Intelligent Association of Nodes with PAN Coordinator

• US 20070171859A1
• Filed: 03/28/2007
• Published: 07/26/2007
• Est. Priority Date: 01/20/2006
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Enright, Mark, Brahmbhatt, Deepali
• Granted Patent: US 8,355,363 B2
• Time in Patent Office: Days
• US Class Current: 370/328
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 28/18 Negotiating wireless communication parameters
• CPC Class Codes: H04W 74/00 Wireless channel access
• CPC Class Codes: H04W 84/10 Small scale networks; Flat hierarchical networks
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

Methods apparatuses, and systems directed to managing wireless node access to one or more wireless networks. According to one implementation of the present invention, a business logic application may function as a package tracking application to manage access to wireless access points in different WLANs along the route. A sensor node is initialized and configured with one or more connection parameter sets allowing it to associate with a given wireless network implemented by one or more access points. In one implementation, the sensor node is configured only to accept received wireless frames that it can properly decrypt using the currently-stored encryption key. Accordingly, until the sensor node comes within radio contact of a wireless access point or other wireless node configured with the same encryption key, it does not establish a wireless connection. When the sensor node and such a wireless access point associate, they may exchange encrypted information (e.g., data regarding the package) using an encryption key. Before the sensor node disassociated with the wireless access point, the wireless access point transmits a new connection parameter set to the sensor node. This new connection parameter set includes a network ID for another wireless network. In addition, the new connection parameter set also includes an encryption key and a frequency identifier. In one implementation, the sensor node re-initializes itself using the new connection parameter set information. This process may continue until the sensor node arrives at its final destination and, in this manner, the wireless networks with which the sensor node associates may be controlled.

Claims

1-21. -21. (canceled)

22. A method comprising:

receiving an indication of a wireless connection with a sensor node having a first connection parameter set;

responsive to the indication, selecting a second connection parameter set for the sensor node based on a route plan, wherein the route plan describes a route comprising one or more wireless networks through which the sensor node travels before arriving at a final destination; and

transmitting the second connection parameter set to the sensor node, wherein the second connection parameter set enables the sensor node to associate with the one or more wireless networks.

23. The method of claim 22 wherein the second connection parameter set comprises at least one of a network ID, an encryption key, and a frequency required to communicate with a wireless access point of the one or more wireless networks.

24. The method of claim 22 further comprising transmitting a plurality of connection parameter sets, wherein the plurality of connection parameter sets identifies an ordered series of wireless access points of different wireless networks with which the sensor node may associate along the route.

25. The method of claim 22 further comprising providing sensor data to the sensor node, wherein the sensor data comprises at least one of information about the sensor node and information about a package to which the sensor node is attached.

26. The method of claim 22 further comprising providing the second connection parameter set to the one or more wireless access points.

27. The method of claim 22 further comprising validating nonce challenges from the sensor code with a random nonce.

28. The method of claim 22 further comprising:

maintaining a list of acceptable network IDs that the sensor node may transmit; and

removing a network ID from the list once the network ID has been transmitted by the sensor node in order to prevent a rogue sensor node from using the network ID.

29. Logic encoded in one or more tangible media for execution and when executed operable to:

receive an indication of a wireless connection with a sensor node having a first connection parameter set;

responsive to the indication, select a second connection parameter set for the sensor node based on a route plan, wherein the route plan describes a route comprising one or more wireless networks through which the sensor node travels before arriving at a final destination; and

transmit the second connection parameter set to the sensor node, wherein the second connection parameter set enables the sensor node to associate with the one or more wireless networks.

30. The logic of claim 29 wherein the second connection parameter set comprises at least one of a network ID, an encryption key, and a frequency required to communicate with a wireless access point of the one or more wireless networks.

31. The logic of claim 29 wherein the logic is further operable to transmit a plurality of connection parameter sets, wherein the plurality of connection parameter sets identifies an ordered series of wireless access points of different wireless networks with which the sensor node may associate along the route.

32. The logic of claim 29 wherein the logic is further operable to provide sensor data to the sensor node, wherein the sensor data comprises at least one of information about the sensor node and information about a package to which the sensor node is attached.

33. The logic of claim 29 where the logic is further operable to provide the second connection parameter set to the one or more wireless access points.

34. The logic of claim 29 wherein the logic is further operable to validate nonce challenges from the sensor node with a random nonce.

35. The logic of claim 29 wherein the logic is further operable to:

maintain a list of acceptable network IDs that the sensor may transmit; and

remove a network ID from the list once the network ID has been transmitted by the sensor node in order to prevent a rogue sensor node from using the network ID.

36. An apparatus comprising:

one or more processors;

a memory;

a network interface;

a network application, physically stored in the memory, comprising instructions operable to cause the one or more processors and the apparatus to;

receive an indication of a wireless connection with a sensor node having a first connection parameter set;

responsive to the indication, select a second connection parameter set for the sensor node based on a route plan, wherein the route plan describes a route comprising one or more wireless networks through which the sensor node travels before arriving at a final destination; and

transmit the second connection parameter set to the sensor node, wherein the second connection parameter set enables the sensor node to associate with the one or more wireless networks.

37. The apparatus of claim 36 wherein the second connection parameter set comprises at least one of a network ID, an encryption key, and a frequency required to communicate with a wireless access point of the one or more wireless networks.

38. The apparatus of claim 36 wherein a plurality of connection parameter sets identifies an ordered series of wireless access points of different wireless networks with which the sensor node may associate along the route.

39. The apparatus of claim 36 wherein the network application further comprises instructions operable to cause the one or more processors and the apparatus to provide sensor data to the sensor node, wherein the sensor data comprises at least one of information about the sensor node and information about a package to which the sensor node is attached.

40. The apparatus of claim 36 wherein the network application further comprises instructions operable to cause the one or more processors and the apparatus to validate nonce challenges from the sensor node with a random nonce.

41. The apparatus of claim 36 wherein the network application further comprises instructions operable to cause the one or more processors and the apparatus to:

maintain a list of acceptable network IDs that the sensor node may transmit; and

remove a network ID from the list once the network ID has been transmitted by the sensor node in order to prevent a rogue sensor node from using the network ID.