Method of authentication of wireless communication based on physical layer security
In an embodiment, a communication method, using OFDM (Orthogonal Frequency Division Multiplexing), comprises transmitting and receiving packets between a first node and at least one second node, where each packet comprises a preamble and payload data. The method, performed by the first node, may comprise receiving packets from the at least one second node, and authenticating the at least one second node based on physical layer characteristics, i.e., on CSI (Channel State Information). The authenticating may be based on a plurality of preambles, which are extracted from a group of consecutively received packets.
1. A communication method using OFDM (Orthogonal Frequency Division Multiplexing) comprising transmitting and receiving packets between a first node and at least one second node, where each packet comprises a preamble and payload data, said method being performed by the first node and comprising:
receiving packets from the at least one second node;
extracting a plurality of preambles from a group of consecutively received packets; and
authenticating the at least one second node based on accumulated deviations in a Channel Impulse Response (CIR) derived from the plurality of preambles, wherein the authenticating comprises
comparing the CIR of the preamble of each packet of the group of consecutively received packets to a reference CIR, and
accumulating the result of the comparisons from all packets of the group as the accumulated deviations.
2. The method according to claim 1 , each of said preambles consisting of not more than two OFDM symbols.
3. The method according to claim 1 , further comprising:
obtaining training sequences from the at least one second node;
analyzing the training sequences; and
setting the reference CIR based on analysis of the training sequences.
4. The method according to claim 1 , further comprising:
comparing the accumulated deviations to a threshold; and
setting an alarm indicating intrusion in case the accumulated deviations exceed the threshold.
5. The method according to claim 4 , further comprising:
obtaining training sequences from the at least one second node;
evaluating the training sequences; and
setting the threshold based on the evaluation.
6. The method according to claim 1 , wherein said first node is a master node, and each second node is a slave node.
7. The method according to claim 1 , wherein said first node is a slave node, and the second node is a master node.
8. The method according to claim 1 , wherein the first node is connected to a wireless local area network.
9. The method according to claim 8 , wherein the wireless local area network comprises a wireless Ethernet network.
10. The method according to claim 8 , wherein the wireless local area network comprises a network according to IEEE (Institute of Electrical and Electronics Engineers) 802.11 standards.
11. The method according to claim 1 , each of said preambles consisting of one single OFDM symbol.
12. A communication node using OFDM (Orthogonal Frequency Division Multiplexing), wherein packets are transmitted and received between the communication node and a further communication node, each packet comprises a preamble and payload data, and said communication node comprises:
a communication interface for receiving packets from the further communication node; and
an authenticator for extracting a plurality of preambles from a group of consecutively received packets, and authenticating the further communication node based on accumulated deviations in a Channel Impulse Response (CIR) derived from the plurality of preambles, wherein the authenticating comprises
comparing the CIR of the preamble of each packet of the group of consecutively received packets to a reference CIR, and
accumulating the result of the comparisons from all packets of the group as the accumulated deviations.
13. The communication node according to claim 12 , each of said preambles consisting of not more than two OFDM symbols.
14. The communication node according to claim 12 , wherein the authenticating further comprises:
comparing the accumulated deviations to a threshold; and
setting an alarm indicating intrusion in case the accumulated deviations exceed the threshold.
15. The communication node according to claim 14 , further comprising a training sequence obtainer configured to:
obtain training sequences from the further communication node;
analyze the training sequences; and
set the reference CIR based on analysis of the training sequences.
16. A non-transitory computer-readable medium storing instructions that, when executed by a processor of a first node, cause the processor to carry out a communication method using OFDM (Orthogonal Frequency Division Multiplexing) comprising transmitting and receiving packets between the first node and at least one second node, where each packet comprises a preamble and payload data, said communication method comprising:
receiving packets from the at least one second node;
extracting a plurality of preambles from a group of consecutively received packets; and
authenticating the at least one second node based on accumulated deviations in a Channel Impulse Response (CIR) derived from the plurality of preambles, wherein the authenticating comprises
comparing the CIR of the preamble of each packet of the group of consecutively received packets to a reference CIR, and
accumulating the result of the comparisons from all packets of the group as the accumulated deviations.
17. The non-transitory computer-readable medium according to claim 16 , each of said preambles consisting of not more than two OFDM symbols.
18. The non-transitory computer-readable medium according to claim 16 , wherein the authenticating further comprises:
comparing the accumulated deviations to a threshold; and
setting an alarm indicating intrusion in case the accumulated deviations exceed the threshold.