WO2014153908A1

WO2014153908A1 - Communication device and wireless communication method

Info

Publication number: WO2014153908A1
Application number: PCT/CN2013/080455
Authority: WO
Inventors: 董贤东
Original assignee: 东莞宇龙通信科技有限公司; 宇龙计算机通信科技(深圳)有限公司
Priority date: 2013-03-26
Filing date: 2013-07-31
Publication date: 2014-10-02
Also published as: CN103200191B; CN103200191A

Abstract

Provided is a communication device, comprising: a message generation module for generating a first message frame and a second message frame, and generating a third message frame according to a received second destination medium access control (MAC) address, the second message frame comprising at least a second source MAC address, and the third message frame comprising at least the second source MAC address and the second destination MAC address; a data interaction module for transmitting the first message frame at a first point of time, receiving, after the first point of time, the second destination MAC address and transmitting the second message frame, and transmitting the third message frame at a second point of time; a first source MAC address, a first destination MAC address, the second source MAC address, and the second destination MAC address are different from each other. Also provided is a wireless communication method. The present invention enables both communication parties to employ different MAC addresses at different points of time, thus improving communication security.

Description

Communication device and wireless communication method

The present invention relates to the field of communication technologies, and in particular to a communication device and a wireless communication method. Background technique

In the prior art, the communication device always uses the same MAC (Medium Access Control) address, which makes it easy to be tracked and attacked. Specifically, for example, the STA uses the MAC address from the initial connection to the network to the key negotiation, and the MAC address is transparent to the third party before the key negotiation is completed, that is, the 4 is easily used by the third party. Used to track STAs to attack STAs.

Therefore, there is a need for a new technical solution that enables both parties to communicate with different media access control addresses at different times, thereby improving communication security. Summary of the invention

The present invention is based on the above problems, and proposes a new technical solution, which enables the communication parties to use different media access control addresses at different times, thereby improving communication security.

In view of this, the present invention provides a communication apparatus, including: a message generation module, generating a first message frame, the first message frame including at least a first source medium access control (MAC) address and a first destination medium access control a (MAC) address, generating a second message frame, the second message frame including at least a second source medium access control (MAC) address, and a second destination medium access control (MAC) address generation according to the data interaction module a third message frame, the third message frame includes at least a second source medium access control (MAC) address and the second destination medium access control (MAC) address; the data interaction module sends the first time point a first message frame, transmitting the second message frame after the first time point, and receiving the Responding to the message frame of the second message frame, and sending the third message frame at a second time point, where the response message frame of the second message frame includes at least the second destination medium access control (MAC) address; The first source medium access control address, the first destination medium access control address, the second source medium access control address, and the second destination medium access control address are different from each other.

In this technical solution, the communication device may be a mobile phone or a tablet, or may be a device such as a router. The message generation module may be a chip module for data processing in the communication device, and the data interaction module is equivalent to a signal transceiver device and an antenna. For example, for two communication devices that need to establish a network connection, the specific ratio is: N⁄4 port is NAN (neighbor awareness networking), when two communication devices initially establish a network, respectively, MAC 1A is adopted. Address and MAC IB address; but since the MAC 1A address and the MAC IB address are transparent to the third party during the network access process, the MAC address 4 is easily obtained by the third party to attack the entire network or for a single communication. The device attacks. Therefore, after the network is successfully established, the two communication devices can update the MAC address by negotiation. For example, the first communication device replaces the MAC 1A address with the MAC 2A address, and the second communication device replaces the MAC IB address. For the MAC 2B address, for both parties to the communication, the updated MAC address can be encapsulated in the second message frame and its response message frame to notify the other party, and the updated MAC address is used for subsequent communication, preventing third party utilization. The MAC address is tracked and attacked, thereby effectively improving the security of the communication.

In the foregoing technical solution, the first message frame, the second message frame, or the third message frame is a management message frame, an action message frame, a control message frame, or a data frame, where The type of a message frame, the second message frame, or the third message frame is the same or different. In this technical solution, when the first message frame or the second message frame is a management message frame, the joint value of the frame type of the frame control field and the subtype of the subtype is used to identify the type of the frame, for example, "001000" can be used to identify the frequency band. The switching message frame is a management message frame; when the first message frame or the second message frame is an action message frame or a control message frame, the joint value of the frame type of the frame control field and the subtype of the subtype is used to identify the type of the frame, for example, "010110" to identify the band switching message frame as an action message frame or a control message frame. Specifically, in this solution, since the first message frame occurs in the process of initially establishing the network, generally, the first message frame is a management message. Frame or Is the action message frame, the second message frame and the third message frame occur after the initial network establishment, and the subsequent session key is already known to both parties of the communication, then the second message frame and the third message frame may be managed. Message frame, action message frame, or data frame.

In the above technical solution, preferably, when the first message frame, the second message frame, or the third message frame is a management message frame or an action message frame, the first message frame, the first The second message frame or the third message frame is specifically: a probe response frame, an association request frame, an association response frame, a reassociation request frame, a reassociation response frame, an authentication frame, a re-authentication frame, a device discovery message frame, or a service discovery message. frame. In this technical solution, the mobile phone or the tablet or the like can perform message exchange with other communication devices by transmitting a message frame of a type such as an association request frame or a re-association request frame to switch the MAC address; for the router or the like, the probe response frame can be transmitted, and the association is The message frame of the response frame, the reassociation response frame, and the like exchanges messages with other communication devices, and encapsulates the updated MAC address in the message frame to notify the other party, for example, in the service discovery message frame, the service discovery message may be The domain of the frame body of the frame encapsulates its updated MAC address to notify the other party.

In the above technical solution, preferably, the method further includes: a processing module, and the receiver of the first message frame negotiates the session key by using at least the first source medium access control address and the first destination medium access control address And encrypting, by the session key, the second source medium access control address in the second message frame or the third message frame. In the technical solution, the communication parties establish a network connection and the two parties have negotiated a session key, and the second source medium access control (MAC) address is encrypted by the session key and encapsulated in the second message frame or the third message. a frame body portion of the frame, wherein the source address and the destination address of the second message frame are a first source medium access control address and a first destination medium access control address, respectively.

