Granted Patent B2

US 8,811,242 · App. 12/310,373 · Granted Aug 19, 2014

Inventors: Rainer Falk (Erding, DE); Florian Kohlmayer (Starnberg, DE)

Assignee: Unify GmbH & Co. KG

Abstract

Claims (78)

1. A method for providing a wireless local network comprising:

transmitting a registering MAC address to a subnetwork by a communication entity registering with the subnetwork;

a first node of the subnetwork comparing the registering MAC address with MAC addresses that are reachable via the subnetwork;

upon a determination that the registering MAC address is disjoint of the reachable MAC addresses, the first node of the subnetwork connecting the registering communication entity in a manner of a station of the subnetwork; and

upon a determination that the registering MAC address is not disjoint of the reachable MAC addresses such that the registering MAC address already is reachable via the subnetwork, the first node of the subnetwork implementing an approval procedure with the registering communication entity to prevent two different subscribers within the subnetwork having identical MAC addresses, the approval procedure comprising:

the first node of the subnetwork sending a message to the registering communication entity that identifies a need for the registering communication entity to demonstrate ownership of the registering MAC address via a first route, the message sent by the first node of the subnetwork comprising a first item of check information, the first item of check information being transmitted as a hash code generated from a value produced as a pseudo-random code, the first route comprising a pre-existing route between the first node and a communication entity associated with the registering MAC address that is already reachable via the subnetwork;

the registering communication entity sending a response message to the first node of the subnetwork via a second route that comprises the first item of check information in response to receipt of the message from the first node of the subnetwork the second route being a route to be established via registration of the registering MAC address,

in response to receipt of the first item of check information via the second route, the first node of the subnetwork evaluating the received first item of check information to determine whether the received first item of check information received from the registering communication entity in the response message corresponds with stored check information associated with the registering MAC address.

2. The method as claimed in claim 1 wherein the subnetwork is a mesh network comprised of a plurality of mobile communication entities.

3. The method as claimed in claim 1 wherein the approval procedure includes a conversion of the registering MAC address such that a MAC address that is disjoint in respect of the reachable MAC addresses is allocated to the registering communication entity within the subnetwork.

4. The method as claimed in claim 3 wherein the converted disjoint MAC address is generated by a part of the subnetwork.

5. The method as claimed in claim 3 wherein the converted disjoint MAC address is generated based on a pseudo-random sequence.

6. The method as claimed in claim 3 wherein the converted disjoint MAC address is selected so that it is disjoint in respect of MAC addresses allocated universally as according to the OUI.

7. The method as claimed in claim 1 wherein bit 41 of the disjoint registering MAC address is allocated a value of 1.

8. The method as claimed in claim 1 wherein the approval procedure is initiated when the registering communication entity attempts to register with the first node of the subnetwork as a subscriber in a manner of a mesh network node.

9. A method for providing a wireless local network, in which stationary communication entities configured according to IEEE 802.15 standard or IEEE 802.16 standard and mobile communication entities are connected as a subnetwork in the manner of a mesh, comprising:

transmitting a registering MAC address to a first node of the subnetwork by a communication entity registering with the subnetwork;

the first node comparing the registering MAC address with MAC addresses that are already reachable on the subnetwork;

upon a determination that the registering MAC address is disjoint in respect of the reachable MAC addresses, the first node connecting the registering communication entity in a manner of a station of the subnetwork, and

upon a determination that the registering MAC address is already reachable in the subnetwork as a first communication entity of the subnetwork has a reachable MAC address that corresponds with the registering MAC address, implementing an approval procedure such that use of the registering MAC address by two different communication entities within the subnetwork is prevented;

wherein the approval procedure includes an identity check carried out by the first node of the subnetwork on the identity of the registering communication entity, the identity check comprising:

transmitting, by the first node of the subnetwork, a first item of check information to the first communication entity by way of a first route in the subnetwork such that the first item of check information is receivable by the registering communication entity via the first communication entity, the first item of check information being transmitted as a hash code generated from a value produced as a pseudo-random code;

awaiting, by the first node of the subnetwork, a registration message from the registering communication entity that includes the first item of check information by way of a second route established in the context of the registration attempt on the part of the registering communication entity;

the first node rejecting the registering communication entity upon a determination that the first item of check information was not received,

upon the first node receiving the first item of check information in the registration message sent from the registering communication entity via the second route, the first node checking a correlation of the first item of check information received from the registering communication entity with the first item of check information sent by the first node via the first route;

connecting the registering communication entity in a manner of the station of the subnetwork when at least a specific degree of correlation is achieved between the first item of check information of the message sent to the first node by the registering communication entity and the first item of check information sent by the first node to the registering communication entity; and

rejecting the registering communication entity upon a determination that at least the specific degree of correlation is not achieved.

