Apparatus and method for data packet security in a wireless sensor network

• US 8,285,986 B2
• Filed: 10/02/2009
• Issued: 10/09/2012
• Est. Priority Date: 10/02/2008
• Status: Expired due to Fees

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Shon, Tae-Shik, Choi, Hyo-Hyun, Koo, Bon-Hyun
• Primary Examiner(s): Reza, Mohammad W
• Application Number:
  US12/572,959
• Publication Number:
  US 20100088510A1
• Time in Patent Office: 1,103 Days
• Field of Search: 713/160, 713/150, 713/153, 726/1, 726/13, 380/255
• US Class Current: 713/160
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

An apparatus and method for providing data packet security in a wireless sensor network including a plurality of sensor nodes. The apparatus includes a memory unit for storing a plurality of node characteristic information and a plurality of settable security status information, each of the node characteristic information corresponding to at least one of the settable security status information; and a control unit for examining the node characteristic information of the control unit, if a data packet generation request is made, detecting the security status information corresponding to the examined node characteristic information from the memory unit, and generating data packets including the detected security status information.

Claims

1. An apparatus for providing data packet security in a wireless sensor network including a plurality of sensor nodes, the apparatus comprising:

a memory unit for storing a security information table including a plurality of node characteristic information and at least one of settable security status information corresponding to the plurality of node characteristic information; and

a control unit for examining the node characteristic information of the control unit, if a data packet generation request is made, detecting the security status information corresponding to the examined node characteristic information using the security information table stored in the memory unit, and generating data packets including the detected security status information,

wherein the node characteristic information comprises at least one of

network characteristic information;

application characteristic information; and

control characteristic information.

2. The apparatus of claim 1, wherein the security status information comprises a Hybrid Adaptive Security Suite (HASS).

3. The apparatus as claimed in claim 2, wherein the HASS comprises at least one of:

a security status algorithm;

authentication information;

redundancy information;

secrecy guarantee information; and

size information.

4. The apparatus of claim 1, further comprising:

a wireless unit for transmitting and receiving messages,

wherein if an update security status message including node characteristic change information is received through the wireless unit, the control unit changes the node characteristic information using the received update security status message, detects the security status information corresponding to the changed node characteristic information, generates the data packets including the detected security status information, and transmits the data packets to other sensor nodes.

5. A method for providing data packet security in a wireless sensor network including a plurality of sensor nodes, the method comprising:

storing, in a memory unit, a security information table including a plurality of node characteristic information and at least one of settable security status information corresponding to the plurality of the node characteristic information;

examining, by a control unit, the node characteristic information of a corresponding node, if a data packet generation request is made;

detecting the security status information corresponding to the examined node characteristic information using the security information table stored in the memory unit; and

generating data packets including the detected security status information,

wherein the node characteristic information includes at least one of network characteristic information, application characteristic information, and control characteristic information.

6. The method of claim 5, wherein the security status information includes a Hybrid Adaptive Security Suite (HASS).

7. The method of claim 6, wherein the HASS includes at least one of a security status algorithm, authentication information, redundancy information, secrecy guarantee information, and size information.

8. The method of claim 5, further comprising:

receiving an update security status message including node characteristic change information, before generating the data packet; and

changing the node characteristic information using the received update security status message.