22-09-0216-02-0000-proposed-resolutions-to-comments-related-to-security-in-802-22-draftv2-0.docVIP

IEEE P802.22Wireless RANs Proposed Resolutions to Comments Related to Security in 802.22 Draft v2.0 Date: 2009-11-13 Author(s): Name Company Address Phone email Apurva Mody BAE Systems P.O. Box 868, MER 15-2350, Nashua, NH 03061-0868 603-885-2621 404-819-0314 apurva.mody@, apurva_mody@ Tom Kiernan US Army (CERDEC) Ft Monmouth, NJ - Thomas.kiernan@ Ranga Reddy US Army (CERDEC) Ft. Monmouth, NJ Ranga.reddy@ Remaining security comments that need to be resolved: 298, 356, 361, 1346, 403, 404, 407, 473, 474, 505, 506, 508, 509 Comments 298, 356, 361, 1346, 403, 404, 407 were assigned to the Security ad-hoc by the MAC ad-hoc. Comments 473, 474, 505, 506, 508, 509, 511, 512, 523 are related to security issues, and should be handled by the Security ad-hoc as well. Comments 674, 717, 719, 725, 726, 731, 732 are comments deferred during Security ad-hoc calls. Discussion on those comments are provided here Comment 298 – Gerald Chouinard Comment: Why are the CBP burst to be protected. Arent they broadcast packets by definition for inter-cell coexistence among different WRAN cells. If these cells belong to the same network that needs protection, everything could be done over the backhaul. Suggested Remedy: Reconsider the need for security on the CBP bursts since any WRAN operator will need to know how to decode it to act upon it and therefore will be able to mess with it and change the text accordingly. Resolution (as currently discussed): Problem is from malicious users creating false CBP bursts. Since any WRAN operator will need to know how to decode these CBP bursts to act upon it, they will therefore be able to mess with it. What is the need for securing these CBP bursts then? Also, the bursts giving identity as per the FCC RO would need to be in the clear. Assigned to the security ad-hoc group for resolution. Initial Feedback from Security Adhoc: Currently the CBP bursts are transmitted in the clear. They contain a signature at the end of the