In the above technical solution, preferably, the first message frame further includes a first function identifier bit, where the first function identifier bit indicates that the communication device supports a multi-media access control address operation function; and the data interaction The module further receives a response message frame of the first message frame, where the response message frame includes a second function identifier bit, and the second function identifier bit indicates that the sender of the response message frame supports a multi-media access control address operation. Features. In the technical solution, by setting the function identification bit, when the communication device listens to the message frame sent by other communication devices under the same network, it can learn that it supports the multi-media access control address operation function, and the specific communication The two sides of the message frame of the response frame of the first message frame and the first message frame may carry the capability identification information element or the bit in the MAC frame header to indicate that the two sides support the operation function of the multiple MAC address, for example, A message frame is a service discovery message frame, and then multiple MAC address capability identification information elements or locations in other order domains may be encapsulated in the frame order domain 1 of the service discovery message frame. Of course, the reservation in the MAC frame header may also be used. Bit to indicate that it supports multiple MAC address manipulation functions. Of course, the first message frame is not limited to the service discovery message frame, and may be other management message frames or action message frames, and details are not described herein again.

The present invention also provides a wireless communication method, including: generating a first message frame, and transmitting the first message frame at a first time point, where the first message frame includes at least a first source medium access control (MAC) An address and a first destination medium access control (MAC) address; after the first time point, the method further includes: generating a second message frame, and sending the second message frame to a receiver of the first message frame, where The second message frame includes at least a second source medium access control address, and receives a response message frame of the second message frame from a receiver of the first message frame, where the response message frame of the second message frame includes at least a second destination medium access control address; generating a third message frame, and sending a third message frame to the receiver of the first message frame at a second time point, where the third message frame includes at least the second source medium access a control (MAC) address and the second destination medium access control (MAC) address; wherein the first source medium access control address, the first destination medium access control location The address, the second source medium access control address, and the second destination medium access control address are different from each other.

In this technical solution, the communication device may be a mobile phone or a tablet, or may be a device such as a router. The message generation module may be a chip module for data processing in the communication device, and the data interaction module is equivalent to a signal transceiver device and an antenna. For example, for two communication devices that need to establish a network connection, the specific ratio is: N⁄4 port is NAN (neighbor awareness networking), when two communication devices initially establish a network, respectively, MAC 1A is adopted. Address and MAC IB address; but since the MAC 1A address and the MAC IB address are transparent to the third party during the network access process, the MAC address 4 is easily obtained by the third party to attack the entire network or for a single communication. The device performs an attack. Therefore, after the network is successfully established, the two communication devices can update the MAC address by negotiation, for example, the first communication device switches the MAC 1A address to the MAC 2A address, and the second communication device will The MAC IB address is replaced with a MAC 2B address. For both parties to the communication, the updated MAC address can be encapsulated in the second message frame and its response message frame to notify the other party, and the updated MAC address is used for subsequent communication, preventing The third party uses the MAC address for tracking and attack, thereby effectively improving the security of the communication.

In the foregoing technical solution, the first message frame, the second message frame, and the third message frame are a management message frame, an action message frame, a control message frame, or a data frame, where The types of a message frame, the second message frame, and the third message frame are the same or different. In this technical solution, when the first message frame or the second message frame is a management message frame, the joint value of the frame type of the frame control field and the subtype of the subtype is used to identify the type of the frame, for example, "001000" can be used to identify the frequency band. The switching message frame is a management message frame; when the first message frame or the second message frame is an action message frame or a control message frame, the joint value of the frame type of the frame control field and the subtype of the subtype is used to identify the type of the frame, for example, "010110" to identify the band switching message frame as an action message frame or a control message frame. Specifically, in this solution, since the first message frame occurs in the process of initially establishing the network, generally, the first message frame is a management message. The frame or action message frame, the second message frame and the third message frame occur after the initial network establishment, and the subsequent session key is already known to both parties of the communication, then the second message frame and the third message frame may be Is a management message frame, an action message frame, or a data frame.

In the above technical solution, preferably, the method further includes: receiving the first message frame to Reusing the first source medium access control address and the first destination medium access control address to negotiate a session key; and encrypting the second message frame or the third message frame with the session key The second source medium access control address. In the technical solution, the communication parties establish a network connection and the two parties have negotiated a session key, and the second source medium access control (MAC) address is encrypted by the session key and encapsulated in the second message frame or the third message. a frame body portion of the frame, wherein the source address and the destination address of the second message frame are a first source medium access control address and a first destination medium access control address, respectively.

In the foregoing technical solution, the first message frame further includes a first function identifier bit, where the first function identifier bit indicates that the sender of the first message frame supports a multi-media access control address operation function; And the wireless communication method further includes: receiving a response message frame of the first message frame, the response message frame includes a second function identifier bit, and the second function identifier bit indicates a sender of the response message frame Support multi-media access control address operation function. In the technical solution, by setting the function identification bit, when the communication device listens to the message frame sent by other communication devices under the same network, it can learn that it supports the multi-media access control address operation function, and the specific communication parties can The response of the first message frame and the first message frame is cancelled, and the frame body part of the frame carries the capability identification information element or a bit in the MAC frame header to indicate that the two sides support the operation function of the multiple MAC address, such as the first message frame. To discover the message frame for the service, the MAC address capability identification information element or the location of the other order domain may be encapsulated in the frame body domain 1 of the service discovery message frame, and may also be represented by a reserved bit in the MAC frame header. It supports multiple MAC address manipulation functions. Of course, the first message frame is not limited to the service discovery message frame, and may be other management message frames or action message frames, which are not described here.

