KR100964602B1 - Lowpan bootstrapping agent device and lowpan bootstrapping system - Google Patents

Abstract

The Low Fan Bootstrapping Agent (LBA) device is a transceiver for communicating with a LoWPAN Bootstrapping Device (LBD) and / or a LoWPAN Bootstrapping Server (LBS), which can be directly connected, and is input through the transceiver. A message processing unit for processing a message and / or a message transmitted through the transceiver, wherein the message processing unit receives an LBA (LoWPAN BootStrapping Agent) request message from the LBD through the transceiver, and transmits an LBA advertisement message; When a LBP (LoWPAN Bootstrapping Protocol) message is input from the LBD, the LBP message is transmitted to the LBS to determine joining of the LBD. Accordingly, the low fan bootstrapping agent device may help to build an efficient low power wireless personal area network (LoWPAN).

Description

LOWPAN BOOTSTRAPPING AGENT DEVICE AND LOWPAN BOOTSTRAPPING SYSTEM}

Embodiments relate to a personal area network (PAN), and more particularly, to a low fan bootstrapping agent (LBA) device and a low fan bootstrapping system.

Wireless Personal Area Network (WPAN) or Low Power Wireless PAN (LoWPAN) (hereinafter referred to as "PAN") is a communication network capable of processing necessary information using a portable information terminal, as defined in IEEE 802.15.4. It can be defined as.

One of LoWPAN's design goals is to ensure minimal human intervention during provisioning of low fan devices. However, the low pan device requires a set of already installed information (ie, LIB-LoWPAN Information Base) to find the appropriate low pan, to successfully join the low pan, and to establish communication within the low pan.

One embodiment provides a LowWan Bootstrapping Agent (LBA) device for building an efficient low power wireless personal area network (LoWPAN).

One embodiment provides a LowWPAN Bootstrapping System (LoWPAN Bootstrapping System) for building a low power wireless personal area network (LoWPAN).

Among the embodiments, a Low Fan Bootstrapping Agent (LBA) device is a transceiver for communicating with a LoWPAN Bootstrapping Device (LBD), and / or a LoWPAN Bootstrapping Server (LBS), which can be directly connected, and the And a message processing unit for processing a message input through a transceiver and / or a message transmitted through the transceiver, wherein the message processing unit receives an LBA (LoWPAN BootStrapping Agent) request message from the LBD through the transceiver and receives an LBA advertisement. If the message is transmitted and a LBP (LoWPAN Bootstrapping Protocol) message is input from the LBD, the LBS message is transmitted to the LBS to determine the join of the LBD.

In an embodiment, the message processing unit may unicast the LBA advertisement message to the LBD. The message processor may receive an LBP message for joining the LBD within a predetermined time from when the LBA advertisement message is unicast.

The LBP message may include a unique identifier of the LBD. For example, the unique identifier of the LBD may correspond to a medium access control (MAC) address of the LBD.

Among the embodiments, a Low Fan Bootstrapping Agent (LBA) device is a transceiver for communicating with a LoWPAN Bootstrapping Device (LBD), and / or a LoWPAN Bootstrapping Server (LBS), which can be directly connected, and the A message processing unit for processing a message input through a transceiver and / or a message transmitted through the transceiver, wherein the message processing unit is configured to input a LBP (LoWPAN Bootstrapping Protocol) message from the LBD through the transceiver; PSI (PAN Specific Information, PAN-Personal Area Network) is transmitted to the LBD, Device Specific Information (DSI) is received from the LBS, and the received Device Specific Information (DSI) is transmitted to the LBD.

In one embodiment, the PSI may include a PAN identifier and may correspond to information common to the PAN.

In one embodiment, the DSI may correspond to information necessary only for the LBD, and may include a short address as necessary.

Among the embodiments, a Low Fan Bootstrapping Agent (LBA) device is a transceiver for communicating with a LoWPAN Bootstrapping Device (LBD), and / or a LoWPAN Bootstrapping Server (LBS), which can be directly connected, and the And a message processing unit for processing a message input through a transceiver and / or a message transmitted through the transceiver, wherein the message processing unit is an EAP when a LBP (LoWPAN Bootstrapping Protocol) message is input from the LBD through the transceiver. (Extensible Authentication Protocol) An LBP message including a challenge is transmitted to the LBD, and an LBP message including an EAP response is received from the LBD.

