Common EAPoL Frames for Low-Latency WLAN Authentication and Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication protocols incur significant overhead and latency due to the sequential exchange of authentication and encryption frames, exposing sensitive information during the association process in wireless local area networks.
Innovation Solution
Combining Extensible Authentication Protocol Over LAN (EAPoL) and encryption protocol information within a single frame to facilitate simultaneous authentication and encryption, reducing the number of frames exchanged and enabling earlier encryption key availability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication and encryption frames are exchanged sequentially, then authentication and encryption can be performed using standard protocols, but significant overhead and latency occur due to multiple frame exchanges
Solution Approach 1:
The patent combines authentication frames (EAPoL) and encryption frames (EPASN) into a single aggregated frame structure. This allows both authentication and encryption operations to proceed in parallel rather than sequentially, reducing the total number of frame exchanges and thereby decreasing latency while maintaining the reliability of both processes
2Reliability
If multiple frames are exchanged for authentication and encryption, then protocol requirements can be met, but signaling overhead increases
Solution Approach 1:
The patent merges multiple frame types (EAPoL authentication frames and EPASN encryption frames) into a single aggregated frame structure. This consolidation reduces the total quantity of frames that need to be exchanged while still satisfying all protocol requirements, thereby reducing signaling overhead without compromising protocol compliance
3Reliability
If encryption frames are exchanged after authentication, then authentication can be completed first, but sensitive information remains exposed during the association process
Solution Approach 1:
The patent combines authentication and encryption frame exchanges into a single simultaneous operation. By aggregating both frame types and exchanging them together, the system ensures that encryption keys are established before any sensitive association information is transmitted, thereby preventing information exposure while maintaining authentication completion
Solution Approach 2:
The patent performs encryption key establishment as a preliminary action before the association process begins. By including encryption protocol information in the same frame as authentication, the system ensures that encryption is set up in advance, preventing any exposure of sensitive information during subsequent association operations
Data Source
AI summary
This disclosure provides methods, devices, and systems for lightweight, low-latency authentication and association between STAs and APs in wireless local area networks (WLANs). In various aspects, an apparatus may transmit, over a WLAN prior to authentication by an access point (AP), a first Extensible Authentication Protocol Over a Local Area Network (EAPoL) frame including first information associated with an EAPoL protocol and second information associated with an encryption protocol. The apparatus may further receive, over the WLAN, a second EAPoL frame indicating successful authentication by the AP in accordance with the EAPoL protocol, the second EAPoL frame including third information associated with the encryption protocol.