JP2023552408A - Secure data connections on low data rate networks - Google Patents

Abstract

METHODS AND DEVICES FOR COMMUNICATION BETWEEN A LOCAL NETWORK AND A GLOBAL NETWORK. The method includes storing mapping data for a plurality of hosts in a global network and for a plurality of hosts in a local network. The method further includes receiving a first data packet from one of the plurality of hosts within the local network. The first data packet includes a first source address that is a local network address of a host in a local network, a first destination address that is a local network address of a host in a global network, and payload data. The method further includes determining a global network address of a host in the local network and a global network address of a host in the global network based on the mapping data, and transmitting a second data packet on the global network. The second data packet includes a second source address that is a global network address of a host in the local network, a second destination address that is a global network address of a host in the global network, and payload data.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS This application claims priority from Australian Provisional Patent Application No. 2020/904498, filed on 4 December 2020, the contents of which are hereby incorporated by reference in their entirety. Incorporated. This application also claims priority from U.S. Provisional Patent Application No. 63/121,327, filed December 4, 2020, the contents of which are incorporated herein by reference in their entirety. .

The present disclosure relates to systems and methods for secure data connections in low rate networks.

In recent years, the number of network-connected smart devices has rapidly increased. These smart devices include devices in the home, car or office, smart medical implants, or sensing devices in factories and farms. Such devices are part of the Internet of Things (IoT), a network of physical objects embedded with sensors, software, and other technologies for the purpose of connecting and exchanging data with other devices and systems over a communications network. ) can be formed.

Because IoT devices are often small and have limited power and processing complexity, IoT devices often communicate over low power, low data rate communication networks. In addition, some IoT networks are mesh networks, in which IoT devices connect directly, dynamically, and non-hierarchically to one or more other devices via mesh network connections and collaborate with other devices. to efficiently route data to and from nodes. Therefore, communication protocols have been developed that are suitable for low power, low data rate, mesh network communication in IoT networks.

It is often desirable for these smart devices to be able to communicate outside of their local mesh network to send and receive data to devices on a global network, such as the Internet. Communication protocol requirements for communication over global networks can be complex and multifaceted. Therefore, such communication protocols may not be suitable for low power, low rate, low processing power devices, and adhering to such protocols may result in reduced efficiency and throughput of communications from IoT devices. there is a possibility.

It is therefore desirable to have a means to facilitate efficient communication between an IoT node operating protocol suitable for low power, low complexity devices and a global host operating a communication protocol suitable for global communications.

Any discussion of prior art throughout this specification should not be construed as an admission that such prior art is widely known or forms part of the common general knowledge in the field. do not have.

Throughout this specification, the word "comprise" or variations such as "comprises" or "comprising" refer to the described element, integer or step, or group of elements, integer or step. It will be understood that it is meant to include, but not to exclude other elements, integers or steps, or groups of elements, integers or steps.

This disclosure provides that nodes in a local network designed for low power, low data throughput have compressible link-local source and destination addresses in the local network and globally unique source and destination addresses in the global network. Provided are router methods and devices that allow nodes in a global network to communicate using the router. Compressing link-local source and destination addresses within the local network provides increased payload data bandwidth and reduced payload fragmentation.

According to a first aspect of the present disclosure, a method performed by an edge router for communication between a local network and a global network is provided. The method includes storing mapping data including respective global network addresses and respective local network addresses for a plurality of hosts in a global network. The mapping data further includes a respective global network address and a respective local network address for the plurality of hosts within the local network. The method further includes receiving a first data packet from one of the plurality of hosts within the local network. The first data packet includes a first source address that is a local network address of a host in a local network, a first destination address that is a local network address of a host in a global network, and payload data. The method further includes determining a global network address of a host in the local network and a global network address of a host in the global network based on the stored mapping data, and transmitting a second data packet on the global network. include. The second data packet includes a second source address that is a global network address of a host in the local network, a second destination address that is a global network address of a host in the global network, and payload data.

The local network may be a mesh network. The local network may be a 6LoWPAN based network. The first source address may be an IPv6 link-local address. The first destination address may be an IPv6 link-local address. The global network may be an IPv6-based network. The second source address may be an IPv6 unicast address. The second destination address may be an IPv6 unicast address.

The first data packet may further include a compressed network layer header. The method may further include decompressing a header of the first data packet to determine a first source address and a first destination address. Payload data may be encrypted.

The method may further include storing configuration data including a list of one or more global network addresses, each address corresponding to one of the one or more global hosts within the global network.

The method includes receiving a first data packet from one of the plurality of hosts in the local network and receiving a second data packet from another one of the plurality of hosts in the local area network. and performing the step of determining, in parallel, a global network address of a host in the local network and a global network address of a host in the global network for the first data packet and the second data packet. It may further include.

According to a second aspect of the present disclosure, a method performed by an edge router for communication between a global network and a local network is provided. The method includes storing mapping data including respective global network addresses and respective local network addresses for a plurality of hosts in a global network. The mapping data further includes a respective global network address and a respective local network address for the plurality of hosts within the local network. The method further includes receiving a first data packet from one of the plurality of hosts in the global network. The first data packet includes a first source address that is a global network address of a host in the global network, a first destination address that is a global network address of a host in the local network, and payload data. The method includes determining a local network address of a host in the global network and a local network address of a host in the local network based on the stored mapping data, and transmitting a second data packet on the local network. , further including. The second data packet includes a second source address that is a local network address of a host within the global network, a second destination address that is a local network address of a host within the local network, and payload data.

The local network may be a 6LoWPAN based network. The second source address may be an IPv6 link-local address. The second destination address may be an IPv6 link-local address. The global network may be an IPv6-based network. The first source address may be an IPv6 unicast address. The first destination address may be an IPv6 unicast address.

