Cellular-Compatible Authentication Key Generation for WLAN Integration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication mechanisms in wireless communications, such as 3GPP LTE and IEEE 802.11, face challenges in seamlessly integrating cellular network security protocols with local area network communications, leading to inefficiencies in key generation and authentication processes.
Innovation Solution
The introduction of a new cipher suite type that is cellular network compatible, allowing for the generation of authentication keys like Krrcint, Krrcenc, and Kupenc, which are used in local area network communications, enabling secure encryption and integrity protection by combining 3GPP LTE and IEEE 802.11 technologies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate authentication mechanisms are used for cellular networks and WLANs, then each network can maintain its own security protocols, but integration between networks becomes complex and inefficient
Solution Approach 1:
The patent combines cellular network authentication keys (KASME) with WLAN authentication keys (PMK) to create a unified key derivation process. This merging allows the system to maintain the security strengths of both networks while enabling seamless integration, resolving the contradiction between maintaining separate security protocols and achieving network integration.
Solution Approach 2:
The patent creates a universal authentication mechanism that can operate across both cellular and WLAN networks. By deriving WLAN authentication keys from cellular network keys through a standardized derivation function, the system achieves multi-functionality where a single authentication infrastructure serves both network types, reducing integration complexity while maintaining security.
2Reliability
If separate key generation processes are used for cellular and WLAN authentication, then each protocol can be optimized independently, but key management becomes inefficient and time-consuming
Solution Approach 1:
The patent performs preliminary key derivation by generating cellular network authentication keys first, then using these pre-generated keys as the basis for deriving WLAN authentication keys. This preliminary action eliminates the need for separate key generation processes, reducing time loss while maintaining the security optimization of each protocol.
Solution Approach 2:
The patent implements a nested key structure where WLAN authentication keys (PMK) are derived from cellular network keys (KASME) through a key derivation function. This nesting allows the inner key generation to be embedded within the outer key structure, enabling efficient cascading key generation that reduces time loss while preserving the security properties of both protocols.
3Reliability
If cellular network authentication keys are used directly in WLAN communications, then security can be maintained, but compatibility with WLAN protocols becomes problematic
Solution Approach 1:
The patent transforms cellular network authentication keys into WLAN-compatible keys by changing key derivation parameters. A key derivation function with specific parameters (such as identity strings and random values) converts the cellular key format into the WLAN key format, maintaining security while achieving protocol compatibility. This parameter transformation resolves the contradiction between security maintenance and protocol adaptability.
Data Source
AI summary
Authentication key generation for local area network communication, including: participating in communication of a message comprising a cipher suite selection type indicating cellular network compatible cipher suite; and creating cellular network compatible authentication keys according to said cipher suite selection type.