[go: up one dir, main page]

WO2022016528A1 - 多连接下的通信方法和通信设备 - Google Patents

多连接下的通信方法和通信设备 Download PDF

Info

Publication number
WO2022016528A1
WO2022016528A1 PCT/CN2020/104504 CN2020104504W WO2022016528A1 WO 2022016528 A1 WO2022016528 A1 WO 2022016528A1 CN 2020104504 W CN2020104504 W CN 2020104504W WO 2022016528 A1 WO2022016528 A1 WO 2022016528A1
Authority
WO
WIPO (PCT)
Prior art keywords
connection
under
message frame
session key
multiple connections
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2020/104504
Other languages
English (en)
French (fr)
Inventor
董贤东
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Xiaomi Mobile Software Co Ltd
Original Assignee
Beijing Xiaomi Mobile Software Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Xiaomi Mobile Software Co Ltd filed Critical Beijing Xiaomi Mobile Software Co Ltd
Priority to CN202080001433.2A priority Critical patent/CN114258703B/zh
Priority to US18/017,587 priority patent/US20230308869A1/en
Priority to PCT/CN2020/104504 priority patent/WO2022016528A1/zh
Publication of WO2022016528A1 publication Critical patent/WO2022016528A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W76/00—Connection management
    • H04W76/10—Connection setup
    • H04W76/15—Setup of multiple wireless link connections
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/047—Key management, e.g. using generic bootstrapping architecture [GBA] without using a trusted network node as an anchor
    • H04W12/0471—Key exchange
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W76/00—Connection management
    • H04W76/10—Connection setup
    • H04W76/11—Allocation or use of connection identifiers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W84/00—Network topologies
    • H04W84/02—Hierarchically pre-organised networks, e.g. paging networks, cellular networks, WLAN [Wireless Local Area Network] or WLL [Wireless Local Loop]
    • H04W84/10—Small scale networks; Flat hierarchical networks
    • H04W84/12—WLAN [Wireless Local Area Networks]

