Resumen
For controlling by the method and apparatus of one or more access node to the write-access of the resource in Resource orientation and discovery RELOAD network.Method and apparatus is configured to: having the Nodes of this resource, obtains the public keys of the equity point being responsible for this resource, uses the public keys obtained to encrypt write key and encrypted write key sent to the equity point of this resource responsible; Be responsible for the equity point place of this resource, deciphering write key; At access node place, use write double secret key the data being written to this resource to be signed, and send request with the data write to this resource through signature to the equity point being responsible for this resource; And be responsible for the equity point place of this resource, control the write-access to this resource based on decrypted write key with through the data of signature.
Reivindicaciones
1. A network device (102D) configured as a peer responsible for a resource (106) within a Resource Location And Discovery, RELOAD, network (100), the network device comprising: a communicator (400) configured to receive a message originating from a node (104B) owning the resource, the message comprising a write key encrypted using a public key of the network device, and further configured to receive a request to store data at the resource, the request originating from one or more accessing nodes (104A) and comprising data signed using the write key, the one or more accessing nodes being different to the node owning the resource; a decryptor (404) configured to decrypt the encrypted write key using the network device's private key; and an access controller (405) configured to control write access to the resource by the one or more accessing nodes based on the write key and the received signed data. 2. A network device (102D) according to claim 1, wherein the access controller (405) is configured to write the received data to the resource if the received data has been signed using the write key. 3. A network device (102D) as claimed in claim 1 or 2, wherein the message originating from the node (104b) owning the resource further comprises a signing algorithm to be used by the one or more accessing nodes (104a) when signing the data, and wherein the access controller (405) is further configured to write the received data to the resource (106) if the received data has been signed using the signing algorithm and the write key. 4. A network device (102D) according to any preceding claim, further comprising a replicator (407) configured to replicate the resource (106) at a further peer (102E) of the RELOAD network (100) by sending a Store Request message to the further peer, and wherein the replicator is configured to encrypt the write key with the obtained public key of the further peer and send the encrypted write key to the further peer in the Store Request message. 5. A network device (104B) configured as a node owning a resource (106)within a Resource Location And Discovery, RELOAD, network (100), the network device comprising: a communicator (500) configured to communicate with one or more nodes within the RELOAD network to obtain a public key of a peer (102D) responsible for the resource; and an encryptor (504) configured to encrypt a write key using the obtained public key; wherein the communicator is further configured to send the encrypted write key to the peer responsible for the resource for controlling write access to the resource. 6. A network device (104B) according to claim 5, wherein the communicator (500) is further configured to send a signing algorithm to the peer (102D) responsible for the resource (106) identifying the signing algorithm that should be used by one or more accessing nodes (104A) requesting write access to the resource. 7. A network device (104B) according to any of claims 5 or 6, wherein the communicator is configured to send the encrypted write key and/or the signing algorithm in a Store Request message defining a StoreKindData structure. 8. A network device (104B) according to any of claims 5 to 7, wherein the network device is embedded within a computer system and further comprises an instruction processor (505) configured to receive instructions from one or more accessing nodes (104A), via the resource (106), and optionally wherein the instruction processor (505) is configured to poll the resource (106) at different times to retrieve instructions. 9. A network device (104B) according to any of claims 7 to 8, further configured to change the write key before a generation counter rolls over, the generation counter being associated with values stored in the resource (106). 10. A vehicle (700) comprising a network device (104B) according to any of claims 7 to 9. 11. A network device (104A) configured as an accessing node for writing data to a resource (106) within a Resource Location And Discovery, RELOAD, network (100), wherein the resource is owned by a different node, the network device comprising: a signer (604) configured to sign data to be written to the resource using a write key associated with the resource and provided to a peer (102D) responsible for the resource by the different node; a communicator (600) configured to generate a request to write the signed data to the resource not owned by the network device and send the request to the peer. 12. A network device (104A) according to claim 11, wherein the signer (604) is configured to sign the data using the write key and a predetermined signing algorithm. 13. A network device (104A) according to claim 12, wherein the communicator (600) is configured to generate and send a Store Request, and optionally wherein the Store Request comprises a Resource-ID of the resource. 14. A method of controlling a network device (102D) configured as a peer responsible for a resource (106) within a Resource Location And Discovery, RELOAD, network (100), the method comprising, at the network device: receiving (800) a message originating from a node (104B) owning the resource, the message comprising a write key encrypted using a public key of the network device; receiving (802) a request to store data at the resource, the request originating from one or more accessing nodes (104A) and comprising data signed using the write key, the one or more accessing nodes being different to the node owning the resource; decrypting (804) the encrypted write key using the network device's private key; and controlling (806) write access to the resource by the one or more accessing nodes based on the write key and the received data. 15. A method of controlling a network device (104B) configured as a node owning a resource (106) within a Resource Location And Discovery, RELOAD, network (100), the method comprising, at the network device: Communicating (900) with one or more nodes within the RELOAD network to obtain a public key of a peer (102D) responsible for the resource; Encrypting (902) a write key using the obtained public key; and Sending (904) the encrypted write key to the peer responsible for the resource for controlling write access to the resource. 16. A method of controlling a network device (104A) configured as an accessing node for writing data to a resource (106) within a Resource Location And Discovery, RELOAD, network (100), wherein the resource is owned by a different node (104B), the method comprising, at the network device: signing (1000) data to be written to the resource using a write key associated with the resource and provided to a peer (102D) responsible for the resource by the different node; generating (1002) a request to write the signed data to the resource not owned by the network device; and sending (1004) the request to the peer. 17. A system for controlling write access by one or more accessing nodes (104A) to a resource (106) within a Resource Location And Discovery, RELOAD, network (100), the system comprising: a node (104B) owning the resource and configured to obtain a public key of a peer (102D) responsible for the resource, to encrypt a write key using the obtained public key and to send the encrypted write key to the peer responsible for the resource; the peer responsible for the resource being configured to decrypt the encrypted write key; an accessing node configured to sign data to be written to the resource using the write key and to send a request to the peer responsible for the resource to write the signed data to the resource; wherein the peer responsible for the resource is further configured to control write access to the resource based on the decrypted write key and the signed data. 18. A method of controlling write access by one or more accessing nodes (104A) to a resource (106) within a Resource Location And Discovery, RELOAD, network (100), the method comprising: at a node (104B) owning the resource, obtaining (1100) a public key of a peer responsible for the resource, encrypting a write key using the obtained public key and sending the encrypted write key to the peer responsible for the resource; at the peer (102D) responsible for the resource, decrypting (1102) the write key; at an accessing node, signing (1104) data to be written to the resource using the write key and sending a request to the peer responsible for the resource to write the signed data to the resource; and at the peer responsible for the resource, controlling (1106) write access to the resource based on the decrypted write key and the signed data. 19. A non-transitory computer readable medium comprising computer readable code configured to carry out any of the methods of claims 16 to 18 and 20.
