SUPPORT OF PHYSICAL LAYER SECURITY IN WIRELESS LOCAL AREA NETWORKS

• US 20100131751A1
• Filed: 07/08/2009
• Published: 05/27/2010
• Est. Priority Date: 07/08/2008
• Status: Active Grant

• Current Assignee: InterDigital Patent Holdings, Inc. (InterDigital, Inc.)
• Original Assignee: InterDigital Patent Holdings, Inc. (InterDigital, Inc.)
• Inventors: Mathur, Suhas, Reznik, Alexander, Levy, Joseph S., Shah, Yogendra C.
• Granted Patent: US 8,433,894 B2
• Time in Patent Office: Days
• US Class Current: 713/151
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/16 Implementing security features at a particular protocol layer
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/125 Protection against power exhaustion attacks
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 24/10 Scheduling measurement reports ; Arrangements for measurement reports
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A method and an apparatus for performing physical layer security operation are disclosed. A physical layer performs measurements continuously, and reports the measurements to a medium access control (MAC) layer. The MAC layer processes the measurements, and sends a security alert to a security manager upon detection of an abnormal condition based on the measurements. The security manager implements a counter-measure upon receipt of the security alert. The measurements include channel impulse response (CIR), physical medium power measurement, automatic gain control (AGC) value and status, automatic frequency control (AFC) gain and status, analog-to-digital converter (ADC) gain, Doppler spread estimate, and/or short preamble matched filter output. The security manager may switch a channel, switch a channel hopping policy, change a back-off protocol, or change a beamforming vector upon reception of the security alert.

Claims

1. A wireless transmit/receive unit (WTRU) configured to perform physical layer security operation, the WTRU comprising:

a physical layer configured to receive a burst, perform measurements continuously, and report the measurements;

a medium access control (MAC) layer configured to process the measurements received from the physical layer, and detect an abnormal condition based on the measurements, and send a security alert upon detection of the abnormal condition; and

a security manager configured to implement a counter-measure upon receipt of the security alert from the MAC layer.

2. The WTRU of claim 1 wherein the measurements include at least one of channel impulse response (CIR), physical medium power measurement, automatic gain control (AGC) value and status, automatic frequency control (AFC) gain and status, analog-to-digital converter (ADC) gain, Doppler spread estimate, and short preamble matched filter output.

3. The WTRU of claim 2 further comprising:

a database configured to associate a source MAC address of a received packet and a CIR measured on the burst carrying the packet, wherein the MAC layer is configured to check consistency of the source MAC address-CIR pair and detect the abnormal condition on a condition that the source MAC address-CIR pair is not consistent.

4. The WTRU of claim 2 wherein the physical layer is configured to report the physical medium power measurement to the MAC layer at a rate configured by a higher layer.

5. The WTRU of claim 4 wherein the MAC layer is configured to perform statistical processing on the physical medium power measurement and detect a low-power jammer attack on a condition that it is determined based the physical medium power measurement that an unlike collision occurs repeatedly.

6. The WTRU of claim 1 wherein the security manager is configured to switch a channel upon reception of the security alert.

7. The WTRU of claim 1 wherein the security manager is configured to switch a channel hopping policy upon reception of the security alert.

8. The WTRU of claim 1 wherein the security manager is configured to change a back-off protocol upon reception of the security alert.

9. The WTRU of claim 1 wherein the security manager is configured to change a beamforming vector upon reception of the security alert.

10. A method for performing physical layer security operation, the method comprising:

a physical layer performing physical layer measurements continuously;

the physical layer reporting the measurements to a medium access control (MAC) layer;

the MAC layer processing the measurements;

the MAC layer sending a security alert to a security manager upon detection of an abnormal condition based on the measurements; and

the security manager implementing a counter-measure upon receipt of the security alert.

11. The method of claim 10 wherein the measurements include at least one of channel impulse response (CIR), physical medium power measurement, automatic gain control (AGC) value and status, automatic frequency control (AFC) gain and status, analog-to-digital converter (ADC) gain, Doppler spread estimate, and short preamble matched filter output.

12. The method of claim 11 further comprising:

storing a CIR in a database, the CIR being associated with a source MAC address of a received packet; and

checking consistency of a source MAC address-CIR pair, wherein the abnormal condition is detected on a condition that the source MAC address-CIR pair is not consistent.

13. The method of claim 10 wherein the physical layer reports the physical medium power measurement at a rate configured by a higher layer.

14. The method of claim 13 wherein the MAC layer performs statistical processing on the physical medium power measurement and detects a low-power jammer attack on a condition that it is determined based the physical medium power measurement that an unlike collision occurs repeatedly.

15. The method of claim 10 further comprising:

switching a channel upon reception of the security alert.

16. The method of claim 10 further comprising:

switching a channel hopping policy upon reception of the security alert.

17. The method of claim 10 further comprising:

changing a back-off protocol upon reception of the security alert.

18. The method of claim 10 further comprising:

changing a beamforming vector upon reception of the security alert.

19. A wireless transmit/receive unit (WTRU) configured to perform physical layer security operation, the WTRU comprising:

a physical layer configured to receive a burst, perform measurements continuously, and report the measurements;

a medium access control (MAC) layer configured to process the measurements received from the physical layer, and produce a security-related quantity; and

a security manager configured to use the security-related quantity or provide the security-related quantity to another entity.

20. The WTRU of claim 19 wherein the MAC layer is configured to communicate with a MAC entity of at least one other entity.

21. The WTRU of claim 19 wherein the measurements include at least one of channel impulse response, physical medium power measurement, automatic gain control (AGC) value and status, automatic frequency control (AFC) gain and status, analog-to-digital converter (ADC) gain, Doppler spread estimate, and short preamble matched filter output.

22. The WTRU of claim 19 wherein the security-related quantity is a source signature or a pairwise security key.

23. A method for performing physical layer security operation, the method comprising:

a physical layer performing physical layer measurements continuously;

the physical layer reporting the measurements to a medium access control (MAC) layer;

the MAC layer processing the measurements received from the physical layer and producing a security-related quantity; and

a security manager using the security-related quantity or providing the security-related quantity to another entity.

24. The method of claim 23 further comprising the MAC layer communicating with a MAC entity of at least one other entity.

25. The method of claim 23 wherein the measurements include at least one of channel impulse response, physical medium power measurement, automatic gain control (AGC) value and status, automatic frequency control (AFC) gain and status, analog-to-digital converter (ADC) gain, Doppler spread estimate, and short preamble matched filter output.

26. The method of claim 23 wherein the security-related quantity is a source signature or a pairwise security key.