Maintaining authentication integrity of signals from backscatter-based communication devices

Abstract

The first wireless device may be configured to transmit a first public key, an unsigned transmission, and a signed transmission to a backscatter-based communication device. The signed transmission may be signed based on the first private key. The backscatter-based communication device may be configured to receive the first public key, the unsigned transmission, and the signed transmission from the first wireless device. The backscatter-based communication device may be configured to process the unsigned transmission in response to verifying the signed transmission based on the first public key. The backscatter-based communication device may be configured to send verification of the signed transmission in response to verifying the signed transmission based on the first public key.

Description

Technical Field

[0001] The present disclosure relates generally to communication systems, and more particularly to wireless network systems using backscatter-based communication devices. Background Art

[0002] Wireless communication systems are widely deployed to provide a variety of telecommunication services, such as telephony, video, data, messaging, and broadcast. Typical wireless communication systems may employ multiple access technologies capable of supporting communication with multiple users by sharing available system resources. Examples of such multiple access technologies include code division multiple access (CDMA) systems, time division multiple access (TDMA) systems, frequency division multiple access (FDMA) systems, orthogonal frequency division multiple access (OFDMA) systems, single carrier frequency division multiple access (SC-FDMA) systems, and time division synchronous code division multiple access (TD-SCDMA) systems.

[0003] These multiple access technologies have been adopted in various telecommunication standards to provide a common protocol that enables different wireless devices to communicate at city, national, regional, and even global levels. An example telecommunication standard is 5G New Radio (NR). 5G NR is part of the continuous mobile broadband evolution promulgated by the Third Generation Partnership Project (3GPP) to meet new requirements associated with latency, reliability, security, scalability (e.g., with the Internet of Things (IoT)) and other requirements. 5G NR includes services associated with enhanced mobile broadband (eMBB), massive machine type communications (mMTC), and ultra-reliable low latency communications (URLLC). Certain aspects of 5G NR may be based on the 4G Long Term Evolution (LTE) standard. Further improvements to 5G NR technology are needed. In addition, these improvements may also be applicable to other multiple access technologies and telecommunication standards that employ these technologies. Summary of the invention

[0004] A simplified summary of one or more aspects is presented below to provide a basic understanding of these aspects. This summary is not an extensive review of all contemplated aspects. This summary is neither intended to identify key or important elements of all aspects nor to describe the scope of any or all aspects. Its sole purpose is to present some concepts of one or more aspects in a simplified form as a prelude to a more detailed description presented later.

[0005] Backscatter-based communication devices can be used to extend the range of wireless devices, or provide wireless devices with battery-free or limited energy storage and functionality. However, when receiving and reflecting signals, or when receiving and processing commands or queries of signals, backscatter-based communication devices may have limited security. For example, a backscatter-based communication device may have a simple password accompanying a command or query, which can be used by the backscatter-based communication device to authenticate the device sending the command or query. Such simple security measures may be easily deceived by fake tags or fake wireless devices. Backscatter-based communication devices with higher security levels may be more difficult to deceive. Such devices can use public and private keys to authenticate one or more transmissions from a wireless device to a backscatter-based communication device or from a backscatter-based communication device to a wireless device using verified, signed transmissions. If a backscatter-based communication device or a wireless device determines that a signed transmission fails to pass authentication, one or more detected errors can be sent to re-protect the communication between the wireless device and the backscatter-based communication device.

[0006] In one aspect of the present disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may have a memory and at least one processor coupled to the memory at a first wireless device. Based at least in part on information stored in the memory, the at least one processor may be configured to send a first public key to a backscatter-based communication device. Based at least in part on information stored in the memory, the at least one processor may be configured to send an unsigned transmission to the backscatter-based communication device. Based at least in part on information stored in the memory, the at least one processor may be configured to send a signed transmission to the backscatter-based communication device. The signed transmission may be signed based on a first private key.

[0007] In one aspect of the present disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may have a memory and at least one processor coupled to the memory at a second wireless device. Based at least in part on information stored in the memory, the at least one processor may be configured to receive a configuration of a backscatter-based communication device from a first wireless device. Based at least in part on information stored in the memory, the at least one processor may be configured to receive a backscattered signal from the backscatter-based communication device. Based at least in part on information stored in the memory, the at least one processor may be configured to send a first detected error to the first wireless device in response to detecting an error in the backscattered signal according to the configuration of the backscatter-based communication device.

[0008] In one aspect of the present disclosure, a method, computer-readable medium, and apparatus are provided. The apparatus may have a memory and at least one processor coupled to the memory at a backscatter-based communication device. Based at least in part on information stored in the memory, the at least one processor may be configured to receive a first public key from a first wireless device. Based at least in part on information stored in the memory, the at least one processor may be configured to receive an unsigned transmission from the first wireless device. Based at least in part on information stored in the memory, the at least one processor may be configured to receive a signed transmission from the first wireless device. Based at least in part on information stored in the memory, the at least one processor may be configured to process the unsigned transmission in response to verifying the signed transmission based on the first public key.

[0009] To achieve the aforementioned and other related purposes, the one or more aspects include the following features fully described below and particularly pointed out in the claims. The following description and the accompanying drawings set forth in detail some exemplary features of the one or more aspects. However, these features are only indicative of only some of the various ways in which the principles of the various aspects can be employed. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] Figure 1 is a diagram illustrating an example of a wireless communication system and an access network.

[0011] Figure 2A is a diagram illustrating an example of a first frame according to various aspects of the present disclosure.

[0012] Figure 2B is a diagram illustrating an example of DL channels within a subframe according to various aspects of the present disclosure.

[0013] Figure 2C is a diagram illustrating an example of a second frame according to various aspects of the present disclosure.

[0014] Figure 2D is a diagram illustrating an example of UL channels within a subframe according to various aspects of the present disclosure.

[0015] Figure 3 is a diagram illustrating an example of a base station and a user equipment (UE) in an access network.

[0016] Figure 4 Example aspects of sidelink slot structures according to various aspects of the present disclosure are illustrated.

[0017] Figure 5A is a diagram illustrating an example of a wireless communication system having a backscatter-based communication device that can reflect or backscatter a signal from a first UE to a second UE.

[0018] Figure 5B is a diagram illustrating an example of radio waves transmitted by a wireless communication device.

[0019] Figure 5C is an example of Figure 5B An illustration of an example of a backscattered signal modulated by a radio wave.

[0020] Figure 5D is an example Figure 5B radio waves and Figure 5C Illustration of an example of superposition of radio waves.

[0021] Fig. 6A is a diagram illustrating an example of a bistatic wireless communication system with a receiving UE configured to authenticate a backscatter-based communication device.

[0022] Figure 6B is a diagram illustrating an example of a monostatic wireless communication system having a UE configured to authenticate a backscatter-based communication device.

[0023] Figure 7 A connection flow diagram of a bistatic wireless communication system with a receiving UE configured to authenticate a backscatter-based communication device is shown.

[0024] Figure 8 is a flow chart of a wireless communication method.

[0025] Fig. 9 is another flow chart of a wireless communication method.

[0026] Fig.10 is another flow chart of a wireless communication method.

[0027] Fig.11 are diagrams illustrating examples of hardware implementations of example devices and / or network entities. DETAILED DESCRIPTION

[0028] The detailed description set forth below in conjunction with the accompanying drawings is a description of various configurations and does not represent the only configurations with which the concepts described herein can be practiced. In order to provide a thorough understanding of the various concepts, the specific embodiments include specific details. However, these concepts can be practiced without these specific details. In some instances, well-known structures and components are shown in block diagram form to avoid obscuring these concepts.

[0029] Several aspects of the telecommunication system are also presented with reference to various apparatuses and methods. These apparatuses and methods are described in the following detailed description and illustrated in the accompanying drawings by various blocks, components, circuits, processes, algorithms, etc. (collectively referred to as "elements"). These elements can be implemented using electronic hardware, computer software, or any combination thereof. Whether these elements are implemented as hardware or software depends on the specific application and the design constraints imposed on the overall system.

[0030] As an example, an element or any part of an element or any combination of elements can be implemented as a "processing system", which includes one or more processors. The example of a processor includes a microprocessor, a microcontroller, a graphics processing unit (GPU), a central processing unit (CPU), an application processor, a digital signal processor (DSP), a reduced instruction set computing (RISC) processor, a system on a chip (SoC), a baseband processor, a field programmable gate array (FPGA), a programmable logic device (PLD), a state machine, a gate logic piece, a discrete hardware circuit and other suitable hardware configured to perform various functionalities described throughout the present disclosure. One or more processors in a processing system can execute software. Whether referred to as software, firmware, middleware, microcode, hardware description language or other terms, software should be broadly interpreted as meaning an instruction, an instruction set, a code, a code segment, a program code, a program, a subroutine, a software component, an application, a software application, a software package, a routine, a subroutine, an object, an executable, a thread of execution, a process, a function or any combination thereof.

[0031] Therefore, in one or more example aspects, specific implementations and / or use cases, the described functions may be implemented with hardware, software, or any combination thereof. If implemented with software, the functions may be stored or decoded on a computer-readable medium as one or more instructions or codes. Computer-readable media include computer storage media. Storage media may be any available medium that can be accessed by a computer. By way of example, such computer-readable media may include random access memory (RAM), read-only memory (ROM), electrically erasable programmable ROM (EEPROM), optical disk storage, magnetic disk storage, other magnetic storage devices, combinations of these types of computer-readable media, or any other medium that can be used to store computer-executable code in the form of instructions or data structures that can be accessed by a computer.

[0032] Although various aspects, specific implementations and / or use cases are described in this application by the illustration of some examples, additional or different aspects, specific implementations and use cases may be generated in many different arrangements and scenarios. The various aspects, specific implementations and / or use cases described herein can be implemented across many different platform types, devices, systems, shapes, sizes and packaging arrangements. For example, aspects, specific implementations and / or use cases can be generated via integrated chip specific implementations and other devices based on non-module components (e.g., end-user devices, vehicles, communication equipment, computing equipment, industrial equipment, retail / purchase equipment, medical equipment, artificial intelligence (AI) enabled devices, etc.). Although some examples may be specifically for use cases or applications, or may not be specifically for use cases or applications, the described examples may have a wide range of applicability. Aspects, specific implementations and / or use cases may be in the range from chip-level or modular components to non-modular, non-chip-level specific implementations, and further to the range of aggregated, distributed or original equipment manufacturer (OEM) devices or systems in conjunction with one or more technologies herein. In some practical environments, the equipment in conjunction with the various aspects and features described may also include additional components and features for implementing and practicing the various aspects claimed and described. For example, the transmission and reception of wireless signals necessarily include multiple components for analog and digital purposes (e.g., hardware components including antennas, RF chains, power amplifiers, modulators, buffers, processors, interleavers, adders / accumulators, etc.) The techniques described herein can be practiced in a wide variety of devices of various sizes, shapes, and configurations, chip-level components, systems, distributed arrangements, aggregated or disaggregated components, end-user devices, etc.

[0033] The deployment of a communication system (such as a 5G NR system) can be arranged with various components or constituent parts in a variety of ways. In a 5G NR system or network, a network node, a network entity, a mobility element of a network, a radio access network (RAN) node, a core network node, a network element or a network equipment (such as a base station (BS), or one or more units (or one or more components) that perform base station functionality can be implemented in an aggregated architecture or a decomposed architecture. For example, a BS (such as a Node B (NB), an evolved NB (eNB), an NR BS, a 5G NB, an access point (AP), a transmit receive point (TRP) or a cell, etc.) can be implemented as an aggregated base station (also referred to as an independent BS or a monolithic BS) or a decomposed base station.

[0034] A converged base station may be configured to utilize a radio protocol stack physically or logically integrated within a single RAN node. A decomposed base station may be configured to utilize a protocol stack physically or logically distributed between two or more units, such as one or more central or centralized units (CUs), one or more distributed units (DUs), or one or more radio units (RUs). In some aspects, a CU may be implemented within a RAN node, and one or more DUs may be co-located with the CU, or alternatively, may be geographically or virtually distributed in one or more other RAN nodes. A DU may be implemented to communicate with one or more RUs. Each of a CU, a DU, and a RU may be implemented as a virtual unit, i.e., a virtual central unit (VCU), a virtual distributed unit (VDU), or a virtual radio unit (VRU).

[0035] Base station operation or network design may take into account the aggregated nature of base station functionality. For example, a disaggregated base station may be used in an integrated access backhaul (IAB) network, an open radio access network (O-RAN (network configuration such as that initiated by the O-RAN Alliance)), or a virtualized radio access network (vRAN, also known as a cloud radio access network (C-RAN)). Decomposition may include distributing functionality across two or more units at various physical locations, as well as virtually distributing functionality of at least one unit, which may enable flexibility in network design. Individual units of a disaggregated base station or disaggregated RAN architecture may be configured for wired or wireless communication with at least one other unit.

[0036] Figure 1 1 is a diagram 100 illustrating an example of a wireless communication system and an access network. The illustrated wireless communication system includes a disaggregated base station architecture. The disaggregated base station architecture may include one or more CUs 110 that may communicate directly with a core network 120 via a backhaul link, or indirectly with the core network 120 through one or more disaggregated base station units, such as a near real-time (near RT) RAN intelligent controller (RIC) 125 via an E2 link, or a non-real-time (non-RT) RIC 115 associated with a service management and orchestration (SMO) framework 105, or both. The CU 110 may communicate with one or more DUs 130 via corresponding midhaul links, such as an F1 interface. The DU 130 may communicate with one or more RUs 140 via corresponding fronthaul links. The RU 140 may communicate with corresponding UEs 104 via one or more radio frequency (RF) access links. In some implementations, a UE 104 may be served simultaneously by multiple RUs 140.

[0037] Each of the units (i.e., CU 110, DU 130, RU 140, and near-RT RIC 125, non-RT RIC 115, and SMO framework 105) may include or be coupled to one or more interfaces configured to receive or send signals, data, or information (collectively referred to as signals) via a wired or wireless transmission medium. Each of these units or an associated processor or controller that provides instructions to the communication interface of these units may be configured to communicate with one or more of the other units via a transmission medium. For example, these units may include a wired interface configured to receive or send signals to one or more of the other units on a wired transmission medium. Additionally, these units may include a wireless interface that may include a receiver, transmitter, or transceiver (such as an RF transceiver) configured to receive or send signals, or both, to one or more of the other units on a wireless transmission medium.

[0038] In some aspects, CU 110 may host one or more higher layer control functions. Such control functions may include radio resource control (RRC), packet data convergence protocol (PDCP), service data adaptation protocol (SDAP), etc. Each control function may be implemented using an interface configured to communicate signals with other control functions hosted by CU 110. CU 110 may be configured to handle user plane functionality (i.e., central unit-user plane (CU-UP)), control plane functionality (i.e., central unit-control plane (CU-CP)), or a combination thereof. In some specific implementations, CU 110 may be logically divided into one or more CU-UP units and one or more CU-CP units. When implemented in an O-RAN configuration, the CU-UP unit may communicate bidirectionally with the CU-CP unit via an interface (such as an E1 interface). As needed, CU 110 may be implemented to communicate with DU 130 for network control and signaling.

