KR102202839B1 - Shared data security method in wireless local area network including station and access point - Google Patents

Abstract

The present invention relates to a wireless LAN system safely sharing data. The method of wireless LAN system safely sharing data includes the steps of: receiving a first PPDU including first security information, shared data, and first individual data from a first access point (AP); receiving a second PPDU including second security information, the shared data, and second individual data from a second AP; decoding the shared data based on the first security information and the second security information; and decoding the first and second individual data.

Description

A wireless LAN system that safely shares data {SHARED DATA SECURITY METHOD IN WIRELESS LOCAL AREA NETWORK INCLUDING STATION AND ACCESS POINT}

The present invention relates to a wireless LAN system for safely sharing data.

In general, each region is loved by local residents as well as tourists and residents of other regions.

However, in order to use these local restaurants, residents of other regions must spend a lot of time and money and have to go to the local restaurants themselves.

In addition, there are restaurants that deliver food to other regions, but users who order food delivery to restaurants usually receive food at home, so it is very cumbersome for users to set up the table. Therefore, it was difficult to manage the tasks of receiving orders for reservations or processing information necessary for delivery with the system.

Meanwhile, in a conventional general restaurant, since the entire process of cooking food must be performed in the restaurant, a chef of a professional level is essential, and various resources necessary for cooking such as a kitchen space and kitchen tools are required.

In addition, it was practically impossible for users to enjoy all the foods of the restaurants at a convenient time in one place because the distances of the restaurants are usually far apart.

Meanwhile, the Internet is composed of a huge number of computers and computer networks that interconnect these computers worldwide through communication links.

Interconnected computers exchange information using a variety of services, such as e-mail, gophers and the World Wide Web (WWW). The World Wide Web allows a server computer system (eg a web server or website) to send graphical web pages of information to a remote client computer system.

Such a remote client computer system can display web pages of various screens transmitted from the server computer.

Meanwhile, recent mobile communication networks such as 2G, 3G, 4G, 5G, LTE, WIFI communication network, Bluetooth communication network, cellular communication network, CDMA communication network, LTE communication network, Ethernet communication network, WiMAX communication network, local area network (LAN), wide area communication network (WAN), RF As wireless communication networks, such as communication networks, infrared communication networks, and optical communication networks, have rapidly developed, various systems have been developed using such wireless communication networks.

In addition, wireless local area networks (WLANs) have been improved in various ways. For example, the IEEE 802.11ax standard proposes an improved communication environment using OFDMA (orthogonal frequency division multiple access) and DL MU downlink multi-user multiple input, multiple output (MIMO) techniques.

The present specification proposes a shared data security system between an access point (AP) and a non-AP STA (station) operating in a wireless LAN system.

An object of the present invention for solving the above problems is to provide a wireless LAN system that safely shares data.

An embodiment of the present invention for achieving the above object may include a wireless LAN system that safely shares S data.

According to the present invention, since the security key value is shared in the association step, it may be difficult to obtain the security key outside the BSS. In addition, since information for descrambling shared data is divided and transmitted in the PPDU transmitted by the first AP and the PPDU transmitted by the second AP, the shared data is shared unless both the information from the first AP and the second AP are obtained. It is difficult to obtain all of the information for descrambles. Also, since the security key is a hash value, it may be difficult to obtain an actual value even if information is obtained. In addition, since information for descrambles shared data is obtained by descramblering the first part and the second part based on the security key, security for order and payment information may be enhanced.

1 shows an example of a transmitting device and/or a receiving device of the present specification.
2 is a conceptual diagram showing the structure of a wireless LAN (WLAN).
3 is a flowchart illustrating an embodiment of an STA operation in which a data sharing security method for non-face-to-face order and payment is performed.
FIG. 4 is a diagram showing an embodiment of information required to descramble shared data for non-face-to-face order and payment.

In the present invention, various modifications may be made and various embodiments may be provided, and specific embodiments will be illustrated in the drawings and described in detail in the detailed description. However, this is not intended to limit the present invention to a specific embodiment, it is to be understood to include all changes, equivalents, and substitutes included in the spirit and scope of the present invention. In describing each drawing, similar reference numerals have been used for similar elements.

Terms such as first, second, A, and B may be used to describe various elements, but the elements should not be limited by the terms. These terms are used only for the purpose of distinguishing one component from another component. For example, without departing from the scope of the present invention, a first element may be referred to as a second element, and similarly, a second element may be referred to as a first element. The term "and/or" includes a combination of a plurality of related stated items or any of a plurality of related stated items.

