WO2010130138A1

WO2010130138A1 - Station (sta) switching method and system while completing wireless local area network privacy infrastructure (wpi) by wireless terminal point (wtp) in convergent wlan

Info

Publication number: WO2010130138A1
Application number: PCT/CN2009/075899
Authority: WO
Inventors: 铁满霞; 曹军; 杜志强; 赖晓龙; 黄振海
Original assignee: 西安西电捷通无线网络通信有限公司
Priority date: 2009-05-14
Filing date: 2009-12-23
Publication date: 2010-11-18
Also published as: CN101557591A; CN101557591B

Abstract

A Station (STA) switching method and system while completing Wireless Local Area Network Privacy Infrastructure (WPI) by Wireless Terminal Point (WTP) in the convergent Wireless Local Area Network (WLAN) are provided in the present invention, the method includes the following steps: step 1, Station (STA) performs re-associated connection with Access Controller (AC) through the destination Wireless Terminal Point (WTP); step 2, Station (STA) and Access Controller (AC) update the negotiation session key based on the negotiated base key; step 3, Access Controller (AC) and the destination Wireless Terminal Point (WTP) perform the key synchronization. The present invention can realize the rapid and safe switching for the station which is switched between the wireless terminal points controlled by the same controller in convergent WLAN based on Wireless Local Area Network Authentication and Privacy Infrastructure (WAPI) protocol.

Description

STA switching method and system for completing WP I by WTP in convergence WLAN This application claims to be submitted to the Chinese Patent Office on May 14, 2009, the application number is 200910022523.5, and the invention name is "WTP when the WTP is completed in the convergence WLAN. The priority of the Chinese patent application for the STA switching method and its system. Technical field

The present invention relates to a STA switching method and a system thereof when WPI is completed by WTP in a convergence WLAN. Background technique

Currently, the STA (Station) switching method in the WLAN (Wireless Local Area Network) based on the WLAN Authentication and Privacy Infrastructure (WAPI) protocol is proposed under the autonomous WLAN architecture and cannot be directly applied to WAPI-based converged WLAN architecture. In the convergence WLAN architecture, access control devices such as access controllers (ACs), wireless switches, or wireless routers centrally manage WLAN authentication and policy enforcement functions. These devices can also provide centralized bridging, forwarding user data, and so on. Features. Summary of the invention

In order to solve the shortcomings of the current site-based STA switching method in the WAPI-based WLAN, the present invention provides a convergence WLAN architecture when wirelessly implemented by a wireless terminal point WTP (Wireless Terminal Point). The method and system for switching between the wireless terminal points WTP of the station STA under the same access controller AC when the i-network security infrastructure WI (WLAN Privacy Infrastructure). The access controller here can also be replaced by a device such as a wireless switch or a wireless router. The technical solution of the present invention is: The method for switching between the wireless terminal points WTP of the station ST A under the same access controller AC when the wireless terminal point WTP completes the WI in the convergence type WLAN, and the convergence mode is The STA switching method when the WTP completes the WI includes the following steps: Step 1. The STA of the station re-associates with the access controller AC through the destination wireless terminal point WTP;

Step 2. The site S T A and the access controller AC update the negotiation session key based on the negotiated base key;

Step 3: The access controller AC and the destination wireless terminal point WTP perform key synchronization; the above step 1 includes the following steps:

Step 11. The STA STA reconnects with the access controller AC through the destination wireless terminal point WTP.

Step 12: The access controller AC notifies the associated wireless terminal point that the WTP deletes the STA; Step 1 3. The access controller AC notifies the destination wireless terminal that the WTP joins the STA.

The above step 1 1 may include the following steps:

Step 1 11. The STA passively listens to the destination wireless terminal point WTP beacon frame, which is obtained.

