Multilink Wi-Fi PTK Sharing Without Second-Link Handshake
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication standards, such as IEEE802.11be, lack a method for exchanging encryption keys when connections are established via multiple frequency channels, leading to potential security issues.
Innovation Solution
A communication apparatus that performs multilink communication using the IEEE802.11 standard series, enabling the establishment of links via multiple frequency channels and sharing Pairwise Transient Keys (PTKs) for unicast communication through 4 Way Handshake processing, with encryption keys exchanged using out-band communication to ensure security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If communication is performed via multiple frequency channels, then communication throughput and frequency use efficiency are improved, but encryption key exchange cannot be performed with communication apparatuses connected via the second frequency channel
Solution Approach 1:
The patent uses the first frequency channel as an intermediary medium to exchange encryption keys (PTK and GTK) that will be used for securing communications on the second frequency channel. This mediator approach allows key exchange to occur on a channel where apparatuses are already connected, enabling secure communication on channels where direct key exchange is not yet established.
Solution Approach 2:
The patent performs encryption key exchange in advance on the first frequency channel before establishing or using the second frequency channel for data communication. By preliminarily exchanging and storing the PTK and GTK on the first channel, the system ensures that encryption keys are ready and available when the second channel is activated, preventing security issues during multilink operation.
2Ease of operation
If a PTK and GTK are generated and shared via a first frequency channel, then connection establishment is enabled, but there is no prescription on a method for exchange of encryption keys upon establishment of a connection via a second frequency channel
Solution Approach 1:
The patent makes the first frequency channel serve multiple functions: it is used both for initial connection establishment and for encryption key exchange. This multi-functional approach simplifies the overall system by using a single channel for multiple critical tasks, avoiding the need for separate dedicated key exchange channels or complex multi-channel coordination protocols.
Data Source
AI summary
A communication apparatus capable of performing multilink communication conforming to the IEEE802.11 standard series, the communication apparatus includes an establishment unit configured to establish a link with another communication apparatus, and a first sharing unit configured to share, in a case where the establishment unit establishes a first link and a second link between the communication apparatus and the another communication apparatus, a PTK (Pairwise Transient Key) for encryption of unicast communication by 4 Way Handshake processing that is performed with the another communication apparatus in the first link, wherein, in the second link, the PTK is used to encrypt unicast communication in the second link without performing the 4 Way Handshake processing.