Cisco Technology, Inc.

Other

Alec Woo

David E Culler

Jonathan W Hui

Navindra Yadav

Atul Mahamuni

Wei Hong

According to one embodiment, techniques are provided to enable secure communication among devices in a mesh network using a group temporal key. An authenticator device associated with a mesh network stores a pairwise master key for each of a plurality of devices in a mesh network upon authentication of the respective devices. Using the pairwise master key, the authenticator device initiates a handshake procedure with a particular device in the mesh network to mutually derive a pairwise temporal key from the pairwise master key. The authenticator device encrypts and signs a group temporal key using the pairwise temporal key for the particular device and sends the group temporal key encrypted and signed with the pairwise temporal key to the particular device.

Group key management and authentication schemes for mesh networks

A system and method adds and manages entries on a list of entries of routing information to allow the top entry to be used for routing to a destination corresponding to the list. Costs of a wireless link may be a function of the success rate experienced on that wireless link.

System and method for computing cost metrics for wireless network links

System and method for managing a list of entries containing routing information

A system and method changes a rate at which routing information is sent to increase it upon the detection of one or more events, maintaining the then current rate for an amount of time, or dropping it, otherwise.

System and method for providing route information

Techniques are provided for adaptive routing of authentication packets in a network, such as a wireless mesh network. At an authenticated device in the network, an authentication packet is received over the network from a device that is seeking authentication. The authentication packet is encapsulated for transmission in Layer 3 packets over an Internet Protocol (IP) tunnel to an authenticator device associated in the network. Similarly, for an authentication packet encapsulated in Layer 3 packets from the authenticator device over the IP tunnel, the authentication packet is decapsulated from the Layer 3 packets and transmitted over the network to the device seeking authentication.

Adapting extensible authentication protocol for layer 3 mesh networks

System and method for accepting information from routing messages into a list

Techniques are provided for the controlled scheduling of the authentication of devices in a lossy network, such as a mesh network. An authenticator device that is configured to authenticate devices in a lossy network receives an authentication start message from a particular device to be authenticated. The authenticator device determines a schedule for engaging in an authentication procedure for the particular device based on an indication of current network utilization.

Authentication control in low-power lossy networks

A system and method stores wirelessly received communications for wireless retransmission, making space in a storage device, if necessary, by deleting any one or more communications corresponding to the same group as the received communication. If storage in the storage device remains insufficient, communications that have been previously retransmitted by that same device are deleted, according to one or more characteristics of such stored communications, such as age or number of times an instance of that communication has been received. If storage in the storage device remains insufficient, communications of a different group are deleted according to one or more characteristics of the stored communications.

System and method for storing communications intended for different groups using a limited amount of space

A system and method communicates commands from a command originator to receiving devices, yet the receiving devices do not confirm receipt of the command. The most current command (e.g. the one with the highest sequence number) is rebroadcast by the command originator and the receiving devices, tending to be more frequent upon detection of an event indicating that the most current command was not received by at least one other device, and less frequently upon detection of an event indicating that the most current command was provided with sufficient duplication that if another device could receive it, the device likely did receive it, subject to a maximum and minimum rate.

Growing community of inventors

Union City, CA, United States of America

Alec Woo