Definitions

  • the present disclosure relates to the field of communication, and more particularly, to a communication method and communication device under multiple connections.
  • IEEE Institute of Electrical and Electronic Engineers, Institute of Electrical and Electronics Engineers
  • IEEE802.11a/b/g/n/ac Wi- Fi technology
  • the research scope is: 320MHz bandwidth transmission, aggregation and coordination of multiple frequency bands, etc. It is expected to increase the rate and throughput by at least four times compared to the existing IEEE802.11ax standard.
  • Its main application scenarios are Video transmission, AR (Augmented Reality, augmented reality), VR (Virtual Reality, virtual reality), etc.
  • the aggregation and coordination of multiple frequency bands refers to the simultaneous communication between devices in the 2.4GHz, 5.8GHz and 6-7GHz frequency bands.
  • a new MAC Media Access Control, media access control
  • control control
  • the maximum bandwidth that will be supported is 320MHz (160MHz+160MHz), in addition to 240MHz (160MHz+80MHz) and the bandwidth supported in the IEEE802.11ax standard.
  • the session key can be negotiated through a four-step handshake mechanism, as shown in FIG. 1 for a hierarchical structure of the session key.
  • STAs and APs can be multi-link devices (MLD: multi-link devices), that is, support functions that can simultaneously transmit and/or receive under multiple connections at the same time. Therefore, in the IEEE802.11be standard, there can be multiple connections between the STA and the AP, and the session key negotiation mechanism in the existing standard cannot meet the needs of multiple connections. The key agreement mechanism is enhanced.
  • MLD multi-link devices
  • An exemplary embodiment according to the present disclosure provides a communication method under multiple connections.
  • the communication method includes: sending a first request message frame for establishing multiple connections; wherein the first request message frame includes at least a first identifier, and the first identifier is used to indicate that in the established multiple connections
  • the session key is negotiated using the same pairwise master key under each connection.
  • the communication method further includes: sending a second request message frame for establishing an initial association connection, wherein the second request message frame includes at least a capability information identifier related to multi-connection communication.
  • the communication method further includes: determining a value corresponding to the capability information identifier, wherein the capability information identifier corresponding to the first value indicates that simultaneous transmission and reception of multiple connections is supported; the The capability information corresponding to the second value indicates that simultaneous transmission or reception of multiple connections is supported; or the capability information identifier corresponding to the third value indicates that the transmission and reception of one connection is supported.
  • the communication method further includes: receiving a second response message frame with respect to the second request message frame; in response to receiving the second response message frame, under the initial association connection , using the pairwise master key to negotiate a session key.
  • the communication method further includes: receiving a first response message frame with respect to the first request message frame; in response to receiving a corresponding communication under a connection to be communicated in the multiple connections In the first response message frame, a session key is negotiated using the same paired master key under the connection to be communicated.
  • using the paired master key to negotiate a session key includes: generating a first random number under the initial association connection based on a current time parameter under the initial association connection; Under the initial association connection, the first session key is obtained according to the paired master key and the first random number.
  • negotiating a session key using the same pairwise master key includes generating a second under the to-be-communicated connection based on a current time parameter of the to-be-communicated connection A random number; under the connection to be communicated, obtain a second session key according to the paired master key and the second random number.
  • the first session key and the second session key in response to the current time parameter under the initial associated connection and the current time parameter of the connection to be communicated being different, the first session key and the second session key different from each other.
  • the communication method further includes: receiving a second response message frame with respect to the second request message frame and a first response message frame with respect to the first request message frame; in response to receiving In the second response message frame, the multi-connection is established according to the capability information identifier; in response to receiving the corresponding first response message frame under each connection in the multi-connection, in the initial associated connection And under the multi-connection, the same paired master key is used to negotiate a session key.
  • negotiating a session key using the same paired master key includes: based on the initial association connection and a current time parameter under each of the multiple connections, at the A corresponding third random number is generated under each connection in the initial association connection and the multiple connections; under each connection in the initial association connection and the multiple connections, according to the paired master key and the corresponding of the third random number to obtain the corresponding third session key.
  • the third session keys are identical to each other.
  • An exemplary embodiment according to the present disclosure provides a multi-connection communication device.
  • the communication device includes: a sending module configured to: send a first request message frame for establishing multiple connections, wherein the first request message frame includes at least a first identifier, and the first identifier is used to indicate that the A session key is negotiated using the same pairwise master key under each of the multiple connections established.
  • the sending module is further configured to: send a second request message frame for establishing an initial association connection, wherein the second request message frame includes at least capability information related to multi-connection communication logo.
  • the communication device further includes: a processing module configured to determine a value corresponding to the capability information identifier, wherein the capability information identifier corresponding to the first value indicates that multiple connections are supported at the same time sending and receiving; the capability information corresponding to the second value indicates that simultaneous sending or receiving of multiple connections is supported; or the capability information identifier corresponding to the third value indicates that the sending and receiving of one connection is supported.
  • a processing module configured to determine a value corresponding to the capability information identifier, wherein the capability information identifier corresponding to the first value indicates that multiple connections are supported at the same time sending and receiving; the capability information corresponding to the second value indicates that simultaneous sending or receiving of multiple connections is supported; or the capability information identifier corresponding to the third value indicates that the sending and receiving of one connection is supported.
  • the communication device further includes: a receiving module configured to: receive a second response message frame with respect to the second request message frame; and a processing module configured to: in response to the receiving The module receives the second response message frame, and negotiates a session key using the pairwise master key under the initial association connection.
  • the receiving module is further configured to: receive a first response message frame with respect to the first request message frame; the processing module is further configured to: in response to the receiving module in the A corresponding first response message frame is received under the connection to be communicated among the multiple connections, and the same paired master key is used to negotiate a session key under the connection to be communicated.
  • the processing module is further configured to: generate a first random number under the initial association connection based on the current time parameter under the initial association connection; under the initial association connection, A first session key is obtained according to the paired master key and the first random number.
  • the processing module is further configured to: generate a second random number under the connection to communicate based on a current time parameter of the connection to communicate; Under the communication connection, the second session key is obtained according to the paired master key and the second random number.
  • the first session key and the second session key in response to the current time parameter under the initial associated connection and the current time parameter of the connection to be communicated being different, the first session key and the second session key different from each other.
  • the communication device further includes a receiving module configured to receive a second response message frame with respect to the second request message frame and a first response with respect to the first request message frame message frame; wherein the processing module is further configured to: in response to the receiving module receiving the second response message frame, establish the multi-connection according to the capability information identifier; in response to the receiving module in the A corresponding first response message frame is received under each connection in the multiple connections, and the same paired master key is used to negotiate a session key in the initial associated connection and under the multiple connections.
  • the processing module is further configured to: based on the current time parameter under each of the initial associated connection and the multi-connection, at the initial associated connection and the multi-connection A corresponding third random number is generated under each connection of Obtain the corresponding third session key.
  • the third session keys are identical to each other.
  • the electronic device includes a memory, a processor, and a computer program stored on the memory and executable on the processor.
  • the processor executes the computer program to implement the method as described above.
  • a computer-readable storage medium is provided according to example embodiments of the present disclosure.
  • a computer program is stored on the computer-readable storage medium.
  • the computer program when executed by a processor, implements the method as described above.
  • 1 is a diagram illustrating an example of a hierarchical structure of session keys
  • FIG. 2 is a flowchart illustrating a communication method under multiple connections according to an exemplary embodiment of the present disclosure
  • FIG. 3 is a flowchart illustrating a communication method under multiple connections according to another exemplary embodiment of the present disclosure
  • FIG. 4 is a diagram illustrating a communication scenario under multiple connections according to an example embodiment of the present disclosure
  • FIG. 5 is a diagram illustrating a communication device according to an example embodiment of the present disclosure.
  • FIG. 1 is a diagram illustrating an example of a hierarchical structure of session keys.
  • the STA may be referred to as a supplicant
  • the AP may be referred to as an authenticator.
  • the pairwise master key (PMK) can be pre-obtained in various ways, for example, directly from the pre-shared key (PSK), or derived from the master session key (MSK), for clarity and brevity , the exemplary embodiments of the present disclosure are not described in detail.
  • the PMK can be converted into a Pairwise Temporary Key (PTK) by the following PRF-Length function.
  • Length indicates the length of the generated PTK
  • "Pairwise key expansion” indicates the expansion of the pairwise key
  • AA indicates the MAC address of the authenticator (for example, AP)
  • SPA indicates the applicant (for example, STA)
  • ANonce represents the random number generated by the authenticator (for example, AP)
  • SNonce represents the random number generated by the applicant (for example, STA).
  • the authenticator sends the generated random number ANonce to the applicant (for example, STA); the applicant (for example, STA) generates based on the received ANonce and its own SNonce PTK; then between the applicant (eg, STA) and the authenticator (eg, AP), through further negotiation using PKT, a key confirmation key (KCK), a key encryption key (KEK) are generated and authenticated and Temporary Key (TK).
  • KCK key confirmation key
  • KEK key encryption key
  • TK Temporary Key
  • an update group key handshake may also be performed between the authenticator (eg, AP) and the applicant (eg, STA), which are not described in detail in example embodiments of the present disclosure for clarity and brevity.
  • the negotiation of the session key can be performed using their respective nonces (ie, ANonce and SNonce).
  • the authenticator eg, AP
  • the authenticator may generate the random number ANonce in the same way that the applicant (eg, STA) generates the random number SNonce. That is, hereinafter, when a random number (Nonce) is used, the random number (Nonce) may represent the random number ANonce of the authenticator (eg, AP) or the random number of the applicant (eg, STA) according to the corresponding object SNonce.
  • Nonce can be generated by the following PRF-256 function.
  • PRF-256 Random number, "Init Counter", Local MAC Address
  • Random number represents, for example, a 256-bit random number
  • "Init Counter” represents the initial counter value
  • Local MAC Address represents the address (AA or SPA) of the authenticator (for example, AP) or applicant (for example, STA)
  • Time represents according to the network The current time in NTP (Network Time Protocol), or any other time in NTP format that works.
  • the random number Nonce is strictly related to parameters such as Time.
  • the 802.11be standard supports: After a multi-connection is established between two multi-connection devices (MLDs), in a multi-connection, the same PMK and the same PTK are used for pairwise temporary The same packet number (PN: packet number) space of the key security association (PTKSA: pairwise transient key security association).
  • MLDs multi-connection devices
  • PTKSA packet number space of the key security association
  • the session key negotiation mechanism in the existing standard does not consider the multi-connection situation, so it cannot meet the requirements of the multi-connection, so the session key negotiation mechanism in the existing standard needs to be enhanced.
  • FIG. 2 is a flowchart illustrating a communication method under multiple connections according to an example embodiment of the present disclosure.
  • FIG. 4 is a diagram illustrating a communication scenario under multiple connections according to an example embodiment of the present disclosure.
  • the communication process between the STA and the AP is shown as an example.
  • the STA can represent any type of transmitting end device
  • the AP can represent any type of receiving device. end device.
  • the AP may include software applications and/or circuitry to enable other types of nodes in the wireless network to communicate through the AP with outside and inside the wireless network.
  • the AP may be a terminal device or a network device equipped with a Wi-Fi (Wireless Fidelity, wireless fidelity) chip.
  • Wi-Fi Wireless Fidelity, wireless fidelity
  • a station STA may include, but is not limited to, cellular phones, smart phones, wearable devices, computers, personal digital assistants (PDAs), personal communication system (PCS) devices, personal information managers (PIMs), personal navigation devices ( PND), GPS, multimedia devices, Internet of Things (IoT) devices, etc.
  • PDAs personal digital assistants
  • PCS personal communication system
  • PIMs personal information managers
  • PND personal navigation devices
  • GPS GPS
  • multimedia devices Internet of Things (IoT) devices, etc.
  • IoT Internet of Things
  • the STA and the AP may support the function of multi-connection.
  • the AP is fully functional, that is, the functional AP supported by the STA may also be fully supported.
  • the multi-connection between the STA and the AP may represent multiple channels between the STA and the AP in different frequency bands.
  • the established initial associated connection is described separately from the established multiple connections (eg, Link 1 and Link 2), but it is understood that the initial associated connection may be one of the multiple connections between the STA and the AP Connection, that is, the initial association connection established and the multi-connection established (for example, Link 1 and Link 2) can be collectively referred to as multi-connection, in addition, the multi-connection established (for example, Link 1 and Link 2) can also be referred to as Connections other than the initial associated connection in the multi-connection.
  • an initial association connection may be established between the STA and the AP.
  • the multi-connection communication method may include: sending a second request message frame for establishing an initial association connection; and receiving a second response message frame regarding the second request message frame.
  • Step 210 of FIG. 2 may correspond to the process of establishing an initial association of FIG. 4 , that is, to operation S1 and operation S2 of FIG. 4 .
  • the second request message frame may correspond to the association request frame in operation S1
  • the second response message frame may correspond to the association response frame in operation S2.
  • the STA may transmit an association request frame to the AP.
  • the association request frame ie, the second request message frame
  • the association request frame may include at least a capability information identifier related to multi-connection communication.
  • the communication method under multiple connections may further include: determining a value corresponding to the capability information identifier.
  • the capability information identifier related to the multi-connection communication capability of the STA may be determined according to the function and configuration of the STA.
  • the capability information identifier can be pre-written in the STA when the STA device is manufactured, and then when the STA initiates the establishment of an initial association connection with the AP, the pre-written capability information identifier can be directly obtained, and the capability information identifier can be included in the STA. in the association request frame to be sent.
  • the capability information identifier may correspond to different values.
  • the capability information identifier corresponding to the first value may indicate that simultaneous transmission and reception of multiple connections is supported
  • the capability information corresponding to the second value may indicate that the simultaneous transmission and reception of multiple connections is supported send or receive
  • the capability information flag corresponds to a third value (eg, 3) indicating that a connection is supported for sending and receiving (eg, based on a "time division" mechanism).
  • the STA may receive an association response frame with respect to the association request frame from the AP.
  • the STA receives the association response frame from the AP, the establishment of the initial association connection between the STA and the AP is completed. Since the capability information identification related to the multi-connection communication is included in the association request frame, operations S1 and S2 may represent the process of multi-connection awareness.
