METHOD FOR EXCHANGING MESSAGES AND VERIFYING THE AUTHENTICITY OF THE MESSAGES IN AN AD HOC NETWORK

• US 20080235509A1
• Filed: 11/07/2007
• Published: 09/25/2008
• Est. Priority Date: 11/10/2006
• Status: Active Grant

• Current Assignee: Board of Trustees of The University of Illinois, Toyota Motor Corporation
• Original Assignee: Board of Trustees of The University of Illinois, Toyota Motor Engineering & Manufacturing North America Incorporated (Toyota Motor Corporation)
• Inventors: Hu, Yih-Chun, Laberteaux, Kenneth P.
• Granted Patent: US 7,934,095 B2
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method for exchanging messages containing reliable information between nodes in an ad hoc network, such as a vehicle ad hoc network. The method includes the steps of providing a public key for a PKI encrypted certificate authority signature to all nodes known to transmit reliable information. Each node transmits a signal containing node identification information and the PKI encrypted certificate authority signature associated with that node. Each node also receives like signals from other nodes and then decrypts the certificate authority signatures from the received signals by using the certificate authority public key to ascertain the authenticity of the received certificate authority signatures and the reliability of the received message. Thereafter, the nodes receive and accept messages with a TESLA encrypted signature only with nodes identified to have authentic certificate authority signatures until the occurrence of a subsequent predefined event, such as a new node in the network or the elapse of a predetermined time period.

Claims

1. A method for exchanging messages containing reliable information between nodes in an ad hoc network comprising the steps of:

(a) providing a public key for a PKI encrypted certificate authority signature to all nodes,

(b) providing a private key PKI encrypted certificate authority signature to all nodes known to transmit reliable information,

(c) each node transmitting a signal containing node identification information and the PKI encrypted certificate authority signature associated with that node,

(d) each node receiving said signals from the other nodes,

(e) each node decrypting the certificate authority signatures received from the other nodes by using the public key to ascertain the authenticity of the received certificate authority signatures,

(f) thereafter said nodes receiving and authenticating messages with a TESLA encrypted signature only with nodes identified to have an authentic certificate authority signature until the occurrence of a subsequent predefined event.

2. The invention as defined in claim 1 wherein said subsequent event comprises a new node joining the ad hoc network.

3. The invention as defined in claim 1 wherein said subsequent event comprises the elapse of a predetermined time period from step (c).

4. The invention as defined in claim 1 wherein said subsequent event comprises the elapse of a predetermined time period from step (a) and a new node joining the ad hoc network.

5. The invention as defined in claim 1 and comprising the steps of repeating step (c) through step (f) after the occurrence of said predefined event.

6. The invention as defined in claim 1 and comprising the step of releasing the authenticity of the TESLA signature within a predefined time period following said receiving and accepting a message with the TESLA encrypted signature.

7. The invention as defined in claim 1 and further comprising the step of time synchronizing a clock to a transmission from a global positioning system to messages with TESLA encrypted signatures.

8. The invention as defined in claim 1 wherein said transmitting step comprises the step of transmitting a radio signal.

9. The invention as defined in claim 1 wherein said ad hoc network comprises a vehicle ad hoc network.

10. A method for exchanging messages containing reliable information between nodes in an ad hoc network in which each node is provided with a public key for a PKI encrypted certificate authority signature and in which each node known to transmit reliable information is provided with a private key PKI encrypted certificate authority signature, said method comprising the steps of:

(a) each node transmitting a signal containing node identification information and the PKI encrypted certificate authority signature associated with that node,

(b) each node receiving said signals from the other nodes,

(c) each node decrypting the certificate authority signatures received from the other nodes by using the public key to ascertain the authenticity of the received certificate authority signatures,

(d) thereafter said nodes receiving and authenticating messages with a TESLA encrypted signature only with nodes identified to have an authentic certificate authority signature until the occurrence of a subsequent predefined event.

11. The invention as defined in claim 10 wherein said subsequent event comprises a new node joining the ad hoc network.

12. The invention as defined in claim 10 wherein said subsequent event comprises the elapse of a predetermined time period from step (a).

13. The invention as defined in claim 10 wherein said subsequent event comprises the elapse of a predetermined time period from step (c) and a new node joining the ad hoc network.

14. The invention as defined in claim 10 and comprising the steps of repeating step (c) through step (i) after the occurrence of said predefined event.

15. The invention as defined in claim 10 and comprising the step of releasing the authenticity of the TESLA signature within a predefined time period following said receiving and accepting a message with the TESLA encrypted signature.

16. The invention as defined in claim 10 and further comprising the step of time synchronizing a clock to a transmission from a global positioning system to messages with TESLA encrypted signatures.

17. The invention as defined in claim 10 wherein said transmitting step comprises the step of transmitting a radio signal.

18. The invention as define in claim 10 wherein said ad hoc network comprises a vehicle ad hoc network.

19. The invention as defined in claim 10 wherein said message contains information regarding the status of the node.