Abstract: A method, implemented in a communication device, of indicating a service supported by the communication device. A hash value is generated, using a hash function, based on a service identifier associated with the service. Respective portions of the hash value are mapped to respective bit locations in a bit string that represents membership of the service in a set of services supported by the communication device. The bit string is generated at least by setting the bit locations in the bit string to values that indicate that the service is supported by the communication device.

Abstract: The present disclosure describes apparatuses and techniques for secure device authentication. In some aspects, a public ephemeral key of a device is exposed. A message received from a remote device to authenticate includes a hash of the public ephemeral key of the device, a public ephemeral key and an encrypted public key of the remote device, and an encrypted hash value useful to prove ownership of the public key received from the remote device. An encryption key is generated based on the public ephemeral key of the remote device and a private ephemeral key of the device. The device then decrypts, with the encryption key, the encrypted public key of the remote device and the encrypted hash value. The remote device is then authenticated by verifying, based on the decrypted hash value, that the remote device owns the decrypted public key.

Abstract: In a method for efficient password based public key authentication between a first user device and a second user device, a shared password is received by a first user device which generates a first hash value of the shared password and a first value, wherein the first value is composed of at least a product of the first hash value and a first unique security constant associated with the first user. The first user device then generates a first random value generated using data from a generator element, and a first blind public key associated with the first user device, wherein the first blind public key is generated using a first public key. The first user device concurrently sends the first value and the first blind public key to the second user device for authentication.

Abstract: The present disclosure describes apparatuses and techniques for measuring position and velocity. In some aspects, Global Navigation Satellite System (GNSS) signals and feedback information are received. The feedback information may include predicted code phase information and predicted Doppler information. The feedback information is used to define a LOS region of a search space, the search space having dimensions in a code phase domain and in a Doppler domain. The GNSS signals within the search space are operated on to produce measurements of the GNSS signals across the code phase domain and the Doppler domain of the search space. The produced measurements are operated on within the LOS region of the search space to select measurements associated with a line of sight (LOS) signal. The selected measurements are operated on to produce position and/or velocity information associated with the LOS signal.

Abstract: Apparatus, methods, and other embodiments associated with the coexistence of multiple radio devices in a same environment are described. According to one embodiment, a non-transitory computer-readable medium storing computer-executable instructions includes instructions for transmitting and receiving radio signals in accordance with at least one wireless communication technology. The instructions also include instructions for discovering a plurality of radio devices operating within a same radio band within a same geographic region. At least one radio device of the plurality of radio devices operates based on at least two different wireless communication technologies. The instructions further include instructions for generating a master clock reference and temporally synchronizing the plurality of radio devices with respect to the master clock reference.

Abstract: An unencrypted media access control layer (MAC) protocol data unit (MPDU) having a header is received at a wireless network interface device. The header includes a sequence number. The wireless network interface device uses the sequence number to encrypt data in the unencrypted MPDU to generate an encrypted MPDU, and transmits the encrypted MPDU.

Abstract: The present disclosure describes apparatuses and techniques for secure device authentication. In some aspects, a public ephemeral key of a device is exposed. A message received from a remote device to authenticate includes a hash of the public ephemeral key of the device, a public ephemeral key and an encrypted public key of the remote device, and an encrypted hash value useful to prove ownership of the public key received from the remote device. An encryption key is generated based on the public ephemeral key of the remote device and a private ephemeral key of the device. The device then decrypts, with the encryption key, the encrypted public key of the remote device and the encrypted hash value. The remote device is then authenticated by verifying, based on the decrypted hash value, that the remote device owns the decrypted public key.

Abstract: According to an aspect, an access point data processing apparatus includes: a cache memory to store internetwork addresses of an internetwork in association with local network addresses of a local computing device network; and processor electronics configured to receive a client network address of a client device to be connected with the internetwork through the access point, select one of the local network addresses to associate with the client network address of the client device, store the client network address in the cache memory in association with the selected one of the local network addresses, identify an internetwork addresses associated with the selected one of the local network addresses, provide the identified internetwork address to the client device, and direct network communications to and from the client device in accordance with the association between the client network address and the selected one of the local network addresses.

Abstract: A first device having a first public key receives an identifier associated with a second device, and a second public key associated with the second device. The first device sends the identifier to the second device. The first device authenticates the second device using the first public key and the second public key. The first device receives a notification from the second device that the identifier sent to the second device corresponds to the second public key. The first device is used to enroll the second device in a first network including the first device based on receiving the notification. The first device is used to authorize a third device to enroll the second device in a second network including the first device and the third device after the second device is enrolled in the first network.

Abstract: A method includes establishing, in response to a network device operating in the first frequency band, security for the first frequency band and a second frequency band by performing a single authentication in the first frequency band prior to the network device switching operation from the first frequency band to the second frequency band. The method includes transferring, subsequent to the network device switching operation from the first frequency band to the second frequency band, a communication session of the network device from the first frequency band to the second frequency band. The method includes resuming the communication session of the network device in the second frequency band using the security established for the second frequency band (i) during the operation of the network device in the first frequency band, and (ii) prior to the network device switching operation from the first frequency band to the second frequency band.

