V2X MAC Header Decoding for MAC Clone Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems, particularly in 5G NR, face challenges in detecting medium access control (MAC) cloning attacks, where an attacker clones a victim's Layer 2 (L2) address, leading to legitimate packets being filtered and undetected attacks.
Innovation Solution
A method and apparatus for V2X devices that decode MAC headers to produce Layer 2 (L2) source IDs based on matching Layer 1 (L1) destination or source IDs, enabling detection of MAC cloning attacks by comparing the decoded L2 source ID with the device's own L2 source ID.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If MAC cloning attack detection is implemented by comparing L2 source IDs, then security against MAC cloning attacks is improved, but device complexity increases due to additional decoding and comparison operations
Solution Approach 1:
The patent performs preliminary decoding of the MAC header to obtain the L2 source ID before packet filtering decisions are made. By preparing the L2 source ID in advance through MAC header decoding, the system enables accurate comparison with the cloned L2 address without adding significant processing overhead during critical packet handling, thus improving security while managing device complexity
Solution Approach 2:
The patent introduces an intermediary comparison mechanism that matches the L2 source ID extracted from the MAC header with the cloned L2 address. This intermediary step acts as a bridge between the received packet and the security validation logic, enabling detection of MAC cloning attacks without requiring fundamental changes to the existing packet processing architecture, thereby balancing security improvement with acceptable device complexity
2Measurement precision
If MAC header decoding is performed to detect cloned L2 addresses, then measurement precision of attack detection is improved, but processing time increases
Solution Approach 1:
The MAC header is decoded in advance to extract the L2 source ID before the packet filtering decision is made. This preliminary action ensures that the L2 source ID is readily available for comparison with the cloned L2 address, improving attack detection precision without requiring time-consuming operations during critical packet handling phases
Solution Approach 2:
The patent changes the parameter being monitored from generic packet filtering criteria to specific L2 source ID matching. By focusing on this specific parameter (L2 source ID) extracted from the MAC header, the system achieves precise detection of MAC cloning attacks while maintaining efficient processing through targeted comparison rather than comprehensive packet analysis
3Reliability
If L2 source ID matching is used to identify cloned packets, then reliability of packet authentication is improved, but loss of information increases as legitimate packets may be incorrectly filtered
Solution Approach 1:
The patent introduces an intermediary verification step that compares the L2 source ID from the MAC header with the cloned L2 address before making packet filtering decisions. This intermediary mechanism ensures that only packets with matching L2 source IDs (indicating potential MAC cloning) are filtered, while legitimate packets with different L2 source IDs pass through unchanged, thus improving packet authentication reliability while minimizing loss of legitimate information
Data Source
AI summary
A method of wireless communication at a first V2X device is described herein. The method includes obtaining a message including a MAC header, an L1 source ID, and an L1 destination ID. The method includes decoding the MAC header to produce an L2 source ID associated with the message based on at least one of (1) the L1 destination ID of the message matching a first number of bits of an L2 source ID of the first V2X device or (2) the L1 source ID of the message matching a second number of bits of the L2 source ID of the first V2X device. The method includes outputting an indication of a MAC cloning attack based on the L2 source ID of the message matching the L2 source ID of the first V2X device.