SECURITY FOR GROUP ADDRESSED DATA PACKETS IN WIRELESS NETWORKS

摘要

A wireless network includes a border router, multiple router nodes and end devices. All nodes of the wireless network use a same group key for encryption and decryption of payloads of multicast layer-2 packets. A router node of the wireless network receives a group key from its parent node, and forwards the group key to its child nodes. The router node receives a layer-2 multicast packet with a payload specifying a multicast layer-3 address. The router node decrypts the payload using the group key. If at least one child node of the router node belongs to a group corresponding to the multicast layer-3 address, the router node forwards the encrypted payload as a layer-2 multicast packet to corresponding child nodes. Use of a same group key across all nodes of the wireless network reduces storage space in a node for storing group keys, and also simplifies group key handling.

主权项

1. A method of operating a wireless node of a wireless network, wherein said method is performed in said wireless node, said method comprising:
receiving a group key from a parent node of said wireless node, wherein said parent node is comprised in said wireless network; and forwarding said group key to a child node of said wireless node, wherein said child node is comprised in said wireless network.