Security in multiple wireless local area networks

• US 20030112820A1
• Filed: 10/25/2001
• Published: 06/19/2003
• Est. Priority Date: 03/17/2000
• Status: Active Grant

• Current Assignee: Symbol Technologies, LLC (Zebra Technologies Corporation)
• Original Assignee: Symbol Technologies, Inc. (Zebra Technologies Corporation)
• Inventors: Beach, Robert
• Granted Patent: US 7,173,923 B2
• Time in Patent Office: Days
• US Class Current: 370/465
• CPC Class Codes: H04L 12/4625 Single bridge functionality, e.g. connection of two networks over a single bridge
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion
• CPC Class Codes: H04L 69/14 Multichannel or multilink protocols
• CPC Class Codes: H04L 69/18 Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04W 12/00 Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 16/26 Cell enhancers or enhancement, e.g. for tunnels, building shadow
• CPC Class Codes: H04W 60/00 Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/08 Access point devices
• CPC Class Codes: H04W 88/085 Access point devices with remote components
• CPC Class Codes: H04W 88/12 Access point controller devices

Abstract

A wireless local area network is provided with simplified RF ports which are configured to provide lower level media access control functions. Higher level media access control functions are provided in a cell controller, which may service one or more RF ports that are capable of operating based on a pre-assigned security level. Mobile units can also be configured with the higher level media access control functions being performed in a host processor.

Claims

1. A system for providing wireless data communications between mobile units and a wired network, comprising:

a plurality of RF ports having at least one data interface and a security status, said RF ports being arranged to receive formatted data signals at said data interface and transmit corresponding RF data signals and arranged to receive RF data signals and provide corresponding formatted data signals; and

at least one cell controller, arranged to receive data signals from said wired network and to provide formatted data signals corresponding thereto to said data interface of said RF ports and to receive formatted data signals from said RF ports and to provide data signals corresponding thereto to said wired network, said cell controller controlling association of mobile units with one of said RF ports based on the security status of the one of said RF ports, providing formatted data signals for said mobile units to an associated RF port, and receiving formatted data signals from said mobile unit from said associated RF port.

2. A method for operating a wireless local area network having at least one RF port, a plurality of mobile units and a cell controller coupled to said RF port, comprising:

operating said RF port with a security status to relay signals received from mobile units based on the security status of said RF port to said cell controller and to relay signals received from said cell controller to said mobile units, and

operating said cell controller to control association of said mobile units with said RF port, including sending and receiving association signals between said RF port and said cell controller, and

operating said cell controller to send messages to and from said mobile unit via said RF ports.

3. A method for operating a wireless local area network as specified in claim 2, wherein signals are sent between said RF port and said cell controller using a first data protocol, and wherein signals are sent between said RF ports and said mobile units using a second data protocol, and wherein said signals between said RF port and said cell controllers comprise data packets using said first data protocol encapsulating data packets using said second data protocol.

4. A method for operating a wireless local area network as specified in claim 3 wherein said first protocol is an Ethernet protocol.

5. A method for operating a wireless local area network as specified in claim 4 wherein said second protocol is an IEEE Standard 802.11 protocol.

6. In a wireless data communications system for providing data communications following a standardized protocol, said protocol including association of mobile units with radio access locations, the improvement wherein there is provided at least one RF port at a radio access location, said RF port comprising a radio module and an RF port processor in data communications with a programmed computer and having a security status, wherein said RF port processor performs first functions of said standardized protocol and said programmed computer performs second functions of said standardized protocol, including said association of mobile units with said radio access location.

7. The improvement specified in claim 6, wherein said RF port further includes a read-only memory and a random access memory, and wherein said read-only memory includes a bootloader program, wherein said RF port processor is arranged to operate under said bootloader program to download instructions form said programmed computer and to store said instructions in said random access memory, and wherein said RF port processor operates under control of said downloaded instructions to perform said first functions.

8. The improvement specified in claim 6, wherein said standardized protocol includes cyclic redundancy check functions, and wherein said first functions include said cyclic redundancy check functions.

9. The improvement specified in claim 6, wherein said standardized protocol includes encryption/decryption functions and wherein said first functions include said encryption/decryption functions.

10. The improvement specified in claim 6, wherein said standardized protocol includes encryption/decryption functions and wherein said second functions include said encryption/decryption functions.

11. An RF port for use in a wireless data communications system comprising a radio module, having a data interface, a security status, and a transmitter/receiver for wireless data communications, and a digital signal processor, having first and second data communications ports, random access memory and read-only memory, wherein said second data communications port is coupled to said data interface of said radio module, wherein said read-only memory is provided with a bootloader program for controlling said digital signal processor to load program instructions to said random access memory via said first communications port.

