Wireless Control Frame Encryption for Privacy Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In wireless communication systems, control frames carrying identity information such as AID in trigger and NDPA frames are susceptible to unauthorized tracking, leading to privacy breaches, as the information is not adequately protected, allowing unauthorized users to determine user location and behavioral patterns.
Innovation Solution
The implementation of an encryption and digestion protection mechanism for control frames, where stations announce their encryption and digestion capabilities, and then encrypt and digest the identity information using symmetric or asymmetric encryption algorithms, ensuring only intended recipients can decrypt and digest the information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If control frames carry identity information (AID) for user identification, then communication functionality is improved, but security and privacy are worsened due to unauthorized tracking
Solution Approach 1:
The patent introduces an intermediary protection mechanism between the identity information and the control frame. This intermediary layer (encryption and digestion mechanisms) allows the control frame to carry identity information for communication functionality while preventing unauthorized access. The intermediary protects the harmful exposure of identity data without blocking the necessary communication function.
Solution Approach 2:
The patent applies local quality by selectively protecting only the identity information portion of the control frame while leaving other necessary control data unencrypted. This allows the specific vulnerable part (identity information) to be protected against unauthorized tracking while maintaining the overall functionality of the control frame for communication purposes.
2Reliability
If encryption and digestion protection mechanisms are applied to control frames, then security is improved, but device complexity increases
Solution Approach 1:
The patent applies preliminary action by pre-configuring stations with encryption and digestion capabilities before actual communication occurs. Stations announce their protection capabilities in advance, and the encryption/digestion mechanisms are prepared beforehand. This allows security protection to be implemented without adding complexity during the actual control frame transmission process.
Solution Approach 2:
The patent applies partial action by implementing encryption and digestion protection only for the identity information field rather than the entire control frame. This partial protection approach provides necessary security while minimizing the added complexity compared to encrypting all control frame data.
3Object-affected harmful factors
If identity information is protected through encryption, then privacy is improved, but information accessibility is worsened for unauthorized users
Solution Approach 1:
The patent introduces feedback through the digestion mechanism that provides verification of information integrity and authenticity. The digestion value allows the receiving station to verify that the encrypted information has not been tampered with and belongs to the legitimate sender. This feedback mechanism ensures that only authorized parties can successfully access the information while preventing information leakage to unauthorized users.
Solution Approach 2:
The patent applies parameter changes by transforming the identity information from its original readable form into an encrypted form with different mathematical properties. The encryption algorithm changes the parameters of the information representation, making it inaccessible to unauthorized users while preserving the ability of authorized stations to decrypt and access the original information through the key.
Data Source
AI summary
Provided is a communication method. The method includes: receiving, by a first station (STA), a control frame carrying first information and/or second information, wherein the first information is configured to identify the second information, and the second information comprises protected information.