[0039] DU 130 may correspond to a logical unit that includes one or more base station functions for controlling the operation of one or more RUs 140. In some aspects, DU 130 may host one or more of a radio link control (RLC) layer, a medium access control (MAC) layer, and one or more high physical (PHY) layers (such as modules for forward error correction (FEC) encoding and decoding, scrambling, modulation and demodulation, etc.) depending at least in part on a functional split such as that defined by 3GPP. In some aspects, DU 130 may further host one or more low PHY layers. Each layer (or module) may be implemented using an interface that is configured to communicate signals with other layers (and modules) hosted by DU 130 or with control functions hosted by CU 110.

[0040] The lower layer functionality may be implemented by one or more RUs 140. In some deployments, the RUs 140 controlled by the DUs 130 may correspond to logical nodes that host RF processing functions or low PHY layer functions (such as performing fast Fourier transforms (FFTs), inverse FFTs (iFFTs), digital beamforming, physical random access channel (PRACH) extraction and filtering, etc.), or both, based at least in part on functional partitioning (such as lower layer functional partitioning). In such an architecture, the RUs 140 may be implemented to handle over-the-air (OTA) communications with one or more UEs 104. In some implementations, real-time and non-real-time aspects of control plane communications and user plane communications with the RUs 140 may be controlled by the corresponding DUs 130. In some scenarios, this configuration may enable the DUs 130 and CUs 110 to be implemented in a cloud-based RAN architecture (such as a vRAN architecture).

[0041] The SMO framework 105 may be configured to support RAN deployment and provisioning of non-virtualized network elements and virtualized network elements. For non-virtualized network elements, the SMO framework 105 may be configured to support the deployment of dedicated physical resources for RAN coverage requirements, which may be managed via an operation and maintenance interface (such as an O1 interface). For virtualized network elements, the SMO framework 105 may be configured to interact with a cloud computing platform (such as an open cloud (O-Cloud) 190) to perform network element lifecycle management (such as instantiating virtualized network elements) via a cloud computing platform interface (such as an O2 interface). Such virtualized network elements may include, but are not limited to, CU 110, DU 130, RU 140, and near-RT RIC 125. In some specific implementations, the SMO framework 105 may communicate with hardware aspects of the 4G RAN (such as an open eNB (O-eNB) 111) via the O1 interface. In addition, in some specific implementations, the SMO framework 105 may communicate directly with one or more RUs 140 via the O1 interface. The SMO framework 105 may also include a non-RT RIC 115 configured to support the functionality of the SMO framework 105 .

[0042] The non-RT RIC 115 may be configured to include logic functions that enable non-real-time control and optimization of RAN elements and resources, artificial intelligence (AI) / machine learning (ML) (AI / ML) workflows including model training and updating, or policy-based guidance of applications / features in the near-RT RIC 125. The non-RT RIC 115 may be coupled to or in communication with the near-RT RIC 125 (such as via an A1 interface). The near-RT RIC 125 may be configured to include logic functions that enable near-real-time control and optimization of RAN elements and resources via data collection and actions through an interface (such as via an E2 interface) that connects one or more CUs 110, one or more DUs 130, or both, and the O-eNB with the near-RT RIC 125.

[0043] In some implementations, in order to generate an AI / ML model to be deployed in the near-RT RIC 125, the non-RT RIC 115 may receive parameters or external enrichment information from an external server. Such information may be utilized by the near-RT RIC 125 and may be received from a non-network data source or from a network function at the SMO framework 105 or the non-RT RIC 115. In some examples, the non-RT RIC 115 or the near-RT RIC 125 may be configured to tune RAN behavior or performance. For example, the non-RT RIC 115 may monitor long-term trends and patterns of performance and employ AI / ML models to perform corrective actions through the SMO framework 105 (such as via reconfiguration of O1) or via the creation of RAN management policies (such as A1 policies).

[0044] At least one of the CU 110, the DU 130, and the RU 140 may be referred to as a base station 102. Therefore, the base station 102 may include one or more of the CU 110, the DU 130, and the RU 140 (each component is indicated by a dotted line to indicate that each component may be included in the base station 102, or may not be included in the base station). The base station 102 provides an access point to the core network 120 for the UE 104. The base station 102 may include a macro cell (a high-power cellular base station) and / or a small cell (a low-power cellular base station). Small cells include femto cells, pico cells, and micro cells. A network including both small cells and macro cells may be referred to as a heterogeneous network. A heterogeneous network may also include a home evolved Node B (eNB) (HeNB), which may provide services to a restricted group referred to as a closed subscriber group (CSG). The communication link between RU 140 and UE 104 may include uplink (UL) (also known as reverse link) transmission from UE 104 to RU 140 and / or downlink (DL) (also known as forward link) transmission from RU 140 to UE 104. The communication link may use multiple-input multiple-output (MIMO) antenna technology, including spatial multiplexing, beamforming and / or transmit diversity. The communication link may be through one or more carriers. For each carrier allocated in a carrier aggregation of up to Yx MHz (x component carriers) for transmission in each direction, the base station 102 / UE 104 may use a spectrum of up to Y MHz (e.g., 5MHz, 10MHz, 15MHz, 20MHz, 100MHz, 400MHz, etc.) bandwidth. The carriers may or may not be adjacent to each other. The allocation of carriers may be asymmetric with respect to DL and UL (e.g., more or fewer carriers may be allocated for DL ​​compared to UL). The component carrier may include a primary component carrier and one or more secondary component carriers. The primary component carrier may be referred to as a primary cell (PCell) and the secondary component carrier may be referred to as a secondary cell (SCell).

[0045] Some UEs 104 may communicate with each other using a device-to-device (D2D) communication link 158. The D2D communication link 158 may use a DL / UL wireless wide area network (WWAN) spectrum. The D2D communication link 158 may use one or more side link channels, such as a physical side link broadcast channel (PSBCH), a physical side link discovery channel (PSDCH), a physical side link shared channel (PSSCH), and a physical side link control channel (PSCCH). The D2D communication may be through a variety of wireless D2D communication systems, such as, for example, Bluetooth, Wi-Fi, LTE, or NR based on the Institute of Electrical and Electronics Engineers (IEEE) 802.11 standard. These UEs 104 may use a PC5 interface to connect to each other to maintain a D2D communication link 158.

[0046] Some examples of sidelink communications may include communications that may be from vehicle to vehicle (V2V), vehicle to infrastructure (V2I) (e.g., from a vehicle-based communication device to a road infrastructure node such as a roadside unit (RSU)), vehicle to network (V2N) (e.g., from a vehicle-based communication device to one or more network nodes such as a base station), vehicle to pedestrian (V2P), cellular vehicle-to-everything (C-V2X), and / or combinations thereof, and / or vehicle-based communication devices communicating with other devices, which may be collectively referred to as vehicle-to-everything (V2X) communications. V2X communications may include basic safety messages (BSM). Sidelink communications may be based on V2X or other D2D communications, such as proximity services (ProSe), etc. In addition to the UE, sidelink communications may also be sent and received by other transmitting and receiving devices, such as a roadside unit (RSU) 107, etc. The PC5 interface may be used to exchange sidelink communications, such as in conjunction with Figure 4 Although the examples in Figure 4 The following description of an example time slot structure may provide examples for sidelink communications related to 5G NR, but the concepts described herein may be applicable to other similar areas such as LTE, LTE-A, CDMA, GSM, and other wireless technologies.

[0047] One or more wireless signals may be relayed to another device via a D2D communication link 158 via a backscatter-based communication device 106. In one aspect, a UE 104 may communicate with another UE 104 via a backscatter-based communication device 106, which may be configured to backscatter signals received via the D2D communication link 158. In another aspect, a RU 140 may communicate with a UE 104 via a backscatter-based communication device 106, which may be configured to backscatter signals received via the UE to a Universal Mobile Telecommunications System (UMTS) Terrestrial Radio Access (UTRA) (Uu) link 156. The backscattered signal using the D2D communication link or Uu link 156 may include a superposition of both a direct link signal and a backscattered signal from a source device.

[0048] The wireless communication system may also include a Wi-Fi AP 150 that communicates with a UE 104 (also referred to as a Wi-Fi station (STA)) via a communication link 154, for example, in a 5 GHz unlicensed spectrum, etc. When communicating in an unlicensed spectrum, the UE 104 / AP 150 may perform a clear channel assessment (CCA) to determine whether a channel is available prior to communication.

[0049] The electromagnetic spectrum is typically subdivided into various categories, bands, channels, etc. based on frequency / wavelength. In 5G NR, two initial operating bands have been identified as frequency range designations FR1 (410 MHz-7.125 GHz) and FR2 (24.25 GHz-52.6 GHz). Although a portion of FR1 is greater than 6 GHz, FR1 is often (interchangeably) referred to as the "sub-6 GHz" band in various documents and articles. A similar naming issue sometimes occurs with respect to FR2, which is often (interchangeably) referred to as the "millimeter wave" band in documents and articles, although different from the extremely high frequency (EHF) band (30 GHz-300 GHz) identified as the "millimeter wave" band by the International Telecommunication Union (ITU).

[0050] Frequencies between FR1 and FR2 are generally referred to as mid-band frequencies. Recent 5G NR research has identified the operating bands for these mid-band frequencies as frequency range designation FR3 (7.125GHz-24.25GHz). The bands falling within FR3 can inherit FR1 characteristics and / or FR2 characteristics, so the features of FR1 and / or FR2 can be effectively extended to mid-band frequencies. In addition, higher frequency bands are currently being explored to extend 5G NR operations to more than 52.6GHz. For example, three higher operating bands have been identified as frequency range designations FR2-2 (52.6GHz-71GHz), FR4 (71GHz-114.25GHz) and FR5 (114.25GHz-300GHz). Each of these higher frequency bands falls within the EHF band.

[0051] In view of the above, unless otherwise specified, if the term "6 GHz or less" is used in this document, it can broadly refer to frequencies that may be less than 6 GHz, may be within FR1, or may include mid-band frequencies. In addition, unless otherwise specified, if the term "millimeter wave" is used in this document, it can broadly refer to frequencies that may include mid-band frequencies, may be within FR2, FR4, FR2-2 and / or FR5, or may be within the EHF band.

[0052] The base station 102 and the UE 104 may each include multiple antennas (such as antenna elements, antenna panels, and / or antenna arrays) to facilitate beamforming. The base station 102 may send a beamformed signal 182 to the UE 104 in one or more transmit directions. The UE 104 may receive the beamformed signal from the base station 102 in one or more receive directions. The UE 104 may also send a beamformed signal 184 to the base station 102 in one or more transmit directions. The base station 102 may receive the beamformed signal from the UE 104 in one or more receive directions. The base station 102 / UE 104 may perform beam training to determine the best receive direction and transmit direction for each of the base station 102 / UE 104. The transmit direction and receive direction of the base station 102 may be the same or different. The transmit direction and receive direction of the UE 104 may be the same or different.

[0053] The base station 102 may include and / or be referred to as a gNB, a Node B, an eNB, an access point, a base transceiver station, a radio base station, a radio transceiver, a transceiver function, a basic service set (BSS), an extended service set (ESS), a transmit receive point (TRP), a network node, a network entity, a network equipment, or some other suitable term. The base station 102 may be implemented as an integrated access backhaul (IAB) node, a relay node, a sidelink node, an aggregated (monolithic) base station with a baseband unit (BBU) (including a CU and a DU) and a RU, or as a disaggregated base station including one or more of a CU, a DU, and / or a RU. A set of base stations that may include disaggregated base stations and / or aggregated base stations may be referred to as a next generation (NG) RAN (NG-RAN).

[0054] The core network 120 may include an access and mobility management function (AMF) 161, a session management function (SMF) 162, a user plane function (UPF) 163, a unified data management (UDM) 164, one or more location servers 168, and other functional entities. AMF 161 is a control node that handles signaling between UE 104 and core network 120. AMF 161 supports registration management, connection management, mobility management, and other functions. SMF 162 supports session management and other functions. UPF 163 supports packet routing, packet forwarding, and other functions. UDM 164 supports the generation of authentication and key agreement (AKA) credentials, user identity handling, access authorization, and subscription management. One or more location servers 168 are illustrated as including a gateway mobile location center (GMLC) 165 and a location management function (LMF) 166. However, in general, the one or more location servers 168 may include one or more location / positioning servers, which may include one or more of the GMLC 165, the LMF 166, the positioning determination entity (PDE), the serving mobile location center (SMLC), the mobile positioning center (MPC), etc. The GMLC 165 and the LMF 166 support UE location services. The GMLC 165 provides an interface for clients / applications (e.g., emergency services) to access UE positioning information. The LMF 166 receives measurement results and assistance information from the NG-RAN and the UE 104 via the AMF 161 to calculate the positioning of the UE 104. The NG-RAN may determine the positioning of the UE 104 using one or more positioning methods. Positioning the UE 104 may involve signal measurements, positioning estimates, and optional speed calculations based on these measurements. Signal measurements may be performed by the UE 104 and / or the serving base station 102. The measured signals may be based on a satellite positioning system (SPS) 170 (e.g., one or more of a global navigation satellite system (GNSS), a global positioning system (GPS), a non-terrestrial network (NTN), or other satellite positioning / location systems), LTE signals, wireless local area network (WLAN) signals, Bluetooth signals, a terrestrial beacon system (TBS), sensor-based information (e.g., an atmospheric pressure sensor, a motion sensor), an NR enhanced cell identifier (ID) (NR E-CID) method, NR signals (e.g., multi-round trip time (multi-RTT), DL angle of departure (DL-AoD), DL time difference of arrival (DL-TDOA), UL time difference of arrival (UL-TDOA), and UL angle of arrival (UL-AoA) positioning), and / or one or more of other systems / signals / sensors.

[0055] Examples of UE 104 include cellular phones, smart phones, session initiation protocol (SIP) phones, laptops, personal digital assistants (PDAs), satellite radios, global positioning systems, multimedia devices, video devices, digital audio players (e.g., MP3 players), cameras, game consoles, tablet computers, smart devices, wearable devices, vehicles, electric meters, gas pumps, large or small kitchen appliances, healthcare equipment, implants, sensors / actuators, displays, or any other similarly functional devices. Some of the UEs 104 may be referred to as IoT devices (e.g., parking meters, gas pumps, toasters, vehicles, heart monitors, etc.). UE 104 may also be referred to as stations, mobile stations, subscriber stations, mobile units, subscriber units, wireless units, remote units, mobile devices, wireless devices, wireless communication devices, remote devices, mobile subscriber stations, access terminals, mobile terminals, wireless terminals, remote terminals, mobile phones, user agents, mobile clients, clients, or some other suitable terminology. In some scenarios, the term UE may also be applied to one or more supporting devices, such as in a device cluster arrangement. One or more of these devices may access the network collectively and / or individually.

