Method and apparatus for performing secure wireless communication with reduced bus traffic

• US 20050154871A1
• Filed: 01/05/2004
• Published: 07/14/2005
• Est. Priority Date: 01/05/2004
• Status: Abandoned Application

• Current Assignee: MediaTek, Inc.
• Original Assignee: MediaTek, Inc.
• Inventors: Chan, Ko-Ming, Su, Shih-Chang, Lin, Chu-Ming
• Application Number:
  US10/751,693
• Publication Number:
  US 20050154871A1
• Time in Patent Office: Days
• US Class Current: 713/150
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/0637 Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

A method and apparatus for performing secure communication in a WLAN environment. According to the invention, a decryption table is provided, which includes several entries each having a number of sections to store at least one check item, at least one characteristic value, a secret key and a cipher type. The check item is employed to indicate which field of the encrypted packet needs to be compared with the characteristic value in the same entry of the decryption table. In response to receipt of an encrypted packet, one entry in sequence is selected from the decryption table. Then at least one field to be checked is extracted from the encrypted packet contingent on the check item in the selected entry. Upon successful matching of the extracted field to the characteristic value in the selected entry, the secret key and the cipher type in this entry are applied to decrypt the encrypted packet.

Claims

1. A method for performing secure wireless communication with reduced bus traffic in a computer system, comprising the steps of:

providing a decryption table having a plurality of entries each of which includes a plurality of sections to store at least one check item, at least one characteristic value, a secret key and a cipher type;

responsive to receipt of an encrypted packet,

sequentially selecting one entry from the decryption table;

extracting at least one field to be checked from the encrypted packet contingent on the check item in the selected entry; and

upon successful matching of the extracted field of the encrypted packet to the characteristic value in the selected entry, applying the secret key and the cipher type in the selected entry to decrypt the encrypted packet;

wherein the check item indicates which field of the encrypted packet needs to be compared with the characteristic value in the same entry of the decryption table.

2. The method as recited in claim 1 wherein the next entry in sequence is selected from the decryption table for comparison when the matching of the extracted field to the characteristic value is unsuccessful.

3. The method as recited in claim 1 wherein the entries are listed in the decryption table from the highest to lowest priority.

4. The method as recited in claim 1 wherein if the check item indicates that a Key ID needs to be checked, a field of Key ID within the encrypted packet is extracted and then compared with the characteristic value representing a predetermined key identifier.

5. The method as recited in claim 1 wherein if the check item indicates that a receiver address needs to be checked, a field of receiver address within the encrypted packet is extracted and then compared with the characteristic value representing a predetermined address.

6. The method as recited in claim 1 wherein if the check item indicates that a transmitter address needs to be checked, a field of transmitter address within the encrypted packet is extracted and then compared with the characteristic value representing a predetermined address.

7. An apparatus for performing secure wireless communication with reduced bus traffic in a computer system, comprising:

a decryption table configured to comprise a plurality of entries each of which includes a plurality of sections to store at least one check item, at least one characteristic value, a secret key and a cipher type; and

a cryptography engine with access to the decryption table, including;

means, responsive to receipt of an encrypted packet, for extracting from the encrypted packet at least one field to be checked contingent on the check item in a currently selected entry sequentially chosen from the decryption table;

means for matching the extracted field of the encrypted packet to the characteristic value in the currently selected entry; and

means, upon successful matching, for applying the secret key and the cipher type in the currently selected entry to decrypt the encrypted packet;

wherein the check item indicates which field of the encrypted packet needs to be compared with the characteristic value in the same entry of the decryption table.

8. The apparatus as recited in claim 7 wherein the next entry in sequence is selected from the decryption table for comparison when the matching of the extracted field to the characteristic value is unsuccessful.

9. The apparatus as recited in claim 7 wherein the decryption table keeps the entries in order from the highest to lowest priority.

10. The apparatus as recited in claim 7 wherein if the check item indicates that a Key ID needs to be checked, the extracting means can extract a field of Key ID within the encrypted packet, such that the matching means is then able to compare the extracted field of Key ID with the characteristic value representing a predetermined key identifier.

11. The apparatus as recited in claim 7 wherein if the check item indicates that a receiver address needs to be checked, the extracting means can extract a field of receiver address within the encrypted packet, such that the matching means is then able to compare the extracted field of receiver address with the characteristic value representing a predetermined address.

12. The apparatus as recited in claim 7 wherein if the check item indicates that a transmitter address needs to be checked, the extracting means can extract a field of transmitter address within the encrypted packet, such that the matching means is then able to compare the extracted field of transmitter address with the characteristic value representing a predetermined address.