Communication Apparatus MAC Mismatch Synchronization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems that authenticate data using message authentication codes (MAC) cannot effectively determine the cause of invalidity when communication data is deemed invalid, leading to a lack of appropriate procedures for resolving such issues.
Innovation Solution
A communication apparatus connected to a network that includes a counter, reception, update, code generation, determination, and transmission portions, which synchronizes counters and common keys when MAC mismatches occur, allowing for the identification and correction of deviations in counter values and common key issues.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If message authentication code is used to authenticate communication data, then data validity can be determined, but the cause of invalidity cannot be estimated
Solution Approach 1:
The authentication system is segmented into multiple functional components: a determination portion that checks MAC validity, a counter management portion that tracks counter values, and a cause identification portion that analyzes mismatch reasons. This segmentation allows the system to not only detect authentication failures but also identify specific causes such as counter value deviations or common key issues.
Solution Approach 2:
The system implements feedback mechanisms where the determination portion communicates MAC mismatch results to the cause identification portion, which then analyzes the discrepancy between transmitted and received counter values. This feedback loop enables the system to provide detailed information about authentication failures, including whether the cause is counter value deviation, common key errors, or other issues.
2Difficulty of detecting and measuring
If counter values are synchronized between communication apparatuses, then MAC mismatch causes can be identified, but additional processing overhead is introduced
Solution Approach 1:
Counter values are synchronized between communication apparatuses before authentication operations begin. The system performs preliminary counter synchronization to ensure both parties start with matching counter values, preventing MAC mismatches caused by counter deviations. This preliminary action reduces the need for complex error analysis during authentication.
Solution Approach 2:
The system monitors changes in counter values as a parameter to detect authentication issues. By tracking counter value deviations between transmitted and received data, the system can identify MAC mismatch causes without requiring complex analysis procedures. The counter value parameter serves as a simple yet effective indicator of authentication status.
3Ease of operation
If common key and counter value deviations are detected, then appropriate procedures can be implemented, but system complexity increases
Solution Approach 1:
The communication apparatus automatically detects and responds to authentication issues without requiring external intervention. When MAC mismatches are detected, the system self-diagnoses the cause by comparing counter values and automatically implements appropriate procedures such as counter synchronization or common key updates. This self-service capability simplifies operation while managing system complexity through automation.
Solution Approach 2:
The system dynamically adjusts its behavior based on the detected cause of MAC mismatch. If counter value deviation is detected, the system performs counter synchronization; if common key issues are identified, it initiates key update procedures. This dynamic response mechanism allows the system to implement appropriate procedures efficiently without requiring complex decision-making logic for each scenario.
Data Source
AI summary
A communication apparatus includes a counter, a reception portion, an update portion, a code generation portion, a determination portion, and a transmission portion. The reception portion receives a communication data from a different one of the communication apparatus. The update portion updates a value of the counter. The code generation portion generates a message authentication code based on the communication data received by the reception portion, the value of the counter, and a common key. The determination portion determines whether the message authentication code generated by the code generation portion matches a message authentication code set in the communication data. The transmission portion transmits a synchronization request when a number of times that the determination portion determines a mismatch between the message authentication codes becomes equal to or more than a predetermined number of mismatches.