The second data packet may further include a compressed network layer header. The method may further include determining a compressed network layer header of the second data packet based on the second source address and the second destination address.

According to a third aspect of the disclosure, a device is provided for communication between a local network and a global network. The device includes a processor and a mapping data store for storing mapping data, the mapping data including a respective global network address and a respective local network address for a plurality of hosts in the global network. . The mapping data further includes a respective global network address and a respective local network address for the plurality of hosts within the local network. The processor is configured to receive a first data packet from one of the plurality of hosts within the local network, the first data packet being a local network address of the host within the local network. In response to receiving, based on the stored mapping data, a first destination address that is a local network address of the host in the global network, and a first destination address that is the local network address of the host in the global network; The device is configured to determine a network address and a global network address of a host within the global network, and to transmit a second data packet over the global network. The second data packet includes a second source address that is a global network address of a host in the local network, a second destination address that is a global network address of a host in the global network, and payload data.

The local network may be a 6LoWPAN based network. The first source address may be an IPv6 link-local address. The first destination address may be an IPv6 link-local address. The global network may be an IPv6-based network. The second source address may be an IPv6 unicast address. The second destination address may be an IPv6 unicast address.

The first data packet may further include a compressed network layer header. The processor is further configured to decompress the compressed network layer header to determine a second source address and a second destination address.

According to a fourth aspect of the present disclosure, a device for communication between a global network and a local network is provided. The device includes a processor and a mapping data store for storing mapping data. The mapping data includes respective global network addresses and respective local network addresses for multiple hosts within the global network. The mapping data further includes a respective global network address and a respective local network address for the plurality of hosts within the local network. The processor is configured to receive a first data packet from one of the plurality of hosts in the global network, the first data packet being a global network address of the host in the global network. a source address, a first destination address that is a global network address of a host within the local network, and a local address of the host within the global network based on the stored mapping data, in response to receiving the payload data; determining a network address and a local network address of a host in the local network; and transmitting a second data packet on the local network, the second data packet being a local network address of the host in the global network; a second source address that is an address, a second destination address that is a local network address of a host within the local network, and payload data.

The local network may be a 6LoWPAN based network. The second source address may be an IPv6 link-local address. The second destination address may be an IPv6 link-local address. The global network may be an IPv6-based network. The first source address may be an IPv6 unicast address. The first destination address may be an IPv6 unicast address.

The second data packet may further include a compressed network layer header. The processor may be further configured to determine a compressed network layer header of the second data packet based on the second source address and the second destination address.

According to a fifth aspect of the present disclosure, communication between a global Internet Protocol version 6 (IPv6) network and a local network using IPv6 over Low-Power Wireless Personal Area Networks (6LoWPAN) performed by an edge router is provided. A method for secure communication is provided. The method includes storing mapping data. The mapping data includes respective IPv6 unicast addresses and respective IPv6 link local addresses for multiple hosts within the global IPv6 network. The mapping data further includes respective IPv6 unicast addresses and respective IPv6 link local addresses for the plurality of hosts within the local network. The method further includes receiving a first data packet from one of the plurality of hosts within the local network. The first data packet has a first source address that is an IPv6 link-local address of a host in a local network, a first destination address that is an IPv6 link-local address of a host in a global IPv6 network, and payload data. including. The method includes determining an IPv6 unicast address of a host in a local network and an IPv6 unicast address of a host in a global IPv6 network based on stored mapping data; and transmitting the packet. The second data packet has a second source address that is an IPv6 unicast address of a host in the local network, a second destination address that is an IPv6 unicast address of a host in the global IPv6 network, and payload data. including.

According to a sixth aspect of the present disclosure, a network between a global Internet Protocol version 6 (IPv6) network and a local network using IPv6 over Low-Power Wireless Personal Area Networks (6LoWPAN) performed by an edge router is provided. A method for secure communication is provided. The method includes storing mapping data. The mapping data includes respective IPv6 unicast addresses and respective IPv6 link local addresses for multiple hosts within the global IPv6 network. The mapping data further includes respective IPv6 unicast addresses and respective IPv6 link local addresses for the plurality of hosts within the local network. The method further includes receiving a first data packet from one of the plurality of hosts in the global IPv6 network. The data packet includes a first source address that is an IPv6 unicast address of a host in the global IPv6 network, a first destination address that is an IPv6 unicast address of a host in the local network, and payload data. The method includes determining an IPv6 link-local address of a host in a global IPv6 network and an IPv6 link-local address of a host in a local network based on stored mapping data, and transmitting a data packet on the local network. It further includes. The data packet includes a second source address that is an IPv6 link-local address of a host in a global IPv6 network, a second destination address that is an IPv6 link-local address of a host in a local network, and payload data.

1 is a network diagram illustrating an Internet of Things network connected to the Internet, according to an embodiment. FIG. FIG. 2 is a block diagram illustrating components of a protocol stack, according to an embodiment. FIG. 2 is a block diagram illustrating packet loss in a local network, according to an embodiment. FIG. 2 is a network diagram illustrating components of local and global networks, according to an embodiment. 4 illustrates the format of an IEEE 802.15.4 MAC packet according to an embodiment. 1 illustrates the format of an IPv6 header, according to an embodiment. 4 illustrates the format of an IEEE 802.15.4 MAC packet with header compression, according to an embodiment. 1 is a block diagram illustrating components of a router, according to an embodiment. FIG. 3 is a flowchart illustrating a parallel processing method performed by a router, according to an embodiment. 3 is a flowchart illustrating a method performed by a router when receiving a packet from a local network, according to an embodiment. 3 is a flowchart illustrating a method performed by a router when receiving a packet from a global network, according to an embodiment. FIG. 2 is a block diagram illustrating packet loss in a local network, according to an embodiment.