The message processor may receive the LBP message, transmit the received LBP message to the LBS, and receive an LBP message including the EAP challenge.

The message processor may receive an LBP message including the EAP and transmit an LBP message including the EAP to the LBS.

Among the embodiments, the LowWPAN Bootstrapping System (LoWPAN Bootstrapping System) may be directly connected to a low-speed bootstrapping device (LBD), the LBD, and determines a join of the LBD based on joinable LBD information. Agent) and a LW (LoWPAN Bootstrapping Server) that can be connected to the LBA and includes the joinable LBD information.

The system may be connected to the LBS, and may further include an AAA (Authentication, Authorization, Accounting) server for authentication of the LBD.

The LBS may include a LoWPAN bootstrapping Information Base (LIB), which may be classified into PSI (PAN Specific Information) and Device Specific Information (DSI).

In one embodiment, the LBA may determine whether to directly distribute a short address to the LBD based on the PSI. In one embodiment, the LBA may determine whether to directly transmit the PSI to the LBD according to the setting of the LIB.

An embodiment of the present invention may establish an efficient low power wireless personal area network (LoWPAN) using a LoWPAN Bootstrapping Agent (LBA).

One embodiment of the present invention can provide stronger security to the low-pan by using AAA (Authentication, Authorization, Accounting) server.

The following description of the embodiments is only illustrative for structural to functional descriptions, so the scope of rights should not be construed as limited by the embodiments described herein. That is, the embodiments may be variously modified and may have various forms, and thus, the scope of rights should be understood to include equivalents for realizing the technical spirit of the embodiments.

On the other hand, the meaning of the terms described in the specification should be understood as follows.

The terms " first ", " second ", and the like are used to distinguish one element from another and should not be limited by these terms. For example, the first component may be named a second component, and similarly, the second component may also be named a first component.

The term “and / or” should be understood to include all combinations that can be presented from one or more related items. For example, "first item, second item, and / or third item" means "at least one of the first item, second item, or third item", and means first, second, or third item. A combination of all items that can be presented from two or more of the first, second or third items as well as the third item.

When a component is referred to as being "connected" to another component, it should be understood that there may be other components in between, although it may be directly connected to the other component. On the other hand, when an element is referred to as being "directly connected" to another element, it should be understood that there are no other elements in between. On the other hand, other expressions describing the relationship between the components, such as "between" and "immediately between" or "neighboring to" and "directly neighboring to", should be interpreted as well.

Singular expressions should be understood to include plural expressions unless the context clearly indicates otherwise, and terms such as "include" or "have" refer to features, numbers, steps, operations, components, parts, or parts thereof described. It is to be understood that the combination is intended to be present, but not to exclude in advance the possibility of the presence or addition of one or more other features or numbers, steps, operations, components, parts or combinations thereof.

Each step may occur differently from the stated order unless the context clearly dictates the specific order. That is, each step may occur in the same order as specified, may be performed substantially simultaneously, or may be performed in the reverse order.

All terms used herein have the same meaning as commonly understood by one of ordinary skill in the art unless otherwise defined. Terms such as those defined in the commonly used dictionaries should be construed as having meanings consistent with the meanings in the context of the related art, and shall be construed to have ideal or overly formal meanings unless expressly defined herein. Can't be.

FIG. 1 is a diagram for describing a low fan bootstrapping system according to an embodiment.

Referring to FIG. 1, a low fan bootstrapping system 100 includes a LowWPAN Bootstrapping Device (LBD) 110, a LowWPAN Bootstrapping Server (LBS) 120, and a LowWPAN Bootstrapping Agent (LBA) 130. In an embodiment, it may further include an FFD 140, an RFD 150, a router 160, and an AAA 170.

LBD 110 corresponds to a device that needs to be deployed in a low power wireless personal area network (LoWPAN) that does not have the preceding information required for joining LoWPANs. That is, LBD 110 corresponds to a device that needs to be bootstrapping. In one embodiment, LBD 110 may include a unique identifier (eg, a Medium Access Control (MAC) address), and may further include a join key in the case of secure LoWPANs. For example, the medium access control (MAC) address may be implemented as an EUI-64 address (Extended Unique Identifier). In one embodiment, LoWPAN may correspond to 6LoWPAN (IPv6 over LoWPAN) and may be referred to as PAN for convenience.

