Distributed network management hierarchy in a multi-station communication network

• US 8,949,945 B2
• Filed: 12/21/2012
• Issued: 02/03/2015
• Est. Priority Date: 12/14/2006
• Status: Active Grant

• Current Assignee: MOSAID Technologies Inc. (f/k/a Conversant Intellectual Property Management)
• Original Assignee: MOSAID Technologies Inc. (f/k/a Conversant Intellectual Property Management)
• Inventors: Larsen, James David
• Primary Examiner(s): Okeke, Izunna
• Application Number:
  US13/724,022
• Publication Number:
  US 20130117828A1
• Time in Patent Office: 774 Days
• US Class Current: 726/4
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

The invention relates to a network and to a method of operating a network. The network comprises a plurality of stations each able to transmit and receive data so that the network can transmit data between stations via at least one selected intermediate station. The network further comprises a plurality of levels of stations including a first level comprising user and/or seed stations, a second level comprising auxiliary stations providing access to auxiliary networks, a third level comprising at least one location management station, and a fourth level comprising at least one authentication station. The method comprises transmitting, from or on behalf of a station on the first level requiring authentication, to an authentication station via one or more stations, an authentication request message. In response, the authentication station transmits authentication data to authenticate the station on the first level.

Claims

1. A method carried out in a network, the method comprising:

generating, at a first station, an authentication request message destined to an authentication server;

receiving the authentication request message at a second station;

adding a new entry, that includes an authorization flag, in a routing table at the second station, the authorization flag indicating that an authentication response message is to be relayed by the second station before relaying other message or messages destined to or sourced by the first station;

relaying the authentication request message destined to the authentication server; and

generating the authentication response message at the authentication server upon receiving the authentication request message, the authentication response message for transmission to the first station.

2. The method as claimed in claim 1 wherein the network is a relay-based network.

3. The method as claimed in claim 2 wherein the network is an Opportunity Driven Multiple Access (ODMA) network.

4. The method as claimed in claim 1 wherein the second station maintains a record of connectivity with other stations.

5. The method as claimed in claim 1 further comprising:

receiving the authentication request message at another station in-between the first station and the second station; and

relaying the authentication request message from the another station to the second station.

6. The method as claimed in claim 3 wherein the authentication request message is encrypted using an RSA, DES, AES or Ksym encryption algorithm.

7. The method as claimed in claim 1 wherein the first station is not within a communications vicinity of the authentication server such that the first station does not have direct communicating capability in relation to the authentication server.

8. The method as claimed in claim 1 wherein the first station includes a smartcard to enable encryption and decryption.

9. The method as claimed in claim 8 wherein the smartcard further enables the first station to carry out a process that is in accordance with a Milenage algorithm.

10. The method as claimed in claim 1 wherein the first station is a wireless station.

11. The method as claimed in claim 1 wherein the authentication request message includes time-to-die information enabling a non-destination station that receives the authentication request message to selectively pass the authentication request message based on the time-to-die information.

12. The method as claimed in claim 1 wherein the authentication response message includes time-to-die information enabling a non-destination station that receives the authentication response message to selectively pass the authentication response message based on the time-to-die information.

13. The method as claimed in claim 1 wherein the authentication request message includes size information enabling a non-destination station that receives the authentication request message to selectively pass the authentication request message based on whether the size information is correct.

14. The method as claimed in claim 1 wherein the authentication response message includes size information enabling a non-destination station that receives the authentication response message to selectively pass the authentication response message based on whether the size information is correct.

15. The method as claimed in claim 1 further comprising:

encrypting the authentication response message using a smartcard.

16. The method as claimed in claim 1 wherein the authentication server includes a distributed database wherein information is stored across different units.

17. A method carried out at a second station of a plurality of stations in a network, the method comprising:

receiving an authentication request message at the second station of the plurality of stations, the authentication request message originating from a first station of the plurality of stations and destined to an authentication server;

adding a new entry, that includes an authorization flag, in a routing table, the new entry related to a source of the authentication request message, and the authorization flag indicating that an authentication response message that will originate from the authentication server is to be relayed by the second station before relaying other message or messages destined to or sourced by the first station; and

relaying the authentication request message destined to the authentication server.

18. The method as claimed in claim 17 wherein the network is a relay-based network.

19. The method as claimed in claim 18 wherein the network is an Opportunity Driven Multiple Access (ODMA) network.

20. The method as claimed in claim 17 wherein the second station maintains a record of connectivity with other stations.

21. The method as claimed in claim 17 wherein the authentication request message is encrypted using an RSA, DES, AES or Ksym encryption algorithm.

22. The method as claimed in claim 17 wherein the authentication request message includes time-to-die information enabling the second station to selectively block the authentication request message based on the time-to-die information.

23. The method as claimed in claim 17 wherein the authentication request message includes size information enabling the second station to selectively block the authentication request message based on whether the size information is correct.