Wireless Link Ranging Timer and Message Skip Indicator for DoS Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current wireless communication systems face challenges in distinguishing between legitimate devices attempting to reestablish communication and illegitimate devices trying to register with duplicate identifiers, which can lead to denial-of-service (DoS) attacks, especially when devices move out of coverage or attempt to register with different base stations.

Innovation Solution

Implementing a ranging timer and message skip indicator mechanism within the communication system to differentiate between legitimate and illegitimate devices by monitoring the duration since the last ranging process and checking for the presence of a message skip indicator in ranging requests, thereby preventing unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the system responds to all ranging requests to ensure legitimate devices can reestablish communication, then communication reliability is improved, but the system becomes vulnerable to DoS attacks from devices using duplicate identifiers

Engineering Contradiction:
Improvecommunication reliabilityVSAvoidDoS attack vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary actions by maintaining a ranging timer and checking message skip indicators before responding to ranging requests. This allows the system to pre-establish detection mechanisms that identify illegitimate devices before they can successfully launch a DoS attack, while still permitting legitimate devices to reestablish communication.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The ranging timer and message skip indicator act as intermediaries between the ranging request and the system's response. These intermediaries filter and evaluate requests, allowing legitimate traffic to pass through while blocking illegitimate requests, thus resolving the contradiction between reliability and security.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If the system monitors ranging requests to detect duplicate identifiers, then security against DoS attacks is improved, but the complexity of the ranging process increases

Engineering Contradiction:
ImproveDoS attack detectionVSAvoidranging process complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The system extracts specific detection elements (ranging timer and message skip indicator) from the overall ranging process. By isolating these detection mechanisms, the system can monitor for duplicate identifiers without requiring complete redesign of the ranging protocol, thus improving security while minimizing added complexity.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The system changes parameters by introducing a time-based parameter (ranging timer duration) and a message indicator (message skip indicator) to the ranging process. These parameter changes enable detection of duplicate identifiers using existing infrastructure, achieving enhanced security with minimal complexity increase.

Inventive Principle:
Principle #35Parameter changes

3Loss of energy

If the system ignores ranging requests from devices with duplicate identifiers, then network resource consumption is reduced, but legitimate devices moving to new base stations may be incorrectly blocked

Engineering Contradiction:
Improvenetwork resource consumptionVSAvoidlegitimate device connectivity
Core Design Contradiction:
Loss of energyVSReliability

Solution Approach 1:

The system uses feedback mechanisms by checking the message skip indicator and comparing timer durations to determine whether to respond to ranging requests. This feedback loop allows the system to distinguish between illegitimate duplicate identifier usage and legitimate devices moving to new base stations, reducing resource consumption while maintaining connectivity for legitimate devices.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system applies dynamic decision-making by adjusting its response to ranging requests based on real-time conditions (timer duration, message skip indicator presence). This dynamic approach allows the system to adapt to different scenarios, blocking illegitimate requests while permitting legitimate devices to reconnect, thus balancing resource conservation with reliability.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS8424085B2Detecting a denial of service attack
Publication Date: 2013.04.16 CLEARWIRE IP HOLDINGS LLC
  • US8424085B2 patent drawing
  • US8424085B2 patent drawing
  • US8424085B2 patent drawing

AI summary

A plurality of ranging processes are performed to monitor a status of a wireless link associated with a device identifier. A ranging request that includes the device identifier and a message skip indicator is received. It is determined that the device identifier is already associated with the wireless link. A duration since a previously completed ranging process is determined. Based on the duration, and the message skip indicator, it is determined whether to respond to the ranging request.