Apparatus, method, and medium for self-organizing multi-hop wireless access networks

• US 8,630,275 B2
• Filed: 02/07/2011
• Issued: 01/14/2014
• Est. Priority Date: 11/25/2002
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Ji, Lusheng, Feldman, Brian, Agre, Jonathan Russell
• Primary Examiner(s): Cai, Wayne
• Assistant Examiner(s): GENACK, MATTHEW W
• Application Number:
  US12/929,662
• Publication Number:
  US 20110200026A1
• Time in Patent Office: 1,072 Days
• Field of Search: 370/310, 370/328, 370/338
• US Class Current: 370/338
• CPC Class Codes: H04L 45/54 Organization of routing tables
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 40/20 based on geographic position or location
• CPC Class Codes: H04W 40/248 Connectivity information update
• CPC Class Codes: H04W 40/26 for hybrid routing by combining proactive and reactive routing
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks
• CPC Class Codes: H04W 88/04 adapted for relaying to or from another terminal or user

Abstract

A wireless computer network includes a backbone network including backbone network nodes authenticated to each other and in communication with each other. The wireless computer network also includes a master authenticator node and a proxy authenticator node among the backbone network nodes. When an unauthenticated new node requests authentication to the backbone network and the unauthenticated new node is in communication with at least one of the backbone network nodes, the at least one of the backbone network nodes becoming the proxy authenticator node for the unauthenticated new node and communicates with the master authenticator node to authenticate the unauthenticated new node to the backbone network.

Claims

1. A wireless computer network, wherein a wireless backbone network which includes a plurality of wireless network node devices the wireless computer network comprising:

at least one wireless network node device configured to provide wireless local access service to mobile client computer devices in corresponding coverage areas, operate as proxy authentication nodes, and forward and deliver communication data of mobile client computer devices in a multihop fashion the wireless computer network;

at least one first new wireless network node device which newly joins as part of said wireless backbone network enabled to act as a supplicant to request authentication from said wireless backbone network prior to becoming part of said wireless backbone network; and

a wireless network node device among any of the wireless network node devices configured to authenticate the at least one first new wireless network node device by operating as a proxy authentication node and communicate with the at least one wireless network node device operating as a master authentication node;

where said at least one first new wireless network node device initiates a wireless local access service within a corresponding of the coverage areas using a key for joining said wireless backbone network provided after completion of authentication, and

said at least one first new wireless network node device operates as the proxy authentication node to authenticate other second new wireless network node devices to said wireless backbone network in accordance with a topology of the wireless computer network updated through communication among the wireless network node devices after completion of the authentication of said at least one first new wireless network node device which newly joins as part of said wireless backbone network.

2. The wireless computer network as described in claim 1, characterized in that said wireless network node device which operates as said master authentication node includes a means which, upon authenticating a newly joining wireless network node device, forwards a key for protecting communication on said wireless backbone network to said newly joining wireless network node device.

3. The wireless computer network as described in claim 2, characterized in that said wireless network node device which operates as said master authentication node is enabled to renew the key for protecting communication on said wireless backbone network when a given wireless network node device leaves said wireless backbone network.

4. The wireless computer network as described in claim 1, characterized in that said wireless network node device which operates as said master authentication node enables periodic generation of a new key and distributes the new key to the wireless network node devices making up said wireless backbone network.

5. The wireless computer network as described in claim 1, characterized in that at least one of said wireless network node devices provides gateway service and includes a plurality of interfaces, wherein one of the plurality of interfaces possessed by each gateway service node device provides communications with said wireless backbone network, and at least one of the plurality of interfaces provides communication with another network that communicates with said wireless computer network.

6. A method of a wireless computer network for providing a wireless backbone network which includes a plurality of wireless network node devices, the method comprising:

providing at least one wireless network node devices configured to provide wireless local access service to mobile client computer devices in corresponding coverage areas, operate as proxy authentication nodes, and forward and deliver communication data of mobile client computer devices in a multihop fashion the wireless computer network;

enabling at least one first new wireless network node devices which newly joins as part of said wireless backbone network to act as a supplicant to request authentication from said wireless backbone network prior to becoming part of said wireless backbone network;

causing a wireless network node device among any of the wireless network devices configured to authenticate the at least one first new wireless network node device by operating as a proxy authentication node and communicate with the at least one wireless network node device operating as a master authentication node;

initiating, via said at least one first new wireless network node device, a wireless local access service within a corresponding of the coverage areas using a key for joining said wireless backbone network provided after completion of authentication, and

operating the at least one first new wireless network node device as a proxy authentication node to authenticate other second new wireless devices to said wireless backbone network in accordance with a topology of the wireless computer network updated through communication among the wireless network node devices after completion of the authentication of said at least one first new wireless network node device which newly joins as part of said wireless backbone network.

7. The method as described in claim 6, wherein said wireless network node device which operates as said master authentication node, upon authenticating a newly joining wireless network node device, forwards a key for protecting communication on said wireless backbone network to said newly joining wireless network node device.

8. The method as described in claim 7, wherein said wireless network node device which operates as said master authentication node renews the key for protecting communication on said wireless backbone network when a given wireless network node device leaves said wireless backbone network.

9. The method as described in claim 6, wherein said wireless network node device which operates as said master authentication node periodically generates a new key and distributes it to the wireless network node devices making up said wireless backbone network.

10. A method of a wireless computer network including a wireless backbone network, comprising:

authenticating a first new wireless network node device based on receipt of a request from the first new wireless network node device prior to said authenticating;

providing, by the first new wireless network node device, a wireless local access service to a client computer device within a coverage area; and

causing the first new wireless network node device among any of the wireless network node devices to authenticate at least one second new wireless network node device by operating as a proxy authentication node for authentication requests from second new wireless network node devices joining the wireless backbone network subsequent to said authenticating, and

where the first new wireless network node device operates as the proxy authentication node using in accordance with a topology of the wireless computer network updated through communication among the wireless network node devices after completion of the authenticating of the first new wireless network node device which newly joins as part of said wireless backbone network.