When a component is referred to as being "connected" or "connected" to another component, it is understood that it may be directly connected or connected to the other component, but other components may exist in the middle. Should be. On the other hand, when a component is referred to as being "directly connected" or "directly connected" to another component, it should be understood that there is no other component in the middle.

The terms used in the present application are only used to describe specific embodiments, and are not intended to limit the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise. In the present application, terms such as "comprise" or "have" are intended to designate the presence of features, numbers, steps, actions, components, parts, or combinations thereof described in the specification, but one or more other features. It is to be understood that the presence or addition of elements or numbers, steps, actions, components, parts, or combinations thereof, does not preclude in advance.

Unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which the present invention belongs. Terms as defined in a commonly used dictionary should be interpreted as having a meaning consistent with the meaning in the context of the related technology, and should not be interpreted as an ideal or excessively formal meaning unless explicitly defined in this application. Does not.

Hereinafter, preferred embodiments of the present invention will be described in more detail with reference to the accompanying drawings. In describing the present invention, in order to facilitate an overall understanding, the same reference numerals are used for the same elements in the drawings, and duplicate descriptions for the same elements are omitted.

1 shows an example of a transmitting device and/or a receiving device of the present specification.

The example of FIG. 1 may perform various technical features described below. 1 is related to at least one STA (station). For example, the STAs 110 and 120 of the present specification include a mobile terminal, a wireless device, a wireless transmit/receive unit (WTRU), a user equipment (UE), It may be referred to by various names such as a mobile station (MS), a mobile subscriber unit, or simply a user. STAs 110 and 120 of the present specification may be referred to by various names such as a network, a base station, a Node-B, an access point (AP), a repeater, a router, and a relay. The STAs 110 and 120 of the present specification may be referred to by various names such as an apparatus, a transmitting device, a receiving STA, a transmitting STA, a receiving device, and a transmitting device.

For example, in the non-face-to-face order and payment system according to an embodiment, the STA may represent a user terminal that performs an order and payment, that is, a mobile terminal of the user, and a restaurant that receives information from the user terminal and processes order and payment. It may also represent a terminal. In addition, the STA may represent a force terminal in a restaurant or a manufacturing terminal in a restaurant. Accordingly, according to an embodiment, data is shared not only with a user terminal, but also with a POS terminal and a manufacturing terminal in a restaurant, thereby providing a fast and smooth order and payment process.

For example, the STAs 110 and 120 may perform an access point (AP) role or a non-AP role. That is, the STAs 110 and 120 of the present specification may perform AP and/or non-AP functions. In the present specification, the AP may also be indicated as an AP STA.

The STAs 110 and 120 of the present specification may support various communication standards other than the IEEE 802.11 standard together. For example, communication standards (eg, LTE, LTE-A, 5G NR standards) according to 3GPP standards may be supported. In addition, the STA of the present specification may be implemented with various devices such as a mobile phone, a vehicle, and a personal computer. In addition, the STA of the present specification may support communication for various communication services such as voice call, video call, data communication, and autonomous driving (Self-Driving, Autonomous-Driving).

In the present specification, the STAs 110 and 120 may include a medium access control (MAC) and a physical layer interface for a wireless medium according to the IEEE 802.11 standard.

The STAs 110 and 120 will be described on the basis of the sub-drawing (a) of FIG. 1 as follows.

The first STA 110 may include a processor 111, a memory 112, and a transceiver 113. The illustrated processor, memory, and transceiver may each be implemented as separate chips, or at least two or more blocks/functions may be implemented through a single chip.

The transceiver 113 of the first STA performs a signal transmission/reception operation. Specifically, IEEE 802.11 packets (eg, IEEE 802.11a/b/g/n/ac/ax/be, etc.) can be transmitted and received.

For example, the first STA 110 may perform an intended operation of the AP. For example, the processor 111 of the AP may receive a signal through the transceiver 113, process a received signal, generate a transmission signal, and perform control for signal transmission. The memory 112 of the AP may store a signal (ie, a received signal) received through the transceiver 113, and may store a signal (ie, a transmission signal) to be transmitted through the transceiver.

