Patent ID: 9712517
Date: 2017-07-18
CPC Classifications: G06F,H04L,H04W

Claim:
1. A method for identifying an authorization for a second network node of a network for receiving a message to be sent by a first network node of the network, the first network node comprising a processing unit communicatively connected to non-transitory memory, the message originating from the first network node itself or having been sent to the first network node for routing, the method comprising: determining, by the first network node, a security attribute of a node class of the second network node that is needed for the second network node to be authorized to receive the message based on a type of the message in response to originating the message or receiving the message for routing of the message, the security attribute requiring a technical capability of a node to perform a function of a device identifiable from the node class of the security attribute and requiring authorization of the second network node to function in the node class within the network to receive the message, the node class comprising one of: checking by the first network node a certificate of the second network node, the certificate comprising an attribute of a network node class being used as authorization for receiving the message wherein the first network node checks whether the certificate of the second network node comprises an attribute fulfilling the security attribute needed to be authorized to receive the message; in response to determining that the certificate of the second network node comprises an attribute fulfilling the security attribute such that the second network node is authorized to assume a role of the node class within the network that is identified by the security attribute, the first network node sending the message to the second network node for transmission of the message; in response to determining that the certificate of the second network node does not comprise an attribute fulfilling the security attribute such that the second network node is not authorized to assume the role of the node class within the network that is identified by the security attribute, the first network node refusing the authorization for the second network node for the receiving of the message and checking whether a certificate of a third network node comprises an attribute fulfilling the security attribute for transmission of the message.