ROOT NODE AND A COMPUTER READABLE MEDIUM

• US 20120243685A1
• Filed: 09/13/2011
• Published: 09/27/2012
• Est. Priority Date: 03/24/2011
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Yamanaka, Shinji, Tanaka, Yasuyuki, Oba, Yoshihiro
• Granted Patent: US 8,750,511 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 2463/062 applying encryption of the keys
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0836 using tree structure or hierarchical structure
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A wireless mesh network includes a plurality of nodes to which a device key is assigned. The device key belongs to one of a plurality of groups. In a root node, a correspondence relationship between the nodes and the device key thereof, and a correspondence relationship between past join nodes and a device key thereof, are stored. When a new node in the wireless mesh network is detected as a past join node, the device key assigned to the past join node is assigned to the new node again. When the new node is not the past join node, a new device key is assigned to the new node. A cipher text is generated by encrypting a message using device keys assigned to the nodes and the new node. If the number of groups to which the device keys belong is fewer, a size of the cipher text is smaller.

Claims

1. A root node in a wireless mesh network including a plurality of nodes to which a device key is respectively assigned, the device key decrypting a cipher text and belonging to one of a plurality of groups, the root node comprising:

a device key assignment DB configured to store a correspondence relationship between the nodes and the device key assigned to each of the nodes, and a correspondence relationship between past join nodes joined in the past in the wireless mesh network and a device key assigned to each of the past nodes;

a join node control unit configured to detect a new node newly joining in the wireless mesh network;

a device key assignment unit configured to, when the new node is the past join node, assign the device key assigned to the past join node to the new node again, and to, when the new node is not the past join node, assign a new device key to the new node; and

a cipher text generation unit configured to, when a message is sent to the nodes and the new node, generate a cipher text by encrypting the message using device keys assigned to the nodes and the new node;

wherein, if the number of groups to which the devices keys assigned to the nodes and the new node belong is fewer in the plurality of groups, a size of the cipher text is smaller.

2. The root node according to claim 1,

wherein the device key assignment unit encrypts the device key assigned to the new node, and notifies an encrypted device key to the new node.

3. The root node according to claim 2,

wherein the plurality of the nodes has a parent-child relationship between two of the nodes hierarchically adjacent, and

wherein the cipher text can be decrypted by each of the nodes and the new node, and can be transferred from each of the nodes to a child node of each of the nodes.

4. The root node according to claim 3

wherein the cipher text is MKB (Media Key Block).

5. The root node according to claim 4,

wherein, when a group key as a common key among the nodes is updated, the message is generated as an updated group key.

6. The root node according to claim 5,

wherein the join node control unit, when the new node is detected, performs an authentication for network access with the new node, and generates an authentication result of the authentication for network access, and

wherein the device key assignment unit generates a root key as a common key between the root node and the new node using the authentication result, encrypts the device key assigned to the new node using the root key, and notifies an encrypted device key to the new node.

7. The root node according to claim 6,

wherein the device key assignment DB further stores a lifetime of each device key, and

wherein the device key assignment unit, if the new node is the past join node and if the lifetime of the device key assigned to the past join node does not expire, assigns the device key assigned to the past join node to the new node, and, if the lifetime of the device key assigned to the past join node has expired, assigns the new device key to the new node.

8. A computer readable medium for causing a computer to perform a method for controlling a root node in a wireless mesh network including a plurality of nodes to which a device key is respectively assigned, the device key decrypting a cipher text and belonging to one of a plurality of groups, the method comprising:

storing a correspondence relationship between the nodes and the device key assigned to each of the nodes, and a correspondence relationship between past join nodes joined in the past in the wireless mesh network and a device key assigned to each of the past join nodes;

detecting a new node newly joining in the wireless mesh network;

when the new node is the past join node, assigning the device key assigned to the past join node to the new node again;

when the new node is not the past join node, assigning a new device key to the new node; and

when a message is sent to the nodes and the new node, generating a cipher text by encrypting the message using device keys assigned to the nodes and the new node;

wherein, if the number of groups to which the devices keys assigned to the nodes and the new node belong is fewer in the plurality of groups, a size of the cipher text is smaller.