Efficient techniques for error detection and authentication in wireless networks

• US 8,036,133 B2
• Filed: 03/03/2008
• Issued: 10/11/2011
• Est. Priority Date: 03/05/2007
• Status: Expired due to Fees

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Maheshwari, Shashikant, Saifullah, Yousuf, Swami, Yogesh
• Primary Examiner(s): ABELSON, RONALD B
• Application Number:
  US12/041,564
• Publication Number:
  US 20080220742A1
• Time in Patent Office: 1,317 Days
• Field of Search: 370/235, 370/242, 713/160, 713/161, 713168-170, 713/176, 714100-106, 714/148, 714/152, 714746-762, 714/774, 714786-788
• US Class Current: 370/242
• CPC Class Codes: H04L 1/0041 Arrangements at the transmitter end
• CPC Class Codes: H04L 1/0072 Error control for data other than payload data, e.g. control data
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04W 12/106 Packet or message integrity

Abstract

Various example embodiments are disclosed relating to efficient techniques for error detection and authentication in wireless networks. For example, according to an example embodiment, an apparatus adapted for wireless communication in a wireless network may include a processor. The processor may be configured to transmit a message including a field to provide both authentication and error detection for the message. The field may include an authenticated checksum sequence.

Claims

1. An apparatus adapted for wireless communication in a wireless network, the apparatus comprising:

a processor, the processor being configured to transmit a message, the message including a message body and a field to provide both authentication and error detection for the message, wherein the message body comprises a header, the processor being further configured to determine, during one of a registration and a network entry for a wireless node, a security key associated with the wireless node, and

wherein the processor being configured to transmit comprises the processor being configured to;

determine an authenticated header checksum sequence for the header to provide both authentication and error detection for the header, the processor being configured to determine the authenticated header checksum sequence including being configured to;

determine a message authentication code (MAC) over [(the security key XORed with a counter) and the header] to generate a MAC result; and

divide the MAC result by a generator polynomial to generate a residue, wherein the authenticated checksum sequence comprises the residue.

2. The apparatus of claim 1, wherein the message also includes a field indicating a presence in the message of the field providing both authentication and error detection for the message.

3. The apparatus of claim 1, wherein the header comprises a Media Access Control header.

4. The apparatus of claim 1, wherein the message comprises one of a control frame and a management frame transmitted to one of an infrastructure node, a base station and an access point.

5. The apparatus of claim 1, wherein the message comprises one of a resource request message, a bandwidth request message and an uplink request message.

6. The apparatus of claim 1, wherein the header comprises an IEEE 802.16 bandwidth request header.

7. An apparatus adapted for wireless communication in a wireless network, the apparatus comprising:

a processor, the processor being configured to transmit a message, the message including a message body and a field to provide both authentication and error detection for the message, wherein the processor being configured to transmit comprises the processor being configured to;

determine an authenticated checksum sequence for the message body to provide both authentication and error detection for the message body, the processor being configured to determine the authenticated checksum sequence including being configured to;

determine a message digest over the message body and a security key; and

divide the message digest by a checksum generator polynomial to generate a residue, wherein the authenticated checksum sequence comprises the residue; and

transmit the message, the message including the authenticated checksum sequence.

8. A method comprising:

determining a message, wherein the message includes a message body and a field to provide both authentication and error detection for the message; and

transmitting the message to a wireless node,

wherein the message body comprises a header and the field comprises an authenticated header checksum sequence, and wherein the method further comprises;

determining the authenticated header checksum sequence for the header to provide both authentication and error detection for the header, including;

determining a message digest over the header and a security key; and

dividing the message digest by a generator polynomial to generate a residue, wherein the authenticated header checksum sequence comprises the residue.

9. The method of claim 8, wherein the message also includes a second field indicating a presence in the message of the field providing both authentication and error detection for the message.

10. The method of claim 8, further comprising determining the security key for communicating with an infrastructure node.

11. The method of claim 8, wherein the determining the authenticated header checksum sequence comprises:

determining a message authentication code (MAC) over [(the security key XORed with a counter) and the header] to generate a MAC result;

dividing the MAC result by a generator polynomial to generate a residue, wherein the authenticated header checksum sequence comprises the residue.

12. The method of claim 8, wherein the determining the authenticated header checksum sequence comprises:

determining a message authentication code (MAC) over [(the security key XORed with a counter) and the header] to generate a MAC result; and

dividing the MAC result by a generator polynomial to generate a residue, wherein the authenticated header checksum sequence comprises the residue.

13. A method comprising:

receiving a message, wherein the message includes a message body and a field to provide both authentication and error detection for the message body;

using the field to authenticate the message and to detect any errors in the message;

determining a security key associated with a wireless node; and

negotiating, with the wireless node, the use of an authenticated checksum sequence for one or messages,

wherein respective authenticated checksum sequences of each of the one or more messages are based on the security key.

14. The method of claim 13, wherein the field comprises the authenticated checksum sequence, the authenticated checksum sequence providing both authentication and error detection for the message body, the message also including a second field indicating a presence in the message of the authenticated checksum sequence.

15. The method of claim 13, wherein the message body comprises a header, and wherein the receiving comprises receiving the message, the message including the header and the authenticated header checksum sequence to provide both authentication and error detection for the header.

16. An apparatus adapted for wireless communication in a wireless network, the apparatus comprising:

a wireless transceiver; and

a processor, the processor being configured to;

determine a security key;

negotiate, with a wireless infrastructure node, the use of authenticated checksum sequences for the transmission of one or messages to the infrastructure node; and

transmit a message to the infrastructure node, the message including a message body and an authenticated checksum sequence to provide authentication and error detection for the message body, the authenticated checksum sequence being based on the security key.

17. The apparatus of claim 16, wherein the message body comprises a header, and wherein the authenticated checksum sequence comprises an authenticated header checksum sequence to provide authentication and error detection for the header.

18. The apparatus of claim 16, wherein the message body comprises a header, and the authenticated checksum sequence comprises an authenticated header checksum sequence, and wherein the processor being configured to transmit comprises the processor being configured to:

determine the authenticated header checksum sequence for the header to provide both authentication and error detection for the header, the processor being configured to determine the authenticated header checksum sequence including being configured to;

determine a message digest over the header and the security key; and

divide the message digest by a generator polynomial to generate a residue,

wherein the authenticated header checksum sequence comprises the residue; and

transmit the message to the infrastructure node, the message including the header and the authenticated header checksum sequence.

19. The apparatus of claim 16, further comprising:

a wireless transceiver coupled to the processor; and

a memory coupled to the processor.