  • Step S230 of FIG. 2 may correspond to Phase I of FIG. 4 , that is, the communication method according to an example embodiment of the present disclosure may further include: in response to receiving the second response message frame (that is, in response to completing the initial association connection establishment), the session key is negotiated using the pairwise master key under the initial association connection.
  • the pairwise master key may be the PMK described with reference to FIG. 1 .
  • negotiating a session key using the paired master key includes: generating a first random number under the initial association connection based on a current time parameter under the initial association connection; under the initial association connection, according to the For the master key and the first random number, a first session key is obtained.
  • the following formula (1) can be used to generate the first random number under the initial association connection based on the current time parameter Time 1 under the initial association connection.
  • the time parameter Time 1 is the current time according to NTP, or any other time in NTP format that is feasible.
  • the STA can generate a random number based on the MAC address of the STA and the current time parameter Time 1; then negotiate with the AP and obtain the session key according to the paired master key and the generated random number.
  • the AP can generate a random number ANonce based on the local MAC address of the AP under the initial association connection and the current time parameter Time 1; Negotiate and get a session key.
  • the AP can utilize Equation (1) to generate a random number ANonce based on the AP's local MAC address under the initial association connection and the current time parameter Time 1, and Send the ANonce to the STA; the STA can use the formula (1) to generate a random number SNonce based on the MAC address of the STA under the initial association connection and the current time parameter Time 1; then the STA can generate a random number SNonce according to the paired master key PMK, the received random The number ANonce and the generated random number SNonce, negotiate with the AP and obtain the session key (for example, TK, KEK, KCK, etc.).
  • the session key for example, TK, KEK, KCK, etc.
  • the multi-connection communication method may include: sending a first request message frame for establishing a multi-connection; and receiving a first response message frame regarding the first request message frame.
  • the first request message frame includes at least a first identification for indicating that the session key is negotiated using the same pairwise master key under each connection in the multi-connection.
  • a session key may be negotiated under the established multi-connection.
  • the communication method under multiple connections may include: in response to receiving a corresponding first response message frame under the connection to be communicated in the multiple connections, under the connection to be communicated , using the same pairwise master key to negotiate the session key. That is, in an exemplary embodiment, after a connection to be communicated is established, a session key is negotiated under the established connection. Additionally, the same pairwise master key is used when negotiating the session key under each connection. In addition, the pairwise master key used under each connection may also be the same as the pairwise master key used under the initial associated connection.
  • negotiating a session key using the same pairwise master key includes: generating a second random number under the connection to be communicated based on a current time parameter of the connection to communicate; Under the communication connection, the second session key is obtained according to the paired master key and the second random number.
  • the second random number may be generated using the following formula (2).
  • Time 2/Time 3/Time 4/... can represent the current time parameters of each connection to be communicated.
  • Time 2/Time 3/Time 4/... can be directly represented as Time n, where n is related to the connection to be communicated, as will be described in detail later with reference to FIG. 4 .
  • the Local MAC Address can be different under each connection to be communicated.
  • Steps S250 and 270 of FIG. 2 will be described in detail below with reference to FIG. 4 .
  • connections in the multi-connection except the initial associated connection only include two connections (Link 1 and Link 2), however this is only exemplary, an exemplary embodiment of the present disclosure Not limited to this, for example, a larger number of connections are also possible.
  • the first request message frame described in step S250 of FIG. 2 may correspond to the Link 1 establishment request frame of operation S3 in FIG. 4 and the Link 2 establishment request frame of operation S5; the first request message frame described in step S250 of FIG.
  • the response message frame may correspond to the response frame of operations S4 and S6 in FIG. 4 .
  • a first request message frame related to multiple connections to be established may also be sent under one connection, for example, a multi-link set-up request frame.
  • the establishment process of Link 1 (which may also be referred to as the activation process) is performed.
  • the STA can send a Link 1 establishment request frame to the AP on the channel corresponding to Link 1 (S3); and then receive a response frame about the Link 1 establishment request frame from the AP (that is, the first response message frame) (S4).
  • S3 Link 1 establishment request frame
  • S4 receives a response frame about the Link 1 establishment request frame from the AP (that is, the first response message frame)
  • the STA receives the first response frame from the AP, it indicates that the establishment of Link 1 is completed, or activates Link 1.
  • the session key is negotiated under Link 1 in response to the STA receiving the first response frame (S4) under Link 1, i.e. in response to the connection Link 1 to be communicated being activated.
  • the session key is negotiated under Link 2 in response to the STA receiving the first response frame (S6) under Link 2, i.e., in response to the connection Link 2 to communicate with being activated.
  • Phase II and Phase III according to the first identifier included in the first request message frame sent in operations S3 and S4, the same pairwise master key is used when negotiating session keys under Link 1 and Link 2.
  • the negotiated session keys in Phase II and Phase III are similar to those in Phase I, and repeated descriptions are omitted for brevity.
  • “Time 2/Time 3/Time 4/" or “Time n” in formula (2) is the current time parameter Time related to Link 1 2;
  • “Time 2/Time 3/Time 4/" or “Time n” in formula (2) is the current time parameter Time 3 related to Link 2.
  • the session key negotiated under Link 1 and the session key negotiated under Link 2 may be collectively referred to as the second session key described in step S270 of FIG. 2 .
  • the same pairwise master key is used when negotiating the session key, since the initial associated connection and the connection to be communicated are transmitted asynchronously, their Time is different.
  • the same pairwise master key is used when negotiating the session key, the first session key and the second session key are different from each other due to the different Time.
  • the establishment of the respective connections to communicate (eg, Link 1 and Link 2) and the negotiation of the session keys may be asynchronous, in which case the second session key of the respective connections to communicate may be different, and each second session key may be different from the first session key of the initial associated connection.
  • the establishment of the respective connections to communicate (eg, Link 1 and Link 2) and the negotiation of session keys may be synchronous or parallel, in which case the second session of the respective connections to communicate The keys may be the same, but the second session key may be different from the first session key of the initial association connection.
  • FIG. 3 is a flowchart illustrating a communication method under multiple connections according to another exemplary embodiment of the present disclosure. The description will be made below with reference to FIGS. 3 and 4 together.
  • step 310 an initial association connection may be established between the STA and the AP.
  • Step 310 is similar to step 210 in FIG. 2 , and repeated descriptions are omitted for brevity.
  • multiple connections may be established between the STA and the AP.
  • the multi-connection is established according to the capability information identification.
  • the AP may select to establish at least one connection or all of the multiple connections from among multiple connections supported by the STA, eg, according to the communication environment or channel conditions.
  • step 330 The process of establishing multiple connections in step 330 is similar to the process of establishing Link 1 and Link 2 in FIG. 4 , and repeated descriptions are omitted for brevity. It will be appreciated that in step 330 the establishment of multiple connections may be performed synchronously or in parallel.
  • the session key may be negotiated substantially simultaneously under the established initial association connection and the established multi-connection. Specifically, in response to receiving the corresponding first response message frame under each connection in the established multiple connections (that is, in response to the completion of establishment or activation of all the connections that need to be established), at the initial associated connection and the established In multi-connection, the same pairwise master key is used to negotiate the session key. That is, after all connections (including the established initial association connection and the established multi-connection) are activated, key negotiation is performed.
  • negotiating a session key using the same pair of master keys includes: based on the current time parameter under each of the initial association connection and the established multi-connection, between the initial association connection and the established multi-connection A corresponding third random number is generated under each connection in the multi-connection; under each connection in the established initial association connection and the established multi-connection, the corresponding third random number is obtained according to the paired master key and the corresponding third random number. the third session key.
  • the third random number can be generated using the following formula (3).
  • Time 1/Time 2/Time 3/Time 4/... may represent the current time parameter of each connection in the initial associated connection and the established multi-connection.
  • Time 1/Time 2/Time 3/Time 4/... can be directly represented as Time m, where m is related to the initial associated connection and each of the multiple connections established, which will be referred to later Figure 4 is described in detail.
  • the Local MAC Address may be different under each of the initial associated connection and the established multi-connection.
  • Phase I and Phase II in Figure 4 may be omitted, and in Phase III the same pairwise master may be used substantially synchronously under each of the initial association connections, Link 1 and Link 2 Key agreement session key.
  • the process of negotiating session keys under each of the initial association connection, Link 1 and Link 2 is similar to the above-mentioned Phase I, Phase II and Phase III, and repeated descriptions are omitted here.
  • the corresponding session key under the initial association connection, the corresponding session key under Link 1, and the corresponding session key under Link 2 may be collectively referred to as the third session key .
  • session key negotiation can be performed basically synchronously in the initial association connection, Link 1 and Link 2, that is, basically synchronously sending or transmitting various message frames, the Time value under each connection is the same, so , the corresponding third session keys under each connection may be identical to each other.
  • the above method provided according to the embodiments of the present disclosure enables the session key generation mechanism to meet the requirements of multiple connections and improve network throughput.
  • FIG. 5 is a diagram illustrating a communication device 500 according to an example embodiment of the present disclosure.
  • the communication device 500 may be a control device on the STA side.
  • the communication device 500 may be located within the STA, or may be located outside the STA but may communicate with the STA.
  • the configuration of the communication device 500 shown in FIG. 5 is only exemplary, and exemplary embodiments of the present disclosure are not limited thereto, for example, the communication device 500 may further include more or less configurations.
  • the communication device 500 may include a sending module 510 , a receiving module 520 and a processing module 530 .
  • the sending module 510 may be configured to: send a first request message frame for establishing multiple connections, where the first request message frame includes at least a first identifier, and the first identifier is used to indicate that the establishment is Each connection in a multi-connection uses the same pairwise master key to negotiate the session key.
  • the sending module 510 may be further configured to send a second request message frame for establishing an initial association connection, where the second request message frame at least includes a capability information identifier related to multi-connection communication.
  • the processing module 530 may be configured to determine a value corresponding to the capability information identifier.
  • the capability information identifier corresponding to the first value indicates that simultaneous transmission and reception of multiple connections is supported; the capability information corresponding to the second value indicates that simultaneous transmission or reception of multiple connections is supported; or the capability information identifier corresponds to the third The value indicates that a connection is supported for sending and receiving.
  • the receiving module 520 may be configured to receive a first response message frame with respect to the first request message frame and a second response message frame with respect to the second request message frame.
  • the processing module 530 may be configured to: in response to the receiving module 520 receiving the second response message frame, under the initial association connection, use the pairwise master key to negotiate the session key.
  • the processing module 530 may be further configured to: in response to the receiving module 520 receiving the corresponding first response message frame under the connection to be communicated in the multiple connections, under the connection to be communicated, Session keys are negotiated using the same pairwise master key.
  • the processing module 530 may be further configured to: generate a first random number under the initial association connection based on the current time parameter under the initial association connection; under the initial association connection, according to the paired master key and The first random number to obtain the first session key.
  • the processing module 530 may also be configured to: based on the current time parameter of the connection to be communicated, generate a second random number under the connection to be communicated; For the master key and the second random number, a second session key is obtained.
  • the first session key and the second session key may be different from each other in response to the current time parameter under the initial associated connection and the current time parameter of the connection to be communicated being different.
  • the processing module 530 may be further configured to: in response to the receiving module 520 receiving the second response message frame, establish a multi-connection according to the capability information identifier; in response to each connection in the multi-connection by the receiving module 520 The corresponding first response message frame is received in each connection, and the same paired master key is used to negotiate the session key in the initial associated connection and the multi-connection.
  • the processing module 530 may be further configured to: based on the current time parameter under each of the initial association connection and the multi-connection, generate a corresponding The third random number; under each connection of the initial association connection and the multi-connection, the corresponding third session key is obtained according to the paired master key and the corresponding third random number.
  • the third session keys may be the same as each other.
  • another communication device can also be provided as a control device on the AP side, and has a structure similar to that of the communication device 500 .
  • the another communication device may include a sending unit, a receiving unit and a processing unit.
  • the receiving unit may receive various message frames from the communication device 500 .
  • the processing unit may control the operations of the transmitting unit and the receiving unit, and process various message frames received by the transmitting unit.
  • the processing unit may generate the AP's random number ANonce, and process various messages when negotiating session keys with the station.
  • the transmitting unit may transmit various message frames to the communication device 500 .
  • the above-mentioned communication device provided according to the embodiments of the present disclosure enables the session key generation mechanism to meet the requirements of multiple connections and improve network throughput.
  • module or “unit” may be implemented by a combination of software and/or hardware, which is not specifically limited to this embodiment of the present disclosure.
  • the embodiments of the present disclosure further provide an electronic device, the electronic device includes a processor and a memory; wherein, the memory stores machine-readable instructions (or may referred to as a "computer program"); a processor for executing machine-readable instructions to implement the methods described with reference to FIGS. 2 to 4 .
  • the memory stores machine-readable instructions (or may referred to as a "computer program”); a processor for executing machine-readable instructions to implement the methods described with reference to FIGS. 2 to 4 .
  • Embodiments of the present disclosure also provide a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the method described with reference to FIG. 2 to FIG. 4 is implemented.
  • a processor may be used to implement or execute various exemplary logical blocks, modules and circuits described in connection with the present disclosure, for example, a CPU (Central Processing Unit, central processing unit), general processing device, DSP (Digital Signal Processor, data signal processor), ASIC (Application Specific Integrated Circuit, application-specific integrated circuit), FPGA (Field Programmable Gate Array, Field Programmable Gate Array) or other programmable logic devices, transistor logic devices, hardware components or any combination thereof.
  • a processor may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, and the like.
  • the memory may be, for example, ROM (Read Only Memory), RAM (Random Access Memory), EEPROM (Electrically Erasable Programmable Read Only Memory) Read memory), CD-ROM (Compact Disc Read Only Memory, CD-ROM) or other optical disc storage, optical disc storage (including compact disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), magnetic disk storage media or other magnetic A storage device, or any other medium that can be used to carry or store program code in the form of instructions or data structures and that can be accessed by a computer, without limitation.
  • ROM Read Only Memory
  • RAM Random Access Memory
  • EEPROM Electrically Erasable Programmable Read Only Memory
  • CD-ROM Compact Disc Read Only Memory
  • CD-ROM Compact Disc Read Only Memory
  • optical disc storage including compact disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.
  • magnetic disk storage media or other magnetic A storage device, or any other medium that can be used to carry or store program code in the form of instructions or data structures and that can

