Secure mobile ad-hoc network and related methods

• US 7,346,167 B2
• Filed: 05/10/2002
• Issued: 03/18/2008
• Est. Priority Date: 05/10/2002
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Harris Corporation (L3Harris Technologies, Inc.)
• Inventors: Billhartz, Thomas Jay, Fleming, Frank Joseph
• Primary Examiner(s): Vu, Kim
• Assistant Examiner(s): TRUVAN, LEYNNA THANH
• Application Number:
  US10/143,145
• Publication Number:
  US 20030210787A1
• Time in Patent Office: 2,139 Days
• Field of Search: 713/150, 713/153, 713/165, 713/171, 726 2- 4, 726/26, 709223-232, 380/228, 380/239, 380/270, 380/37, 380277-286, 380/44, 380 28- 30, 380/46, 380/4, 380/47, 380/255, 380/262, 380/247, 375/240.16, 375/240.22, 708/441, 708/250, 708/255, 710/50, 455/3.01, 455/456.6
• US Class Current: 380/270
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0457 wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/0872 using geo-location information, e.g. location data, time, relative position or proximity to other entities
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A mobile ad-hoc network may include a plurality of nodes including a source node and at least one adjacent node. The source node may include a wireless communications device for establishing a wireless communications link with the at least one adjacent node, a plain text source, and a seed generator for performing a one-way algorithm using a secret key for generating a seed. Furthermore, the source node may also include a key encryptor for receiving the seed and generating a key sequence based thereon, and a logic circuit for generating cipher text for transmission over the wireless communications link and based upon the key sequence and the plain text.

Claims

1. A secure mobile ad-hoc network (MANET) node comprising:

a wireless communications device for establishing a wireless communications link with at least one adjacent MANET node in a MANET to establish at least one route to a destination MANET node based upon a MANET routing protocol to thereby transfer cipher text to the destination MANET node;

a plain text source;

a random initialization vector (IV) generator for generating a random IV;

a seed generator for performing a one-way algorithm using a secret key and the random IV for generating a seed;

a key encryptor receiving the seed and generating a key sequence based thereon; and

a logic circuit generating the cipher text for transmission to the at least one adjacent MANET node over the wireless communications link and based upon the key sequence and the plain text;

said random IV generator being coupled to said wireless communications device, and said wireless communications device transmitting the random IV with the cipher text.

2. The node of claim 1 wherein the one-way algorithm comprises a hashing algorithm.

3. The node of claim 2 wherein the hashing algorithm comprises a single-phase hashing algorithm.

4. The node of claim 1 wherein said seed generator performs the one-way algorithm using the secret key and a changing reference value to generate the seed.

5. The node of claim 4 wherein the wireless communications device has associated therewith a media access controller (MAC) layer;

and wherein the changing reference value comprises a MAC layer sequence number.

6. The node of claim 1 wherein said seed generator performs the one-way algorithm using the secret key and an address of the node.

7. The node of claim 1 further comprising an integrity checker for generating an integrity check value based upon the plain text;

and wherein said logic circuit generates the cipher text based upon the key sequence, the plain text, and the integrity check value.

8. The node of claim 7 further comprising a concatenator for concatenating the plain text and the integrity check value;

and wherein said logic circuit generates the cipher text based upon the key sequence and the concatenation of the plain text and the integrity check value.

9. The node of claim 7 wherein said integrity checker comprises a checksum generator.

10. The node of claim 1 wherein said logic circuit comprises an exclusive OR logic circuit.

11. The node of claim 1 further comprising a random initialization vector (IV) generator for generating a random IV, and a concatenator for concatenating the seed and the random IV;

and wherein said key encryptor generates the key sequence based upon the concatenation of the seed and the random IV.

12. The node of claim 1 wherein the secret key comprises a static secret key.

13. The node of claim 1 wherein said key encryptor comprises a pseudo-random number generator.

14. The device of claim 1 wherein the key sequence comprises a plurality of bytes;

and wherein said key encryptor deletes at least one byte from the key sequence prior to generation of the cipher text by said logic circuit.

15. A secure mobile ad-hoc network (MANET) node comprising:

a wireless communications device for establishing a wireless communications link with at least one adjacent MANET node in a MANET to establish at least one route to a destination MANET node based upon a MANET routing protocol and to thereby transfer cipher text to the destination MANET node;

a plain text source;

a seed generator for performing a hashing algorithm using a secret key and a changing reference value for generating a seed;

a random initialization vector (IV) generator for generating a random IV;

a key encryptor receiving the seed and the random IV and generating a key sequence based thereon; and

a logic circuit generating the cipher text for transmission to the at least one adjacent MANET node over the wireless communications link and based upon the key sequence and the plain text.

16. The node of claim 15 wherein the wireless communications device has associated therewith a media access controller (MAC) layer;

and wherein the changing reference value comprises a MAC layer sequence number.

