Method of authentication of wireless communication based on physical layer security

Patent metadata

Field	Value
Publication number	US-11877153-B2
Application number	US-202017438803-A
Country	US
Kind code	B2
Filing date	Mar 11, 2020
Priority date	Mar 14, 2019
Publication date	Jan 16, 2024
Grant date	Jan 16, 2024

Abstract

In an embodiment, a communication method, using OFDM (Orthogonal Frequency Division Multiplexing), comprises transmitting and receiving packets between a first node and at least one second node, where each packet comprises a preamble and payload data. The method, performed by the first node, may comprise receiving packets from the at least one second node, and authenticating the at least one second node based on physical layer characteristics, i.e., on CSI (Channel State Information). The authenticating may be based on a plurality of preambles, which are extracted from a group of consecutively received packets.

First claim

The invention claimed is:

1. A communication method using OFDM (Orthogonal Frequency Division Multiplexing) comprising transmitting and receiving packets between a first node and at least one second node, where each packet comprises a preamble and payload data, said method being performed by the first node and comprising:
receiving packets from the at least one second node;
extracting a plurality of preambles from a group of consecutively received packets; and
authenticating the at least one second node based on accumulated deviations in a Channel Impulse Response (CIR) derived from the plurality of preambles, wherein the authenticating comprises
comparing the CIR of the preamble of each packet of the group of consecutively received packets to a reference CIR, and
accumulating the result of the comparisons from all packets of the group as the accumulated deviations.

2. The method according to claim 1 , each of said preambles consisting of not more than two OFDM symbols.

3. The method according to claim 1 , further comprising:
obtaining training sequences from the at least one second node;
analyzing the training sequences; and
setting the reference CIR based on analysis of the training sequences.

4. The method according to claim 1 , further comprising:
comparing the accumulated deviations to a threshold; and
setting an alarm indicating intrusion in case the accumulated deviations exceed the threshold.

5. The method according to claim 4 , further comprising:
obtaining training sequences from the at least one second node;
evaluating the training sequences; and
setting the threshold based on the evaluation.

6. The method according to claim 1 , wherein said first node is a master node, and each second node is a slave node.

7. The method according to claim 1 , wherein said first node is a slave node, and the second node is a master node.

8. The method according to claim 1 , wherein the first node is connected to a wireless local area network.

9. The method according to claim 8 , wherein the wireless local area network comprises a wireless Ethernet network.

10. The method according to claim 8 , wherein the wireless local area network comprises a network according to IEEE (Institute of Electrical and Electronics Engineers) 802.11 standards.

11. The method according to claim 1 , each of said preambles consisting of one single OFDM symbol.

12. A communication node using OFDM (Orthogonal Frequency Division Multiplexing), wherein packets are transmitted and received between the communication node and a further communication node, each packet comprises a preamble and payload data, and said communication node comprises:
a communication interface for receiving packets from the further communication node; and
an authenticator for extracting a plurality of preambles from a group of consecutively received packets, and authenticating the further communication node based on accumulated deviations in a Channel Impulse Response (CIR) derived from the plurality of preambles, wherein the authenticating comprises
comparing the CIR of the preamble of each packet of the group of consecutively received packets to a reference CIR, and
accumulating the result of the comparisons from all packets of the group as the accumulated deviations.

13. The communication node according to claim 12 , each of said preambles consisting of not more than two OFDM symbols.

14. The communication node according to claim 12 , wherein the authenticating further comprises:
comparing the accumulated deviations to a threshold; and
setting an alarm indicating intrusion in case the accumulated deviations exceed the threshold.

15. The communication node according to claim 14 , further comprising a training sequence obtainer configured to:
obtain training sequences from the further communication node;
analyze the training sequences; and
set the reference CIR based on analysis of the training sequences.

16. A non-transitory computer-readable medium storing instructions that, when executed by a processor of a first node, cause the processor to carry out a communication method using OFDM (Orthogonal Frequency Division Multiplexing) comprising transmitting and receiving packets between the first node and at least one second node, where each packet comprises a preamble and payload data, said communication method comprising:
receiving packets from the at least one second node;
extracting a plurality of preambles from a group of consecutively received packets; and
authenticating the at least one second node based on accumulated deviations in a Channel Impulse Response (CIR) derived from the plurality of preambles, wherein the authenticating comprises
comparing the CIR of the preamble of each packet of the group of consecutively received packets to a reference CIR, and
accumulating the result of the comparisons from all packets of the group as the accumulated deviations.

17. The non-transitory computer-readable medium according to claim 16 , each of said preambles consisting of not more than two OFDM symbols.

18. The non-transitory computer-readable medium according to claim 16 , wherein the authenticating further comprises:
comparing the accumulated deviations to a threshold; and
setting an alarm indicating intrusion in case the accumulated deviations exceed the threshold.

Assignees

• Hitachi Energy Ltd

Inventors

• Pang Zhibo
• Luvisotto Michele
• Pan Fei
• Xiao Ming
• Jansson Roger

Classifications

• H04L63/1441

  Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002) · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04W12/065 Primary

  Continuous authentication · CPC title

• H04B7/0626

  Channel coefficients, e.g. channel state information [CSI] · CPC title

• H04L5/0007

  the frequencies being orthogonal, e.g. OFDM(A) or DMT · CPC title