10. A method for providing a wireless local network, in which stationary communication entities configured according to IEEE 802.15 standard or IEEE 802.16 standard and mobile communication entities are connected as a subnetwork in the manner of a mesh, comprising:

transmitting a registering MAC address to a first node of the subnetwork by a registering communication entity attempting to register with the subnetwork;

the first node comparing the registering MAC address with MAC addresses that are already reachable on the subnetwork;

the first node connecting the registering communication entity in a manner of a station of the subnetwork when the registering MAC address is disjoint in respect of the reachable MAC addresses; and

the first node implementing an approval procedure such that use of the registering MAC address by two different communication entities within the subnetwork is prevented when the registering MAC address is determined to already be reachable in the subnetwork,

wherein the approval procedure includes an identity check carried out via the first node of the subnetwork on an identity of the registering communication entity wherein the identity check comprises:

receiving, by the first node of the subnetwork, a first item of check information from the registering communication entity by way of a first route in the subnetwork established in the context of the registration attempt of the registering communication entity, the first item of check information being transmitted as a hash code generated from a value produced as a pseudo-random code;

transmitting, by the first node of the subnetwork, a request to a first communication entity by way of the reachable MAC address of the first communication entity that is determined to correspond with the registering MAC address, the request requesting the first communication entity to send the first item of check information to the first node,

awaiting, by the first node of the subnetwork, receipt of the first item of check information from the first communication entity by way of a second route in the subnetwork that comprises the first communication entity;

rejecting the registering communication entity when no receipt of the first item of check information occurs;

when the first node receives the first item of check information via the second route, the first node:

checking a correlation of the first item of check information received from the registering communication entity with the first item of check information received from the first communication entity via the second route,

connecting the registering communication entity in the manner of a station of the subnetwork when at least a specific degree of correlation between the first item of check information from the registering communication entity and the first item of check information from the first communication entity is achieved, and

rejecting the registering communication entity when at least the specific degree of correlation is not achieved.

11. A method for providing a wireless local network, in which stationary communication entities configured according to IEEE 802.15 standard or IEEE 802.16 standard and mobile communication entities are connected as a subnetwork in the manner of a mesh, comprising:

transmitting a registering MAC address to a first node of the subnetwork by a communication entity registering with the subnetwork;

the first node comparing the registering MAC address with MAC addresses that are reachable on the part of the subnetwork;

upon a determination that the registering MAC address is disjoint in respect of the reachable MAC addresses, the first node connecting the registering communication entity in a manner of a station of the subnetwork, and

upon a determination that the registering MAC address is not disjoint, the first node implementing an approval procedure such that use of the registering MAC address by two different communication entities within the subnetwork is prevented, the implementing occurring when the registering MAC address is already reachable in the subnetwork,

wherein the approval procedure includes a check carried out by the first node of the subnetwork to assess an identity of the registering communication entity that has the registering MAC address that corresponds with a reachable MAC address of a first communication entity of the subnetwork,

the identity check comprising:

awaiting, by the first node of the subnetwork, for a first item of check information by way of a first route in the subnetwork established to the first communication entity and for a second item of check information by way of a second route in the subnetwork established in the context of the registration attempt from the registering communication entity, the first item of check information being transmitted as a hash code generated from a value produced as a pseudo-random code,

rejecting the registering communication entity when the first item of check information fails to arrive within a predetermined amount of time,

rejecting the registering communication entity when the second item of check information fails to arrive within a predetermined amount of time,

checking a correlation of the first item of check information with the second item of check information for matching with each other after the first and second items of check information arrive,

connecting the registering communication entity in the manner of a station of the subnetwork when at least a specific degree of correlation for matching with each other is achieved between the first item of check information with the second item of check information, and

rejecting the registering communication entity when at least the specific degree of correlation is not achieved.

