Dual MAC Relay UE Wireless Communication Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless communication systems face challenges in securely transmitting data packets between a remote UE and a network access device via relay UEs, as relay UEs may not be inherently trusted, and existing hop-by-hop security methods do not support end-to-end verification of data packet origin.
Innovation Solution
Implementing a dual Message Authentication Code (MAC) scheme that provides end-to-end security between the remote UE and the network access device, combined with hop-by-hop security between the UE and the first or only relay UE, and between relay UEs, to ensure integrity protection and verify the data packet's routing path.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hop-by-hop security is implemented in relay networks, then data transmission between adjacent nodes is protected, but end-to-end verification of data packet origin is not supported
Solution Approach 1:
The patent segments the security verification into two distinct components: a first MAC generated by the remote UE for end-to-end verification, and a second MAC generated by the relay UE for hop-by-hop verification. This segmentation allows both verification types to coexist without interfering with each other, resolving the contradiction between maintaining transmission security and preserving verification capability.
Solution Approach 2:
The relay UE acts as an intermediary that receives data packets containing both MACs, verifies the second MAC for hop-by-hop security, and forwards the packet to the network access device. The relay UE does not need to trust or verify the first MAC, allowing end-to-end verification capability to be preserved while maintaining secure relay transmission.
2Adaptability or versatility
If relay UEs are used to extend network coverage, then remote UEs can communicate with the network, but the relay UEs may not be inherently trusted
Solution Approach 1:
The relay UE serves as an untrusted intermediary that simply forwards data packets between the remote UE and the network access device. By using cryptographic MAC verification rather than trusting the relay UE, the system maintains security even when relay UEs cannot be trusted, thus resolving the contradiction between extending coverage and maintaining reliability.
Solution Approach 2:
Different levels of security are applied at different locations in the network: end-to-end security (first MAC) between remote UE and network access device, and hop-by-hop security (second MAC) between adjacent nodes. This local quality approach allows the system to accommodate untrusted relays while maintaining overall security.
3Reliability
If dual MAC generation is implemented, then end-to-end and hop-by-hop security are both provided, but processing complexity increases
Solution Approach 1:
The dual MAC scheme segments security functions into distinct, well-defined components with clear responsibilities. The remote UE generates both MACs using standardized algorithms, the relay UE verifies only the second MAC, and the network access device verifies both MACs. This segmentation makes the complex processing manageable and systematic.
Solution Approach 2:
Different nodes perform different amounts of MAC verification: the relay UE performs partial verification (only the second MAC), while the network access device performs complete verification (both MACs). This partial action approach reduces overall processing complexity while maintaining security.
Data Source
AI summary
Techniques are described for wireless communication. A method of wireless communication at a transmitting wireless device includes generating a first Message Authentication Code for a data packet based at least in part on a first security key used to communicate with a receiving wireless device; generating a second message authentication code for the data packet based at least in part on a second security key used to communicate with a relay user equipment (UE), in which the relay UE is included in a data routing path between the transmitting wireless device and the receiving wireless device; and transmitting the data packet to the relay UE with at least the first message authentication code and the second message authentication code.