Secure peer group network and method thereof by locking a mac address to an entity at physical layer

• US 20100088748A1
• Filed: 09/18/2009
• Published: 04/08/2010
• Est. Priority Date: 10/03/2008
• Status: Abandoned Application

• Current Assignee: Yoel Gluck
• Original Assignee: Yoel Gluck
• Inventors: Gluck, Yoel
• Application Number:
  US12/585,586
• Publication Number:
  US 20100088748A1
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 9/007 involving hierarchical structures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A system and method of locking media access control (MAC) address of each entity to the entity'"'"'s identity for formation of a secure peer group is disclosed. The identity of each entity includes at least the public key from the public-private key pair from public key infrastructure (PKI) and the entities'"'"' MAC address. Using the unique identifying features a security server links and locks the MAC address of the entity to its identity so that no other entity can identify itself as the owner of that MAC address to the secure server. A group of such entities and secure server with locked MAC addresses form a qualified and verifiable secure peer group enabled to establish a secure LAN.

Claims

1. A method for creating a secure peer group (SPG) comprising:

locking a media access control (MAC) address of a first entity in a network to an identity of said first entity;

registering said first entity as a member of the SPG, the SPG comprising of entities having their respective MAC address locked to an identity; and

preventing a second entity from registering with the SPG using a MAC address already locked to an identity of at least one of the SPG entities;

such that the SPG is enabled to avoid an attack on said network by a network entity attempting to use any one of said MAC address locked to a different identity within the SPG.