For example, the second STA 120 may perform an intended operation of a non-AP STA. For example, the non-AP transceiver 123 performs a signal transmission/reception operation. Specifically, IEEE 802.11 packets (eg, IEEE 802.11a/b/g/n/ac/ax/be, etc.) can be transmitted and received.

For example, the processor 121 of the non-AP STA may receive a signal through the transceiver 123, process a received signal, generate a transmission signal, and perform control for signal transmission. The memory 122 of the non-AP STA may store a signal (ie, a reception signal) received through the transceiver 123 and may store a signal (ie, a transmission signal) to be transmitted through the transceiver.

For example, in the following specification, an operation of a device indicated as an AP may be performed by the first STA 110 or the second STA 120. For example, when the first STA 110 is an AP, the operation of the device indicated as an AP is controlled by the processor 111 of the first STA 110 and is controlled by the processor 111 of the first STA 110. A related signal may be transmitted or received through the controlled transceiver 113. In addition, control information related to the operation of the AP or a transmission/reception signal of the AP may be stored in the memory 112 of the first STA 110. In addition, when the second STA 110 is an AP, the operation of the device indicated as an AP is controlled by the processor 121 of the second STA 120 and controlled by the processor 121 of the second STA 120. A related signal may be transmitted or received through the transceiver 123 being used. In addition, control information related to the operation of the AP or transmission/reception signals of the AP may be stored in the memory 122 of the second STA 110.

For example, in the following specification, an operation of a device indicated as non-AP (or User-STA) may be performed by the first STA 110 or the second STA 120. For example, when the second STA 120 is a non-AP, the operation of the device marked as non-AP is controlled by the processor 121 of the second STA 120 and the processor of the second STA 120 ( A related signal may be transmitted or received through the transceiver 123 controlled by 121). In addition, control information related to the operation of the non-AP or transmission/reception signals of the AP may be stored in the memory 122 of the second STA 120. For example, when the first STA 110 is a non-AP, the operation of the device indicated as non-AP is controlled by the processor 111 of the first STA 110 and the processor of the first STA 120 ( A related signal may be transmitted or received through the transceiver 113 controlled by 111). In addition, control information related to the operation of the non-AP or transmission/reception signals of the AP may be stored in the memory 112 of the first STA 110.

In the following specification, (transmit/receive) STA, first STA, second STA, STA1, STA2, AP, first AP, second AP, AP1, AP2, (transmit/receive) Terminal, (transmit/receive) device , (Transmission/reception) apparatus, a device called a network, etc. may refer to the STAs 110 and 120 of FIG. 1. For example, without specific reference numerals (transmission/reception) STA, first STA, second STA, STA1, STA2, AP, first AP, second AP, AP1, AP2, (transmission/reception) Terminal, (transmission Devices displayed as /receive) device, (transmit/receive) apparatus, network, etc. may also mean the STAs 110 and 120 of FIG. 1. For example, in the following example, an operation in which various STAs transmit and receive signals (eg, PPPDUs) may be performed by the transceivers 113 and 123 of FIG. 1. In addition, in the following example, an operation in which various STAs generate transmission/reception signals or perform data processing or calculation in advance for transmission/reception signals may be performed by the processors 111 and 121 of FIG. 1. For example, an example of an operation of generating a transmission/reception signal or performing data processing or calculation in advance for a transmission/reception signal is: 1) Determining bit information of a subfield (SIG, STF, LTF, Data) field included in the PPDU. /Acquisition/configuration/computation/decoding/encoding operations, 2) Time resources or frequency resources (eg, subcarrier resources) used for subfields (SIG, STF, LTF, Data) included in the PPDU, etc. Determination/configuration/retrieve operation, 3) A specific sequence used for the subfields (SIG, STF, LTF, Data) fields included in the PPDU (e.g., pilot sequence, STF/LTF sequence, applied to SIG) An operation of determining/configuring/obtaining an extra sequence), 4) a power control operation and/or a power saving operation applied to the STA, 5) an operation related to determination/acquisition/configuration/calculation/decoding/encoding of an ACK signal, etc. Can include. In addition, in the following example, various information used by various STAs for determination/acquisition/configuration/calculation/decoding/encoding of transmission/reception signals (for example, information related to fields/subfields/control fields/parameters/power, etc.) It may be stored in the memories 112 and 122 of FIG. 1.

The device/STA of the sub-drawing (a) of FIG. 1 described above may be modified as shown in the sub-drawing (b) of FIG. 1. Hereinafter, the STAs 110 and 120 of the present specification will be described based on the sub-drawing (b) of FIG. 1.

