AUTHENTICATION FOR A MULTI-TIER WIRELESS HOME MESH NETWORK

• US 20100191968A1
• Filed: 01/27/2009
• Published: 07/29/2010
• Est. Priority Date: 01/27/2009
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Inventors: Liu, Aixin, Patil, Abhishek, Nguyen, Djung N., Jing, Xiangpeng
• Granted Patent: US 8,904,177 B2
• Time in Patent Office: Days
• US Class Current: 713/170
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

An apparatus and method for a multi-tier wireless home mesh network is described. The method may include authentication of a node within a wireless home networking environment after discovering a wireless home mesh network. The authentication comprises (1) transmitting a first message, the first message including (i) an encrypted pass-phrase being a pass-phrase encrypted with a public key of the node of the wireless home mesh network, (ii) a checksum of the encrypted pass-phrase, (iii) a public key of the wireless node, and (iv) a checksum of the public key of the wireless node, and (2) receiving a second message, the second message including a code to indicate whether the wireless node has been successfully authenticated along with the challenge text verification process to ensure the message was not tampered or sent by another node. Other embodiments are described and claimed.

Claims

1. A method comprising:

discovering a wireless home mesh network in response to activation of a wireless node; and

authenticating the wireless node before permitting the wireless node to join the wireless home mesh network by;

(1) transmitting a first message, the first message including (i) an encrypted pass-phrase being a pass-phrase encrypted with a public key of the node of the wireless home mesh network, (ii) a checksum of the encrypted pass-phrase, (iii) a public key of the wireless node, and (iv) a checksum of the public key of the wireless node, and

(2) receiving a second message, the second message including a code to indicate whether the wireless node has been successfully authenticated.

2. The method of claim 1, wherein the discovering of the wireless home mesh network comprises

transmitting a third message, the third message including a first challenge text including a secret value combined with an extended service set identification (ESSID) of the wireless home mesh network;

and

receiving a fourth message from a node of the wireless home mesh network, the fourth message including a second challenge text including the secret value combined with a media access control (MAC) value of the wireless node

3. The method of claim 2, wherein the transmitting of the third message is a broadcast of a Neighbor Discovery Request message, the Neighbor Discovery Request message includes the challenge text and a node type to identify one of a plurality of node types established based on capabilities of the wireless node, the plurality of node types include a mobile node type being an electronic device with battery power capabilities and a stationary node being an electronic device without battery power capabilities.

4. The method of claim 3, wherein the receiving of the fourth message includes a receipt of a unicast Neighbor Discovery Response message from the node of the wireless home mesh network, the Neighbor Discovery Response message includes a node type to identify one of a plurality of node types of the node, a public key of the node and a checksum of the public key of the node.

5. The method of claim 1, wherein the transmitting of the first message is a broadcast of a Connection Request message, the Connection Request message further includes a retry value to indicate a number of retries in transmitting the Connection Request message if no acknowledgement message is received.

6. A method, comprising:

establishing a gateway node, communicably coupled to an external network, as a first tier of a wireless home mesh network;

classifying one or more stationary electronics devices into a second tier of nodes partially forming the wireless home mesh network;

classifying one or more mobile electronic devices into a third tier of nodes partially forming the wireless home mesh network; and

wirelessly communicating with a node being part of the wireless home mesh network that, before permitting a wireless node to join the wireless home mesh network, authenticates the wireless node by

(1) transmitting a first message that includes (i) an encrypted pass-phrase being a pass-phrase encrypted with a public key of the node being part of the wireless home mesh network and (ii) a checksum of the encrypted pass-phrase, (iii) a public key of the node being part of the wireless home mesh network, and (iv) a checksum of the public key of the node being part of the wireless home mesh network, and

(2) receiving a second message, the second message including a code to indicate whether the wireless node has been successfully authenticated.

7. The method of claim 6, wherein the second tier of nodes include a digital television.

8. The method of claim 6, wherein the second tier of nodes further include a video game system.

9. The method of claim 6, wherein before wirelessly communicating with the node, the method further comprises discovering the wireless home mesh network by

(1) transmitting a third message, the third message including a first challenge text including a secret value combined with an extended service set identification (ESSID) of the wireless home mesh network, and

(2) receiving a fourth message from the node of the wireless home mesh network, the fourth message including a second challenge text including the secret key combined with a media access control (MAC) value of the wireless node.

10. The method of claim 9, wherein the transmitting of the third message is a broadcast of a Neighbor Discovery Request message, the Neighbor Discovery Request message includes the challenge text and a node type to identify one of a plurality of node types established based on capabilities of the wireless node, the plurality of node types include a first node type being the mobile electronic device with battery power capabilities and a first node type being the stationary electronic device without battery power capabilities.

11. Adapted for communications with a node of an ad hoc network, a wireless node comprising:

a processor;

a chipset coupled to the processor;

a communications interface coupled to the chipset; and

a logic unit coupled to the chipset, the logic unit including

an authentication logic to authenticate the wireless node through use of an encrypted pass-phrase, a checksum of the encrypted pass-phrase, a public key of the node, and a checksum of the public key of the node.

12. The wireless node of claim 11, wherein the logic unit further comprises:

a network formation logic to establish the wireless node as either a mobile node or a stationary node,

a network discovery logic to scan each channel to detect a presence of an ad hoc network, and

a discovery response logic to respond to a network discovery request.

13. The wireless node of claim 11, wherein the authentication logic of the logic unit authenticate the wireless node by (1) transmitting a first message, the first message including (i) the encrypted pass-phrase being a pass-phase of the wireless home mesh network, (ii) the checksum of the encrypted pass-phrase, (iii) the public key of the node, and (iv) the checksum of the public key of the node, and (2) receiving a second message, the second message including a code to indicate whether the wireless node has been successfully authenticated along with a challenge text to ensure the message was not tampered or sent by another node.

14. The wireless node of claim 13, wherein the challenge text returned in the second message includes an OEM-specific secret value being a logical value associated with a manufacturer.

15. The wireless node of claim 14, wherein the challenge text includes the OEM-specific secret value combined with other information associated with the wireless node.

16. The wireless node of claim 14, wherein the challenge text includes the OEM-specific secret value combined with the other information associated with the wireless node being a Media Access Control (MAC) address of the wireless node.