Embodiments of the present disclosure will be described with reference to the accompanying drawings.
Figure 1 - Internet of Things (IoT)
FIG. 1 illustrates a local network 108 of devices (eg, 102 and 104) that communicate with hosts over the Internet, according to an embodiment. Local network 108 is a mesh network topology in which IoT devices are nodes. Packets are forwarded from one node to another through mesh network 108 until the packet reaches the destination node.

Local network 108 is connected to global network 110 via edge router 106. Edge router 106 is a device located at a network boundary that forwards data packets between computer networks. If the communication protocol applied on the local network 108 differs from the communication protocol applied on the global network, the edge router 106 formats the communicated data packets to facilitate communication between the local and global networks. Perform a conversion from one protocol to another. Thus, through edge router 106, hosts on the global network (eg, 112 and 114) can communicate with nodes on mesh network 108 (eg, 102 and 104).

IoT Protocols In IoT networks where nodes are often low powered, such as battery powered, and utilize low data rate communication, communication protocols tailored for IoT network communication provide suitable connectivity for the nodes of the IoT network. It is possible. Many IoT network protocols define encapsulation and header compression mechanisms that allow Internet packets to be sent and received over low-power networks, such as IEEE 802.15.4.

An example of an IoT communication protocol that provides low data rate mesh connectivity is the "IPv6 over Low-Power Wireless Personal Area Network" (6LoWPAN) protocol. The 6LoWPAN protocol originates from the idea that Internet Protocol (IP) should be applied to the smallest devices and allow devices with limited processing power to participate in the Internet of Things (IoT). .

Examples of where mesh networks such as 6LoWPAN may be applied are automation and entertainment applications in home, office and factory environments. 6LoWPAN can be used on smart grids to allow smart meters and other devices to create a mesh network before transmitting data to a billing system over an Internet Protocol version 6 (IPv6) network. .

The 6LoWPAN protocol is standardized in Request For Comment (RFC) 6282. RFC6282 is entitled “Compression Format for IPv6 Datagrams over IEEE802.15.4-Based Networks” and is dated September 2011 and is incorporated herein by reference. RFC6282 defines how IPv6 data frames are encapsulated on IEEE 802.15.4 wireless links. 6LoWPAN introduces an adaptation layer between the link layer and network layer of the IP stack and enables the transmission of IPv6 datagrams over IEEE 802.15.4 wireless links. RFC6282 defines a header compression mechanism that reduces the size of headers within 6LoWPAN packets. The compression mechanism defined in RFC 6282 allows arbitrary prefixes of source and destination addresses to be compressed depending on the sharing context.

Although embodiments of the present disclosure refer to the application of the 6LowPAN protocol on local network 108, other network protocols may be utilized to provide communication between nodes of an IoT network, such as local network 108. . Other such network protocols include ZigBee, ISA100.11. a, WirelessHART, MiWi, SNAP (Subnetwork Access Protocol), or Thread.

FIG. 2 - Protocol Stack Within a local mesh network, data is communicated according to a protocol stack that defines a set of rules or standards for formatting data and controlling communication of data. FIG. 2 illustrates a simplified Open Systems Interconnect (OSI) model of a protocol stack for communication over a network utilizing 6LoWPAN over IEEE 802.15.4, according to an embodiment.

Physical layer 202 converts data bits into signals that are transmitted and received over the air. Data link layer 204 provides a reliable link between two directly connected nodes by detecting and correcting errors that may occur in the physical layer during transmission and reception. The data link layer includes a media access layer (MAC) that provides access to media. In the example illustrated in FIG. 2, the MAC layer is IEEE802.15.4. 6LoWPAN adaptation layer 206 provides adaptation from IPv6 to IEEE 802.15.4.

Network layer 208 addresses and routes data through the network, over several hops if necessary. IPv6 is a network protocol illustrated in FIG. Transport layer 210 creates communication sessions between applications running on end devices. The transport layer allows multiple applications on each device to have their own communication channels. Transmission Control Protocol (TCP) is the primary transport protocol on the Internet. However, since TCP is a connection-based protocol with large overhead, it is not necessarily suitable for devices requiring ultra-low power consumption. In these types of systems, User Datagram Protocol (UDP), a lower overhead connectionless protocol, may be a better option. Examples of secure transport layers include Transport Layer Security (TLS), which runs over TCP, and Datagram Transport Layer Security (DTLS), which is based on UDP.

Finally, the application layer 210 is responsible for data formatting. It also ensures that data is transferred in a scheme that is optimal for the application.

FIG. 3 - Packet Loss FIG. 3 illustrates an example of packet loss for communication of a packet from a source node 302 on a local mesh network (e.g., a 6LoWPAN network) to a destination node 306 on a global IPv6 network, according to an embodiment. Illustrate.

Arrow lines such as 308 and 310 indicate the path of the payload data as it traverses the protocol stack of the source node 302 from the application layer 312 to the 6LoWPAN layer 314 and to the link and physical layers shown at 316. Headers are added by the protocol layer as the payload data traverses the protocol stack. In the example illustrated in FIG. 3, the destination address header includes a global IPv6 address and there is no IP header compression (IPHC) at the WPAN layer 316.

The percentage values indicate the approximate percentage of packet loss at each stage of payload data traversal from the application layer 312 of the source node 302 to the application layer 318 of the destination node 306 on the global IPv6 network. For example, approximately zero percent of packets are lost from the application layer 312 to the 6LoWPAN layer 314.

In contrast, approximately 3.34% of packets are lost during transmission from the WPAN layer 316 of the source node 302 to the WPAN layer 320 of the router 304.

Factors Affecting Packet Loss Factors that increase packet loss rates include the limited effective payload size of IEEE 802.15.4 packets. The effective payload size of an IEEE802.15.4 packet is 54 bytes. This limited payload size may result in fragmentation of the payload across multiple packets.

