EHT Multi-Link Channel Validation Against Wireless MITM Attacks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless communications systems face risks of channel-based man-in-the-middle (MITM) attacks, where attackers impersonate access points and stations to relay and drop frames, causing retransmissions and degrading system performance.
Innovation Solution
Implementing Operating Channel Validation Capable (OCVC) capabilities in stations (STAs) to validate operating channels by verifying channel center frequency information in OCI elements of received frames, ensuring communication occurs on the correct channel and discarding frames that do not match the expected parameters.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multi-link operation is implemented to improve communication reliability, then system reliability is improved, but vulnerability to MITM attacks increases
Solution Approach 1:
The patent applies preliminary action by performing operating channel validation before accepting frames from peer STAs. The receiving STA validates the operating channel information in received frames against its own configured operating channels before processing the frame content. This preliminary validation prevents MITM attacks by discarding frames from unauthorized channels before they can cause harm, while still allowing legitimate multi-link operations to proceed.
2Reliability
If frame validation is performed on all received frames to prevent MITM attacks, then security is improved, but processing overhead increases
Solution Approach 1:
The patent applies the taking out principle by extracting only the essential operating channel information from received frames for validation purposes. Instead of performing comprehensive validation on all frame contents, the receiving STA extracts and validates only the operating channel information element (IE) against its configured operating channels. This selective extraction approach maintains security while minimizing processing overhead by focusing validation efforts on the most critical security parameter.
3Measurement precision
If operating channel validation is performed by comparing channel center frequency information, then accuracy of channel identification is improved, but measurement precision requirements increase
Solution Approach 1:
The patent applies the copying principle by using the operating channel information element contained in the received frame as a copy of the transmitting STA's channel identification. Instead of performing complex frequency measurements and comparisons, the receiving STA simply compares the copied channel information from the frame's OCI element against its own configured operating channel information. This approach achieves accurate channel identification while avoiding the need for high-precision frequency measurement capabilities.
Data Source
AI summary
A station (STA) affiliated with a multi-link device (MLD) receives a respective frame from each of one or more peer STAs on one or more channels in a multi-link operation. The STA performs an operating channel validation regarding a respective channel used by the STA to communicate with each of the one or more peer STAs based on channel center frequency information comprised in operating channel information (OCI) indicated in an OCI element contained in the respective frame.


