Abstract: Systems and methods for improving encrypted transmissions between nodes in a network are disclosed. In one embodiment, two sets of nonce values are used to monitor communications between each pair of network devices, wherein one set of nonce values is used for packets transmitted from a first node to a second node, and the second set of nonce values is used for packets transmitted from the second node to the first node. These nonce values are used to encrypt packets transmitted between the two nodes. In this way, the probability of loss of synchronization may be reduced, especially in configurations where there is an intermediate node between the first node and the second node. In another embodiment, the possibility of a delay attack is minimized by the intentional resetting of security parameters.

Abstract: Systems and methods for improving encrypted transmissions between nodes in a network are disclosed. In one embodiment, two sets of nonce values are used to monitor communications between each pair of network devices, wherein one set of nonce values is used for packets transmitted from a first node to a second node, and the second set of nonce values is used for packets transmitted from the second node to the first node. These nonce values are used to encrypt packets transmitted between the two nodes. In this way, the probability of loss of synchronization may be reduced, especially in configurations where there is an intermediate node between the first node and the second node. In another embodiment, the possibility of a delay attack is minimized by the intentional resetting of security parameters.

Abstract: Systems and methods for improving encrypted transmissions between nodes in a network are disclosed. In one embodiment, two sets of nonce values are used to monitor communications between each pair of network devices, wherein one set of nonce values is used for packets transmitted from a first node to a second node, and the second set of nonce values is used for packets transmitted from the second node to the first node. These nonce values are used to encrypt packets transmitted between the two nodes. In this way, the probability of loss of synchronization may be reduced, especially in configurations where there is an intermediate node between the first node and the second node. In another embodiment, the possibility of a delay attack is minimized by the intentional resetting of security parameters.

Abstract: A system and method for transmitting packets to a plurality of network devices that cannot be accessed via a single multicast message is disclosed. The system includes a gateway controller that received a multicast request from a client, and creates a plurality of multicast messages based on the number of different security classes. The gateway controller parses the request from the client and identifies all of the desired destination nodes. The gateway controller then identifies the security class that each of these destination nodes belongs to. Based on this, the gateway controller then creates one or more multicast messages, where each multicast message is intended for the destination nodes that belong to a single security class. In certain embodiments, the gateway controller also aggregates the acknowledgments from the destination nodes and forwards this information to the client.

Abstract: A system and method for transmitting packets to a plurality of network devices that cannot be accessed via a single multicast message is disclosed. The system includes a gateway controller that received a multicast request from a client, and creates a plurality of multicast messages based on the number of different security classes. The gateway controller parses the request from the client and identifies all of the desired destination nodes. The gateway controller then identifies the security class that each of these destination nodes belongs to. Based on this, the gateway controller then creates one or more multicast messages, where each multicast message is intended for the destination nodes that belong to a single security class. In certain embodiments, the gateway controller also aggregates the acknowledgments from the destination nodes and forwards this information to the client.

Abstract: Networks with a plurality of independent nodes are useful when the nodes can communicate with one another and with nodes and resources outside the network. The present disclosure addresses ways to encapsulate packets as they move from a sender to a receiver, and also addresses ways for speeding up messages between nodes by orderly queuing and processing of messages. The present disclosure also includes techniques for mapping nodes in a home area network to IP addresses in a local area network.

Abstract: Networks with a plurality of independent nodes are useful when the nodes can communicate with one another and with nodes and resources outside the network. The present disclosure addresses ways to encapsulate packets as they move from a sender to a receiver, and also addresses ways for speeding up messages between nodes by orderly queuing and processing of messages. The present disclosure also includes techniques for mapping nodes in a home area network to IP addresses in a local area network.

Abstract: Networks with a plurality of independent nodes are useful when the nodes can communicate with one another and with nodes and resources outside the network. The present disclosure addresses ways to encapsulate packets as they move from a sender to a receiver, and also addresses ways for speeding up messages between nodes by orderly queuing and processing of messages. The present disclosure also includes techniques for mapping nodes in a home area network to IP addresses in a local area network.

Abstract: Networks with a plurality of independent nodes are useful when the nodes can communicate with one another and with nodes and resources outside the network. The present disclosure addresses ways to encapsulate packets as they move from a sender to a receiver, and also addresses ways for speeding up messages between nodes by orderly queuing and processing of messages. The present disclosure also includes techniques for mapping nodes in a home area network to IP addresses in a local area network.