Trigger Frame Protection Using CMAC and GMAC Integrity Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless devices are vulnerable to attacks where attackers can send fake trigger frames, leading to unauthorized transmissions, denial of service, and battery drain, as existing security measures do not protect trigger frames effectively.
Innovation Solution
Implementing a trigger frame protection system using Cipher-based Message Authentication Code (CMAC) and Galois Message Authentication Code (GMAC) to add an integrity check field to trigger frames, ensuring they were transmitted by the associated access point and not manipulated, while allowing legacy devices to function without encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If trigger frames are left unprotected for legacy device compatibility, then ease of operation is improved, but security is worsened
Solution Approach 1:
The trigger frame protection mechanism is segmented into optional components: an integrity check field that can be independently added to trigger frames. This segmentation allows the security feature to be implemented without requiring changes to the core trigger frame structure, enabling legacy devices to ignore the protection field while protected devices can validate integrity, thus resolving the contradiction between compatibility and security
Solution Approach 2:
The patent applies local quality by adding protection only where needed - the integrity check field is added to trigger frames sent by the access point, but only certain devices are required to process and validate it. This localized application of security measures allows the system to maintain backward compatibility while providing security enhancements to capable devices
2Reliability
If an integrity check field is added to trigger frames for security, then reliability is improved, but device complexity is worsened
Solution Approach 1:
The integrity check functionality is extracted as a separate, optional field that can be added to trigger frames without modifying the core frame structure. This extraction allows the security mechanism to be implemented independently, adding minimal complexity only where needed while keeping the rest of the trigger frame processing unchanged
Solution Approach 2:
The integrity check field is prepared and attached to trigger frames in advance by the access point before transmission. This preliminary action allows receiving devices to simply validate the pre-computed integrity check without performing complex real-time security processing, thereby reducing device complexity while maintaining security
3Object-affected harmful factors
If trigger frames are authenticated to prevent attacks, then harmful factors are reduced, but use of energy is worsened
Solution Approach 1:
The patent implements partial action by making the integrity check validation optional rather than mandatory for all devices. Devices can choose to validate the integrity check field based on their capabilities and security requirements, allowing energy-constrained devices to skip validation when appropriate while still providing security where needed, thus reducing overall energy consumption while maintaining protection against unauthorized transmissions
Data Source
Figure 1
Figure 2A~2D
Figure 3~6
AI summary
This disclosure describes systems, methods, and devices related to trigger frame protection. A device may generate a protected trigger frame comprising one or more fields to carry inform associated with one or more station devices (STAs). The device may cause to send the protected trigger frame to the one or more STAs.