WLAN MPDU Encryption Segmentation for Processing Load Reduction

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing real-time data service systems based on WLAN face high processing loads and increased software and hardware costs due to encryption and decryption requirements for audio/video data, which affect service quality, especially when serving multiple mobile terminals simultaneously.

Innovation Solution

The method involves encapsulating control signaling messages in encrypted Media Access Control Protocol Data Units (MPDUs) and audio/video data messages in plaintext within the same MPDUs, with a plaintext transmission identifier, to reduce the processing load on Access Points (APs) and mobile terminals, allowing for efficient data transmission without the need for constant encryption and decryption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If audio/video data is encrypted and transmitted through the AP, then security is improved, but processing load and hardware costs increase significantly

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing load
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies different quality treatments to different parts of the data stream: control signaling messages are encrypted while audio/video data messages are transmitted in plaintext. This local differentiation allows security-critical control data to be protected while bulk media data flows without encryption overhead, resolving the contradiction between security and processing load.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent segments the data transmission into two distinct types: control signaling messages and audio/video data messages. By separating these segments and applying different encryption treatments, the system maintains security for control functions while eliminating encryption processing for media data, thus reducing overall processing load.

Inventive Principle:
Principle #1Segmentation

2Reliability

If encryption and decryption are performed for all data messages, then security is maintained, but service quality deteriorates due to high processing load

Engineering Contradiction:
ImprovesecurityVSAvoidservice quality
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent implements selective encryption where only control signaling messages undergo encryption/decryption processing while audio/video data messages are transmitted in plaintext. This local quality approach ensures security for control functions without degrading service quality through unnecessary encryption overhead on media data.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent applies partial action by performing encryption only on the necessary control signaling portion of the data stream rather than on all data. This partial encryption approach maintains security where needed while avoiding the excessive processing load that would deteriorate service quality.

Inventive Principle:
Principle #16Partial or excessive action

3Reliability

If WAPI protocol is implemented for all data transmission, then security is improved, but device complexity and costs increase

Engineering Contradiction:
ImprovesecurityVSAvoidsoftware and hardware costs
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies WAPI protocol selectively only to control signaling messages rather than to all data transmission. This local application of the security protocol reduces software and hardware costs by eliminating unnecessary WAPI processing for audio/video data while maintaining security for control functions.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent segments data transmission into control signaling and audio/video data, applying WAPI protocol only to the control signaling segment. This segmentation reduces device complexity and costs by limiting WAPI implementation to where it is actually needed for security.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS8694775B2Method enabling real-time data service, realization, real-time data service system and mobile terminal
Publication Date: 2014.04.08 ZTE CORP
  • US8694775B2 patent drawing
  • US8694775B2 patent drawing
  • US8694775B2 patent drawing

AI summary

The present invention discloses a method for implementing a real-time data service, a real-time data service system and a mobile terminal. Said method for implementing a real-time data service includes the following steps: before encapsulating a Media Access Control Protocol Data Unit (MPDU), a Wireless Local Area Network Privacy Infrastructure (WPI) module in an Access Point (AP) needs to determine the type of the data to be encapsulated in the MPDU; if the data is a control signalling message of a real-time data service, the WPI module encrypts said data, then encapsulates the encrypted data in a data (e.g. PDU) field of the MPDU, and transmits the encapsulated data to the mobile terminal; if the data is an audio/video data message of a real-time data service, the data is not to be encrypted, but is encapsulated directly into the data (e.g. PDU) field of the MPDU in plaintext, and then transmitted to the mobile terminal. The present invention can reduce the processing load and the software and hardware costs of the AP and the mobile terminal.