The present invention further provides a communication device, including: a message generating module, configured to generate a response message frame of the second message frame according to the second message frame received by the data interaction module, where the second message frame includes at least The second source medium access control address, the response message frame of the second message frame includes at least a second destination medium access control address, and the data interaction module receives the first message frame at the first time point, the first message The frame includes at least a first source medium access control (MAC) address and a first destination medium access control (MAC) address, after receiving the second message frame and transmitting a response of the second message frame after the first time point a frame, and receiving a third message frame at a second time point, the third message frame including at least the second source medium access control a (MAC) address and the second destination medium access control (MAC) address; wherein the first source medium access control address, the first destination medium access control address, the second source medium access control address, and The second destination medium access control addresses are different from each other.

In the foregoing technical solution, the first message frame, the second message frame, or the third message frame is a management message frame, an action message frame, a control message frame, or a data frame, where The type of a message frame, the second message frame, or the third message frame is the same or different. In this technical solution, when the first message frame or the second message frame is a management message frame, the joint type of the frame control domain type Type and the subtype Subtype is used to identify the type of the frame, for example,

"001000" is used to identify the band switching message frame as a management message frame; when the first message frame or the second message frame is an action message frame or a control message frame, the joint value of the frame control field type Type and the subtype Subtype is used to identify The type of the frame, for example, "010110" can be used to identify the band switching message frame as an action message frame or a control message frame. Specifically, in this solution, since the first message frame occurs in the process of initially establishing the network, generally A message frame is a management message frame or an action message frame, and the second message frame and the third message frame occur after the initial network establishment, and the subsequent session key is already known to both parties of the communication, then the second message frame And third A message frame can be a management message frame, an action message frame, or a data frame.

In the above technical solution, preferably, the method further includes: a processing module, and the sender of the first message frame negotiates the session key by using at least the first source medium access control address and the first destination medium access control address And encrypting, by the session key, the second destination medium access control address in the response message frame of the second message frame. In the technical solution, the communication parties establish a network connection and the two parties have negotiated a session key, and the second destination medium access control (MAC) address is encrypted by the session key and encapsulated in the response message frame of the second message frame. The frame body part, wherein the source address and the destination address of the second message frame response message frame are a first source medium access control address and a first destination medium access control address, respectively.

In the foregoing technical solution, the first message frame further includes a first function identifier bit, where the first function identifier bit indicates that the sender of the first message frame supports a multi-media access control address operation function; And the second message identifier bit is further included in the response message frame of the first message frame, where the second function flag indicates that the communication device supports the multi-media access control address operation function. In the technical solution, by setting the function identification bit, when the communication device listens to the message frame sent by other communication devices under the same network, it can learn that it supports the multi-media access control address operation function, and the specific communication parties can The frame body portion of the response frame of the first message frame and the first message frame carries the capability identification information element or a bit in the MAC frame header to indicate that the two sides support the operation function of the multiple MAC address, for example, the first message frame is Service Now the message frame, then the MAC address capability identification information element or the location of the other order domain may be encapsulated in the frame body domain 1 of the service discovery message frame. Of course, the reserved bits in the MAC frame header may also be used to indicate its support. Multiple MAC address manipulation features. Of course, the first message frame is not limited to the service discovery message frame, and may be other management message frames or action message frames, and details are not described herein again.

The present invention also provides a wireless communication method, comprising: receiving a first message frame at a first time point, the first message frame including at least a first source medium access control (MAC) address and a first destination medium access control ( MAC address; after the first time point, further comprising: receiving a second message frame from a sender of the first message frame, and sending the second message frame to a sender of the first message frame a response message frame, wherein the second message frame includes at least the second source medium access control (MAC) address, and the response message frame of the second message frame includes at least a second destination medium access control address; Receiving, by the second time point, a third message frame, where the third message frame includes at least the second source medium access control (MAC) address and the second destination medium access control (MAC) address; wherein, the first The source medium access control address, the first destination medium access control address, the second source medium access control address, and the second destination medium access control address are not mutually The same.

In this technical solution, the communication device may be a mobile phone or a tablet, or may be a device such as a router. The message generation module may be a chip module for data processing in the communication device, and the data interaction module is equivalent to a signal transceiver device and an antenna. For example, for two communication devices that need to establish a network connection, the specific ratio is: N⁄4 port is NAN (neighbor awareness networking), when two communication devices initially establish a network, respectively, MAC 1A is adopted. Address and MAC IB address; but since the MAC 1A address and the MAC IB address are transparent to the third party during the network access process, the MAC address 4 is easily obtained by the third party to attack the entire network or for a single communication. The device attacks. Therefore, after the network is successfully established, the two communication devices can update the MAC address by negotiation. For example, the first communication device replaces the MAC 1A address with the MAC 2A address, and the second communication device replaces the MAC IB address. For the MAC 2B address, for both parties to the communication, the updated MAC address can be encapsulated in the second message frame and its response message frame to notify the other party, and the updated MAC address is used for subsequent communication, preventing third party utilization. MAC address tracking and Attack, which effectively improves the security of communication.

In the foregoing technical solution, the first message frame, the second message frame, or the third message frame is a management message frame, an action message frame, a control message frame, or a data frame, where The type of a message frame, the second message frame, or the third message frame is the same or different. In this technical solution, when the first message frame or the second message frame is a management message frame, the joint value of the frame type of the frame control field and the subtype of the subtype is used to identify the type of the frame, for example, "001000" can be used to identify the frequency band. The switching message frame is a management message frame; when the first message frame or the second message frame is an action message frame or a control message frame, the joint value of the frame type of the frame control field and the subtype of the subtype is used to identify the type of the frame, for example, "010110" to identify the band switching message frame as an action message frame or a control message frame. Specifically, in this solution, since the first message frame occurs in the process of initially establishing the network, generally, the first message frame is a management message. The frame or action message frame, the second message frame and the third message frame occur after the initial network establishment, and the subsequent session key is already known to both parties of the communication, then the second message frame and the third message frame may be Is a management message frame, an action message frame, or a data frame.