For example, the transceivers 113 and 123 illustrated in sub-drawing (b) of FIG. 1 may perform the same functions as the transceiver illustrated in sub-drawing (a) of FIG. 1. For example, the processing chips 114 and 124 shown in sub-drawing (b) of FIG. 1 may include processors 111 and 121 and memories 112 and 122. The processors 111 and 121 and the memories 112 and 122 illustrated in sub-drawing (b) of FIG. 1 are the processors 111 and 121 and the memories 112 and 122 illustrated in sub-drawing (a) of FIG. ) And can perform the same function.

A mobile terminal, a wireless device, a wireless transmit/receive unit (WTRU), a user equipment (UE), a mobile station (MS), and a mobile device described below. Mobile Subscriber Unit, user, user STA, network, base station, Node-B, AP (Access Point), repeater, router, relay, receiving device, transmitting device, receiving STA, transmitting The STA, the receiving device, the transmitting device, the receiving Apparatus, and/or the transmitting Apparatus means the STAs 110 and 120 shown in sub-drawings (a)/(b) of FIG. 1, or the sub-drawing of FIG. 1 (b It may mean the processing chips 114 and 124 shown in ). That is, the technical features of the present specification may be performed on the STAs 110 and 120 shown in sub-drawings (a)/(b) of FIG. 1, and the processing chip shown in sub-drawing (b) of FIG. 114, 124). For example, the technical feature of the transmitting STA transmitting the control signal is that the control signal generated by the processors 111 and 121 shown in sub-drawings (a)/(b) of FIG. 1 is sub-drawing (a) of FIG. It can be understood as a technical feature transmitted through the transceivers 113 and 123 shown in )/(b). Alternatively, the technical feature in which the transmitting STA transmits the control signal is a technical feature in which a control signal to be transmitted to the transceivers 113 and 123 is generated from the processing chips 114 and 124 shown in sub-drawing (b) of FIG. 1. Can be understood.

For example, the technical characteristic that the receiving STA receives the control signal may be understood as a technical characteristic in which the control signal is received by the transceivers 113 and 123 shown in sub-drawing (a) of FIG. 1. Alternatively, the technical feature that the receiving STA receives the control signal is that the control signal received by the transceivers 113 and 123 shown in sub-drawing (a) of FIG. 1 is the processor shown in sub-drawing (a) of FIG. 111, 121) can be understood as a technical feature obtained. Alternatively, the technical feature that the receiving STA receives the control signal is that the control signal received by the transceivers 113 and 123 shown in sub-drawing (b) of FIG. 1 is a processing chip shown in sub-drawing (b) of FIG. It can be understood as a technical feature obtained by (114, 124).

Referring to sub-drawing (b) of FIG. 1, software codes 115 and 125 may be included in the memories 112 and 122. The software codes 115 and 125 may include instructions for controlling the operations of the processors 111 and 121. The software codes 115 and 125 may be included in various programming languages.

The processors 111 and 121 or the processing chips 114 and 124 illustrated in FIG. 1 may include an application-specific integrated circuit (ASIC), another chipset, a logic circuit, and/or a data processing device. The processor may be an application processor (AP). For example, the processors 111 and 121 or the processing chips 114 and 124 shown in FIG. 1 are a digital signal processor (DSP), a central processing unit (CPU), a graphics processing unit (GPU), and a modem (modulator). and demodulator). For example, the processors 111 and 121 or the processing chips 114 and 124 shown in FIG. 1 are SNAPDRAGONTM series processors manufactured by Qualcomm®, EXYNOSTM series processors manufactured by Samsung®, and It may be an A series processor, a HELIOTM series processor manufactured by MediaTek®, an ATOMTM series processor manufactured by INTEL®, or an enhanced processor thereof.

In the present specification, uplink may mean a link for communication from a non-AP STA to an AP STA, and an uplink PPDU/packet/signal may be transmitted through the uplink. In addition, in this specification, the downlink may mean a link for communication from an AP STA to a non-AP STA, and a downlink PPDU/packet/signal may be transmitted through the downlink.

Referring to FIG. 1, a wireless LAN system according to an embodiment of the present invention may include at least one processor 111 and 121, memories 112 and 122, and transceivers 113 and 123.

