Diagnosis of embedded, wireless mesh networks with real-time, flexible, location-specific signaling

• US 20050201297A1
• Filed: 12/08/2004
• Published: 09/15/2005
• Est. Priority Date: 12/12/2003
• Status: Abandoned Application

• Current Assignee: Cyrus Peikari
• Original Assignee: Cyrus Peikari
• Inventors: Peikari, Cyrus
• Application Number:
  US11/007,513
• Publication Number:
  US 20050201297A1
• Time in Patent Office: Days
• US Class Current: 370/242
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A system for optimizing the security of data communication on wireless mesh networks invention uses existing mesh network nodes to control new nodes that attempt to join the network. In a preferred embodiment, this is achieved by (1) testing that a new node is “clean” before allowing it to join the wireless mesh network by scanning the new node for viruses, checking for security patches, etc., (2) quarantining an “infected” node from joining the wireless mesh network until it is cleaned, (3) signaling other nodes in the existing mesh network that a node is either “infected” or “clean”, (4) cleaning a new node by supplying it with antivirus software, vendor patches, etc. from nearby nodes in the existing wireless mesh network, (5) updating the wireless mesh network in real time with a list of clean and infected nodes, and (6) performing the above steps without the need for a central, controlling server.

Claims

1. An apparatus configured to protect a wireless mesh network, said wireless mesh network comprising at least one node, said apparatus comprising:

a. means for detecting any change in the baseline state of said at least one node;

b. means for determining whether said at least one node is infected, in response a change in the baseline state detected by said means for detecting;

c. means for quarantining said at least one node, when said means for determining determines that said at least one node is infected;

d. means for determining whether a new node is infected before allowing it to join said wireless mesh network;

e. means for quarantining said new node, when said means for determining determines that said new node is infected;

wherein said means for quarantining said at least one node and said means for quarantining said new node occurs by nearby nodes sending signals to disconnect from said at least one node or said new node;

f. means for signaling comprising means for updating said wireless mesh network in real time with a list of clean and infected nodes;

g. means for cleaning said wireless mesh network by supplying data to infected nodes to either remove the infection or to render the infection harmless, wherein said data is sent to infected nodes from nearby nodes in the existing wireless mesh network.

2. The apparatus of claim 1, wherein said apparatus operates without the need for a central, controlling server.

3. An method for protecting a wireless mesh network, said wireless mesh network comprising at least one node, said method comprising:

a. detecting any change in the baseline state of said at least one node;

b. determining whether said at least one node is infected, in response a change in the baseline state detected by said step of detecting;

c. quarantining said at least one node, when said means for determining determines that said at least one node is infected;

d. determining whether a new node is infected before allowing it to join said wireless mesh network;

e. quarantining said new node, when said means for determining determines that said new node is infected;

wherein said quarantining said at least one node and said quarantining said new node occurs by nearby nodes sending signals to disconnect from said at least one node or said new node;

f. updating said wireless mesh network in real time with a list of clean and infected nodes;

g. supplying data to infected nodes to either remove the infection or to render the infection harmless, wherein said data is sent to infected nodes from nearby nodes in the existing wireless mesh network.

4. An apparatus configured to protect a wireless mesh network, said wireless mesh network comprising at least one node, said apparatus comprising:

a. means for detecting any change in the baseline state of said at least one node;

b. means for determining whether said at least one node is infected, in response a change in the baseline state detected by said means for detecting;

c. means for quarantining said at least one node, when said means for determining determines that said at least one node is infected;

d. means for signaling comprising broadcasting the status of said at least one node to other nodes in said wireless mesh network;

e. means for cleaning said at least one node by supplying data from nearby nodes to said at least one node to either remove the infection or to render the infection harmless.

5. The apparatus of claim 4, wherein said means for quarantining further comprises nearby nodes sending signals to disconnect from said at least one node.

6. The apparatus of claim 5, wherein said at least one node is allowed to be reconnected to said wireless mesh network when said at least one node is determined to be clean.

7. The apparatus of claim 6, wherein said at least one node is determined to be clean when by having updated virus signatures.

8. The apparatus of claim 6, wherein said at least one node is determined to be clean when by having updated vendor security patches,

9. The apparatus of claim 6, wherein said at least one node is determined to be clean when by having an updated firewall.

10. The apparatus of claim 4, wherein said wireless mesh network operates without a central server or a central controller.

11. The apparatus of claim 4, wherein said means for signaling updates said wireless mesh network in real time with a list of clean and infected nodes.

12. The apparatus of claim 4, further comprising

f. means for determining whether a new node is infected before allowing it to join said wireless mesh network;

e. means for quarantining said new node, when said means for determining determines that said new node is infected.

13. The apparatus of claim 7, wherein said new node is allowed to be connected to said wireless mesh network when said new node is determined to be no longer infected.

14. The apparatus of claim 4, wherein said data is selected from the group consisting of (a) antivirus software and (b) vendor patches.

15. A method for protecting a wireless mesh network, said wireless mesh network comprising at least one node, said method comprising:

a. detecting any change in the baseline state of said at least one node;

b. determining whether said at least one node is infected, in response a change in the baseline state detected by said step of detecting;

c. means for quarantining said at least one node, when said step of determining determines that said at least one node is infected;

d. means for signaling comprising broadcasting the status of said at least one node to other nodes in said wireless mesh network;

e. means for cleaning said at least one node by supplying data from nearby nodes to said at least one node to either remove the infection or to render the infection harmless.

16. The method of claim 15, wherein said step of quarantining further comprises nearby nodes sending signals to disconnect from said at least one node.

17. The method of claim 16, wherein said at least one node is allowed to be reconnected to said wireless mesh network when said at least one node is determined to be clean.

18. The method of claim 15, wherein said step of signaling updates said wireless mesh network in real time with a list of clean and infected nodes.

19. The method of claim 15, further comprising

f. determining whether a new node is infected before allowing it to join said wireless mesh network;

e. quarantining said new node, when said step of determining determines that said new node is infected.

20. The method of claim 15, wherein said wireless mesh network operates independently of any centralized controller.