Multi-interface mobility client

1. A method of operating a mobile node having an IPSec layer, comprising the steps of:

establishing an IPSec session between the mobile node and a virtual private network/IPSec gateway by way of a first network;

switching from the first network to a second network without disturbing the IPSec session, the switching being effected using mobile IP at a lower layer than the IPSec layer; and

hiding the switching from the IPSec layer by providing a fake MAC layer address of a default router to the IPSec layer, and rewriting MAC layer headers in incoming and outgoing packets in an intermediate driver with correct MAC layer addresses.

2. The method of claim 1 , further comprising:

receiving a plurality of characteristics for a plurality of network interfaces, the plurality of network interfaces including a first network interface for communication by the mobile node via the first network and a second network interface for communication by the mobile node via the second network; and

selecting the second network interface based on the plurality of characteristics.

3. The method of claim 2 , wherein the plurality of characteristics comprises a plurality of signal strength values for the respective plurality of network interfaces.

4. The method of claim 2 , wherein the plurality of characteristics comprises a plurality of signal strength values for the respective plurality of network interfaces and a plurality of user priority values for the respective plurality of network interfaces, wherein selecting the second network interface based on the plurality of characteristics comprises:

computing a plurality of scores for the respective plurality of network interfaces based on the plurality of signal strength values for the respective plurality of network interfaces and the plurality of user priority values for the respective plurality of network interfaces; and

selecting the second network interface based on the scores for the respective plurality of network interfaces.

5. The method of claim 4 , wherein, for at least one of the network interfaces, computing the score for the respective network interface comprises comparing the signal strength value for the network interface to a signal strength threshold.

6. The method of claim 4 , wherein, for at least one of the network interfaces, computing the score for the respective network interface comprises applying a weight coefficient to the user priority value for the network interface based on the signal strength value for the network interface.

7. A mobile node, comprising:

a network layer;

an IPSec driver below the network layer;

an intermediate driver below the IPSec driver;

at least one network interface to and from which the intermediate driver sends and receives packets;

wherein the intermediate driver is configured for switching from a first network to a second network, without disturbing an ongoing IPSec session, the switching being effected using mobile IP at a lower layer than the IPSec layer; and

wherein the intermediate driver is configured for hiding the switching from the IPSec layer by providing a fake MAC layer address of a default router to the IPSec layer, and rewriting MAC layer headers in incoming and outgoing packets with correct MAC layer addresses.

8. The mobile node of claim 7 , wherein the at least one network interface comprises a plurality of network interfaces including a first network interface configured for communication by the mobile node via the first network and a second network interface configured for communication by the mobile node via the second network.

9. The mobile node of claim 8 , further comprising:

a network selection block above the network layer, the network selection block configured to select the second network interface.

10. The mobile node of claim 9 , wherein the network selection block is configured to:

receive a plurality of characteristics for the plurality of network interfaces; and

select the second network interface based on the plurality of characteristics.

11. The mobile node of claim 10 , wherein the plurality of characteristics comprises a plurality of signal strength values for the respective plurality of network interfaces.

12. The mobile node of claim 10 , wherein the plurality of characteristics comprises a plurality of signal strength values for the respective plurality of network interfaces and a plurality of user priority values for the respective plurality of network interfaces, wherein the network selection block is configured to select the second network interface based on the plurality of characteristics by:

computing a plurality of scores for the respective plurality of network interfaces based on the plurality of signal strength values for the respective plurality of network interfaces and the plurality of user priority values for the respective plurality of network interfaces; and

selecting the second network interface based on the scores for the respective plurality of network interfaces.

13. The mobile node of claim 12 , wherein the network selection block is configured to, for at least one of the network interfaces, compute the score for the respective network interface by comparing the signal strength value for the network interface to a signal strength threshold.

14. The mobile node of claim 12 , wherein the network selection block is configured to, for at least one of the network interfaces, compute the score for the respective network interface by applying a weight coefficient to the user priority value for the network interface based on the signal strength value for the network interface.

15. A non-transitory computer readable storage medium having stored thereon instructions which, when executed by a processor, cause the processor to perform a method of operating a mobile node having an IPSec layer, the method comprising the steps of:

establishing an IPSec session between the mobile node and a virtual private network/IPSec gateway by way of a first network;

switching from the first network to a second network without disturbing the IPSec session, the switching being effected using mobile IP at a lower layer than the IPSec layer; and

hiding the switching from the IPSec layer by providing a fake MAC layer address of a default router to the IPSec layer, and rewriting MAC layer headers in incoming and outgoing packets in an intermediate driver with correct MAC layer addresses.

16. The non-transitory computer readable storage medium of claim 15 , the method further comprising:

receiving a plurality of characteristics for a plurality of network interfaces, the plurality of network interfaces including a first network interface for communication by the mobile node via the first network and a second network interface for communication by the mobile node via the second network; and

selecting the second network interface based on the plurality of characteristics.

17. The non-transitory computer readable storage medium of claim 16 , wherein the plurality of characteristics comprises a plurality of signal strength values for the respective plurality of network interfaces.

18. The non-transitory computer readable storage medium of claim 16 , wherein the plurality of characteristics comprises a plurality of signal strength values for the respective plurality of network interfaces and a plurality of user priority values for the respective plurality of network interfaces, wherein selecting the second network interface based on the plurality of characteristics comprises:

computing a plurality of scores for the respective plurality of network interfaces based on the plurality of signal strength values for the respective plurality of network interfaces and the plurality of user priority values for the respective plurality of network interfaces; and

selecting the second network interface based on the scores for the respective plurality of network interfaces.

19. The non-transitory computer readable storage medium of claim 18 , wherein, for at least one of the network interfaces, computing the score for the respective network interface comprises comparing the signal strength value for the network interface to a signal strength threshold.

20. The non-transitory computer readable storage medium of claim 18 , wherein, for at least one of the network interfaces, computing the score for the respective network interface comprises applying a weight coefficient to the user priority value for the network interface based on the signal strength value for the network interface.