[0056] See again Figure 1In some aspects, the UE 104 may have an authentication transmission component 198 configured to transmit a first public key to a backscatter-based communication device. The authentication transmission component 198 may be configured to transmit an unsigned transmission to the backscatter-based communication device. The authentication transmission component 198 may be configured to transmit a signed transmission to the backscatter-based communication device. The signed transmission may be signed based on a first private key. In some aspects, the UE 104 may have an authentication reception component 199 configured to receive a configuration of a backscatter-based communication device from a first wireless device. The authentication reception component 199 may be configured to receive a backscattered signal from a backscatter-based communication device. The authentication reception component 199 may be configured to transmit a first detected error to the first wireless device in response to detecting an error in the backscattered signal according to the configuration of the backscatter-based communication device. In some aspects, the backscatter-based communication device 106 may have an authentication backscatter component 197 configured to receive a first public key from the first wireless device. The authentication backscatter component 197 may be configured to receive an unsigned transmission from the first wireless device. The authentication backscatter component 197 may be configured to receive a signed transmission from the first wireless device. The authentication backscatter component 197 may be configured to process the unsigned transmission in response to verifying the signed transmission based on the first public key. Although the following description may focus on radio frequency identification (RFID) tags, the concepts described herein may be applicable to any backscatter-based communication device, such as a UE equipped with an RFID tag radio or a UE that uses backscatter-based communication to save power during a certain mode (e.g., power save mode, reflection mode).

[0057] Figure 2A FIG200 is a diagram illustrating an example of a first subframe within a 5G NR frame structure. Figure 2B FIG230 is a diagram illustrating an example of DL channels within a 5G NR subframe. Figure 2C FIG250 is a diagram illustrating an example of a second subframe within a 5G NR frame structure. Figure 2D FIG280 is a diagram illustrating an example of UL channels within a 5G NR subframe. The 5G NR frame structure may be frequency division duplex (FDD), where for a particular set of subcarriers (carrier system bandwidth), subframes within that subcarrier set are dedicated to either DL or UL, or may be time division duplex (TDD), where for a particular set of subcarriers (carrier system bandwidth), subframes within that subcarrier set are dedicated to both DL and UL. Figure 2A , Figure 2CIn the example provided, the 5G NR frame structure is assumed to be TDD, where subframe 4 is configured with slot format 28 (most of which are DL), where D is DL, U is UL, and F is flexible between DL / UL, and subframe 3 is configured with slot format 1 (all of which are UL). Although subframes 3 and 4 are shown as having slot formats 1 and 28, respectively, any particular subframe may be configured with any of the various available slot formats 0 to 61. Slot formats 0 and 1 are both DL and both UL, respectively. Other slot formats 2-61 include a mix of DL, UL, and flexible symbols. The slot format is configured for the UE via a received slot format indicator (SFI) (dynamically configured via DL control information (DCI) or semi-statically / statically configured via radio resource control (RRC) signaling). Note that the following description also applies to the 5G NR frame structure as TDD.

[0058] FIG. 2A to FIG. 2D The frame structure is illustrated, and various aspects of the present disclosure may be applicable to other wireless communication technologies that may have different frame structures and / or different channels. A frame (10ms) may be divided into 10 subframes of the same size (1ms). Each subframe may include one or more time slots. A subframe may also include a microslot, which may include 7, 4 or 2 symbols. Each time slot may include 14 or 12 symbols, depending on whether the cyclic prefix (CP) is conventional or extended. For a conventional CP, each time slot may include 14 symbols, and for an extended CP, each time slot may include 12 symbols. The symbol on the DL may be a CP orthogonal frequency division multiplexing (OFDM) (CP-OFDM) symbol. The symbol on the UL may be a CP-OFDM symbol (for high throughput scenarios) or a discrete Fourier transform (DFT) spread OFDM (DFT-s-OFDM) symbol (also known as a single carrier frequency division multiple access (SC-FDMA) symbol) (for power-limited scenarios; limited to single-stream transmission). The number of time slots within a subframe is based on the CP and parameter set. The parameter set defines the subcarrier spacing (SCS) and effectively defines the symbol length / duration, which is equal to 1 / SCS.

[0059]

[0060]

[0061] For normal CP (14 symbols / slot), different parameter sets μ0 to 4 allow 1, 2, 4, 8, and 16 slots per subframe, respectively. For extended CP, parameter set 2 allows 4 slots per subframe. Accordingly, for normal CP and parameter set μ, there are 14 symbols / slot and 2 μ timeslots / subframe. The subcarrier spacing can be equal to 2 μ*15kHz, where μ is parameter set 0 to 4. Therefore, the subcarrier spacing for parameter set μ=0 is 15kHz, and the subcarrier spacing for parameter set μ=4 is 240kHz. The symbol length / duration is inversely related to the subcarrier spacing. FIG. 2A to FIG. 2D An example of a parameter set μ=2 with a normal CP of 14 symbols per slot and 4 slots per subframe is provided. The slot duration is 0.25 ms, the subcarrier spacing is 60 kHz, and the symbol duration is about 16.67 μs. Within a frame set, there may be one or more different bandwidth parts (BWPs) that are frequency-division multiplexed (see Figure 2B ). Each BWP may have a specific parameter set and CP (normal or extended).

[0062] A resource grid may be used to represent a frame structure. Each slot includes a resource block (RB) (also referred to as a physical RB (PRB)) extending over 12 consecutive subcarriers. The resource grid is divided into a plurality of resource elements (REs). The number of bits carried by each RE depends on the modulation scheme.

[0063] like Figure 2A As illustrated, some of the REs carry reference (pilot) signals (RS) for the UE. The RS may include a demodulation RS (DM-RS) (indicated as R for a particular configuration, but other DM-RS configurations are possible) and a channel state information reference signal (CSI-RS) for channel estimation at the UE. The RS may also include a beam measurement RS (BRS), a beam refinement RS (BRRS), and a phase tracking RS (PT-RS).

[0064] Figure 2BExamples of various DL channels within a subframe of a frame are illustrated. A physical downlink control channel (PDCCH) carries DCI within one or more control channel elements (CCEs) (e.g., 1, 2, 4, 8, or 16 CCEs), each CCE including six RE groups (REGs), each REG including 12 consecutive REs in an OFDM symbol of an RB. A PDCCH within a BWP may be referred to as a control resource set (CORESET). The UE is configured to monitor PDCCH candidates in a PDCCH search space (e.g., a common search space, a UE-specific search space) during a PDCCH monitoring opportunity on a CORESET, wherein the PDCCH candidates have different DCI formats and different aggregation levels. Additional BWPs may be located at higher and / or lower frequencies on the channel bandwidth. A primary synchronization signal (PSS) may be within symbol 2 of a particular subframe of a frame. The PSS is used by UE 104 to determine subframe / symbol timing and physical layer identification. A secondary synchronization signal (SSS) may be within symbol 4 of a particular subframe of a frame. The SSS is used by the UE to determine the physical layer cell identity group number and the radio frame timing. Based on the physical layer identity and the physical layer cell identity group number, the UE can determine the physical cell identifier (PCI). Based on the PCI, the UE can determine the location of the DM-RS. The physical broadcast channel (PBCH) carrying the master information block (MIB) can be logically grouped with the PSS and SSS to form a synchronization signal (SS) / PBCH block (also referred to as an SS block (SSB)). The MIB provides the system frame number (SFN) and the number of RBs in the system bandwidth. The physical downlink shared channel (PDSCH) carries user data, broadcast system information such as system information blocks (SIBs) that are not sent via the PBCH, and paging messages.

[0065] like Figure 2C As illustrated, some of the REs carry DM-RS (indicated as R for a particular configuration, but other DM-RS configurations are possible) for channel estimation at the base station. The UE may send a DM-RS for a physical uplink control channel (PUCCH) and a DM-RS for a physical uplink shared channel (PUSCH). The PUSCH DM-RS may be sent in the first or first two symbols of the PUSCH. Depending on whether a short PUCCH or a long PUCCH is sent and depending on the specific PUCCH format used, the PUCCH DM-RS may be sent in different configurations. The UE may send a sounding reference signal (SRS). The SRS may be sent in the last symbol of a subframe. The SRS may have a comb structure, and the UE may send the SRS on one of the teeth of the comb. The SRS may be used by the base station for channel quality estimation to achieve frequency-dependent scheduling of the UL.

[0066] Figure 2DExamples of various UL channels within a subframe of a frame are illustrated. The PUCCH may be located at a position as indicated in one configuration. The PUCCH carries uplink control information (UCI), such as scheduling requests, channel quality indicators (CQI), precoding matrix indicators (PMI), rank indicators (RI), and hybrid automatic repeat request (HARQ) acknowledgement (ACK) (HARQ-ACK) feedback (i.e., one or more HARQ ACK bits indicating one or more ACKs and / or negative ACKs (NACKs)). The PUSCH carries data and may additionally be used to carry a buffer status report (BSR), a power headroom report (PHR), and / or UCI.

[0067] Figure 3 3 is a block diagram of a backscatter-based communication device 310 in an access network communicating with a wireless device 350. In the DL, Internet Protocol (IP) packets may be provided to a controller / processor 375. The controller / processor 375 implements layer 3 and layer 2 functionality. Layer 3 includes a radio resource control (RRC) layer, and layer 2 includes a service data adaptation protocol (SDAP) layer, a packet data convergence protocol (PDCP) layer, a radio link control (RLC) layer, and a medium access control (MAC) layer. The controller / processor 375 provides RRC layer functionality associated with broadcasting of system information (e.g., MIB, SIB), RRC connection control (e.g., RRC connection paging, RRC connection establishment, RRC connection modification, and RRC connection release), inter-radio access technology (RAT) mobility, and measurement configuration for UE measurement reporting; PDCP layer functionality associated with header compression / decompression, security (encryption, decryption, integrity protection, integrity verification), and handover support functions; RLC layer functionality associated with delivery of upper layer packet data units (PDUs), error correction through ARQ, concatenation, segmentation and reassembly of RLC service data units (SDUs), re-segmentation of RLC data PDUs, and reordering of RLC data PDUs; and MAC layer functionality associated with mapping between logical channels and transport channels, multiplexing of MAC SDUs onto transport blocks (TBs), demultiplexing of MAC SDUs from TBs, scheduling information reporting, error correction through HARQ, priority handling, and logical channel prioritization.

[0068] The transmit (Tx) processor 316 and receive (Rx) processor 370 implement layer 1 functionality associated with various signal processing functions. Layer 1 (which includes the physical (PHY) layer) may include error detection on the transmission channel, forward error correction (FEC) decoding / decoding of the transmission channel, interleaving, rate matching, mapping to the physical channel, modulation / demodulation of the physical channel, and MIMO antenna processing. The Tx processor 316 handles the mapping to the signal constellation diagram based on various modulation schemes (e.g., binary phase shift keying (BPSK), quadrature phase shift keying (QPSK), M-phase shift keying (M-PSK), M-quadrature amplitude modulation (M-QAM)). The decoded and modulated symbols can then be divided into parallel streams. Subsequently, each stream can be mapped to an OFDM subcarrier, multiplexed with a reference signal (e.g., a pilot) in the time domain and / or frequency domain, and then combined using an inverse fast Fourier transform (IFFT) to produce a physical channel carrying a time domain OFDM symbol stream. The OFDM stream is spatially pre-decoded to produce multiple spatial streams. Channel estimates from a channel estimator 374 may be used to determine the coding and modulation schemes, as well as for spatial processing. Channel estimates may be derived from reference signals and / or channel condition feedback transmitted by the wireless device 350. Each spatial stream may then be provided to a different antenna 320 via a separate transmitter 318Tx. Each transmitter 318Tx may modulate a radio frequency (RF) carrier for transmission using a corresponding spatial stream.

[0069] At the wireless device 350, each receiver 354Rx receives a signal through its corresponding antenna 352. Each receiver 354Rx recovers the information modulated onto the RF carrier and provides the information to a receive (Rx) processor 356. The Tx processor 368 and the Rx processor 356 implement layer 1 functionality associated with various signal processing functions. The Rx processor 356 can perform spatial processing on the information to recover any spatial streams destined for the wireless device 350. If multiple spatial streams are destined for the wireless device 350, the Rx processor 356 can combine them into a single OFDM symbol stream. The Rx processor 356 then converts the OFDM symbol stream from the time domain to the frequency domain using a fast Fourier transform (FFT). The frequency domain signal includes a separate OFDM symbol stream for each subcarrier of the OFDM signal. The symbols on each subcarrier and the reference signal are recovered and demodulated by determining the most likely signal constellation point sent by the communication device 310 based on backscattering. These soft decisions can be based on channel estimates calculated by the channel estimator 358. The soft decisions are then decoded and deinterleaved to recover the data and control signals originally sent on the physical channel by the backscatter based communication device 310. The data and control signals are then provided to the controller / processor 359, which implements layer 3 and layer 2 functionality.

[0070] The controller / processor 359 may be associated with a memory 360 that stores program codes and data. The memory 360 may be referred to as a computer readable medium. In the UL, the controller / processor 359 provides demultiplexing between transport channels and logical channels, packet reassembly, decryption, header decompression, and control signal processing to recover IP packets. The controller / processor 359 is also responsible for error detection using ACK and / or NACK protocols to support HARQ operations.

[0071] Similar to the functionality described in conjunction with DL transmissions performed by the backscatter-based communication device 310, the controller / processor 359 provides RRC layer functionality associated with system information (e.g., MIB, SIB) acquisition, RRC connection, and measurement reporting; PDCP layer functionality associated with header compression / decompression and security (encryption, decryption, integrity protection, integrity verification); RLC layer functionality associated with delivery of upper layer PDUs, error correction through ARQ, concatenation, segmentation and reassembly of RLC SDUs, re-segmentation of RLC data PDUs, and reordering of RLC data PDUs; and MAC layer functionality associated with mapping between logical channels and transport channels, multiplexing of MAC SDUs onto TBs, demultiplexing of MAC SDUs from TBs, scheduling information reporting, error correction through HARQ, priority handling, and logical channel prioritization.

[0072] The Tx processor 368 may use channel estimates derived by the channel estimator 358 from a reference signal or feedback sent by the backscatter-based communication device 310 to select appropriate coding and modulation schemes and to facilitate spatial processing. The spatial streams generated by the Tx processor 368 may be provided to different antennas 352 via separate transmitters 354Tx. Each transmitter 354Tx may modulate an RF carrier with a corresponding spatial stream for transmission.

[0073] UL transmissions are processed at the backscatter-based communication device 310 in a manner similar to that described in conjunction with the receiver functionality at the wireless device 350. Each receiver 318Rx receives a signal through its corresponding antenna 320. Each receiver 318Rx recovers information modulated onto an RF carrier and provides the information to an Rx processor 370.

[0074] The controller / processor 375 may be associated with a memory 376 that stores program codes and data. The memory 376 may be referred to as a computer readable medium. In the UL, the controller / processor 375 provides demultiplexing between transport channels and logical channels, packet reassembly, decryption, header decompression, control signal processing to recover IP packets. The controller / processor 375 is also responsible for error detection using ACK and / or NACK protocols to support HARQ operations.

[0075] At least one of the Tx processor 368, the Rx processor 356, and the controller / processor 359 may be configured to perform Figure 1 The authentication sending component 198 combines various aspects.

[0076] At least one of the Tx processor 368, the Rx processor 356, and the controller / processor 359 may be configured to perform Figure 1 The authentication receiving component 199 combines various aspects.

[0077] At least one of the Tx processor 316, the Rx processor 370, and the controller / processor 375 may be configured to perform Figure 1 The certified backscatter component 197 combines various aspects.

