Group key security in a multihop relay wireless network

• US 8,325,922 B1
• Filed: 07/21/2008
• Issued: 12/04/2012
• Est. Priority Date: 07/20/2007
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Sun, Sheng, Wang, Guo Qiang
• Primary Examiner(s): Colin, Carl
• Assistant Examiner(s): ZAIDI, SYED A
• Application Number:
  US12/220,029
• Time in Patent Office: 1,597 Days
• Field of Search: 380/270
• US Class Current: 380/270
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/047 using dedicated repeater stations

Abstract

A security zone key is used to secure data traffic/control messages in a multi-hop wireless relay network. In one embodiment, the security zone key is generated by a base station and passed to relay stations and optionally mobile stations that are to be associated with the security zone. A given base station may implement multiple security zones on the wireless network. The members in each zone share a unique group security association. One or more connections may be assigned to a particular security zone. Data traffic/control messages directed to relay stations in a security zone are processed using the security zone key to enable all relay nodes within the security zone to verify the authenticity of the management message and optionally decode the messages. From a management perspective, since a common security zone key is in use by all relay stations in the security zone, the management messages may be broadcast/multicast to the relay nodes in the security zone and the key distribution and management protocols have much less complexity.

Claims

1. A method of implementing security zones on a multi-hop relay wireless network, the method comprising the steps of:

defining a security zone including a base station and at least two relay stations on the multi-hop relay wireless network;

establishing a security zone security association for use in connection with authenticating management messages, encrypting management messages, and decrypting management messages transmitted between the relay stations and between the relay stations and base station on the multi-hop relay wireless network;

distributing security zone security association key material from the base station to the at least two relay stations to enable each of the relay stations on the multi-hop wireless network that have been defined as included in the security zone to use the security zone key material to authenticate management messages, encrypt management messages, and decrypt management messages transmitted between the relay stations and between the relay stations and base station on the multi-hop relay wireless network; and

establishing a transport security association between one of the relay stations and a mobile station for use in connection with transmission of data between the relay station and mobile station, the security association between the relay station and mobile station being different than that security zone security association;

wherein the security zone security association is used in connection with transmission of data between the base station and the relay station; and

wherein the relay station uses the security zone security association key material to decrypt data messages received from the base station, and uses transport key material associated with the transport security association to encrypt the data messages received from the base station for transmission to the mobile station.

2. The method of claim 1, further comprising establishing a transport security association between the base station and a mobile station for use in connection with transmission of data between the base station and mobile station, the security association between the base station and mobile station being different than that security zone security association.

3. The method of claim 1, wherein the security zone security association key material is created by the base station using a random number generator.

4. A device in a multi-hop relay wireless network, comprising:

a transmitter and receiver for performing communication with one or more other devices in the multi-hop relay wireless network;

processing hardware coupled to the transmitter and receiver, wherein the processing hardware is configured to;

define a security zone including a base station and at least two relay stations on the multi-hop relay wireless network;

establish a security zone security association for use in connection with authenticating management messages, encrypting management messages, and decrypting management messages transmitted between the relay stations and between the relay stations and base station on the multi-hop relay wireless network;

distribute security zone security association key material from the base station to the at least two relay stations to enable each of the relay stations on the multi-hop wireless network that have been defined as included in the security zone to use the security zone key material to authenticate management messages, encrypt management messages, and decrypt management messages transmitted between the relay stations and between the relay stations and base station on the multi-hop relay wireless network; and

establish a transport security association between one of the relay stations and a mobile station for use in connection with transmission of data between the relay station and mobile station, the security association between the relay station and mobile station being different than that security zone security association;

wherein the security zone security association is used in connection with transmission of data between the base station and the relay station; and

wherein the relay station uses the security zone security association key material to decrypt data messages received from the base station, and uses transport key material associated with the transport security association to encrypt the data messages received from the base station for transmission to the mobile station.

5. The device of claim 4, wherein the device comprises the base station.

6. The device of claim 4, wherein the processing hardware comprises a processor and a memory medium storing program instructions, wherein the processor is configured to execute the program instructions to perform said defining, said establishing, said distributing, and said establishing.

7. The device of claim 4, wherein the processing hardware comprises a field programmable gate array (FPGA).

8. The device of claim 4, wherein the processing hardware is further configured to:

establish a transport security association between the base station and a mobile station for use in connection with transmission of data between the base station and mobile station, the security association between the base station and mobile station being different than that security zone security association.

9. The device of claim 4, wherein the security zone security association key material is created by the base station using a random number generator.

10. A non-transitory, computer accessible memory medium storing program instructions for implementing security zones on a multi-hop relay wireless network, wherein the program instructions are executable to:

establish a security zone security association for use in connection with authenticating management messages, encrypting management messages, and decrypting management messages transmitted between the relay stations and between the relay stations and base station on the multi-hop relay wireless network;

distribute security zone security association key material from the base station to the at least two relay stations to enable each of the relay stations on the multi-hop wireless network that have been defined as included in the security zone to use the security zone key material to authenticate management messages, encrypt management messages, and decrypt management messages transmitted between the relay stations and between the relay stations and base station on the multi-hop relay wireless network; and

establish a transport security association between one of the relay stations and a mobile station for use in connection with transmission of data between the relay station and mobile station, the security association between the relay station and mobile station being different than that security zone security association;

wherein the security zone security association is used in connection with transmission of data between the base station and the relay station; and

wherein the relay station uses the security zone security association key material to decrypt data messages received from the base station, and uses transport key material associated with the transport security association to encrypt the data messages received from the base station for transmission to the mobile station.

11. The non-transitory, computer accessible memory medium of claim 10, wherein the program instructions are further executable establish a transport security association between the base station and a mobile station for use in connection with transmission of data between the base station and mobile station, the security association between the base station and mobile station being different than that security zone security association.

12. The non-transitory, computer accessible memory medium of claim 10, wherein the security zone security association key material is created by the base station using a random number generator.