Furthermore, when applying an encryption protocol such as Datagram Transport Layer Security (DTLS) to a 6LoWPAN IoT network based on IEEE802.15.4, the expansion of the payload resulting from encryption may cause payload fragmentation. There is. For example, a 1-byte message can become 16-bytes of cipher text plus a 16-byte initialization vector after the message is encrypted with AES. Payload expansion may result in fragmentation of the payload across multiple packets in order to fit the expanded payload into the limited payload field of an IEEE 802.15.4 packet.

Fragmentation of the payload across multiple packets increases the probability that the payload will be lost during communication, since if one of the multiple fragments is lost during communication, the entire payload may be lost.

Therefore, it is preferable to reduce payload fragmentation at the adaptation 206 and link 204 layers. Fragmentation at these layers of the protocol stack can be reduced by increasing the effective payload of link layer packets. Increasing the effective payload of a packet by n bytes avoids packet fragmentation when the effective payload of a packet is exceeded by 1 to n bytes.

Header Compression It is often desirable for each node in a local network to have a unique address that is communicated within the header fields of communicated packets. The length of the address field depends on the communication protocol utilized by the local network and may depend on the number of nodes that must be uniquely identified within the local network.

IoT devices communicating on a local mesh network may communicate via 128-bit long IPv6 addresses, with the ability to assign each device a globally unique IPv6 address. On the other hand, some mesh network protocols allow nodes within a mesh network to communicate with each other using addresses shorter than IPv6 unicast addresses, providing an address format that can be unique only within the local network. do.

For example, nodes in an IEEE 802.15.4 mesh network can communicate with each other using IPv6 link-local source and destination addresses. IPv6 link-local addresses are valid only for communications within the local network segment and are not routed on the Internet. An IPv6 link local address starts with hexadecimal byte FE80, and the lowest 64 bits of the address are the interface identifier (IID).

According to the 6LoWPAN protocol, the header containing the IPv6 link-local address can be compressed via Internet Protocol Header Compression (IPHC). IPHC compression reduces the size of the header and allows more bytes for the payload. Therefore, fragmentation can be reduced through applying IPHC to link-local addresses for communications within a local network. However, since an IPv6 link-local address is an address that is valid only for communication within a defined local network segment, a routable IPv6 address is required when communicating outside the local network.

Globally unique IPv6 addresses cannot be compressed. Therefore, it is desirable to benefit from an increase in effective payload size due to header compression in order to reduce payload fragmentation while still being able to communicate with hosts outside the local network.

Address Translation to Reduce Fragmentation Note that in many applications of local networks, such as IoT mesh networks, devices on the local network communicate with a known set of global hosts on the Internet. This set is often small, for example less than 10 hosts or only a single host to which the sensor sends sensor data. Considering that local devices do not communicate with any global host, this disclosure uses link-local source and destination addresses in the local network and globally unique source and destination addresses in the global network to A router method and device for performing address translation is provided to enable nodes in a network to communicate with nodes in a global network.

Accordingly, this disclosure provides a method for combining link-local IPv6 addresses and global IPv6 addresses (i.e., IPv6 unicast addresses, IPv6 anycast addresses, or IPv6 multicast addresses) for the same packet, but in different segments of the network. Provide a method for use in

Through the use of link-local IPv6 addresses for the source and destination addresses of packets communicated on the local network, the address field of the packet header may be compressed, as detailed below. Header compression allows more bits to be allocated to the payload of packets sent within the local network. A larger payload field reduces the number of fragmented packets, or reduced fragmentation results in reduced packet loss experienced within the local network.

Advantageously, the present disclosure can reduce packet loss in IoT networks when the network is protected with DTLS or other crypto-based methods. Otherwise, security mechanisms such as DTLS may be impractical due to increased packet loss rates. Packet loss leads to retransmission of lost packets, slowing down the overall speed of the network. Accordingly, the methods disclosed herein increase network speed by reducing packet loss.

FIG. 4 - Edge Router FIG. 4 is a block diagram illustrating a network architecture 400 according to an embodiment. Network 400 includes two hosts 402 and 404 that are part of IoT network 416. Network 400 further includes two hosts 412 and 414 that are part of Internet network 418. IoT network 416 may be considered a local network and Internet network 418 may be considered a global network.

Local hosts 402 and 404 communicate with global hosts 412 and 414 via edge router 406. Edge router 406 (referred to herein as a router) performs address translation functions to route communications from local hosts to global hosts and from global hosts to local hosts.

In the example illustrated in FIG. 4, local network 416 is a 6LoWPAN network and global network is an IPv6 network. Thus, router 406 interconnects IEEE 802.15.4 6LoWPAN network 416 and IPv6 network 418.

Within local network 416, local hosts address packets with link-local IPv6 addresses. Router 406 receives packets addressed with link-local IPv6 source and destination addresses and converts the link-local IPv6 source and destination addresses to global IPv6 addresses when the 6LoWPAN packet is converted to an IPv6 packet. More specifically, router 406 includes a registry 408 of global hosts (eg, host 412 and host 414) with which local hosts of local network 416 communicate. Router 406 further includes a store 410 of mapping data. Each local host on the local network and each global host in the registry of global hosts 408 has a link-local address and a corresponding global address. Mapping data 410 records the mapping between each host's link local address and that host's global address.

FIG. 5A - Link Layer Packet Format FIG. 5A illustrates the format of an IEEE 802.15.4 link layer packet 500, according to an embodiment. The maximum length of an IEEE 802.15.4 link layer packet is 127 bytes, where one byte is an octet of bits. Packet 500 includes a MAC header 502, a 40-byte IPv6 header 504, an 8-byte UDP header 506, a 2-byte checksum 510, and a 54-byte payload 508. Depending on the upper layers of the protocol stack, payload 508 may include additional address fields, header fields, and data fields.