The LBS 120 corresponds to an entity that includes a LowWpan Boottrapping Information Base (LIB) (hereinafter referred to as "LIB") of each device to be bootstraped.

LIB is a set of pre-located information needed for a specific LoWPAN device to find the desired LoWPAN and successfully join the LoWPAN. LIB is divided into two groups. One group is the same information for all the devices in the LoWPAN (hereinafter referred to as "PSI", PAN Specific Information), and the other group is the specific information for each device (hereinafter referred to as "DSI", Device Specific Information). In one embodiment, the PSI may include a LoWPAN identifier. In one embodiment, the DSI may include a short address (ie, part of an IP address), and may further include role information of the device as needed. In one embodiment, the short address may correspond to a 16-bit address that is dynamically assigned to the device in LoWPAN. LIB will be described later with reference to FIG. 8.

Here, bootstrapping can be defined as gathering LIBs from LBS 120, associated with the correct LoWPAN, and obtaining an IP address. Also, optionally, bootstrapping can obtain Security Credentials and / or short addresses.

The LBA 130 corresponds to one of the Full Function Devices (FFDs) already joined to the LoWPAN and assists bootstrapping of the LBD 110. The LBA 130 is located between the LBD 110 and the LBS 120 and may be directly connected to the LBD 110 as necessary.

Unlike the reduced function device (RFD) 150, the FFD 140 corresponds to a device capable of operating as a router for neighboring nodes. In one embodiment, FFD 140 may implement a complete set of protocols of IEEE 802.15.4.

The router 160 connects LoWPAN and a core network. In one embodiment, the router 160 may integrate the functionality of the LBS 120 and / or AAA (Authentication, Authorization, Accounting) server 170.

The AAA server 170 performs authentication, authorization, and / or accounting.

FIG. 2 is a block diagram illustrating the LBA of FIG. 1.

2, the LBA 130 includes a transceiver 210, a memory unit 220, and a message processor 230.

The transceiver 210 communicates with the LBD 110 and / or the LBS 120. For example, the transceiver 210 may transmit a message (ie, data) to the LBD 110 and may receive a message from the LBD 110. For another example, the transceiver 210 may transmit a message (ie, data) to the LBS 120 and may receive a message from the LBS 120.

The memory unit 220 may store a message input through the transceiver 210 and / or a message transmitted through the transceiver 210.

The message processor 230 includes a controller 232 and a LWP (LoWPAN Bootstrapping Protocol) message processor 234, and processes a message input through the transceiver 210 and / or a message transmitted through the transceiver 210. . Hereinafter, the operation of the message processor 230 will be described with reference to FIGS. 3 to 5.

3 is a diagram for describing an operation of a low fan bootstrapping system according to an exemplary embodiment.

3 assumes that LBS 120 includes all LIBs for PSI and DSI, and that LBD 110 is directly connected to LBA 130.

The LBD 110 broadcasts an LBA Solicitation Message to join the LoWPAN (step S310).

The transceiver 210 receives a message transmitted from the LBD 110. The control unit 232 recognizes that the message input from the transceiver 210 is an LBA request message, and transmits an LBA advertisement message (step S320). The LBA request message and the LBA advertisement message may be used to retrieve the LBA 130 directly connected to the LBD 110. In one embodiment, the controller 232 may unicast the LBA advertisement message to the LBD 110.

The LBD 110 receives an LBA advertisement message. If the LBD 110 receives LBA advertisement messages from the plurality of LBAs 130, the LBD 110 may select one LBA 130 according to a specific condition. In one embodiment, the particular condition may be determined based on throughput, round trip time (RTT) and / or signal-to-noise ratio (SNR) of the LBA 130.

The LBD 110 transmits an LBP message to the selected LBA 130 (step S330). That is, the LBD 110 transmits an LBP message for a join request (JR). A description of the LBP message will be described with reference to FIGS. 6 to 7.