The WAPI information element includes the WTP parameters of the destination wireless terminal, and the WAPI information element includes the destination wireless terminal point WTP-supported authentication and key management suite and cipher suite;

Step 112: In the local media access control MAC (Med ium Acce s ss Cont ro l) mode, the station STA sends a link verification request frame to the destination wireless terminal point WTP, requesting link verification with the destination wireless terminal point WTP. And the destination wireless terminal point WTP sends a link verification response frame to the station STA according to the link verification request frame of the station STA;

Step 11 3. After the link verification succeeds, the STA sends a re-association request frame to the access controller AC, and requests the re-association with the access controller AC. The station STA includes the currently associated wireless terminal point WTP in the re-association request frame. Identifying, accessing the identity of the controller AC, and the WAP I information element to determine the authentication and key management suite and cipher suite selected by the site STA, wherein the authentication and key management suite and cipher suite selected by the site STA and its initial Access controller The authentication and key management suite and cipher suite selected at the time of AC association are the same; the access controller AC resolves the re-association request frame of the station STA, and sends a re-association response frame to the station STA.

The above step 1 1 may include the following steps:

Step 1 1 1. The STA STA passively listens to the WPT beacon frame of the destination wireless terminal point, and obtains the parameter of the destination wireless terminal point WTP including the WAP I information element, where the WAP I information element includes the destination wireless terminal point WTP support. Authentication and key management suite and cipher suite;

Step 1 12: In the split MAC mode, the station STA sends a link verification request frame to the access controller AC, requesting link verification with the access controller AC, and the access controller AC determines the frame according to the link verification request of the station STA. Sending a link verification response frame to the station S TA;

Step 1 1 3. After the link authentication succeeds, the station STA sends a re-association request frame to the access controller AC, requesting re-association with the access controller AC, and the station STA includes the currently associated wireless terminal point in the re-association request frame. The identity of the WTP, the identity of the access controller AC, and the WAP I information element to determine the authentication and key management suite and cipher suite selected by the site STA, wherein the authentication and key management suite and cipher suite selected by the site STA and The authentication and key management suite and cipher suite are selected when they are first associated with the access controller AC; the access controller AC resolves the re-association request frame of the station STA, and sends a re-association response frame to the station STA.

The above step 1 1 may include the following steps:

Step 1 1 1. The station STA actively sends a query request frame to the destination wireless terminal point WTP. After receiving the inquiry request frame of the station STA, the destination wireless terminal point WTP sends an inquiry response frame to the station STA, and the station STA receives the inquiry response frame. Obtaining a parameter of a destination wireless terminal point WTP including a WAP I information element, the WAP I information element including an authentication and key management suite and a cipher suite supported by the destination wireless terminal point WTP;

Step 1 1 2. In the local MAC mode, the station STA sends a link verification request frame to the destination wireless terminal point WTP, requesting link verification with the destination wireless terminal point WTP, and the destination wireless terminal point WTP is based on the chain of the station STA. The path verification request frame sends a link verification response frame to the station STA. Step 1 1 3. After the link risk certificate is successful, the station STA sends a re-association to the access controller AC. Requesting a frame, the request is re-associated with the access controller AC, and the station STA includes the identifier of the currently associated wireless terminal point WTP, the identifier of the access controller AC, and the WAPI information element in the re-association request frame to determine the authentication selected by the station STA. And a key management suite and a cipher suite, wherein the authentication and key management suite and cipher suite selected by the station STA are the same as the authentication and key management suite and cipher suite selected when initially associated with the access controller AC; The access controller AC resolves the reassociation request frame of the station STA, and sends a reassociation response frame to the station STA.

The above step 11 includes the following steps:

Step 111: The station STA actively sends a query request frame to the destination wireless terminal point WTP. After receiving the inquiry request frame of the station STA, the destination wireless terminal point WTP sends a query response frame to the station STA, and the station STA obtains the query response frame to obtain the frame. The WAPI information element includes a WTP parameter of the destination wireless terminal, and the WAPI information element includes an authentication and key management suite and a cipher suite supported by the destination wireless terminal point WTP;

Step 112: In the split MAC mode, the station STA sends a link verification request frame to the access controller AC, requesting link verification with the access controller AC, and the access controller AC determines the request frame according to the link STA of the station STA. Sending a link ^ danger response frame to the station STA;

Step 113: After the link verification succeeds, the station STA sends a re-association request frame to the access controller AC, and the request is re-associated with the access controller AC. The station STA includes the identifier of the currently associated wireless terminal point WTP in the re-association request frame. Accessing the identity of the controller AC and the WAPI information element to determine the authentication and key management suite and cipher suite selected by the STA, wherein the authentication and key management suite and cipher suite selected by the STA and its initial access The authentication and key management suite and cipher suite selected by the controller AC are the same; the access controller AC resolves the re-association request frame of the station STA, and sends a re-association response frame to the station STA.

