Port driven authentication in a network

• US 7,668,204 B2
• Filed: 11/19/2004
• Issued: 02/23/2010
• Est. Priority Date: 11/19/2003
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Driscoll, Kevin, Hall, Brendan, Paulitsch, Michael
• Primary Examiner(s): Yao; Kwang B
• Assistant Examiner(s): Cehic; Kenan
• Application Number:
  US10/993,164
• Publication Number:
  US 20050135425A1
• Time in Patent Office: 1,922 Days
• Field of Search: 370/321, 370/337, 370/347, 370/442, 370/395.4, 370216-228, 370241-250, 370/400, 726 2- 10, 726 16- 21
• US Class Current: 370/474
• CPC Class Codes: H04L 12/44 Star or tree networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

A method for authenticating a message in a time division multiple access network is provided. The method includes receiving a message from an active relaying component, inspecting a value in the message inserted by the active relaying component, and comparing the value with an expected value based on a transmission schedule.

Claims

1. A method for authenticating a message in a time division multiple access network, the method comprising:

receiving a message having a designated field from a node at an active relaying component;

inserting a unique identifier into the designated field of the message at the active relaying component;

forwarding the message on to at least one other node in the network;

authenticating the message at the at least one other node based, at least in part, on the designated field; and

analyzing the message at the at least one other node to detect passive behavior of the active relaying component;

wherein the designated field is included in an error detection mechanism of the message received at the active relaying component and authenticating the message comprises calculating, at the at least one other node, an error detection mechanism which includes the designated field; and

wherein detecting passive behavior comprises detecting one of a short circuit in the active relaying component or a bypass around the active relaying component by absence of a change in the unique identifier.

2. The method of claim 1, wherein inserting the unique identifier comprises inserting a unique identifier based on a port number of the active relaying component.

3. The method of claim 1, wherein receiving a message comprises receiving a message with a default value stored in the designated field of the message into which the active relaying device inserts the unique identifier.

4. The method of claim 3, wherein inserting a unique identifier comprises replacing the default value with a port number of the active relaying component at which the message was received.