6LoWPAN Header The MAC header 502 may include one or more of three subheaders: mesh addressing, fragmentation, and header compression. Mesh addressing supports layer 2 (data link) transport and fragmentation supports transmission of larger payloads. For packets that fit into one IEEE 802.15.4 packet, the fragmentation header is omitted. Mesh headers are not used when transmitting data over only one hop. The format, functionality, and use of fragmentation headers and mesh addressing headers are defined within RFC 6282 and are not further described in this disclosure. The header compression subheader is explained below.

Figure 5B
FIG. 5B illustrates the format of an uncompressed IPv6 header 504, according to an embodiment. IPv6 header 504 includes a 128-bit source address 512 and a 128-bit destination address.

FIG. 6 - Header Compression According to the 6LoWPAN protocol, the 40-byte IPv6 header 504 and the 8-byte UDP header 506 can be compressed into a smaller 6LoWPAN subheader by assuming the use of common fields. In particular, the 6LoWPAN adaptation layer removes from the IPv6 header redundant information that can be derived from headers of other layers. In particular, header data that can be derived from the link layer header is omitted from the compressed IPv6 header.

FIG. 6 illustrates the format of an IEEE 802.15.4 packet 600 with header compression applied according to the 6LoWPAN protocol, according to an embodiment. Packet 600 includes a MAC header 602, a 2-byte IPv6 header 604, a 4-byte UDP header 606, a 2-byte checksum 610, and a 96-byte payload 608.

For communications between two devices within the same 6LoWPAN network, link-local addresses can be used to compress IPv6 headers to only 2 bytes and UDP headers to only 4 bytes. Therefore, in the example shown in FIG. 6, the combined byte size of the IPv6 header and UDP header can be compressed from 48 bytes to 6 bytes, thus providing an additional 42 bytes in the payload field 608. . Thus, payloads in the range of 54 bytes to 96 bytes may be accommodated within a single link layer packet rather than being fragmented across two packets. Through applying header compression, the percentage of fragmentation can be reduced.

Other Protocols In embodiments where TCP is used instead of UDP at the transport layer, link layer packet 500 may include a TCP header instead of UDP header 506. IPv6 and TCP headers can be compressed by assuming the use of common fields, in much the same way that UDP and IPv6 headers are compressed, according to the standard RFC 6282 that standardizes 6LowPAN.

In embodiments where local network 108 utilizes a communication protocol other than 6LowPAN, the IPv6 header and TCP or UDP header may be compressed according to a compression method provided by the standard associated with the communication protocol utilized. For example, in an embodiment where the local network protocol providing communication between nodes of local network 108 is the Zigbee protocol, the header compression method as provided by the Zigbee standard is 6LowPAN header compression as defined in RFC 6282. In embodiments where the local network protocol is Thread, header compression is provided by the Thread protocol specification. Although the header compression methods applied by the communication protocols utilized by the local network 108 may differ from the header compression methods defined in RFC 6282, the various header compression methods cover common fields across the headers of the protocol stack. Provide compression by assuming that you use

FIG. 7 - Router Block Architecture FIG. 7 is a block diagram illustrating the components of router 406. Router 406 includes processor 704 . The processor may be a single processing unit or multiple processing units that work together to process communication packets sent and received by devices on the local network 416.

Router 406 is connected to one or more devices on local network 416 via communication connection 706 . The router is also connected to one or more host devices on global network 418 via communication connection 708 . Communication connections 706 and 708 may each be wired or wireless communication connections.

Router 406 includes a data store 710 that stores a list of global hosts with which local hosts in local network 416 communicate. The list of global hosts may include a list of global IPv6 addresses. Further data, such as a host name, permission settings, or configuration settings, may be stored in conjunction with the global IPv6 address, as required for a particular embodiment.

Router 406 further includes a mapping data store 714 from which processor 704 can store and retrieve mapping data via connection 716 . Mapping data store 714 stores data pairs that include a host's global address and a host's corresponding local address. For example, mapping data store 714 stores data pairs that include a host's global IPv6 address and a host's corresponding link-local address. Mapping data store 714 stores such data pairs for one or more hosts on local network 416 and stores such data pairs for each of the global hosts listed in host device 710's list. .

FIG. 8 - Parallel Processing Flowchart To manage communication throughput of communications between local and global networks, router 406 may perform parallel processing of routed packets. FIG. 8 is a flowchart illustrating a parallel processing method 800 as performed by router 406, according to an embodiment. Step 802 is a configuration step in which router 406 loads registered services into memory accessible by processor 704 . Registered services may be accessible locally to router 406 or remotely via communication connection 708 and may be loaded from service table 806. At step 804, the router is in service and ready to receive packets from the local network on connection 706 or from the global network on connection 708.

At Event 806, the router receives a packet from global network 418 or local network 416. In response to receiving a packet from local network 416, router 406 performs one or more processes to process the outgoing packet from the local network and forward the processed packet to a destination node in the global network. Create thread 810. In response to receiving a packet from the global network 418, the router activates one or more processing threads to process the incoming packet from the global network and forward the processed packet to a destination node within the local network. Create 816. Steps 810 and 816 may occur in parallel or in full or partial order.

In response to receiving a second packet from local network 416, as indicated by event 812, router 406 creates a second thread to process the outgoing packet. Similarly, in response to receiving a packet from global network 418, as indicated by event 818, the router creates another thread to process the incoming packet.

Threads may be created while other threads are executing, providing parallel processing of incoming and/or outgoing packets. Router 406 continues to create threads to process incoming and outgoing packets as needed and according to the router's processing capabilities.