17. The node of claim 15 wherein said seed generator performs the hashing algorithm using the secret key, the changing reference value, and an address of the node.

18. The node of claim 15 further comprising an integrity checker for generating an integrity check value based upon the plain text;

and wherein said logic circuit generates the cipher text based upon the key sequence, the plain text, and the integrity check value.

19. The node of claim 18 wherein said integrity checker comprises a checksum generator.

20. The node of claim 15 further comprising a concatenator for concatenating the seed and the random IV;

and wherein said key encryptor generates the key sequence based upon the concatenation of the seed and the random IV.

21. The node of claim 15 wherein said key encryptor comprises a pseudo-random number generator.

22. The node of claim 15 wherein said seed generator performs a single-phase hashing algorithm.

23. A secure mobile ad-hoc network (MANET) node comprising:

a wireless communications device for establishing a wireless communications link with at least one adjacent MANET node in a MANET to establish at least one route to a destination MANET node based upon a MANET routing protocol and to thereby transfer cipher text to the destination MANET node;

a plain text source;

a random initialization vector (IV) generator for generating a random IV;

a seed generator for performing a hashing algorithm using a secret key and the random IV for generating a seed;

a key encryptor generating a key sequence based upon the seed; and

a logic circuit generating the cipher text for transmission to the at least one adjacent MANET node over the wireless communications link and based upon the key sequence and the plain text.

24. The node of claim 23 wherein said seed generator performs the hashing algorithm using the secret key, the random IV, and an address of the node.

25. The node of claim 23 further comprising an integrity checker for generating an integrity check value based upon the plain text;

and wherein said logic circuit generates the cipher text based upon the key sequence, the plain text, and the integrity check value.

26. The node of claim 25 wherein said integrity checker comprises a checksum generator.

27. The node of claim 23 wherein said key encryptor comprises a pseudo-random number generator.

28. The node of claim 23 wherein said seed generator performs a single-phase hashing algorithm.

29. A mobile ad-hoc network (MANET) comprising:

a plurality of MANET nodes comprising a source MANET node, at least one MANET node adjacent to said source MANET node, and a destination MANET node, said source MANET node comprising

a wireless communications device for establishing a wireless communications link with said at least one adjacent MANET node to establish at least one route to the destination MANET node based upon a MANET routing protocol and to thereby transfer cipher text to the destination MANET node,

a plain text source,

a random initialization vector (IV) generator for generating a random IV;

a seed generator for performing a one-way algorithm using a secret key and the random IV for generating a seed,

a key encryptor receiving the seed and generating a key sequence based thereon, and

a logic circuit generating the cipher text for transmission to the at least one adjacent MANET node over the wireless communications link and based upon the key sequence and the plain text.

30. The mobile ad-hoc network of claim 29 wherein the one-way algorithm comprises a hashing algorithm.

31. The mobile ad-hoc network of claim 29 wherein said seed generator performs the one-way algorithm using the secret key and a changing reference value to generate the seed.

32. The node of claim 31 wherein the wireless communications device has associated therewith a media access controller (MAC) layer;

and wherein the changing reference value comprises a MAC layer sequence number.

33. The node of claim 29 wherein said seed generator performs the one-way algorithm using the secret key and an address of the node.

34. The node of claim 29 wherein said random IV generator is coupled to said wireless communications device, and wherein said wireless communications device also transmits the random IV with the cipher text.

35. A communications method for a mobile ad-hoc network (MANET) comprising a plurality of MANET nodes, the method comprising:

establishing a route from a source MANET node to a destination MANET node in the MANET based upon a MANET routing protocol;

generating a random initialization vector (IV) at the source MANET node;

performing a one-way algorithm at the source MANET node using a secret key and the random IV to generate a seed;

generating a key sequence at the source MANET node based upon the seed;

generating cipher text at the source MANET node based upon the key sequence and the plain text; and

transmitting the cipher text from the source MANET node to at least one adjacent MANET node along the route to the destination MANET node.

36. The method of claim 35 wherein performing the one-way algorithm comprises performing a hashing algorithm.

37. The method of claim 35 wherein performing the one-way algorithm comprises performing the one-way algorithm using the secret key and a changing reference value.

38. The method of claim 37 wherein the changing reference value comprises a MAC layer sequence number.

39. The method of claim 35 wherein performing the one-way algorithm comprises performing the one-way algorithm using the secret key and an address of the node.

40. The method of claim 35 further comprising generating an integrity check value at the source node based upon the plain text.

41. The method of claim 40 wherein generating the cipher text comprises generating the cipher text based upon the key sequence, the plain text, and the integrity check value.

42. The method of claim 35 further comprising generating a random initialization vector (IV) and concatenating the seed and the random IV at the source node;

and

wherein generating the key sequence comprises generating the key sequence based upon the concatenation of the seed and the random IV.