Communication method, node, and network system

• US 9,203,800 B2
• Filed: 07/29/2013
• Issued: 12/01/2015
• Est. Priority Date: 01/31/2011
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Izu, Tetsuya, Takenaka, Masahiko, Furukawa, Kazuyoshi, Kojima, Hisashi
• Primary Examiner(s): Jeudy, Josnel
• Application Number:
  US13/952,730
• Publication Number:
  US 20130312082A1
• Time in Patent Office: 855 Days
• Field of Search: 713168-174, 380 44- 47, 709225-229
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

A communication method executed by a node in an ad hoc network having multiple nodes, includes receiving from a neighboring node of the node in the ad hoc network, a first packet that includes a sender address of the neighboring node and a first packet transmission count of packet transmissions from the neighboring node; extracting the first packet transmission count from the first packet; receiving from the neighboring node and after reception of the first packet, a second packet that includes the sender address of the neighboring node and a second packet transmission count of packet transmissions from the neighboring node; extracting the second packet transmission count from the second packet; determining whether the second packet is an invalid packet, based on the first packet transmission count and the second packet transmission count; and discarding the second packet upon determining the second packet to be an invalid packet.

Claims

1. A communication method executed by a node in an ad hoc network having a plurality of nodes, the communication method comprising:

receiving from a neighboring node of the node in the ad hoc network, a first packet that includes a sender address of the neighboring node and a first packet transmission count of packet transmissions from the neighboring node;

extracting the first packet transmission count from the first packet;

receiving from the neighboring node and after reception of the first packet, a second packet that includes a sender address identical to the sender address included in the first packet and a second packet transmission count of packet transmissions from the neighboring node;

extracting the second packet transmission count from the second packet;

determining which one of the first packet and the second packet was transmitted before the other by the neighboring node, based on the first packet transmission count and the second packet transmission count; and

discarding the second packet upon determining the second packet was transmitted before the first packet by the neighboring node.

2. A network system comprising:

a communication device in an ad hoc network having a plurality of communication devices and a neighboring communication device of the communication device in the ad hoc network, wherein the communication device includes;

a processor configured to;

detect an event of packet transmission to a neighboring communication device of the communication device in the ad hoc network,

update upon detecting the event of packet transmission, a first packet transmission count of packet transmissions from the communication device, the first packet transmission count being retained in a storage device of the communication device and updated to a value obtained by adding 1 to the first packet transmission count, and

transmit to the neighboring communication device, a first packet that includes a sender address of the communication device and the updated first packet transmission count; and

the neighboring communication device includes;

a processor configured to;

receive the first packet transmitted from the communication device,

extract the first packet transmission count from the received first packet,

receive after receiving the first packet, a second packet that includes a sender address identical to the sender address included in the first packet and a second packet transmission count of transmissions from the communication device,

extract the second packet transmission count from the received second packet,

determine which one of the first packet and the second packet was transmitted before the other by the communication device, based on the extracted first packet transmission count and on the extracted second packet transmission count, and

discard the second packet upon determining the second packet was transmitted before the first packet by the communication device.

3. The network system according to claim 2, wherein the processor of the communication device is configured to further execute:

sensing a deletion of the packet transmission count retained in the storage device of the communication device;

notifying upon sensing the deletion of the packet transmission count, the neighboring communication device of a request packet requesting the packet transmission count that is for the communication device and retained in the storage device of the neighboring communication device;

receiving from the neighboring communication device in response to the request packet, a response packet that includes the packet transmission count for the communication device;

extracting from the response packet, the packet transmission count for the communication device; and

storing to the storage device of the communication device, the extracted packet transmission count for the communication device.

4. The network system according to claim 3, wherein the processor of the communication device is configured to further execute:

encrypting the request packet using a common key that the communication devices in the ad hoc network have; and

decrypting the response packet by using the common key, the response packet having been encrypted by the neighboring communication device using the common key, wherein

the notifying includes notifying the neighboring communication device of the encrypted request packet,

the receiving includes receiving from the neighboring communication device, the response packet encrypted using the common key,

the decrypting includes decrypting the response packet from the encrypted response packet, and

the extracting includes extracting from the decrypted response packet, the packet transmission count for the communication device.

5. The network system according to claim 3, wherein

the notifying includes notifying the neighboring communication device of the request packet that is encrypted and includes first identification information unique to the communication device,

the receiving includes receiving from the neighboring communication device, the response packet that is encrypted using a common key and includes second identification information,

the extracting includes extracting the second identification information from the response packet decrypted from the encrypted response packet received, and

the storing includes storing to the storage device of the communication device, the extracted packet transmission count for the communication device, when the first identification information coincides with the extracted second identification information.

6. The network system according to claim 5, wherein the processor of the communication device is configured to further execute

generating a random number as the first identification information.

7. The network system according to claim 3, wherein the processor of the communication device is configured to further execute:

receiving from the neighboring communication device and after sensing the deletion, a second common key that the neighboring communication device has and that is encrypted using a first common key that the communication devices in the ad hoc network have;

decrypting the second common key from the encrypted second common key, by using the first common key;

encrypting the request packet using the decrypted second common key; and

decrypting, by using the decrypted second common key, the response packet encrypted using the second common key by the neighboring communication device, wherein

the notifying includes notifying the neighboring communication device of the encrypted request packet,

the receiving includes receiving from the neighboring communication device, the response packet encrypted using the second common key,

the decrypting includes decrypting the response packet from the encrypted response packet, and

the extracting includes extracting from the decrypted response packet, the packet transmission count for the communication device.

8. The network system according to claim 3, wherein

the notifying includes notifying the neighboring communication device of the request packet that is encrypted and includes first identification information unique to the communication device,

the receiving includes receiving from the neighboring communication device, the response packet that is encrypted using the second common key and includes second identification information, wherein

the extracting includes extracting the second identification information from the response packet decrypted from the encrypted response packet received, and

the storing includes storing to the storage device of the communication device, the extracted packet transmission count for the communication device, when the first identification information coincides with the extracted second identification information.

9. The network system according to claim 8, wherein the processor of the communication device is configured to further execute

generating a random number as the first identification information.