In the above technical solution, preferably, the method further includes: negotiating a session key with the first source medium access control address and the first destination medium access control address with the sender of the first message frame; The session key encrypts the second destination medium access control address in the response message frame of the second message frame. In this technical solution, the two parties in the communication are establishing a network. The network connection and the parties have negotiated a session key, the second destination medium access control (MAC) address is encrypted with the session key and encapsulated in the frame body portion of the response message frame of the second message frame, wherein the second message frame The source address and the destination address of the response message frame are the first source medium access control address and the first destination medium access control address, respectively.

In the foregoing technical solution, the first message frame further includes a first function identifier bit, where the first function identifier bit indicates that the sender of the first message frame supports a multi-media access control address operation function; And the second message identifier bit is included in the response message frame of the first message frame, where the second function identifier bit indicates that the sender of the response message frame supports the multi-media access control address operation function. In the technical solution, by setting the function identification bit, when the communication device listens to the message frame sent by other communication devices under the same network, it can learn that it supports the multi-media access control address operation function, and the specific communication parties can The frame body portion of the response frame of the first message frame and the first message frame carries the capability identification information element or a bit in the MAC frame header to indicate that the two sides support the operation function of the multiple MAC address, for example, the first message frame is The service discovery message frame, then the MAC address capability identification information element or the location of other order domains may be encapsulated in the frame body domain 1 of the service discovery message frame. Of course, the reserved bits in the MAC frame header may also be used to represent the message frame. Support for multiple MAC address operation functions. Of course, the first message frame is not limited to the service discovery message frame, and may be other management message frames or action message frames, which are not described here.

Through the above technical solution, the communication parties can use different media access control addresses at different times, thereby improving communication security. DRAWINGS

Figure 1 shows a block diagram of a communication device in accordance with one embodiment of the present invention;

2 shows a flow chart of a wireless communication method in accordance with one embodiment of the present invention; FIG. 3 shows a block diagram of a communication device in accordance with another embodiment of the present invention;

4 is a flow chart showing a wireless communication method according to another embodiment of the present invention. FIG. 5 is a flowchart showing an embodiment of the switching medium access control address according to an embodiment of the present invention. Schematic diagram of the M1 signaling in the medium;

FIG. 7 is a schematic structural diagram of M2 signaling in the embodiment shown in FIG. 5. detailed description

The above described objects, features and advantages of the present invention will be more fully understood from the following detailed description. It should be noted that, in the case of no conflict, the features in the embodiments and the embodiments of the present application may be combined with each other.

In the following description, numerous specific details are set forth in order to provide a thorough understanding of the present invention, but the invention may be practiced otherwise than as described herein. Limitations of the embodiments.

Figure 1 shows a block diagram of a communication device in accordance with one embodiment of the present invention.

As shown in FIG. 1, a communication device 100 according to an embodiment of the present invention includes: a message generating module 102, generating a first message frame, where the first message frame includes at least a first source medium access control (MAC) address and a first destination medium access control (MAC) address, generating a second message frame, the second message frame including at least a second source medium access control (MAC) address, and a second destination medium access according to the data interaction module 104 The control (MAC) address generates a third message frame, the third message frame including at least a second source medium access control (MAC) address and the second destination medium access control (MAC) address; the data interaction module 104, Transmitting the first message frame at a first time point, transmitting the second message frame and receiving a response message frame of the second message frame after the first time point, and sending the message frame at a second time point a third message frame, the response message frame of the second message frame includes at least the second destination medium access control (MAC) address; wherein, the first Media Access Control address, a media access control address of the first object, the second source media access control address and said second media access control address of the object are different.

In this technical solution, the communication device 100 may be a mobile phone or a tablet, or may be a device such as a router, the message generation module 102 may be a chip module for data processing in the communication device, and the data interaction module 104 is equivalent to a signal transceiver device and Antennas, etc. For example, for two communication devices that need to establish a network connection, for example, the network is a neighboring awareness network (NAN), when the two communication devices initially establish a network, the MAC 1A address and the MAC IB are respectively adopted. Address; however, because during the network access process, the MAC 1A address and the MAC IB address are transparent to the third party, and the MAC address is easily obtained by a third party to attack the entire network or attack a single communication device. Therefore, after the network is successfully established, the two communication devices can update the MAC address by negotiation, for example, the first communication device replaces the MAC 1A address with the MAC 2A address, and the second communication device replaces the MAC IB address with the MAC 2B address. For both sides of the communication, the updated MAC address can be encapsulated in the second message frame and its response message frame to notify the other party, and the updated MAC address is used for subsequent communication, preventing the third party from using the MAC address for tracking. And attacks, thereby effectively improving the security of communication.

In the above technical solution, preferably, when the first message frame, the second message frame, or the third message frame is a management message frame or an action message frame, the first message frame, the first The second message frame or the third message frame is specifically: a probe response frame, an association request frame, an association response frame, a reassociation request frame, a reassociation response frame, an authentication frame, a re-authentication frame, a device discovery message frame, or a service discovery message. frame. In this technical solution, the mobile phone or the tablet or the like can perform message exchange with other communication devices by transmitting a message frame of a type such as an association request frame or a re-association request frame to switch the MAC address; for the router or the like, the probe response frame can be transmitted, and the association is The message frame of the response frame, the reassociation response frame, and the like exchanges messages with other communication devices, and encapsulates the updated MAC address in the message frame to notify the other party, for example, in the service discovery message frame, the service discovery message may be Encapsulating the updated content of a certain order domain of the frame body portion of the frame The MAC address is used to notify the other party.

In the above technical solution, preferably, the method further includes: the processing module 106, and the receiver of the first message frame negotiates the session secret with the first source medium access control address and the first destination medium access control address And encrypting, by the session key, the second source medium access control address in the second message frame or the third message frame. In the technical solution, the communication parties establish a network connection and the two parties have negotiated a session key, and the second source medium access control (MAC) address is encrypted by the session key and encapsulated in the second message frame or the third message. a frame body portion of the frame, wherein the second message frame source address and the destination address are a first source medium access control address and a first destination medium access control address, respectively.

