Control Frame Encryption via Secure Header Insertion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication standards lack solutions for encrypting control frames such as Trigger frames, Block Acknowledgement (BA), and Block Acknowledgement Request (BAR), as the Galois/Counter Mode Protocol (GCMP) and Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) are designed only for data and management frames, preventing direct application to control frames.
Innovation Solution
Enhanced control frame encryption systems are developed to encrypt Trigger frames, BA, and BAR by reusing existing frame formats, inserting a secure header in appropriate places to prevent third-party parsing, and applying GCMP-256 for encryption, with MIC and PN truncation, and defining AAD for encryption to mask certain subfields.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing encryption protocols (GCMP/CCMP) are used for control frames, then security is improved, but compatibility and direct applicability deteriorate because these protocols are designed only for data and management frames
Solution Approach 1:
The patent extends the encryption capability of GCMP/CCMP protocols from their original design scope (data and management frames) to control frames as well. By making the encryption protocol universal across all frame types, the solution achieves both security improvement and adaptability, resolving the technical contradiction.
Solution Approach 2:
The patent modifies the encryption protocol parameters and implementation details to accommodate control frame specific requirements while maintaining the core GCMP/CCMP encryption mechanism. This parameter adaptation enables the protocol to work effectively with control frames, achieving both security and compatibility.
2Reliability
If control frames are encrypted to protect privacy, then security is improved, but frame format complexity increases due to insertion of secure headers and encryption fields
Solution Approach 1:
The patent segments the control frame into distinct encrypted and unencrypted portions, with secure headers containing only necessary unencrypted fields (such as frame control and receiver address) and the majority of the frame content being encrypted. This segmentation protects privacy while keeping the frame format manageable by clearly separating security-critical unencrypted fields from encrypted payload.
3Reliability
If encryption information is included in control frames to enable encryption, then security is improved, but ease of operation deteriorates due to parsing and processing complexity
Solution Approach 1:
The patent performs preliminary encryption processing before frame transmission, with the secure header and encrypted payload prepared in advance. This preliminary action simplifies the transmission and reception process, as the encryption is already completed before the frame enters the standard processing pipeline, reducing the operational complexity during real-time communication.
Data Source
Figure 1
Figure 2~3
Figure 4~5
AI summary
This disclosure describes systems, methods, and devices related to enhanced control frame encryption. A device may generate a frame to be sent to one or more station devices (STAs). The device may include encryption information in the frame. The device may cause to send the frame to the one or more STAs. The encryption may utilize protocols such as GCMP-256 and include features like truncated message integrity code (MIC) and packet number (PN). Enhanced frame structures enable the use of additional authenticated data (AAD) for encryption, while also providing masking for certain subfields to ensure privacy and prevent third-party parsing. Both individually-addressed and group-addressed frames are supported, improving security in high-reliability, low-latency wireless networks.