12. An RF port as specified in claim 11, wherein said digital processor has a third data communications port and wherein said third data communications ports is coupled to said data interface of said radio module.

13. An RF port as specified in claim 12, wherein said second and third communications ports of said digital processor comprise serial ports.

14. An RF port as specified in claim 11, wherein said first communications port comprises a parallel port.

15. An RF port as specified in claim 14 wherein said parallel port is coupled to an Ethernet controller.

16. A method for operating an RF port having a radio module, a security status, a digital processor, random access memory and read-only memory, comprising storing a bootloader program in said read-only memory, operating said digital processor to download instructions from a computer to said random access memory using said bootloader program and based on said security status operating said RF port under said downloaded instructions to send and receive messages using said radio module.

17. A method as specified in claim 16, wherein said step of operating said RF port comprises receiving messages from said computer including protocol message portions for RF message transmission, and transmitting said message including said protocol message portions as an RF signal.

18. A method as specified in claim 16, wherein said step of operating said RF port comprises receiving RF messages having an RF protocol and sending said RF messages to said computer as data signals encapsulated in a further message protocol.

19. A method as specified in claim 18 further comprising interpreting said RF protocol using said downloaded instructions and sending said RF messages to said computer only if said RF messages include an identification of said RF port.

20. A method as specified in claim 16 wherein said downloaded instructions configure said computer and said RF port to operate as an access point for communication with mobile units.

21. A method as specified in claim 20 wherein said computer is operated to control association of said mobile units with said computer and RF port.

22. A method as specified in claim 16 wherein said downloaded instructions configure said computer and said RF port to operate as a mobile unit for communications with access points.

23. A method as specified in claim 19 wherein said downloaded instructions configure said computer and said RF port to operate as either an access point or a mobile unit under control instructions form said computer.

24. A method for transmitting signals having a wireless signal format using an RF port having a wired network interface, a data processor, a security status and an RF module, comprising providing signals to said wired network interface having wireless address data and message data within a data packet addressed to said RF port using a protocol for said wired network, operating said processor to provide wireless data signals having said wireless signal format for said address data and said message data to said RF module and operating said RF module to transmit said wireless data signals as an RF signal modulated with said wireless signal format.

25. A method for transmitting signals having a wireless signals format using an RF port having an Ethernet interface, a security status, data processor and an RF module, comprising providing an Ethernet data packet to said Ethernet interface, said Ethernet data packet encapsulating as data a data message having said wireless signal format, operating said data processor to provide said data message to said RF module, and operating said RF module to transmit said data message as an RF signal.

26. A method as specified in claim 25 further comprising operating said data processor to perform a cyclic redundancy computation on said data message and adding the result thereof to said data message.

27. A method as specified in claim 25 further comprising operating said data processor to control said radio module.

28. A method for receiving signals having a wireless signal format including wireless address data and message data at an RF port having a security status, wired network interface, a data processor and an RF module, comprising operating said RF module to receive RF signals having said wireless signal format, operating said data processor to receive wireless data signals from said RF module and provide data signals to said wired network interface comprising a data packet having a source address corresponding to said RF port using a protocol for said wired network, said data packet including said wireless address data and said message data.

29. A method for receiving RF message signals having a wireless signal format including an address data format and message data using an RF port having an Ethernet interface, a security status, a data processor and an RF module, comprising receiving said RF message signals in said RF module and providing said signals as data signals to said data processor, operating said data processor to interpret address data in said data signals and, in dependence on said address data encapsulating said message data and address data in an Ethernet packet and providing said Ethernet packet to said Ethernet interface.

30. A method as specified in claim 29 wherein said data processor is operated to encapsulated said address data in said Ethernet packet.

31. A method as specified in claim 29 wherein said data processor is further operated to perform a cyclic redundancy computation on said message data and to compare the result thereof with corresponding data received in said data signals.

32. A method as specified in claim 29, further comprising operating said data processor to control said radio module.

33. A simplified wireless local area network system comprising:

a computer having a data processor and a memory;

an RF port having an RF port data processor, an RF module, a security status and a data communications interface coupled to said computer;

a first program in said memory of said computer for operating said computer data processor to perform first wireless data communications functions, said functions including association with mobile units; and

a second program for operating said RF port data processor to perform second wireless data communications functions.

34. A system as specified in claim 33 wherein said second program operates said RF port data processor to perform second wireless data communications functions, including control of said RF module.

