Method and apparatus for MoCA network with protected set-up

Patent metadata

Field	Value
Publication number	US-10498768-B2
Application number	US-201715812893-A
Country	US
Kind code	B2
Filing date	Nov 14, 2017
Priority date	Jul 24, 2014
Publication date	Dec 3, 2019
Grant date	Dec 3, 2019

Abstract

Systems and methods are disclosed for securing a network, for admitting new nodes into an existing network, and/or for securely forming a new network. As a non-limiting example, an existing node may be triggered by a user, in response to which the existing node communicates with a network coordinator node. Thereafter, if a new node attempts to enter the network, and also for example has been triggered by a user, the network coordinator may determine, based at least in part on parameters within the new node and the network coordinator, whether the new node can enter the network.

First claim

The invention claimed is:

1. A network comprising:
a first node; and
a second node, wherein:
the first node comprises at least one circuit operable to, at least:
send a first message to the second node comprising information that indicates protected setup has been triggered;
send a second message to the second node comprising public key information; and
receive a third message from the second node, responsive to the second message, comprising protected setup information indicating one or more node privacy parameters; and

the second node comprises at least one circuit operable to, at least:
receive the first message;
receive the second message; and
send the third message.

2. The network of claim 1 , wherein:
the network is a premises-based communication network;
the first node is a new node of the premises-based cable communication network; and
the second node is a network coordinator node of the premises-based cable communication network.

3. The network of claim 1 , wherein the third message comprises a first field, and the at least one circuit of the second node is operable to set the first field to a first value if protected setup is triggered and to a second value if protected setup is not triggered.

4. The network of claim 1 , wherein the first message comprises hashed public key information.

5. The network of claim 1 , wherein the at least one circuit of the first node is operable to:
analyze a first field of the third message; and
if the first field is a particular value, then analyze a second field of the third message to determine how to proceed.

6. A network node comprising:
at least one circuit comprising a processor, memory, and a network communication circuit, wherein the at least one circuit is operable to, at least:
send a first message to a second node comprising information that indicates protected setup has been triggered;
send a second message to the second node comprising public key information; and
after sending the second message, receive a third message from the second node, responsive to the second message, comprising protected setup information indicating one or more privacy parameters.

7. The network node of claim 6 , wherein the at least one circuit is operable to:
analyze a first field of the third message; and
if the first field is a particular value, then analyze a second field of the third message to determine how to proceed.

8. The network node of claim 7 , wherein if the determination of how to proceed comprises determining to perform admission using privacy settings, then the at least one circuit operates to continue node admission using one or more privacy settings of the network node.

9. The network node of claim 7 , wherein if the determination of how to proceed comprises determining that a failure has occurred, then the at least one circuit operates to continue searching for a network.

10. The network node of claim 7 , wherein if the determination of how to proceed comprises determining to perform admission without privacy, then the at least one circuit operates to change a privacy setting of a local parameter to indicate no privacy, and to report a change in the privacy setting to a management entity of the network node.

11. The network node of claim 7 , wherein if the determination of how to proceed comprises determining to perform a network coordinator (NC) to new node (NN) password exchange, then the at least one circuit operates to perform a password exchange by which the network node receives a password from the second node.

12. The network node of claim 7 , wherein if the determination of how to proceed comprises determining to perform a new node (NN) to network coordinator (NC) password exchange, then the at least one circuit operates to perform a password exchange by which the network node transmits a password to the second node.

13. The network node of claim 6 , wherein the at least one circuit is operable to, prior to receiving the third message, receive another message from the second node indicating when the second node will send the third message.

14. The network node of claim 6 , wherein the first message comprises hashed public key information.

15. The network node of claim 6 , wherein the at least one circuit is operable to send the first message in response to being triggered by a user to join a network.

16. The network node of claim 6 , wherein the third message comprises a protected setup response message.

17. The network node of claim 6 , wherein the at least one circuit is operable to analyze a first field of the third message to determine whether admission of the network node to a network of the second node was successful.

18. A network node comprising:
at least one circuit comprising a processor, memory, and a network communication circuit, wherein the at least one circuit is operable to, at least:
send a first message to a second node comprising information that indicates protected setup has been triggered;
receive a second message from the second node indicating when the network node may send a third message comprising a public key; and
send the third message comprising the public key to the second node.

19. The network node of claim 18 , wherein the at least one circuit is operable to, prior to receiving the second message, receive another message from the second node indicating when the second node will send the second message.

20. The network node of claim 18 , wherein the first message comprises hashed public key information.

21. The network node of claim 18 , wherein the at least one circuit is operable to send the first message in response to being triggered by a user to join a network.

22. The network node of claim 18 , wherein the at least one circuit is operable to, after sending the third message, receive a fourth message from the second node, wherein the fourth message comprises a protected setup response message.

23. The network node of claim 22 , wherein the at least one circuit is operable to analyze a first field of the fourth message to determine whether admission of the network node to a network of the second node was successful.

Assignees

• Maxlinear Inc

Inventors

• Hebron Yoav
• Chen Na
• Wu Zong Liang
• Lee Ronald

Classifications

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L9/0841

  involving Diffie-Hellman or related key agreement protocols · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04W12/003

  Electricity · mapped topic

• H04W12/50

  Secure pairing of devices · CPC title