Wireless LAN WEP initialization vector partitioning scheme
View Patent ↗In one embodiment, an authentication method features the generation of an initialization vector at a first electronic device and the determination at the first electronic device whether the initialization vector falls within a first group of initialization vectors. The first group includes a plurality of initialization vectors solely used in connection with an authentication sequence. Information is encrypted using in part the initialization vector for return to a second electronic device if the initialization vector falls within the first group.
1. An authentication method comprising:
generating an initialization vector at a first electronic device;
determining at the first electronic device whether the initialization vector falls within a first group of initialization vectors by determining whether a selected series of bits of the initialization vector has been set, the first group including a plurality of initialization vectors solely used in connection with an authentication sequence; and
encrypting information using in part the initialization vector for return to a second electronic device if the initialization vector falls within the first group.
2. The authentication method of claim 1 , wherein the first electronic device is a wireless unit.
3. The authentication method of claim 1 , wherein the second electronic device is an access point.
4. The authentication method of claim 1 , wherein prior to generating the initialization vector, the method comprises receiving the information from the second electronic device by the first electronic device.
5. The authentication method of claim 4 , wherein the information is a challenge text.
6. The authentication method of claim 5 , wherein the challenge text is a first sequence of bits and the initialization vector is a second sequence of bits produced by a number generator.
7. The authentication method of claim 4 , wherein the number generator is a pseudo-random number generator.
8. An authentication method comprising:
generating an initialization vector at a first electronic device;
determining at the first electronic device whether the initialization vector falls within a first group of initialization vectors, the first group including a plurality of initialization vectors solely used in connection with an authentication sequence;
encrypting information using in part the initialization vector for delivery to a second electronic device if the initialization vector falls within the first group; and
regenerating a second initialization vector if the initialization vector fails to fall within the first group.
9. The authentication method of claim 1 , wherein the selected series of bits is continuous.
10. The authentication method of claim 5 , wherein prior to receiving the challenge text, the method further comprises negotiating a shared secret key between the first electronic device and the second electronic device.
11. The authentication method of claim 10 , wherein the encrypting of the information includes
combining the initialization vector with the shared secret key; and
repeatedly performing bitwise Exclusive-OR (XOR) operations on the challenge text using a combination of the initialization vector with the shared secret key.
12. The authentication method of claim 5 further comprising:
transmitting both the encrypted challenge text and the initialization vector to the second electronic device;
decrypting the encrypted challenge text using both the initialization vector and a prestored copy of the shared secret key to recover a challenge text; and
comparing the recovered challenge text with the challenge text.
13. A method for authenticating a wireless unit in communications with an access point, comprising:
transmitting a challenge text from the access point to the wireless unit;
receiving an encrypted challenge text and an initialization vector from the wireless unit, the initialization vector falling within a first group of initialization vectors, the first group including a plurality of initialization vectors solely used in connection with an authentication sequence, the plurality of initialization vectors of the first group forming a discontinuous series of bits; and
decrypting the encrypted challenge text using both the initialization vector and a pre-stored copy of a shared secret key to recover a challenge text.
14. The method of claim 13 , wherein the challenge text is a first sequence of bits.
15. The method of claim 14 , wherein the initialization vector is a second sequence of bits produced by a number generator.
16. The method of claim 15 , wherein the number generator is a pseudo-random number generator.
17. The method of claim 13 , wherein prior to transmitting the challenge text, the method further comprises negotiating the shared secret key between the access point and the wireless unit.
18. The method of claim 13 , wherein the decrypting of the encrypted challenge text includes
combining the initialization vector with the shared secret key; and
using a combination of the initialization vector and the shared secret key as a key material loaded to decrypt the encrypted challenge text.
19. An electronic device comprising:
means for generating an initialization vector;
means for determining whether the initialization vector falls within a first group of initialization vectors by determining whether a selected series of hits of the initialization vector has been set, the first group including a plurality of initialization vectors solely used in connection with an authentication sequence; and
means for encrypting information using the initialization vector for return to a source for the information using in part the initialization vector if the initialization vector falls within the first group.
20. The authentication method of claim 1 , wherein the determining whether the initialization vector falls within the first group includes determining whether the initialization vector forms numeric values within a range.
21. The authentication method of claim 1 , wherein the selected series of bits is discontinuous.
22. The method of claim 13 wherein the plurality of initialization vectors of the first group form numeric values within a range.
23. The method of claim 14 , the plurality of initialization vectors of the first group forms a continuous series of bits.
24. An authentication method comprising:
determining whether an initialization vector falls within a first group of initialization vectors by determining whether a selected series of bits of the initialization vector has been set, the first group including a plurality of initialization vectors solely used for authentication of a first electronic device; and
encrypting information using in part the initialization vector for return to the first electronic device if the initialization vector falls within the first group.
25. The authentication method of claim 24 , wherein the first electronic device is an access point.
26. The authentication method of claim 24 , wherein the selected series of bits is continuous.
27. The authentication method of claim 24 being conducted within a second electronic device and, wherein the encrypting of the information includes
combining the initialization vector with a shared secret key used by the first electronic device and the second electronic device; and
repeatedly performing bitwise Exclusive-OR (XOR) operations on the challenge text using a combination of the initialization vector with the shared secret key.