Brokered communication protocol using information theoretic coding for security

1. A method, comprising:

receiving, at a network device, an enrollment request from a first device to enroll in a brokered communication protocol, for communicating with at least one second device;

transmitting, from the network device to the first device, a test vector and a measurement request;

receiving, from the first device responsive to the measurement request, a measurement of at least one of a bit-error-rate (BER) or a signal-to-noise ratio (SNR) based on receipt of the test vector at the first device;

determining if the first device is vulnerable to message interception or eavesdropping based on the measurement of the at least one of the BER or the SNR; and

denying, by the network device, access to the brokered communication protocol by the first device based on whether the first device is determined to be vulnerable to message interception or eavesdropping.

2. The method of claim 1 , wherein, when implementing the brokered communication protocol, the network device acts as a broker for controlling communications between the first device and the at least one second device.

3. The method of claim 1 , further comprising:

implementing the brokered communication protocol, between the first device and the network device using an information theoretic coding technique for physical layer security, in response to determining that the first device is not vulnerable to message interception or eavesdropping.

4. The method of claim 3 , wherein using the information theoretic coding technique for physical layer security comprises:

scrambling portions of data of a message to be transmitted to produce a scrambled message;

concatenating a public key to the scrambled message; and

applying systematic coding to the scrambled message to produce an encoded message.

5. The method of claim 4 , wherein the public key comprises a device identifier key assigned to the first device by the network device.

6. The method of claim 4 , further comprising:

determining parity bits based on the encoded message;

appending the parity bits to the encoded message;

puncturing the encoded message, to remove encoded bits that correspond to the public key, to produce a punctured encoded message; and

transmitting the punctured encoded message to a destination device.

7. The method of claim 4 , further comprising:

generating a random bit sequence, and

wherein the scrambling portions of the data of the message to be transmitted further comprises:

interleaving the portions of the data of the message based on the generated random bit sequence.

8. A network device, comprising:

a transceiver connected to a network; and

a processing unit to:

receive an enrollment request from a first device to enroll in a brokered communication protocol for communicating with at least one second device,

transmit, from the network device to the first device via the transceiver, a test vector and a measurement request,

receive, from the first device responsive to the measurement request via the transceiver, a measurement of at least one of a bit-error-rate (BER) or a signal-to-noise ratio (SNR) based on receipt of the test vector at the first device,

determine if the first device is vulnerable to message interception or eavesdropping based on the measurement of the at least one of the BER or the SNR, and

deny access to the brokered communication protocol by the first device based on whether the first device is determined to be vulnerable to message interception or eavesdropping.

9. The network device of claim 8 , wherein, the processing unit implements the brokered communication protocol and acts as a broker for controlling communications between the first device and the at least one second device.

10. The network device of claim 8 , wherein the processing unit is further:

implements the brokered communication protocol, between the first device and the network device using an information theoretic coding technique for physical layer security, in response to determining that the first device is not vulnerable to message interception or eavesdropping.

11. The network device of claim 10 , wherein, when using the information theoretic coding technique for physical layer security, the processing unit further:

scrambles portions of data of a message to be transmitted to produce a scrambled message,

concatenates a public key to the scrambled message, and

applies systematic coding to the scrambled message to produce an encoded message.

12. The network device of claim 11 , wherein the public key comprises a device identifier key assigned to the first device by the network device.

13. The network device of claim 11 , wherein, when using the information theoretic coding technique for physical layer security, the processing unit further:

determines parity bits based on the encoded message,

appends the parity bits to the encoded message,

punctures the encoded message, to remove encoded bits that correspond to the public key, to produce a punctured encoded message, and

transmits the punctured encoded message to a destination device.

14. The network device of claim 11 , wherein, when using the information theoretic coding technique for physical layer security, the processing unit:

generates a random bit sequence, and

wherein, when scrambling the portions of the data of the message to be transmitted, the processing unit further:

interleaves the portions of the data of the message based on the generated random bit sequence.

15. A non-transitory storage medium storing instructions executable by a network device, wherein the instructions comprise instructions to cause the network device to:

receive an enrollment request from a first device to enroll in a brokered communication protocol for communicating with at least one second device;

transmit, from the network device to the first device, a test vector and a measurement request;

receive, from the first device responsive to the measurement request, a measurement of at least one of a bit-error-rate (BER) or a signal-to-noise ratio (SNR) based on receipt of the test vector at the first device;

determine if the first device is vulnerable to message interception or eavesdropping based on the measurement of the at least one of the BER or the SNR; and

deny access to the brokered communication protocol by the first device based on whether the first device is determined to be vulnerable to message interception or eavesdropping.

16. The non-transitory storage medium of claim 15 , wherein, when implementing the brokered communication protocol, the network device acts as a broker for controlling communications between the first device and the at least one second device.

17. The non-transitory storage medium of claim 15 , wherein the instructions comprise instructions to cause the network device to:

implement the brokered communication protocol, between the first device and the network device using an information theoretic coding technique for physical layer security, in response to determining that the first device is not vulnerable to message interception or eavesdropping.

18. The non-transitory storage medium of claim 17 , wherein using the information theoretic coding technique for physical layer security comprises instructions to cause the network device to:

scramble portions of data of a message to be transmitted to produce a scrambled message;

concatenate a public key to the scrambled message, wherein the public key comprises a device identifier key assigned to the first device by the network device; and

apply systematic coding to the scrambled message to produce an encoded message.

19. The non-transitory storage medium of claim 18 , wherein using the information theoretic coding technique for physical layer security comprises instructions to cause the network device to:

determine parity bits based on the encoded message;

append the parity bits to the encoded message;

puncture the encoded message, to remove encoded bits that correspond to the public key, to produce a punctured encoded message; and

transmit the punctured encoded message to a destination device.

20. The non-transitory storage medium of claim 18 , further comprising:

generating a random bit sequence, and

wherein the scrambling the portions of the data of the message to be transmitted further comprises:

interleaving the portions of the data of the message based on the generated random bit sequence.