Patent ID: 8413227

Claim:
A method comprising: receiving a message from a wireless leaf node at a first wireless node, the first wireless node connected to a first wired network, the first wired network associated with a first security layer; using a tag to identify one or more security layers associated with the message; determining whether to filter the message; discarding the message if the message is to be filtered; if the message is not to be filtered: transmitting the message over the first wired network when at least one destination of the message is located in the first security layer, wherein the transmitting is based on the one or more identified security layers; and wirelessly transmitting the message for delivery to a second wireless node when at least one destination of the message is located in a second security layer, the second wireless node associated with a second wired network, the second wired network associated with the second security layer, wherein the wirelessly transmitting is based on the one or more identified security layers; receiving a second message from a mobile human-machine interface device; and transmitting the received second message to a Demilitarized Zone (DMZ) for secure routing between two of the security layers; wherein the first and second wired networks are coupled by a wired router; and wherein determining whether to filter the message comprises determining whether to filter the message in order to avoid creation of a network loop.