THE PROCESSING APPARATUS AND METHOD FOR PROVIDING INTERNET PROTOCOL VIRTUAL PRIVATE NETWORK SERVICE ON MOBILE COMMUNICATION

摘要

PURPOSE: An Internet protocol virtual private network service processing apparatus and a method in a mobile communication are provided to use an IP(Internet Protocol) security protocol and a mobile Internet protocol, and perform a tunneling through an MPLS(Multi Protocol Label Switching) exchange type instead of a network to network method, thereby capable of performing a high speed packet routing. CONSTITUTION: Mobile terminals(11,17) load an IP security protocol client software in order to connect to an Intranet server within a company and provide a VPN(Virtual Private Network) service. A service virtual private network application node/foreign agent(SVSN/FA)(13) performs a routine information management, authentication and access control functions of the mobile terminals for processing packet data. The SVSN/FA(13) allocates a care-of address to the mobile terminals and provides an access service so that the mobile terminals can access one's own sub-net from other sub-net. A gateway virtual private network foreign agent(GVSN/GFA)(14) charges a logical interface with an outside packet exchange network through a virtual private network gateway. The GVSN/GFA(14) performs a network address transformation(NAT) function for changing a private address into an authorization address and manages routing information for tunneling to the mobile terminals through the IP security protocol and temporary addresses allocated by the mobile terminals and the FA. A gateway virtual private network application node/home agent(GVSN/HA)(15) charges a logical interface with an outside packet exchange network through a virtual private network gateway. The GVSN/FA(15) manages routing information for tunneling to the GVSN/GFA through the MPLS and temporary addresses allocated by the mobile terminals and the GFA. The GVSN/FA maintains a mobility binding as a pair of addresses of the mobile terminal and GFA for applying mobility of the mobile terminals.