35. A system as specified in claim 33 wherein said second program operates said RF port data processor to perform second wireless data communications functions, including cyclic redundancy check functions.

36. A system as specified in claim 33 wherein said second program is stored in said computer memory and wherein said RF port data processor is arranged to download said second program.

37. A wireless access device for providing wireless access to a communication system, comprising a modem for sending and receiving data messages on said communications system and an RF port, comprising a data interface coupled to said modem, a data processor, a security status, and an RF module, said processor being programmed to receive data messages from said modem, to format said messages for wireless data communications and to provide said formatted messages to said RF module for transmission by RF data signals to at least one remote station, and to receive RF data signals from said at least one remote station, and to provide data messages to said modem to be sent on said communications system.

38. A wireless access device as specified in claim 37 wherein said communications system is a DSL communications system connected to the Internet, and wherein said modem comprises a DSL modem.

39. A wireless access device as specified in claim 37 wherein said communications system is a two-way cable communications system connected to the Internet, and wherein said modem comprises a cable modem.

40. A wireless access device as specified in claim 38 wherein said communication system comprises a fiber optic system, and wherein said modem comprises a fiber optical modem.

41. A method for providing wireless access to the Internet, comprising providing a modem coupled to the Internet and having a data communications interface connected to an RF port, configuring said RF port for wireless data communication to a mobile unit having a predetermined wireless communications address, and providing at least one mobile unit configured with said predetermined wireless communications address for conducting RF data communications with said RF port, said RF port being arranged to relay communications between said mobile unit and said modem based on a security status of said RF port.

42. The method specified in claim 41 wherein said step of providing said mobile unit, comprises providing a computer having an RF port.

43. A system for sending and receiving data messages to at least one mobile unit, comprising:

at least one RF port having a security status, an RF module for sending and receiving data messages to said at least one mobile unit using a first RF communications protocol, having a wired interface for sending and receiving data messages using a wired communications protocol, and a programmed processor for relaying data messages received on said wired interface using said RF communications protocol and for relaying data messages received by said RF module using said wired communications protocol; and

at least one cell controller for sending data messages to said wired interface of said RF port and for receiving data messages from said RF port using said wired communications protocol.

44. A system as specified in claim 43, wherein there are provided a plurality of said RF ports, and wherein said cell controller is arranged to address said data messages to said RF ports using said wired communication protocol.

45. A system as specified in claim 44 wherein said at least one mobile unit is associated with one of said RF ports, and wherein said processor is programmed to interpret source address data received in said RF communications protocol and for relaying a received message using said wired communications protocol only if said source address data corresponds to a mobile unit associated with said RF port.

46. A system as specified in claim 43 wherein said cell controller is arranged to provide messages to said RF port comprising mobile unit address data and message data encapsulated in a data packet following said wired communications protocol.

47. A system as specified in claim 46 wherein said cell controller is arranged to provide said mobile unit address data and said message data in said RF communications protocol encapsulated in said wired communications format.

48. A system as specified in claim 43 wherein said RF port is arranged to encapsulate messages received by said RF module in a data packet using said wired communication protocol.

49. A method for operating a wireless data communication system having at least one cell controller, at least one RF port and at least one mobile unit, comprising sending a first data message for said mobile unit from said cell controller to said RF port using a wired communication protocol, relaying said first message in said RF port using an RF communication protocol and sending said first message by radio signal from said RF port to said mobile unit based on the security status of said RF port.

50. The method specified in claim 49 wherein there are a plurality of RF ports and wherein said mobile unit is associated with one of said RF ports, and wherein said first data message is addressed to said RF port associated with said mobile unit.

51. The method specified in claim 49 wherein sending said first data message to said RF port comprises sending address data and message data encapsulated in a data packet using said wired communications protocol.

52. The method specified in claim 51 wherein said encapsulated address data and message data is formatted according to said RF communications protocol.

53. The method specified in claim 49, further comprising sending a second data message from said mobile unit to said RF port by radio signal using said RF communication protocol, and relayting said second data message using said wired communication protocol from said RF port to said cell controller.

54. A method for operating a wireless data communications system having at least one cell controller, at least one RF port and at least one mobile unit, comprising sending a data message by radio signal from said mobile unit to said RF port using an RF communications protocol, and relaying said message using a wired communication protocol from said RF port to said cell controller based on the security status of said RF port.

55. The method specified in claim 54 wherein said relaying comprises encapsulating said RF communications protocol message in a data packet using said wired communications protocol.