Security optimization for IMS/MMD architecture
    1.
    发明授权
    Security optimization for IMS/MMD architecture 有权
    IMS / MMD架构的安全优化

    公开(公告)号:US09025771B2

    公开(公告)日:2015-05-05

    申请号:US11900619

    申请日:2007-09-11

    IPC分类号: H04K1/00 H04W36/00 H04L29/06

    摘要: A mechanism by which handoff delay can be minimized while not compromising the IMS/MMD security and also protecting the media if required by certain applications is presented. Methods for mitigating delay during SA re-association and mitigating the IPSec tunnel overhead for signaling and media at the Mobile Node are given. In one embodiment, SA keys can be transferred from the old P-CSCF to new P-CSCF, enabling the establishment of SAs before Mobile Node physically moves to the new subnet in a network. Proactive handover is used. In another embodiment, SA keys are transferred from S-CSCF to new P-CSCF. In this case, the SA keys are transferred to the new P-CSCF by S-CSCF through a context transfer mechanism well in advance so that SAs may be established before Mobile Node physically moves to new subnet. In another embodiment, methods for mitigating IPSec tunnel overhead are presented.

    摘要翻译: 呈现切换延迟最小化的机制,同时不影响IMS / MMD安全性,并且在某些应用需要时还可以保护媒体。 给出了在SA重新关联过程中减轻延迟并减轻移动节点上用于信令和媒体的IPSec隧道开销的方法。 在一个实施例中,SA密钥可以从旧的P-CSCF传送到新的P-CSCF,使得能够在移动节点物理移动到网络中的新子网之前建立SA。 使用主动切换。 在另一实施例中,SA密钥从S-CSCF传送到新的P-CSCF。 在这种情况下,SA密钥由S-CSCF通过上下文传送机制预先传送到新的P-CSCF,以便SA可以在移动节点物理移动到新的子网之前被建立。 在另一个实施例中,提出了用于减轻IPSec隧道开销的方法。

    Security optimization for IMS/MMD architecture
    2.
    发明申请
    Security optimization for IMS/MMD architecture 有权
    IMS / MMD架构的安全优化

    公开(公告)号:US20080072310A1

    公开(公告)日:2008-03-20

    申请号:US11900619

    申请日:2007-09-11

    IPC分类号: H04L9/00

    摘要: A mechanism by which handoff delay can be minimized while not compromising the IMS/MMD security and also protecting the media if required by certain applications is presented. Methods for mitigating delay during SA re-association and mitigating the IPSec tunnel overhead for signaling and media at the Mobile Node are given. In one embodiment, SA keys can be transferred from the old P-CSCF to new P-CSCF, enabling the establishment of SAs before Mobile Node physically moves to the new subnet in a network. Proactive handover is used. In another embodiment, SA keys are transferred from S-CSCF to new P-CSCF. In this case, the SA keys are transferred to the new P-CSCF by S-CSCF through a context transfer mechanism well in advance so that SAs may be established before Mobile Node physically moves to new subnet. In another embodiment, methods for mitigating IPSec tunnel overhead are presented.

    摘要翻译: 呈现切换延迟最小化的机制,同时不影响IMS / MMD安全性,并且在某些应用需要时还可以保护媒体。 给出了在SA重新关联过程中减轻延迟并减轻移动节点上用于信令和媒体的IPSec隧道开销的方法。 在一个实施例中,SA密钥可以从旧的P-CSCF传送到新的P-CSCF,使得能够在移动节点物理移动到网络中的新子网之前建立SA。 使用主动切换。 在另一实施例中,SA密钥从S-CSCF传送到新的P-CSCF。 在这种情况下,SA密钥由S-CSCF通过上下文传送机制预先传送到新的P-CSCF,以便SA可以在移动节点物理移动到新的子网之前被建立。 在另一个实施例中,提出了用于减轻IPSec隧道开销的方法。