Authentication for secure wireless communication

1. A method for use in wireless communication, the method comprising:

receiving a signal from a wireless transmit/receive unit (WTRU); and authenticating the received signal by:

checking for a valid predetermined CIR measurement and if the valid predetermined CIR measurement exists, physically authenticating the received signal, wherein the physically authenticating includes evaluating a channel impulse response (CIR) measurement of the received signal by comparing a shape of the CIR measurement with a shape of the valid predetermined CIR measurement, and

if the shape of the CIR measurement matches the shape of the predetermined CIR measurement, higher layer processing the received signal.

2. The method of claim 1 , wherein the physically authenticating includes:

determining whether a predetermined physical attribute is available based on data included in the signal; and

determining whether a physical attribute of the received signal matches the predetermined physical attribute, on a condition that the predetermined physical attribute is available.

3. The method of claim 1 , wherein the authenticating the received

signal includes storing a physical attribute of the received signal in association with data included in the received signal and a timer.

4. The method of claim 1 , further comprising:

executing a security policy in response to an authentication failure.

5. The method of claim 1 , wherein the physically authenticating includes hypothesis testing including:

calculating a hypothesis result using a test statistic function; and comparing the hypothesis result with a threshold.

6. The method of claim 5 , wherein the hypothesis testing includes adaptively determining the threshold.

7. The method of claim 1 , wherein the higher layer processing includes

purely cryptographic validation.

8. The method of claim 1 , wherein the receiving a signal includes

receiving a plurality of signals from the WTRU wherein each signal includes an element of a one-way hash chain; and the higher layer processing includes determining whether a hash value of a first one-way hash chain element in a first signal in the plurality of signals matches a second one-way hash chain element in a second signal in the plurality of signals.

9. The method of claim 1 , further comprising: performing secure wireless communication with the WTRU.

10. A wireless transmit/receive unit (WTRU) comprising: a receiver configured to receive a signal from a second WTRU; and a processor configured to authenticate the received signal by:

checking for a valid predetermined CIR measurement and if the valid predetermined CIR measurement exists, physically authenticating the received signal, wherein the physically authenticating includes evaluating a channel impulse response (CIR) measurement of the received signal by comparing a shape of the CIR measurement with a shape of the valid predetermined CIR measurement, and

if the shape of the CIR measurement matches the shape of the predetermined CIR measurement, higher layer processing the received signal.

11. The WTRU of claim 10 , wherein the processor is configured to physically authenticate by:

determining whether a predetermined physical attribute is available based on data included in the signal; and

determining whether a physical attribute of the received signal matches the predetermined physical attribute, on a condition that the predetermined physical attribute is available.

12. The WTRU of claim 10 , wherein the processor is configured to store a physical attribute of the received signal in association with data included in the received signal and a timer.

13. The WTRU of claim 10 , wherein the processor is configured to execute a security policy in response to an authentication failure.

14. The WTRU of claim 10 , wherein the processor is configured to

physically authenticate by performing hypothesis testing including:

calculating a hypothesis result using a test statistic function; and comparing the hypothesis result with a threshold.

15. The WTRU of claim 14 , wherein the processor is configured to adaptively determine the threshold.

16. The WTRU of claim 10 , wherein the processor is configured to perform higher layer processing by performing purely cryptographic validation.

17. The WTRU of claim 10 , wherein the receiver is configured to receive a plurality of signals from the second WTRU wherein each signal includes an element of a one-way hash chain; and the processor is configured to perform

higher layer processing by determining whether a hash value of a first one-way hash chain element in a first signal in the plurality of signals matches a second one-way hash chain element in a second signal in the plurality of signals.

18. The WTRU of claim 10 , further comprising:

a transmitter configured to perform secure wireless communication with the second WTRU.

19. A method for use in wireless communication, the method comprising:

receiving a signal from a wireless transmit/receive unit (WTRU); and

authenticating the received signal by:

checking for a stored channel impulse response (CIR) reference data and using a timer to determine if the stored channel impulse response (CIR) reference data is valid, if no valid stored CIR reference data is found, evaluating the received signal using higher level authentication;

if the signal is authenticated using the higher level authentication, storing an evaluated CIR measurement of the received signal as a new stored CIR reference data; and

in another period of time, using the new stored CIR reference data to authenticate the WTRU.