Method and system for providing a mobile IP key

1. A method for providing a Mobile IP (MIP) key for encrypting messages between a subscriber terminal or a Proxy Mobile Internet Protocol (PMIP) client and a home agent, comprising:

reviewing an encoded parameter at an authentication server;

determining, on the basis of the encoded parameter at the authentication server, whether the subscriber terminal itself supports Mobile IP under terminal-based mobility management or client MIP (CMIP) or whether the subscriber terminal itself does not support Mobile IP under network-based mobility management or PMIP; and

providing the Mobile IP key from the authentication server only when the subscriber terminal itself does not support Mobile IP under PMIP, wherein

the subscriber terminal is a mobile terminal,

the authentication server has two different MIP keys,

the home agent is provided with a client MIP key by the authentication server when the subscriber terminal itself supports Mobile IP, and

the home agent is provided with a proxy MIP key by the authentication server when the subscriber terminal itself does not support Mobile IP.

2. The method as claimed in claim 1 ,

wherein the encoded parameter is an encoded subscriber identity.

3. The method as claimed in claim 1 , wherein the authentication server is an authentication, authorization and accounting (AAA) authentication server.

4. The method as claimed in claim 2 , wherein

the encoded subscriber identity is transmitted to the authentication server in a message during an authentication of the subscriber terminal.

5. The method as claimed in claim 2 ,

wherein the encoded subscriber identity is transmitted to the authentication server in a message during a registration of the subscriber terminal.

6. The method as claimed in claim 1 ,

wherein the encoded parameter is an encoded security parameter index.

7. The method as claimed in claim 6 ,

wherein the encoded security parameter index is transmitted to the authentication server during a registration of the subscriber terminal.

8. The method as claimed in claim 1 , wherein

the subscriber terminal is a mobile terminal, and

the parameter is encoded by the mobile terminal.

9. The method as claimed in claim 1 , wherein the parameter is encoded by an authenticator.

10. The method as claimed in claim 1 ,

wherein the parameter is encoded by the PMIP client.

11. The method as claimed in claim 1 ,

wherein the parameter is encoded by a foreign agent.

12. The method as claimed in claim 1 ,

wherein information indicating which MIP version is present is additionally encoded in the parameter.

13. The method as claimed in claim 1 ,

wherein the home agent requests the Mobile IP key from the authentication server, specifying the encoded parameter in the process.

14. The method as claimed in claim 1 ,

wherein the authentication server uses a hash function H to calculate a hash value based on a Mobile IP root key and a character string, said hash value being provided as the Mobile IP key.

15. The method as claimed in claim 14 ,

wherein the character string is formed of concatenated character substrings.

16. The method as claimed in claim 15 ,

wherein one character substring is formed from an IP address of the home agent.

17. The method as claimed in claim 2 ,

wherein the subscriber identity has the following data format:

(Routing Realm1! Routing Realm2! . . . !) {Auth Mode} pseudo Identity @realm,

where the pseudo Identity is a random number generated by the terminal during authentication and

where Auth Mode is a character which specifies an authentication mode.

18. The method as claimed in claim 17 ,

wherein the encoded subscriber identity extends the authentication mode by at least one character which specifies whether the subscriber terminal uses Mobile IP.

19. A system for providing a Mobile IP (MIP) key for encrypting messages between a subscriber terminal or a Proxy Mobile Internet Protocol (PMIP) client and a home agent, comprising:

an authentication server to review an encoded parameter, to determine from the encoded parameter whether the subscriber terminal itself supports Mobile IP under terminal-based mobility management or client MIP (CMIP) or whether the subscriber terminal itself does not support Mobile IP under network-based mobility management or PMIP, and to provide the Mobile IP key only when the subscriber terminal does not support Mobile IP under PMIP, wherein

the subscriber terminal is a mobile terminal, the authentication server has two different MIP keys, the home agent is provided with a client MIP key by the authentication server when the subscriber terminal itself supports Mobile IP, and the home agent is provided with a proxy MIP key by the authentication server when the subscriber terminal itself does not support Mobile.

20. The system as claimed in claim 19 ,

wherein the encoded parameter is an encoded subscriber identity.

21. The system as claimed in claim 19 ,

wherein the encoded parameter is an encoded security parameter index.

22. A mobile terminal comprising:

a transmitter to transmit an encoded parameter in a network login message that is addressed to an authentication server, and/or in a MIP registration request message that is addressed to a home agent, said encoded parameter specifying whether the mobile terminal itself supports Mobile IP under terminal-based mobility management or client MIP (CMIP) or whether the subscriber terminal itself does not support Mobile IP under network-based mobility management or PMIP, wherein

the authentication server has two different MIP keys, the home agent is provided with a client MIP key by the authentication server when the mobile terminal itself supports Mobile IP, and the home agent is provided with a proxy MIP key by the authentication server when the mobile terminal itself does not support Mobile.