[0078] Figure 4 Diagrams 400 and 410 are included that illustrate example aspects of a time slot structure that may be used for sidelink communications (e.g., a communication link 158 between UEs 104). In some examples, the time slot structure may be within a 5G / NR frame structure. In other examples, the time slot structure may be within an LTE frame structure. Although the following description may focus on 5G NR, the concepts described herein may be applicable to other similar areas, such as LTE, LTE-A, CDMA, GSM, and other wireless technologies. Figure 4The example time slot structure in is only an example, and other side link communications may have different frame structures and / or different channels for side link communications. A frame (10ms) can be divided into 10 subframes of the same size (1ms). Each subframe may include one or more time slots. A subframe may also include a microslot, which may include 7, 4 or 2 symbols. Each time slot may include 7 or 14 symbols, depending on the time slot configuration. For time slot configuration 0, each time slot may include 14 symbols, and for time slot configuration 1, each time slot may include 7 symbols. Schematic diagram 400 illustrates a single resource block transmitted in a single time slot corresponding to a 0.5ms transmission time interval (TTI). The physical side link control channel may be configured to occupy multiple physical resource blocks (PRBs), for example, 10, 12, 15, 20 or 25 PRBs. PSCCH may be limited to a single subchannel. For example, the PSCCH duration may be configured to be 2 symbols or 3 symbols. For example, a subchannel may include 10, 15, 20, 25, 50, 75, or 100 PRBs. Resources for sidelink transmissions may be selected from a resource pool including one or more subchannels. As a non-limiting example, a resource pool may include between 1 and 27 subchannels. A PSCCH size may be established for a resource pool, for example, between 10%-100% of a subchannel within a duration of 2 symbols or 3 symbols. Figure 4 Diagram 410 in illustrates an example in which the PSCCH occupies approximately 50% of a subchannel as an example to illustrate the concept of the PSCCH occupying a portion of a subchannel. A physical sidelink shared channel (PSSCH) occupies at least one subchannel. In some examples, the PSCCH may include a first portion of sidelink control information (SCI) and the PSSCH may include a second portion of the SCI.

[0079] A resource grid may be used to represent the frame structure. Each time slot may include a resource block (RB) (also called a physical RB (PRB)) extending 12 consecutive subcarriers. The resource grid is divided into multiple resource elements (REs). The number of bits carried by each RE depends on the modulation scheme. Figure 4 As illustrated, some of the REs may include control information in the PSCCH and some of the REs may include a demodulation RS (DMRS).At least one symbol may be used for feedback. Figure 4An example is illustrated having two symbols for a physical sidelink feedback channel (PSFCH) with adjacent gap symbols. Symbols before and / or after the feedback may be used for a transition between reception of data and transmission of feedback. The gap enables the device to switch from operating as a transmitting device to preparing to operate as a receiving device, e.g., in a subsequent time slot. As illustrated, data may be sent in the remaining REs. The data may include data messages as described herein. The location of any of the data, DMRS, SCI, feedback, gap symbols, and / or LBT symbols may be different from Figure 4 Illustrated example. In some aspects, multiple time slots can be aggregated together.

[0080] A backscatter-based communication device (such as an RFID tag) may be configured to reflect and / or backscatter wireless signals from a wireless communication device (such as a TRP of a UE or a base station). Such a backscatter-based communication device may be a passive, active, semi-passive and / or semi-active device. A backscatter-based communication device may be an IoT device.

[0081] Figure 5A 5 is a diagram illustrating an example of a wireless communication system having a wireless device 512, shown as device D1, a wireless device 514, shown as device D2, and a backscatter-based communication device 516, shown as tag T, which can reflect or backscatter a signal 513B from the wireless device 512 as a signal 517A to the wireless device 514. The wireless device 512 can be, for example, a UE (such as Figure 1 UE 104 in the Figure 1 Similarly, the wireless device 514 may be a UE (such as a base station 102 in FIG. 1 ). Figure 1 UE 104 in the Figure 1 The backscatter based communication device 516 may be, for example, a base station 102. Figure 1 The backscatter-based communication device 106 in the backscatter-based communication device 516. The backscatter-based communication device 516 can be an RFID tag configured to process a command or query from the wireless device 512, and can be configured to backscatter a signal in response to the command or query.

[0082] The wireless device 512 may send a signal to the wireless device 514. The wireless device 512 may also send a signal 513B to the backscatter-based communication device 516. The signal 513A and the signal 513B may be the same signal received simultaneously by the wireless device 514 and the backscatter-based communication device 516. In other words, the wireless device 512 may be considered to be the RF source of both the signal 513A and the signal 513B. The wireless device 512 may send a continuous wave (CW), such as a sine wave. Although the wireless device 512 and the wireless device 514 are depicted as two separate devices in the diagram 510, the wireless device 512 and the wireless device 514 may be a single full-duplex (FD) UE that reads the reflected or backscattered signal from the backscatter-based communication device 516. In other words, although the wireless device 512 and the wireless device 514 may appear as a dual-base wireless communication system, where the wireless device 512 acts as a source UE that sends signals to the backscatter-based communication device 516 and the wireless device 514 acts as a receiver UE that receives signals from the backscatter-based communication device 516, the wireless device 512 and the wireless device 514 may be single UEs in a monostatic wireless communication system.

[0083] The backscatter-based communication device 516 may reflect or backscatter the signal 513B as a signal 517A to the wireless device 514. If the backscatter-based communication device 516 reflects the signal 513B as the signal 517A to the wireless device 514, the signal 517A from the backscatter-based communication device 516 to the wireless device 514 may enhance the signal 513A from the wireless device 512 to the wireless device 514, thereby strengthening the signal received by the wireless device 514. If the backscatter-based communication device 516 backscatters the signal 513B as the signal 517A to the wireless device 514, the signal 517A from the backscatter-based communication device 516 to the wireless device 514 may also include an embedded signal (i.e., information bits) from the backscatter-based communication device 516 in addition to the signal received by the wireless device 514. In other words, the backscatter-based communication device 516 may modulate the signal 513B with its data sequence. The wireless device 512 may transmit one or more queries to the backscatter-based communication device 516, and the backscatter-based communication device 516 may respond to the one or more queries by sending the remodulated signal as the signal 517A. The backscatter-based communication device 516 may use any suitable resource, such as a CW resource, to send the signal 517A. The CW resource may have a CW configuration having a single-tone waveform, a multi-tone waveform, an OFDM waveform, or a single carrier (SC) waveform. The SC waveform may be, for example, a single-carrier quadrature amplitude modulation (SC-QAM) waveform or a discrete Fourier transform spread orthogonal frequency division multiplexing (DFT-s-OFDM) waveform.

[0084] The backscatter-based communication device 516 may be a passive, active, semi-passive or semi-active IoT device. A passive IoT device may include an energy harvesting (EH) device configured to opportunistically collect energy in the environment, such as solar energy, thermal energy, and ambient RF. Such an EH device may have a protocol enhancement that supports one or more operations using intermittently available energy collected from the environment. A passive IoT device may use a power storage unit (such as a capacitor or a supercapacitor) to store the collected energy, so that RF components (such as ICs, analog-to-digital converters (ADCs), mixers, and / or oscillators) can be powered. A passive IoT device may not have a battery. When using such a device, the amount of energy and traffic collected may be expected to vary. A passive IoT device that operates using intermittently available energy collected from the environment may not be able to maintain long-term, continuous transmission and / or reception. A semi-passive IoT device may have any of the capabilities of a passive IoT device, and may also have a power storage unit, such as a supercapacitor or a battery, that can power and / or turn on the IC of the device. Semi-passive IoT devices can also reflect or backscatter incident signals received by passive IoT devices.

[0085] A semi-active IoT device may have any of the capabilities of a passive or semi-passive IoT device, and may also use its power storage unit to strengthen the received signal, such as by using a power amplifier (PA) that increases the amplitude of the reflected or backscattered signal. An active IoT device may have a power storage unit (such as a battery) that can provide power to one or more active RF components to send signals, even when the active IoT device is not within range of the received signal. The active RF components can strengthen the received signal, such as by using a power amplifier (PA) that increases the amplitude of the reflected or backscattered signal. An active IoT device may even provide a reflected or backscattered signal that is stronger than a signal received by the device (such as the signal 513B received by the backscatter-based communication device 516). An active IoT device may also use its power storage unit to send a signal generated by the active IoT device that is not a reflected or backscattered signal.

[0086] The backscatter-based communication device 516 may use a data sequence to modulate the incident wave and / or signal. For example, the backscatter-based communication device 516 may use an amplitude shift keying (ASK) modulation method to turn on reflection when sending an information bit "1" and turn off reflection when sending an information bit "0". For example, Figure 5B is an example of a wireless communication device such as Figure 5A 520 is a diagram of an example of radio waves transmitted by a wireless device 512 in FIG. Figure 5Cis a diagram 530 illustrating an example of a backscattered signal, wherein a backscatter-based communication device (such as Figure 5A The backscatter-based communication device 516 in FIG. 5 turns on reflection when sending an information bit “1” and turns off reflection when sending an information bit “0”. Figure 5D is exemplified in a UE (such as Figure 5A 540 shows an example of a signal received at a wireless device 514 in FIG. 5 , which may be received by a wireless communication device such as Figure 5A The radio waves sent by the wireless device 512 in the Figure 5A A combination of radio waves sent by the backscatter-based communication device 516).

[0087] Each radio wave can be represented as x(n), such that h D1D2 (n) represents the radio waves from the wireless device 512 to the wireless device 514, h D1T (n) represents the radio waves from the wireless device 512 to the backscatter-based communication device 516, and h TD2 (n) represents the radio waves from the backscatter-based communication device 516 to the wireless device 514. Figure 5B The diagram 520 in FIG. 5 shows the radio wave h D1D2 (n) / h D1T (n), which means Figure 5A The wireless device 514 may receive the radio waves as signal 513A (denoted as h D1D2 (n)), and the backscatter-based communication device 516 may receive the radio wave as a signal 513B (denoted as h D1T (n)).

[0088] The backscatter-based communication device 516 may use an ASK modulation method to turn on reflection when transmitting an information bit “1” and turn off reflection when transmitting an information bit “0.” The information bits of the backscatter-based communication device 516 may be represented as s(n)∈{0,1}. Figure 5C The diagram 530 in FIG. 5 shows the radio wave σ f h D1T (n)h TD2 (n)s(n), which means Figure 5B The radio waves in the diagram 520 are backscattered radio waves, where Figure 5A The backscatter-based communication device 516 in FIG. 5 turns on reflection when sending an information bit "1" and turns off reflection when sending an information bit "0". fThe backscatter-based communication device 516 may represent a reflection coefficient. The backscatter-based communication device 516 may transmit radio waves as a signal 517A (represented as h TD2 (n)) is sent to wireless device 514.

[0089] Figure 5A The wireless device 514 in the Figure 5B is shown as a radio wave h D1D2 (n) signal 513A and Figure 5C is shown as a radio wave σ f h D1T (n)h TD2 A combination of signal 517A of (n)s(n). Figure 5C The diagram 540 in FIG. 5 shows the radio wave h D1D2 (n)+σ f h D1T (n)h TD2 (n)s(n), which means Figure 5B The radio waves h in the diagram 510 D1D2 (n) Figure 5C The radio waves σ in the diagram 520 f h D1T (n)h TD2 The wireless device 514 may then decode the combined radio waves to read the transmission from the wireless device 512 and also read the information bits from the backscatter-based communication device 516. In other words, the wireless device 514 may estimate the envelope of the signal 517A and the envelope may represent the information bits from the backscatter-based communication device 516.

[0090] Depend on Figure 5A The complete signal received by the wireless device 514 in D1D2 (n)+σ f h D1T (n)h TD2 =(n)s(n))x(n)+noise, where noise represents signals received from other wireless devices that use resources that overlap with transmissions from wireless device 512 and backscatter-based communication device 516. When s(n)=0, backscatter-based communication device 516 may turn off reflections so that wireless device 514 receives only the direct link signal from wireless device 512 as signal 513A, which is represented by y(n)=h D1D2When s(n)=1, the backscatter-based communication device 516 may turn on reflection so that the wireless device 514 receives the superposition of the direct link signal from the wireless device 512 as signal 513A and the backscatter link signal from the backscatter-based communication device 516 as signal 517A, which is represented by y(n)=(h D1D2 (n)+σ f h D1T (n)h TD2 (n)s(n))x(n)+noise representation.

[0091] Sidelink communication may be based on resource allocation mechanisms of different types or modes. In a first resource allocation mode (which may be referred to herein as "mode 1"), centralized resource allocation may be provided by a network entity. For example, a base station may determine resources for sidelink communication, and may allocate resources to different UEs for sidelink transmission. In this first mode, the UE receives a sidelink resource allocation from the base station. In a second resource allocation mode (which may be referred to herein as "mode 2"), distributed resource allocation may be provided. In mode 2, each UE may autonomously determine resources for sidelink transmission. In order to coordinate the selection of sidelink resources by each UE, each UE may use a listening technique to monitor the resource reservations of other sidelink UEs, and may select resources for sidelink transmission from unreserved resources. A device communicating based on a sidelink may determine one or more radio resources used by other devices in the time domain and frequency domain in order to select transmission resources that avoid conflicts with other devices. Sidelink transmission and / or resource reservation may be periodic or aperiodic, wherein the UE may reserve resources for transmission in the current time slot and up to two future time slots (as discussed below).

[0092] Thus, in this second mode (e.g., Mode 2), each UE may autonomously select resources for sidelink transmission, e.g., without a central entity (such as a base station indicating resources for the device). A first UE may reserve the selected resources in order to inform other UEs about the resources that the first UE intends to use for sidelink transmission.

[0093] In some examples, resource selection for sidelink communication can be based on a listening-based mechanism. For example, before selecting resources for data transmission, the UE can first determine whether the resources have been reserved by other UEs.

[0094] For example, as part of the listening mechanism for resource allocation mode 2, the UE may determine (e.g., listen) whether the selected side link resource has been reserved by other UEs before selecting the side link resource for data transmission. If the UE determines that the side link resource has not been reserved by other UEs, the UE may use the selected side link resource for sending data, for example, in PSSCH transmission. The UE may estimate or determine which radio resources (e.g., side link resources) may be in use and / or reserved by other UEs by detecting and decoding the side link control information (SCI) sent by other UEs. The UE may estimate or determine which radio resources are in use and / or reserved by other UEs using a resource selection algorithm based on listening. The UE may receive an SCI from another UE, the SCI including reservation information based on a resource reservation field in the SCI. The UE may continuously monitor (e.g., listen) and decode the SCI from a peer UE. The SCI may include reservation information, for example, indicating that a particular UE has selected a time slot and RB for future transmission. The UE may exclude resources used and / or reserved by other UEs from the candidate resource set used by the UE for sidelink transmission, and the UE may select / reserve resources for sidelink transmission from resources that are not used and thus form the candidate resource set. The UE may continuously perform listening on the SCI with resource reservations in order to maintain a candidate resource set from which the UE may select one or more resources for sidelink transmission. Once the UE selects a candidate resource, the UE may send an SCI indicating its own reservation of resources for sidelink transmission. The number of resources (e.g., subchannels per subframe) reserved by the UE may depend on the size of the data to be sent by the UE. Although this example is described with respect to a UE receiving reservation information from another UE, the reservation information may also be received from an RSU or other device communicating based on a sidelink.

