Security Association Management in Wireless Mesh Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current IEEE 802.11 standards do not effectively manage security associations in multi-hop ad hoc wireless mesh networks, as they rely on centralized authentication procedures and do not support real-time neighbor and multi-hop information for security association establishment and removal, which is impractical for networks without fixed infrastructure.
Innovation Solution
Implementing a method where security associations between peer nodes in a mesh network are established and removed based on routing module observations of neighbor node attributes, such as Link Quality Measurements and mobility information, without relying on the MAC Layer Management Entity (MLME) state machine, allowing for synchronization with the routing module and enabling secure communication between nodes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If centralized authentication procedures are used in wireless mesh networks, then security management is simplified, but the system cannot support real-time neighbor and multi-hop information for security association establishment
Solution Approach 1:
The patent divides security association management into separate functions: the routing module handles neighbor discovery and route establishment, while the security module handles security association establishment and removal. This segmentation allows each module to operate independently with its own data structures (routing table and security association table), enabling real-time adaptation to network changes without requiring centralized authentication procedures.
2Adaptability or versatility
If IEEE 802.11 MLME state machine is used for security association management, then standard compliance is achieved, but synchronization with routing module and support for dynamic mesh networks is lost
Solution Approach 1:
The patent extracts security association management from the IEEE 802.11 MLME state machine and implements it as an independent security module. This extraction allows the security module to use its own data structures (security association table with fields for neighbor node identifier, route identifier, and security parameters) and synchronization mechanisms that are specifically designed for mesh networks, rather than being constrained by the traditional MLME state machine.
Solution Approach 2:
The patent implements dynamic security association management where the security module continuously synchronizes with the routing module based on real-time network conditions. When the routing module discovers new neighbors or establishes routes, it triggers corresponding security association establishment. When routes change or neighbors leave, the security module dynamically removes outdated security associations, ensuring continuous synchronization without relying on fixed state machine transitions.
3Reliability
If security associations are established without routing module synchronization, then security establishment is faster, but network security and route establishment reliability deteriorate
Solution Approach 1:
The patent implements preliminary action by having the routing module discover neighbors and establish routes before the security module establishes security associations. The routing module maintains a routing table with neighbor node identifiers and route identifiers that are used as triggers for security association establishment. This preliminary routing setup ensures that security associations are only established for valid, verified routes, improving reliability while maintaining efficiency through automated triggering.
Data Source
AI summary
Techniques and technologies are provided for managing establishment, maintenance and removal of security associations (SAs) between nodes in an ad hoc network, such as a wireless mesh network.