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本公开示例实施例提供一种多连接下的通信方法和通信设备。所述通信方法包括：发送用于建立多连接的第一请求消息帧；其中，所述第一请求消息帧至少包括第一标识，所述第一标识用于指示在所述多连接中的每个连接下使用相同的成对主密钥协商会话密钥。根据本公开的实施例提供的技术方案使得会话密钥生成机制能够满足多连接下的需求，提高网络吞吐量。

Description

多连接下的通信方法和通信设备 技术领域
本公开涉及通信领域，更具体地说，涉及一种多连接下的通信方法以及通信设备。
背景技术
在2018年5月份，IEEE(Institute of Electrical and Electronic Engineers，电气与电子工程师协会)成立了SG(study group)IEEE802.11be来研究下一代(IEEE802.11a/b/g/n/ac)Wi-Fi技术，所研究的范围为：320MHz的带宽传输、多个频段的聚合及协同等，期望能够相对于现有的IEEE802.11ax标准提高至少四倍的速率以及吞吐量，其主要的应用场景为视频传输、AR(Augmented Reality，增强现实)、VR(Virtual Reality，虚拟现实)等。
多个频段的聚合及协同是指设备间同时在2.4GHz、5.8GHz及6-7GHz的频段下进行通信，对于设备间同时在多个频段下通信需要定义新的MAC(Media Access Control，介质访问控制)机制来进行管理。此外，在IEEE802.11be中还期望能够支持低时延传输。
在IEEE802.11be标准中，将支持的最大带宽为320MHz(160MHz+160MHz)，此外还将支持240MHz(160MHz+80MHz)及IEEE802.11ax标准中所支持的带宽。
在现有标准中，在站点(STA：Station)与接入点(AP：Access Point)之间通常仅存在单连接，在该连接下建立了关联连接之后，可以进行会话密钥的协商。具体地，可以通过四步握手机制来协商会话密钥，如图1所示为会话密钥的层次结构。
在IEEE802.11be标准中，STA和AP可以是多连接设备(MLD：multi-link device)，即，支持在同一时刻能够在多连接下同时发送和/或接收的 功能。因此，在IEEE802.11be标准中，STA与AP之间可以存在多个连接，而现有标准中的会话密钥协商机制不能够满足多连接下的需求，所以需要对现有标准中的会话密钥协商机制进行增强。
发明内容
本公开的各方面将至少解决上述问题和/或缺点。本公开的各种实施例提供以下技术方案：
根据本公开的示例实施例提供一种多连接下的通信方法。所述通信方法包括：发送用于建立多连接的第一请求消息帧；其中，所述第一请求消息帧至少包括第一标识，所述第一标识用于指示在建立的所述多连接中的每个连接下使用相同的成对主密钥协商会话密钥。
根据本公开的示例实施例，所述通信方法还包括：发送用于建立初始关联连接的第二请求消息帧，其中，所述第二请求消息帧至少包括与多连接通信有关的能力信息标识。
根据本公开的示例实施例，所述通信方法还包括：确定所述能力信息标识所对应的值，其中，所述能力信息标识对应于第一值表示支持多连接的同时发送和接收；所述能力信息对应于第二值表示支持多连接的同时发送或接收；或者所述能力信息标识对应于第三值表示支持一个连接的发送和接收。
根据本公开的示例实施例，所述通信方法还包括：接收关于所述第二请求消息帧的第二响应消息帧；响应于接收到所述第二响应消息帧，在所述初始关联连接下，使用所述成对主密钥协商会话密钥。
根据本公开的示例实施例，所述通信方法还包括：接收关于所述第一请求消息帧的第一响应消息帧；响应于在所述多连接中的将要进行通信的连接下接收到相应的第一响应消息帧，在所述将要进行通信的连接下，使用相同的所述成对主密钥协商会话密钥。
根据本公开的示例实施例，使用所述成对主密钥协商会话密钥，包括：基于所述初始关联连接下的当前时间参数，在所述初始关联连接下生成第一随机数；在所述初始关联连接下，根据所述成对主密钥和所述第一随机 数，获得第一会话密钥。
根据本公开的示例实施例，使用相同的所述成对主密钥协商会话密钥，包括：基于所述将要进行通信的连接的当前时间参数，在所述将要进行通信的连接下生成第二随机数；在所述将要进行通信的连接下，根据所述成对主密钥以及所述第二随机数，获得第二会话密钥。
根据本公开的示例实施例，响应于所述初始关联连接下的当前时间参数以及所述将要进行通信的连接的当前时间参数不相同，所述第一会话密钥以及所述第二会话密钥彼此不相同。
根据本公开的示例实施例，所述通信方法还包括：接收关于所述第二请求消息帧的第二响应消息帧以及关于所述第一请求消息帧的第一响应消息帧；响应于接收到所述第二响应消息帧，根据所述能力信息标识建立所述多连接；响应于在所述多连接中的每一连接下均接收到相应的第一响应消息帧，在所述初始关联连接以及所述多连接下，使用相同的所述成对主密钥协商会话密钥。
根据本公开的示例实施例，使用相同的所述成对主密钥协商会话密钥，包括：基于所述初始关联连接和所述多连接中的每一连接下的当前时间参数，在所述初始关联连接和所述多连接中的每一连接下生成相应的第三随机数；在所述初始关联连接和所述多连接中的每一连接下，根据所述成对主密钥以及相应的所述第三随机数，获得相应的第三会话密钥。
根据本公开的示例实施例，所述第三会话密钥彼此相同。
根据本公开的示例实施例提供一种多连接下的通信设备。所述通信设备包括：发送模块，被配置为：发送用于建立多连接的第一请求消息帧，其中，所述第一请求消息帧至少包括第一标识，所述第一标识用于指示在建立的所述多连接中的每个连接下使用相同的成对主密钥协商会话密钥。
根据本公开的示例实施例，所述发送模块还被配置为：发送用于建立初始关联连接的第二请求消息帧，其中，所述第二请求消息帧至少包括与多连接通信有关的能力信息标识。
根据本公开的示例实施例，所述通信设备还包括：处理模块，被配置为确定所述能力信息标识所对应的值，其中，所述能力信息标识对应于第 一值表示支持多连接的同时发送和接收；所述能力信息对应于第二值表示支持多连接的同时发送或接收；或者所述能力信息标识对应于第三值表示支持一个连接的发送和接收。
根据本公开的示例实施例，所述通信设备还包括：接收模块，被配置为：接收关于所述第二请求消息帧的第二响应消息帧；处理模块，被配置为：响应于所述接收模块接收到所述第二响应消息帧，在所述初始关联连接下，使用所述成对主密钥协商会话密钥。
根据本公开的示例实施例，所述接收模块还被配置为：接收关于所述第一请求消息帧的第一响应消息帧；所述处理模块还被配置为：响应于所述接收模块在所述多连接中的将要进行通信的连接下接收到相应的第一响应消息帧，在所述将要进行通信的连接下，使用相同的所述成对主密钥协商会话密钥。
根据本公开的示例实施例，所述处理模块还被配置为：基于所述初始关联连接下的当前时间参数，在所述初始关联连接下生成第一随机数；在所述初始关联连接下，根据所述成对主密钥和所述第一随机数，获得第一会话密钥。
根据本公开的示例实施例，所述处理模块还被配置为：基于所述将要进行通信的连接的当前时间参数，在所述将要进行通信的连接下生成第二随机数；在所述将要进行通信的连接下，根据所述成对主密钥以及所述第二随机数，获得第二会话密钥。
根据本公开的示例实施例，响应于所述初始关联连接下的当前时间参数以及所述将要进行通信的连接的当前时间参数不相同，所述第一会话密钥以及所述第二会话密钥彼此不相同。
根据本公开的示例实施例，所述通信设备还包括：接收模块，被配置为：接收关于所述第二请求消息帧的第二响应消息帧以及关于所述第一请求消息帧的第一响应消息帧；其中，所述处理模块还被配置为：响应于所述接收模块接收到所述第二响应消息帧，根据所述能力信息标识建立所述多连接；响应于所述接收模块在所述多连接中的每一连接下均接收到相应的第一响应消息帧，在所述初始关联连接以及所述多连接下，使用相同的 所述成对主密钥协商会话密钥。
根据本公开的示例实施例，所述处理模块还被配置为：基于所述初始关联连接和所述多连接中的每一连接下的当前时间参数，在所述初始关联连接和所述多连接中的每一连接下生成相应的第三随机数；在所述初始关联连接和所述多连接中的每一连接下，根据所述成对主密钥以及相应的所述第三随机数，获得相应的第三会话密钥。
根据本公开的示例实施例，所述第三会话密钥彼此相同。
根据本公开的示例实施例提供了一种电子设备。所述电子设备包括存储器、处理器及存储在所述存储器上并在所述处理器上可运行的计算机程序。所述处理器执行所述计算机程序时实现如上所述的方法。
根据本公开的示例实施例提供了一种计算机可读存储介质。所述计算机可读存储介质上存储有计算机程序。该计算机程序被处理器执行时实现如上所述的方法。
根据本公开的实施例提供的以上技术方案使得会话密钥生成机制能够满足多连接下的需求，提高网络吞吐量。
附图说明
通过参照附图详细描述本公开的示例实施例，本公开实施例的上述以及其他特征将更加明显，其中：
图1是示出会话密钥的层次结构的示例的示图；
图2是示出根据本公开的示例实施例的多连接下的通信方法的流程图；
图3是示出根据本公开的另一示例实施例的多连接下的通信方法的流程图；
图4是示出根据本公开的示例实施例的多连接下的通信场景的示图；
图5是示出根据本公开的示例实施例的通信设备的示图。
具体实施方式
提供以下参照附图的描述，以帮助全面理解由所附权利要求及其等同物限定的本公开的各种实施例。本公开的各种实施例包括各种具体细节，但是 这些具体细节仅被认为是示例性的。此外，为了清楚和简洁，可以省略对公知的技术、功能和构造的描述。
在本公开中使用的术语和词语不限于书面含义，而是仅被发明人所使用，以能够清楚和一致的理解本公开。因此，对于本领域技术人员而言，提供本公开的各种实施例的描述仅是为了说明的目的，而不是为了限制的目的。
应当理解，除非上下文另外清楚地指出，否则这里使用的单数形式“一”、“一个”、“所述”和“该”也可以包括复数形式。应该进一步理解的是，本公开中使用的措辞“包括”是指存在所描述的特征、整数、步骤、操作、元件和/或组件，但是并不排除存在或添加一个或多个其他特征、整数、步骤、操作、元件、组件和/或它们的组。
将理解的是，尽管术语“第一”、“第二”等在本文中可以用于描述各种元素，但是这些元素不应受这些术语的限制。这些术语仅用于将一个元素与另一个元素区分开。因此，在不脱离示例实施例的教导的情况下，下面讨论的第一元素可以被称为第二元素。
应该理解，当元件被称为“连接”或“耦接”到另一元件时，它可以直接连接或耦接到其他元件，或者也可以存在中间元件。此外，这里使用的“连接”或“耦接”可以包括无线连接或无线耦接。这里使用的术语“和/或”或者表述“……中的至少一个/至少一者”包括一个或多个相关列出的项目的任何和所有组合。
下面将结合附图详细描述本公开的实施方式。
图1是示出会话密钥的层次结构的示例的示图。
如上所述，在STA与AP之间，通过四步握手机制可以产生各类密钥，其层次结构如图1所示。在此情况下，STA可以称为申请者(Supplicant)，AP可以称为认证者(Authenticator)。参照图1，成对主密钥(PMK)可以通过各种方式预先获得，例如，由预先共享密钥(PSK)直接得到，或由主会话密钥(MSK)推导得出，为了清楚和简洁，本公开的示例实施例不进行详细描述。
通过下面的PRF-Length函数可以将PMK转换成成对临时密钥(PTK)。