The specific steps of step 12 above are as follows:

Step 121: The access controller AC sends a Control Access and Provisioning Protocol (CAPWAP) to the associated wireless terminal point WTP, and the feSTA has a Station Configuration Request (Station Configuration Request). a message containing a message element such as a delete station STA (Delete Station);

Step 122: The associated wireless terminal point WTP sends a CAPWAP STA configuration response (Station Configuration Response) message to the access controller AC, where the Result Code message element is included, which is used to identify the processing of the CAPWAP STA configuration request message. result.

The specific steps of step 13 above are as follows:

Step 131: The access controller AC sends a CAPWAP STA configuration request (Station Configuration Request) message to the destination wireless terminal point WTP, where the message includes the joining station STA (Add Station) and the GB15629.11 joining station STA (GB15629.11 Add Station). , GB15629.11 site STA session key (GB15629. il Station Session Key) and other message elements; wherein, GB15629.11 site STA session key message element A is set to 1 to inform the destination wireless terminal point WTP closed control port, wireless LAN only forwards a corresponding view from the other station STA ¹ J infrastructure WAI (WLAN Authentication infrastructure) protocol data;

Step 132: The destination wireless terminal point WTP sends a CAPWAP STA configuration response (Station Configuration Response) message to the access controller AC, where the result message (Result Code) message element is used to identify the processing result of the CAPWAP site STA configuration request message. .

The specific steps of step 2 above are as follows:

Step 21: The access controller AC and the station STA perform an I unicast key update negotiation process based on the negotiated base key. The method includes: the destination wireless terminal point WTP wraps the WAI unicast of the CAPWAP data encapsulation format encapsulation from the access controller AC. The key negotiation data is decapsulated and then forwarded to the STA; the WAI unicast key negotiation data from the STA is encapsulated according to the CAP P data encapsulation format and sent to the access controller AC;

Step 22: The access controller AC and the station STA perform a WAI multicast key update notification process. The method includes: the destination wireless terminal point WTP unpacks the WAI multicast key advertisement data encapsulated by the CAPWAP data encapsulation format of the access controller AC. Forwarded to the site STA; WAI from the site STA The multicast key advertisement data is encapsulated according to the CAPWAP data encapsulation format and sent to the access controller AC.

The specific steps of step 3 above are as follows:

Step 31: The access controller AC sends a CAPWAP STA configuration request (Station Configuration Request) message to the destination wireless terminal point WTP, where the message includes the STA station (Add Station) and the GB15629.11 join station STA (GB15629.11 Add Station), GB15629.11 site STA session key (GB15629. il Station Session Key), GB15629.11 information element (GB 15629.11 Information Element) and other message elements; according to the site STA message element in the site STA message MAC address, destination wireless The terminal point WTP opens the corresponding controlled port, and forwards all data from the STA of the station, including WAI protocol data and non-l protocol data;

Step 32: The destination wireless terminal point WTP sends a CAPWAP site STA Configuration Response (Station Configuration Response) message to the access controller AC, where the result code (Result Code) message element is used to identify the processing result of the CAPWAP site STA configuration request message. .

A STA switching system in a convergence WLAN when WPI is completed by WTP, the system includes an access controller AC, a destination wireless terminal point WTP, an associated WTP, and a station STA; the station STA is used to pass the destination wireless terminal point WTP and The access controller AC performs re-association connection; the access controller AC is configured to notify the associated wireless terminal point WTP to delete the station STA and notify the destination wireless terminal point WTP to join the station ST A; the station STA is also used to negotiate with the access controller AC based on The base key updates the negotiation session key; the access controller AC is also used for key synchronization with the destination wireless terminal point WTP.