The transceiver 210 receives a message transmitted from the LBD 110. The controller 232 recognizes that the message input from the transceiver 210 is an LBP message, and informs the LBP message processing unit 234 that the LBP message is input. In an embodiment, the control unit 232 may receive an LBP message for joining the LBD 110 within a predetermined time from when the LBA advertisement message is unicasted, and when the predetermined time elapses, the control unit 232 may enter the LBD ( The LBP message for the join of 110 may be discarded.

When the LBP message is input from the LBD 110, the LBA 130 transmits the LBP message to the LBS 120 to determine the join of the LBD 110.

More specifically, the LBP message processing unit 234 transmits the LBP message to the LBS 120 (step S340). In one embodiment, the LBP message processor 234 may modify the LBP message as appropriate.

The LBS 120 receives an LBP message transmitted from the LBA 130 through the router 160 (step S340). The LBS 120 determines whether to join the LBD 110 that has transmitted the LBP message based on the LIB and transmits the LBP message to the LBA 130 (step S350). That is, the LBS 120 transmits an LBP message for a join response (JRep, Join Response).

The LBA 130 receives the LBP message, determines the join of the LBD 110, and transmits the LBP message to the LBD 110 (step S360).

6 to 7 are diagrams for describing the format of an LBP message.

The format of the LBP message described in FIGS. 6 to 7 is for convenience and is not intended to limit the scope of the present invention.

Type (T) 610 represents the message type. In one embodiment, type (T) 610 may be implemented with 1 bit. For example, if type (T) 610 corresponds to '0', it may indicate a message transmitted from LBD 110, and if type (T) 610 corresponds to '1', LBD It may indicate a message sent to 110.

Code 620 represents a message code. In one embodiment, the code 620 may be implemented with 3 bits. For example, when the code 620 corresponds to '001', this may indicate that join of the LBD 110 is allowed. That is, it may represent that authentication of the LBD 110 is authorized. If the code 620 corresponds to '010', it may indicate that the authentication of the LBD 110 is not completed and the AAA 170 transmits a challenge that needs to be answered by the LBD 110. . If the code 620 corresponds to '011', this may indicate that the join of the LBD 100 has been rejected. For example, in the case of LoWPAN that does not require authentication, it may indicate that the LBS 120 rejects the join of the LBD 110. In the case of LoWPAN that requires authentication, the LBS 120 may indicate It may either reject the join or indicate that authentication of the LBD 110 by the AAA 170 failed.

Sequence 630 represents the number of messages sent by LBD 110. Corresponding messages sent from LBS 120 may have a sequence of the same number.

The LBD address (A_LBD) 640 represents an address of the LBD 110. In one embodiment, LBD address (A_LBD) 640 may correspond to a MAC address (eg, EUI-64).

Bootstrapping Data 650 indicates the content of the message, and Bootstrapping Data 650 will be described with reference to FIG. 6.

The type 710 may be implemented with 6 bits and is determined according to the setting of the L bits 730. In one embodiment, if L bit 730 is set, Type 710 may indicate an attribute identifier in the LIB, otherwise it may indicate a specific authentication type. The attribute identifier in the LIB is described with reference to FIG.

M-bits 720 define the type of attribute in the LIB. In one embodiment, the bootstrapping data 650 may indicate PSI or DSI depending on whether the M bit 720 is set. Length 740 represents the length of Value 750, and Value 750 contains data.

FIG. 8 is a diagram for describing a LIB included in the LBS of FIG. 1.

The LIB described in FIG. 8 is for convenience and is not intended to limit the scope of the present invention.

LIB is an identifier of LoWPAN (PAN_ID), type of LoWPAN (PAN_type), address of LBS 120 (Address_of_LBS), join time (Join_Time), device role (Role_of_Device), PSI transmission of LBA 130 (Allow_LBA_To_Send_PSI), It may include a short address Short_Addr, a short address distribution mechanism Short_Addr_Distribution_Mechanism, and / or other device specific information Other_Device_Specific_Info.

In the case of LoWPAN's identifier (PAN_ID), the attribute identifier corresponds to '1' and the type corresponds to PSI. The identifier PAN_ID of the LoWPAN represents a network identifier for the default network.

