Method and apparatus for MoCA network with protected set-up

Patent metadata

Field	Value
Publication number	US-11949720-B2
Application number	US-202318143019-A
Country	US
Kind code	B2
Filing date	May 3, 2023
Priority date	Jul 24, 2014
Publication date	Apr 2, 2024
Grant date	Apr 2, 2024

Abstract

Systems and methods are disclosed for securing a network, for admitting new nodes into an existing network, and/or for securely forming a new network. As a non-limiting example, an existing node may be triggered by a user, in response to which the existing node communicates with a network coordinator node. Thereafter, if a new node attempts to enter the network, and also for example has been triggered by a user, the network coordinator may determine, based at least in part on parameters within the new node and the network coordinator, whether the new node can enter the network.

First claim

What is claimed is:

1. A system comprising:
a circuit operable to:
send a first message to a node in response to a trigger by a user;
send a second message to the node; and
receive a third message from the node, wherein:
the second message comprises encryption key information,
the third message is responsive to the second message, and
the third message comprises protected setup information.

2. The system of claim 1 , wherein the circuit is operable to:
analyze a first field of the third message;
analyze a second field of the third message, if the first field is a particular value; and
determine how to proceed according to the second field.

3. The system of claim 2 , wherein the circuit is operable to proceed by performing node admission using one or more privacy settings.

4. The system of claim 2 , wherein the circuit is operable to proceed by continuing to search for a network, when a failure has occurred.

5. The system of claim 2 , wherein the circuit is operable to proceed by:
changing a privacy setting of a local parameter to indicate no privacy, and
reporting a change in the privacy setting to a management entity.

6. The system of claim 2 , wherein the circuit is operable to proceed by performing a password exchange, where a password is received from the node.

7. The system of claim 2 , wherein the circuit is operable to proceed by performing a password exchange, where a password is transmitted to the node.

8. The system of claim 1 , wherein the circuit is operable to, prior to receiving the third message, receive another message from the node indicating when the node will send the third message.

9. The system of claim 1 , wherein the trigger comprises a request to join a network.

10. The system of claim 1 , wherein the first message comprises information indicating whether the system is enabled to join a network without using a network password.

11. The system of claim 1 , wherein the first message comprises information indicating whether the system is enabled to downgrade its privacy.

12. The system of claim 1 , wherein the third message comprises a protected setup response information element.

13. The system of claim 1 , wherein the circuit is operable to analyze a first field of the third message to determine whether admission to a network of the node was successful.

14. The system of claim 1 , wherein the first message comprises hashed public key information.

15. A system comprising:
a circuit operable to:
send a first message to a node in response to a trigger by a user;
receive a second message from the node; and
send a third message to the node, wherein:
the first message indicates protected setup has been triggered,
the second message indicates when a third message may be sent, and
the third message comprises an encryption key.

16. The system of claim 15 , wherein the first message comprises hashed public key information.

17. The system of claim 15 , wherein the trigger comprises a request to join a network.

18. The system of claim 15 , wherein the circuit is operable to receive a protected setup response message from the node after sending the third message.

19. The system of claim 15 , wherein the circuit is operable to analyze a first field of a fourth message to determine whether the system is admitted to a network of the node.

20. The system of claim 15 , wherein the first message comprises information indicating whether the system is enabled to join a network without using a network password.

Assignees

• Entropic Communications Llc

Inventors

• Hebron Yoav
• Chen Na
• Wu Zong Liang
• Lee Ronald

Classifications

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L9/0841

  involving Diffie-Hellman or related key agreement protocols · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04W12/50 Primary

  Secure pairing of devices · CPC title

• H04L9/12

  Transmitting and receiving encryption devices synchronised or initially set up in a particular manner · CPC title