The present invention provides a STA handover procedure when the WTP is completed by the WTP in the convergence WLAN architecture based on the WAPI protocol. In the STA handover process, the STA and the AC re-schedule the session key based on the negotiated BK. The STA joins, the STA deletes, and the key synchronization operation between the AC and the WTP based on the CAPWAP control message. The method can quickly and securely switch between different WTPs of the STA under the same AC. The technical solution of the present invention will be further described in detail below through the accompanying drawings and embodiments. DRAWINGS

FIG. 1 is a schematic diagram of switching between WTPs of STAs under the same AC;

Figure 2 is a flow chart of switching between WTPs of STAs under the same AC. detailed description

Referring to Figures 1 and 2, in accordance with a preferred embodiment of the present invention, the specific method is as follows:

1) The STA re-associates with the AC through the destination WTP;

1. 1) The STA re-associates with the AC through the destination WTP;

The above steps 1 1 ) may specifically include:

1. 1. 1) STA passive interception The WTP beacon frame of the destination obtains the relevant parameters of the destination WTP including the WAPI information element, which includes the authentication and key management suite and cipher suite supported by the destination WTP. Or the STA sends an inquiry request frame to the destination WTP. After receiving the inquiry request frame of the STA, the destination WTP 1 sends a probe response frame to the STA. After receiving the inquiry response frame, the STA obtains the destination including the WAP I information element. Related parameters, the WAP I information element includes the authentication and key management suite and cipher suite supported by the destination WT;

1. In the local MAC mode, the STA sends a link verification request frame to the destination WTP to request link verification with the destination WTP. The destination WTP sends a link to the STA according to the link verification request frame of the STA. Verifying the response frame; in the split MAC mode, the STA sends a link verification request frame to the AC, requesting link verification with the AC, and the AC sends a link verification response frame to the STA according to the link verification request frame of the STA;

After the link is successfully authenticated, the STA sends a re-association request frame to the AC, requesting re-association with the AC. The STA includes the identifier of the currently associated WTP, the identity of the AC, and the WAP I in the re-association request frame. Information elements to determine the authentication and key management suite and cipher suite selected by the STA, etc., wherein the authentication and key management suite and cipher suite selected by the STA are preferably the first and the first The selected suite is the same as the one selected when the AC is associated; the AC resolves the STA's reassociation request frame and sends a reassociation response frame to the STA.

The above steps 1 1 ) may also specifically include:

1. 1. 1) The STA STA passively listens to the destination wireless terminal WTP beacon frame to obtain the WTP parameters of the destination wireless terminal point including the WAP I information element, and the WAP H message element includes the destination wireless terminal point WTP support. Authentication and key management suite and cipher suite;

1. 1. 2) In the split MAC mode, the station STA sends a link verification request frame to the access controller AC, requesting link verification with the access controller AC, and the access controller AC performs link verification according to the station STA. Requesting a frame, sending a link verification response frame to the station S TA;

1. 1. 3) After the link authentication succeeds, the station STA sends a re-association request frame to the access controller AC, requesting re-association with the access controller AC, and the station STA includes the currently associated wireless terminal in the re-association request frame. Pointing the identity of the WTP, the identity of the access controller AC, and the WAP I information element to determine the authentication and key management suite and cipher suite selected by the site STA, wherein the authentication and key management suite and cipher suite selected by the site STA The authentication and key management suite and cipher suite are selected when they are first associated with the access controller AC; the access controller AC resolves the re-association request frame of the station STA, and sends a re-association response frame to the station STA.

The above steps 1 1 ) may further include:

1. 1. 1) The station STA actively sends a probe request frame to the destination wireless terminal point WTP. After receiving the inquiry request frame of the station STA, the destination wireless terminal point WTP sends a probe response frame to the station STA, and the station STA receives the probe response frame. That is, obtaining a parameter of a destination wireless terminal point WTP including a WAP I information element, where the WAP I information element includes an authentication and key management suite and a cipher suite supported by the destination wireless terminal point WTP;

1. 1. 2) In the local MAC mode, the station STA sends a link verification request frame to the destination wireless terminal point WTP, requesting link verification with the destination wireless terminal point WTP, and the destination wireless terminal point WTP is based on the station STA. a link verification request frame, sending a link verification response frame to the station STA;

1. 1. 3) After the link risk certificate is successful, the station STA sends a reassociation request to the access controller AC. The frame, the request is re-associated with the access controller AC, and the station STA includes the identifier of the currently associated wireless terminal point WTP, the identifier of the access controller AC, and the WAP I information element in the re-association request frame to determine the authentication selected by the station STA. And a key management suite and a cipher suite, wherein the authentication and key management suite and cipher suite selected by the site ST A are the same as the authentication and key management suite and cipher suite selected when initially associated with the access controller AC; The access controller AC resolves the reassociation request frame of the station STA, and sends a reassociation response frame to the station STA.

