Secure indirect addressing
AssigneeKoninklijke Philips Electronics N.V.
InventorThomas Andreas Maria Kevenaar
Life of this patent
Estimating the term…
Abstract
An efficient solution for secure implementation of indirect addressing (IA) is described. IA may be used, for example, in networks of which the routing algorithms are not capable of multicast but also contain very constrained devices that, although requiring multicast, are not capable of repeated unicast. This ID is useful in wireless networks containing low-power low-cost devices.
Claims14
-11. (canceled)
A method of communicating a communication fragment, the communication fragment comprising a first target address reference referring to a group of at least one receiver device, comprising the acts of:
- a sender device adding a cryptographic message integrity code to protect at least part of the communication fragment,
- the sender device transmitting the protected communication fragment to a router device,
- the router device, for at least one receiver device in the group of target devices, modifying the first target address reference into an address reference of the at least one receiver device, while maintaining the unchanged cryptograph message integrity code, and subsequently forwarding the modified protected communication fragment to the at least one receiver device,
- the at least one receiver device receiving the modified protected communication fragment,
- the at least one receiver device restoring the original protected communication fragment in order to allow verification of the original protected communication fragment using the message integrity code.
A router device being arranged to route a communication fragment from a sender device towards a receiver device, the communication fragment comprising a first target address reference referring to a group of at least one receiver device, the router device comprising:
- receiving means being arranged to receive the communication fragment, comprising a first address reference referring to a group of at least one receiver device, the communication fragment at least partly being protected by a cryptographic message integrity code,
- modifying means being arranged to modify the communication fragment, by replacing the first target address reference by an address reference referring to the at least one receiver device, while maintaining the original cryptographic message integrity code, and
- transmitting means to transmit the modified communication fragment to the at least one receiver device.
A receiver device being arranged to receive a modified communication fragment originating from a transmitter device through a router device, the modified communication fragment comprising a cryptographic message integrity code and an address reference of the receiver device and being derived from a communication fragment comprising a first target address reference referring to a group of at least one receiver device, the receiver device comprising:
- receiving means being arranged to receive the modified communication fragment,
- restoring means being arranged to restore the original communication fragment that was used to compute the cryptographic message integrity code by modifying the address reference of the receiver device into the first target address reference, and
- verification means being arranged to verify the cryptographic message integrity code.
A method of communicating a communication fragment, comprising the acts of:
- a sender device assembling the communication fragment, the communication fragment including a first target address reference referring to a group of at least one receiver device, adding a cryptographic message integrity code to protect at least part of the communication fragment, and transmitting the protected communication fragment to a router device,
- the router device, for at least one receiver device in the group of target devices, modifying the first target address reference into an address reference of the at least one receiver device, while maintaining the unchanged cryptograph message integrity code, and subsequently forwarding the modified protected communication fragment to the at least one receiver device,
- the at least one receiver device receiving the modified protected communication fragment,
- the at least one receiver device restoring the original protected communication fragment to verify of the original protected communication fragment using the message integrity code.
A router device for routing a communication fragment from a sender device towards a receiver device, the router device comprising:
- a receiver arranged to receive a communication fragment from a sending device, the communications fragment comprising a first target address reference referring to a group of at least one receiver device, the communication fragment at least partly being protected by a cryptographic message integrity code,
- a processor programmed to modify the communication fragment, by replacing the first target address reference by an address reference referring to the at least one receiver device, while maintaining the original cryptographic message integrity code, and
- a transmitter arranged to transmit the modified communication fragment to the at least one receiver device.
A receiver device for receiving a modified communication fragment originating from a transmitter device through a router device, the receiver device comprising:
- a receiver arranged to receive the modified communication fragment, the modified communication fragment comprising a cryptographic message integrity code and an address reference of the receiver device and being derived from a communication fragment comprising a first target address reference referring to a group of at least one receiver device,
- a processor programmed to restore the original communication fragment that was used to compute the cryptographic message integrity code by modifying the address reference of the receiver device into the first target address reference, and to verify the cryptographic message integrity code.
A system comprising:
- a router device being arranged to route a communication fragment from a sender device towards the receiver device, the router device including:
- first receiving means being arranged to receive the communication fragment, comprising a first target address reference referring to a group of at least one receiver device, the communication fragment at least partly being protected by a cryptographic message integrity code,
- modifying means being arranged to modify the communication fragment, by replacing the first target address reference by an address reference referring to the at least one receiver device, while maintaining the original cryptographic message integrity code, and
- transmitting means to transmit the modified communication fragment to the at least one receiver device;
- the system further comprising a receiver device being arranged to receive a modified communication fragment originating from a transmitter device through a router device, the receiver device including:
- second receiving means being arranged to receive the modified communication fragment from the routing device,
- restoring means being arranged to restore the original communication fragment that was used to compute the cryptographic message integrity code by modifying the address reference of the receiver device into the first target address reference, and
- verification means being arranged to verify the cryptographic message integrity code.
A system for communicating a communication fragment, comprising:
- a sender device adapted for adding a cryptographic message integrity code to protect at least part of the communication fragment, the communication fragment comprising a first target address reference referring to a group of at least one receiver device, and for transmitting the protected communication fragment to a router device,
- the router device, for at least one receiver device in the group of target devices, being adapted for modifying the first target address reference into an address reference of the at least one receiver device, while maintaining the unchanged cryptograph message integrity code, and subsequently forwarding the modified protected communication fragment to the at least one receiver device,
- the at least one receiver device being adapted for receiving the modified protected communication fragment, and restoring the original protected communication fragment in order to allow verification of the original protected communication fragment using the message intergrity code.
Dependencies are inferred from the claim text.