Mutual authentication for reliable configuration reception over reference signals

A method of wireless communication at a first network node, comprising:

• transmitting an authentication proof to a second network node, the authentication proof being based on a first credential associated with the first network node, the first network node being authenticable based on the authentication proof;
• receiving a configuration request from the second network node, the configuration request including a phase-modulated indication of a second credential associated with the second network node, the configuration request being based on a random phase;
• and
• transmitting a configuration response to the second network node, the configuration response including a phase-modulated confidential parameter, the configuration response being based on the configuration request.

An apparatus for wireless communication at a second network node, comprising:

• a memory;
• and
• at least one processor coupled to the memory and, based at least in part on information stored in the memory, the at least one processor is configured to:
• receive an authentication proof from a first network node, the authentication proof being based on a first credential associated with the first network node;
• identify whether the first network node is authentic based on the authentication proof;
• transmit a configuration request to the first network node, the configuration request including a phase-modulated indication of a second credential associated with the second network node, the configuration request being based on a random phase, the second network node being authenticable based on the configuration request;
• and
• receive a configuration response from the first network node based on the second network node being authenticated, the configuration response including a phase-modulated confidential parameter, the configuration response being based on the configuration request.

A method of wireless communication at a second network node, comprising:

• receiving an authentication proof from a first network node, the authentication proof being based on a first credential associated with the first network node;
• identifying whether the first network node is authentic based on the authentication proof;
• transmitting a configuration request to the first network node, the configuration request including a phase-modulated indication of a second credential associated with the second network node, the configuration request being based on a random phase, the second network node being authenticable based on the configuration request;
• and
• receiving a configuration response from the first network node based on the second network node being authenticated, the configuration response including a phase-modulated confidential parameter, the configuration response being based on the configuration request.