The processors 111 and 121 may execute program commands stored in the memories 112 and 122. The processors 111 and 121 may mean a central processing unit (CPU), a graphics processing unit (GPU), or a dedicated processor on which the methods according to the present invention are performed. The memories 112 and 122 may be composed of a volatile storage medium and/or a nonvolatile storage medium. For example, the memories 112 and 122 may be composed of read only memory (ROM) and/or random access memory (RAM).

The memories 112 and 122 may store at least one instruction executed through the processors 111 and 121. At least one command is a wireless LAN system, wherein the STA (station) receives a first PPDU including first security information, shared data, and first individual data from a first AP (access point), and the sharing The data is information related to order and payment; Receiving, by the STA, a second PPDU including second security information, the shared data, and second individual data from a second AP; Decoding, by the STA, the shared data based on the first security information and the second security information; The STA may include decoding the first and second individual data.

Here, the first and second security information may be a physical (PHY) layer signal, and the shared data, the first individual data, and the second individual data may be a media access control (MAC) layer signal.

Here, the shared data transmitted by the first AP is a first redundancy version of the shared data transmitted by the first STA, and the shared data transmitted by the second AP is the shared data transmitted by the first STA. It may be the second redundancy version of.

Here, the coding rate of the first individual data is set higher than the coding rate of the shared data transmitted by the first AP, and the coding rate of the second individual data is It may be set lower than the coding rate of the shared data to be transmitted.

Here, the same scrambling is applied to the shared data transmitted by the first AP and the shared data transmitted by the second AP, and the first security information is the information required to descramble the shared data. Including a first portion, wherein the second security information includes a second portion of information required to descramble the shared data, further comprising exchanging a security key between the STA and the first AP And, the security key is determined based on a basic service set identifier identifier (BSSID) of the first AP and an association ID (AID) value of the STA, and the security key is the first part and the second part. A hash value of information required for scrambling, the STA descrambles the first part and the second part based on the security key value to obtain information necessary to descramble the shared data; And the STA descrambles the shared data.

Here, the first part and the second part may be values obtained by distributing bits of information necessary to descramble the shared data in proportion to the coding rate value of the first individual data and the coding rate value of the second individual data. have.

For example, the shared data according to an embodiment may be data to be shared by the STA and the first to second APs. For example, the shared data may be non-face-to-face order information and/or payment information. For example, the STA and the first to second APs may be terminals constituting a non-face-to-face order system, and the STA and the first to second APs share order information and/or payment information for a non-face-to-face order. can do. For example, the first AP may share non-face-to-face order information with the STA. Or, for example, the first AP may share non-face-to-face payment information with the STA. For example, the STA may require order information and/or payment information of the first to second APs, and the STA may obtain order information and/or payment information from the first AP and the second AP.

2 is a conceptual diagram showing the structure of a wireless LAN (WLAN).

The upper part of FIG. 2 shows the structure of an infrastructure BSS (basic service set) of IEEE (institute of electrical and electronic engineers) 802.11.

Referring to the upper part of FIG. 2, the wireless LAN system may include one or more infrastructure BSSs 200 and 205 (hereinafter, BSS). The BSS (200, 205) is a set of APs and STAs such as an access point (AP) 225 and STA1 (Station, 200-1) that can communicate with each other by successfully synchronizing, and does not indicate a specific area. The BSS 205 may include one or more STAs 205-1 and 205-2 that can be coupled to one AP 230.

The BSS may include at least one STA, APs 225 and 230 providing a distribution service, and a distribution system (DS) 210 connecting a plurality of APs.

The distributed system 210 may implement an extended service set (ESS) 240, which is an extended service set, by connecting several BSSs 200 and 205. The ESS 240 may be used as a term indicating one network formed by connecting one or several APs through the distributed system 210. APs included in one ESS 240 may have the same service set identification (SSID).

The portal 220 may serve as a bridge for connecting a wireless LAN network (IEEE 802.11) and another network (eg, 802.X).

In the BSS as shown in the upper part of FIG. 2, a network between the APs 225 and 230 and a network between the APs 225 and 230 and the STAs 200-1, 205-1 and 205-2 may be implemented. However, it may be possible to perform communication by setting up a network even between STAs without the APs 225 and 230. A network that performs communication by configuring a network even between STAs without the APs 225 and 230 is defined as an ad-hoc network or an independent basic service set (IBSS).

The lower part of FIG. 2 is a conceptual diagram showing IBSS.