In the above technical solution, preferably, the first message frame further includes a first function identifier bit, where the first function identifier bit indicates that the communication device 100 supports a multi-media access control address operation function; and the data The interaction module further receives a response message frame of the first message frame, where the response message frame includes a second function identifier bit, where the second function identifier bit indicates that the sender of the response message frame supports the multi-media access control address Operational function. In the technical solution, by setting the function identification bit, when the communication device listens to the message frame sent by other communication devices under the same network, it can learn that it supports the multi-media access control address operation function, and the specific communication parties can The first message frame and the first frame, the response of the frame is cancelled, and the frame body part of the frame carries the capability identification information element or the bit in the MAC frame header to indicate the operation function of both sides supporting multiple MAC addresses, such as the first message. If the frame is a service discovery message frame, then the multiple MAC address capability identification information element or the location of the other order domain may be encapsulated in the frame body domain 1 of the service discovery message frame. Of course, the reserved bits in the MAC frame header may also be used. Indicates that it supports multiple MAC address manipulation functions. Of course, the first message frame is not limited to the service discovery message frame, and may be other management message frames or action message frames, and details are not described herein again.

2 shows a flow chart of a method of wireless communication in accordance with one embodiment of the present invention.

As shown in FIG. 2, the wireless communication method according to an embodiment of the present invention includes: Step 202: Generate a first message frame, and send the first message frame at a first time point, where the first message frame is at least The first source medium access control (MAC) address and the first destination medium access control (MAC) address are included; after the first time point, the method further includes: Step 204: Generate a second message frame, to the first message Receiving, by the receiver of the frame, the second message frame, the second The information frame includes at least a second source medium access control address, and receives a response message frame of the second message frame from a receiver of the first message frame, where the response message frame of the second message frame includes at least a second destination a medium access control address; Step 206: Generate a third message frame, and send a third message frame to the receiver of the first message frame at a second time point, where the third message frame includes at least the second source medium access Control (MAC) address and the second destination medium access control

(MAC) address; wherein the first source medium access control address, the first destination medium access control address, the second source medium access control address, and the second destination medium access control address are different from each other.

In the foregoing technical solution, the first message frame, the second message frame, and the third message frame are a management message frame, an action message frame, a control message frame, or a data frame, where The types of a message frame, the second message frame, and the third message frame are the same or different. In this technical solution, when the first message frame or the second message frame is a management message frame, the joint type of the frame control domain type Type and the subtype Subtype is used to identify the type of the frame, for example,

"001000" to identify the band switching message frame as a management message frame; when the first message frame or the second message frame is an action message frame or a control message frame, the type and subtype of the frame control field The joint value of Subtype is used to identify the type of the frame. For example, "010110" can be used to identify the band switch message frame as an action message frame or a control message frame. Specifically, in this solution, since the first message frame occurs in the initial establishment of the network. In the process, generally, the first message frame is a management message frame or an action message frame, and the second message frame and the third message frame occur after the initial network is established, and the subsequent session secrets are already known to both parties of the communication. Key, then the second message frame and the third message frame may be management message frames, action message frames or data frames.

In the above technical solution, preferably, the method further includes: negotiating a session key with the first source medium access control address and the first destination medium access control address with the receiver of the first message frame; The session key encrypts the second source medium access control address in the second message frame or the third message frame. In the technical solution, the communication parties establish a network connection and the two parties have negotiated a session key, and the second destination medium access control (MAC) address is encrypted by the session key and encapsulated in the second message frame or the third message. a frame body portion of the frame, wherein the second message frame source address and the destination address are a first source medium access control address and a first destination medium access control address, respectively.

In the foregoing technical solution, the first message frame further includes a first function identifier bit, where the first function identifier bit indicates that the sender of the first message frame supports a multi-media access control address operation function; And the wireless communication method further includes: receiving a response message frame of the first message frame, where the response message frame includes a second function identifier bit, and the second function identifier The bit indicates that the sender of the response message frame supports the multi-media access control address operation function. In the technical solution, by setting the function identification bit, when the communication device listens to the message frame sent by other communication devices under the same network, it can learn that it supports the multi-media access control address operation function, and the specific communication parties can The response of the first message frame and the first message frame is cancelled, and the frame body part of the frame carries the capability identification information element or a bit in the MAC frame header to indicate that the two sides support the operation function of the multiple MAC address, such as the first message frame. To discover the message frame for the service, the MAC address capability identification information element or the location of the other order domain may be encapsulated in the frame body domain 1 of the service discovery message frame, and may also be represented by a reserved bit in the MAC frame header. It supports multiple MAC address manipulation functions. Of course, the first message frame is not limited to the service discovery message frame, and may be other management message frames or action message frames, and details are not described herein again.

FIG. 3 shows a block diagram of a communication device in accordance with another embodiment of the present invention.

As shown in FIG. 3, the communication device 300 according to another embodiment of the present invention includes: a message generating module 302, configured to generate a response message frame of the second message frame according to a second message frame received by the data interaction module, The second message frame includes at least a second source medium access control address, and the response message frame of the second message frame includes at least a second destination medium access control address. The data interaction module 304 is at the first time point. Receiving a first message frame, the first message frame including at least a first source medium access control (MAC) address and a first destination medium access control (MAC) address, and receiving the second message after the first time point And transmitting a response frame of the second message frame, and receiving a third message frame at a second time point, the third message frame including at least the second source medium access control (MAC) address and the second a destination medium access control (MAC) address, wherein the first source medium access control address, the first destination medium access control address, and the second Media access control address and the second destination media access control address different from each other.