The above step 11) may further specifically include:

1.1.1) The station STA actively sends a query request frame to the destination wireless terminal point WTP. After receiving the inquiry request frame of the station STA, the destination wireless terminal point WTP sends an inquiry response frame to the station STA, and the station STA obtains the inquiry response frame. A parameter of a destination wireless terminal point WTP including a WAPI information element, the WAPI information element including an authentication and key management suite and a cipher suite supported by the destination wireless terminal point WTP;

1.1.2) In the split MAC mode, the station STA sends a link verification request frame to the access controller AC, requesting link verification with the access controller AC, and the access controller AC according to the link verification request frame of the station STA Sending a link ^ risk response frame to the station STA;

1.1.3) After the link verification succeeds, the station STA sends a re-association request frame to the access controller AC, requesting re-association with the access controller AC, and the station STA includes the currently associated wireless terminal point WTP in the re-association request frame. Identifying, accessing the identity of the controller AC, and the WAP I information element to determine the authentication and key management suite and cipher suite selected by the site STA, wherein the authentication and key management suite and cipher suite selected by the site ST A and its initial The authentication and key management suite and cipher suite are selected when associated with the access controller AC; the access controller AC resolves the re-association request frame of the station STA, and sends a re-association response frame to the station STA.

1.2) The AC notification is associated with the WTP deletion STA;

1.2.1) The AC sends a CAPWAP Station Configuration Request message to the associated WTP, and the message includes a message element such as Delete Stat ion;

1.2.2) Associated WTP sends CAPWAP Station Configuration Response to AC The message, which contains a Result Code message element, is used to identify the processing result of the CAPWAP Station Conf iguration Request.

1.3) AC notification destination WTP joins STA;

1.3.1) The AC sends a CAPWAP Station Configuration Request message to the destination WTP. The message contains Add Station, GB15629. il Add Station, GB15629. il

The message element such as the Station Session Key; wherein A of the GB15629.11 Station Session Key message element is set to 1 to inform the destination WTP to close the controlled port, and only forward the WAI protocol data from the corresponding STA;

1.3.2) Purpose The WTP sends a CAPWAP Station Configuration Response message to the AC, which contains a Result Code message element, which is used to identify the processing result of the CAPWAP Station Conf iguration Request.

2) STA and AC update the negotiation session key based on BK;

2.1) The AC and the STA perform the WAI unicast key update negotiation process based on the negotiated BK. The method includes: the destination WTP decapsulates the WAI unicast key negotiation data encapsulated by the CAPWAP data encapsulation format from the AC, and then forwards the data to the STA; The WAI unicast key negotiation data from the STA is encapsulated according to the CAPWAP data encapsulation format and sent to the AC;

The process of the WAI multicast key update notification is performed by the AC and the STA. The destination WTP decapsulates the multicast key advertisement data encapsulated by the CAPWAP data encapsulation format from the AC and forwards it to the STA. The multicast key advertisement data is encapsulated according to the CAPWAP data encapsulation format and then sent to the AC.

3) AC and destination WTP perform key synchronization;

3.1) The AC sends a CAPWAP Station Configuration Request message to the destination WTP. The message includes the message elements such as Add Station, GB15629.11 Add Station, GB15629.11 Station Session Key, GB 15629.11 Information Element; according to the MAC address of the STA in the Add Station message element. , the destination WTP1 opens the corresponding controlled port, and forwards all data from the STA, including protocol data and non-WAI protocol data; 3.2) The destination WTP sends a CAPWAP Station Configuration Response message to the AC, which contains a Result Code message element, which is used to identify the processing result of the CAPWAP Station Conf iguration Request information. The present invention also provides a site ST A handover system when a WI is completed by WTP in a convergence WLAN, the system includes an access controller AC, a destination wireless terminal point WTP, an associated WTP, and a station STA; The wireless terminal point WTP is re-associated with the access controller AC; the access controller AC is used to notify the associated wireless terminal point WTP to delete the station STA and notify the destination wireless terminal point WTP to join the station STA; the station STA is also used to access the controller The AC updates the negotiation session key based on the negotiated base key; the access controller AC is also used for key synchronization with the destination wireless terminal point WTP. It should be noted that the above embodiments are only for explaining the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those skilled in the art that: The technical solutions described in the foregoing embodiments are modified, or some of the technical features are equivalently replaced. The modifications and substitutions do not depart from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

A STA switching method when a WP I is completed by a WTP in a convergence WLAN, which is characterized in that:

Step 1. The STA STA reconnects with the access controller AC through the destination wireless terminal point WTP.