FIG. 9 - Transmission from Local Network FIG. 9 is a flowchart illustrating a method 900 as performed by a router, according to an embodiment. Step 902 is a configuration step that may be performed at router startup and optionally during router operation. In step 902, the router obtains external host address information. External host address information includes the global address of each global host with which hosts in the local network communicate. A router may be preconfigured with a list of global hosts. Thus, during router preconfiguration, the global address of the global host is stored in memory 710. Additionally, additional global hosts may be registered with the router after configuration step 902, as detailed below.

At step 904, the router receives a packet from the local host on communication connection 706. At step 906, the router parses and/or processes one or more headers of the received packet to determine the local network address (ie, source address) of the packet's source node (local host). The source address will be a local network address in local network address format. The router then consults the mapping data stored in memory 714 to determine the global network address that corresponds to the source node's local network address.

Also, in step 906, the router determines the local network address of the destination node. The router determines the local network address of the destination node by parsing the destination address from the header of the received packet. The destination address will be a local network address in local network address format. The router then consults the mapping data stored in memory 714 to determine the global network address that corresponds to the destination node's local network address.

In step 908, the router modifies the header of the packet to replace the source node's local network address with the source node's corresponding global network address and the destination node's local network address with the destination node's corresponding global network address. replace. The router then sends the modified packet on the global network to the destination node, which is the global host associated with the global network destination address.

6LoWPAN to IPv6 Transmission The steps of method 900 are described with respect to the embodiment illustrated in FIG. 4, where the local network is a 6LoWPAN network and the global network is an IPv6 network.

In step 902, router 406 is preconfigured with the IPv6 global address of each global host 412 and 414 with which local hosts 402 and 404 communicate.

At step 904, router 406 receives 6LoWPAN compliant IEEE 802.15.4 packet 420 on communication connection 706. At step 906, the router 406 decompresses the 6LoWPAN header of the received packet 420 and parses the decompressed IPv6 header to determine the link-local address of the source node of the packet 420 according to the RFC6282 protocol. Router 406 then consults the mapping data stored in memory 714 to determine the global network address that corresponds to the source node's local network address.

Also, in step 906, the router determines the local network address of the destination node by parsing the decompressed IPv6 header of the received packet 420 in accordance with RFC6282. Router 406 then consults the mapping data stored in memory 714 to determine the global network address that corresponds to the destination node's local network address.

At step 908, router 406 modifies the header of received packet 420 to yield modified packet 422. More specifically, router 406 modifies the header of received packet 420 to replace compressed IPv6 header 604 and compressed transport layer header 606 with uncompressed 40-byte IPv6 header 504. Router 406 forms IPv6 header 504 using the source node's determined global network address in field 512 and the destination node's global network address in field 514.

At step 910, router 406 sends modified packet 422 on connection 708 to the global host associated with the global network destination address.

FIG. 10 - Reception to Local Network FIG. 10 is a flowchart illustrating a method 1000 performed by a router, according to an embodiment. Step 1002 is a configuration step that may be performed at router startup and optionally during router operation. In step 1002, the router obtains local host address information. Local host address information includes the local address of each local host with which hosts in the global network communicate. The router may be preconfigured with a list of local hosts with which the global host communicates. Thus, during preconfiguration of the router, the local address of the local host is stored in memory 710. The router may open sockets and processing threads to support processing communications with each local host in the list of local hosts.

At step 1004, the router receives a packet from the global host on communication connection 706. At step 1006, the router parses and/or processes one or more headers of the received packet to determine the global network address (ie, source address) of the packet's source node (global host). The source address will be a global network address in global network address format. The router then consults the mapping data stored in memory 714 to determine the local network address that corresponds to the source node's global network address.

Also, in step 1006, the router determines the global network address of the destination node. The router determines the global network address of the destination node by parsing the destination address from the header of the received packet. The destination address will be a global network address in global network address format. The router then consults the mapping data stored in memory 714 to determine the local network address that corresponds to the destination node's global network address.

In step 1008, the router modifies the header of the packet to replace the source node's global network address with the source node's corresponding local network address and the destination node's global network address with the destination node's corresponding local network address. . The router then sends the modified packet to the destination node, which is the local host associated with the local network destination address.

IPv6 to 6LoWPAN Reception The steps of the method 1000 are described with respect to the embodiment illustrated in FIG. 4, where the local network is a 6LoWPAN IoT network and the global network is an IPv6 network.

In step 1002, router 406 is preconfigured with the link-local address of each local host with which devices in Internet 418 communicate.

At step 1004, router 406 receives IPv6 packet 426 over communications connection 708. At step 1006, router 406 parses the IPv6 header of received packet 426 to determine the IPv6 global address of the source node of packet 426 in accordance with the IPv6 protocol. Router 406 then consults mapping data stored in memory 714 to determine the local network address that corresponds to the source node's global network address, where the local network address is a link-local IPv6 address.

Also, in step 1006, the router determines the global network address of the destination node by parsing the IPv6 header of the received packet 426. Router 406 then consults mapping data stored in memory 714 to determine the local network address that corresponds to the destination node's global network address, where the local network address is a link-local IPv6 address.

At step 1008, router 406 modifies the header of received packet 426 to yield modified packet 424. More specifically, router 406 modifies the header of received packet 426 to replace IPv6 header 504 and transport layer header 506 with a 6LoWPAN header that includes compressed network layer header 604 and compressed transport layer header 606. Router 406 compresses headers 504 and 506 using the determined link-local address of the source node and the link-local address of the destination node according to the 6LoWPAN protocol.

At step 1010, the router 406 sends the modified packet 424 to the local host associated with the local network destination address.

Opening a Socket In some embodiments, a router stores and maintains a list of nodes on the local network with which it communicates (eg, sends packets or receives packets). This list of local nodes may be stored in memory 710 or in an alternate memory store accessible to processor 704.

When receiving a packet from the local network, on communication connection 706, router 406 identifies the packet's source node by determining whether the address of the local host is one of the addresses in the list of local hosts. is a local host known to router 406.

