AMP Mutual Authentication with Minimal Wireless Frame Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless ambient power (AMP) devices face challenges in maintaining secured communication links due to limited power availability, as existing encryption methods require extensive frame exchanges that exceed their processing capabilities.
Innovation Solution
A method for mutual authentication and encryption key generation is implemented, where authentication and key generation are embedded in a brief data exchange, allowing encrypted communication sessions to be established with minimal frame exchanges, reducing power consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption methods are used to secure communication links, then security is improved, but power consumption increases beyond what AMP devices can sustain
Solution Approach 1:
The patent segments the authentication and encryption key generation process into minimal essential steps, separating them from traditional lengthy handshake protocols. By dividing the security establishment into discrete, optimized phases (authentication request, authentication response with embedded key material, and encrypted data transfer), the system achieves security while minimizing power consumption at each segment.
Solution Approach 2:
The patent applies partial action by implementing only the essential minimum steps required for security rather than complete traditional protocols. The authentication and key generation are performed in a condensed manner that provides sufficient security for AMP devices without requiring the full sequence of frames that would exceed their power budget.
2Reliability
If authentication and key generation are performed separately from data exchange, then security is improved, but communication efficiency decreases due to additional frame exchanges
Solution Approach 1:
The patent merges authentication and encryption key generation directly into the data exchange process. The authentication response frame from the AMP device contains embedded authentication credentials and key material, allowing the powered wireless device to simultaneously authenticate the AMP device and establish encryption keys without requiring separate handshake frames. This combining of functions maintains security while improving communication efficiency.
Solution Approach 2:
The authentication response frame serves multiple functions simultaneously: it authenticates the AMP device, establishes encryption keys for future communication, and can carry initial data. This multi-functionality eliminates the need for separate authentication and key exchange frames, resolving the contradiction between security and efficiency.
3Use of energy by moving object
If minimal frame exchanges are used to reduce power consumption, then energy efficiency is improved, but authentication and key generation reliability may be compromised
Solution Approach 1:
The patent applies preliminary action by pre-configuring the AMP device with authentication credentials and key generation capabilities before communication begins. The AMP device is prepared in advance to generate and transmit authentication material within the constrained frame exchange sequence, ensuring that the minimal exchange process remains reliable without requiring additional frames for credential provisioning.
Data Source
AI summary
A method for receiving, by an ambient power (AMP) device that harvests environmental energy, an identification (ID) request frame from a powered wireless device. The ID request frame includes one or more frame-exchange parameters and an authentication and key management (AKM) method. The method includes retrieving, from memory, a secret that is shared with the powered wireless device, determining, using the secret, one or more first AKM parameters, and transmitting, to the powered wireless device, by the AMP device, an ID response frame including an ID of the AMP device, at least one of the one or more frame-exchange parameters and the one or more AKM parameters with which the powered wireless device is to be mutually authenticated with the AMP device and to generate an encryption key to initiate an encrypted wireless communication session.