Wireless MAC Header and Data Integrity via Protected Acknowledgments

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing wireless communication systems face challenges in protecting the integrity of MAC headers and data due to computationally intensive MIC verification, which can lead to performance degradation and susceptibility to attacks, particularly in high-rate aggregation-MPDU scenarios.

Innovation Solution

Proposed schemes shift the burden of integrity checking from the recipient to the originator by verifying the authenticity of acknowledgments using time synchronization functions or signatures, allowing for relaxed receiver requirements and preventing attacks without the need for immediate header MIC checks at the recipient.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the recipient verifies the header MIC before sending an ACK or BA, then the integrity of the MAC header is protected, but the processing time and computational cost increase significantly

Engineering Contradiction:

Improveintegrity protectionVSAvoidprocessing time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The originator station performs preliminary integrity verification by generating a MIC for the ACK or BA frame before transmission. This shifts the computational burden from the recipient to the originator, allowing the recipient to verify integrity quickly using the pre-computed MIC rather than performing complex verification operations in real-time

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

Instead of having the recipient verify the header MIC (the conventional approach), the invention inverts the verification process by having the originator generate a MIC for the ACK/BA frame that the recipient can quickly verify. This reverses who performs the computationally intensive operation versus who performs the simple verification

Inventive Principle:

Principle #13The other way round (Inversion)

2Reliability

If the recipient checks the MIC of each data frame in an AMPDU, then data integrity is verified, but the computational complexity and processing overhead increase

Engineering Contradiction:

Improvedata integrity verificationVSAvoidcomputational complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The invention extracts the integrity verification function from the recipient's real-time processing burden and relocates it to the originator station. The originator generates MICs for ACK/BA frames in advance, eliminating the need for the recipient to perform complex MIC checking operations on each data frame during high-rate AMPDU reception

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The MIC mechanism acts as an intermediary that enables trust between originator and recipient without requiring the recipient to perform intensive verification. The originator-signed MIC in the ACK/BA frame serves as cryptographic proof of integrity, mediating the trust relationship efficiently

Inventive Principle:

Principle #24Intermediary (Mediator)

3Measurement precision

If extra padding and delimiters are added for header MIC processing time, then processing accuracy is improved, but the throughput is reduced

Engineering Contradiction:

Improveprocessing accuracyVSAvoidthroughput

Core Design Contradiction:

Measurement precisionVSProductivity

Solution Approach 1:

By performing the computationally intensive MIC generation in advance at the originator station before the actual data transmission, the system eliminates the need for extra padding and delimiters during high-rate AMPDU reception. The pre-computed MIC allows for continuous processing without interrupting the data flow for verification operations

Inventive Principle:

Principle #10Preliminary action

4Speed

If the recipient only checks the header MIC and FCS before sending ACK, then processing speed is maintained, but the system becomes susceptible to MITM attacks with fake data portions

Engineering Contradiction:

Improveprocessing speedVSAvoidMITM attack vulnerability

Core Design Contradiction:

SpeedVSObject-affected harmful factors

Solution Approach 1:

The originator station performs preliminary anti-action by generating a MIC for the ACK or BA frame that binds the integrity of subsequent data transmissions. This pre-established cryptographic binding prevents MITM attacks because any tampered data portion would fail the MIC verification performed by the recipient using the originator's pre-generated key

Inventive Principle:

Principle #9Preliminary anti-action

Solution Approach 2:

The invention introduces feedback through the MIC verification mechanism where the recipient verifies the originator's signature on the ACK/BA frame. This feedback loop provides continuous integrity validation, allowing the system to maintain high processing speed while detecting and rejecting fraudulent data portions that attempt to bypass security checks

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS20250211993A1Integrity Of MAC Header And Data With Relaxed Receiver Requirement In Wireless Communications

Publication Date: 2025.06.26 MEDIATEK INC

AI summary

Techniques pertaining to protecting integrity of medium access control (MAC) header and data with relaxed receiver requirement in wireless communications are described. An apparatus (e.g., a station (STA)) transmits one or more MAC protocol data units (MPDUs). The apparatus then receives a protected acknowledgement. The apparatus detects a man in the middle (MITM) attack based on a time synchronization function (TSF) or signature in the protected acknowledgement.