Method and system for sending a message through a secure connection
The method and system enable secure forwarding of a message from a first computer to a second computer via an intermediate computer in a telecommunication network. A message is formed in the first computer or in a computer that is served by the first computer, and in the latter case, sending the message to the first computer. In the first computer, a secure message is then formed by giving the message a unique identity and a destination address. The message is sent from the first computer to the intermediate computer after which the destination address and the unique identity are used to find an address to the second computer. The current destination address is substituted with the found address to the second computer, and the unique identity is substituted with another unique identity. Then the message is forwarded to the second computer.
1. A computer for sending secure messages, and for enabling secure forwarding of messages in a telecommunication network by an intermediate computer to a recipient computer, comprising:
a computer configured to connect to a telecommunication network;
the computer configured to be assigned with a network address in the telecommunication network, wherein the computer is a mobile computer in that the address of the mobile computer changes;
the computer configured to form a secure message by encrypting the data payload of a message and giving the message a unique identity and a destination address of an intermediate computer, wherein the unique identity and the destination address are capable of being used by the intermediate computer to find an address to a recipient computer;
the computer configured to send the secure message to the intermediate computer for forwarding of the encrypted data payload to the recipient computer; and
the computer configured to set up a secure connection using a key exchange protocol.
2. The computer of claim 1 , wherein the computer is configured to form the secure message using a message received by the computer.
3. The computer of claim 1 , wherein the computer is configured to encapsulate the message in an outer IP header.
4. The computer of claim 1 , wherein the computer is configured to form secure messages using IPSec protocols.
5. The computer of claim 1 , wherein the computer is configured to form secure messages containing data payload of a message, an inner IP header containing actual sender and receiver addresses, an outer IP header containing the addresses of the computer and the intermediate computer, and a unique identity.
6. The computer of claim 1 , wherein the unique identity is one or more Security Parameter Index values.
7. The computer of claim 1 , wherein the computer is configured to send a signaling message to the intermediate computer when the computer changes its address such that the intermediate computer can know that the address of the computer is changed.
8. The computer of claim 7 , wherein the computer is configured to send the signaling message encrypted.
9. The computer of claim 8 , wherein the computer is configured to send the signaling message authenticated.
10. The computer of claim 1 , wherein the computer is configured to send the secure message using SSL or TLS protocol.