Key setting method, node, and network system

• US 8,732,454 B2
• Filed: 01/23/2013
• Issued: 05/20/2014
• Est. Priority Date: 07/28/2010
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Furukawa, Kazuyoshi, Kojima, Hisashi, Takenaka, Masahiko, Izu, Tetsuya
• Primary Examiner(s): LEMMA, SAMSON B
• Application Number:
  US13/747,742
• Publication Number:
  US 20130138949A1
• Time in Patent Office: 482 Days
• Field of Search: 713/153, 713/160, 713/168, 713/171, 726/3, 726/12, 380/44, 380/247, 380/255
• US Class Current: 713/153
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 84/22 with access to wired networks
• CPC Class Codes: H04W 88/16 Gateway arrangements

Abstract

A key setting method executed by a node transmitting and receiving a packet through multi-hop communication in an ad-hoc network among ad-hoc networks, includes receiving a packet encrypted using a key specific to a gateway and simultaneously reported from the gateway in the ad-hoc network; detecting a connection with a mobile terminal capable of communicating with a server retaining a key specific to a gateway in each ad-hoc network among the ad-hoc networks; transmitting to the server, via the mobile terminal and when a connection with the mobile terminal is detected, the encrypted packet received; receiving from the server and via the mobile terminal, a key specific to a gateway in the ad-hoc network and for decrypting the encrypted packet transmitted; and setting the received key specific to the gateway in the ad-hoc network as the key for encrypting the packet.

Claims

1. A key setting method executed by a node that transmits and receives a packet through multi-hop communication in an ad-hoc network among a plurality of ad-hoc networks, the key setting method comprising:

receiving a packet encrypted using a key specific to a gateway and broadcasted from the gateway in the ad-hoc network;

detecting a connection with a mobile terminal capable of communicating with a server retaining a key specific to a gateway in each ad-hoc network among the ad-hoc networks;

transmitting to the server, via the mobile terminal and when a connection with the mobile terminal is detected, the encrypted packet received;

receiving from the server and via the mobile terminal, a key specific to a gateway in the ad-hoc network and for decrypting the encrypted packet transmitted; and

setting the received key specific to the gateway in the ad-hoc network as the key for encrypting the packet.

2. The key setting method according to claim 1, wherein

the receiving includes receiving, from the server, a key stored in the database in the server and correlated with the address of the gateway in the an ad-hoc network, included in the encrypted packet.

3. The key setting method according to claim 1, further comprising:

recording a number of transfers of the encrypted packet received, and

determining based on the number transfers of each encrypted packet recorded at the recording and when a plurality of the encrypted packets is received at the receiving, an encrypted packet to be transmitted among the encrypted packets received, wherein

the transmitting includes transmitting to the server, the encrypted packet determined to be transmitted at the determining.

4. A node that transmits and receives a packet through multi-hop communication in an ad-hoc network among a plurality of ad-hoc networks, the node comprising a processor;

the processor is configured to;

receive a packet encrypted using a key specific to a gateway and simultaneously reported from the gateway in the ad-hoc network;

detect a connection with a mobile terminal capable of communicating with a server retaining a key specific to a gateway in each ad-hoc network among the ad-hoc networks;

transmit to the server, via the mobile terminal and upon detecting a connection with the mobile terminal, the encrypted packet received;

receive from the server and via the mobile terminal, a key specific to a gateway in the ad-hoc network and for decrypting the encrypted packet transmitted; and

set the received key specific to the gateway in the ad-hoc network as the key for encrypting the packet.

5. The node according to claim 4, wherein

the first receiver configured to receive, from the server, a key stored in a database in the server and correlated with the address of the gateway in the ad-hoc network, included in the encrypted packet.

6. The node according to claim 4, further comprising:

a recording unit configured to record a number of transfers of the encrypted packet received, and

a determining unit configured to determine based on the number transfers of each encrypted packet recorded and upon receiving a plurality of the encrypted packets, an encrypted packet to be transmitted among the encrypted packets received, wherein

the transmitter configured to transmits to the server, the encrypted packet determined to be transmitted.

7. A network system comprising:

a server that accesses a database storing a key specific to a gateway in each ad-hoc network among a plurality of ad-hoc networks, the server comprising a second processor; and

a node that transmits and receives a packet through multi-hop communication in an ad-hoc network among the ad-hoc networks, the node comprising a first processor, wherein

the first processor is configured to;

receive a packet encrypted using a key specific to a gateway and broadcasted from the gateway in the ad-hoc network,

detect a connection with a mobile terminal capable of communicating with the server,

transmit, via the mobile terminal and to the server upon detecting a connection with the mobile terminal, the encrypted packet received,

receive from the server and via the mobile terminal, a key specific to a gateway in the ad-hoc network and for decrypting the encrypted packet transmitted, and

set the received key specific to the gateway in the ad-hoc network as the key for encrypting the packet,

the second processor is configured to;

receive from the node and via the mobile terminal, the encrypted packet,

extract from the database, the key for decrypting the encrypted packet received, and

transmit to the node and via the mobile terminal, the key for decrypting the encrypted packet extracted.