Method and apparatus for preventing replay attack in wireless network environment

• US 8,200,970 B2
• Filed: 04/30/2009
• Issued: 06/12/2012
• Est. Priority Date: 05/30/2008
• Status: Expired due to Fees

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Shon, Tae-Shik, Choi, Hyo-Hyun, Koo, Bon-Hyun
• Primary Examiner(s): Kim, Jung
• Assistant Examiner(s): Tran, Tri
• Application Number:
  US12/433,224
• Publication Number:
  US 20090300354A1
• Time in Patent Office: 1,139 Days
• Field of Search: 713/168, 713/169, 713/178, 713/179, 713/181
• US Class Current: 713/168
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks

Abstract

A method for preventing a replay attack is provided. A prime number is mutually exchanged between a main node and children nodes. The main node generates a Prime Sequence Code Matrix (PSCM) corresponding to the prime number, notifies the children nodes of sequence orders corresponding to the children nodes. The main node selects an arbitrary value of a Prime Sequence Code-1 (PSC1) among a series of values corresponding to an arbitrary node in the PSCM. The arbitrary node computes a Prime Sequence Code-2 (PSC2) subsequent to receiving the PSC1 using a sequence order received from the main node and the prime number. The PSC2 is transmitted to the main node. The main node compares the received PSC2 with the PSCM. The method can be easily applied by supplementing a weakness for a replay attack on the basis of an IEEE 802.15-4-2006 standard and minimizing system load.

Claims

1. A method for preventing a replay attack, comprising the steps of:

mutually exchanging a prime number between a main node and one or more children nodes;

generating, by the main node, a Prime Sequence Code Matrix (PSCM) corresponding to the prime number;

notifying, by the main node, the one or more children nodes of sequence orders corresponding to the one or more children nodes;

selecting, by the main node, an arbitrary value of a Prime Sequence Code-1 (PSC1) among a series of values corresponding to an arbitrary node in the PSCM;

computing, by the arbitrary node, a Prime Sequence Code-2 (PSC2) subsequent to receiving the PSC1 using a sequence order received from the main node and the prime number, and transmitting PSC2 to the main node; and

comparing, by the main node, the received PSC2 with the PSCM.

2. The method according to claim 1, further comprising:

mutually exchanging, by the main node and the one or more children nodes, an algorithm for automatically computing the PSC1 and the PSC2 before the PSCM is generated.

3. The method according to claim 1, wherein the prime number is mutually exchanged in a process in which the one or more children nodes join the main node.

4. The method according to claim 1, wherein the PSCM is configured with rows and columns of a matrix, and an arbitrary number belonging to the matrix is shown once in each row and each column.

5. The method according to claim 4, wherein the rows of the PSCM correspond to the one or more children nodes.

6. The method according to claim 4, wherein all first columns of the rows of the PSCM are set to zero.

7. The method according to claim 1, wherein the arbitrary value of PSC1 is selected and transmitted along with a message.

8. A wireless communication network apparatus for preventing a replay attack, comprising:

a first communication means generating a Prime Sequence Code Matrix (PSCM) using a prime number corresponding to a number of nodes, assigning the prime number and sequence orders to the nodes, selecting and transmitting an arbitrary value of a Prime Sequence Code-1 (PSC1) in the PSCM, receiving a Prime Sequence Code-2 (PSC2) corresponding to the PSC1 from the nodes, and checking PSC2; and

a plurality of second communication means generating the PSC2 using the prime number, the sequence orders, and the PSC1 received from the first communication means, and transmitting the generated PSC2 to the first communication means.

9. The wireless communication network apparatus according to claim 8, wherein the PSC2 is a value subsequent to the PSC1.

10. The wireless communication network apparatus according to claim 8, wherein the PSC1 and the PSC2 are transmitted in a small-capacity field whose number of bits is equal to or less than 8 in a packet data format.

11. The wireless communication network apparatus according to claim 8, wherein the PSC1 and the PSC2 are transmitted in an 8-bit sequence number field in a general Media Access Control (MAC) frame based on an Institute of Electrical and Electronics Engineers (IEEE) 802.15.4-2006 packet data standard.

12. The wireless communication network apparatus according to claim 11, wherein the PSC1 and the PSC2 are transmitted in a 3-bit reserved field in a frame control field format.