Abstract: The present disclosure describes methods and apparatus for beaconing within a wireless network based on an indication of distance. For certain example embodiments, in a wireless network in which a master device is a device configured to transmit a beacon within the wireless network, a first wireless communication device may determine, based on an indication of distance between two wireless communication devices, if the first wireless communication device is to act as a master device. For example, a wireless signal may be received. Based at least partially on the received wireless signal, an indication of distance between two wireless communication devices in a wireless network may be obtained. And based at least partially on the obtained indication of distance between the two wireless communication devices, it may be determined if a first wireless communication device is to act as a master device within the wireless network.

Abstract: A method of performing service discovery is implemented in a first communication device. In the method, a service discovery request is generated that contains a first identifier associated with a requested service and does not contain a second identifier associated with the requested service. The first communication device is caused to transmit the service discovery request. A service discovery response, received by the first communication device from a second communication device, is processed. The service discovery response contains the second identifier and does not contain the first identifier. At least the second identifier is utilized to determine that the second communication device provides the requested service.

Abstract: The present disclosure describes methods and apparatus for selecting a device to perform shared functionality in a deterministic and fair manner in a wireless data communication system. A wireless data communication system includes multiple wireless transceiver devices and certain functionality, such as the transmitting of a beacon used to synchronize the wireless transceiver devices, is distributed among the wireless transceiver devices. Each wireless transceiver device generates a device rank for a given time for itself as well as one or more other wireless transceiver devices in a deterministic and fair manner. Each wireless transceiver device determines the same device ranks for the wireless transceiver devices, and each wireless transceiver device selects the wireless transceiver device having a highest device rank at any given time as the wireless transceiver device that is to perform the functionality at that given time.

Abstract: A method and apparatus for deriving an encryption key for use between two stations in a wireless network using information intrinsic to one of the stations, without exchanging pairwise transient keys.

Abstract: The present disclosure describes methods and apparatus for synchronizing devices in a wireless data communication system. A wireless transceiver device of the wireless data communication system transmits a beacon at various intervals that includes both a timestamp indicating a current time and date of the transmitting wireless transceiver device, and a time quality indication indicating a quality of the time source of the transmitting wireless transceiver device. A wireless transceiver device receiving the beacon evaluates the time quality indication included in the beacon. If the time quality indication included in the beacon indicates the transmitting wireless transceiver device has a higher quality time source than the receiving wireless transceiver device, then the receiving wireless transceiver device adjusts its clock based on the timestamp in the beacon, otherwise the receiving wireless transceiver device need not adjust its clock based on the timestamp in the beacon.

Abstract: A first wireless device includes network discovery circuitry to initiate a discovery protocol to discover second wireless devices and to establish a wireless connection with at least one of the second wireless devices. Transmission circuitry transmits first discovery-related packets on a wireless channel and receiver circuitry receives second discovery-related packets from the second wireless devices on the wireless channel. The network discovery circuitry is further to determine, based on the second discovery-related packets, how many of the second wireless devices are within a predetermined range of the first wireless device, adjust a configurable parameter of the discovery protocol based on how many of the second wireless devices were determined to be within the predetermined range of the first wireless device, and complete the discovery protocol in accordance with the adjusted configurable parameter to establish the wireless connection with the at least one of the second wireless devices.

Abstract: A wireless device including a selection module configured to select a discovery window from a plurality of discovery windows in which to transmit a discovery frame, and a transmit module configured to transmit on average one discovery frame every predetermined number of discovery windows to reduce probability of collision in response to the one or more wireless devices competing for access to a channel. A discovery window is a time period in which (i) the wireless device and (ii) one or more wireless devices in a network are configured to transmit discovery frames to discover a service in the network prior to associating with each other. The discovery frame includes (i) a publish message to make information about capabilities and services of the wireless device available to other devices or (ii) a subscribe message to gather information about capabilities and services of other devices.

Abstract: In a method of performing discovery, at least a plurality of identifiers associated with a plurality of respective communication devices is processed, using a first hash function, to generate a first bit string. The first bit string is indicative of whether each of the plurality of identifiers is included in a group. An indication that a new hash function should be used is detected, and, in response to detecting the indication that a new hash function should be used, at least the plurality of identifiers is processed, using a second hash function different than the first hash function, to generate a second bit string. The second bit string is indicative of whether each of the plurality of identifiers is included in the group.

Abstract: A method includes establishing, in response to a network device operating in the first frequency band, security for the first frequency band and a second frequency band by performing a single authentication in the first frequency band prior to the network device switching operation from the first frequency band to the second frequency band. The method includes transferring, subsequent to the network device switching operation from the first frequency band to the second frequency band, a communication session of the network device from the first frequency band to the second frequency band. The method includes resuming the communication session of the network device in the second frequency band using the security established for the second frequency band (i) during the operation of the network device in the first frequency band, and (ii) prior to the network device switching operation from the first frequency band to the second frequency band.

Abstract: Systems, methods, and other embodiments associated with secure service discovery in a neighbor awareness network are described. According to one embodiment, a device includes service logic configured to generate a discovery communication that is associated with a service provided in a neighbor awareness network (NAN). The NAN includes a plurality of remote devices. Encoding logic configured to generate a secure identifier from a unique identifier of the service by, (i) encoding the unique identifier, and (ii) truncating the encoded unique identifier to form the secure identifier. The secure identifier is inserted in the discovery communication.