Multi-Radio Link Authentication Using Cached PMK Reuse
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing multi-link communication systems face inefficiencies due to the overhead of exchanging EAP messages during link establishment, leading to prolonged connection times and reduced throughput.
Innovation Solution
A communication apparatus that generates a Pairwise Master Key (PMK) for one radio link and reuses it for subsequent links, bypassing the need for repeated EAP authentication, thereby efficiently establishing multiple radio links.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If EAP authentication is performed for each radio link establishment, then security authentication is ensured, but link establishment time increases and throughput decreases
Solution Approach 1:
The PMK is generated in advance during the initial association process before actual data transmission begins. This pre-generated key is then cached and reused for subsequent link establishments, eliminating the need for time-consuming EAP authentication while maintaining security requirements
Solution Approach 2:
A single PMK generated through one EAP authentication process serves multiple radio links. The cached PMK can be reused across different links established with the same access point, making the authentication mechanism universal rather than link-specific
2Reliability
If EAP authentication is performed for each radio link establishment, then proper security verification is achieved, but communication overhead increases
Solution Approach 1:
Security verification is performed once in advance during the association phase, and the result (PMK) is cached for future use. This eliminates repeated EAP message exchanges while maintaining the same security verification level
Solution Approach 2:
Instead of regenerating authentication keys through complete EAP exchanges, the system creates and stores a copy (cache) of the PMK that can be reused. This copy mechanism replaces complex repeated authentication sequences
3Reliability
If PMK generation is executed for every radio link, then security is maintained, but processing time and system resources are wasted
Solution Approach 1:
The system discards the need for repeated EAP authentication processes by recovering and reusing the previously generated PMK from cache. This eliminates redundant processing while maintaining security requirements
Solution Approach 2:
The system serves itself by automatically caching and retrieving PMKs without requiring external authentication infrastructure for each link establishment. The cached credentials enable self-service link creation
Data Source
AI summary
A communication apparatus establishes, in a case where a second radio link is established with a partner apparatus in communication in addition to an already established first radio link, the second radio link using information obtained by authentication processing executed at the time of establishing the first radio link.