For the LoWPAN type (PAN_type), the attribute identifier corresponds to '2' and the type corresponds to PSI. The type of LoWPAN (PAN_type) indicates the security, closure or open of the LoWPAN. The secure LoWPAN requires authentication of the LBD 110, the closure allows only certain predefined LBDs to join, and the open allows joins regardless of the specific LBD.

In the case of the address (Address_of_LBS) of the LBS 120, the attribute identifier corresponds to '3' and the type corresponds to the PSI. If there is no LBS 120, the address (Address_of_LBS) of the LBS 120 corresponds to '00x0000', and for example, the LoWPAN type (PAN_type) may correspond to open.

In the case of Join_Time, the attribute identifier corresponds to '4' and the type corresponds to PSI. Join_Time indicates when the LBD 110 should attempt to join LoWPAN.

For the role of the device (Role_of_Device), the attribute identifier corresponds to '5' and the type corresponds to DSI. The role of the device (Role_of_Device) indicates whether a specific device corresponds to the LBA 130.

For the PSI transmission (Allow_LBA_To_Send_PSI) of the LBA 130, the attribute identifier corresponds to '6' and the type corresponds to PSI. PSI transmission of the LBA 130 (Allow_LBA_To_Send_PSI) indicates whether the LBA 130 directly transmits the PSI information.

In the case of the short address Add_Addr, the attribute identifier corresponds to '7' and the type corresponds to the DSI. The short address Add_Addr may correspond to a 16-bit address for the only new device in LoWPAN.

For the short address distribution mechanism (Short_Addr_Distribution_Mechanism), the attribute identifier corresponds to '7' and the type corresponds to PSI. The short address distribution mechanism (Short_Addr_Distribution_Mechanism) indicates whether the LBS distributes the short address in a central manner or the LBA distributes the short address in a distributed manner.

For other device specific information (Other_Device_Specific_Info), the attribute identifier corresponds to '8' and the type corresponds to DSI. The other device specific information (Other_Device_Specific_Info) is used for exchanging some kind of data or security key between the LBD 110 and the LBS 120.

Meanwhile, the LBS 120 may further include a list of unique identifiers (eg, MAC addresses) of the LBD 110 that can be separately joined to the LIB.

4 is a diagram illustrating an operation of a low fan bootstrapping system according to another exemplary embodiment.

4 assumes that LBS 120 includes all LIBs for PSI and DSI, LBA 130 includes LIBs for PSI, and LBD 110 is directly connected to LBA 130. In addition, since FIG. 4 is substantially similar to the operation of the low fan bootstrapping system described with reference to FIG. 3, description thereof will be omitted.

The LBD 110 broadcasts an LBA Solicitation Message to join the LoWPAN (step S410).

The transceiver 210 receives a message transmitted from the LBD 110. The control unit 232 recognizes that the message input from the transceiver 210 is an LBA request message, and transmits an LBA advertisement message (step S420). The LBA request message and the LBA advertisement message may be used to retrieve the LBA 130 directly connected to the LBD 110. In one embodiment, the controller 232 may unicast the LBA advertisement message to the LBD 110.

The LBD 110 receives an LBA advertisement message. If the LBD 110 receives LBA advertisement messages from the plurality of LBAs 130, the LBD 110 may select one LBA 130 according to a specific condition.

The LBD 110 transmits an LBP message to the selected LBA 130 (step S430). That is, the LBD 110 transmits an LBP message for a join request (JR).

The transceiver 210 receives a message transmitted from the LBD 110. The controller 232 recognizes that the message input from the transceiver 210 is an LBP message, and informs the LBP message processing unit 234 that the LBP message is input.

The LBP message processor 234 transmits the LBP message for the PSI to the LBD 110 (step S440). That is, the LBP message processor 234 may directly transmit the PSI to the LBD 110 according to the setting of the LIB stored in the LBS 120 (eg, Allow_LBA_To_Send_PSI). Similarly, the LBP message processing unit 234 may directly distribute the short address to the LBD 110 based on the PSI (eg, Addr_Distribution_Mechanism included in the LIB).

The LBP message processing unit 234 transmits the LBP message to the LBS 120 (step S450). That is, the LBP message processor 234 transmits a request message for the DSI of the LBD 110. LBS 120 transmits an LBP message to LBA 130 (step S460). That is, the LBS 120 transmits a response message for the DSI of the LBD 110.

