Communication Link Management via Dual-Channel Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Communication connections, particularly wireless ones like WLAN, are vulnerable to deauthentication attacks that can disrupt data exchange between devices, leading to unintended disconnections and potential further attacks.

Innovation Solution

A method and system that utilize two separate communication channels to verify the authenticity of disconnection commands, ensuring that only legitimate disconnections occur by confirming the validity of the command through a secondary communication channel, thereby enhancing resilience against third-party attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a single communication channel is used for data exchange, then communication simplicity is maintained, but vulnerability to deauthentication attacks increases

Engineering Contradiction:

Improvecommunication connection reliabilityVSAvoidcommunication channel structure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The communication system is segmented into two independent channels: a first communication channel for data exchange and a second communication channel for authentication verification. This segmentation allows the system to maintain simplicity in the primary data channel while adding a dedicated security channel to prevent deauthentication attacks, thereby resolving the contradiction between reliability and complexity.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The second communication channel acts as an intermediary verification mechanism. When a disconnection command is received on the first channel, the system uses the second channel as a mediator to verify whether the command is legitimate before executing the disconnection. This intermediary layer protects against attacks while maintaining the simplicity of the original communication flow.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If disconnection commands are accepted without verification, then response speed is fast, but security against attacks deteriorates

Engineering Contradiction:

Improveauthentication securityVSAvoiddisconnection verification time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary verification of disconnection commands by checking authentication information through the second communication channel before executing the disconnection action on the first channel. This preliminary check prevents unauthorized disconnections while minimizing time loss, as the verification only occurs when needed (upon receiving a disconnection command) rather than continuously.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system implements a feedback mechanism where the second communication channel provides verification feedback about the authenticity of disconnection commands received on the first channel. This feedback loop ensures that only authenticated commands are executed, enhancing security without significantly impacting response time since the feedback is obtained only when disconnection is requested.

Inventive Principle:

Principle #23Feedback

3Object-affected harmful factors

If authentication verification is implemented, then attack resistance improves, but communication protocol complexity increases

Engineering Contradiction:

Improveattack resistanceVSAvoidcommunication protocol structure

Core Design Contradiction:

Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The authentication protocol is segmented into distinct components: a first protocol for data exchange on the primary channel and a second protocol for authentication verification on the security channel. This segmentation allows each protocol to remain relatively simple while collectively providing robust attack resistance, as the complexity is distributed rather than concentrated in a single protocol.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The second communication channel serves as an intermediary authentication layer that verifies commands before they affect the primary communication. This intermediary approach prevents attacks without requiring complex modifications to the primary data exchange protocol, as the verification happens in a separate, dedicated channel.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS10425487B2Method for managing a first communication link, system comprising a first communication partner and a second communication partner, and a vehicle

Publication Date: 2019.09.24 VOLKSWAGEN AG

AI summary

A method for managing a first communication connection between a first communication partner and a second communication partner. The method entails receiving a first message by the first communication partner, wherein the first message contains a command to disconnect the first communication connection. The method further entails transmitting a second message by the first communication partner to the second communication partner via a different second communication connection between the first communication partner and the second communication partner, wherein the second message contains a request to confirm the validity of the command. The method also entails disconnecting the first communication connection by the first communication partner if the first communication partner receives a third message via the second communication connection, wherein the third message contains a confirmation of the validity of the command.