Secured communication for local area network
View Patent ↗A method and system for distributed security for a plurality of devices in a communication network, each of the devices being responsible for generating, distributing and controlling its own keys for access to the communication network and using the keys to establish a trusted network, each device's membership to the communication network being checked periodically by other devices by using a challenge response protocol to establish which devices arc allowed access to the communication network and the trusted network.
1. A method, by a security manager in a first ad hoc network, of facilitating communications between a first device located in the first ad-hoc network and a second device located in a second ad-hoc network, said method comprising:
sending the first device a first group key;
receiving, via a relay channel between said first ad-hoc network and said second ad-hoc network, a request for authentication from the second device, wherein said first ad-hoc network includes a first plurality of devices, said second ad-hoc network includes a second plurality of devices, and the relay channel is established using first and second transceivers, the first transceiver being in said first ad-hoc network, and the second transceiver being in said second ad-hoc network; and
sending the second device the first group key.
2. The method according to claim 1 , wherein the first ad-hoc network includes a master device configured to activate an access controller using identifiers of devices in the first ad-hoc network.
3. The method according to claim 2 , wherein the master device uses an access control list to admit only devices that have been positively authenticated to the first ad-hoc network.
4. The method according to claim 2 , wherein the master device further comprises a traffic controller to regulate data flow within the first ad-hoc network.
5. The method according to claim 4 , wherein the master device allocates a time slot to each of the devices for message distribution.
6. The method according to claim 1 , further comprising determining which other devices are presently active in the first ad-hoc network.
7. The method according to claim 6 , wherein the determining comprises re-authenticating each of the other devices at a predetermined time.
8. The method according to claim 7 , wherein the re-authenticating comprises performing a challenge-response protocol with each of the other devices to determine which of the other devices are present in the first ad-hoc network.
9. An apparatus in a first ad-hoc network, the apparatus comprising instructions embodied on a tangible, non-transitory computer-readable medium, the instructions operable when executed to cause a computing system to perform operations for facilitating communications between a first device located in the first ad-hoc network and a second device located in a second ad-hoc network, the operations comprising:
sending the first device a first group key;
receiving, via a relay channel between said first ad-hoc network and said second ad-hoc network, a request for authentication from the second device, wherein said first ad-hoc network includes a first plurality of devices, said second ad-hoc network includes a second plurality of devices, and the relay channel is established using first and second transceivers, the first transceiver being in said first ad-hoc network and the second transceiver being in said second ad-hoc network; and
sending the second device the first group key.
10. The apparatus according to claim 9 , wherein the first ad-hoc network includes a master device configured to activate an access controller using identifiers of devices in the first ad-hoc network.
11. The apparatus according to claim 10 , wherein the master device uses an access control list to admit only devices that have been positively authenticated to the first ad-hoc network.
12. The apparatus according to claim 10 , wherein the master device further comprises a traffic controller to regulate data flow within the first ad-hoc network.
13. The apparatus according to claim 12 , wherein the master device allocates a time slot to each of the devices for message distribution.
14. A communication device in a first ad-hoc network, comprises:
a processor;
memory, the memory comprising computer executable instructions that, when executed by the processor, perform operations for facilitating communications between a first device located in the first ad-hoc network and a second device located in a second ad-hoc network, the operations comprising:
sending the first device a first group key;
receiving, via a relay channel between said first ad-hoc network and said second ad-hoc network, a request for authentication from the second device, wherein said first ad-hoc network includes a first plurality of devices, said second ad-hoc network includes a second plurality of devices, and the relay channel is established using first and second transceivers, the first transceiver being in said first ad-hoc network and the second transceiver being in said second ad-hoc network; and
sending the second device the first group key.
15. The communication device according to claim 14 , wherein the first ad-hoc network includes a master device configured to activate an access controller using identifiers of devices in the first ad-hoc network.
16. The communication device according to claim 15 , wherein the master device uses an access control list to admit only devices that have been positively authenticated to the first ad-hoc network.
17. The communication device according to claim 15 , wherein the master device further comprises a traffic controller to regulate data flow within the first ad-hoc network.
18. The communication device according to claim 17 , wherein the master device allocates a time slot to each of the devices for message distribution.