Authentication for a multi-tier wireless home mesh network

• US 8,904,177 B2
• Filed: 01/27/2009
• Issued: 12/02/2014
• Est. Priority Date: 01/27/2009
• Status: Expired due to Fees

• Current Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Inventors: Patil, Abhishek, Jing, Xiangpeng, Liu, Aixin, Nguyen, Djung N.
• Primary Examiner(s): SHOLEMAN, ABU S
• Application Number:
  US12/360,771
• Publication Number:
  US 20100191968A1
• Time in Patent Office: 2,135 Days
• Field of Search: 713/170, 713/152, 713/153, 713/168, 713/171, 370/331, 370/337, 726/1, 726/16, 726/24, 726/25, 703/23, 345/2, 345/3, 345/5, 345/22, 380/270
• US Class Current: 713/170
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A method for a multi-tier wireless home mesh network may include authentication of a node within a wireless home networking environment after discovering a wireless home mesh network. The authentication comprises (1) transmitting a first message, the first message including (i) an encrypted pass-phrase being a pass-phrase encrypted with a public key of the node of the wireless home mesh network, (ii) a checksum of the encrypted pass-phrase, (iii) a public key of the wireless node, and (iv) a checksum of the public key of the wireless node, and (2) receiving a second message, the second message including a code to indicate whether the wireless node has been successfully authenticated along with the challenge text verification process to ensure the message was not tampered or sent by another node.

Claims

1. A method comprising:

discovering a wireless home mesh network in response to activation of a wireless node;

and

authenticating the wireless node before permitting the wireless node to join the wireless home mesh network by;

(1) transmitting a first message, the first message including (i) an encrypted pass-phrase being a pass-phrase encrypted with a public key of the wireless node of the wireless home mesh network, (ii) a checksum of the encrypted pass-phrase, (iii) the a public key of the wireless node, and (iv) a checksum of the public key of the wireless node; and

(2) receiving a second message, the second message including a code to indicate whether the wireless node has been successfully authenticated;

transmitting a third message, the third message including a first challenge text including a secret value combined with an extended service set identification (ESSID) of the wireless home mesh network; and

receiving a fourth message from a node of the wireless home mesh network, the fourth message including a second challenge text including the secret value combined with a media access control (MAC) value of the wireless node.

2. The method of claim 1, wherein the transmitting of the third message is a broadcast of a Neighbor Discovery Request message, the Neighbor Discovery Request message includes the challenge text and a node type to identify one of a plurality of node types established based on capabilities of the wireless node, the plurality of node types include a mobile node type being an electronic device with battery power capabilities and a stationary node being an electronic device without battery power capabilities.

3. The method of claim 2, wherein the receiving of the fourth message includes a receipt of a unicast Neighbor Discovery Response message from the node of the wireless home mesh network, the Neighbor Discovery Response message includes a node type to identify one of a plurality of node types of the node, a public key of the node and a checksum of the public key of the node.

4. The method of claim 1, wherein the transmitting of the first message is a broadcast of a Connection Request message, the Connection Request message further includes a retry value to indicate a number of retries in transmitting the Connection Request message if no acknowledgement message is received.

5. A method, comprising:

establishing a gateway node, communicably coupled to an external network, as a first tier of a wireless home mesh network;

classifying one or more stationary electronics devices into a second tier of nodes partially forming the wireless home mesh network;

classifying one or more mobile electronic devices into a third tier of nodes partially forming the wireless home mesh network; and

wirelessly communicating with a node being part of the wireless home mesh network that, before permitting a wireless node to join the wireless home mesh network, authenticates the wireless node by

(1) transmitting a first message that includes (i) an encrypted pass-phrase being a pass-phrase encrypted with a public key of the wireless node being part of the wireless home mesh network, (ii) a checksum of the encrypted pass-phrase, (iii) the public key of the wireless node being part of the wireless home mesh network, and (iv) a checksum of the public key of the wireless node being part of the wireless home mesh network, and

(2) receiving a second message, the second message including a code to indicate whether the wireless node has been successfully authenticated, wherein before wirelessly communicating with the node, the method further comprises discovering the wireless home mesh network by

transmitting a third message, the third message including a first challenge text including a secret value combined with an extended service set identification (ESSID) of the wireless home mesh network, and

receiving a fourth message from the node of the wireless home mesh network, the fourth message including a second challenge text including the secret key combined with a media access control (MAC) value of the wireless node.

6. The method of claim 5, wherein the second tier of nodes include a digital television.

7. The method of claim 5, wherein the second tier of nodes further include a video game system.

8. The method of claim 5, wherein the transmitting of the third message is a broadcast of a Neighbor Discovery Request message, the Neighbor Discovery Request message includes the challenge text and a node type to identify one of a plurality of node types established based on capabilities of the wireless node, the plurality of node types include a first node type being the mobile electronic device with battery power capabilities and a first node type being the stationary electronic device without battery power capabilities.

9. Adapted for communications with a node of an ad hoc network, a wireless node comprising:

a processor;

a chipset coupled to the processor;

a communications interface coupled to the chipset; and

a logic unit coupled to the chipset, the logic unit including

an authentication logic to authenticate the wireless node through use of a first message including an encrypted pass-phrase, a checksum of the encrypted pass-phrase, a public key of the wireless node, and a checksum of the public key of the wireless node, the processor configured for;

receiving an authentication message, the authentication message including a code to indicate whether the wireless node has been successfully authenticated;

transmitting a challenge message, the challenge message including a first challenge text including a secret value combined with an extended service set identification (ESSID) of the network; and

receiving a MAC challenge message from a node of the network, the MAC challenge message including a second challenge text including the secret value combined with a media access control (MAC) value of the wireless node.

10. The wireless node of claim 9, wherein the logic unit further comprises:

a network formation logic to establish the wireless node as either a mobile node or a stationary node,

a network discovery logic to scan each channel to detect a presence of an ad hoc network, and

a discovery response logic to respond to a network discovery request.

11. The wireless node of claim 9, wherein the challenge text returned in the authentication message includes an original equipment manufacturer (OEM)-specific secret value being a logical value associated with a manufacturer.

12. The wireless node of claim 11, wherein the challenge text includes the OEM-specific secret value combined with other information associated with the wireless node.

13. The wireless node of claim 11, wherein the challenge text includes the OEM-specific secret value combined with the other information associated with the wireless node being a Media Access Control (MAC) address of the wireless node.