12. The method as claimed in claim 11 wherein a transmission of at least one of the first item of check information and second item of check information is initiated by the subnetwork.

13. The method as claimed in claim 11 wherein a transmission of at least one of the first item of check information and second item of check information is initiated on the part of the registering communication entity.

14. A method for providing a wireless local network, in which stationary communication entities configured according to IEEE 802.15 standard or IEEE 802.16 standard and mobile communication entities are connected as a subnetwork in the manner of a mesh, comprising:

transmitting a registering MAC address to a first node of the subnetwork by a communication entity registering with the subnetwork;

the first node comparing the registering MAC address with MAC addresses that are already reachable on the subnetwork;

connecting the registering communication entity in a manner of a station of the subnetwork when the registering MAC address is disjoint in respect of the reachable MAC addresses; and

implementing an approval procedure such that use of the registering MAC address by two different communication entities within the subnetwork is prevented when the registering MAC address is already reachable in the subnetwork, wherein the approval procedure includes an identity check carried out by the first node of the subnetwork on an identity of the registering communication entity corresponding with a first communication entity having a reachable MAC address corresponding to the registering MAC address, and

wherein the identity check comprises:

the registering communication entity determining a first item of check information based on a first cryptographic key authenticating the registering communication entity, the first cryptographic key being a first session key resulting from a network registration according to extensible authentication protocol (EAP) and available to the registering communication entity, the first item of check information being transmitted to the first node of the subnetwork by way of a first route in the subnetwork established in context of the registration attempt made by the registering communication entity, the first item of check information being transmitted as a hash code generated from a value produced as a pseudo-random code,

the first node of the subnetwork attempting decryption of the first item of check information based on a second cryptographic key authenticating the first communication entity, the second cryptographic key being a second session key resulting from a network registration according to EAP of the first communication entity, and

in the event of successful decryption of the first item of check information, the registering communication entity is connected in the manner of a station of the subnetwork, otherwise the registering communication entity is rejected.

15. The method as claimed in claim 14

wherein at least one of the first session key and the second session key is generated as a master session key formed according to EAP or

wherein at least one of the first session key and the second session key is generated as an extended master session key formed according to EAP.

16. A method for providing a wireless local network, in which stationary communication entities configured according to IEEE 802.15 standard or IEEE 802.16 standard and mobile communication entities are connected as a subnetwork in the manner of a mesh, comprising:

transmitting a registering MAC address to a first node of the subnetwork by a communication entity registering with the subnetwork;

the first node comparing the registering MAC address with MAC addresses that are already reachable on the subnetwork;

the first node of the subnetwork connecting the registering communication entity in a manner of a station of the subnetwork when the registering MAC address is disjoint in respect of the reachable MAC addresses; and

the first node implementing an approval procedure such that use of the registering MAC address by two different communication entities within the subnetwork is prevented when the registering MAC address is already reachable in the subnetwork,

wherein the approval procedure includes a check carried out by the first node of the subnetwork on an identity of the registering communication entity, the identity check comprising:

transmitting a first item of check information to the first node via an established route, the first item of check information calculated based on a first cryptographic key authenticating a first communication entity having a reachable MAC address corresponding with the registering MAC address, the first cryptographic key being a first session key resulting from a network registration according to extensible authentication protocol (EAP) and available to the registering communication entity, the first item of check information being transmitted as a hash code generated from a value produced as a pseudo-random code,

the first node of the subnetwork attempting decryption of the first item of check information based on a second cryptographic key authenticating the registering communication entity, the second cryptographic key being a second session key resulting from a network registration according to EAP and being available to the first node of the subnetwork, and

in the event of successful decryption, the registering communication entity is connected in the manner of a station of the subnetwork, otherwise the registering communication entity is rejected.

17. The method as claimed in claim 16 wherein a cryptograph hash function and/or a keyed hash function is used to calculate the first item of check information.

Assignments (12)

Priority Claims (1)

Continuity (1)