In this technical solution, the communication device 300 may be a mobile phone or a tablet, or may be a device such as a router, the message generation module 302 may be a chip module for data processing in the communication device 300, and the data interaction module 304 is equivalent to a signal transceiver device. And antennas, etc. For example, for two communication devices that need to establish a network connection, for example, the network is a neighboring awareness network (NAN), when the two communication devices initially establish a network, the MAC 1A address and the MAC IB are respectively adopted. Address; but because of the network In the process, the MAC 1A address and the MAC IB address are transparent to the third party, and the MAC address is easily obtained by the third party to attack the entire network or attack a single communication device. Therefore, after the network is successfully established The two communication devices can update the MAC address by negotiation, for example, the first communication device replaces the MAC 1A address with the MAC 2A address, and the second communication device replaces the MAC IB address with the MAC 2B address, for both parties to the communication. The updated MAC address can be encapsulated in the second message frame and its response message frame to notify the other party, and the updated MAC address is used for subsequent communication, thereby preventing third parties from using the MAC address for tracking and attack, thereby effectively improving The security of communication.

In the above technical solution, preferably, when the first message frame, the second message frame, or the third message frame is a management message frame or an action message frame, the first message frame, the first The second message frame or the third message frame is specifically: a probe response frame, an association request frame, an association response frame, a reassociation request frame, a reassociation response frame, an authentication frame, a re-authentication frame, a device discovery message frame, or a service discovery message. frame. In this technical solution, the mobile phone or the tablet or the like can perform message exchange with other communication devices by transmitting a message frame of a type such as an association request frame or a re-association request frame to switch the MAC address; for the router or the like, the probe response frame can be transmitted, and the association is Message frames of a response frame, reassociation response frame, etc., interact with other communication devices, and in these messages The frame encapsulates its updated MAC address and notifies the other party. For example, in the service discovery message frame, the MAC address updated by itself may be encapsulated in an order domain of the frame body portion of the service discovery message frame to notify the other party.

In the above technical solution, preferably, the method further includes: a processing module 306, and the sender of the first message frame negotiates the session secret with the first source medium access control address and the first destination medium access control address And encrypting, by the session key, the second destination medium access control address in the response message frame of the second message frame. In the technical solution, the communication parties establish a network connection and the two parties have negotiated a session key, and the second destination medium access control (MAC) address is encrypted by the session key and encapsulated in the response message frame of the second message frame. The frame body portion, wherein the second message frame is responsive, and the source address and the destination address of the frame are the first source medium access control address and the first destination medium access control address, respectively.

In the foregoing technical solution, the first message frame further includes a first function identifier bit, where the first function identifier bit indicates that the sender of the first message frame supports a multi-media access control address operation function; And the second message identifier bit is further included in the response message frame of the first message frame, where the second function identifier bit indicates that the communication device 300 supports the multi-media access control address operation function. In the technical solution, by setting the function identification bit, when the communication device listens to the message frame sent by other communication devices under the same network, it can learn that it supports the multi-media access control address operation function, and the specific communication parties can The frame body portion of the response frame of the first message frame and the first message frame carries the capability identification information element or a bit in the MAC frame header to indicate that the two sides support the operation function of the multiple MAC address, for example, the first message frame is The service discovery message frame, then the MAC address capability identification information element or the location of other order domains may be encapsulated in the frame body domain 1 of the service discovery message frame. Of course, the reserved bits in the MAC frame header may also be used to represent the message frame. Support for multiple MAC address operation functions. Of course, the first message frame is not limited to the service discovery message frame, and may be other management message frames or action message frames, which are not described here.

4 shows a flow chart of a method of wireless communication in accordance with another embodiment of the present invention. As shown in FIG. 4, a wireless communication method according to another embodiment of the present invention includes: Step 402: Receive a first message frame at a first time point, where the first message frame includes at least a first source medium access control ( MAC) address and first destination medium access control (MAC) address; After the first time point, the method further includes: Step 404: Receive a second message frame from a sender of the first message frame, and send a response of the second message frame to a sender of the first message frame a message frame, where the second message frame includes at least the second source medium access control

The (MAC) address, and the response message frame of the second message frame includes at least a second destination medium access control address; Step 406: Receive a third message frame at a second time point, where the third message frame includes at least the a second source medium access control (MAC) address and the second destination medium access control (MAC) address; wherein the first source medium access control address, the first destination medium access control address, the second The source medium access control address and the second destination medium access control address are different from each other.

"001000" to identify the band switching message frame as a management message frame; when the first message frame or the second message When the frame is an action message frame or a control message frame, the joint value of the frame type of the frame control field and the subtype of the subtype is used to identify the type of the frame. For example, "010110" can be used to identify the band switch message frame as an action message frame or a control message. a frame, specifically in the present solution, because the first message frame occurs in the process of initially establishing the network, generally the first message frame is a management message frame or an action message frame, a second message frame, and a third message frame. After the initial network establishment, the subsequent session key is already known to both parties of the communication, and the second message frame and the third message frame may be management message frames, action message frames or data frames.

In the above technical solution, preferably, the method further includes: negotiating a session key with the first source medium access control address and the first destination medium access control address with the sender of the first message frame; The session key encrypts the second destination medium access control address in the response message frame of the second message frame. In the technical solution, the communication parties establish a network connection and the two parties have negotiated a session key, and the second destination medium access control (MAC) address is encrypted by the session key and encapsulated in the response message frame of the second message frame. The frame body part, wherein the source address and the destination address of the second message frame response message frame are a first source medium access control address and a first destination medium access control address, respectively.

In the foregoing technical solution, the first message frame further includes a first function identifier bit, where the first function identifier bit indicates that the sender of the first message frame supports a multi-media access control address operation function; And the second message identifier is included in the response message frame of the first message frame. Bit, the second function identifier bit indicates that the sender of the response message frame supports the multi-media access control address operation function. In the technical solution, by setting the function identification bit, when the communication device listens to the message frame sent by other communication devices under the same network, it can learn that it supports the multi-media access control address operation function, and the specific communication parties can The frame body portion of the response frame of the first message frame and the first message frame carries the capability identification information element or a bit in the MAC frame header to indicate that the two sides support the operation function of the multiple MAC address, for example, the first message frame is The service discovery message frame, then the MAC address capability identification information element or the location of other order domains may be encapsulated in the frame body domain 1 of the service discovery message frame. Of course, the reserved bits in the MAC frame header may also be used to represent the message frame. Support for multiple MAC address operation functions. Of course, the first message frame is not limited to the service discovery message frame, and may be other management message frames or action message frames, and details are not described herein again.

