Method and arrangement for transmitting data in a communication system that employs a multi-hop method

• US 20090265550A1
• Filed: 08/16/2006
• Published: 10/22/2009
• Est. Priority Date: 08/29/2005
• Status: Abandoned Application

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Bacnk, Sebastian, Kutschenreuter, Matthias, Vicari, Norbert, Finkenzeller, Michael, Bahr, Michael, Schwingenschlogl, Christian
• Application Number:
  US11/991,214
• Publication Number:
  US 20090265550A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

In a multi-hop network, packets are classified into header and user data for coded distribution. The header information, especially the multi-hop information, is separated in a coded manner from the user data, such that each network node need only decode the header in order to forward the packet. The header and the user data are guided, independently from each other, to the hardware of the respective device for separate coding, as if they were complete packets. A hardware accelerated coding of header and user data is possible using different keys. The header also contains integrity protection.

Claims

1-18. -18. (canceled)

19. A method for transmitting data in a communication system using a multi-hop method, comprising:

providing a network, wherein the network has a node;

providing a first node transmitting data;

providing a second node receiving data;

providing a third node for receiving data and forwarding data;

transmitting data from the first node to the second node via the third node;

fragmenting data into packets for transmission purposes, wherein the packets have

a payload data component,

a first control data component assigned to the multi-hop method, and

a second control data component assigned to the network; and

encrypting the data based upon at least a first master key determined by the first node and second node, wherein the payload data component and the first control data component are encrypted separately.

20. The method as claimed in claim 19, wherein the payload data component and the first control data component are encrypted like complete packets.

21. The method as claimed in claim 19, wherein only the payload data component is encrypted based on the first master key.

22. The method as claimed in claim 19, wherein a second master key determined by the respective transmitting first node and by a neighboring node suitable as a third node is formed.

23. The method as claimed in claim 19, wherein a second master key is determined based upon the first node and the neighboring third node.

24. The method as claimed in claim 22, wherein the first control data component is encrypted based upon the second master key.

25. The method as claimed in claim 19, wherein:

a second key derived from the first master key is determined,

a first key derived from the second master key is determined,

the packets for transmission in the respective first node are each encrypted in such a way that

the first control data component is encrypted using the first key,

the payload data component is encrypted using the second key, and

the second control data component remains unencrypted,

the packets are transmitted to the third node,

the third node decrypts the first control data component or first and second control data component encrypted using the first key, and

the third node evaluates the control data component, wherein

the payload data is encrypted using the second key and the transmission is terminated if the third node corresponds to the second node, and

if the third node does not correspond to the second node

the third node is set as the first node, and

the packets are transmitted again to the third node, and

the third node decrypts again the first control data component or first and second control data component encrypted using the first key, and

the third node evaluates again the control data component.

26. The method as claimed in claim 19, wherein:

a second key derived from the first master key is determined,

a first key derived from the second master key is determined,

the packets for transmission in the respective first node are each encrypted in such a way that

an integrity value is generated for the first and/or second control data component using the first key and added to the packet,

the payload data component is encrypted using the second key, and

the second control data component remains unencrypted,

the packets are transmitted to the third node,

using the first key the third node performs an integrity check on the control data components for which an integrity value has been generated, and

the third node evaluates the control data component, wherein

the payload data is encrypted using the second key and the transmission is terminated if the third node corresponds to the second node, and

if the third node does not correspond to the second node the third node is set as the first node.

27. The method as claimed in claim 19, wherein packets generated in accordance with the multi-hop method and containing only routing messages are completely encrypted.

28. The method as claimed in claim 27, wherein routing packets are generated in accordance with a routing protocol.

29. The method as claimed in claim 28, wherein the routing message packets are generated within a second layer of a OSI reference model.

30. The method as claimed in claim 27, wherein the routing message packets are generated within a third layer of a OSI reference model.

31. The method as claimed in claim 27, wherein an AODV protocol, an OLSR protocol, or derivatives thereof function as protocols.

32. The method as claimed in claim 19, wherein the encryption is performed in accordance with security methods conforming to IEEE802.1X and/or IEEE802.11i.

33. The method as claimed in claim 19, wherein at least one of a plurality of networks operates in conformity with IEEE802.11 or its derivatives.

34. The method as claimed in claim 19, wherein the second control data component is formed by header data according to IEEE802.11.

35. The method as claimed in claim 19, wherein the first control data component is formed by header data according to the multi-hop method.

36. The method as claimed in claim 19, wherein the encryption is based upon a 128-bit key in conformity with a Counter Mode CBC-MAC Protocol.