Connection establishing system and method for mesh network

Patent metadata

Field	Value
Publication number	US-11265720-B2
Application number	US-201816217281-A
Country	US
Kind code	B2
Filing date	Dec 12, 2018
Priority date	Oct 24, 2018
Publication date	Mar 1, 2022
Grant date	Mar 1, 2022

Abstract

A connection establishing system and method for a mesh network is provided, the mesh network includes a first transceiver and a second transceiver, the method includes performing a secure connection procedure including: transmitting, by the second transceiver, a secure connection request signal including a identifier to the first transceiver. The first transceiver encrypts the authentication message by using a public key corresponding to the identifier to generate a secure connection response signal and transmit the same to the second transceiver, the second transceiver decrypts the secure connection response signal by a private key to generate a decryption message and transmits an association request signal including the decryption message to the first transceiver. The first transceiver receives the association request signal, and determines whether the decryption message matches with the authentication message; if so, the first transceiver is allowed to establish a secure connection with the second transceiver.

First claim

What is claimed is:

1. A connection establishing method for a mesh network, the mesh network includes a first transceiver and a second transceiver, and the method comprising:
performing a secure connection procedure by the first transceiver and the second transceiver, wherein the secure connection procedure includes:
configuring the second transceiver to transmit a secure connection request signal to the first transceiver, wherein the secure connection request signal includes an identifier having one of a kind uniqueness;
configuring the first transceiver to receive the secure connection request signal, obtain a public key corresponding to the identifier from a comparison table, and encrypt an authentication message with the public key to generate a secure connection response signal to be transmitted to the second transceiver, wherein the comparison table defines a correspondence between the public key and the identifier;
configuring the second transceiver to receive the secure connection response signal, decrypt the secure connection response signal by a private key to generate a decryption message, and transmit an association request signal including the decryption message to the first transceiver;
configuring the first transceiver to receive the association request signal, and determine whether the decryption message matches with the authentication message;
in response to determining that the decryption message matches with the authentication message, configuring the first transceiver to generate an authorization response message and transmit an association response signal including the authorization response message to the second transceiver, while allowing the first transceiver to establish a secure connection with the second transceiver; and
configuring the second transceiver to receive the association response signal and establish the secure connection with the second transceiver,
wherein the secure connection procedure further includes:
configuring the second transceiver to embed a brand and a model into the secure connection request signal; and
configuring the first transceiver to embed the brand and the model into the secure connection response signal.

2. The connection establishing method for the mesh network according to claim 1 , wherein the authentication message is a random message.

3. The connection establishing method for the mesh network according to claim 1 , wherein the authentication message is a sequence of messages generated by a sequence algorithm, which includes an MD5 message digest algorithm and a secure hash algorithm (SHA).

4. The connection establishing method for the mesh network according to claim 1 , wherein the secure connection procedure further includes: configuring the first transceiver to broadcast a beacon signal including a protection flag message; configuring the second transceiver to receive the beacon signal; and configuring the second transceiver to determine whether to perform the secure connection procedure according to the protection flag message, wherein the second transceiver is further configured to determine whether to incorporate the identifier into the security connection request signal for transmission according to the protection flag message.

5. The connection establishing method for the mesh network according to claim 1 , wherein the secure connection procedure further includes:
configuring a timer of the second transceiver to start counting after the second transceiver transmits the secure connection request signal, wherein in response to determining that the secure connection response signal is not received within a first time period, the secure connection procedure is terminated.

6. The connection establishing method for the mesh network according to claim 1 , wherein the secure connection procedure further includes:
configuring a timer of the first transceiver to start counting after the first transceiver transmits the secure connection response signal, wherein in response to determining that the association request signal is not received within a second time period, the secure connection procedure is terminated.

7. The connection establishing method for the mesh network according to claim 6 , wherein the secure connection procedure further includes:
configuring the timer of the first transceiver to start counting after the second transceiver transmits the association request signal, wherein in response to determining that the association response signal is not received within a third time period, the secure connection procedure is terminated.

8. The connection establishing method for the mesh network according to claim 1 , wherein the first transceiver is a root access point or an extender access point in a self-organization network, and the transceiver is an extender access point or a user device in the self-organization network.

9. A connection establishing system for a mesh network, comprising:
a first transceiver; and
a second transceiver, wherein the first transceiver and the second transceiver are configured to perform a secure connection procedure by transmitting a secure connection request signal from the second transceiver to the first transceiver, wherein the secure connection request signal includes an identifier having one of a kind uniqueness,
wherein the first transceiver is configured to receive the secure connection request signal, obtain a public key corresponding to the identifier from a comparison table, and encrypt an authentication message with the public key to generate a secure connection response signal to be transmitted to the second transceiver, wherein the comparison table defines a correspondence between the public key and the identifier;
wherein when the second transceiver receives the secure connection response signal, the second transceiver is configured to decrypt the secure connection response signal by a private key to generate a decryption message, and transmit an association request signal including the decryption message to the first transceiver;
wherein when the first transceiver receives the association request signal, the first transceiver is configured to determine whether the decryption message matches with the authentication message, in response to determining that the decryption message matches with the authentication message, the first transceiver is configured to generate an authorization response message and transmit an association response signal including the authorization response message to the second transceiver, while a secure connection is allowed to be established between the first transceiver and the second transceiver; and
wherein when the second transceiver receives the association response signal, the second transceiver is configured to establish the secure online connection with the first transceiver,
wherein the second transceiver is further configured to embed a brand and a model into the secure connection request signal, and
wherein the first transceiver is further configured to embed the brand and the model into the secure connection response signal.

10. The connection establishing system for the mesh network according to claim 9 , wherein the authentication message is a random message.

11. The connection establishing system for the mesh network according to claim 9 , wherein the authentication message is a sequence of messages generated by a sequence algorithm, which includes an MD5 message digest algorithm and a secure hash algorithm (SHA).

12. The connection establishing system for the mesh network according to claim 9 , wherein the first transceiver is configured to broadcast a beacon signal including a protection flag message, and th

Assignees

• Wistron Neweb Corp

Inventors

• Liang Hao-Ming
• Cheng Chui-Chu
• Chen Horen

Classifications

• H04W12/037

  of the control plane, e.g. signalling traffic · CPC title

• H04W84/18

  Self-organising networks, e.g. ad-hoc networks or sensor networks · CPC title

• H04W12/009 Primary

  specially adapted for networks, e.g. wireless sensor networks, ad-hoc networks, RFID networks or cloud networks · CPC title

• H04W76/14

  Direct-mode setup · CPC title

• H04W12/50 Primary

  Secure pairing of devices · CPC title