Multi-Link Session Key Negotiation Using a Shared PMK
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing session key negotiation mechanism in the IEEE802.11be standard does not adequately address the needs of multiple links, leading to inefficiencies in wireless communication networks with multi-link devices.
Innovation Solution
A method for negotiating session keys using a same pairwise master key across multiple links by generating random numbers based on current time parameters and MAC addresses, ensuring consistent key negotiation across all links.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the existing session key negotiation mechanism in IEEE802.11be standard is used, then the standard implementation is simple, but it cannot satisfy the needs of multiple links simultaneously
Solution Approach 1:
The patent merges the key negotiation process across multiple links by introducing a single PMK ID that spans all links. Instead of negotiating separate session keys for each link independently, the system combines them under a unified PMK structure, allowing one PMK to serve multiple links simultaneously. This reduces the number of separate negotiation processes while maintaining security requirements for each link.
Solution Approach 2:
The patent makes the PMK structure universal across multiple links by allowing a single PMK to be shared and reused across different links. The PMK ID field enables the same PMK to be identified and used on multiple links, making the key negotiation mechanism multi-functional rather than link-specific. This universal approach satisfies multi-link requirements without proportionally increasing complexity.
2Reliability
If separate session keys are negotiated for each link, then security is maintained on each link, but the negotiation process becomes complex and time-consuming
Solution Approach 1:
The patent performs preliminary action by establishing a single PMK negotiation before multi-link operations begin. The PMK is negotiated once and then reused across multiple links, avoiding the need to repeat the entire key negotiation process for each additional link. This preliminary establishment of the PMK structure saves significant time while maintaining security through the use of link-specific derived keys when needed.
Solution Approach 2:
The patent applies partial action by negotiating only the essential PMK component once, rather than negotiating complete session keys for each link. The system performs the minimum necessary negotiation (PMK establishment) and then reuses it across multiple links, performing partial key derivation only when specific security requirements demand it. This reduces overall negotiation time while maintaining adequate security.
3Productivity
If a same pairwise master key is used across multiple links, then key negotiation efficiency improves, but key management complexity increases
Solution Approach 1:
The patent segments the key management structure by introducing distinct PMK ID fields and associated key derivation parameters for each link, even when using the same PMK. This segmentation allows the system to track and manage which PMK is used on which link, providing clarity in key management. The segmentation is achieved through link-specific PMK ID assignments and derivation parameters that maintain efficiency while adding necessary management structure.
Data Source
AI summary
A method for a communication between terminals on multiple links includes sending a first request message frame for establishing the multiple links; in which the first request message frame at least includes a first identifier configured to indicate to use a same pairwise master key to negotiate a session key on each of the established multiple links. A second request message frame for establishing an initial association link may be sent, where the second request message frame at least includes a capability information identifier related to the communication on the multiple links.


