Enabling WUR Protection
Discussion on enabling protection for Wake-Up Radio (WUR) frames to optimize power consumption and responsiveness to environmental changes. Includes details on when protection should be enabled, how attacks are detected, and a proposal for WUR STAs to report attacks.
Download Presentation

Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
July 2018 doc.: IEEE 802.11-18/1168r0 Enabling WUR Protection Date: 2018-07-04 Authors: Name Rojan Chitrakar Affiliations Address Panasonic Phone email Rojan.chitrakar@sg.panasonic.com Panasonic R&D Center Singapore Lei Huang Yoshio Urabe Slide 1 Rojan Chitrakar, Panasonic
July 2018 doc.: IEEE 802.11-18/1168r0 Introduction As per [1] WUR AP may optionally transmit protected WUR frames: to a WUR STA that has set the Protection Supported field in the WUR Capabilities element it transmits to 1. Reception of Protected WUR frames will likely drain more battery as compared to reception of unprotected WUR frames, so from WUR STAs perspective it is better if protection of WUR frames is enabled only when required. In this contribution we discuss some options related to enabling Protected WUR frame transmission. Slide 2 Rojan Chitrakar, Panasonic
July 2018 doc.: IEEE 802.11-18/1168r0 Enabling Protection When should WUR AP enable protection of WUR frames? Protection can be enabled as a BSS policy ( WUR service in a BSS is either always protected or always unprotected). May not be good for WUR STA s power consumption Not all WUR STAs support Protection Not responsive to changes in environment Or, protection is enabled only when deemed necessary: May be better for WUR STA s power consumption More responsive to changes in environment Option 1: Upon request by WUR STAs: When a WUR STA detects Attack Option 2: AP/System makes the decision: May require collection of reports of Attack from WUR STAs. For operation flexibility and WUR STA power saving, protection should be enabled only when required. Slide 3 Rojan Chitrakar, Panasonic
July 2018 doc.: IEEE 802.11-18/1168r0 Attack Detection How does a WUR STA detect that it is under Attack ? 1. WUR Wake-up frames A WUR STA may conclude that it has been falsely woken up after receiving a WUR wake-up frame if the expected PCR frame/s is not received from the WUR AP. The expected PCR frame/s may be: Buffered BUs (Wake-up frame for individually addressed delivery) Group addressed BUs (Wake-up frame for group address delivery) Beacon frame with changed parameters (Wake-up frame with different counter value) Trigger frame with RU assigned for UL (Wake-up frame for Triggered-enabled TWT) A WUR STA may also conclude that it has been falsely woken up if the WUR AP explicitly indicates that it does not have buffered BUs for the STA (e.g. upon reception of ACK or Qos- Null frame that has the More Data subfield in Frame Control set to 0, in response to the first PS-Poll frame or APSD Trigger frame transmitted after switching to PCR mode). 2. WUR Beacons A WUR STA may conclude that a received WU Beacon frame has been forged if difference between the value of the P-TSF carried by the WUR Beacon and the corresponding bits of the local TSF exceeds the maximum expected drift. How exactly a WUR STA detects Attack need not be specified. Slide 4 Rojan Chitrakar, Panasonic
July 2018 doc.: IEEE 802.11-18/1168r0 Proposal (1/2) 1. WUR STAs keep count of Attacks - Separate counters for False wake up and forged WUR Beacon, or just a single counter When the value of the Attack counter exceeds a specified threshold, WUR STA informs the WUR AP. - Threshold may be a fixed value or a value informed by the AP WUR AP may use the information to enable Protection for WUR frames. - May also trigger integrity Keys generation and exchange as well as WUR Mode re-negotiation Example for False wake up attack: 2. AP enables Protection for the WUR STA Unprotected WUR Service Protected WUR Service WUR AP WUR Integrity Key exchange, Series of false wake-up attacks detected WUR mode renegotiation ... ... WUR discarded WUR STA PCR FalseWakeCount++ FalseWakeCount > threshold FalseWakeCount++ FalseWakeCount++ Unprotected WUR Wake- up frame WUR Operating Channel Request / Report frame PCR channel Received Transmitted Legend: Slide 5 Rojan Chitrakar, Panasonic
July 2018 doc.: IEEE 802.11-18/1168r0 Proposal (2/2) WUR STAs may inform WUR AP of Attacks in two ways: Option 1: Directly as a Request to enable Protection E.g. using a Protection Request bit in the WUR Mode element in Enter WUR Mode (Suspend) Request Action frames. Option 2: Indirectly as an event report E.g. reusing 802.11 Event Report element (9.4.2.68) Event Report Status 1 Event Report (Optional) variable Element ID Length Event Token Event Type Event TSF Octets: 1 1 1 1 0 or 8 6 = WUR Option 2 allows WUR APs to collect information from several WUR STAs before making the decision to enable Protection (especially for group address WUR frames) WUR Event Type WUR Event Type Event Event Counter Counter 0 (False Wake-up) FalseWakeupCount 1 (False WUR Beacons) FalseWURBeaconCount Slide 6 Rojan Chitrakar, Panasonic
July 2018 doc.: IEEE 802.11-18/1168r0 Summary In this presentation we discussed options related to enabling Protected WUR frame transmission. For operation flexibility and WUR STA power saving, we think that protection should be enabled only when required. We proposed that: 1. WUR STAs keep count of Attacks 2. When the value of the Attack counter exceeds a specified threshold, WUR STA informs the WUR AP. Slide 7 Rojan Chitrakar, Panasonic
July 2018 doc.: IEEE 802.11-18/1168r0 Straw Poll 1 Do you agree that WUR STAs may inform WUR AP of Attacks ? Y/N/A Slide 8 Rojan Chitrakar, Panasonic
July 2018 doc.: IEEE 802.11-18/1168r0 Straw Poll 2 Which option do you prefer for WUR STAs to inform WUR AP of Attacks ? Option 1: Directly as a Request to enable Protection E.g. using a Protection Request bit in the WUR Mode element in Enter WUR Mode (Suspend) Request Action frames. Option 2: Indirectly as an event report E.g. reusing 802.11 Event Report element (9.4.2.68) Abstain Slide 9 Rojan Chitrakar, Panasonic
July 2018 doc.: IEEE 802.11-18/1168r0 References [1] IEEE 802.11ba-D0.3 Slide 10 Rojan Chitrakar, Panasonic