System and method for grouping multiple VLANs into a single 802.11 IP multicast domain

• US 7,301,946 B2
• Filed: 11/05/2003
• Issued: 11/27/2007
• Est. Priority Date: 11/22/2000
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Meier, Robert, Halasz, David
• Primary Examiner(s): Pham; Chi H.
• Assistant Examiner(s): ABELSON, RONALD B
• Application Number:
  US10/701,851
• Publication Number:
  US 20050025160A1
• Time in Patent Office: 1,483 Days
• Field of Search: None
• US Class Current: 370/390
• CPC Class Codes: H04L 12/185 with management of multicast group membership
• CPC Class Codes: H04L 12/1886 with traffic restrictions for efficiency improvement, e.g. involving subnets or subdomains
• CPC Class Codes: H04L 12/189 in combination with wireless systems selective distribution or broadcast in wireless communication networks H04W4/06
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 47/32 by discarding or delaying data units, e.g. packets or frames
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04W 40/32 for defining a routing cluster membership

Abstract

A system and method for identifying and grouping multiple virtual local area networks into a single multicast domain is provided. The system and method may be configured to designate a virtual local area network within as a multicast virtual local area network to streamline the delivery of multicast messages via a network. A station may be configured with multiple group keys so that it can receive messages from multiple broadcast or multicast domains.

Claims

1. A method for organizing virtual local area networks, the method comprising the steps of:

identifying at least one virtual local area network on a network;

organizing the identified virtual local area network into a multicast domain on the network;

designating an organized virtual area network as a multicast virtual local area network of the multicast domain for receiving a multicast message;

assigning an associated station to the multicast domain;

intercepting an Internet Group Management Protocol report targeted for the associated station to identify membership of an IP multicast group;

receiving an IP multicast message for the IP multicast group;

forwarding the IP multicast message to an access point on the multicast virtual local area network; and

transmitting the IP multicast message to the associated station on the multicast domain.

2. The method set forth in claim 1 further comprising the step of selecting at least one of a plurality of virtual local area networks to receive the multicast message.

3. The method set forth in claim 1 further comprising the step of establishing a multicast key for signing the IP multicast message transmitted on the network.

4. The method set forth in claim 3 further comprising the step of establishing a multicast key identification element corresponding to the multicast key for assisting a recipient of the IP multicast message to select the multicast key to decrypt the received IP multicast message.

5. The method set forth in claim 4 further comprising the step of adding the multicast key identification element to a header of the IP multicast message prior to the step of transmitting.

6. The method set forth in claim 1 wherein the step of identifying further includes programming a switch on the network to configure the at least one virtual local area networks.

7. The method set forth in claim 1 wherein the step of designating one of the at least one virtual local area networks further includes arbitrarily designating one of the at least one virtual local area networks as the multicast virtual local area network for the multicast domain on the access point.

8. The method set forth in claim 7 further comprising the step of establishing a broadcast key for signing a broadcast message transmitted on the network.

9. The method set forth in claim 8 further comprising the step of establishing a broadcast key identification element corresponding to the broadcast key for assisting a recipient of the broadcast message to select the broadcast key to decrypt the broadcast message.

10. The method set forth in claim 9 further comprising the step of adding the broadcast key and the broadcast key identification element to a header of the broadcast message.

11. The method set forth in claim 10 further comprising the step of transmitting the broadcast message encrypted with the broadcast key to prevent decryption by stations in a different broadcast domain.

12. The method set forth in claim 1 further comprising the step of encrypting the IP multicast message prior to transmission.

13. The method set forth in claim 12 further comprising the steps of:

receiving the IP multicast message on the multicast domain; and

decrypting the received IP multicast message.

14. The method set forth in claim 1 further comprising the step of determining if the IP multicast message is targeted for the multicast domain.

15. The method set forth in claim 14 further comprising the step of discarding the IP multicast message if the IP multicast stream is not targeted for the multicast domain.

16. The method set forth in claim 1 wherein the network is an 802.11 network.

17. A system for targeting multicast transmission on a network, the system comprising:

means for identifying at least one virtual local area network on the network;

means for grouping the identified virtual local area networks into a multicast domain on the network;

means for designating one of the identified virtual local area networks as a multicast virtual local area network for receiving the multicast transmission;

means for assigning an associated station to the multicast domain;

means for identifying membership of the multicast transmission; and

means for transmitting the multicast transmission to the identified members on the multicast virtual local area network.

18. The system set forth in claim 17 further comprising means for forwarding the multicast transmission to an access point on the multicast virtual local area network.

19. The system set forth in claim 18 further comprising means for generating a multicast key for signing the multicast transmission transmitted via the network.

20. The system set forth in claim 19 further comprising means for generating a multicast key identification element for identifying the multicast key.

21. The system set forth in claim 20 further comprising means for combining the multicast key identification element to the multicast message to form a multicast packet.