PTK←PRF-Length(PMK,“Pairwise key expansion”,Min(AA,SPA)||Max(AA,SPA)||Min(ANonce,SNonce)||Max(ANonce,SNonce))
在PRF-Length函数中，Length表示生成的PTK的长度，“Pairwise key expansion”表示成对密钥的扩展，AA表示认证者(例如，AP)的MAC地址，SPA表示申请者(例如，STA)的MAC地址，ANonce表示认证者(例如，AP)产生的随机数，SNonce表示申请者(例如，STA)产生的随机数。
在四步握手过程中，认证者(例如，AP)将产生的随机数ANonce等发送给申请者(例如，STA)；申请者(例如，STA)基于接收到的ANonce以及其本身的SNonce来产生PTK；然后在申请者(例如，STA)与认证者(例如，AP)之间，通过利用PKT进行进一步的协商，生成并认证密钥确认密钥(KCK)、密钥加密密钥(KEK)和临时密钥(TK)。在四步握手完成之后，还可以在认证者(例如，AP)与申请者(例如，STA)之间进行更新组密钥握手，为了清楚和简洁，本公开的示例实施例不进行详细描述。
简而言之，在AP与STA之间，可以利用它们各自的随机数(即，ANonce和SNonce)来进行会话密钥的协商。认证者(例如，AP)生成随机数ANonce的方式可以与申请者(例如，STA)生成随机数SNonce的方式相同。也就是说，在下文中，当使用随机数(Nonce)时，根据相应的对象，随机数(Nonce)可以表示认证者(例如，AP)的随机数ANonce或者申请者(例如，STA)的随机数SNonce。
Nonce可以通过下面的PRF-256函数来生成。
PRF-256(Random number,“Init Counter”,Local MAC Address||Time)
Random number表示例如256比特的随机数，“Init Counter”表示初始计数器值，Local MAC Address表示认证者(例如，AP)或申请者(例如，STA)的地址(AA或SPA)，Time表示根据网络时间协议(NTP：Network Time Protocol)的当前时间，或者任何可行的NTP格式的其他时间。
根据PRF-256函数可知，随机数Nonce与Time等参数严格相关。
在802.11be标准中，可以存在以下情形：802.11be标准支持：在两个多连接设备(MLD)之间建立了多连接之后，在多连接中，相同的PMK和相同的PTK用于成对临时密钥安全关联(PTKSA：pairwise transient key security association)的相同的数据包编号(PN：packet number)空间。
现有标准中的会话密钥协商机制未考虑多连接的情况，因此不能够满足多连接下的需求，所以需要对现有标准中的会话密钥协商机制进行增强。
图2是示出根据本公开的示例实施例的多连接下的通信方法的流程图。图4是示出根据本公开的示例实施例的多连接下的通信场景的示图。
在图2和图4中，作为示例示出了在STA与AP之间进行通信的过程，在本申请的示例实施例中，STA可以表示任何类型的发送端设备，AP可以表示任何类型的接收端设备。例如，AP可以包括软件应用和/或电路，以使无线网络中的其他类型节点可以通过AP与无线网络外部及内部进行通信。在一些示例中，作为示例，AP可以是配备有Wi-Fi(Wireless Fidelity，无线保真)芯片的终端设备或网络设备。作为示例，站点STA可以包括但不限于：蜂窝电话、智能电话、可穿戴设备、计算机、个人数字助理(PDA)、个人通信系统(PCS)设备、个人信息管理器(PIM)、个人导航设备(PND)、全球定位系统、多媒体设备、物联网(IoT)设备等。
此外，在本公开的示例实施例中，STA和AP可以支持多连接的功能。为了便于描述，在下文中，假设AP为全功能，即，STA所支持的功能AP也可以全部支持，然而，这仅是示例性的，本公开的示例实施例不限于此。此外，STA与AP之间的多连接可以表示STA与AP之间的处于不同频段的多个信道。在下文中，为了便于描述，将建立的初始关联连接与建立的多连接(例如，Link 1和Link 2)分开描述，但是可以理解，初始关联连接可以是STA与AP之间的多连接中的一个连接，也就是说，建立的初始关联连接和建立的多连接(例如，Link 1和Link 2)可以统称为多连接，此外，建立的多连接(例如，Link 1和Link 2)也可以称为多连接中的除了初始关联连接之外的其他连接。
参照图2，在步骤210中，可以在STA与AP之间建立初始关联连接。具体地说，根据本公开的示例实施例的多连接下的通信方法可以包括：发送用于建立初始关联连接的第二请求消息帧；接收关于第二请求消息帧的第二响应消息帧。图2的步骤210可以对应于图4的建立初始关联的过程，即，对应于图4的操作S1和操作S2。在下文的描述中，第二请求消息帧可以对应于操作S1中的关联请求帧，第二响应消息帧可以对应于操作S2中的关联响应帧。
参照图2和图4，在操作S1中，在一个连接(或信道)下，STA可以向AP发送关联请求帧。根据本公开的示例实施例，关联请求帧(即，第二请求消息帧)可以至少包括与多连接通信有关的能力信息标识。
作为一个示例，根据本公开的示例实施例的多连接下的通信方法还可 以包括：确定能力信息标识所对应的值。根据示例实施例，可以根据STA的功能和配置来确定与STA的多连接通信能力有关的能力信息标识。可选择地，能力信息标识可以在制造STA设备时预先写入在STA内部，然后在STA发起与AP建立初始关联连接时，可以直接获取预先写入的能力信息标识，并且将能力信息标识包括在将要发送的关联请求帧中。根据STA的不同功能和配置，能力信息标识可以对应于不同的值。根据本公开的示例实施例，能力信息标识对应于第一值(例如，1)可以表示支持多连接的同时发送和接收，能力信息对应于第二值(例如，2)表示支持多连接的同时发送或接收；或者能力信息标识对应于第三值(例如，3)表示支持一个连接的发送和接收(例如，基于“时分”机制的发送和接收)。
继续参照图4，在操作S2中，STA可以从AP接收关于关联请求帧的关联响应帧。当STA接收到来自AP的关联响应帧时，STA与AP之间的初始关联连接建立完成。由于在关联请求帧中包括与多连接通信有关的能力信息标识，因此操作S1和S2可以表示多连接感知的过程。
返回参照图2，在步骤S230中，可以在初始关联连接下进行密钥协商。图2的步骤S230可以对应于图4的阶段I，也就是说，根据本公开的示例实施例的通信方法还可以包括：响应于接收到第二响应消息帧(即，响应于完成初始关联连接的建立)，在初始关联连接下，使用成对主密钥协商会话密钥。成对主密钥可以是参照图1描述的PMK。
根据本公开的示例实施例，使用成对主密钥协商会话密钥，包括：基于初始关联连接下的当前时间参数，在初始关联连接下生成第一随机数；在初始关联连接下，根据成对主密钥和第一随机数，获得第一会话密钥。
在一个示例中，可以利用下面的式(1)，基于初始关联连接下的当前时间参数Time 1来生成初始关联连接下的第一随机数。
PRF-256(Random number,“Init Counter”,Local MAC Address||Time 1)  (1)
在式(1)中，时间参数Time 1是根据NTP的当前时间，或者任何可行的NTP格式的其他时间。
在一个示例中，利用式(1)，STA可以基于STA的MAC地址以及当前时间参数Time 1生成随机数；然后根据成对主密钥和生成的随机数，与AP协商并获得会话密钥。
在一个示例中，利用式(1)，AP可以基于AP在初始关联连接下的本地MAC地址以及当前时间参数Time 1生成随机数ANonce；然后根据成对主密钥和生成的随机数，与STA协商并获得会话密钥。
在一个示例中，当通过例如四步握手机制来协商会话密钥时，AP可以利用式(1)，基于AP在初始关联连接下的本地MAC地址以及当前时间参数Time 1生成随机数ANonce，并且将ANonce发送给STA；STA可以利用式(1)，基于STA在初始关联连接下的MAC地址以及当前时间参数Time 1生成随机数SNonce；然后STA可以根据成对主密钥PMK、接收到的随机数ANonce以及生成的随机数SNonce，与AP协商并获得会话密钥(例如，TK、KEK、KCK等)。
返回参照图2，在步骤S250中，可以在STA与AP之间建立多连接。具体地，根据本公开的示例实施例的多连接下的通信方法可以包括：发送用于建立多连接的第一请求消息帧；接收关于第一请求消息帧的第一响应消息帧。根据示例实施例，第一请求消息帧至少包括第一标识，第一标识用于指示在多连接中的每个连接下使用相同的成对主密钥协商会话密钥。
在步骤270中，可以在建立的多连接下协商会话密钥。具体地，根据本公开的示例实施例的多连接下的通信方法可以包括：响应于在多连接中的将要进行通信的连接下接收到相应的第一响应消息帧，在将要进行通信的连接下，使用相同的成对主密钥协商会话密钥。也就是说，在一个示例实施例中，在将要进行通信的一个连接建立完成之后，则在建立完成的该连接下协商会话密钥。此外，在每个连接下协商会话密钥时均使用相同的成对主密钥。此外，在每个连接下使用的成对主密钥也可以与初始关联连接下使用的成对主密钥相同。
根据本公开的示例实施例，使用相同的成对主密钥协商会话密钥，包括：基于将要进行通信的连接的当前时间参数，在将要进行通信的连接下生成第二随机数；在将要进行通信的连接下，根据成对主密钥以及第二随机数，获得第二会话密钥。作为示例，可以利用下面的式(2)来生成第二随机数。
PRF-256(Random number,“Init Counter”,Local MAC Address||Time 2/Time 3/Time 4/……)   (2)
在式(2)中，Time 2/Time 3/Time 4/……可以表示各个将要进行通信的连接的当前时间参数。在示例实施例中，Time 2/Time 3/Time 4/……可以直接表示为Time n，其中，n与将要进行通信的连接有关，稍后将参照图4进行详细描述。此外，在各个将要进行通信的连接下，Local MAC Address可以不同。
下面结合图4来详细描述图2的步骤S250和步骤270。
在图4中，为了简洁和清楚，多连接中的除了初始关联连接之外的其他连接仅包括两个连接(Link 1和Link 2)，然而这仅是示例性的，本公开的示例实施例不限于此，例如，更多数量的连接也是可行的。
在下文中，图2的步骤S250描述的第一请求消息帧可以对应于图4中的操作S3的Link 1建立请求帧和操作S5中的Link 2建立请求帧；图2的步骤S250描述的第一响应消息帧可以对应于图4中的操作S4和S6的响应帧。此外，也可以在一个连接下，发送与将要建立的多个连接有关的第一请求消息帧，例如，多连接建立请求(multi-link set-up request)帧。
当将要在Link 1下进行通信时，执行Link 1的建立过程(也可以称为激活过程)。在建立连接Link 1的过程中，STA可以在与Link 1对应的信道上，向AP发送Link 1建立请求帧(S3)；然后从AP接收关于Link 1建立请求帧的响应帧(即，第一响应消息帧)(S4)。当STA接收到来自AP的第一响应帧时，指示Link 1的建立完成，或者激活Link 1。
在阶段II中，响应于STA在Link 1下接收到第一响应帧(S4)，即，响应于将要进行通信的连接Link 1被激活，则在Link 1下协商会话密钥。
当将要在Link 2下进行通信时，执行Link 2的建立过程。Link 2的建立过程与Link 1相似，为了简明，省略重复的描述。