2, the IBSS is a BSS operating in an ad-hoc mode. Since IBSS does not include APs, there is no centralized management entity. That is, in the IBSS, the STAs 250-1, 250-2, 250-3, 255-4, and 255-5 are managed in a distributed manner. In IBSS, all STAs (250-1, 250-2, 250-3, 255-4, 255-5) can be configured as mobile STAs, and access to the distributed system is not allowed, so a self-contained network. network).

3 is a flowchart illustrating an embodiment of an STA operation in which a data sharing security method for non-face-to-face order and payment is performed.

Referring to FIG. 3, an STA may share a security key with an AP (S300). For example, the STA may share a security key while performing an association with an AP. For example, the security key may be included in an association request and/or an association response.

The STA may receive a first PPDU including first security information, shared data, and first individual data from a first access point (AP) (S310).

The shared data may be data to be shared by the STA and the first to second APs. For example, the shared data may be non-face-to-face order information and/or payment information. For example, the STA and the first to second APs may be terminals constituting a non-face-to-face order system, and the STA and the first to second APs share order information and/or payment information for a non-face-to-face order. can do. For example, the first AP may share non-face-to-face order information with the STA. Or, for example, the first AP may share non-face-to-face payment information with the STA. For example, the STA may require order information and/or payment information of the first to second APs, and the STA may obtain order information and/or payment information from the first AP and the second AP.

The STA may receive a second PPDU including the second security information, the shared data, and the second individual data from the second AP (S320).

The first and second security information may be a physical (PHY) layer signal, and the shared data, the first individual data, and the second individual data may be a media access control (MAC) layer signal.

The shared data transmitted by the first AP is a first redundancy version of the shared data transmitted by the first STA, and the shared data transmitted by the second AP is the first of the shared data transmitted by the first STA. 2 May be a redundant version.

The coding rate of the first individual data is set higher than the coding rate of shared data transmitted from the first AP, and the coding rate of the second individual data is transmitted by the second AP. It may be set lower than the coding rate of shared data.

The same scrambling is applied to the shared data transmitted by the first AP and the shared data transmitted by the second AP, and the first security information refers to a first part of information required to descramble the shared data. And the second security information may include a second portion of information required to descramble the shared data.

That is, the first part and the second part are parts constituting information for descrambling shared data, respectively, and when the first part and the second part are added together, information for descrambler of shared data may be obtained.

The first part and the second part may be values obtained by distributing bits of information necessary for descrambles the shared data in proportion to a coding rate value of the first individual data and a coding rate value of the second individual data.

FIG. 4 is a diagram showing an embodiment of information required to descramble shared data for non-face-to-face order and payment.

Referring to FIG. 4, information required to descramble shared data may be 10-bit information. For example, when the coding rate value of the first individual data is 2/5 and the coding rate value of the second individual data is 3/5, the first part may be '1001' and the second part is '110001' 'Can be. That is, the first part and the second part may be values obtained by distributing bits of information necessary to descramble the shared data in proportion to the coding rate value of the first individual data and the coding rate value of the second individual data. have. Since the coding rate ratio is 2:3, 10-bit information can be distributed to the first part and the second part as 4-bit information and 6-bit information.

Here, the shared data according to an embodiment may be data to be shared by the STA and the first to second APs. For example, the shared data may be non-face-to-face order information and/or payment information. For example, the STA and the first to second APs may be terminals constituting a non-face-to-face order system, and the STA and the first to second APs share order information and/or payment information for a non-face-to-face order. can do. For example, the first AP may share non-face-to-face order information with the STA. Or, for example, the first AP may share non-face-to-face payment information with the STA. For example, the STA may require order information and/or payment information of the first to second APs, and the STA may obtain order information and/or payment information from the first AP and the second AP.

Referring back to FIG. 3, the first part and the second part are parts constituting information for descrambling shared data, respectively, and when the first part and the second part are combined, information for descrambling shared data is obtained. I can.

Here, the information for descrambling shared data may be scrambled before being divided into a first part and a second part. That is, the first part and the second part may be scrambled'information for descrambles shared data'. Accordingly, in order for the STA to obtain information for descrambling shared data, it is necessary to descramble the sum of the first part and the second part.

A security key can be used to descramble information for descrambles shared data.

A security key is determined based on a basic service set identifier identifier (BSSID) of the first AP and an association ID (AID) value of the STA, and the security key is required to descramble the first part and the second part. It may be a hash value of information. That is, the security key can point to a specific value based on a preset hash function.

