Brokered communication protocol using information theoretic coding for security

• US 10,547,632 B2
• Filed: 10/27/2017
• Issued: 01/28/2020
• Est. Priority Date: 10/27/2017
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Wakid, Shukri
• Primary Examiner(s): Zhao, Don G
• Application Number:
  US15/795,438
• Publication Number:
  US 20190132347A1
• Time in Patent Office: 823 Days
• CPC Class Codes: H04L 1/203 Details of error rate determination, e.g. BER, FER or WER
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04L 63/1475 Passive attacks, e.g. eavesdropping or listening without modification of the traffic monitored
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/304 based on error correction codes, e.g. McEliece
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04W 12/009 specially adapted for networks, e.g. wireless sensor networks, ad-hoc networks, RFID networks or cloud networks
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A network device receives an enrollment request from a first device to enroll in a brokered communication protocol for communicating with at least one second device. The network device transmits, to the first device, a test vector and a measurement request, and receives, from the first device responsive to the measurement request, a measurement of at least one of a bit-error-rate (BER) and/or a signal-to-noise ratio (SNR) based on receipt of the test vector at the first device. The network device determines if the first device is vulnerable to message interception or eavesdropping based on the measurement of the BER and/or the SNR, and denies the first device access, by the network device, to the brokered communication protocol based on whether the first device is determined to be vulnerable to message interception or eavesdropping.

Claims

1. A method, comprising:

receiving, at a network device, an enrollment request from a first device to enroll in a brokered communication protocol, for communicating with at least one second device;

transmitting, from the network device to the first device, a test vector and a measurement request;

receiving, from the first device responsive to the measurement request, a measurement of at least one of a bit-error-rate (BER) or a signal-to-noise ratio (SNR) based on receipt of the test vector at the first device;

determining if the first device is vulnerable to message interception or eavesdropping based on the measurement of the at least one of the BER or the SNR; and

denying, by the network device, access to the brokered communication protocol by the first device based on whether the first device is determined to be vulnerable to message interception or eavesdropping.

2. The method of claim 1, wherein, when implementing the brokered communication protocol, the network device acts as a broker for controlling communications between the first device and the at least one second device.

3. The method of claim 1, further comprising:

implementing the brokered communication protocol, between the first device and the network device using an information theoretic coding technique for physical layer security, in response to determining that the first device is not vulnerable to message interception or eavesdropping.

4. The method of claim 3, wherein using the information theoretic coding technique for physical layer security comprises:

scrambling portions of data of a message to be transmitted to produce a scrambled message;

concatenating a public key to the scrambled message; and

applying systematic coding to the scrambled message to produce an encoded message.

5. The method of claim 4, wherein the public key comprises a device identifier key assigned to the first device by the network device.

6. The method of claim 4, further comprising:

determining parity bits based on the encoded message;

appending the parity bits to the encoded message;

puncturing the encoded message, to remove encoded bits that correspond to the public key, to produce a punctured encoded message; and

transmitting the punctured encoded message to a destination device.

7. The method of claim 4, further comprising:

generating a random bit sequence, and

wherein the scrambling portions of the data of the message to be transmitted further comprises;

interleaving the portions of the data of the message based on the generated random bit sequence.

8. A network device, comprising:

a transceiver connected to a network; and

a processing unit to;

receive an enrollment request from a first device to enroll in a brokered communication protocol for communicating with at least one second device,

transmit, from the network device to the first device via the transceiver, a test vector and a measurement request,

receive, from the first device responsive to the measurement request via the transceiver, a measurement of at least one of a bit-error-rate (BER) or a signal-to-noise ratio (SNR) based on receipt of the test vector at the first device,

determine if the first device is vulnerable to message interception or eavesdropping based on the measurement of the at least one of the BER or the SNR, and

deny access to the brokered communication protocol by the first device based on whether the first device is determined to be vulnerable to message interception or eavesdropping.

9. The network device of claim 8, wherein, the processing unit implements the brokered communication protocol and acts as a broker for controlling communications between the first device and the at least one second device.

10. The network device of claim 8, wherein the processing unit is further:

implements the brokered communication protocol, between the first device and the network device using an information theoretic coding technique for physical layer security, in response to determining that the first device is not vulnerable to message interception or eavesdropping.

11. The network device of claim 10, wherein, when using the information theoretic coding technique for physical layer security, the processing unit further:

scrambles portions of data of a message to be transmitted to produce a scrambled message,

concatenates a public key to the scrambled message, and

applies systematic coding to the scrambled message to produce an encoded message.

12. The network device of claim 11, wherein the public key comprises a device identifier key assigned to the first device by the network device.

13. The network device of claim 11, wherein, when using the information theoretic coding technique for physical layer security, the processing unit further:

determines parity bits based on the encoded message,

appends the parity bits to the encoded message,

punctures the encoded message, to remove encoded bits that correspond to the public key, to produce a punctured encoded message, and

transmits the punctured encoded message to a destination device.

14. The network device of claim 11, wherein, when using the information theoretic coding technique for physical layer security, the processing unit:

generates a random bit sequence, and

wherein, when scrambling the portions of the data of the message to be transmitted, the processing unit further;

interleaves the portions of the data of the message based on the generated random bit sequence.

15. A non-transitory storage medium storing instructions executable by a network device, wherein the instructions comprise instructions to cause the network device to:

receive an enrollment request from a first device to enroll in a brokered communication protocol for communicating with at least one second device;

transmit, from the network device to the first device, a test vector and a measurement request;

receive, from the first device responsive to the measurement request, a measurement of at least one of a bit-error-rate (BER) or a signal-to-noise ratio (SNR) based on receipt of the test vector at the first device;

determine if the first device is vulnerable to message interception or eavesdropping based on the measurement of the at least one of the BER or the SNR; and

deny access to the brokered communication protocol by the first device based on whether the first device is determined to be vulnerable to message interception or eavesdropping.

16. The non-transitory storage medium of claim 15, wherein, when implementing the brokered communication protocol, the network device acts as a broker for controlling communications between the first device and the at least one second device.

17. The non-transitory storage medium of claim 15, wherein the instructions comprise instructions to cause the network device to:

implement the brokered communication protocol, between the first device and the network device using an information theoretic coding technique for physical layer security, in response to determining that the first device is not vulnerable to message interception or eavesdropping.

18. The non-transitory storage medium of claim 17, wherein using the information theoretic coding technique for physical layer security comprises instructions to cause the network device to:

scramble portions of data of a message to be transmitted to produce a scrambled message;

concatenate a public key to the scrambled message, wherein the public key comprises a device identifier key assigned to the first device by the network device; and

apply systematic coding to the scrambled message to produce an encoded message.

19. The non-transitory storage medium of claim 18, wherein using the information theoretic coding technique for physical layer security comprises instructions to cause the network device to:

determine parity bits based on the encoded message;

append the parity bits to the encoded message;

puncture the encoded message, to remove encoded bits that correspond to the public key, to produce a punctured encoded message; and

transmit the punctured encoded message to a destination device.

20. The non-transitory storage medium of claim 18, further comprising:

generating a random bit sequence, and

wherein the scrambling the portions of the data of the message to be transmitted further comprises;

interleaving the portions of the data of the message based on the generated random bit sequence.