在阶段III中，响应于STA在Link 2下接收到第一响应帧(S6)，即，响应于将要进行通信的连接Link 2被激活，则在Link 2下协商会话密钥。
在阶段II和阶段III中，根据操作S3和S4中发送的第一请求消息帧中包括的第一标识，在Link 1和Link 2下协商会话密钥时使用相同的成对主密钥。
阶段II和阶段III中的协商会话密钥与阶段I中的协商会话密钥相似，为了简明，省略重复的描述。仅作为示例性的，在Link 1下协商会话密钥时，式(2)中的“Time 2/Time 3/Time 4/……”或“Time n”是与Link 1有关的当前时间参数Time 2；在Link 2下协商会话密钥时，式(2)中的“Time 2/Time 3/Time 4/……”或“Time n”是与Link 2有关的当前时间参数Time 3。
此外，在Link 1下协商的会话密钥以及在Link 2下协商的会话密钥可以统称为图2的步骤S270中描述的第二会话密钥。参照式(1)和式(2)，虽然在协商会话密钥时使用了相同的成对主密钥，但是由于初始关联连接与将要进行通信的连接是非同步传输的，因此他们的Time不同。虽然在协商会话密钥时使用了相同的成对主密钥，但是由于Time不同，因此，第一会话密钥和第二会话密钥彼此不同。
在一个示例中，将要进行通信的各个连接(例如，Link 1和Link 2)的建立以及会话密钥的协商可以是非同步的，在此情况下，将要进行通信的各个连接的第二会话密钥可以不同，并且每个第二会话密钥可以与初始关联连接的第一会话密钥不同。
在一个示例中，将要进行通信的各个连接(例如，Link 1和Link 2)的建立以及会话密钥的协商可以是同步或并行的，在此情况下，将要进行通信的各个连接的第二会话密钥可以相同，但是第二会话密钥可以与初始关联连接的第一会话密钥不同。
图3是示出根据本公开的另一示例实施例的多连接下的通信方法的流程图。下面将一起参照图3和图4来进行描述。
参照图3，在步骤310中，可以在STA与AP之间建立初始关联连接。步骤310与图2的步骤210相似，为了简明，省略重复的描述。
在步骤330中，可以在STA与AP之间建立多连接。具体地，响应于接收到第二响应消息帧(即，响应于完成初始关联连接)，根据能力信息标识建立多连接。例如，AP可以从STA支持的多个连接中，例如，根据通信环境或信道状况，选择建立多个连接中的至少一个连接或者全部连接。
步骤330中建立多连接的过程与图4的Link 1和Link 2的建立过程相 似，为了简明，省略重复的描述。将理解的是，在步骤330中，多连接的建立可以同步或并行地执行。
在步骤350中，可以在建立的初始关联连接和建立的多连接下基本同时地协商会话密钥。具体地，响应于在建立的多连接中的每一连接下均接收到相应的第一响应消息帧(即，响应于建立完成或激活了需要建立的全部连接)，在初始关联连接以及建立的多连接下，使用相同的成对主密钥协商会话密钥。也就是说，在所有的连接(包括建立的初始关联连接和建立的多连接)激活之后，再进行密钥协商。
根据本公开的示例实施例，使用相同的所对主密钥协商会话密钥，包括：基于初始关联连接和建立的多连接中的每一连接下的当前时间参数，在初始关联连接和建立的多连接中的每一连接下生成相应的第三随机数；在建立的初始关联连接和建立的多连接中的每一连接下，根据成对主密钥以及相应的第三随机数，获得相应的第三会话密钥。作为示例，可以利用下面的式(3)来生成第三随机数。
PRF-256(Random number,“Init Counter”,Local MAC Address||Time 1/Time 2/Time 3/Time 4/……)   (3)
在式(3)中，Time 1/Time 2/Time 3/Time 4/……可以表示初始关联连接和建立的多连接中的每一连接的当前时间参数。在示例实施例中，Time 1/Time 2/Time 3/Time 4/……可以直接表示为Time m，其中，m与初始关联连接和建立的多连接中的每一连接有关，稍后将参照图4进行详细描述。此外，在初始关联连接和建立的多连接中的每一连接下，Local MAC Address可以不同。
在一个示例实施例中，图4中的阶段I和阶段II可以省略，而在阶段III，可以在初始关联连接、Link 1和Link 2中的每一连接下基本同步地使用相同的成对主密钥协商会话密钥。在初始关联连接、Link 1和Link 2中的每一连接下协商会话密钥的过程与上述的阶段I、阶段II和阶段III相似，在此省略重复的描述。
根据本示例实施例，在阶段III中，初始关联连接下的相应的会话密钥、Link 1下的相应的会话密钥、以及Link 2下的相应的会话密钥可以统称为第 三会话密钥。由于在阶段III，可以在初始关联连接、Link 1和Link 2基本同步地进行会话密钥的协商，即，基本同步的发送或传输各种消息帧，因此每一连接下的Time值相同，因此，每一连接下的相应的第三会话密钥可以彼此相同。
根据本公开的实施例提供的上述方法使得会话密钥生成机制能够满足多连接下的需求，提高网络吞吐量。
图5是示出根据本公开的示例实施例的通信设备500的示图。通信设备500可以是位于STA侧的控制设备。例如，通信设备500可以设置在STA内，或者位于STA外部但是可以与STA进行通信。此外，图5所示的通信设备500的配置仅是示例性的，本公开示例实施例不限于此，例如，通信设备500还可以包括更多或更少的配置。
参照图5，通信设备500可以包括发送模块510、接收模块520和处理模块530。
根据本公开的实施例，发送模块510可以被配置为：发送用于建立多连接的第一请求消息帧，其中，第一请求消息帧至少包括第一标识，第一标识用于指示在建立的多连接中的每个连接下使用相同的成对主密钥协商会话密钥。
根据本公开的实施例，发送模块510还可以被配置为：发送用于建立初始关联连接的第二请求消息帧，其中，第二请求消息帧至少包括与多连接通信有关的能力信息标识。
根据本公开的实施例，处理模块530可以被配置为确定能力信息标识所对应的值。根据本公开的实施例，能力信息标识对应于第一值表示支持多连接的同时发送和接收；能力信息对应于第二值表示支持多连接的同时发送或接收；或者能力信息标识对应于第三值表示支持一个连接的发送和接收。
根据本公开的实施例，接收模块520可以被配置为：接收关于第一请求消息帧的第一响应消息帧以及关于第二请求消息帧的第二响应消息帧。
根据本公开的实施例，处理模块530可以被配置为：响应于接收模块520接收到第二响应消息帧，在初始关联连接下，使用成对主密钥协商会 话密钥。
根据本公开的实施例，处理模块530还可以被配置为：响应于接收模块520在多连接中的将要进行通信的连接下接收到相应的第一响应消息帧，在将要进行通信的连接下，使用相同的成对主密钥协商会话密钥。
根据本公开的实施例，处理模块530还可以被配置为：基于初始关联连接下的当前时间参数，在初始关联连接下生成第一随机数；在初始关联连接下，根据成对主密钥和第一随机数，获得第一会话密钥。
根据本公开的实施例，处理模块530还可以被配置为：基于将要进行通信的连接的当前时间参数，在将要进行通信的连接下生成第二随机数；在将要进行通信的连接下，根据成对主密钥以及第二随机数，获得第二会话密钥。根据本公开的实施例，响应于初始关联连接下的当前时间参数以及将要进行通信的连接的当前时间参数不相同，第一会话密钥以及第二会话密钥可以彼此不相同。
根据本公开的实施例，处理模块530还可以被配置为：响应于接收模块520接收到第二响应消息帧，根据能力信息标识建立多连接；响应于接收模块520在多连接中的每一连接下均接收到相应的第一响应消息帧，在初始关联连接以及多连接下，使用相同的成对主密钥协商会话密钥。
根据本公开的实施例，处理模块530还可以被配置为：基于初始关联连接和多连接中的每一连接下的当前时间参数，在初始关联连接和多连接中的每一连接下生成相应的第三随机数；在初始关联连接和多连接中的每一连接下，根据成对主密钥以及相应的第三随机数，获得相应的第三会话密钥。根据本公开的实施例，第三会话密钥可以彼此相同。
根据本公开的示例实施例，还可以提供另一通信设备作为AP侧的控制设备，并且具有与通信设备500相似的结构。例如，所述的另一通信设备可以包括发送单元、接收单元和处理单元。接收单元可以从通信设备500接收各种消息帧。处理单元可以控制发送单元和接收单元的操作，并且处理发送单元接收的各种消息帧。例如，处理单元可以生成AP的随机数ANonce，并且处理与站点协商会话密钥时的各种消息。发送单元可以向通信设备500发送各种消息帧。然而，这仅是示例性的，通信设备500以及所述 的另一通信设备还可以包括更多或更少的配置。
根据本公开的实施例提供的上述通信设备使得会话密钥生成机制能够满足多连接下的需求，提高网络吞吐量。
此外，上述的“模块”或“单元”可以通过软件和/或硬件的结合来实现，对此本公开实施例不进行具体限制。
基于与本公开的实施例所提供的方法相同的原理，本公开的实施例还提供了一种电子设备，该电子设备包括处理器和存储器；其中，存储器中存储有机器可读指令(也可以称为“计算机程序”)；处理器，用于执行机器可读指令以实现参照图2至图4描述的方法。
本公开的实施例还提供了一种计算机可读存储介质，该计算机可读存储介质上存储有计算机程序，计算机程序被处理器执行时实现参照图2至图4描述的方法。
在示例实施例中，处理器可以是用于实现或执行结合本公开内容所描述的各种示例性的逻辑方框、模块和电路，例如，CPU(Central Processing Unit，中央处理器)、通用处理器、DSP(Digital Signal Processor，数据信号处理器)、ASIC(Application Specific Integrated Circuit，专用集成电路)、FPGA(Field Programmable Gate Array，现场可编程门阵列)或者其他可编程逻辑器件、晶体管逻辑器件、硬件部件或者其任意组合。处理器也可以是实现计算功能的组合，例如包含一个或多个微处理器组合、DSP和微处理器的组合等。
在示例实施例中，存储器可以是，例如，ROM(Read Only Memory，只读存储器)、RAM(Random Access Memory，随机存取存储器)、EEPROM(Electrically Erasable Programmable Read Only Memory，电可擦可编程只读存储器)、CD-ROM(Compact Disc Read Only Memory，只读光盘)或其他光盘存储、光碟存储(包括压缩光碟、激光碟、光碟、数字通用光碟、蓝光光碟等)、磁盘存储介质或者其他磁存储设备、或者能够用于携带或存储具有指令或数据结构形式的程序代码并能够由计算机存取的任何其他介质，但不限于此。
应该理解的是，虽然附图的流程图中的各个步骤按照箭头的指示依次 显示，但是这些步骤并不是必然按照箭头指示的顺序依次执行。除非本文中有明确的说明，这些步骤的执行并没有严格的顺序限制，其可以以其他的顺序执行。此外，附图的流程图中的至少一部分步骤可以包括多个子步骤或者多个阶段，这些子步骤或者阶段并不必然是在同一时刻执行完成，而是可以在不同的时刻执行，其执行顺序也不必然是依次进行，而是可以与其他步骤或者其他步骤的子步骤或者阶段的至少一部分轮流或者交替地执行。
虽然已经参照本公开的某些实施例示出和描述了本公开，但是本领域技术人员将理解，在不脱离本公开的范围的情况下，可以在形式和细节上进行各种改变。因此，本公开的范围不应被限定为受限于实施例，而是应由所附权利要求及其等同物限定。

