Methods and apparatus for secure, portable, wireless and multi-hop data networking

• US 7,881,667 B2
• Filed: 03/21/2008
• Issued: 02/01/2011
• Est. Priority Date: 11/25/2002
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Ji, Lusheng, Mishra, Arunesh, Thakkar, Sohil, Agre, Jonathan
• Primary Examiner(s): SMITH, CREIGHTON H
• Application Number:
  US12/053,414
• Publication Number:
  US 20080232338A1
• Time in Patent Office: 1,047 Days
• Field of Search: 455/411, 455/422, 455/435
• US Class Current: 455/41.2
• CPC Class Codes: H04L 45/54 Organization of routing tables
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 40/20 based on geographic position or location
• CPC Class Codes: H04W 40/26 for hybrid routing by combining proactive and reactive routing
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A mobile network solution provides secure and portable wireless networking service to mobile users with devices equipped with wireless network interfaces. The Secure Nomadic Wireless Network, or SNOWNET, follows a hierarchical approach. Special SNOWNET nodes are deployed in the area where networking service is needed and form a backbone network. At the same time, SNOWNET nodes provide local access service to regular mobile clients. SNOWNET provides security through authentication of the nodes and clients, as well as through encryption of the data.

Claims

1. A wireless network node, comprising:

backbone wireless interface to provide wireless backbone service with another wireless network node composed of a wireless backbone network;

supplicant unit to perform authentication with an authentication server via the backbone wireless interface; and

local wireless interface to provide wireless local service with a mobile client device;

authenticator unit to perform an authenticate request from the mobile client device with the authentication server as an authenticator after a successful authentication, and

wherein the wireless network node serves as authenticator of both the mobile client device and a newly added wireless network node that is enabled to provide authentication services to mobile clients.

2. The wireless network node as in claim 1, wherein the wireless network node is given a shared key of the wireless backbone network so that the wireless network node can participant in the wireless backbone network after the successful authentication.

3. The wireless network node as in claim 1,

wherein the wireless network node performs authentication in IEEE 802.1x framework with an authentication server via the backbone wireless interface.

4. The wireless network node as in claim 1,

wherein the wireless network node uses a key to encrypt data transmitted the wireless backbone network that is the same as all other wireless network nodes in the wireless backbone network use.

5. The wireless network node as in claim 1, further comprising:

a routing table composed of a local interface and neighbor interfaces to wireless network nodes that are next hop destination in a routing path.

6. A wireless network node, comprising:

backbone wireless interface to provide wireless backbone service with another wireless network node composed of a wireless backbone network;

supplicant unit to perform authentication with an authentication server via the backbone wireless interface;

local wireless interface to provide wireless local service with a mobile client device;

authenticator unit to perform an authenticate request from the mobile client device with the authentication server as an authenticator after a successful authentication, and

wherein the wireless network node is given a shared key of the wireless backbone network so that the wireless network node can participant in the wireless backbone network after a successful authentication, and

wherein the shared key of the wireless backbone network is different from a local key for the mobile client device.

7. A wireless network node, comprising:

backbone wireless interface to provide wireless backbone service with another wireless network node composed of a wireless backbone network;

supplicant unit to perform authentication with an authentication server via the backbone wireless interface;

local wireless interface to provide wireless local service with a mobile client device;

authenticator unit to perform an authenticate request from the mobile client device with the authentication server as an authenticator after a successful authentication; and

a bridging table composed of a local interface and neighboring interfaces to wireless network nodes that are next hop destination in a bridge path.

8. The wireless network node as in claim 7, wherein a routing table has subnet routes type entries and host routes type entries, the former being aggregated route entries where each entry describes routes for all the hosts within the corresponding address space, expressed in traditional format as a combination of network address and network mask, the latter being for the routes towards specific wireless network nodes.

9. A wireless network node, comprising:

an authentication unit to authenticate a wireless mobile client device; and

a backbone wireless interface to provide a wireless backbone service to the authenticated wireless mobile client device with another wireless network node composed of a wireless backbone network, where said another wireless network node serves as authenticator of a newly added wireless network node enabled to provide authentication services to mobile clients.

10. The wireless network node as in claim 9, wherein the authentication unit is substantially equal to an authentication server.

11. The wireless network node as in claim 9, further comprising:

a local wireless interface to provide a wireless local service to the wireless mobile client device.