[0095] The backscatter-based communication device 516 may have limited security when receiving the signal 513A or when sending the signal 517A. For example, in one aspect, the backscatter-based communication device 516 may not have security for sending or receiving signals. On the other hand, the backscatter-based communication device 516 may have a simple password accompanying a command or query, which the backscatter-based communication device 516 may use to authenticate a device (such as the wireless device 512) that sends a signal to the backscatter-based communication device. A backscatter-based communication device 516 with limited security may be easily deceived by a fake tag. A backscatter-based communication device 516 with a higher level of security when receiving the signal 517A or when sending the signal 513A may be more difficult to deceive.

[0096] In one aspect, a first wireless device (such as Figure 5AThe wireless device 512 in the embodiment may be configured to send the first public key to the backscatter-based communication device. The first wireless device may be configured to send an unsigned transmission to the backscatter-based communication device. The first wireless device may be configured to send a signed transmission to the backscatter-based communication device.

[0097] The second wireless device (such as Figure 5A The wireless device 514 in the embodiment of the present invention may be configured to receive a configuration of the backscatter-based communication device from the first wireless device. The second wireless device may be configured to receive a backscattered signal from the backscatter-based communication device. The second wireless device may be configured to send a first detected error to the first wireless device in response to detecting an error in the backscattered signal according to the configuration of the backscatter-based communication device.

[0098] Backscatter-based communication devices (such as Figure 5A The backscatter-based communication device 516 in the embodiment of the present invention may be configured to receive a first public key from a first wireless device. The backscatter-based communication device may be configured to receive an unsigned transmission from the first wireless device. The backscatter-based communication device may be configured to receive a signed transmission from the first wireless device. The backscatter-based communication device may be configured to process the unsigned transmission in response to verifying the signed transmission based on the first public key.

[0099] Fig. 6A 6 is a diagram illustrating an example of a bistatic wireless communication system having a wireless device 612 configured to transmit a signal 613B to a backscatter-based communication device 616, which may then transmit a signal 617A to a wireless device 614. The signal 613B may also be received by the wireless device 614 as a signal 613A, may also be received by a fake backscatter-based communication device 618 as a signal 613C, and may also be received by a fake wireless device 620 as a signal 613D.

[0100] The fake backscatter-based communication device 618 may attempt to trick the wireless device 614 into thinking it is the backscatter-based communication device 616 by sending the signal 617B. If the backscatter-based communication device 616 has limited security, such as only having a password that is sent from the wireless device 612 to the backscatter-based communication device 616 along with a command or query, the fake backscatter-based communication device 618 may easily trick the wireless device 614 into thinking it is the backscatter-based communication device 616 by sending the signal 617B.

[0101] The fake wireless device 620 may attempt to trick the backscatter-based communication device 616 into thinking it is the wireless device 612 by sending a signal 613E. If the backscatter-based communication device 616 has limited security, such as only having a password sent from the wireless device 612 to the backscatter-based communication device 616 along with a command or query, the fake wireless device 620 may easily trick the backscatter-based communication device 616 into thinking it is the wireless device 612 by sending a signal 613E that spoofs a signal 613D. The fake wireless device 620 may be able to derive the password to the backscatter-based communication device 616 by analyzing the signal 613D, and may use the password derived from the signal 613D to replace its own command or query in the signal 613E.

[0102] In one aspect, the backscatter-based communication device 616 may be configured to process the signature at the PHY layer when the signal 613B is received from the wireless device 612. The backscatter-based communication device 616 may be configured to maintain the authentication and integrity of the signal 613B from the wireless device 612 to ensure that the signal 613B is received from the wireless device 612 and not from a fake wireless device (such as a fake wireless device 620 that may send a signal 613E to the backscatter-based communication device 616). The wireless device 612 may sign one or more transmissions to the backscatter-based communication device 616, such as a command to the backscatter-based communication device 616 or a query to the backscatter-based communication device 616. The signature may also be authenticated by tracking one or more attributes of the wireless device 612, such as the location of the wireless device 612, to maintain authentication. In one aspect, the backscatter-based communication device 616 may be configured to track the location of the wireless device 612 to maintain authentication to the wireless device 612. For example, the wireless device 612 may send a location indicator (e.g., a zone ID, a GNSS location indicator) with the signal 613B, and if the location indicator received by the backscatter-based communication device 616 has moved a threshold distance or at least the threshold distance from the previous location indicator, the backscatter-based communication device 616 may detect an error in the authentication of the signature. In another example, the backscatter-based communication device 616 may measure the RSRP of the signal 613B to estimate the distance of the wireless device 612 from the backscatter-based communication device 616. If the RSRP of the subsequently received signal differs from the RSRP of the previously received signal by a threshold amount or at least the threshold amount, the backscatter-based communication device 616 may detect an error in the authentication of the signature. In response to detecting the error, the backscatter-based communication device 616 may not process the received signal (e.g., may not process the received command or the received query), or may send a message to the wireless device 612 or to the wireless device 614 indicating that an error has been detected.

[0103] In one aspect, the wireless device 614 may be configured to process the signature at the PHY layer when receiving the signal 617B from the backscatter-based communication device 616. The wireless device 614 may be configured to maintain the authentication and integrity of the signal 617A from the backscatter-based communication device 616 to ensure that the signal 617A is received from the backscatter-based communication device 616 and not from a fake wireless device (such as a fake backscatter-based communication device 618 that may send the signal 617B to the wireless device 614). The backscatter-based communication device 616 may sign one or more payloads to the wireless device 614, such as a response to a command from the wireless device 612 or a response to a query from the wireless device 612. The signature may also be authenticated by tracking one or more attributes of the backscatter-based communication device 616, such as the location of the backscatter-based communication device 616, to maintain authentication. In one aspect, the wireless device 614 may be configured to track the location of the backscatter-based communication device 616 to maintain authentication to the backscatter-based communication device 616. For example, the backscatter-based communication device 616 may send a location indicator (e.g., a zone ID, a GNSS location indicator) with a signal 617A, and if the location indicator received by the wireless device 614 moves a threshold distance or at least the threshold distance from the previous location indicator, the wireless device 614 may detect an error in the authentication of the signature. Since the backscatter-based communication device 616 may be configured to be stationary (e.g., attached to a surface), the threshold distance may be a lower value than the threshold distance for a mobile wireless device (such as a UE). In another example, the wireless device 614 may measure the RSRP of the signal 617A to estimate the distance of the backscatter-based communication device 616 from the wireless device 614. If the RSRP of the subsequently received signal differs from the RSRP of the previously received signal by a threshold amount or at least the threshold amount, the wireless device 614 may detect an error in the authentication of the signature. In response to detecting the error, the wireless device 614 may send a message to the backscatter-based communication device 616 or to the wireless device 612 indicating that an error has been detected.

[0104] In one aspect, the wireless device 612 may be configured to sign one or more unsigned transmissions to the backscatter-based communication device 616. An unsigned transmission may be a transmission with a signal. Signing one or more unsigned transmissions to the backscatter-based communication device 616 may enable the backscatter-based communication device 616 to verify whether the one or more unsigned transmissions are valid transmissions from the wireless device 612 or invalid transmissions from a fake device such as the fake wireless device 620. The wireless device 612 may be configured to generate a private key and a public key, and may send the public key to a device that will use the public key. For example, the wireless device 612 may broadcast the public key to the backscatter-based communication device 616 as a signal 613B and to the wireless device 614 as a signal 613A. The wireless device 612 may generate a signed transmission using the private key, and may send the signed transmission to the backscatter-based communication device 616. The signed transmission may be sent to a device that receives the unsigned transmission, such as the backscatter-based communication device 616 or the wireless device 614. In one aspect, the wireless device 612 may hash a signal, such as one or more commands and / or queries, and may then sign the hashed signal using a private key.

[0105] A device receiving the signed transmission from the wireless device 612, such as the backscatter-based communication device 616 or the wireless device 614, may check whether the signature is valid by using the public key previously received from the wireless device 612. In other words, the backscatter-based communication device 616 and / or the wireless device 614 may be configured to verify the signed transmission to determine whether the unsigned transmission is from the wireless device 612. In some aspects, the backscatter-based communication device 616 and the wireless device 614 may use the same public key to verify one or more transmissions from the wireless device 612. In other aspects, the backscatter-based communication device 616 and the wireless device 614 may use different public keys to verify one or more transmissions from the wireless device 612. In such an aspect, the wireless device 612 may send a first public key to the backscatter-based communication device 616, and may send a different second public key to the wireless device 614. The wireless device 612 may also send different signed transmissions to the backscatter-based communication device 616 and the wireless device 614, respectively, thereby enabling different authentication methods to authenticate the same set of unsigned transmissions at the backscatter-based communication device 616 and the wireless device 614, respectively.

[0106] In one aspect, the signed transmission may be multiplexed with the unsigned transmission. For example, the unsigned transmission may include a command or query to the backscatter-based communication device 616, and the signed transmission may be part of the command or query signed using a private key and multiplexed with the unsigned transmission. The multiplexed transmission may then be sent to the backscatter-based communication device 616 as a signal 613B. In one aspect, the wireless device 612 may be configured to send an unsigned transmission to the backscatter-based communication device 616, and after a period of time has passed, send a signed transmission to the backscatter-based communication device 616. The time period may be configured in a variety of ways, such as by RRC configuration or a previous transmission from the wireless device 612, such as a transmission including a public key. The backscatter-based communication device 616 may then verify that the unsigned transmission is valid by verifying that the signed transmission received by the backscatter-based communication device 616 a period of time after the backscatter-based communication device 616 received the unsigned transmission. In one aspect, the wireless device 612 may be configured to send a signature to the backscatter-based communication device 616 after a certain number of unsigned transmissions have been sent to the backscatter-based communication device 616, such as after five or ten unsigned transmissions. This may reduce the payload size of the signal 613B sent from the wireless device 612 to the backscatter-based communication device 616. In another aspect, the wireless device 612 may be configured to send a set of signatures to the backscatter-based communication device 616 after a certain number of unsigned transmissions have been sent to the backscatter-based communication device 616, wherein each signature is associated with a set of unsigned transmissions to be authenticated. The wireless device 612 may send the signature some time after the wireless device 612 has sent the number of unsigned transmissions.

[0107] In some aspects, the backscatter-based communication device 616 may be configured to request a signature from the wireless device 612. For example, in response to the backscatter-based communication device 616 receiving a threshold number of unsigned transmissions, or in response to the backscatter-based communication device 616 receiving an unsigned transmission without receiving a signature within a threshold amount of time, the backscatter-based communication device 616 may send a request for a signature to the wireless device 612 to verify one or more unsigned transmissions received by the backscatter-based communication device 616 before processing the one or more unsigned transmissions. The backscatter-based communication device 616 may use the amount of time to verify the signed transmission. The wireless device 612 may wait the amount of time after sending the signed transmission before sending another transmission to the backscatter-based communication device 616. In another aspect, the wireless device 612 may monitor incoming transmissions from the backscatter-based communication device 616, such as an acknowledgment (ACK) or a negative ACK (NACK) of a command sent to the backscatter-based communication device 616. The backscatter-based communication device 616 may respond to the authentication of the signature in a variety of ways. In one aspect, the backscatter based communication device 616 may not process the one or more unsigned transmissions until the signed transmissions have been verified. In one aspect, the backscatter based communication device 616 may send a verification of the one or more unsigned transmissions to the wireless device 612 upon verification of the signed transmission associated with the one or more unsigned transmissions. In one aspect, the backscatter based communication device 616 may send a verification of the one or more unsigned transmissions to the wireless device 612 upon receiving a request from the wireless device 612 to send the verification of the one or more unsigned transmissions.

[0108] The backscatter-based communication device 616 may send the wireless device 612 a capability to wait a threshold amount of time after sending a signed transmission before sending another transmission to the backscatter-based communication device 616. The capability may be, for example, an RFID capability. In some aspects, the wireless device 612 may request the backscatter-based communication device 616 the capability to configure authentication procedures. The capability may include, for example, the capability to authenticate unsigned transmissions (such as commands and / or queries), the amount of time to process a signed transmission, the type of signed transmission (e.g., multiplexed signed transmissions, signed transmissions sent a period of time after an unsigned transmission, signed transmissions sent after a certain number of unsigned transmissions), or the capability to authenticate signed transmissions in a certain type of manner (e.g., process one or more unsigned transmissions after authentication, send verification of one or more unsigned transmissions to the wireless device 612, send verification upon request by the wireless device 612). The capability may include one or more parameters of the capability. For example, the ability of the backscatter-based communications device 616 to authenticate signed transmissions may include a time period for processing signed transmissions, or the ability to send verifications of signed transmissions may include a time period after receiving one or more signed transmissions or a number of signed transmissions to be verified before sending the verifications.

[0109] In some aspects, the wireless device 614 may alternatively or additionally monitor unsigned transmissions and signatures sent by the wireless device 612 to the backscatter-based communication device 616 to verify the unsigned transmissions. If the wireless device 614 detects an error, the wireless device 614 may send an indication of the detected error to the wireless device 612 or to a network node (e.g., base station, gNB) serving the wireless device 612. In such aspects, the backscatter-based communication device 616 does not need to authenticate the transmissions from the wireless device 612. In response to receiving the indication of the detected error, the network node serving the wireless device 612 may transmit a transmission to the backscatter-based communication device 616 (directly or via the wireless device 612) to ignore the previous set of communications or to transmit communications with a higher security level (e.g., longer key). In another aspect, in response to receiving the indication of the detected error, the network node serving the wireless device 612 may send a kill password to the backscatter-based communication device 616 to stop communicating with the backscatter-based communication device 616, and send an access password to reestablish communication to the backscatter-based communication device 616. In another aspect, if the backscatter-based communication device 616 is part of a UE, in response to receiving the indication of the detected error, the network node serving the wireless device 612 may instruct the backscatter-based communication device 616 to use the primary radio of the UE instead of using backscatter-based communication.

[0110] Alternatively or additionally, the wireless device 612 and / or the wireless device 614 may be configured to authenticate one or more transmissions from the backscatter-based communication device 616, such as a backscattered transmission in response to a command or query from the wireless device 612. The authentication at the wireless device 612 or the wireless device 614 may be similar to the authentication at the backscatter-based communication device 616. For example, when the signal 617A is received, the authentication at the wireless device 612 or the wireless device 614 may be at the PHY layer to verify that the signal 617A is from the backscatter-based communication device 616 and not a fake wireless device, such as the fake backscatter-based communication device 618 that sent the signal 617B. The backscatter-based communication device 616 may send one or more unsigned transmissions in response to the command and / or query from the wireless device 612, and the private key and the public key may be used to enable the wireless device 614 to authenticate the transmission of the signal 617A. The backscatter-based communication device 616 may sign the command or a portion of the command to indicate that the command has been received and processed by the backscatter-based communication device 616. Based on the signature, the wireless device 612 or the wireless device 614 may determine that the backscatter-based communication device 616 is authenticated. If the wireless device 614 detects an error, the wireless device 614 may send an indication of the detected error to the backscatter-based communication device 616, to the wireless device 612, or to a network node serving the wireless device 612. In some aspects, the backscatter-based communication device 616 may send the signature in response to receiving a request to send the signature from the wireless device 612 or the wireless device 614. In other words, the wireless device 612 or the wireless device 614 may seek to authenticate the backscatter-based communication device 616 by sending a request for a signed transmission to the backscatter-based communication device 616.