Claims (24)

  1. 一种多连接下的通信方法，所述通信方法包括：
    发送用于建立多连接的第一请求消息帧；
    其中，所述第一请求消息帧至少包括第一标识，所述第一标识用于指示在建立的所述多连接中的每个连接下使用相同的成对主密钥协商会话密钥。
  2. 根据权利要求1所述的通信方法，其中，所述通信方法还包括：
    发送用于建立初始关联连接的第二请求消息帧，其中，所述第二请求消息帧至少包括与多连接通信有关的能力信息标识。
  3. 根据权利要求2所述的通信方法，其中，所述通信方法还包括：确定所述能力信息标识所对应的值，
    其中，所述能力信息标识对应于第一值表示支持多连接的同时发送和接收；
    其中，所述能力信息对应于第二值表示支持多连接的同时发送或接收；或者
    其中，所述能力信息标识对应于第三值表示支持一个连接的发送和接收。
  4. 根据权利要求2所述的通信方法，其中，所述通信方法还包括：
    接收关于所述第二请求消息帧的第二响应消息帧；
    响应于接收到所述第二响应消息帧，在所述初始关联连接下，使用所述成对主密钥协商会话密钥。
  5. 根据权利要求4所述的通信方法，其中，所述通信方法还包括：
    接收关于所述第一请求消息帧的第一响应消息帧；
    响应于在所述多连接中的将要进行通信的连接下接收到相应的第一 响应消息帧，在所述将要进行通信的连接下，使用相同的所述成对主密钥协商会话密钥。
  6. 根据权利要求5所述的通信方法，其中，使用所述成对主密钥协商会话密钥，包括：
    基于所述初始关联连接下的当前时间参数，在所述初始关联连接下生成第一随机数；
    在所述初始关联连接下，根据所述成对主密钥和所述第一随机数，获得第一会话密钥。
  7. 根据权利要求6所述的通信方法，其中，使用相同的所述成对主密钥协商会话密钥，包括：
    基于所述将要进行通信的连接的当前时间参数，在所述将要进行通信的连接下生成第二随机数；
    在所述将要进行通信的连接下，根据所述成对主密钥以及所述第二随机数，获得第二会话密钥。
  8. 根据权利要求7所述的通信方法，其中，响应于所述初始关联连接下的当前时间参数以及所述将要进行通信的连接的当前时间参数不相同，所述第一会话密钥以及所述第二会话密钥彼此不相同。
  9. 根据权利要求2所述的通信方法，其中，所述通信方法还包括：
    接收关于所述第二请求消息帧的第二响应消息帧以及关于所述第一请求消息帧的第一响应消息帧；
    响应于接收到所述第二响应消息帧，根据所述能力信息标识建立所述多连接；
    响应于在所述多连接中的每一连接下均接收到相应的第一响应消息帧，在所述初始关联连接以及所述多连接下，使用相同的所述成对主密钥协商会话密钥。
  10. 根据权利要求9所述的通信方法，其中，使用相同的所述成对主密钥协商会话密钥，包括：
    基于所述初始关联连接和所述多连接中的每一连接下的当前时间参数，在所述初始关联连接和所述多连接中的每一连接下生成相应的第三随机数；
    在所述初始关联连接和所述多连接中的每一连接下，根据所述成对主密钥以及相应的所述第三随机数，获得相应的第三会话密钥。
  11. 根据权利要求10所述的通信方法，其中，所述第三会话密钥彼此相同。
  12. 一种多连接下的通信设备，所述通信设备包括：
    发送模块，被配置为：发送用于建立多连接的第一请求消息帧，
    其中，所述第一请求消息帧至少包括第一标识，所述第一标识用于指示在建立的所述多连接中的每个连接下使用相同的成对主密钥协商会话密钥。
  13. 根据权利要求12所述的通信设备，其中，
    所述发送模块还被配置为：发送用于建立初始关联连接的第二请求消息帧，其中，所述第二请求消息帧至少包括与多连接通信有关的能力信息标识。
  14. 根据权利要求13所述的通信设备，所述通信设备还包括：处理模块，被配置为确定所述能力信息标识所对应的值，
    其中，所述能力信息标识对应于第一值表示支持多连接的同时发送和接收；
    其中，所述能力信息对应于第二值表示支持多连接的同时发送或接收；或者
    其中，所述能力信息标识对应于第三值表示支持一个连接的发送和接收。
  15. 根据权利要求13所述的通信设备，其中，所述通信设备还包括：
    接收模块，被配置为：接收关于所述第二请求消息帧的第二响应消息帧；
    处理模块，被配置为：响应于所述接收模块接收到所述第二响应消息帧，在所述初始关联连接下，使用所述成对主密钥协商会话密钥。
  16. 根据权利要求15所述的通信设备，其中，
    所述接收模块还被配置为：接收关于所述第一请求消息帧的第一响应消息帧；
    所述处理模块还被配置为：响应于所述接收模块在所述多连接中的将要进行通信的连接下接收到相应的第一响应消息帧，在所述将要进行通信的连接下，使用相同的所述成对主密钥协商会话密钥。
  17. 根据权利要求16所述的通信设备，所述处理模块还被配置为：
    基于所述初始关联连接下的当前时间参数，在所述初始关联连接下生成第一随机数；
    在所述初始关联连接下，根据所述成对主密钥和所述第一随机数，获得第一会话密钥。
  18. 根据权利要求17所述的通信设备，所述处理模块还被配置为：
    基于所述将要进行通信的连接的当前时间参数，在所述将要进行通信的连接下生成第二随机数；
    在所述将要进行通信的连接下，根据所述成对主密钥以及所述第二随机数，获得第二会话密钥。
  19. 根据权利要求18所述的通信设备，其中，响应于所述初始关联连 接下的当前时间参数以及所述将要进行通信的连接的当前时间参数不相同，所述第一会话密钥以及所述第二会话密钥彼此不相同。
  20. 根据权利要求13所述的通信设备，其中，所述通信设备还包括：接收模块，被配置为：接收关于所述第二请求消息帧的第二响应消息帧以及关于所述第一请求消息帧的第一响应消息帧；
    其中，所述处理模块还被配置为：响应于所述接收模块接收到所述第二响应消息帧，根据所述能力信息标识建立所述多连接；响应于所述接收模块在所述多连接中的每一连接下均接收到相应的第一响应消息帧，在所述初始关联连接以及所述多连接下，使用相同的所述成对主密钥协商会话密钥。
  21. 根据权利要求20所述的通信设备，其中，所述处理模块还被配置为：
    基于所述初始关联连接和所述多连接中的每一连接下的当前时间参数，在所述初始关联连接和所述多连接中的每一连接下生成相应的第三随机数；
    在所述初始关联连接和所述多连接中的每一连接下，根据所述成对主密钥以及相应的所述第三随机数，获得相应的第三会话密钥。
  22. 根据权利要求21所述的通信设备，其中，所述第三会话密钥彼此相同。
  23. 一种电子设备，包括存储器、处理器及存储在所述存储器上并在所述处理器上可运行的计算机程序，其中，所述处理器执行所述计算机程序时实现权利要求1-11任一项所述的方法。
  24. 一种计算机可读存储介质，其中，所述计算机可读存储介质上存储有计算机程序，该计算机程序被处理器执行时实现权利要求1-11任一 项所述的方法。
PCT/CN2020/104504 2020-07-24 2020-07-24 多连接下的通信方法和通信设备 Ceased WO2022016528A1 (zh)

