IPv6 Address Mapping for External Access to Wireless IoT Nodes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication models for IPv6 domains in wireless networks lack the ability to enable access from an external IPv6 communications network to individual wireless devices, leading to issues such as increased power consumption, complexity, and difficulty in implementing secure connections, especially for IoT devices.
Innovation Solution
A method is provided to generate an IPv6 address for wireless devices based on a subnet identifier and device identifier, allowing the wireless network to control traffic and enable access from an IPv6 communications network by generating a unique IPv6 address for each device, which can be used to route data packets effectively.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the wireless device initiates communication (first approach), then access from external IPv6 domain is enabled, but power consumption increases and computational complexity increases
Solution Approach 1:
Instead of having the wireless device initiate communication with the application node, the patent inverts the approach by having the application node send packets to the wireless device using its link-local address. The gateway then forwards these packets through the wireless network to the target device, reversing the traditional communication initiation direction.
Solution Approach 2:
The gateway acts as an intermediary between the application node and the wireless device. It receives packets from the application node destined for a wireless device, performs address translation from the application node's perspective, and forwards the packets through the wireless network using the device's link-local address, thereby enabling indirect access without requiring the device to initiate communication.
2Reliability
If a secure communications tunnel is established, then access control is improved, but computational complexity increases beyond IoT device capabilities
Solution Approach 1:
The gateway serves as a security intermediary that handles authentication and authorization functions. The application node communicates with the gateway, which validates the application node's credentials and establishes security policies. This approach provides secure access control without requiring the IoT device to perform complex cryptographic operations, as the gateway handles all security-related computations.
3Loss of information
If monitoring and recording source IPv6 addresses is implemented (second approach), then access information is collected, but reliability is insufficient
Solution Approach 1:
The system performs preliminary address assignment and configuration before communication occurs. The gateway is pre-configured with the mapping between application node addresses and wireless device link-local addresses. When an application node wants to access a wireless device, the gateway already has the necessary routing information prepared, eliminating the need for unreliable runtime monitoring and recording of addresses.
4Ease of operation
If a L2 tunnel (VPN) is established, then direct link access is enabled, but setup complexity increases compared to regular IP connection
Solution Approach 1:
The patent creates a virtual copy of the link-local network interface at the gateway level. The gateway maintains a virtual interface that replicates the link-local addressing scheme, allowing the application node to send packets as if it were directly connected to the same link as the wireless device. This virtual copying approach enables direct link access semantics without requiring actual L2 tunneling infrastructure.
Data Source
AI summary
A technique for generating an internet protocol, IP, address according to IPv6, for access to one of a plurality of wireless devices connected or connectable to a wireless network from an application node in a communications network is provided. As to a method aspect of the technique, an IPv6 address for access from the application node in the communications network to a respective one of the wireless devices is generated based on a subnet identifier of the wireless network and a device identifier of the respective one of the wireless devices. The generated IPv6 address is provided for the access from the application node in the communications network.