Method of configuring a node, related node and configuration server
View Patent ↗A method for configuring a node using a configuration server, as well as the node and the configuration server, are disclosed. The node holds a public key, a related secret key and an address of a configuration server. The node transmits the public and secret keys to the configuration server, which identifies the node by use of an identity based identification algorithm taking account of the public and secret keys. When the node has been successfully identified, the configuration server retrieves a set of configuration parameters stored for the node and transmits this set to the node. Accordingly, the node does not have to store much information. The use of identity-based identification algorithms to identify the node is advantageous regarding nodes that may have very low power/memory which might prevent them from embedding a heavy X.509 certificate traditionally used for identification or authentication purposes.
1. A method for configuring a node, said node holding a public key depending on an identifier relating to said node, a related secret key and an address of a configuration server storing sets of configuration parameters for respective nodes, the method comprising the following steps carried out at the configuration server:
identifying said node by use of an identity based identification algorithm taking account of said public and secret keys; and
when said node has been successfully identified, retrieving the set of configuration parameters stored for said node and transmitting said set of configuration parameters to said node.
2. The method as claimed in claim 1 , wherein said node holds no other parameter than said public key, said secret key and said address of the configuration server before it is identified by the configuration server.
3. The method as claimed in claim 1 , wherein said public key comprises a one way function of said identifier.
4. The method as claimed in claim 3 , wherein said public key comprises a hash function of said identifier as a one way function.
5. The method as claimed in claim 1 , wherein said secret key is provided to said node by a secret generator knowing said identifier.
6. The method as claimed in claim 1 , wherein transmitting said set of configuration parameters to said node is carried out in an encrypted way.
7. The method as claimed in claim 6 , wherein said encrypted way uses an identity based encryption algorithm.
8. A node holding a public key depending on an identifier relating to said node, a related secret key and an address of a configuration server storing sets of configuration parameters for respective nodes, said node comprising:
a transmitter adapted to transmit said public key and a value related to or derived from the secret key to the configuration server; and
a receiver adapted to receive a set of configuration parameters from the configuration server when said node has been successfully identified by the configuration server by use of an identity based identification algorithm taking account of said public and secret keys.
9. The node as claimed in claim 8 , said node holding no other parameter than said public key, said secret key and said address of the configuration server before it is identified by the configuration server.
10. The node as claimed in claim 8 , wherein said public key comprises a one way function of said identifier.
11. The node as claimed in claim 10 , wherein said public key comprises a hash function of said identifier as a one way function.
12. The node as claimed in claim 8 , the receiver further adapted to receive said secret key from a secret generator knowing said identifier.
13. The node as claimed in claim 8 , wherein the set of configuration parameters received by the receiver is encrypted, the node further comprising a processor for decrypting said encrypted set of configuration parameters.
14. The node as claimed in claim 13 , wherein the processor uses an identity based decryption algorithm.
15. The node as claimed in claim 8 , said node being part of an Ambient network.
16. The node as claimed in claim 8 , said node being a home gateway.
17. A configuration server storing sets of configuration parameters for respective nodes, each node holding a respective public key depending on a respective identifier relating to said node, a respective related secret key and an address of the configuration server, said configuration server comprising in relation with any one of said nodes:
a processor for identifying said node by use of an identity based identification algorithm taking account of the public and secret keys relating to said node;
a connection to a database for retrieving a set of configuration parameters stored for said node; and
a transmitter adapted to transmit said set of configuration parameters to said node when said processor has successfully identified said node.
18. The configuration server as claimed in claim 17 , wherein the processor is adapted to use an identity based identification algorithm taking account of the public key comprising a one way function of said identifier.
19. The configuration server as claimed in claim 18 , wherein the processor is further adapted to use an identity based identification algorithm taking account of the public key comprising a hash function of said identifier as a one way function.
20. The configuration server as claimed in claim 17 , wherein said transmitter is adapted to transmit said set of configuration parameters to said node in an encrypted way.
21. The configuration server as claimed in claim 20 , wherein said encrypted way uses an identity based encryption algorithm.