The LBP message processing unit 234 transmits an LBP message for DSI to the LBD 110 (step S470).

5 is a diagram for describing an operation of a low fan bootstrapping system according to another exemplary embodiment.

5 assumes that LBD 110 is directly connected to LBA 130 and performs authentication via AAA 170. In addition, since FIG. 5 is substantially similar to the operation of the low fan bootstrapping system described with reference to FIG. 3 or 4, description thereof will be omitted.

The LBD 110 broadcasts an LBA Solicitation Message to join the LoWPAN (step S510).

The transceiver 210 receives a message transmitted from the LBD 110. The controller 232 recognizes that the message input from the transceiver 210 is an LBA request message and transmits an LBA advertisement message (step S515). The LBA request message and the LBA advertisement message may be used to retrieve the LBA 130 directly connected to the LBD 110. In one embodiment, the controller 232 may unicast the LBA advertisement message to the LBD 110.

The LBD 110 receives an LBA advertisement message. If the LBD 110 receives LBA advertisement messages from the plurality of LBAs 130, the LBD 110 may select one LBA 130 according to a specific condition.

The LBD 110 transmits an LBP message to the selected LBA 130 (step S520). That is, the LBD 110 transmits an LBP message for a join request (JR).

The transceiver 210 receives a message transmitted from the LBD 110. The controller 232 recognizes that the message input from the transceiver 210 is an LBP message, and informs the LBP message processing unit 234 that the LBP message is input. The LBP message processing unit 234 transmits the LBP message transmitted from the LBD 110 to the LBS 120 (step S522). In one embodiment, the LBP message sent from the LBD 110 may be modified as appropriate.

The LBS 120 sends an EAP message to the AAA 170 for authentication of the LBD 110, and the AAA 170 responds (steps S524 and S526). The LBS 120 sends an LBP message for the EAP challenge to the LBA 130 (step S528).

The transceiver 210 receives a message transmitted from the LBS 120. The controller 232 recognizes that the message input from the transceiver 210 is an LBP message, and informs the LBP message processing unit 234 that the LBP message is input. The LBP message processing unit 234 transmits the LBP message transmitted from the LBS 120 to the LBD 110 (step S530). In one embodiment, the LBP message sent from the LBS 110 may be modified as appropriate.

The LBD 110 receives the LBP message from the LBA 130 and transmits an LBP message for the EAP response to the LBA 130 (step S540). LBA 130 transmits an LBP message to LBS 120 (step S542). LBS 120 transmits an EAP response message to AAA 170 (step S544). Since the EAP can be easily understood by those skilled in the art, the description of the EAP is omitted. In one embodiment, the above procedures for authentication may be performed repeatedly. Meanwhile, after the authentication procedure is performed, the operation described with reference to FIG. 3 or 4 may be performed.

In the above, the interaction of the low-pan bootstrapping system has been described. Hereinafter, the individual roles of the low fan bootstrapping system will be described.

Hereinafter, the role of the LBD 110 will be described.

The LBA 110 selects the LBA 130 in the LBA Discovery Phase. For example, the LBA discovery step may include steps S310 and S320 in FIG. 3, steps S410 and S420 in FIG. 4, or steps S510 and S515 in FIG. 5.

If the LBD 110 does not find any LBA 130, it waits for a certain amount of time before giving up. If the LBD 110 receives an LBP message for the challenge, the LBD 110 sends another LBP message to the bootstrapping data 650 that includes the appropriate response to the challenge.

LBD 110 increments sequence 630 for every new LBP message. In one embodiment, LBD 110 may not increment sequence 630 in case of retransmission.

Hereinafter, the role of the LBA 130 will be described.

The description below assumes that LBA 130 receives an LBP message from LBD 110.

The LBA 130 creates a black list for the LBD 110 that is already denied access according to the security policy. In one embodiment, the security policy may be determined based on the number of accesses, hacking attempts, and / or data transfer exceeding a threshold within a predetermined time.

First, if the LBA 130 receives a message from the LBD 110 in the black list, the LBA 130 discards the message.

Next, if LBD 110 is new and LoWPAN is an open network, LBA 130 sends an LBP message indicating that it is authorized with the PSI in the LIB. If there is an LBS 120 in the LoWPAN, the LBA 130 transmits an LBP message for the DSI to the LBS 120.

