a security association establishment negotiation technique includes forwarding identifying information from a mobile node via a first interface to a first network element . negotiations are then initiated between the first network element and a second network element serving as a proxy for the mobile node via a second interface to establish a security association between the mobile node and the first network element , the second network element utilizing previously stored security association parameters of the mobile node . upon agreement between the first network element and the second network element with regard to the security association parameters , the first network element forwards the agreed - upon aecurity association parameters to the mobile node via the first interface . the first network element may include a home agent , a correspondent node or a agent , and the first interface may include a wireless interface to forward information between the mobile node and the first network element . the first network element may also include a first gateway connected to it . the first gateway may include a aaa server . the second network element may include a second gateway and an subscriber database / authentication center , and the second gateway may be connected to the subscriber database / authentication center . the second gateway may also include a aaa server .