PPDU Header Protection via Encrypted Hash Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Unencrypted header fields of a physical layer protocol data unit (PPDU) in wireless networks are vulnerable to tampering, leading to issues such as denial of service, power drain, unwanted data exposure, and reduced performance.
Innovation Solution
A method where a transmitting wireless device generates a hash value of the header information and includes it in the encrypted payload portion of the PPDU, allowing a receiving device to verify the integrity of the header information by comparing the extracted hash value with the original hash value.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If header fields are left unencrypted to maintain compatibility and low latency, then processing speed and compatibility are improved, but security and integrity are worsened due to vulnerability to tampering
Solution Approach 1:
The PPDU is segmented into encrypted payload portion and unencrypted header portion, with the hash value placed in the encrypted portion. This allows the header to remain unencrypted for fast processing while the hash value provides integrity verification, resolving the contradiction between speed and reliability.
Solution Approach 2:
A hash value acts as an intermediary between the header and verification mechanism. The hash value is computed from header information and placed in the encrypted payload, serving as a mediator that enables integrity verification without requiring encryption of the header itself, thus maintaining both speed and reliability.
2Reliability
If header fields are encrypted to improve security, then integrity and security are improved, but processing latency and complexity are worsened
Solution Approach 1:
The hash value representing header integrity is extracted from the header and placed in the encrypted payload portion. This extraction allows the header to remain unencrypted and quickly processable, while the extracted hash value provides the necessary security verification without requiring full header encryption.
Solution Approach 2:
Instead of encrypting the original header, a copy of the header's essential integrity information (the hash value) is created and placed in the encrypted payload. This copy enables verification without requiring the original header to be encrypted, reducing latency while maintaining security.
3Reliability
If existing header format is modified to include encryption to improve security, then security is improved, but compatibility with previous standards is worsened
Solution Approach 1:
The encrypted payload portion serves multiple functions: it carries the actual data payload and simultaneously carries the hash value for header verification. This multi-functionality allows security to be improved without modifying the header format, maintaining compatibility with existing standards while adding protective capabilities.
Solution Approach 2:
Instead of adding security features in the header dimension (which would break compatibility), the solution moves to another dimension by placing the hash value in the encrypted payload portion. This dimensional shift allows header protection without modifying the header structure, preserving backwards compatibility.
Data Source
AI summary
An embodiment is a method performed by a wireless device to provide header protection for a physical layer protocol data unit (PPDU). The method includes generating a hash value of header information of the PPDU by applying a hash function to the header information of the PPDU, including the hash value in an encrypted payload portion of the PPDU, and transmitting the PPDU with the hash value included in the encrypted portion of the PPDU. An embodiment is a method performed by a wireless device to verify the integrity of header information of a received PPDU. The method includes extracting header information of the PPDU, extracting a first hash value included in an encrypted payload portion of the PPDU, generating a second hash value by applying a hash function to the extracted header information, and discarding the PPDU if the second hash value does not match the first hash value.