Mesh Node Provisioning Using Fake MAC and Hash Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mesh network provisioning techniques require user intervention and physical access to satellite nodes for pairing, which is inefficient and impractical for inaccessible locations.
Innovation Solution
A method and system that enable satellite nodes to communicate their pairing availability to a controller using a fake MAC address, allowing automatic addition to a mesh network without user input or physical interaction, utilizing a hash algorithm to verify credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If traditional mesh network provisioning techniques are used, then security is maintained through manual authentication, but user intervention and physical access to satellite nodes are required
Solution Approach 1:
The satellite node automatically generates a broadcast message containing its identifying information and a fake MAC address, and transmits it to the controller without requiring user intervention. The controller automatically processes this message and adds the satellite node to the mesh network, eliminating the need for manual pairing operations.
Solution Approach 2:
A fake MAC address is introduced as an intermediary mechanism to enable automatic authentication. The satellite node uses this fake address in its broadcast message, and the controller uses it to verify the satellite node's credentials through a hash algorithm, facilitating automated secure provisioning without direct user involvement.
2Ease of operation
If manual pairing methods are used, then authentication security is maintained, but physical access to satellite nodes is required which is impractical for inaccessible locations
Solution Approach 1:
The manual mechanical process of physically accessing the satellite node and entering PINs is replaced with a wireless automated system. The satellite node transmits its identifying information and fake MAC address via broadcast message, and the controller automatically authenticates it using a hash algorithm, eliminating the need for physical access while maintaining security.
3Productivity
If automatic provisioning is implemented, then user intervention is eliminated, but verification of satellite node credentials is required
Solution Approach 1:
The satellite node pre-generates its identifying information and fake MAC address before transmission. The controller is pre-configured with the hash algorithm, allowing it to immediately verify the satellite node's credentials upon receiving the broadcast message, enabling fast automatic provisioning with reliable verification.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Methods, systems, and apparatus, including computer programs encoded on computer-storage media, for associating unclaimed communications nodes. In some implementations, a method includes receiving broadcast information transmitted by a transmitting device including (i) identifying information of a transmitting device and (ii) an address not associated with any device in a transmitting vicinity of the transmitting device; transmitting a password request to the transmitting device in response to receiving the broadcast information; obtaining password information that includes hashed data generated by a hash algorithm; generating a hash result by applying the hash algorithm to an identifier of the transmitting device; comparing the hashed data received from the transmitting device to the hash result generated by the controller; and updating a set of registered network devices based on comparing the hashed data with the hash result.