FTM Protocol Challenge-Response Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current Fine Timing Measurement (FTM) protocols for indoor navigation lack effective security mechanisms to prevent adversary devices from impersonating legitimate access points, leading to potential location spoofing attacks and compromising location-based services.

Innovation Solution

Incorporating a challenge-response mechanism within the FTM protocol, where devices exchange challenge tokens and security tokens based on shared secrets or cryptographic functions to authenticate each other, ensuring only authorized devices can participate in FTM measurements.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If FTM protocol is implemented for indoor navigation, then location measurement capability is improved, but security vulnerability to spoofing attacks worsens

Engineering Contradiction:
Improvelocation measurement capabilityVSAvoidsecurity against spoofing attacks
Core Design Contradiction:
Measurement precisionVSReliability

Solution Approach 1:

The patent applies preliminary action by performing authentication exchanges before the actual FTM measurement process. The initiator and responder exchange challenge tokens and security tokens prior to conducting distance measurements, ensuring that only authenticated devices can participate in the location determination process. This prevents spoofing attacks by establishing trust before measurements begin.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces cryptographic tokens as intermediaries between the initiator and responder. These tokens (challenge tokens, security tokens, and MACs) serve as mediators that verify device identities and authenticate the FTM measurement process. The tokens act as trusted intermediaries that prevent unauthorized devices from impersonating legitimate participants.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If authentication mechanisms are added to FTM protocol, then security is improved, but protocol complexity worsens

Engineering Contradiction:
Improvesecurity of FTM protocolVSAvoidprotocol complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent achieves universality by designing authentication mechanisms that work across different FTM implementation scenarios. The challenge-response protocol using cryptographic tokens provides a universal authentication framework that can be applied to various initiator-responder pairs without requiring device-specific customization. This multi-functional approach handles both authentication and measurement coordination in a unified protocol structure.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent applies parameter changes by transforming the authentication state through cryptographic operations. The challenge token, security token, and MAC parameters change systematically through the authentication process, with each parameter transformation verifying device identity. This structured parameter evolution provides security while maintaining protocol clarity through defined state transitions.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS9763046B2Apparatus, system and method of Fine Timing Measurement (FTM)
Publication Date: 2017.09.12 INTEL CORP
  • US9763046B2 patent drawing
  • US9763046B2 patent drawing
  • US9763046B2 patent drawing

AI summary

Some demonstrative embodiments include apparatuses, systems and/or methods of Fine Timing Measurement (FTM). For example, an apparatus may include circuitry and logic configured to cause an initiator station to transmit an FTM request message to a responder station, the FTM request message comprising a challenge token; process an FTM measurement frame received from the responder station, the FTM measurement frame comprising a security token, which is based on the challenge token; and authenticate the responder station based on the security token.