Priority Applications (3)

Application Number Priority Date Filing Date Title
CN202080001433.2A CN114258703B (zh) 2020-07-24 2020-07-24 多连接下的通信方法和通信设备
US18/017,587 US20230308869A1 (en) 2020-07-24 2020-07-24 Method and device for communication on multiple links, and computer-readable storage medium
PCT/CN2020/104504 WO2022016528A1 (zh) 2020-07-24 2020-07-24 多连接下的通信方法和通信设备

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2020/104504 WO2022016528A1 (zh) 2020-07-24 2020-07-24 多连接下的通信方法和通信设备

Publications (1)

Publication Number Publication Date
WO2022016528A1 true WO2022016528A1 (zh) 2022-01-27

Family

ID=79729968

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2020/104504 Ceased WO2022016528A1 (zh) 2020-07-24 2020-07-24 多连接下的通信方法和通信设备

Country Status (3)

Country Link
US (1) US20230308869A1 (zh)
CN (1) CN114258703B (zh)
WO (1) WO2022016528A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114731679A (zh) * 2022-02-28 2022-07-08 北京小米移动软件有限公司 用于代理感知的通信方法和通信装置
US20240381076A1 (en) * 2023-05-14 2024-11-14 Cisco Technology, Inc. Systems and methods for security association enabling make-before-break-roaming (mbbr)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP7465145B2 (ja) * 2020-05-11 2024-04-10 キヤノン株式会社 通信装置、制御方法、およびプログラム

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2007005310A1 (en) * 2005-06-30 2007-01-11 Lucent Technologies Inc. Method for refreshing a pairwise master key
CN101459506A (zh) * 2007-12-14 2009-06-17 华为技术有限公司 密钥协商方法、用于密钥协商的系统、客户端及服务器
CN109417740A (zh) * 2016-04-29 2019-03-01 诺基亚技术有限公司 保持相同无线终端的切换期间的安全密钥使用

Family Cites Families (21)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101047493A (zh) * 2006-06-02 2007-10-03 华为技术有限公司 获取简单网络管理协议管理密钥的方法及系统
CN101388770B (zh) * 2008-10-20 2012-08-22 华为技术有限公司 获取动态主机配置协议密钥的方法、服务器及客户端装置
CN101807998A (zh) * 2009-02-13 2010-08-18 英飞凌科技股份有限公司 认证
US8385549B2 (en) * 2009-08-21 2013-02-26 Industrial Technology Research Institute Fast authentication between heterogeneous wireless networks
US9769205B2 (en) * 2013-04-06 2017-09-19 Citrix Systems, Inc. Systems and methods for SSL session management in a cluster system
US10090999B2 (en) * 2015-01-27 2018-10-02 Qualcomm Incorporated Group key announcement and distribution for a data link group
US10536541B2 (en) * 2015-12-18 2020-01-14 Bitly, Inc. Systems and methods for analyzing traffic across multiple media channels via encoded links
US9930713B2 (en) * 2016-08-19 2018-03-27 Intel IP Corporation Multi-band link aggregation setup frames
US10230654B2 (en) * 2016-12-28 2019-03-12 Intel IP Corporation Multiband aggregation data encapsulation
US20180184428A1 (en) * 2016-12-28 2018-06-28 Laurent Cariou Associating and securitizing distributed multi-band link aggregation devices
US20210345390A1 (en) * 2018-08-09 2021-11-04 Ntt Docomo, Inc. User terminal and radio communication method
SG10201807626YA (en) * 2018-09-05 2020-04-29 Panasonic Ip Corp America Communication apparatus and communication method for multi-band operation
WO2020085824A1 (ko) * 2018-10-24 2020-04-30 엘지전자 주식회사 복수의 링크를 지원하는 무선랜 시스템에서 복수의 링크를 제어하는 방법 및 장치
CN111526514B (zh) * 2019-02-03 2023-07-18 华为技术有限公司 多频段通信的方法和装置
CN116193632B (zh) * 2019-07-12 2023-11-28 华为技术有限公司 多链路通信方法和装置
US11765779B2 (en) * 2019-09-26 2023-09-19 Qualcomm Incorporated Security for multi-link operation in a wireless local area network (WLAN)
US11985720B2 (en) * 2019-11-22 2024-05-14 Qualcomm Incorporated Synchronizing multi-link communications in a wireless local area network (WLAN)
US11924911B2 (en) * 2020-05-22 2024-03-05 Mediatek Singapore Pte. Ltd. Extreme-high-throughput fast initial link setup support in multi-link operation in wireless communications
US12267766B2 (en) * 2020-11-20 2025-04-01 Apple Inc. MLD privacy and operation enhancements
US12452660B2 (en) * 2021-06-25 2025-10-21 Intel Corporation 4-way handshake optimization
US12382282B2 (en) * 2021-07-22 2025-08-05 Apple Inc. Group cast with retries (GCR) for multi-link operation (MLO)

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2007005310A1 (en) * 2005-06-30 2007-01-11 Lucent Technologies Inc. Method for refreshing a pairwise master key
CN101213784A (zh) * 2005-06-30 2008-07-02 朗迅科技公司 用于刷新成对的主密钥的方法
CN101459506A (zh) * 2007-12-14 2009-06-17 华为技术有限公司 密钥协商方法、用于密钥协商的系统、客户端及服务器
CN109417740A (zh) * 2016-04-29 2019-03-01 诺基亚技术有限公司 保持相同无线终端的切换期间的安全密钥使用

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
ERICSSON, DEUTSCHE TELEKOM, VODAFONE, AT&T, APPLE, QUALCOMM INCORPORATED, OPPO, KT, TURKCELL, VERIZON: "Introduction of DL RRC segmentation", 3GPP DRAFT; R2-2000933, 3RD GENERATION PARTNERSHIP PROJECT (3GPP), MOBILE COMPETENCE CENTRE ; 650, ROUTE DES LUCIOLES ; F-06921 SOPHIA-ANTIPOLIS CEDEX ; FRANCE, vol. RAN WG2, no. Athens, Greece ;20200224 - 20200228, 13 February 2020 (2020-02-13), Mobile Competence Centre ; 650, route des Lucioles ; F-06921 Sophia-Antipolis Cedex ; France , XP051848675 *

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114731679A (zh) * 2022-02-28 2022-07-08 北京小米移动软件有限公司 用于代理感知的通信方法和通信装置
CN114731679B (zh) * 2022-02-28 2023-08-18 北京小米移动软件有限公司 用于代理感知的通信方法和通信装置
US20240381076A1 (en) * 2023-05-14 2024-11-14 Cisco Technology, Inc. Systems and methods for security association enabling make-before-break-roaming (mbbr)

Also Published As

Publication number Publication date
CN114258703A (zh) 2022-03-29
US20230308869A1 (en) 2023-09-28
CN114258703B (zh) 2024-06-18

Similar Documents

Publication Publication Date Title
KR102036770B1 (ko) 무선 장치의 인증을 위한 방법 및 장치
CN108347417B (zh) 一种网络认证方法、用户设备、网络认证节点及系统
JP5780558B2 (ja) 無線マルチバンドのセキュリティ
CN105684344B (zh) 一种密钥配置方法和装置
CN108886685B (zh) 一种终端匹配方法、装置
CN103988480B (zh) 用于认证的系统和方法
WO2022016528A1 (zh) 多连接下的通信方法和通信设备
TWI871625B (zh) 直連鏈路定址方法及裝置
CN116963054B (zh) Wlan多链路tdls密钥导出
CN107801187A (zh) 加解密方法、装置及系统
Pérez et al. Architecture of security association establishment based on bootstrapping technologies for enabling secure IoT infrastructures
US20240244681A1 (en) Communication method, apparatus, and system
US20080069348A1 (en) Techniques for key derivation for secure communication in wireless mesh networks
WO2025015965A1 (zh) 一种多链路通信方法、通信节点及存储介质
CN115567923A (zh) 建立多连接的方法、装置、设备及存储介质
US20240430787A1 (en) Dynamic mesh service set identifier
WO2024026735A1 (zh) 认证方法、装置、设备及存储介质
WO2024040406A1 (zh) 一种通信方法、装置和系统
WO2024011645A1 (zh) 密钥生成方法、装置、设备及介质
WO2022237794A1 (zh) 一种报文传输方法及装置
WO2024114205A1 (zh) 密钥协商方法及装置
WO2024087072A1 (zh) 一种通信方法、装置及系统
WO2022021086A1 (zh) 多连接下的通信方法和通信设备

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 20945971

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 20945971

Country of ref document: EP

Kind code of ref document: A1