Step 2. The STA and the access controller AC update the negotiation session key based on the negotiated base key;

Step 3. The access controller AC and the destination wireless terminal point WTP perform key synchronization.

The STA switching method when the W1 is completed by the WTP in the convergence WLAN according to claim 1, wherein the step 1 includes:

The STA switching method when the WP I is completed by the WTP in the convergence WLAN according to claim 2, wherein the step 1 1 includes:

Step 1 1 1. The STA of the station STA passively listens to the target wireless terminal WTP to obtain the WTP parameter of the destination wireless terminal point including the WAPI information element, and the WAPI information element includes the authentication and confidentiality supported by the destination wireless terminal point WTP. Key management suite and cipher suite;

Step 11 2. In the local MAC mode, the station STA sends a link verification request frame to the destination wireless terminal point WTP, requesting link verification with the destination wireless terminal point WTP, and the destination wireless terminal point WTP is based on the link of the station STA. Verifying the request frame, sending a link verification response frame to the station STA; Step 11 3. After the link verification is successful, the station STA sends a re-association request frame to the access controller AC, requesting re-association with the access controller AC, and the station STA is The re-association request frame includes an identifier of the currently associated wireless terminal point WTP, an identifier of the access controller AC, and a WAP I information element to determine an authentication and key management suite and a cipher suite selected by the station STA, where The authentication and key management suite and cipher suite selected by the station STA are the same as the authentication and key management suite and cipher suite selected when initially associated with the access controller AC; the access controller AC resolves the re-association request frame of the station STA Send a reassociation response frame to the STA.

Step 11 3. After the link verification succeeds, the STA sends a re-association request frame to the access controller AC, and requests the re-association with the access controller AC. The station STA includes the currently associated wireless terminal point WTP in the re-association request frame. Identifying, accessing the identity of the controller AC, and the WAP I information element to determine the authentication and key management suite and cipher suite selected by the site STA, wherein the authentication and key management suite and cipher suite selected by the site STA and its initial The authentication and key management suite and cipher suite selected when accessing the controller AC association are the same; the access controller AC resolves the re-association request frame of the station STA, and sends a re-association response frame to the station STA.

Step 1 11. The station STA actively sends a query request frame to the destination wireless terminal point WTP. After receiving the inquiry request frame of the station STA, the destination wireless terminal point WTP sends an inquiry response frame to the station STA, and the station STA obtains the inquiry response frame. a destination wireless terminal point WTP parameter including a WAP I information element, the WAP I information element includes an authentication and key management suite and a cipher suite supported by the destination wireless terminal point WTP;

Step 11 2. In the local MAC mode, the station STA sends a link to the destination wireless terminal point WTP. Verifying the request frame, requesting link verification with the destination wireless terminal point WTP, and the destination wireless terminal point WTP sends a link verification response frame to the station STA according to the link verification request frame of the station STA; Step 11 3. Link verification After successful, the station STA sends a re-association request frame to the access controller AC, and the request is re-associated with the access controller AC. The station STA includes the identifier of the currently associated wireless terminal point WTP in the re-association request frame, and accesses the controller AC. And the WAP I information element to determine an authentication and key management suite and cipher suite selected by the STA, wherein the authentication and key management suite and cipher suite selected by the STA are associated with the access controller AC for the first time The selected authentication and key management suite and cipher suite are the same; the access controller AC resolves the re-association request frame of the station STA, and sends a re-association response frame to the station STA.

