FILS Discovery Frame SSID Nesting for Multi-Link Setup
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current IEEE 802.11 Specification does not adequately support extreme-high-throughput (EHT) fast initial link setup (FILS) in multi-link operations, particularly for Access Point (AP) Multi-Link Devices (MLDs) and Station (STA) MLDs, requiring modifications to the FILS discovery frame and authentication processes to handle multiple links and service set identifiers (SSIDs).
Innovation Solution
Proposed solutions include modifying the FILS discovery frame to indicate whether the AP MLD's SSID is different from the SSID of individual APs, using a Multiple Links Presence Indicator subfield, and implementing FILS HLP Container elements for higher-layer protocol encapsulation, along with key establishment and authentication procedures using public key cryptography and PMKSA caching, to facilitate secure and efficient multi-link communications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If the current IEEE 802.11 FILS discovery frame format is used, then the discovery procedure can be completed, but it cannot properly indicate MLD-level SSID information when AP MLD has multiple APs with different SSIDs
Solution Approach 1:
The patent introduces a Multiple Links Presence Indicator subfield within the FILS Discovery Information field that can nest additional SSID information. When the indicator is set to 1, it signals the presence of MLD-level SSID information, allowing the frame to carry both individual AP SSID and MLD-level SSID information in a nested structure without fundamentally changing the overall frame format.
Solution Approach 2:
The patent segments the SSID information by introducing separate indicator subfields for different SSID types (individual AP SSID vs. MLD-level SSID). This segmentation allows the system to clearly distinguish and transmit different types of SSID information through the existing FILS discovery frame structure without requiring a complete redesign.
2Adaptability or versatility
If multi-link operation support is added to FILS procedure, then EHT FILS can be implemented, but modifications to authentication and key management procedures are required
Solution Approach 1:
The patent implements a universal key management approach where a single PMK (Pairwise Master Key) is established at the MLD level and can be reused across multiple links. The PMKSA (Pairwise Master Key Security Association) caching mechanism is designed to work universally for all links in the multi-link operation, eliminating the need for separate authentication procedures on each link while maintaining security.
Solution Approach 2:
The patent performs authentication and key establishment preliminarily at the MLD level before individual link operations. By establishing the PMK and PMKSA caching at the MLD level in advance, the system prepares the security context beforehand, allowing subsequent link operations to proceed without repeating the full authentication process on each link.
3Reliability
If separate authentication is performed for each link, then link-specific security can be ensured, but authentication time and setup complexity increase
Solution Approach 1:
The patent performs authentication preliminarily at the MLD level, establishing a PMK that serves as the foundation for all subsequent link operations. This preliminary authentication action eliminates the need to repeat the time-consuming authentication process on each individual link, significantly reducing setup time while maintaining security through the use of link-specific derived keys.
Solution Approach 2:
The patent merges the authentication process at the MLD level, combining the security establishment for multiple links into a single authentication operation. By merging the authentication at the higher MLD level and then deriving link-specific keys, the system achieves both time efficiency and link-specific security without performing separate full authentication procedures for each link.
Data Source
AI summary
An access point (AP) multi-link device (MLD) and a non-AP station (STA) MLD perform a fast initial link setup (FILS) procedure to establish wireless communications over a plurality of links. The AP MLD and the non-AP STA MLD communicate over one or more links of the plurality of links upon completion of the FILS procedure with a FILS Discovery frame transmitted in the FILS procedure indicating whether a service set identifier (SSID) of the AP MLD is different from a SSID of an AP of a plurality of APs in the AP MLD transmitting the FILS Discovery frame.