Apparatus and method for filtering packet in a network system using mobile IP
A network system using Mobile Internet Protocol (IP). The network system includes a correspondent node for transmitting a packet in which information passing a packet filter rule is included, and a packet filtering apparatus for determining whether an address included in information of the packet received from the correspondent node is identical to a destination address stored in the packet filter rule, and determining whether to pass the packet according to the determination result.
1. A packet filtering method in a packet filtering apparatus of a network system using Mobile Internet Protocol (IP), the method comprising:
determining if a next header of a packet received from a correspondent node (CN) is a routing header type;
determining if a home address included in the routing header type is identical to a destination address stored in a packet filter rule, if the next header of the packet is the routing header type;
determining if the next header of the packet is a mobility header, if the home address included in the routing header type is the destination address stored in the packet filter rule;
determining if a binding response message is received, if the next header of the packet is the mobility header;
determining if the CN has successfully received a binding update according to a status field value of the binding response message;
adding a Care-of Address (CoA) carried on the destination address of the received packet to the packet filter rule as a candidate destination address, if the CN has successfully received the binding update; and
maintaining a current packet filter rule, if the CN has not successfully received the binding update,
wherein the packet filter rule is stored in the packet filtering apparatus and is applied to a result of analyzing packet header regions.
2. The method of claim 1 , further comprising:
determining if the CoA carried on the destination address of the packet is identical to the candidate destination address of the packet filter rule, if the address included in the routing header type is not identical to the destination address stored in the packet filter rule; and
passing the packet, if the CoA is identical to the candidate destination address.
3. A packet filtering apparatus in a network system using Mobile Internet Protocol (IP), the apparatus comprising:
a next header reader for reading a next header to determine if the next header of a packet received from a Correspondent Node (CN) is a routing header type;
a home address reader for reading a routing header type to determine if a home address included in the routing header type is identical to a destination address stored in a packet filter rule, if the next header of the packet is the routing header type;
a mobility header reader for determining if a next header of the packet is a mobility header, if the home address included in the routing header type is the destination address stored in the packet filter rule, determining if a binding response message is received if the next header of the packet is the mobility header, and determining if the CN has successfully received a binding update according to a status field value of the binding response message; and
a packet filter rule adder for adding a Care-of Address (CoA) carried on the destination address of the received packet to the packet filter rule as a candidate destination address, if the CN has successfully received the binding update,
wherein the packet filler rule adder maintains a current packet filter rule, if the CN has not successfully received the binding update, and
wherein the packet filter rule is stored in the packet filtering apparatus and is applied to a result of analyzing packet header regions.
4. The packet filtering apparatus of claim 3 , further comprising:
a packet filter rule applier for determining if the CoA carried on the destination address of the packet is identical to the candidate destination address of the packet filter rule, if the address included in the routing header type is not identical to the destination address stored in the packet filter rule, and for passing the packet, if the CoA is identical to the candidate destination address.