As can be seen from the above embodiments, the main idea of the present invention is: Multiple communication devices communicate using different MAC addresses at different times. Specifically, for example, two communication devices perform interaction through an initial MAC address before network establishment is completed; after the network establishment is completed, respectively switch to another new MAC address different from the initial MAC address, thereby using the new MAC address to perform mutual Communication between services to prevent third parties from tracking and attacking through the initial MAC address.

The above technical solution of the present invention is further specifically described in detail with reference to FIG. 5 to FIG. 7 in the process of establishing a NAN network by STA A and STA B as an example.

FIG. 5 shows a specific flow diagram of switching media access control addresses in accordance with an embodiment of the present invention.

As shown in FIG. 5, a specific process of switching media access control addresses according to an embodiment of the present invention includes:

Step 502: STA A and STA B establish a network connection by using the first MAC address. Specifically, for example, if STA A adopts a MAC 1A address and STA B adopts a MAC IB address, STA A and STA B use MAC 1A and MAC IB to perform configuration signaling interaction of network establishment.

Of course, although not shown in FIG. 5, those skilled in the art should understand that STA A and STA B should also inform each other: The function of supporting multiple MAC addresses by itself. With For example, the information indicating the function of supporting multiple MAC addresses may be encapsulated in the configuration signaling of the network establishment in the form of IE, and the signaling includes DLS (Direct Link Setup) request signaling and DLS response. Signaling or service discovery signaling.

Further, after the STA A and the STA B complete the connection establishment of the NAN network, the key agreement negotiation signaling is also performed through the MAC 1A and the MAC IB address, thereby negotiating the session signaling between the STA A and the STA B.

Step 504: After STA A and STA B know that both parties support multiple MAC address functions and have established a NAN network, STA A and STA B respectively generate a second MAC address, for example, the second MAC address corresponding to STA A is a MAC 2A address. The second MAC address corresponding to STA B is a MAC 2B address, and MAC 1A, MAC 1B, MAC 2A, and MAC 2B should be different from each other to ensure that STA A and STA B cannot always pass the MAC 1A by the third party. MAC IB tracking and attack.

Step 506, assuming that the STA A first informs the STA B of the information of the second MAC address (ie, the MAC 2A address), the M1 signaling is generated and sent to the STA B. Of course, it is obvious that STA B can first inform STA A of its second MAC address (ie, MAC 2B address).

Specifically, FIG. 6 shows a specific form of M1 signaling, including: FC domain, MAC 1B information, MAC 1 A information, CCMP Header domain, MAC 2A information, and FCS domain.

The MAC IB is the first MAC address used by STA B and belongs to the destination address, and MAC 1A is the first MAC address used by STA A, which belongs to the source address. The MAC IB address is in front of the MAC 1A address, that is, the destination address must be required. In front of the source address.

At the same time, since STA A and STA B establish a NAN network connection, the session key is negotiated. This session key is confidential to the third party, and thus the part of the M1 signaling including the MAC 2A address can be included. Encryption is performed to further enhance the security of subsequent business communications.

Step 508: After receiving the M1 signaling, the STA B generates the M2 signaling and sends it to the STA A to notify the second MAC address (ie, the MAC 2B address) corresponding to itself.

Specifically, FIG. 7 shows a specific form of M2 signaling, including: FC domain, MAC 1A information, MAC IB information, CCMP Header domain, and MAC 2B letter. Interest and FCS domain.

Since the destination address must be in front of the source address, the MAC 1A address is in front of the MAC IB address. At the same time, the part containing the MAC 2B address in the M2 signaling can also be encrypted, thereby further improving the security of subsequent service communication.

Step 510: After STA A and STA B complete the exchange of the corresponding second MAC addresses (ie, MAC 2A and MAC 2B ), the respective second MAC addresses can be used for service communication.

The technical solutions of the present invention are described in detail above with reference to the accompanying drawings. In consideration of the related art, the MAC addresses used by the communication devices are all constant, especially in the process of establishing a network connection, which is easily acquired by a third party and is subject to tracking and Attack, therefore, the present invention proposes a communication device and a wireless communication method, which enable the communication parties to use different media access control addresses at different times, thereby improving communication security.

The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. within the spirit and scope of the invention are intended to be included within the scope of the invention.

Claims

Claim

A communication device, comprising:

The message generating module generates a first message frame, where the first message frame includes at least a first source medium access control (MAC) address and a first destination medium access control (MAC) address, and generates a second message frame, where the second message frame The message frame includes at least a second source medium access control (MAC) address, and generates a third message frame according to the second destination medium access control (MAC) address received by the data interaction module, the third message frame including at least the second source a medium access control (MAC) address and the second destination medium access control (MAC) address;

Transmitting, by the data interaction module, the first message frame at a first time point, sending the second message frame and receiving a response message frame of the second message frame after the first time point, and Sending, by the second time point, the third message frame, where the response message frame of the second message frame includes at least the second destination medium access control (MAC) address;

The first source medium access control (MAC) address, the first destination medium access control (MAC) address, the second source medium access control (MAC) address, and the second destination medium access control address (MAC) are different from each other.

The communication device according to claim 1, wherein the first message frame, the second message frame or the third message frame is a management message frame, an action message frame, a control message frame or data a frame, where the types of the first message frame, the second message frame, or the third message frame are the same or different.