[0111] In some aspects, verification may also include monitoring parameters of one or more of an unsigned transmission or a signed transmission from the backscatter-based communication device 616. In one aspect, the backscatter-based communication device 616 may be configured to add a time offset or a frequency offset to read the signal 613B from the wireless device 612 or to send the signal 617A to the wireless device 614. In other words, the backscatter-based communication device 616 may be configured to add a time offset or a frequency offset to authenticate a command received by the backscatter-based communication device 616 or a response to a command sent by the backscatter-based communication device 616, thereby maintaining authenticity. The time offset or the frequency offset may be indicated by the wireless device 612 to the backscatter-based communication device 616, or may be RRC configured. On the other hand, the codebook for the sequence or channel decoding of the signal 617A may be used to authenticate the backscatter-based communication device 616, because the codebook may specify when the backscatter-based communication device 616 turns on the reflection when sending the information bit "1" and turns off the reflection when sending the information bit "0". The codebook may be configured by the wireless device 612, by a network node, or may be provided as a capability of the backscatter-based communication device 616. In another aspect, the backscatter-based communication device 616 may be configured to add frequency and / or phase to the signal 617A based on a configuration from the wireless device 612. In another aspect, the backscatter-based communication device 616 may be configured to change the angle of departure (AoD) of the signal 617A based on a configuration from the wireless device 612. In another aspect, a location indicator of the backscatter-based communication device 616 may be used to authenticate the signal 617A. The location indicator may be, for example, a region ID, a GNSS location indicator, or a measured RSRP of the signal 617A.

[0112] Figure 6B 650 is a diagram illustrating an example of a monostatic wireless communication system having a wireless device 612 configured to transmit a signal 613B to a backscatter-based communication device 616, which may then transmit a signal 619A back to the wireless device 612. The wireless device 612 and the backscatter-based communication device 616 may operate in a full-duplex (FD) mode to transmit and receive signals 613B and 619A to each other. The signal 613B may also be received by a fake backscatter-based communication device 618 as a signal 613C, and may also be received by a fake wireless device 620 as a signal 613D.

[0113] The fake backscatter-based communication device 618 may attempt to trick the wireless device 612 into thinking it is the backscatter-based communication device 616 by sending a signal 619B. If the backscatter-based communication device 616 has limited security, such as only having a password that is sent from the wireless device 612 to the backscatter-based communication device 616 along with a command or query, the fake backscatter-based communication device 618 may easily trick the wireless device 612 into thinking it is the backscatter-based communication device 616 by sending a signal 619B.

[0114] The fake wireless device 620 may attempt to trick the backscatter-based communication device 616 into thinking it is the wireless device 612 by sending a signal 613E. If the backscatter-based communication device 616 has limited security, such as only having a password sent from the wireless device 612 to the backscatter-based communication device 616 along with a command or query, the fake wireless device 620 may easily trick the backscatter-based communication device 616 into thinking it is the wireless device 612 by sending a signal 613E that spoofs a signal 613D. The fake wireless device 620 may be able to derive the password to the backscatter-based communication device 616 by analyzing the signal 613D, and may use the password derived from the signal 613D to replace its own command or query in the signal 613E.

[0115] The wireless device 612 and the backscatter-based communication device 616 may be configured to use a higher level of security, as described above, to prevent fake devices, such as the fake wireless device 620 or the fake backscatter-based communication device 618, from successfully impersonating signals from the wireless device 612 and the backscatter-based communication device 616, respectively. For example, the backscatter-based communication device 616 may be configured to authenticate one or more signed transmissions from the wireless device 612. In response to detecting an error, the backscatter-based communication device 616 may send an indication of the error to the wireless device 612. Similarly, the wireless device 612 may be configured to authenticate one or more signed transmissions from the backscatter-based communication device 616. In response to detecting an error, the wireless device 612 may send an indication of the error to the backscatter-based communication device 616.

[0116] The wireless device 612 may be configured to sign any portion of an unsigned transmission, such as one or more commands or queries, one or more portions of one or more commands or queries (e.g., the first five bits of a command or query set), a backscattered payload of a backscatter-based communication device 616, one or more signaled IDs (e.g., an ID of a UE, an ID of a base station), or a timestamp. In one aspect, a commitment scheme for signing an unsigned transmission may use multiple parameters of a public key, such as parameters p, g, and h, which may be shared at any suitable layer, such as a first network communication layer (e.g., a PHY layer), a second network communication layer (e.g., a MAC layer), or a third network communication layer (e.g., an RLC layer). Parameter p may be a large prime number, parameter g may be a number in [2, p-1], and parameter h may be a number in [2, p-1] such that log g h unknown. Wireless device 612 can provide g ID h r mod p as a bit commitment to the backscatter-based communication device 616 or a command / query to the backscatter-based communication device 616. In one aspect, the ID may be defined by the wireless device 612 as a scrambled ID associated with the second network communication layer or the third communication layer, or may be a combination of such a scrambled ID with a timestamp, a number of command bits for the backscatter-based communication device 616, a number of payload bits for the backscatter-based communication device 616, or a combination thereof. The parameter r may be a random number. The bit commitment g may be sent via any suitable layer (e.g., the first network communication layer, the second network communication layer, or the third network communication layer). ID h r mod p is provided to the backscatter-based communication device 616 or wireless device 614, and the wireless device 612 may broadcast the value of the parameter r as a public key. The backscatter-based communication device 616 or wireless device 614 may verify the committed value after receiving the channel and parameter r. Such a commitment scheme may be used to verify a signed packet without opening the packet. In other words, the commitment scheme may utilize zero-knowledge proof (ZKP) technology based on the intractability of the discrete logarithm problem.

[0117] In one aspect, the wireless device 612 may have a private key x and a public value y=g x mod p. The wireless device 612 may select a random integer for v and may calculate t=g v The wireless device 612 may calculate c=H(g,y,t,ID), where H() may be a cryptographic hash function and ID may be defined by the wireless device 612, as explained above. The wireless device 612 may calculate r=v-cx, and the proof may be the pair (t,r); (g v, v-cx). In response, the backscatter-based communication device 616 or the wireless device 614 may calculate c=H(g,y,t,ID) and determine whether t=g r g xc =g v to verify the signed transmission. This commitment scheme can be flexible for secure operation. The wireless device 612 can calculate the value of c while a dedicated function that holds a secret value x that is never read can be used to calculate (t, r). In some embodiments, a more efficient signature scheme can be used, such as the Boneh-Lynn-Shacham (BLS) signature based on bilinear pairings on EC that can use 256 bits.

[0118] In another embodiment, a Time Efficient Stream Loss Tolerant Algorithm (TESLA) commitment scheme with reverse hash chaining may be used. The wireless device 612 may create a key hash chain by using repeated hashing of the root key. In other words, K i+1 =H(K i ), where 1≤i≤n and H() may be a cryptographic hash function. The wireless device 612 may publish one or more hash values ​​or public keys in the reverse order of this calculation. For example, K(t=0)=K n ,K(t=1)=K n-1 ,…,K(t=n-1)=K1. In other words, if the wireless device 612 discloses two keys, one for the payload of the backscatter-based communication device 616 and one for the command bits of the backscatter-based communication device 616, the wireless device 612 may assign one or more portions of these commands to K i+1 and assigns the payload of the backscatter-based communication device 616 to K i A command may have a key derived based on a key hash chain so that bits of the command can be compared later with bits of the payload. This key may be provided later and can be verified using a previously provided key. For example, the previous key K(t=i-1)=H(K(t=i)), and K n-i+1 =H(K n-1 ). The first key value may need to be authenticated to the wireless device 612 (e.g., during registration or authentication server (AS) setup).

[0119] In one aspect, the backscatter based communication device 616 may send the tag capabilities to the wireless device 612 or the wireless device 614 as part of an initial access procedure, e.g., indicated using one or more initial access messages. In one aspect, the backscatter based communication device 616 may send the tag capabilities as a response to a capability query from the wireless device 612. In one aspect, the backscatter based communication device 616 may send the tag capabilities using at least one of a level 1 indicator, a level 2 indicator, or a level 3 indicator after an RRC connection with a network entity. In one aspect, the backscatter based communication device 616 may send the tag capabilities as part of a user assistance information (UAI) message.

[0120] exist Figure 7 In the connection flow chart 700, there are respectively Fig. 6A 6. The wireless device 702, the backscatter-based communication device 704, and the wireless device 706 are similar to the wireless device 612, the backscatter-based communication device 616, and the wireless device 614 in FIG. 712. At 712, the wireless device 702 can configure one or more transmissions to the backscatter-based communication device 704.

[0121] In an aspect, the wireless device 702 may configure one or more public keys and private keys for use in transmissions to the backscatter-based communication device 704. The wireless device 702 may send the one or more public keys as one or more transmission configurations 714 to the backscatter-based communication device 704. The wireless device 702 may send the one or more public keys as one or more transmission configurations 714 to the wireless device 706. In an aspect, the wireless device 702 may allocate one or more resources to the backscatter-based communication device 704, such as allocating frequency domain or time domain for one or more transmissions of the backscatter-based communication device 704. The wireless device 702 may send the one or more allocated resources or allocations to the wireless device 706. The wireless device 706 may use these allocations to monitor one or more transmissions from the wireless device 702, such as one or more unsigned transmissions 720 or one or more signed transmissions 726.

[0122] At 713, the backscatter based communication device 704 may configure one or more transmissions to the wireless device 706. In one aspect, the backscatter based communication device 704 may configure one or more public keys and private keys for use in the transmissions to the wireless device 706. The backscatter based communication device 704 may transmit the one or more public keys to the wireless device 706 as one or more transmission configurations 716.

[0123] At 718, the wireless device 702 may generate one or more unsigned transmissions 720. The one or more unsigned transmissions 720 may include one or more commands or one or more queries to the backscatter-based communication device 704. The one or more unsigned transmissions 720 may be encrypted, for example, using a public key or a symmetric key. The wireless device 702 may send the one or more unsigned transmissions 720 to the backscatter-based communication device 704. The wireless device 702 may send the one or more unsigned transmissions 720 to the wireless device 706.

[0124] At 724, the wireless device 702 may generate a signed transmission. The wireless device 702 may be configured to send one or more signed transmissions 726 to authenticate one or more unsigned transmissions 720, such as commands or queries, to the backscatter-based communication device 704. The signed transmission may correspond to the unsigned transmission, the signed transmission may correspond to a set of unsigned transmissions, and the set of signed transmissions may correspond to a set of unsigned transmissions, wherein each signed transmission in the set of signed transmissions corresponds to the set of unsigned transmissions. The wireless device 702 may send the one or more signed transmissions 726 to the backscatter-based communication device 704. The wireless device 702 may send the one or more signed transmissions 726 to the wireless device 706. The backscatter-based communication device 704 may verify whether the wireless device 702 is valid based on the one or more signed transmissions 726. In one aspect, the one or more signed transmissions 726 may include a set of bits sent to the backscatter-based communication device 704 as part of a command or query (e.g., part of the one or more unsigned transmissions 720) that is multiplexed into the payload of the backscatter-based communication device 704. In other words, the one or more signed transmissions 726 and one of the one or more unsigned transmissions 720 may be multiplexed with each other. In one aspect, the one or more signed transmissions 726 may include a set of bits sent to the backscatter-based communication device 704 as a separate signal from the one or more unsigned transmissions 720 after a certain period of time from the transmission of the unsigned transmission. In one aspect, the one or more signed transmissions 726 may include a set of bits sent to the backscatter-based communication device 704 as a signature after a certain number of commands are transmitted to the backscatter-based communication device 704 to reduce the total payload size of all transmissions from the wireless device 702 to the backscatter-based communication device 704.

[0125] The one or more signed transmissions 726 may be signed using the private key generated at 712. The wireless device 702 may hash the one or more unsigned transmissions 720 and may sign the hash values ​​using the private key. The one or more signed transmissions 726 may be sent from the wireless device 702 to the backscatter-based communication device 704.

[0126] At 728, the backscatter based communication device 704 may use the public key to check whether the signature is valid, and if the signature of the one or more signed transmissions 726 is invalid, any commands or queries of the one or more unsigned transmissions 720 associated with the one or more signed transmissions 726 may not be processed at 730. The backscatter based communication device 704 may send a request for a signed transmission 722 to the wireless device 702. In one aspect, the backscatter based communication device 704 may send a request for a signed transmission 722 to the wireless device 702 if the backscatter based communication device 704 receives a certain number of unsigned transmissions without receiving a signed transmission, or receives an unsigned transmission and does not receive a signed transmission within a threshold time period.

[0127] The one or more signed transmissions 726 may be sent to the wireless device 706. At 734, the wireless device 706 may check whether the signature of the one or more signed transmissions 726 is valid using the public key received in the one or more transmission configurations 714, and may send a message of one or more detected errors 736 to the wireless device 702 or to the backscatter based communication device 704 if the wireless device 706 determines that the signature is invalid.

[0128] At 730, the backscatter-based communication device 704 may process the one or more unsigned transmissions 720 in response to verifying the one or more signed transmissions 726. For example, the backscatter-based communication device 704 may process a command, or may process a query. In response, the backscatter-based communication device 704 may send one or more backscattered transmissions 732, such as a response to the query, to the wireless device 706. The one or more backscattered transmissions 732 may be a combination of the response and a continuous wave signal received from the wireless device 702.

[0129] In one aspect, the backscatter-based communication device 704 may be a passive tag that uses power received from a signal to power its processor, such as an integrated circuit (IC). In another aspect, the backscatter-based communication device 704 may be an active tag having a battery that the backscatter-based communication device 704 may use to power the processor. In another aspect, the backscatter-based communication device 704 may be a tag radio of a UE. Such a UE may have multiple radios, such as an LTE radio and an NR radio in a multi-radio (MR) mode. Such a UE may use the tag radio (also referred to as a backscatter-based communication device 704) in a low power state or sleep mode. Such a UE may receive an indication as part of one or more transmit configurations 714 from a wireless device 702 to operate the tag radio of the backscatter-based communication device 704. The indication may be sent in response to receiving an indication of one or more detected errors 736. Such a UE may generate and store public and private keys during an MR-on mode, and may use these keys for backscatter-based communications during an MR-off mode. During MR on mode, the UE may quickly encrypt or sign transmissions and may perform backscatter based communications using the backscatter based communication device 704. When the UE is in MR on mode, the UE may track the location or zone ID of the UE, or perform positioning measurements to help track location information of the backscatter based communication device 704. Such a UE may indicate the tag capability of the backscatter based communication device 704, or may indicate the tag capability in the UE capabilities it provides to a network entity, such as the wireless device 702. The tag capability may include an indication of the ability of the backscatter based communication device 704 to generate keys or apply the proposed method when MR is turned off at the UE or when MR is not used at the UE.