Step 1 11. The station STA actively sends a query request frame to the destination wireless terminal point WTP. After receiving the inquiry request frame of the station STA, the destination wireless terminal point WTP sends an inquiry response frame to the station STA, and the station STA receives the inquiry response frame. Obtaining a parameter of a destination wireless terminal point WTP including a WAP I information element, the WAP I information element including an authentication and key management suite and a cipher suite supported by the destination wireless terminal point WTP;

Step 11 3. After the link insurance certificate is successful, the STA sends a re-association request frame to the access controller AC, and requests to re-associate with the access controller AC. The station STA includes the currently associated wireless terminal point WTP in the re-association request frame. Identification, access controller AC identity, and WAP I information element to determine the authentication and key management suite and cipher suite selected by the site STA, wherein the site STA selects the authentication and key management suite and cipher suite and The authentication and key management suite and cipher suite are selected when initially associated with the access controller AC; the access controller AC resolves the re-association request frame of the station STA, and sends a re-association response frame to the station STA. The STA switching method when the WPI is completed by the WTP in the convergence WLAN according to any one of claims 2-6, wherein the step 12 includes:

Step 121: The access controller AC sends a wireless access point control and configuration protocol to the associated wireless terminal point WTP. The AP APAP site S TA configuration request message includes a message element such as deleting the station ST A;

Step 122: The associated wireless terminal point WTP sends a C AP WAP station STA configuration response message to the access controller AC, where the message includes a result code message element, which is used to identify the processing result of the CAPWAP site STA configuration response message.

The STA switching method when the WPI is completed by the WTP in the convergence WLAN according to any one of claims 2-7, wherein the step 13 includes:

Step 1 31: The access controller AC sends a CAPWAP station STA configuration request message to the destination wireless terminal point WTP, where the message includes the joining station STA, GB1 5629. 1 1 joins the station STA, GB15629. 1 1 STA STA session key message element Wherein, A of the GB15629.1 site STA session key message element is set to 1 for informing the destination wireless terminal that the WTP closes the controlled port, and only forwards the WA I protocol data from the corresponding station STA;

Step 1 32. Destination wireless terminal point The WTP sends a CAPWAP STA STA configuration response message to the access controller AC, which includes a result code message element, which is used to identify the processing result of the STA configuration response message to the CAPWAP station.

The STA switching method when the WTP is completed by the WTP in the convergence WLAN according to any one of claims 1 to 8, wherein the step 2 specifically includes:

Step 21: The access controller AC and the station STA perform an I unicast key update negotiation process based on the negotiated base key. The method includes: the destination wireless terminal point WTP pairs the WA I encapsulated in the CAPWAP data encapsulation format from the access controller AC. The unicast key negotiation data is decapsulated and then forwarded to the STA; the WAI unicast key negotiation data from the STA is encapsulated in the CAPWAP data encapsulation format and sent to the access controller AC;

Step 22: The access controller AC and the station STA perform a WAI multicast key update notification process; The destination wireless terminal point WTP decapsulates the WA I multicast key advertisement data encapsulated in the CAPWAP data encapsulation format from the access controller AC and forwards it to the station STA; and advertises the WA I multicast key from the station STA. The data is encapsulated in the C APWAP data encapsulation format and sent to the access controller AC.

The STA switching method when the WPI is completed by the WTP in the convergence WLAN according to any one of claims 1 to 9, wherein the step 3 includes:

Step 31: The access controller AC sends a CAPWAP site STA configuration request message to the destination wireless terminal point WTP, where the message includes the joining station STA, GB1 5629. 1 1 joins the station STA, GB15629. 1 1 station STA session key, GB 15629 1 1 message element such as information element; 4) according to the MAC address of the station STA in the STA message element of the joining station, the destination wireless terminal point WTP opens the corresponding controlled port, and forwards all data from the STA of the station, including the WAI protocol. Data and non-WAI protocol data;

Step 32: The destination wireless terminal point WTP sends a CAPWAP station STA configuration response message to the access controller AC, which includes a result code message element, which is used to identify the processing result of the STA configuration response message to the CAPWAP station.

A STA switching system when a WP I is completed by a WTP in a convergence WLAN, wherein the system includes an access controller AC, a destination wireless terminal point WTP, an associated WTP, and a station STA; Re-associating the connection with the access controller AC through the destination wireless terminal point WTP; the access controller AC is configured to notify the associated wireless terminal point WTP to delete the station STA and notify the destination wireless terminal point WTP to join the station STA; It is further configured to update the negotiation session key with the access controller AC based on the negotiated base key; the access controller AC is further configured to perform key synchronization with the destination wireless terminal point WTP.