If the source of the packet is a local host known to router 406, the router obtains a socket for communication with the local host. If the source of the packet is a local host unknown to router 406, the router creates a socket for communication with the local host and processes incoming packets sent to or from the local host. Create a thread that supports .

Registering a New Global Host In some embodiments, a registration process may be performed that identifies a new global host as a host with which a local host communicates. During the registration process, the new global host's global address is communicated to the router, and the router adds the new global host's global address to the list of hosts stored in memory 710. Additionally, the router determines the new global host's local network address.

In one embodiment, the router is configured with a local network address for the new global host, and the router stores the local network address for the new global host and the corresponding global network address in mapping data store 714. Alternatively, a router may determine a suitable local address for a new global host by performing an address assignment process according to the local network's link layer (or adaptation layer) protocol.

In embodiments where the link layer is IEEE 802.15.4 and the adaptation layer is 6LoWPAN, the router supports "Neighbor Discovery Optimization for IPv6 over Low-Power Wireless Per sonal Area Networks (6LoWPAN)” Through application, suitable link-local addresses can be determined. More specifically, the router allocates a link-local address of the format FE80::IID and sends this address in a Neighbor Solicitation (NS) message to all other participants in the subnet, indicating that the address is not known to anyone else. Check if it is used by If the router does not receive a Neighbor Advertisement (NA) message within a defined time frame, the router assumes that the new link-local address is unique (on this local network).

FIG. 11 - Packet loss reduction FIG. 11 illustrates packet loss implementation for communication of packets from a source node 1102 on a local mesh network (e.g., a 6LoWPAN network) to a destination node 1106 on a global IPv6 network, according to an embodiment. Illustrate an example. In the example illustrated in FIG. 11, router 1104 performs source and destination address translation in accordance with this disclosure.

Arrow lines such as 1108 and 1110 indicate the path of the payload data as it traverses the protocol stack of the source node 1102 from the application layer to the 6LoWPAN layer and to the link and physical layers. Headers are added by the protocol layer as the payload data traverses the protocol stack.

In the example illustrated in FIG. 11, the destination address header includes a link-local IPv6 address and IP header compression (IPHC) is applied at the WPAN layer 1116. Router 1104 receives packets containing link-local source and destination addresses and modifies the packets to include corresponding global source and destination addresses (as defined by the router's mapping data). The router then communicates the modified packet to the destination node's Ethernet layer.

The percentage values indicate the approximate percentage of packet loss at each stage of traversal of payload data from the application layer of source node 1102 to the application layer of destination node 1106 on the global IPv6 network. For example, approximately zero percent of packets are lost from the application layer 1112 to the 6LoWPAN layer 1114.

In contrast, in the example illustrated in FIG. 3, approximately 3.34% of packets are lost during transmission from the WPAN layer 316 of the source node 302 to the WPAN layer 320 of the router 304; In the illustrated embodiment, only about 2.6% of packets are lost during transmission from the WPAN layer 1116 of the source node 1102 to the WPAN layer 1120 of the router 1104.

The term "packet" may be used to describe a formatted unit of data communicated at the network layer of a protocol stack, while the term "frame" may be used to describe a formatted unit of data communicated at the link layer of a protocol stack. can be used to describe formatted units of. For ease of reference, this disclosure uses the term "packet" to describe a formatted unit of data communicated at either the link layer, adaptation layer or network layer of the protocol stack. .

A network host is a computer or other device connected to a computer network. A host may act as a server that offers information resources, services, and applications to users or other hosts on the network. A host is assigned at least one network address. Network hosts that participate in applications that use a client-server computing model are classified as server or client systems.

Those skilled in the art will appreciate that numerous variations and/or modifications may be made to the embodiments described above without departing from the broad general scope of the disclosure. In particular, this method can be applied to various other local network protocols to enable increased payload capacity within a packet by utilizing network layer header compression or compression of non-payload portions of the packet. . Accordingly, this embodiment should be considered in all respects illustrative and not restrictive.

Claims (20)

