Method to provide dynamic internet protocol security policy service

DETAILED DESCRIPTION In accordance with preferred embodiments of the present invention, some of the problems associated with Internet Protocol security communications are overcome.
A method for providing dynamic Internet Protocol security policy service is provided.
One aspect of the invention includes a method for dynamically linking a policy to be applied to an Internet Protocol Security session between a foreign agent and a home agent.
The policy can be applied to packets sent between the foreign agent and the home agent.
The foreign agent may dynamically link to a policy when it establishes an Internet Protocol security session with the home agent, and the home agent may dynamically link a policy when it establishes an Internet Protocol security session with the foreign agent.
Another aspect of the invention includes a method for dynamically creating a filter to be applied to an Internet Protocol security session between the foreign agent and the home agent.
The foreign agent may dynamically create a filter than can be used to identify packets that receive Internet Protocol security processing.
The home agent can also create a filter that identifies packets that receive Internet Protocol security processing.
The filter may be removed from a list of active filters when the IPsec session between the foreign agent and the home agent ends.
These as well as other aspects and advantages of the present invention will become apparent from reading the following detailed description, with appropriate reference to the accompanying drawings.