METHODS AND APPARATUS FOR SECURE, PORTABLE, WIRELESS AND MULTI-HOP DATA NETWORKING

• US 20080232338A1
• Filed: 03/21/2008
• Published: 09/25/2008
• Est. Priority Date: 11/25/2002
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Ji, Lusheng, Agre, Jonathan, Mishra, Arunesh, Thakkar, Sohil
• Granted Patent: US 7,881,667 B2
• Time in Patent Office: Days
• US Class Current: 370/338
• CPC Class Codes: H04L 45/54 Organization of routing tables
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 40/20 based on geographic position or location
• CPC Class Codes: H04W 40/26 for hybrid routing by combining proactive and reactive routing
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A mobile network solution provides secure and portable wireless networking service to mobile users with devices equipped with wireless network interfaces. The Secure Nomadic Wireless Network, or SNOWNET, follows a hierarchical approach. Special SNOWNET nodes are deployed in the area where networking service is needed and form a backbone network. At the same time, SNOWNET nodes provide local access service to regular mobile clients. SNOWNET provides security through authentication of the nodes and clients, as well as through encryption of the data.

Claims

1. A wireless network node, comprising:

backbone wireless interface to provide wireless backbone service with another wireless network node composed of a wireless backbone network;

supplicant unit to perform it'"'"'s authentication with an authentication server via the backbone wireless interface; and

local wireless interface to provide wireless local service with a mobile client device authenticator unit to perform an authenticate request from the mobile client device with the authentication server as an authenticator after a successful it'"'"'s authentication.

2. The wireless network node as in claim 1,

wherein the wireless network node is given a shared key of the wireless backbone network so that the wireless network node can participant in the wireless backbone network after a successful authentication.

3. The wireless network node as in claim 2,

wherein the shared key of the wireless backbone network is different from a local key for the mobile client device.

4. The wireless network node as in claim 1,

wherein the wireless network node is responsible for authenticating both a local mobile client and a new wireless network node.

5. The wireless network node as in claim 1,

wherein the wireless network node performs it'"'"'s authentication in IEEE 802.1x framework with an authentication server via the backbone wireless interface.

6. The wireless network node as in claim 1,

wherein the wireless network node uses a key to encrypt data transmitted the wireless backbone network that is the same as all other wireless network nodes in the wireless backbone network use.

7. The wireless network node as in claim 1, further comprising;

a bridging table composed of a local interface and neighboring interfaces to wireless network nodes that are next hop destination in a bridge path.

8. he wireless network node as in claim 1, further comprising;

a routing table composed of a local interface and neighbor interfaces to wireless network nodes that are next hop destination in a routing path.

9. The wireless network node as in claim 7, wherein the routing table has subnet routes type entries and host routes type entries, the former being aggregated route entries where each entry describes routes for all the hosts within the corresponding address space, expressed in traditional format as a combination of network address and network mask, the latter being for the routes towards specific wireless network nodes.