System and method for secure wireless multi-hop network formation

• US 7,881,474 B2
• Filed: 07/17/2007
• Issued: 02/01/2011
• Est. Priority Date: 07/17/2006
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Nortel Networks Limited (Nortel Networks Corporation)
• Inventors: Sun, Sheng
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US11/826,674
• Publication Number:
  US 20080016338A1
• Time in Patent Office: 1,295 Days
• Field of Search: 380/270, 380277-278, 380281-285, 713168-171, 713/175, 726 2- 6
• US Class Current: 380/270
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/12 Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

The present invention provides methods and devices for a security architecture for use in wireless multi-hop networks. A method for implementing pair-wise encryption key establishment, network node authentication and determining tunnel encryption keys is provided in a following manner. In a multi-hop wireless network including a plurality of network nodes, pair-wise security is established between pairs of neighboring network nodes of the plurality of network nodes. For example, pair-wise security is established in the form of temporal pair-wise encryption keys. Following establishment of pair-wise security between pairs of neighboring network nodes, for a pair of network nodes that are not neighbors, tunnel security is established between the pair of network nodes using tunnel encryption keys derived by the pair of network nodes on an ad hoc basis. The tunnel encryption keys are used to form the connection between non-neighboring network nodes so as to avoid the hop-by-hop encryption/decryption used in conventional multi-hop wireless systems.

Claims

1. A method comprising:

in a multi-hop wireless network comprising a plurality of network nodes, establishing pair-wise security between pairs of neighbouring network nodes;

for at least one pair of network nodes that are not neighbours, establishing security between the pair of network nodes that are not neighbours using tunnel encryption keys derived by the pair of network nodes that are not neighbours on an ad hoc basis.

2. The method of claim 1 wherein:

for communication between two end user devices connected to neighbouring network nodes, using the established pair-wise security;

for communication between two end user devices that are connected to any of the at least one pair of network nodes that are not neighbours, using the tunnel encryption keys.

3. The method of claim 1 wherein establishing pair-wise security between pairs of neighbouring network nodes comprises establishing pair-wise encryption keys that change periodically.

4. The method of claim 3 wherein establishing encryption keys that change periodically comprises:

updating pair-wise encryption keys between pairs of neighbouring network nodes at the expiry of a timer that defines a period of the pair-wise encryption keys being valid.

5. The method of claim 1 further comprising:

the plurality of network nodes performing a negotiation process to determine which at least one network node is to be an authenticating node for performing authentication of nodes in the network and which network nodes are supplicant nodes to be authenticated.

6. The method of claim 5 further comprising:

the authenticating node authenticating at least one supplicant node.

7. The method of claim 6 wherein authenticating at least one supplicant node comprises:

the authenticating node using a server provisioned to aid in the authenticating of network nodes.

8. The method of claim 7 further comprising the server providing pair-wise master keys (PMKs) to the network nodes during the authenticating of the network nodes.

9. The method of claim 6 further comprising:

when authenticating the at least one supplicant node, distributing pair-wise master keys (PMKs) to both the supplicant node and the authenticating node.

10. The method of claim 5 further comprising:

deriving at least one of;

pair-wise encryption keys for unicast; and

pair-wise encryption keys for multicast/broadcast from pair-wise master encryption keys.

11. The method of claim 1 wherein establishing security between the pair of non-neighbouring network nodes using tunnel encryption keys further comprises a first network node of the pair of non-neighbouring network nodes determining a routing path through the network to the second network node of the pair of non-neighbouring network nodes.

12. The method of claim 11 further comprising:

continuously employing the tunnel encryption keys, once established, for any traffic destined between the pair of non-neighbouring network nodes for as long as the tunnel encryption keys are valid.

13. The method of claim 11 wherein establishing security between the pair of non-neighbouring network nodes using tunnel encryption keys comprises using encryption keys that are based on one or both of a pre-shared key scheme and a public key scheme.

14. An apparatus comprising:

transmitting circuitry and receiving circuitry configured for communicating with at least one network node;

a pair-wise security module configured to establish pair-wise security between neighbouring network nodes;

a tunnel key security module configured to establish security between non-neighbouring network nodes using tunnel encryption keys on an ad hoc basis.

15. The apparatus of claim 14 further comprising:

a negotiator configured to negotiate whether the apparatus is an authenticating node for performing authentication of network nodes in a network or is a supplicant node that is to be authenticated.

16. The apparatus of claim 15, wherein when the apparatus is an authenticating node, the apparatus further comprising:

an authenticator for authenticating supplicant nodes.

17. The apparatus of claim 16, wherein the authenticator communicates with a server that provides pair-wise master keys (PMKs) to the network nodes.

18. The apparatus of claim 14 wherein the pair-wise security module further comprises:

a pair-wise encryption key generator configured to derive encryption keys for a neighbouring network node based on pair-wise master keys (PMKs) provided to the apparatus.

19. The apparatus of claim 14 wherein the tunnel key security module further comprises:

a tunnel encryption key generator configured to derive tunnel encryption keys for communication with a non-neighbouring network node.

20. The apparatus of claim 14 further comprising:

a nonce adder configured to add a random number to a packet being sent to another network node.