Wireless Authentication via Distance and Physical Layer Properties

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing wireless data exchange protocols in IoT devices face challenges in managing and distributing secret keys, particularly in decentralized 5G networks, and are vulnerable to relay attacks and eavesdropping due to limited computational capacity and storage.

Innovation Solution

A method and system that authenticates devices by determining the distance and shared physical layer properties of the communication channel, using properties like noise, interference, and time of flight to generate private keys, eliminating the need for key distribution and requiring less computational capacity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional cryptographic protocols and encryption algorithms are used, then security is improved, but device complexity and computational requirements increase beyond IoT device capabilities

Engineering Contradiction:
ImprovesecurityVSAvoidcomputational requirements
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces traditional cryptographic mechanical systems (complex algorithms, key management infrastructure) with a physics-based authentication system. The system uses physical layer properties of the communication channel (multipath fading, shadowing, noise) to generate authentication credentials, eliminating the need for complex cryptographic computations in resource-constrained IoT devices.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system enables devices to autonomously generate authentication credentials using their own received signal measurements and physical layer observations. Each device independently extracts features from the communication channel and generates shared secrets without requiring external key distribution infrastructure or complex cryptographic operations, making the system self-sufficient and suitable for IoT devices.

Inventive Principle:
Principle #25Self-service

2Device complexity

If physical layer key generation is used, then key distribution complexity is reduced, but vulnerability to relay attacks and eavesdropping increases

Engineering Contradiction:
Improvekey distribution complexityVSAvoidrelay attack vulnerability
Core Design Contradiction:
Device complexityVSObject-affected harmful factors

Solution Approach 1:

The patent adds a spatial dimension to authentication by incorporating distance bounding measurements. The system not only relies on physical layer signal characteristics but also verifies the physical distance between devices using time-of-flight measurements. This dimensional addition prevents relay attacks because the attacker cannot simultaneously be physically close to both legitimate parties while maintaining the distance measurement constraint.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Solution Approach 2:

The system performs preliminary verification of physical layer properties and distance bounds before establishing authentication. By measuring the communication channel characteristics and distance in advance during the authentication handshake, the system proactively detects and prevents relay attacks and eavesdropping attempts before they can compromise security.

Inventive Principle:
Principle #9Preliminary anti-action

3Measurement precision

If distance bounding protocols are used for keyless car entry, then proximity verification is improved, but vulnerability to relay attacks increases

Engineering Contradiction:
Improveproximity verificationVSAvoidrelay attack vulnerability
Core Design Contradiction:
Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The patent merges distance bounding protocols with physical layer security techniques into a unified authentication system. Instead of using distance measurement alone (which is vulnerable to relay attacks), the system combines it with physical layer signal characterization, feature extraction, and shared secret generation. This combination creates a multi-factor authentication mechanism where both physical proximity and channel characteristics must match, making relay attacks infeasible.

Inventive Principle:
Principle #5Merging (Combining)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This approach provides robust security against relay attacks and eavesdropping, reducing computational and storage requirements, and ensuring secure authentication without relying on traditional encryption techniques.

Implementation Method 1

Secrecy is achieved by exploiting the shared physical layer properties of the environment of two communicating devices, such as multipath, fading, shadowing noise or interference.

Methodology Applied
Scientific EffectMultipath propagation:

Implementation Method 2

Secrecy is achieved by exploiting the shared physical layer properties of the environment of two communicating devices, such as multipath, fading, shadowing noise or interference.

Methodology Applied
Scientific EffectFading:

Implementation Method 3

Secrecy is achieved by exploiting the shared physical layer properties of the environment of two communicating devices, such as multipath, fading, shadowing noise or interference.

Methodology Applied
Scientific EffectShadowing:

Implementation Method 4

the physical layer property of the communication channel comprises noise

Methodology Applied
Scientific EffectNoise:

Implementation Method 5

the physical layer property of the communication channel comprises interference

Methodology Applied
Scientific EffectInterference: Interference

Implementation Method 6

the distance between the two devices is determined based on a time of flight of the received communication

Methodology Applied
Scientific EffectTime of flight: Time of Flight

Implementation Method 7

the distance between the two devices may be determined based on a received signal strength indication of the received communication

Methodology Applied
Scientific EffectReceived signal strength indication:

Data Source

PatentUS11751062B1Security apparatus and methods for wireless data exchange
Publication Date: 2023.09.05 DIALOG SEMICONDUCTOR BV
  • US11751062B1 patent drawing
  • US11751062B1 patent drawing
  • US11751062B1 patent drawing

AI summary

A method of authenticating a first device at a second device for two wirelessly communicating devices, the method comprising: determining the distance between the two devices based on a property of a received communication; at each device, determining at least one shared physical layer property of the communication channel between the two devices; and authenticating the first device based on the determined distance between the two devices and the determined physical layer property of the communication channel.