[0130] Figure 8 800 is a flow chart of a method of wireless communication. The method may be performed by a first wireless device (e.g., UE 104; wireless device 350, wireless device 512, wireless device 514, wireless device 612, wireless device 614, wireless device 702, wireless device 706; apparatus 1104). At 802, the first wireless device may send a first public key to a backscatter-based communication device. For example, 802 may be performed by Figure 7 The wireless device 702 in the embodiment may send the first public key as one or more transmission configurations 714 to the backscatter-based communication device 704. In addition, 802 may be performed by Fig.11 Component 198 in device 1104 in is executed.

[0131] At 804, the first wireless device may send an unsigned transmission to the backscatter-based communication device. For example, 804 may be performed by Figure 7 802 may be performed by a wireless device 702 in the embodiment of the present invention, which may send one or more unsigned transmissions 720 to a backscatter-based communication device 704. In addition, 802 may be performed by a wireless device 702 in the embodiment of the present invention, which may send one or more unsigned transmissions 720 to a backscatter-based communication device 704. Fig.11 Component 198 in device 1104 in is executed.

[0132] At 806, the first wireless device may send a signed transmission to the backscatter-based communication device. The signed transmission may be signed based on the first private key. For example, 806 may be performed by Figure 7 , which may be performed by a wireless device 702 in the embodiment of the present invention, the wireless device may send one or more signed transmissions 726 to a backscatter-based communication device 704. In addition, 802 may be performed by Fig.11 Component 198 in device 1104 in is executed.

[0133] Fig. 9 900 is a flow chart of a method of wireless communication. The method may be performed by a first wireless device (e.g., UE 104; wireless device 350, wireless device 512, wireless device 514, wireless device 612, wireless device 614, wireless device 702, wireless device 706; apparatus 1104). At 902, the first wireless device may receive a configuration of a backscatter-based communication device from a first wireless device. For example, 902 may be performed by Figure 7 706 in the wireless device 706, which may receive the configuration of one or more transmission configurations 714 of the backscatter-based communication device 704 from the wireless device 702. In addition, 902 may be performed by Fig.11 Component 199 in device 1104 in is executed.

[0134] At 904, the first wireless device may receive a backscattered signal from a backscatter-based communication device. For example, 904 may be performed by Figure 7 706 in the wireless device, which may receive one or more backscattered transmissions 732 from the backscatter-based communication device 704. In addition, 902 may be performed by Fig.11 Component 199 in device 1104 in is executed.

[0135] At 906, the first wireless device may send a first detected error to the first wireless device in response to detecting an error in the backscattered signal according to the configuration of the backscatter-based communication device. For example, 906 may be performed by Figure 7, which may be performed by the wireless device 706 in the embodiment, the wireless device may send one or more detected errors 736 to the wireless device 702 in response to detecting an error in one or more backscattered transmissions 732 at 734. The error may be detected based on one or more transmission configurations 714. In addition, 902 may be performed by Fig.11 Component 199 in device 1104 in is executed.

[0136] Fig.10 1000 is a flow chart of a method of wireless communication. The method may be performed by a backscatter-based communication device (e.g., backscatter-based communication device 106, 310, 516, 616, 704). At 1002, the backscatter-based communication device may receive a first public key from a first wireless device. For example, 1002 may be performed by Figure 7 The backscatter-based communication device 704 in the embodiment may receive the first public key as one or more transmission configurations 714 from the wireless device 702. In addition, 1002 may be performed by Figure 3 The component 197 in the backscatter-based communication device 310 is executed.

[0137] At 1004, the backscatter-based communication device may receive an unsigned transmission from the first wireless device. For example, 1004 may be performed by Figure 7 The backscatter-based communication device 704 in the embodiment may receive one or more unsigned transmissions 720 from the wireless device 702. In addition, 1002 may be performed by Figure 3 The component 197 in the backscatter-based communication device 310 is executed.

[0138] At 1006, the backscatter-based communication device may receive a signed transmission from the first wireless device. For example, 1006 may be performed by Figure 7 The backscatter-based communication device 704 in the embodiment may receive one or more signed transmissions 726 from the wireless device 702. In addition, 1002 may be performed by Figure 3 The component 197 in the backscatter-based communication device 310 is executed.

[0139] At 1008, the backscatter-based communication device may process the unsigned transmission in response to verifying the signed transmission based on the first public key. For example, 1008 may be performed by Figure 7 The backscatter-based communication device 704 in the embodiment may process the unsigned transmission at 730 in response to verifying the signed transmission at 728 based on the first public key received in the one or more transmission configurations 714. In addition, 1002 may be performed by Figure 3The component 197 in the backscatter-based communication device 310 is executed.

[0140] Fig.111100 is an example of a hardware implementation of an example device 1104. The device 1104 may be a UE, a component of a UE, or may implement UE functionality. In some aspects, the device 1104 may include a cellular baseband processor 1124 (also referred to as a modem) coupled to one or more transceivers 1122 (e.g., a cellular RF transceiver). The cellular baseband processor 1124 may include on-chip memory 1124'. In some aspects, the device 1104 may also include one or more subscriber identity module (SIM) cards 1120 and an application processor 1106 coupled to a secure digital (SD) card 1108 and a screen 1110. The application processor 1106 may include on-chip memory 1106'. In some aspects, the device 1104 may also include a Bluetooth module 1112, a WLAN module 1114, an SPS module 1116 (e.g., a GNSS module), one or more sensor modules 1118 (e.g., an atmospheric pressure sensor / altimeter; a motion sensor such as an inertial measurement unit (IMU), a gyroscope, and / or an accelerometer; light detection and ranging (LIDAR), radio-aided detection and ranging (RADAR), sound navigation and ranging (SONAR), a magnetometer, audio, and / or other technologies for positioning), an additional memory module 1126, a power source 1130, and / or a camera 1132. The Bluetooth module 1112, the WLAN module 1114, and the SPS module 1116 may include an on-chip transceiver (TRX) (or in some cases, only a receiver (Rx)). The Bluetooth module 1112, the WLAN module 1114, and the SPS module 1116 may include their own dedicated antennas and / or communicate using an antenna 1180. The cellular baseband processor 1124 communicates with the UE 104 and / or with the RU associated with the network entity 1102 through the transceiver 1122 via one or more antennas 1180. The cellular baseband processor 1124 and the application processor 1106 may each include a computer-readable medium / memory 1124', 1106', respectively. The additional memory module 1126 may also be considered as a computer-readable medium / memory. Each computer-readable medium / memory 1124', 1106', 1126 may be non-transitory. The cellular baseband processor 1124 and the application processor 1106 are each responsible for general processing, including executing software stored on a computer-readable medium / memory. The software, when executed by the cellular baseband processor 1124 / application processor 1106, enables the cellular baseband processor 1124 / application processor 1106 to perform the various functions described above. The computer-readable medium / memory can also be used to store data manipulated by the cellular baseband processor 1124 / application processor 1106 when executing the software.The cellular baseband processor 1124 / application processor 1106 may be a component of the wireless device 350 and may include the memory 360 and / or at least one of the Tx processor 368, the Rx processor 356, and the controller / processor 359. In one configuration, the apparatus 1104 may be a processor chip (modem and / or application) and include only the cellular baseband processor 1124 and / or the application processor 1106, and in another configuration, the apparatus 1104 may be the entire UE (e.g., see. Figure 3 The wireless device 350) and includes additional modules of the device 1104.

[0141] As discussed above, component 198 is configured to send a first public key to a backscatter-based communication device. Component 198 may be configured to send an unsigned transmission to a backscatter-based communication device. Component 198 may be configured to send a signed transmission to a backscatter-based communication device. Component 198 may be within the cellular baseband processor 1124, the application processor 1106, or within both the cellular baseband processor 1124 and the application processor 1106. Component 198 may be one or more hardware components specifically configured to perform the process / algorithm, implemented by one or more processors configured to perform the process / algorithm, stored in a computer-readable medium for implementation by one or more processors, or some combination thereof. As shown, the device 1104 may include a variety of components configured for various functions. In one configuration, the device 1104, in particular the cellular baseband processor 1124 and / or the application processor 1106, includes a component for sending a first public key to a backscatter-based communication device. The device 1104 may include a component for sending an unsigned transmission to a backscatter-based communication device. The apparatus 1104 may include a component for sending a signed transmission to a backscatter-based communication device. The apparatus 1104 may include a component for signing a portion of an unsigned transmission to generate a signed transmission. The apparatus 1104 may include a component for multiplexing the signed transmission with the unsigned transmission to generate a payload for the backscatter-based communication device. The apparatus 1104 may include a component for sending the unsigned transmission and sending the signed transmission by sending the payload to the backscatter-based communication device. The apparatus 1104 may include a component for encrypting the unsigned transmission using at least one of a second public key or a first symmetric key. The apparatus 1104 may include a component for hashing a portion of the unsigned transmission. The apparatus 1104 may include a component for signing a hashed portion of the unsigned transmission to generate a signed transmission. The apparatus 1104 may include a component for signing a signal that does not include a portion of the unsigned transmission to generate a signed transmission. The apparatus 1104 may include a component for sending a signed transmission by sending a signed transmission after a certain period of time from sending the unsigned transmission. The apparatus 1104 may include means for sending a signed transmission by sending a signed transmission after a plurality of unsigned transmissions have been sent to a backscatter-based communication device. The apparatus 1104 may include means for receiving a request for a signed transmission from a backscatter-based communication device. The apparatus 1104 may include means for sending a signed transmission in response to the request for a signed transmission. The means may be a component 198 of the apparatus 1104 configured to perform the functions recited by the means. As described above, the apparatus 1104 may include a Tx processor 368, an Rx processor 356, and a controller / processor 359.Thus, in one configuration, the components may be the Tx processor 368, the Rx processor 356, and the controller / processor 359 configured to perform the functions recited by the components.

[0142] As discussed above, component 199 is configured to receive a configuration of a backscatter-based communication device from a first wireless device. Component 199 may be configured to receive a backscattered signal from a backscatter-based communication device. Component 199 may be configured to send a first detected error to the first wireless device in response to detecting an error in the backscattered signal according to the configuration of the backscatter-based communication device. Component 199 may be within the cellular baseband processor 1124, the application processor 1106, or within both the cellular baseband processor 1124 and the application processor 1106. Component 199 may be one or more hardware components specifically configured to perform the process / algorithm, implemented by one or more processors configured to perform the process / algorithm, stored in a computer-readable medium so as to be implemented by one or more processors, or some combination thereof. As shown, the device 1104 may include a variety of components configured for various functions. In one configuration, the device 1104, in particular the cellular baseband processor 1124 and / or the application processor 1106, includes a component for receiving a configuration of a backscatter-based communication device from a first wireless device. The apparatus 1104 may include means for receiving a backscattered signal from a backscatter-based communication device. The apparatus 1104 may include means for sending a first detected error to a first wireless device in response to detecting an error in the backscattered signal according to a configuration of the backscatter-based communication device. The apparatus 1104 may include means for receiving a first public key from the first wireless device. The apparatus 1104 may include means for receiving a signed transmission from the first wireless device. The apparatus 1104 may include means for sending a second detected error to the first wireless device in response to detecting an error in the signed transmission based on the first public key. The apparatus 1104 may include means for receiving a second public key from the backscatter-based communication device. The apparatus 1104 may include means for sending a second detected error to the first wireless device in response to detecting an error in the signature based on the second public key. The device 1104 may include a component for detecting an error in the backscattered signal by detecting the error in the backscattered signal based on at least one of the following: (a) a time domain offset applied to the backscattered signal, (b) a frequency domain offset applied to the backscattered signal, (c) a codebook applied to the backscattered signal, (d) an angle of departure (AoD) offset applied to the backscattered signal, or (e) a location indicator associated with the backscattered signal. The component may be a component 199 of the device 1104 configured to perform the functions recited by the component. As described above, the device 1104 may include a Tx processor 368, an Rx processor 356, and a controller / processor 359. Therefore, in one configuration, the component may be a Tx processor 368, an Rx processor 356, and a controller / processor 359 configured to perform the functions recited by the component.

[0143] As discussed above, Figure 3Component 197 in the can be configured to receive a first public key from a first wireless device. Component 197 can be configured to receive an unsigned transmission from the first wireless device. Component 197 can be configured to receive a signed transmission from the first wireless device. Component 197 can be configured to process the unsigned transmission in response to verifying the signed transmission based on the first public key. Component 197 can be within the Tx processor 316, the Rx processor 370, or within both the Tx processor 316 and the Rx processor 370. Component 197 can be one or more hardware components specifically configured to perform the process / algorithm, implemented by one or more processors configured to perform the process / algorithm, stored in a computer-readable medium so as to be implemented by one or more processors, or some combination thereof. As shown, the backscatter-based communication device 310 may include a variety of components configured for various functions. In one configuration, the backscatter-based communication device 310, in particular the Tx processor 316 and / or the Rx processor 370, may include a component for receiving a first public key from a first wireless device. The backscatter-based communication device 310 may include a component for receiving an unsigned transmission from the first wireless device. The backscatter-based communication device 310 may include a component for receiving a signed transmission from the first wireless device. The backscatter-based communication device 310 may include a component for processing the unsigned transmission in response to verifying the signed transmission based on the first public key. The backscatter-based communication device 310 may include a component for sending a verification of the signed transmission in response to verifying the signed transmission based on the first public key. The backscatter-based communication device 310 may include a component for receiving a signed set of transmissions from the first wireless device. The backscatter-based communication device 310 may include a component for sending a verification of the signed transmission by sending a second verification of a plurality of signed transmissions, the plurality of signed transmissions including the signed transmission and the signed set of transmissions. The backscatter-based communication device 310 may include a component for decoding the unsigned transmission using at least one of the second private key or the first symmetric key. The backscatter-based communication device 310 may include a component for sending RFID capabilities. The backscatter-based communication device 310 may include means for sending a request for a signed transmission to the first wireless device. The backscatter-based communication device 310 may include means for processing an unsigned transmission by sending a response to a query for an unsigned transmission. The backscatter-based communication device 310 may include means for sending a second public key. The backscatter-based communication device 310 may include means for signing a response to the query based on a second private key before sending the response to the query. The backscatter-based communication device 310 may include means for processing an unsigned transmission, which may include backscattering a command for an unsigned transmission. The backscatter-based communication device 310 may include means for sending a second public key.The backscatter-based communication device 310 may include means for signing an unsigned transmitted command based on a second private key prior to backscattering the command. The backscatter-based communication device 310 may include means for verifying a signed transmission by verifying the signed transmission based on at least one of: (a) a time domain offset applied to the signed transmission, (b) a frequency domain offset applied to the signed transmission, or (c) a codebook applied to the signed transmission. The means may be a component 197 of the backscatter-based communication device 310 configured to perform the functions recited by the means.

[0144] It should be understood that the specific order or hierarchy of the blocks in the disclosed process / flowchart is only an illustration of the exemplary method. It should be understood that the specific order or hierarchy of the blocks in the process / flowchart can be rearranged based on design preferences. In addition, some blocks can be combined or omitted. The attached method claims provide the elements of each block in a sample order, but are not limited to the specific order or hierarchy provided.

