
AEN Access Edge Node
FA Foreign Agent
GTP GPRS Tunneling Protocol
GSN GPRS Support Node
HA Home Agent
I-WLAN Interworking WLAN
MIP Mobile IP
MN Mobile Node
RRP Registration Response
RRQ Registration Request
| Filing Document | Filing Date | Country | Kind | 371c Date |
|---|---|---|---|---|
| PCT/EP06/06453 | 7/3/2006 | WO | 00 | 1/5/2009 |
