Method and apparatus for interworking authorization of dual stack operation
A method and apparatus for dynamic home address assignment by a home agent in multiple network interworking. The invention provides a method and apparatus send a key authorization request from a mobile station to a network device, the request indicating that the mobile station wishes to use a foreign agent care-of address to continue to receive data. The network device assigns a temporary address to the mobile station and creates a security policy database for the mobile station. The mobile station receives agent advertisements from foreign agents that may be able to provide service. The mobile station registers with a foreign agent. The network device then modifies the security policy database to reflect the information of the foreign agent. The Home Agent then assigns a home address to the mobile station and the network device updates the security policy database to include only the mobile device's home address as a selector.
1. A method comprising:
requesting for a mobile station dual stack operation using more than one internet protocol version for a home network;
receiving authorization for dual stack operation from a home authorization entity using more than one internet protocol version;
establishing a separate child security association (CHILD_SA) for each of the authorized internet protocol versions under the same internet key exchange security association (IKE_SA);
establishing at least one secure tunnel for communication between the mobile station and the home network; and
accessing simultaneously, by the mobile station, each of the authorized internet protocol versions using the at least one secure tunnel for communication.
2. The method of claim 1 , wherein the more than one internet protocol versions access simultaneously using a same secure tunnel.
3. The method of claim 1 , wherein the more than one internet protocol versions access simultaneously in separate secure tunnels.
4. The method of claim 1 , wherein the authorization to use more than one internet protocol is a IP-Version-Authorized VSA sent in a RADIUS Access-Accept message.
5. The method of claim 4 , wherein if the IP-Version-Authorized VSA is not present in the RADIUS Access-Accept message, a packet data interworking function in the wireless communication network shall apply local policy for authorizing dual stack operation.
6. The method of claim 1 , further comprising receiving authorization for at least one internet protocol version in a message from the home authorization entity.
7. An apparatus comprising:
a transmitter for requesting dual stack operation for the apparatus using more than one internet protocol version for a home network;
a receiver for receiving authorization for dual stack operation from a home authorization entity using more than one internet protocol version;
a memory for storing a separate child security association (CHILD_SA) for each of the authorized internet protocol versions under the same internet key exchange security association (IKE_SA);
a processor for establishing at least one secure tunnel for communication between the apparatus and the home network using the transmitter and
wherein the transmitter is further for accessing simultaneously, by the apparatus, each of the authorized internet protocol versions using the at least one secure tunnel for communication.
8. The apparatus of claim 7 , wherein the more than one internet protocol versions access simultaneously using a same secure tunnel.
9. The apparatus of claim 7 , wherein the more than one internet protocol versions access simultaneously in separate secure tunnels.
10. The apparatus of claim 7 , wherein the authorization to use more than one internet protocol is a IP-Version-Authorized VSA sent in a RADIUS Access-Accept message.
11. The apparatus of claim 10 , wherein if the IP-Version-Authorized VSA is not present in the RADIUS Access-Accept message, a packet data interworking function in the wireless communication network shall apply local policy for authorizing dual stack operation.
12. The apparatus of claim 7 , wherein the receiver receives authorization for at least one internet protocol version in a message from the home authorization entity.
13. An apparatus comprising:
means for requesting for the apparatus dual stack operation using more than one internet protocol version for a home network;
means for receiving authorization for dual stack operation from a home authorization entity using more than one internet protocol version;
means for establishing a separate child security association (CHILD_SA) for each of the authorized internet protocol versions under the same internet key exchange security association (IKE_SA);
means for establishing at least one secure tunnel for communication between the apparatus and the home network; and
means for accessing simultaneously, by the apparatus, each of the authorized internet protocol versions using the at least one secure tunnel for communication.
14. The apparatus of claim 13 , wherein the more than one internet protocol versions access simultaneously using a same secure tunnel.
15. The apparatus of claim 13 , wherein the more than one internet protocol versions access simultaneously in separate secure tunnels.
16. The apparatus of claim 13 , wherein the authorization to use more than one internet protocol is a IP-Version-Authorized VSA sent in a RADIUS Access-Accept message.
17. The apparatus of claim 16 , wherein if the IP-Version-Authorized VSA is not present in the RADIUS Access-Accept message, a packet data interworking function in the wireless communication network shall apply local policy for authorizing dual stack operation.
18. The apparatus of claim 13 , wherein the means for receiving receives authorization for at least one internet protocol version in a message from the home authorization entity.
19. A non-transitory computer-readable medium comprising:
instructions for causing a computer to request dual stack operation for a mobile station using more than one internet protocol version for a home network;
instructions for causing a computer to receive authorization for dual stack operation from a home authorization entity using more than one internet protocol version;
instructions for causing a computer to establish a separate child security association (CHILD_SA) for each of the authorized internet protocol versions under the same internet key exchange security association (IKE_SA);
instructions for causing a computer to establish at least one secure tunnel for communication between the mobile station and the home network; and
instructions for causing a computer to access simultaneously, by the mobile station, each of the authorized internet protocol versions using the at least one secure tunnel for communication.
20. The non-transitory computer-readable medium of claim 19 , wherein the more than one internet protocol versions access simultaneously using a same secure tunnel.
21. The non-transitory computer-readable medium of claim 19 , wherein the more than one internet protocol versions access simultaneously in separate secure tunnels.
22. The non-transitory computer-readable medium of claim 19 , wherein the authorization to use more than one internet protocol is a IP-Version-Authorized VSA sent in a RADIUS Access-Accept message.
23. The non-transitory computer-readable medium of claim 22 , wherein if the IP-Version-Authorized VSA is not present in the RADIUS Access-Accept message, a packet data interworking function in the wireless communication network shall apply local policy for authorizing dual stack operation.
24. The non-transitory computer-readable medium of claim 19 , further comprising instructions for receiving authorization for at least one internet protocol version in a message from the home authorization entity.