If LBD 110 is existing and LoWPAN is an open network, LBA 130 determines to send a message to LBD 110 based on sequence 630. If the sequence is not appropriate 630, LBA 130 discards the message.

If LBD 110 is new and LoWPAN is a secure network, LBA 130 sends an LBP message to LBS 120.

If LBD 110 is existing and LoWPAN is a secure network, LBA 130 determines to send a message to LBD 110 based on sequence 630. If the sequence is not appropriate 630, LBA 130 discards the message. In addition, the LBA 130 transmits an LBP message for the challenge.

The description below assumes that the LBA 130 receives an LBP message from the LBS 120.

If the LBP message sent from the LBS 130 indicates that the LBD 110 is authorized to access and the short address is the responsibility of the LBA 130, the LBA 130 assigns the short address and LBD message with the short address is LBD. To 110. Otherwise, if the LBP message sent from the LBS 130 is granted access, denied, or corresponds to the challenge of the LBD 110, the LBA 130 transmits the LBP message to the LBD 110.

If the LBP message sent from the LBS 130 does not correspond to the case where the access of the LBD 110 is granted or denied, the LBA 130 deletes the already stored LBP message and stores the current LBP message.

If the LBP message transmitted from the LBS 130 corresponds to the case where the access of the LBD 110 is denied, the LBA 130 records the LBD 110 in the black list according to the security policy.

If there is no activity in the communication between the LBD 110 and the LBS 120, the LBA 130 records the LBD 110 in a black list according to the security policy.

Hereinafter, the role of the LBS 120 will be described.

The description below assumes that LoWPAN is an open network.

If the LBD 110 is valid, i.e., if the unique identifier (e.g., MAC address) of the LBD 110 is in the allowable list or not in the reject list, then the LBS 120 is assigned a code indicating permission, Send the required DSI and short address. If the LBA 130 does not transmit the PSI, the LBS 120 also transmits the PSI.

The description below assumes that LoWPAN is a secure network.

The LBS 120 determines the AAA server 170 for the unique identifier of the LBD 110 and performs the authentication mechanism with the authentication credentials of the LBD 110.

When receiving a response from the AAA server 170, if the response corresponds to success, LBS 120 prepares a response corresponding to success, and if the response corresponds to failure, LBS 120 fails to fail. Prepare the corresponding response. If the response corresponds to the challenge, the LBS 120 sends an LBP message containing the challenge to the LBA 130.

When receiving a response from the AAA server 170, if the response corresponds to success, the LBS 120 transmits an LBP message including the DSI with the response corresponding to the success.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the present invention as defined by the following claims It can be understood that

Embodiments of the present invention presented above may have an effect including the following advantages. However, all embodiments of the present invention should not be understood that the scope of the present invention is not limited by this, because it does not mean that all embodiments or specific embodiments of the present invention should include only the following advantages.

An embodiment of the present invention may establish an efficient low power wireless personal area network (LoWPAN) using a LoWPAN Bootstrapping Agent (LBA). For example, the LBA may be located between a LoWPAN Bootstrapping Device (LBD) and a LoWPAN Bootstrapping Server (LBS) to determine a join of a newly joined LBD. Therefore, the security and resources of the PAN can be managed efficiently.

One embodiment of the present invention can provide stronger security to the low-pan by using AAA (Authentication, Authorization, Accounting) server. For example, AAA servers can use the Extensible Authentication Protocol (EAP), already established as a standard.

FIG. 1 is a diagram for describing a low fan bootstrapping system according to an embodiment.

FIG. 2 is a block diagram illustrating the LBA of FIG. 1.

3 is a diagram for describing an operation of a low fan bootstrapping system according to an exemplary embodiment.

4 is a diagram illustrating an operation of a low fan bootstrapping system according to another exemplary embodiment.

5 is a diagram for describing an operation of a low fan bootstrapping system according to another exemplary embodiment.

6 to 7 are diagrams for describing the format of an LBP message.

FIG. 8 is a diagram for describing a LIB included in the LBS of FIG. 1.

