Key Negotiation Algorithm Signaling to Avoid IKEv2 Packet Retries

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The inefficiency in IKEv2 key negotiation processes due to repeated packet exchanges when the sender and receiver devices select non-matching key negotiation algorithms, leading to increased communication overhead.

Innovation Solution

A method where the sender device notifies the receiver of all supported key negotiation algorithms, allowing the receiver to select a common algorithm and generate a corresponding parameter, thereby reducing the need for repeated packet exchanges.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the receiver device selects a key negotiation algorithm independently from its supported algorithms, then the receiver device can choose its preferred algorithm, but the selected algorithm may not be supported by the sender device, requiring repeated packet exchanges

Engineering Contradiction:
Improvealgorithm selection flexibilityVSAvoidkey negotiation efficiency
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The sender device performs preliminary action by including information about its supported key negotiation algorithms in the initial negotiation packet. This allows the receiver device to select an algorithm that is guaranteed to be supported by both devices, avoiding the need for repeated packet exchanges and improving negotiation efficiency while maintaining selection flexibility.

Inventive Principle:
Principle #10Preliminary action

2Device complexity

If the sender device includes only one key negotiation algorithm in the negotiation packet, then the packet structure is simple, but the receiver device cannot select from multiple algorithms, reducing adaptability

Engineering Contradiction:
Improvenegotiation packet structureVSAvoidalgorithm selection capability
Core Design Contradiction:
Device complexityVSAdaptability or versatility

Solution Approach 1:

The negotiation packet is segmented to include a dedicated field or list that enumerates multiple supported key negotiation algorithms. This segmentation allows the receiver device to select from multiple algorithms while keeping the overall packet structure organized and manageable, balancing complexity with adaptability.

Inventive Principle:
Principle #1Segmentation

3Reliability

If multiple packet exchanges are performed to resolve algorithm mismatch, then the devices can ensure algorithm compatibility, but the key negotiation time increases

Engineering Contradiction:
Improvealgorithm compatibilityVSAvoidkey negotiation time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The sender device performs preliminary action by including information about its supported key negotiation algorithms in the initial negotiation packet. This allows the receiver device to select an algorithm that is guaranteed to be supported by both devices, avoiding the need for repeated packet exchanges and improving negotiation efficiency while maintaining selection flexibility.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12621659B2Key negotiation method, apparatus, and system
Publication Date: 2026.05.05 HUAWEI TECH CO LTD
  • US12621659B2 patent drawing
  • US12621659B2 patent drawing
  • US12621659B2 patent drawing

AI summary

This application provides a key negotiation method, apparatus, and system, and may be applied to the communications field, for example, short-range communication (including a cockpit domain). During key negotiation between a first device and a second device, the first device notifies, by using first information, the second device of all key negotiation algorithms supported by the first device, and the second device selects, from the received key negotiation algorithms supported by the first device, a key negotiation algorithm supported by the second device. In this way, the key negotiation algorithm selected by the second device is supported by both the first device and the second device.