Secure Probe Exchange Protocol for Wi-Fi Connection Setup

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing communication protocols between access points (APs) and client devices (STAs) are vulnerable to security breaches and inefficiencies, particularly during probe and probe response message exchanges, which can lead to communication overhead and security risks.

Innovation Solution

A secure probe request/response protocol is introduced, which utilizes protected unicast probe messages and drops unprotected responses, enhancing security and reducing connection establishment time by avoiding unprotected individually addressed probe requests and responses.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional probe request/response protocols are used for connection establishment, then connection setup is achieved, but security vulnerabilities and communication overhead increase

Engineering Contradiction:

ImprovesecurityVSAvoidprotocol complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts and eliminates the vulnerable unprotected probe request/response message exchange from the connection establishment process. By removing this problematic component, the system achieves better security without requiring complex alternative mechanisms, as the standard protected management frame exchange suffices for secure connection setup.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

Instead of securing the traditional probe exchange by encrypting individual probe frames (which would increase complexity), the patent inverts the approach by using broadcast probe requests that inherently avoid the security vulnerabilities of unicast probe requests. This inversion simplifies the security model while maintaining connection establishment functionality.

Inventive Principle:

Principle #13The other way round (Inversion)

2Reliability

If unprotected unicast probe requests are used for connection establishment, then connection setup is achieved, but security breaches can occur

Engineering Contradiction:

ImprovesecurityVSAvoidconnection establishment speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent converts the potential harm of slow connection establishment (by avoiding protected probe exchanges) into a benefit by using broadcast probe requests. These broadcast probes, while traditionally less efficient for directed communication, provide a security-safe alternative that eliminates vulnerability to probe-based attacks, thereby achieving both security and acceptable productivity.

Inventive Principle:

Principle #22Blessing in disguise (Convert harm into benefit)

3Productivity

If probe messages are used for connection establishment, then connections can be discovered and authenticated, but communication overhead increases

Engineering Contradiction:

Improveconnection establishment efficiencyVSAvoidcommunication overhead

Core Design Contradiction:

ProductivityVSLoss of energy

Solution Approach 1:

The patent merges the connection discovery and authentication functions into a single protected management frame exchange process. By combining these operations and eliminating the separate unprotected probe exchange, the system reduces communication overhead while maintaining efficient connection establishment, as the protected frame contains all necessary authentication information.

Inventive Principle:

Principle #5Merging (Combining)

Data Source

PatentUS20250039666A1Systems for and methods of communication in a network using a probe message

Publication Date: 2025.01.30 AVAGO TECHNOLOGIES INTERNATIONAL SALES PTE LTD

AI summary

Systems and methods use a protocol for a secure probe exchange Some embodiments relate to a first device. The first device includes a circuit configured to provide at least one frame across a connection to a second device in response to an unprotected broadcast probe request message. The frame includes an unprotected unicast probe request message. An unprotected broadcast probe request message may refer to a broadcast message (e.g., a management frame) that requests a response and is not encrypted in some embodiments.