METHODS, APPARATUS AND SYSTEMS CONFIGURED FOR HETEROGENEOUS SECURE ASSOCIATIONS IN WI-FI PAN

• US 20090052467A1
• Filed: 08/22/2007
• Published: 02/26/2009
• Est. Priority Date: 08/22/2007
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Kaidar, Oren, Fudim, Max
• Granted Patent: US 7,903,645 B2
• Time in Patent Office: Days
• US Class Current: 370/469
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

An embodiment of the present invention provides a method for heterogeneous secure associations in Wireless Fidelity Personal Area Networks (WiFi PAN), comprising designating as a regular mobile node (MN) a MN which establishes a security association with a PAN Master as it advertised by the PAN Master and designating as an outstanding MN as a MN which establishes a security association which differs from that advertised by the PAN Master; and differentiating by the PAN Master between subscribed and not subscribed multicast packets and if a currently processed frame is sent to a subscribed multicast address and both the Regular MN and the Outstanding MN are subscribed to the multicast address, then the PAN Master will convert the frame to unicast and will send to each subscribed Outstanding MN using its unicast security model and to regular MN as regular multicast frame.

Claims

1. A method for heterogeneous secure associations in Wireless Fidelity Personal Area Networks (WiFi PAN), comprising:

designating as a regular mobile node (MN) a MN which establishes a security association with a PAN Master as it advertised by said PAN Master and designating as an outstanding MN as a MN which establishes a security association which differs from that advertised by said PAN Master; and

differentiating by said PAN Master between subscribed and not subscribed multicast packets and if a currently processed frame is sent to a subscribed multicast address and both said Regular MN and said Outstanding MN are subscribed to said multicast address, then said PAN Master will convert the frame to unicast and will send to each subscribed Outstanding MN using its unicast security model.

2. The method of claim 1, wherein said PAN master thereby processes multiple unicast frames instead of single multicast one.

3. The method of claim 1, further comprising for all Regular MNs, said PAN Master will send the frame as regular multicast.

4. The method of claim 1, wherein if a currently processed frame is targeted to an unsubscribed multicast destination, then said PAN Master will process it in regular transmit flow.

5. The method of claim 1, further comprising initiating a subscription handshake by said MN to become eligible to receive multicast traffic protected by a security model agreed at association time.

6. The method of claim 1, further comprising using a 2-way Multicast Frame Subscription handshake to activate Access Point mechanisms to improve multicast traffic reliability by said MN.

7. An apparatus, comprising:

a mobile node (MN) operable in a Wireless Fidelity Personal Area Networks (WiFi PAN) using heterogeneous secure associations;

wherein said MN is designated as a regular MN which establishes a security association with a PAN Master as it advertised by said PAN Master or designated as an outstanding MN which establishes a security association which differs from that advertised by said PAN Master; and

wherein said PAN Master differentiates between subscribed and not subscribed multicast packets and if a currently processed frame is sent to a subscribed multicast address and both a Regular MN and an Outstanding MN are subscribed to said multicast address, then said PAN Master will convert the frame to unicast and will send to each subscribed Outstanding MN using its unicast security model.

8. The apparatus of claim 7, wherein said PAN master thereby processes multiple unicast frames instead of single multicast one.

9. The apparatus of claim 7, wherein if said apparatus is a regular MN and part of all Regular MNs, said PAN Master will send the frame as regular multicast.

10. The apparatus of claim 7, wherein if a currently processed frame is targeted to an unsubscribed multicast destination, then said PAN Master process it in regular transmit flow.

11. The apparatus of claim 7, further comprising said MN initiating a subscription handshake to become eligible to receive multicast traffic protected by a security model agreed at association time.

12. A machine-accessible medium that provides instructions, which when accessed, cause a machine to perform operations comprising:

enabling heterogeneous secure associations in Wireless Fidelity Personal Area Networks (WiFi PAN) by designating as a regular mobile node (MN) a MN which establishes a security association with a PAN Master as it is advertised by said PAN Master and designating as an outstanding MN an MN which establishes a security association which differs from that advertised by said PAN Master, and differentiating by said PAN Master between subscribed and not subscribed multicast packets and if a currently processed frame is sent to a subscribed multicast address and both said Regular MN and said Outstanding MN are subscribed to said multicast address, then said PAN Master will convert the frame to unicast and will send to each subscribed Outstanding MN using its unicast security model.

13. The machine-accessible medium of claim 12, wherein said PAN master thereby processes multiple unicast frames instead of single multicast one.

14. The machine-accessible medium of claim 12, further comprising said instructions causing said machine to perform operations further comprising sending the frame as regular multicast one for all Regular MNs.

15. The machine-accessible medium of claim 12, wherein if a currently processed frame is targeted to an unsubscribed multicast destination, then said PAN Master process it in regular transmit flow.

16. The machine-accessible medium of claim 12, further comprising said instructions causing said machine to perform operations further comprising initiating a subscription handshake by said MN to become eligible to receive multicast traffic protected by a security model agreed at association time.

17. The machine-accessible medium of claim 12, further comprising said instructions causing said machine to perform operations further comprising using a 2-way Multicast Frame Subscription handshake to activate Access Point mechanisms to improve multicast traffic reliability by said MN.

18. A system, comprising:

a Wireless Fidelity Personal Area Networks (WiFi PAN) master;

at least one mobile node (MN) configured for heterogeneous secure associations with said PAN master;

wherein said at least one MN is designated as a regular mobile node (MN) if it establishes a security association with said PAN Master as it advertised by said PAN Master or designated as an outstanding MN if it establishes a security association which differs from that advertised by said PAN Master; and

wherein said PAN Master differentiates between subscribed and not subscribed multicast packets and if a currently processed frame is sent to a subscribed multicast address and both a Regular MN and an Outstanding MN are subscribed to said multicast address, then said PAN Master will convert the frame to unicast and will send to each subscribed Outstanding MN using its unicast security model.

19. The system of claim 18, wherein said PAN master thereby processes multiple unicast frames instead of single multicast one.

20. The system of claim 18, further comprising initiating a subscription handshake by said MN to become eligible to receive multicast traffic protected by a security model agreed at association time.

21. The system of claim 18, further comprising using a 2-way Multicast Frame Subscription handshake to activate Access Point mechanisms to improve multicast traffic reliability by said MN.