Location-independent packet routing and secure access in a short-range wireless networking environment

Abstract

The present invention provides methods, systems, and computer program instructions for providing location-independent packet routing and secure access in a wireless networking environment (such as that encountered within a building), enabling client devices to travel seamlessly within the environment. Each client device uses a constant address. An address translation process that is transparent to the client and server is automatically performed as the device roams through the environment, enabling efficient client migration from one supporting access point to another. The secure access techniques provide user-centric authentication and allow policy-driven packet filtering, while taking advantage of encryption capabilities that are built in to the hardware at each endpoint.

1 . A method of packet routing in a short-range wireless networking environment including one or more portable client devices and one or more application servers, comprising: 
 transmitting a packet from an application server to a portable client device, wherein the transmitted packet is received at a home agent associated with the client device;    forwarding, by the home agent, the received packet to a foreign agent through which the client device is currently communicating;    receiving, by the foreign agent, the forwarded packet; and    forwarding, by the foreign agent, the received forwarded packet to the client device.    
     
     
         2 . The method of  claim 1  wherein a fixed host is chosen as the home agent associated with the client device.  
     
     
         3 . The method of  claim 1  wherein an identification of the client device determines which of a plurality of home agents is associated with the client device.  
     
     
         4 . The method of  claim 1  wherein an identification of a user of the client device determines which of a plurality of home agents is associated with the client device.  
     
     
         5 . The method of  claim 1  wherein a central server is selected as the home agent associated with the client device.  
     
     
         6 . The method of  claim 1  wherein forwarding by the home agent further comprises consulting a repository to determine through which of a plurality of foreign agents the client device is currently communicating.  
     
     
         7 . A method of packet routing in a short-range wireless networking environment including one or more portable client devices and one or more application servers, comprising: 
 wirelessly transmitting a packet from a portable client device to an application server, wherein the transmitted packet is received at a foreign agent through which the client device is currently communicating; and    forwarding, by the foreign agent, the received packet to the application server.    
     
     
         8 . The method of  claim 7  further comprising: 
 consulting a repository, responsive to receiving the transmitted packet, to determine a network address and port number to be used for identifying the client device;    modifying the received packet to use the determined network address and port number in place of a client network address and port number contained therein; and    using the modified packet in the forwarding step.    
     
     
         9 . A method of packet routing in a short-range wireless networking environment including one or more portable client devices and one or more application servers, comprising: 
 transmitting packets between a portable client device and an application server using intermediary agents that transparently enable wireless roaming by at least one of the client device and the application server from one location to another in the short-range wireless networking environment.    
     
     
         10 . The method of  claim 9  wherein the intermediary agents enable wireless roaming by using address translation of source addresses in outbound ones of the transmitted packets and of destination addresses in inbound ones of the transmitted packets.  
     
     
         11 . The method of  claim 9  wherein the intermediary agents include a home agent associated with the client device.  
     
     
         12 . The method of  claim 11  wherein a plurality of client devices share a particular home agent.  
     
     
         13 . The method of  claim 12  wherein the particular home agent is a central server.  
     
     
         14 . The method of  claim 11  wherein the home agent associated with the client device is determined using administrative policy.  
     
     
         15 . The method of  claim 11  further comprising dynamically changing the home agent associated with the client device.  
     
     
         16 . The method of  claim 15  wherein dynamically changing the home agent occurs responsive to a failure of the home agent associated with the client device.  
     
     
         17 . The method of  claim 15  wherein dynamically changing the home agent further comprises: 
 dynamically assuming, by a new home agent to be associated with the client device, a network address used to identify the home agent that was previously associated with the client device; and    dynamically updating a repository which records the association of the previous home agent with the client device, such that the repository now records the association of the new home agent with the client device.    
     
     
         18 . A system for packet routing in a short-range wireless networking environment including one or more portable client devices and one or more application servers, comprising: 
 intermediary agents for transmitting packets between a portable client device and an application server, and for transparently enabling wireless roaming by at least one of the client device and the application server from one location to another in the short-range wireless networking environment.    
     
     
         19 . The system of  claim 18  wherein the intermediary agents include a home agent associated with the client device, and enable wireless roaming by using address translation of source addresses in outbound ones of the transmitted packets and of destination addresses in inbound ones of the transmitted packets.  
     
     
         20 . The system of  claim 19  further comprising dynamically changing the home agent associated with the client device.