The communication device according to claim 2, wherein when the first message frame, the second message frame or the third message frame is a management message frame or an action message frame, the A message frame, the second message frame or the third message frame is specifically:

Probe response frame, association request frame, association response frame, reassociation request frame, reassociation response frame, authentication frame, re-authentication frame, device discovery message frame, or service discovery message frame.

4. The communication device according to claim 1, further comprising: a processing module, and the receiver of the first message frame uses at least the first source medium access control address and the first destination medium The access control address negotiates a session key and uses the session key to encrypt the second source medium access control (MAC) address in the second message frame or the third message frame.

The communication device according to any one of claims 1 to 4, wherein the first message frame further includes a first function identifier bit, and the first function identifier bit indicates that the communication device supports Multi-media access control address operation function;

The data interaction module further receives a response message frame of the first message frame, where the response message frame includes a second function identifier bit, and the second function identifier bit indicates that the sender of the response message frame supports multiple media Access control address operation function.

A wireless communication method, comprising:

Generating a first message frame, and transmitting the first message frame at a first time point, where the first message frame includes at least a first source medium access control (MAC) address and a first destination medium access control (MAC) address;

After the first time point, the method further includes: generating a second message frame, sending the second message frame to a receiver of the first message frame, where the second message frame includes at least a second source medium access control a (MAC) address, and a response message frame of the second message frame received from a receiver of the first message frame, the response message frame of the second message frame including at least a second destination medium access control (MAC) address ;

Generating a third message frame, and transmitting, at a second time point, a third message frame to a receiver of the first message frame, the third message frame including at least the second source medium access control (MAC) address and the a second destination medium access control (MAC) address;

The first source medium access control (MAC) address, the first destination medium access control (MAC) address, the second source medium access control (MAC) address, and the second destination medium access control ( MAC) Addresses are different from each other.

The wireless communication method according to claim 6, wherein the first message frame, the second message frame, and the third message frame are management message frames, action message frames, control message frames, or a data frame, where the types of the first message frame, the second message frame, and the third message frame are the same or different.

The wireless communication method according to claim 7, wherein when the first message frame, the second message frame or the third message frame is a management message frame or an action message frame, The first message frame, the second message frame, or the third message frame is specifically:

9. The wireless communication method according to claim 6, further comprising: utilizing at least the first source medium access control address and the first destination medium access control with a receiver of the first message frame Address negotiation session key;

Encrypting the second source medium access control (MAC) address in the second message frame or the third message frame with the session key.

The wireless communication method according to any one of claims 6 to 9, wherein the first message frame further includes a first function identifier bit, and the first function identifier bit indicates the first The sender of the message frame supports the multi-media access control address operation function;

The wireless communication method further includes:

Receiving a response message frame of the first message frame, the response message frame includes a second function identifier bit, and the second function identifier bit indicates that the sender of the response message frame supports a multi-media access control address operation function.

A communication device, comprising:

a message generating module, configured to generate a response message frame of the second message frame according to the second message frame received by the data interaction module, where the second message frame includes at least a second source medium access control (MAC) address, where The response message frame of the second message frame includes at least a second destination medium access control (MAC) address;

The data interaction module receives the first message frame at a first time point, where the first message frame includes at least a first source medium access control (MAC) address and a first destination medium access control (MAC) address, where the first Receiving the second message frame after the time point and transmitting the response frame of the second message frame, and receiving the third message frame at the second time point, the third message frame including at least the second source medium access control a (MAC) address and the second destination medium access control (MAC) address;

The communication device according to claim 11, wherein the first message frame, the second message frame or the third message frame is a management message frame, an action message frame, a control message frame or data a frame, where the types of the first message frame, the second message frame, or the third message frame are the same or different.

The communication device according to claim 12, wherein when the first message frame, the second message frame or the third message frame is a management message frame or an action message frame, the A message frame, the second message frame or the third message frame is specifically:

14. The communication device of claim 11, further comprising: a processing module, wherein the sender of the first message frame utilizes at least the first source medium access control address and the first destination medium The access control address negotiates a session key and uses the session key to encrypt the second destination medium access control (MAC) address in the response message frame of the second message frame.

The communication device according to any one of claims 11 to 14, wherein the first message frame further includes a first function identifier bit, and the first function identifier bit indicates the first message The sender of the frame supports the multi-media access control address operation function;

The response message frame of the first message frame further includes a second function identifier bit, and the second function identifier bit indicates that the communication device supports the multi-media access control address operation function.

16. A method of wireless communication, comprising:

Receiving, at a first time point, a first message frame, the first message frame including at least a first source medium access control (MAC) address and a first destination medium access control (MAC) address;

After the first time point, the method further includes: receiving a second message frame from a sender of the first message frame, and transmitting a response message frame of the second message frame to a sender of the first message frame The second message frame includes at least the second source medium access control (MAC) address, and the response message frame of the second message frame includes at least a second destination medium access control (MAC) address;

Receiving, at a second time point, a third message frame, the third message frame including at least the second source medium access control (MAC) address and the second destination medium access control (MAC) address;

The wireless communication method according to claim 16, wherein the first message frame, the second message frame or the third message frame is a management message frame, an action message frame, a control message frame or a data frame, where the types of the first message frame, the second message frame, or the third message frame are the same or different.

The wireless communication method according to claim 17, wherein when the first message frame, the second message frame or the third message frame is a management message frame or an action message frame, The first message frame, the second message frame, or the third message frame is specifically:

The wireless communication method according to claim 16, further comprising: using at least the first source medium access control address and the first destination medium access control with a sender of the first message frame Address negotiation session key;

The second destination Medium Access Control (MAC) address in the response message frame of the second message frame is encrypted using the session key.

The wireless communication method according to any one of claims 16 to 19, wherein the first message frame further includes a first function identifier bit, and the first function identifier bit indicates the first The sender of the message frame supports the multi-media access control address operation function;

The response message frame of the first message frame includes a second function identifier bit, and the second function identifier bit indicates that the sender of the response message frame supports the multi-media access control address operation function.