The STA may descramble the first part and the second part based on the security key value to obtain information necessary to descramble the shared data (S330).

The STA may descramble the shared data by using information necessary to descramble the shared data acquired in S330 (S340).

The STA may decode the shared data, the first individual data, and the second individual data based on the first security information and the second security information (S350).

The operation according to an embodiment of the present invention can be implemented as a computer-readable program or code on a computer-readable recording medium. The computer-readable recording medium includes all types of recording devices that store data that can be read by a computer system. In addition, the computer-readable recording medium may be distributed over a computer system connected through a network to store and execute a computer-readable program or code in a distributed manner.

Technical features of the present specification may be implemented based on a computer readable medium (CRM). For example, the CRM proposed by the present specification includes at least one computer-readable recording medium including instructions based on being executed by at least one processor of an automatic video editing device ( computer readable medium), the step of recognizing faces of a plurality of people included in the video, blurring the faces of the plurality of people, and adding the list of the plurality of people to the video. Arranging based on the time the person is exposed, obtaining information related to the person from the user, wherein the person is included in the plurality of people, and removing the blur of the face of the person Instructions for performing an operation to be performed can be stored. Instructions stored in the CRM of the present specification may be executed by at least one processor. At least one processor related to the CRM of the present specification may be the processors 111 and 121 of FIG. 1. Meanwhile, the CRM of the present specification may be the memories 112 and 122 of FIG. 3, or may be a separate external memory/storage medium/disk.

When the embodiment is implemented as software, the above-described technique may be implemented as a module (process, function, etc.) that performs the above-described functions. The modules are stored in memory and can be executed by the processor. The memory may be inside or outside the processor, and may be connected to the processor by various well-known means.

In addition, the computer-readable recording medium may include a hardware device specially configured to store and execute program commands, such as ROM, RAM, and flash memory. The program instructions may include not only machine language codes such as those produced by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like.

While some aspects of the invention have been described in the context of an apparatus, it may also represent a description according to a corresponding method, where a block or apparatus corresponds to a method step or characteristic of a method step. Similarly, aspects described in the context of a method can also be represented by a corresponding block or item or a feature of a corresponding device. Some or all of the method steps may be performed by (or using) a hardware device such as, for example, a microprocessor, a programmable computer or electronic circuit. In some embodiments, one or more of the most important method steps may be performed by such an apparatus.

In embodiments, a programmable logic device (eg, a field programmable gate array) may be used to perform some or all of the functionality of the methods described herein. In embodiments, the field programmable gate array may work with a microprocessor to perform one of the methods described herein. In general, the methods are preferably performed by some hardware device.

Although the above has been described with reference to preferred embodiments of the present invention, those skilled in the art will variously modify and change the present invention within the scope not departing from the spirit and scope of the present invention described in the following claims. You will understand that you can do it.

Claims (1)

In a wireless LAN system that safely shares data,
Including a STA (station), a first AP (access point) and a second AP,
The STA receives a first PPDU including first security information, shared data, and first individual data from the first AP, wherein the shared data is information related to order and payment,
The STA receives a second PPDU including second security information, the shared data, and second individual data from the second AP,
The STA decodes the shared data based on the first security information and the second security information,
The STA decodes the first and second individual data,
The first and second security information is a PHY (physical) layer signal,
The shared data, the first individual data, and the second individual data are a media access control (MAC) layer signal,
The coding rate of the first individual data is set higher than the coding rate of shared data transmitted by the first AP,
The coding rate of the second individual data is set lower than the coding rate of shared data transmitted by the second AP,
The same scrambling is applied to the shared data transmitted by the first AP and the shared data transmitted by the second AP,
The first security information includes a first part of information necessary to descramble the shared data,
The second security information includes a second part other than the first part of the information required to descramble the shared data,
The STA and the first AP exchange a security key,
The security key is determined based on a basic service set identifier identifier (BSSID) of the first AP and an association ID (AID) value of the STA,
The security key is a hash value of information required to descramble the first part and the second part,
The STA descrambles the shared data based on the first part, the second part, and the security key value,
The first part and the second part are information in which information necessary to descramble the shared data is distributed in bits according to a ratio between a coding rate value of the first individual data and a coding rate value of the second individual data,
The information required to descramble the shared data is 10-bit information,
system.

Images