A method for communication between a local network and a global network performed by an edge router, the method comprising:
storing mapping data for a plurality of hosts in the global network, including respective global network addresses and respective local network addresses;
storing, the mapping data further comprising a respective global network address and a respective local network address for a plurality of hosts in the local network;
receiving a first data packet from one of the plurality of hosts in the local network, the first data packet comprising:
a first source address that is the local network address of the host in the local network;
receiving: a first destination address that is the local network address of the host within the global network; and payload data;
determining the global network address of the host in the local network and the global network address of the host in the global network based on the stored mapping data;
transmitting a second data packet over the global network, the second data packet comprising:
a second source address that is the global network address of the host in the local network;
a second destination address that is the global network address of the host in the global network; and transmitting the payload data. The method of claim 1, wherein the local network is a mesh network. The method of claim 1, wherein the local network is a 6LoWPAN-based network, the first source address is an IPv6 link-local address, and the first destination address is an IPv6 link-local address. The method of claim 1, wherein the global network is an IPv6-based network, the second source address is an IPv6 unicast address, and the second destination address is an IPv6 unicast address. The method of claim 1, wherein the first data packet further includes a compressed network layer header. 2. The method of claim 1, further comprising decompressing a header of the first data packet to determine the first source address and the first destination address. The method of claim 1, wherein the payload data is encrypted. 2. The method of claim 1, further comprising storing configuration data comprising a list of one or more global network addresses, each address corresponding to one of one or more global hosts within the global network. the method of. receiving a first data packet from one of the plurality of hosts in the local network and a second data packet from another one of the plurality of hosts in the local area network; and,
determining, for the first data packet and the second data packet, the global network address of the host in the local network and the global network address of the host in the global network in parallel; 2. The method of claim 1, further comprising: A method for communication between a global network and a local network performed by an edge router, the method comprising:
storing mapping data for a plurality of hosts in the global network, including respective global network addresses and respective local network addresses;
storing, the mapping data further comprising a respective global network address and a respective local network address for a plurality of hosts in the local network;
receiving a first data packet from one of the plurality of hosts in the global network, the first data packet comprising:
a first source address that is the global network address of the host in the global network;
receiving: a first destination address that is the global network address of the host in the local network; and payload data;
determining the local network address of the host in the global network and the local network address of the host in the local network based on the stored mapping data;
transmitting a second data packet on the local network, the second data packet comprising:
a second source address that is the local network address of the host within the global network;
a second destination address that is the local network address of the host in the local network; and transmitting the payload data. the local network is a 6LoWPAN-based network, the second source address is an IPv6 link local address, and the second destination address is an IPv6 link local address;
11. The method of claim 10, wherein the global network is an IPv6-based network, the first source address is an IPv6 unicast address, and the first destination address is an IPv6 unicast address. the second data packet further includes a compressed network layer header;
11. The method of claim 10, wherein the method further comprises determining the compressed network layer header of the second data packet based on the second source address and the second destination address. A device for communication between a local network and a global network, the device comprising:
a processor;
a mapping data store for storing mapping data, the mapping data including a respective global network address and a respective local network address for a plurality of hosts in the global network;
a mapping data store, wherein the mapping data further includes a respective global network address and a respective local network address for a plurality of hosts in the local network;
The processor,
receiving a first data packet from one of the plurality of hosts in the local network, the first data packet comprising:
a first source address that is the local network address of the host in the local network;
a first destination address that is the local network address of the host within the global network, and payload data;
determining the global network address of the host in the local network and the global network address of the host in the global network based on the stored mapping data;
transmitting a second data packet over the global network, the second data packet comprising:
a second source address that is the global network address of the host in the local network;
a second destination address that is the global network address of the host in the global network; and the device configured to transmit the payload data. the local network is a 6LoWPAN-based network, the first source address is an IPv6 link local address, and the first destination address is an IPv6 link local address;
14. The device of claim 13, wherein the global network is an IPv6-based network, the second source address is an IPv6 unicast address, and the second destination address is an IPv6 unicast address. the first data packet further includes a compressed network layer header;
14. The device of claim 13, wherein the processor is further configured to decompress the compressed network layer header to determine the second source address and the second destination address. A device for communication between a global network and a local network, the device comprising:
a processor;
a mapping data store for storing mapping data, the mapping data including a respective global network address and a respective local network address for a plurality of hosts in the global network;
a mapping data store, wherein the mapping data store further includes a respective global network address and a respective local network address for a plurality of hosts in the local network;
The processor,
receiving a first data packet from one of the plurality of hosts in the global network, the first data packet comprising:
a first source address that is the global network address of the host in the global network;
in response to receiving: a first destination address that is the global network address of the host in the local network, and payload data;
determining the local network address of the host in the global network and the local network address of the host in the local network based on the stored mapping data;
transmitting a second data packet on the local network, the second data packet comprising:
a second source address that is the local network address of the host within the global network;
a second destination address that is the local network address of the host in the local network; and the device configured to transmit: the payload data. the local network is a 6LoWPAN-based network, the second source address is an IPv6 link local address, and the second destination address is an IPv6 link local address;
17. The device of claim 16, wherein the global network is an IPv6-based network, the first source address is an IPv6 unicast address, and the first destination address is an IPv6 unicast address. the second data packet further includes a compressed network layer header;
17. The compressed network layer header of claim 16, wherein the processor is further configured to determine the compressed network layer header of the second data packet based on the second source address and the second destination address. device. A method for secure communication between a Global Internet Protocol version 6 (IPv6) network and a local network using IPv6 over Low-Power Wireless Personal Area Networks (6LoWPAN) executed by an edge router, the method comprising: The method is
storing mapping data for a plurality of hosts in the global IPv6 network, including respective IPv6 unicast addresses and respective IPv6 link local addresses;
storing, the mapping data further comprising a respective IPv6 unicast address and a respective IPv6 link local address for a plurality of hosts in the local network;
receiving a first data packet from one of the plurality of hosts in the local network, the first data packet comprising:
a first source address that is the IPv6 link-local address of the host in the local network;
receiving: a first destination address that is the IPv6 link-local address of the host in the global IPv6 network; and payload data;
determining the IPv6 unicast address of the host in the local network and the IPv6 unicast address of the host in the global IPv6 network based on the stored mapping data;
transmitting a second data packet on the global IPv6 network, the second data packet comprising:
a second source address that is the IPv6 unicast address of the host in the local network;
a second destination address that is the IPv6 unicast address of the host in the global IPv6 network; and transmitting the payload data. A method for secure communication between a global Internet Protocol version 6 (IPv6) network and a local network using IPv6 over Low-Power Wireless Personal Area Networks (6LoWPAN) performed by an edge router, the method comprising: The method includes:
storing mapping data for a plurality of hosts in the global IPv6 network, including respective IPv6 unicast addresses and respective IPv6 link local addresses;
storing, the mapping data further comprising a respective IPv6 unicast address and a respective IPv6 link local address for a plurality of hosts in the local network;
receiving a first data packet from one of the plurality of hosts in the global IPv6 network, the first data packet comprising:
a first source address that is the IPv6 unicast address of the host in the global IPv6 network;
receiving: a first destination address that is the IPv6 unicast address of the host in the local network; and payload data;
determining the IPv6 link-local address of the host in the global IPv6 network and the IPv6 link-local address of the host in the local network based on the stored mapping data;
transmitting a second data packet on the local network, the second data packet comprising:
a second source address that is the IPv6 link-local address of the host in the global IPv6 network;
a second destination address that is the IPv6 link-local address of the host in the local network; and transmitting the payload data.