Key Negotiation Algorithm Signaling to Avoid IKEv2 Packet Retries
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The inefficiency in IKEv2 key negotiation processes due to repeated packet exchanges when the sender and receiver devices select non-matching key negotiation algorithms, leading to increased communication overhead.
Innovation Solution
A method where the sender device notifies the receiver of all supported key negotiation algorithms, allowing the receiver to select a common algorithm and generate a corresponding parameter, thereby reducing the need for repeated packet exchanges.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the receiver device selects a key negotiation algorithm independently from its supported algorithms, then the receiver device can choose its preferred algorithm, but the selected algorithm may not be supported by the sender device, requiring repeated packet exchanges
Solution Approach 1:
The sender device performs preliminary action by including information about its supported key negotiation algorithms in the initial negotiation packet. This allows the receiver device to select an algorithm that is guaranteed to be supported by both devices, avoiding the need for repeated packet exchanges and improving negotiation efficiency while maintaining selection flexibility.
2Device complexity
If the sender device includes only one key negotiation algorithm in the negotiation packet, then the packet structure is simple, but the receiver device cannot select from multiple algorithms, reducing adaptability
Solution Approach 1:
The negotiation packet is segmented to include a dedicated field or list that enumerates multiple supported key negotiation algorithms. This segmentation allows the receiver device to select from multiple algorithms while keeping the overall packet structure organized and manageable, balancing complexity with adaptability.
3Reliability
If multiple packet exchanges are performed to resolve algorithm mismatch, then the devices can ensure algorithm compatibility, but the key negotiation time increases
Solution Approach 1:
The sender device performs preliminary action by including information about its supported key negotiation algorithms in the initial negotiation packet. This allows the receiver device to select an algorithm that is guaranteed to be supported by both devices, avoiding the need for repeated packet exchanges and improving negotiation efficiency while maintaining selection flexibility.
Data Source
AI summary
This application provides a key negotiation method, apparatus, and system, and may be applied to the communications field, for example, short-range communication (including a cockpit domain). During key negotiation between a first device and a second device, the first device notifies, by using first information, the second device of all key negotiation algorithms supported by the first device, and the second device selects, from the received key negotiation algorithms supported by the first device, a key negotiation algorithm supported by the second device. In this way, the key negotiation algorithm selected by the second device is supported by both the first device and the second device.


