Wireless Broadcast Message Authentication via Hash Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wireless networks face issues with forged network management and control messages, which can reduce performance, increase power consumption, and lead to denial of service situations, as these messages may not originate from the access point and can be manipulated by associated communication stations.
Innovation Solution
Implementing a system where broadcast messages are secured with a broadcast key, and communication stations authenticate these messages by generating reply messages with a hash that is verified by the access point, with countermand messages sent when hashes do not verify, indicating potential forgery, and retransmitting the original message to stations that did not respond within a predetermined time.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If broadcast management control messages are transmitted without authentication, then network operation simplicity is maintained, but network security and reliability deteriorate due to forged messages
Solution Approach 1:
The access point generates a hash of the broadcast management control message before transmission and includes it in the authenticated message. Communication stations receive the message with the hash, generate their own hash of the received message, and compare it with the provided hash to verify authenticity before acting on the message contents.
Solution Approach 2:
A hash function serves as an intermediary mechanism to verify message authenticity without requiring complex cryptographic authentication. The hash acts as a digital fingerprint that can be easily computed and compared to determine whether a message originated from the access point or was forged by a communication station.
2Reliability
If communication stations process all received broadcast messages, then response time is improved, but network performance deteriorates due to processing forged messages
Solution Approach 1:
Communication stations perform hash verification as a preliminary check before processing any broadcast management control message. This preliminary action ensures that only authentic messages from the access point are processed further, preventing wasted time on forged messages while maintaining efficient processing of legitimate messages.
3Productivity
If communication stations act on all received broadcast messages immediately, then system responsiveness is improved, but network security deteriorates due to execution of forged commands
Solution Approach 1:
The system applies preliminary anti-action by verifying message authenticity through hash comparison before executing any broadcast management control message. Communication stations compare the provided hash with their own computed hash, and only messages with matching hashes are processed. This preliminary verification prevents forged messages from causing harmful effects while allowing authentic messages to be executed efficiently.
Data Source
AI summary
Embodiments of wireless communication devices and methods for protecting broadcasted management control messages from insider forgery in wireless network are generally described herein.