Secure node admission in a communication network
View Patent ↗A system and method for node admission in a communication network having a NC and a plurality of associated network nodes. According to various embodiments of the disclosed method and apparatus, key determination in a communication network includes an NN sending to the NC a request for a SALT; the NN receiving the SALT from the NC, combining the SALT with its network password to calculate a static key, and submitting an admission request to the network coordinator to request a dynamic key. The SALT can be a random number generated by the NC, and the admission request can be encrypted by the NN using the static key.
1. A method for generating security keys for a network comprising:
assuming by a first node, capable of generating a SALT, role of a network coordinator (NC) of the network; and
distributing the SALT to at least one other node within the network capable of using the SALT to generate an encryption key for encrypting admission messages, wherein:
the SALT is distributed within a L2ME request; and
the encryption key is generated by a hardware processor, based on a combining of the SALT distributed from the first node with a network password associated with the at least one other node; and
receiving an L2ME response from the at least one other node.
2. The method of claim 1 , wherein the L2ME response is encrypted by the encryption key.
3. The method of claim 2 , wherein the encryption key comprises an AES MAC Management Key (AMMK).
4. The method of claim 3 , wherein the AMMK is calculated by the at least one other node using the SALT combined with a network password.
5. The method of claim 3 , wherein the AMMK is calculated by the at least one other node using the SALT combined with the network password and an American Standard Code for information interchange (ASCII) string.
6. The method of claim 1 , further comprising exchanging dynamic keys with the at least one other node.
7. The method of claim 1 , wherein the network comprises a mixed mode MoCA network.
8. The method of claim 7 , wherein the role of network coordinator is handed off from a second node.
9. The method of claim 8 , wherein the first node comprises a Multimedia over Coax Alliance (MoCA) 2.0 compliant node, and wherein the second node comprises a MoCA 1.0 compliant node.
10. The method of claim 9 , wherein the at least one other node comprises an existing MoCA 2.0 compliant node.
11. The method of claim 10 , wherein the SALT is distributed using a current MoCA 1.0 dynamic key.
12. The method of claim 11 , wherein the at least one other node was previously admitted by the second node.