Multi-Link Wi-Fi Key Management for GTK Update Optimization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In Multi-Link communication, unnecessary group key updates can occur due to hardware constraints and frequent link switches, leading to inefficiencies and potential security breaches.
Innovation Solution
A communication apparatus compliant with IEEE 802.11 series standards, equipped with a key control unit, reception unit, confirmation unit, and determination unit, which generates keys for each link, receives notifications of link disconnections, confirms communication states, and determines whether to re-generate the group key based on the confirmation results.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the AP updates the GTK after confirming that an STA has left the network, then the confidentiality of data frame transmission is maintained, but unnecessary GTK updates occur when only some links disconnect in Multi-Link communication
Solution Approach 1:
The patent segments the network connection into multiple independent links, where each link can be disconnected without affecting the overall network connection. The AP monitors each link's connection state separately and only updates the GTK when all links are disconnected, avoiding unnecessary updates when some links remain active.
Solution Approach 2:
The patent implements dynamic GTK update timing based on the real-time connection state of multiple links. The AP continuously monitors link states and adjusts the GTK update decision dynamically, updating the key only when the connection state changes from partial-link-active to all-links-disconnected.
2Reliability
If the AP frequently updates the GTK to maintain security, then confidentiality is improved, but communication efficiency deteriorates due to unnecessary updates
Solution Approach 1:
The patent applies partial action by updating the GTK only when necessary (when all links are disconnected) rather than excessively updating it every time any link disconnects. This selective approach maintains adequate security while avoiding the overhead of unnecessary key updates.
Solution Approach 2:
The patent implements a feedback mechanism where the AP monitors the connection state of each link and uses this information to determine whether GTK update is necessary. The system continuously receives feedback about link states and adjusts GTK update timing accordingly, maintaining security while optimizing efficiency.
3Reliability
If the AP updates the GTK when any link disconnects, then security is maintained, but device complexity increases due to frequent state changes
Solution Approach 1:
The patent segments the connection monitoring into individual link state tracking, where the AP maintains separate connection state information for each link. This segmentation simplifies the overall key management logic by allowing independent monitoring of each link without requiring complex coordination between multiple simultaneous updates.
Data Source
AI summary
A communication apparatus compliant with an IEEE 802.11 series standard capable of performing Multi-Link communication with a plurality of other communication apparatuses using a plurality of links with different frequency channels is provided. The communication apparatus generates a key for encrypting a frame to be communicated for each one of the plurality of links, receives, from a first communication apparatus from among the plurality of other communication apparatuses, a notification indicating disconnection or suspension of one or more links of the plurality of links, confirms a state of communication via the plurality of links between the plurality of other communication apparatuses and the communication apparatus in a case where the notification is received, and determines whether or not to re-generate the key for each one of the plurality of links on the basis of a result of the confirmation.