Methods and apparatus for secure, portable, wireless and multi-hop data networking

• US 8,688,041 B2
• Filed: 12/22/2010
• Issued: 04/01/2014
• Est. Priority Date: 11/25/2002
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Ji, Lusheng, Agre, Jonathan, Mishra, Arunesh, Thakkar, Sohil
• Primary Examiner(s): SMITH, CREIGHTON H
• Application Number:
  US12/976,796
• Publication Number:
  US 20110099611A1
• Time in Patent Office: 1,196 Days
• Field of Search: 455/41.2, 455/411, 455/435.1, 370/331
• US Class Current: 455/41.2
• CPC Class Codes: H04L 45/54 Organization of routing tables
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 40/20 based on geographic position or location
• CPC Class Codes: H04W 40/26 for hybrid routing by combining proactive and reactive routing
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A mobile network solution provides secure and portable wireless networking service to mobile users with devices equipped with wireless network interfaces. The Secure Nomadic Wireless Network, or SNOWNET, follows a hierarchical approach. Special SNOWNET nodes are deployed in the area where networking service is needed and form a backbone network. At the same time, SNOWNET nodes provide local access service to regular mobile clients. SNOWNET provides security through authentication of the nodes and clients, as well as through encryption of the data.

Claims

1. An authentication method for clients that move among wireless service areas provided by multiple nodes, said mobile client authentication method comprising:

implementing communication via a client, using a key generated after client authentication has been performed, said client carrying out the communication encoded using said key in a wireless service area provided by a first node that possesses said key;

sending, when determining that the client moves from the wireless service area of the first node to the wireless service area of a second node, a message including at least information on said key to the second node, and

enabling the client to carry out encoded communication in the wireless service area provided by the second node, when the second node is able to confirm that at least the information on said key is identical to that of said key possessed by the first node.

2. The authentication method as described in claim 1, wherein in said authentication, the client is authenticated via the first node in accordance with the authentication procedures stipulated by IEEE 802.1X.

3. The authentication method as described in claim 2, wherein when the second node is able to confirm that at least the information on said key is identical to that of said key possessed by the first node, the client is able to carry out encoded communication in the wireless service area provided by the second node without following the authentication procedures stipulated by IEEE 802.1X.

4. The authentication method as described in claim 1, wherein said message includes at least information identifying the first node.

5. The authentication method as described in claim 1, wherein at least one node includes an interface for providing trunk communications in addition to an interface that provides a wireless service area.

6. A node that receives authentication from another node and, when a client carrying out mobile communication encoded using a key in the wireless service area provided by said other node moves, provides wireless service to said client, said node comprising,

a reception unit that receives a message including at least information on the key from said client when receiving authentication from said other node, when said client is moving to the wireless service area of its node, and

a unit that enables said client to carry out encoded communication in the wireless service area, when the information on the key received from the client can be confirmed as being the same as said key in said other node.

7. The node as described in claim 6, wherein in said authentication, the client is authenticated in accordance with the authentication procedures stipulated by IEEE 802.1X.

8. The node as described in claim 7, wherein said client to carry out encoded communication in the wireless service area is able to confirm that at least the information on said key is identical to that of said key, said client is able to carry out encoded communication without following the authentication procedures stipulated by IEEE 802.1X.

9. The node as described in claim 6, wherein said message includes at least information identifying the node in question.

10. The node as described in claim 6, comprising:

an interface that provides a wireless service area, and an interface for providing trunk communications.