[0145] The foregoing description is provided to enable any person skilled in the art to practice the various aspects described herein. Various modifications to these aspects will be apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects. Therefore, the claims are not limited to the various aspects described herein, but should be given the full scope consistent with the language claims. Unless otherwise specified, reference to an element in the singular form does not mean "one and only one", but "one or more". Terms such as "if", "when ..." and "at ..." do not mean a direct temporal relationship or reaction. That is, these phrases, such as "when ...", do not mean an instant action in response to the occurrence of an action or during the occurrence of an action, but only mean that if the condition is met, the action will occur without a specific or instantaneous time constraint to cause the action to occur. The word "exemplary" is used herein to mean "used as an example, instance, or illustration". Any aspect described herein as "exemplary" is not necessarily interpreted as being preferred or having an advantage over other aspects. Unless otherwise specified, the term "some" refers to one or more. Combinations such as "at least one of A, B, or C", "one or more of A, B, or C", "at least one of A, B and C", "one or more of A, B, and C", and "A, B, C, or any combination thereof" include any combination of A, B, and / or C, which may include multiple A, multiple B, or multiple C. Specifically, combinations such as "at least one of A, B, or C", "one or more of A, B, or C", "at least one of A, B, and C", "one or more of A, B, and C", and "A, B, C, or any combination thereof" may be only A, only B, only C, A and B, A and C, B and C, or A and B and C, where any such combination may contain one or more members of A, B, or C. A set should be interpreted as a set of elements, where the number of elements is one or more. Thus, for a set of X, X will include one or more elements. If the first device receives data from the second device or sends data to the second device, data may be directly received / sent between the first device and the second device, or indirectly received / sent between the first device and the second device through a collection of devices. All structural and functional equivalents of the elements throughout the various aspects described in this disclosure that are known or will later be known to a person of ordinary skill in the art are expressly incorporated herein by reference and are covered by the claims. In addition, nothing disclosed herein is intended to be dedicated to the public, regardless of whether such disclosure is explicitly stated in the claims. Words such as "module", "mechanism", "element", "device" cannot replace the word "component". Therefore, no claim element will be understood as a component plus function unless the element is explicitly recorded using the phrase "component for..."

[0146] As used herein, the phrase "based on" should not be interpreted as referring to a closed set of information, one or more conditions, one or more factors, etc. In other words, the phrase "based on A" (where "A" can be information, a condition, a factor, etc.) should be interpreted as "based at least on A" unless specifically stated differently.

[0147] A device configured to "output" data (such as, transmit, signal or message) may, for example, transmit the data with a transceiver, or may transmit the data to a device that transmits the data. A device configured to "obtain" data (such as, transmit, signal or message) may, for example, receive the data with a transceiver, or may obtain the data from a device that receives the data.

[0148] The following aspects are merely illustrative and may be combined with other aspects or teachings described herein without limitation.

[0149] Aspect 1 is a method of wireless communication at a UE, wherein the method may include sending a first public key to a backscatter-based communication device. The method may include sending an unsigned transmission to the backscatter-based communication device. The method may include sending a signed transmission to the backscatter-based communication device. The signed transmission may be signed based on a first private key.

[0150] Aspect 2 is a method according to aspect 1, wherein the method may include signing a portion of the unsigned transmission to generate the signed transmission.

[0151] Aspect 3 is a method according to aspect 2, wherein the method may include multiplexing the signed transmission with the unsigned transmission to generate a payload for the backscatter-based communication device. Sending the unsigned transmission and sending the signed transmission may include sending the payload to the backscatter-based communication device.

[0152] Aspect 4 is a method according to any one of aspects 1 to 3, wherein the method may include encrypting the unsigned transmission using at least one of the second public key or the first symmetric key.

[0153] Aspect 5 is a method according to any one of aspects 1 to 4, wherein the method may include hashing a portion of the unsigned transmission. The method may include signing the hashed portion of the unsigned transmission to generate the signed transmission.

[0154] Aspect 6 is a method according to any one of aspects 1 to 5, wherein the method may include signing a signal excluding a portion of the unsigned transmission to generate the signed transmission.

[0155] Aspect 7 is a method according to aspect 6, wherein sending the signed transmission may include sending the signed transmission after a certain period of time from sending the unsigned transmission.

[0156] Aspect 8 is a method according to any one of aspects 1 to 7, wherein sending the signed transmission may include sending the signed transmission after a plurality of unsigned transmissions have been sent to the backscatter-based communication device. The plurality of unsigned transmissions may include the unsigned transmission.

[0157] Aspect 9 is a method according to any one of aspects 1 to 8, wherein the method may include receiving a request for transmission of the signature from the backscatter-based communication device. The transmission of the signature may be responsive to the request for transmission of the signature.

[0158] Aspect 10 is a method of communicating at a second wireless device, wherein the method may include receiving a configuration of a backscatter-based communication device from a first wireless device. The method may include receiving a backscattered signal from the backscatter-based communication device. The method may include sending a first detected error to the first wireless device in response to detecting an error in the backscattered signal according to the configuration of the backscatter-based communication device.

[0159] Aspect 11 is a method according to aspect 10, wherein the method may include receiving a first public key from the first wireless device. The method may include receiving a signed transmission from the first wireless device. The method may include sending a second detected error to the first wireless device in response to detecting an error in the signed transmission based on the first public key.

[0160] Aspect 12 is a method according to any one of aspects 10 to 11, wherein the method may include receiving a second public key from the backscatter-based communication device. The backscattered signal may include a signature. The method may include sending a second detected error to the first wireless device in response to detecting an error in the signature based on the second public key.

[0161] Aspect 13 is a method according to any one of Aspects 10 to 12, wherein detecting the error in the backscattered signal may also include detecting the error in the backscattered signal based on at least one of the following: (a) a time domain offset applied to the backscattered signal, (b) a frequency domain offset applied to the backscattered signal, (c) a codebook applied to the backscattered signal, (d) an angle of departure (AoD) offset applied to the backscattered signal, or (e) a location indicator associated with the backscattered signal.

[0162] Aspect 14 is a method of communicating at a backscatter-based communication device, wherein the method may include receiving a first public key from a first wireless device. The method may include receiving an unsigned transmission from the first wireless device. The method may include receiving a signed transmission from the first wireless device. The method may include processing the unsigned transmission in response to verifying the signed transmission based on the first public key.

[0163] Aspect 15 is a method according to aspect 14, wherein the method may include sending a verification of the sending of the signature in response to verifying the sending of the signature based on the first public key.

[0164] Aspect 16 is a method according to aspect 15, wherein the method may include receiving a signed set of transmissions from the first wireless device. Sending the verification of the signed transmission may include sending a second verification of a plurality of signed transmissions, the plurality of signed transmissions including the signed transmission and the signed set of transmissions.

[0165] Aspect 17 is a method according to any one of aspects 14 to 16, wherein the method may include decoding the unsigned transmission using at least one of the second private key or the first symmetric key.

[0166] Aspect 18 is a method according to any one of aspects 1 to 17, wherein the method may include sending a radio frequency identification (RFID) capability. The RFID capability may include a time period between receiving a signed set of transmissions and sending a verification of the signed set of transmissions.

[0167] Aspect 19 is a method according to any one of aspects 14 to 18, wherein the method may include sending a request for the signed transmission to the first wireless device.

[0168] Aspect 20 is a method according to any one of aspects 14 to 19, wherein processing the unsigned transmission may include sending a response to a query of the unsigned transmission.

[0169] Aspect 21 is a method according to aspect 20, wherein the method may include sending a second public key. The method may include signing the response to the query based on a second private key before sending the response to the query.

[0170] Aspect 22 is a method according to any one of aspects 14 to 21, wherein processing the unsigned transmission may include backscattering a command for the unsigned transmission.

[0171] Aspect 23 is a method according to aspect 22, wherein the method may include sending a second public key. The method may include signing the command based on a second private key before backscattering the unsigned sent command.

[0172] Aspect 24 is a method according to any one of Aspects 14 to 23, wherein verifying the transmission of the signature may include verifying the transmission of the signature based on at least one of the following: (a) a time domain offset applied to the transmission of the signature, (b) a frequency domain offset applied to the transmission of the signature, or (c) a codebook applied to the transmission of the signature.

[0173] Aspect 25 is an apparatus for wireless communication, the apparatus comprising: a memory; and at least one processor, the at least one processor being coupled to the memory and being configured to implement any one of Aspects 1 to 24 based at least in part on information stored in the memory.

[0174] Aspect 26 is the apparatus of aspect x, further comprising at least one of an antenna or a transceiver coupled to the at least one processor.

[0175] Aspect 27 is an apparatus for wireless communication, the apparatus comprising means for implementing any one of aspects 1 to 24.

[0176] Aspect 28 is a computer-readable medium (eg, non-transitory computer-readable medium) storing computer-executable code, wherein the code, when executed by a processor, causes the processor to implement any one of aspects 1 to 24.

Claims

1. An apparatus for wireless communication at a first wireless device, the apparatus comprising: Memory; and at least one processor coupled to the memory and based at least in part on the information stored in the memory, the at least one processor configured to: sending a first public key to a backscatter-based communication device; sending an unsigned transmission to the backscatter-based communication device; and A signed transmission is sent to the backscatter-based communication device, wherein the signed transmission is signed based on a first private key.

2. The apparatus of claim 1 , wherein the at least one processor is further configured to: A portion of the unsigned transmission is signed to generate the signed transmission.

3. The apparatus of claim 2, wherein the at least one processor is further configured to: The signed transmission is multiplexed with the unsigned transmission to generate a payload for the backscatter-based communication device, wherein sending the unsigned transmission and sending the signed transmission includes sending the payload to the backscatter-based communication device.

4. The apparatus of claim 1 , wherein the at least one processor is further configured to: The unsigned transmission is encrypted using at least one of the second public key or the first symmetric key.

5. The apparatus of claim 1 , wherein the at least one processor is further configured to: hashing a portion of the unsigned transmission; and A hash portion of the unsigned transmission is signed to generate the signed transmission.

6. The apparatus of claim 1, wherein the at least one processor is further configured to: A signal excluding a portion of the unsigned transmission is signed to generate the signed transmission.

7. The apparatus of claim 6, wherein to send the signed transmission, the at least one processor is further configured to: The signed transmission is sent after a certain period of time from sending the unsigned transmission.

8. The device according to claim 1, further comprising: a transceiver coupled to the at least one processor, wherein to transmit the signed transmission, the at least one processor is further configured to: The signed transmission is transmitted using the transceiver after a plurality of unsigned transmissions have been transmitted to the backscatter-based communication device, wherein the plurality of unsigned transmissions includes the unsigned transmission.

9. The apparatus of claim 1 , wherein the at least one processor is further configured to: A request for the signed transmission is received from the backscatter-based communication device, wherein to send the signed transmission, the at least one processor is further configured to send the signed transmission in response to the request for the signed transmission.

10. An apparatus for wireless communication at a second wireless device, the apparatus comprising: Memory; and at least one processor coupled to the memory and based at least in part on the information stored in the memory, the at least one processor configured to: receiving a configuration of a backscatter-based communication device from a first wireless device; receiving a backscattered signal from the backscatter-based communication device; as well as A first detected error is transmitted to the first wireless device in response to detecting an error in the backscattered signal in accordance with the configuration of the backscatter-based communication device.

11. The apparatus of claim 10, wherein the at least one processor is further configured to: receiving a first public key from the first wireless device; receiving a signed transmission from the first wireless device; and A second detected error is transmitted to the first wireless device in response to detecting an error in the transmission of the signature based on the first public key.

12. The device according to claim 10, further comprising: a transceiver coupled to the at least one processor, wherein the at least one processor is further configured to: receiving a second public key from the backscatter-based communication device using the transceiver, wherein the backscattered signal includes a signature; and In response to detecting an error in the signature based on the second public key, a second detected error is transmitted to the first wireless device using the transceiver.

13. An apparatus according to claim 10, wherein, in order to detect the error in the backscattered signal, the at least one processor is further configured to detect the error in the backscattered signal based on at least one of the following: (a) a time domain offset applied to the backscattered signal, (b) a frequency domain offset applied to the backscattered signal, (c) a codebook applied to the backscattered signal, (d) an angle of departure (AoD) offset applied to the backscattered signal, or (e) a location indicator associated with the backscattered signal.

14. An apparatus for wireless communication at a backscatter-based communication device, the apparatus comprising: Memory; and at least one processor coupled to the memory and based at least in part on the information stored in the memory, the at least one processor configured to: receiving a first public key from a first wireless device; receiving an unsigned transmission from the first wireless device; receiving a signed transmission from the first wireless device; and The unsigned transmission is processed in response to verifying the signed transmission based on the first public key.

15. The apparatus of claim 14, wherein the at least one processor is further configured to: Verification of the sending of the signature is sent in response to verifying the sending of the signature based on the first public key.

16. The apparatus of claim 15, wherein the at least one processor is further configured to: A signed set of transmissions is received from the first wireless device, wherein in order to send the verification of the signed transmission, the at least one processor is further configured to send a second verification of multiple signed transmissions, the multiple signed transmissions including the signed transmission and the signed set of transmissions.

17. The apparatus of claim 14, wherein the at least one processor is further configured to: The unsigned transmission is decoded using at least one of the second private key or the first symmetric key.

18. The apparatus according to claim 14, further comprising: a transceiver coupled to the at least one processor, wherein the at least one processor is further configured to: Radio frequency identification (RFID) capabilities are transmitted using the transceiver, wherein the RFID capabilities include a time period between receiving a signed transmission set and transmitting a verification of the signed transmission set.

19. The apparatus of claim 14, wherein the at least one processor is further configured to: A request for the signed transmission is sent to the first wireless device.

20. The apparatus of claim 14, wherein to process the unsigned transmission, the at least one processor is further configured to: A response to the unsigned sent query is sent.

21. The apparatus of claim 20, wherein the at least one processor is further configured to: sending a second public key; and The response to the query is signed based on a second private key before sending the response to the query.

22. The apparatus of claim 14, wherein to process the unsigned transmission, the at least one processor is further configured to: Backscatter the unsigned sent command.

23. The apparatus of claim 22, wherein the at least one processor is further configured to: sending a second public key; and The command is signed based on a second private key prior to backscattering the unsigned transmitted command.

24. The apparatus of claim 14, wherein to verify the sending of the signature, the at least one processor is further configured to: The signed transmission is verified based on at least one of: (a) a time domain offset applied to the signed transmission, (b) a frequency domain offset applied to the signed transmission, or (c) a codebook applied to the signed transmission.

25. A method of wireless communication at a first wireless device, the method comprising: sending a first public key to a backscatter-based communication device; sending an unsigned transmission to the backscatter-based communication device; as well as A signed transmission is sent to the backscatter-based communication device, wherein the signed transmission is signed based on a first private key.

26. The method according to claim 25, further comprising: A portion of the unsigned transmission is signed to generate the signed transmission.

27. The method according to claim 26, further comprising: The signed transmission is multiplexed with the unsigned transmission to generate a payload for the backscatter-based communication device, wherein sending the unsigned transmission and sending the signed transmission includes sending the payload to the backscatter-based communication device.

28. The method according to claim 25, further comprising: hashing a portion of the unsigned transmission; as well as A hash portion of the unsigned transmission is signed to generate the signed transmission.

29. The method according to claim 25, further comprising: A signal excluding a portion of the unsigned transmission is signed to generate the signed transmission.

30. The method of claim 29, wherein sending the signed transmission comprises sending the signed transmission after a period of time from sending the unsigned transmission.

Images