Claims (16)

A transceiver for performing communication with a LoWPAN Bootstrapping Device (LBD) and a LoWPAN Bootstrapping Server (LBS) that can be directly connected, or for performing communication with the LBD or the LBS; And A message processing unit for processing a message input through the transceiver and / or a message transmitted through the transceiver, The message processing unit via the transceiver The LBD receives a LBA (LoWPAN BootStrapping Agent) request message from the LBD and transmits an LBA advertisement message. When an LBP (LoWPAN Bootstrapping Protocol) message is input from the LBD, the LBP message is transmitted to the LBS to join the LBD. Low-Wan Bootstrapping Agent (LBA) device to determine. The method of claim 1, wherein the message processing unit And unicasting the LBA advertisement message to the LBD. The method of claim 2, wherein the message processing unit And receiving an LBP message for joining the LBD within a predetermined time from when the LBA advertisement message is unicasted. The method of claim 1, wherein the LBP message is And a unique identifier of the LBD. The method of claim 4, wherein the unique identifier of the LBD is And a low pan bootstrapping agent device corresponding to a medium access control (MAC) address of the LBD. A transceiver for performing communication with a LoWPAN Bootstrapping Device (LBD) and a LoWPAN Bootstrapping Server (LBS) that can be directly connected, or for performing communication with the LBD or the LBS; And A message processing unit for processing a message input through the transceiver and / or a message transmitted through the transceiver, The message processing unit via the transceiver When a LBP (LoWPAN Bootstrapping Protocol) message is input from the LBD, PSI (PAN Specific Information, PAN-Personal Area Network) is transmitted to the LBD, and a device specific information (DSI) is input from the LBS to the LBD. Low-Wan Bootstrapping Agent (LBA) device that transmits received Device Specific Information (DSI). The method of claim 6, wherein the PSI is A Low Fan Bootstrapping Agent (LBA) device comprising a PAN identifier and corresponding to information common to the PAN. The method of claim 6, wherein the DSI is The LW (LoWPAN Bootstrapping Agent) device corresponding to the information necessary only for the LBD, and if the access to the LBD may include a short address. A transceiver for performing communication with a LoWPAN Bootstrapping Device (LBD) and a LoWPAN Bootstrapping Server (LBS) that can be directly connected, or for performing communication with the LBD or the LBS; And A message processing unit for processing a message input through the transceiver and / or a message transmitted through the transceiver, The message processing unit via the transceiver When a LW (LoWPAN Bootstrapping Protocol) message is input from the LBD, a low-pan boot that sends an LBP message including an Extensible Authentication Protocol (EAP) challenge to the LBD and receives an LBP message including an EAP response from the LBD. LoWPAN Bootstrapping Agent (LBA) device. The method of claim 9, wherein the message processing unit A low fan bootstrapping agent (LBA) device, characterized in that for receiving the LBP message and transmitting the received LBP message to the LBS to receive the LBP message including the EAP challenge. The method of claim 10, wherein the message processing unit A low fan bootstrapping agent (LBA) device comprising: receiving an LBP message including the EAP and transmitting an LBP message including the EAP to the LBS. LoWPAN Bootstrapping Device (LBD); A LoWPAN Bootstrapping Agent (LBA) that can be directly connected to the LBD and determines a join of the LBD based on joinable LBD information; And A low-Wan Bootstrapping System (LoWPAN Bootstrapping System) including a LW (LoWPAN Bootstrapping Server) that can be connected to the LBA, and includes the joinable LBD information. The method of claim 12, LoWPAN Bootstrapping System (LoWPAN Bootstrapping System) characterized in that it can be connected to the LBS, further comprises an AAA (Authentication, Authorization, Accounting) server for authentication of the LBD. The method of claim 12, wherein the LBS is Low-Woot Bootstrapping System (LoWPAN Bootstrapping System), characterized in that it comprises a Low-WAN bootstrapping Information Base (LIB) that can be classified into PSI (PAN Specific Information) and Device Specific Information (DSI). The method of claim 14, wherein the LBA is A low fan bootstrapping system (LoWPAN Bootstrapping System) characterized in that it determines whether to directly distribute a short address to the LBD based on the PSI. The method of claim 14, wherein the LBA is And determining whether to directly transmit the PSI to the LBD according to the setting of the LIB.

Images