Wireless Link Setup Using Unprotected Association Requests
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current wireless communication systems experience significant delays due to the repetitive authentication process when a mobile device connects to or re-connects with a wireless access point, and there is a need to reduce the number of messages required for link setup and authentication while maintaining security.
Innovation Solution
The proposed solution involves a modified 4-way handshake technique where a mobile device can perform link setup without initially receiving an access point nonce, by sending an unprotected association request and receiving the nonce in the association response, and using a temporary key for upper layer signaling protection, as well as generating a unique nonce based on an ANonce-seed for secure link establishment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a mobile device performs traditional authentication process when connecting to an access point, then security is maintained, but significant setup delays occur
Solution Approach 1:
The system performs preliminary authentication by establishing security context and keys before the actual data transmission begins. The access point and mobile device exchange authentication information and establish cryptographic keys in advance, so that when data transmission starts, the authentication is already complete or near-complete, significantly reducing the perceived setup delay while maintaining security
Solution Approach 2:
The authentication process is segmented into multiple phases: initial connection phase with basic authentication, followed by gradual establishment of security context, and then full authenticated communication. This segmentation allows the device to start communicating at a basic level immediately while completing full authentication in the background, reducing the perceived delay
2Reliability
If the authentication process is repeated each time a mobile device connects to a different access point, then security is maintained, but setup delays increase
Solution Approach 1:
The system performs preliminary authentication by establishing security context and keys before the actual data transmission begins. The access point and mobile device exchange authentication information and establish cryptographic keys in advance, so that when data transmission starts, the authentication is already complete or near-complete, significantly reducing the perceived setup delay while maintaining security
Solution Approach 2:
The authentication system is designed to be universal across multiple access points within the same network. Once a device is authenticated to one access point, the authentication context can be reused or quickly transferred to other access points in the network, eliminating the need to perform complete authentication from scratch at each new access point
3Speed
If active scanning is performed to find nearby access points, then connection speed may improve, but power consumption increases
Solution Approach 1:
Instead of continuous active scanning, the system uses periodic scanning at optimized intervals. The mobile device scans for access points at specific periods rather than continuously, reducing power consumption while still maintaining the ability to discover and connect to access points in a timely manner. The scanning period is adjusted based on mobility patterns and network conditions
Solution Approach 2:
The system performs preliminary scanning and access point discovery before the user actually needs to connect. By anticipating connection needs and performing scanning in advance during low-power states or idle periods, the system prepares the connection information so that when connection is actually needed, the device can quickly establish connection without intensive real-time scanning
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems and methods of performing link setup and authentication are disclosed. A first method utilizes an unprotected association request and an association response that includes an access point nonce (ANonce). A second method includes receiving, during a first link setup using a first ANonce, a second ANonce for use in a second link setup. A third method utilizes a temporary key to protect an association request. A fourth method includes generating an ANonce at a mobile device based on an ANonce-seed received from an access point.