Method and apparatus having null-encryption for signaling and media packets between a mobile station and a secure gateway

1. A method for transport of packets between a mobile station and a secure gateway over a wireless local area network for accessing home services, the method comprising:

participating in the establishment of a first encryption security association for transporting first-type packets from the secure gateway to the mobile station;

participating in the establishment of a second encryption security association for transporting first-type packets from the mobile station to the secure gateway;

participating in the establishment of a first null-encryption security association for transporting second-type packets from the secure gateway to the mobile station;

participating in the establishment of a second null-encryption security association for transporting second-type packets from the mobile station to the secure gateway;

wherein each security association comprises a secure IP tunnel;

wherein the second-type packets for transport using the second null-encryption association comprise encrypted session initiation protocol packets; and

selecting second-type packets for transport using the second null-encryption security association based on a traffic selector, wherein the traffic selector enables the home services between the mobile station and the secure gateway in a mobile phone home network.

2. The method of claim 1 , wherein the traffic selector comprises a destination IP address and port number.

3. The method of claim 1 , wherein the traffic selector comprises a source IP address and port number.

4. The method of claim 1 , wherein the first and second null-encryption security associations are each a child security association.

5. The method of claim 1 , wherein the traffic selector is developed after establishing the first and second encryption security associations.

6. The method of claim 1 , wherein the secure gateway comprises a packet data interworking function.

7. The method of claim 1 , wherein the mobile station develops the traffic selector and forwards the traffic selector to the secure gateway using the second encryption security association.

8. A non-transitory computer readable storage medium, having instructions stored therein that are executable by a processor of a mobile station, a processor of a secure gateway, or both to:

participate in the establishment of a first encryption security association for transporting first-type packets from the secure gateway to the mobile station;

participate in the establishment of a second encryption security association for transporting first-type packets from the mobile station to the secure gateway;

participate in the establishment of a first null-encryption security association for transporting second-type packets from the secure gateway to the mobile station;

participate in the establishment of a second null-encryption security association for transporting second-type packets from the mobile station to the secure gateway;

wherein each security association is a secure IP tunnel;

wherein the second-type packets for transport using the second null-encryption association comprise encrypted session initiation protocol packets; and

select second-type packets for transport using the second null-encryption security association based on a traffic selector, wherein the traffic selector enables the home services between the mobile station and the secure gateway in a mobile phone home network.

9. A mobile station comprising:

means for participating in the establishment of an encryption security association for transporting first-type packets to a secure gateway;

means for participating in the establishment of a null-encryption security association for transporting second-type packets to the secure gateway;

wherein each security association comprises a secure IP tunnel;

wherein the second-type packets for transport using the null-encryption association comprise encrypted session initiation protocol packets; and

means for selecting the second-type packets for transport using the null-encryption security association based on a traffic selector, wherein the traffic selector enables home services between the mobile station and the secure gateway in a mobile phone home network.

10. The mobile station of claim 9 , and further comprising:

means for receiving at least one first-type packet from the secure gateway over a first secure IP tunnel established based on a second encryption security association; and

means for receiving at least one second-type packet from the secure gateway over a second secure IP tunnel established based on a second null-encryption security association.

11. The mobile station of claim 9 , and further comprising means for providing the traffic selector to the secure gateway.

12. A secure gateway comprising:

means for participating in the establishment of an encryption security association for transporting first-type packets to a mobile station;

means for participating in the establishment of a null-encryption security association for transporting second-type packets to the mobile station;

wherein each security association comprises a secure IP tunnel;

wherein the second-type packets for transport using the null-encryption association comprise encrypted session initiation protocol packets; and

means for selecting the second-type packets for transport using the null-encryption security association based on a traffic selector, wherein the traffic selector enables home services between the mobile station and the secure gateway in a mobile phone home network.

13. The secure gateway of claim 12 , and further comprising:

means for receiving at least one first-type packet from the mobile station over a first secure IP tunnel established based on a second encryption security association; and

means for receiving at least one second-type packet from the mobile station over a second secure IP tunnel established based on a second null-encryption security association.

14. The secure gateway of claim 12 , and further comprising means for receiving the traffic selector from the mobile station.

15. A mobile station comprising:

a memory device; and

a processor configured to:

participate in the establishment of an encryption security association for transporting first-type packets to a secure gateway;

participate in the establishment of a null-encryption security association for transporting second-type packets to the secure gateway;

wherein each security association comprises a secure IP tunnel;

wherein the second-type packets for transport using the null-encryption association comprise encrypted session initiation protocol packets; and

select the second-type packets stored in the memory device for transport using the null-encryption security association based on a traffic selector, wherein the traffic selector enables home services between the mobile station and the secure gateway in a mobile phone home network.

16. The mobile station of claim 15 , wherein the processor is further configured to:

obtain at least one first-type packet transported from the secure gateway over a first secure IP tunnel established based on a second encryption security association; and

obtain at least one second-type packet transported from the secure gateway over a second secure IP tunnel established based on a second null-encryption security association.

17. The mobile station of claim 15 , wherein the processor is further configured to develop the traffic selector.

18. A secure gateway comprising:

a memory device; and

a processor configured to:

participate in the establishment of an encryption security association for transporting first-type packets to a mobile station;

participate in the establishment of a null-encryption security association for transporting second-type packets to the mobile station;

wherein each security association comprises a secure IP tunnel;

wherein the second-type packets for transport using the null-encryption association comprise encrypted session initiation protocol packets; and

select the second-type packets for transport using the null-encryption security association based on a traffic selector, wherein the traffic selector enables home services between the mobile station and the secure gateway in a mobile phone home network.

19. The secure gateway of claim 18 , wherein the processor is further configured to:

obtain at least one first-type packet transported from the mobile station over a first secure IP tunnel established based on a second encryption security association; and

obtain at least one second-type packet transported from the mobile station over a second secure IP tunnel established based on a second null-encryption security association.

20. The secure gateway of claim 18 , wherein the traffic selector is developed by the mobile station.