METHOD AND SYSTEM FOR SECURING MOBILE IPV6 HOME ADDRESS OPTION USING INGRESS FILTERING

摘要

The invention provides for disabling communication at the access router (121) on a visited network (130) that supports mobile IP v6 (120) and the home address destination option. Until a home agent or correspondent node (127A-B) authenticates the home IP address of the mobile node (105) and the access router (121) verifies this address, the mobile node (105) is unable to communicate with other resources over the visited network (130). If the home IP address included in a binding acknowledgement message is verified by the access router and affirmatively compared to the state of a corresponding binding update message from the mobile node, the access router enables subsequent messages to be communicated over the visited network (130) between the mobile node (105) and other resources.