Multi-Link Key Derivation for Secure Wireless Ranging
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is currently no solution for achieving secure and flexible multi-link communication between a station (STA) and an Access Point (AP) in wireless communication systems.
Innovation Solution
A multi-link communication method is implemented where a transmission key is generated through interaction between a first communication node and a second communication node via a first link, and ranging-related information is processed through a second link using this key, enhancing security, flexibility, and efficiency of communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multi-link communication is implemented between STA and AP, then communication flexibility and positioning capability are improved, but security risks increase due to lack of established key management mechanisms
Solution Approach 1:
The patent segments the key management process into link-specific key derivation, where each link between communication nodes has its own dedicated key. This is achieved through generating multiple key identifiers (KI0, KI1, KI2) corresponding to different links, and deriving link-specific keys (K0, K1, K2) from a master key using these link-specific identifiers. This segmentation ensures that compromise of one link's key does not affect security of other links, thus maintaining security while enabling multi-link communication flexibility.
Solution Approach 2:
The patent applies local quality by making each link have its own customized security parameters and keys rather than using a uniform key management approach. Each link between communication nodes is assigned unique key identifiers and derived keys specific to that link's characteristics and security requirements. This allows different security levels and key management strategies for different links, improving overall system security while maintaining the flexibility to establish multiple communication paths.
2Device complexity
If traditional single-key management is used for simplicity, then ease of implementation is maintained, but security and flexibility of multi-link communication deteriorate
Solution Approach 1:
The patent implements preliminary action by pre-establishing a master key through authentication before multi-link communication begins. This master key is then used to derive multiple link-specific keys through a systematic key derivation process. The key identifiers (KI0, KI1, KI2) are pre-assigned to different links, and the corresponding keys (K0, K1, K2) are derived in advance using the master key and these identifiers. This preliminary key setup simplifies subsequent key management operations while ensuring security, as the complex key derivation is performed once during initialization rather than repeatedly during communication.
Solution Approach 2:
The patent uses parameter changes by transforming a single master key into multiple link-specific keys through controlled variation of key derivation parameters. The key identifiers (KI0, KI1, KI2) serve as varying parameters that, when combined with the master key through the key derivation function, produce different derived keys (K0, K1, K2). This parameter-based approach allows systematic generation of multiple secure keys from a single master key, reducing the complexity of managing multiple independent keys while maintaining security for each link.
3Reliability
If link-specific keys are derived for each communication link, then communication security is improved, but key management complexity increases
Solution Approach 1:
The patent applies universality by creating a multi-functional key management system where a single master key serves multiple purposes: it authenticates the initial connection and also derives all link-specific keys (K0, K1, K2) for subsequent communication on different links. The key derivation function acts as a universal mechanism that can generate keys for any number of links by accepting different key identifiers as input. This universal approach consolidates what would otherwise require multiple independent key management systems, reducing overall complexity while maintaining link-specific security.
Data Source
AI summary
Provided are a multi-link communication method, a communication node, and a storage medium. The method includes the following: A transmission key is generated by interaction with a second communication node through a first link, where at least two links are included between the first communication node and the second communication node. Through a second link, ranging-related information transmitted between the first communication node and the second communication node is processed based on the transmission key, where the second link is any one of the at least two links.