Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04W—WIRELESS COMMUNICATION NETWORKS
  • H04W36/00—Hand-off or reselection arrangements
  • H04W36/0005—Control or signalling for completing the hand-off
  • H04W36/0011—Control or signalling for completing the hand-off for data sessions of end-to-end connection
  • H04W36/0033—Control or signalling for completing the hand-off for data sessions of end-to-end connection with transfer of context information

Definitions

• the present invention relates to a STA switching method and a system thereof when WPI is completed by WTP in a convergence WLAN. Background technique
• the STA (Station) switching method in the WLAN (Wireless Local Area Network) based on the WLAN Authentication and Privacy Infrastructure (WAPI) protocol is proposed under the autonomous WLAN architecture and cannot be directly applied to WAPI-based converged WLAN architecture.
• access control devices such as access controllers (ACs), wireless switches, or wireless routers centrally manage WLAN authentication and policy enforcement functions. These devices can also provide centralized bridging, forwarding user data, and so on.
• the present invention provides a convergence WLAN architecture when wirelessly implemented by a wireless terminal point WTP (Wireless Terminal Point).
• WTP Wireless Terminal Point
• the access controller here can also be replaced by a device such as a wireless switch or a wireless router.
• the technical solution of the present invention is:
• the method for switching between the wireless terminal points WTP of the station ST A under the same access controller AC when the wireless terminal point WTP completes the WI in the convergence type WLAN, and the convergence mode is The STA switching method when the WTP completes the WI includes the following steps: Step 1.
• the STA of the station re-associates with the access controller AC through the destination wireless terminal point WTP;
• Step 2 The site S T A and the access controller AC update the negotiation session key based on the negotiated base key;
• Step 3 The access controller AC and the destination wireless terminal point WTP perform key synchronization; the above step 1 includes the following steps:
• Step 11 The STA STA reconnects with the access controller AC through the destination wireless terminal point WTP.
• Step 12 The access controller AC notifies the associated wireless terminal point that the WTP deletes the STA; Step 1 3. The access controller AC notifies the destination wireless terminal that the WTP joins the STA.
• the above step 1 1 may include the following steps:
• Step 1 11 The STA passively listens to the destination wireless terminal point WTP beacon frame, which is obtained.
• the WAPI information element includes the WTP parameters of the destination wireless terminal, and the WAPI information element includes the destination wireless terminal point WTP-supported authentication and key management suite and cipher suite;
• Step 112 In the local media access control MAC (Med ium Acce s ss Cont ro l) mode, the station STA sends a link verification request frame to the destination wireless terminal point WTP, requesting link verification with the destination wireless terminal point WTP. And the destination wireless terminal point WTP sends a link verification response frame to the station STA according to the link verification request frame of the station STA;
• MAC Medium Acce s ss Cont ro l
• Step 11 3 After the link verification succeeds, the STA sends a re-association request frame to the access controller AC, and requests the re-association with the access controller AC.
• the station STA includes the currently associated wireless terminal point WTP in the re-association request frame. Identifying, accessing the identity of the controller AC, and the WAP I information element to determine the authentication and key management suite and cipher suite selected by the site STA, wherein the authentication and key management suite and cipher suite selected by the site STA and its initial Access controller The authentication and key management suite and cipher suite selected at the time of AC association are the same; the access controller AC resolves the re-association request frame of the station STA, and sends a re-association response frame to the station STA.
• the above step 1 1 may include the following steps:
• Step 1 1 The STA STA passively listens to the WPT beacon frame of the destination wireless terminal point, and obtains the parameter of the destination wireless terminal point WTP including the WAP I information element, where the WAP I information element includes the destination wireless terminal point WTP support. Authentication and key management suite and cipher suite;
• Step 1 12 In the split MAC mode, the station STA sends a link verification request frame to the access controller AC, requesting link verification with the access controller AC, and the access controller AC determines the frame according to the link verification request of the station STA. Sending a link verification response frame to the station S TA;
• Step 1 1 3 After the link authentication succeeds, the station STA sends a re-association request frame to the access controller AC, requesting re-association with the access controller AC, and the station STA includes the currently associated wireless terminal point in the re-association request frame.
• the identity of the WTP, the identity of the access controller AC, and the WAP I information element to determine the authentication and key management suite and cipher suite selected by the site STA, wherein the authentication and key management suite and cipher suite selected by the site STA and The authentication and key management suite and cipher suite are selected when they are first associated with the access controller AC; the access controller AC resolves the re-association request frame of the station STA, and sends a re-association response frame to the station STA.
• the above step 1 1 may include the following steps:
• Step 1 1 The station STA actively sends a query request frame to the destination wireless terminal point WTP. After receiving the inquiry request frame of the station STA, the destination wireless terminal point WTP sends an inquiry response frame to the station STA, and the station STA receives the inquiry response frame. Obtaining a parameter of a destination wireless terminal point WTP including a WAP I information element, the WAP I information element including an authentication and key management suite and a cipher suite supported by the destination wireless terminal point WTP;
• Step 1 1 2 In the local MAC mode, the station STA sends a link verification request frame to the destination wireless terminal point WTP, requesting link verification with the destination wireless terminal point WTP, and the destination wireless terminal point WTP is based on the chain of the station STA.
• the path verification request frame sends a link verification response frame to the station STA.
• Step 1 1 3 After the link risk certificate is successful, the station STA sends a re-association to the access controller AC. Requesting a frame, the request is re-associated with the access controller AC, and the station STA includes the identifier of the currently associated wireless terminal point WTP, the identifier of the access controller AC, and the WAPI information element in the re-association request frame to determine the authentication selected by the station STA.
• the access controller AC resolves the reassociation request frame of the station STA, and sends a reassociation response frame to the station STA.
• step 11 includes the following steps:
• Step 111 The station STA actively sends a query request frame to the destination wireless terminal point WTP. After receiving the inquiry request frame of the station STA, the destination wireless terminal point WTP sends a query response frame to the station STA, and the station STA obtains the query response frame to obtain the frame.
• the WAPI information element includes a WTP parameter of the destination wireless terminal, and the WAPI information element includes an authentication and key management suite and a cipher suite supported by the destination wireless terminal point WTP;
• Step 112 In the split MAC mode, the station STA sends a link verification request frame to the access controller AC, requesting link verification with the access controller AC, and the access controller AC determines the request frame according to the link STA of the station STA. Sending a link ⁇ danger response frame to the station STA;
• Step 113 After the link verification succeeds, the station STA sends a re-association request frame to the access controller AC, and the request is re-associated with the access controller AC.
• the station STA includes the identifier of the currently associated wireless terminal point WTP in the re-association request frame. Accessing the identity of the controller AC and the WAPI information element to determine the authentication and key management suite and cipher suite selected by the STA, wherein the authentication and key management suite and cipher suite selected by the STA and its initial access The authentication and key management suite and cipher suite selected by the controller AC are the same; the access controller AC resolves the re-association request frame of the station STA, and sends a re-association response frame to the station STA.
• step 12 The specific steps of step 12 above are as follows:
• Step 121 The access controller AC sends a Control Access and Provisioning Protocol (CAPWAP) to the associated wireless terminal point WTP, and the feSTA has a Station Configuration Request (Station Configuration Request). a message containing a message element such as a delete station STA (Delete Station);
• CAPWAP Control Access and Provisioning Protocol
• Step 122 The associated wireless terminal point WTP sends a CAPWAP STA configuration response (Station Configuration Response) message to the access controller AC, where the Result Code message element is included, which is used to identify the processing of the CAPWAP STA configuration request message. result.
• CAPWAP STA configuration response Selection Configuration Response
• step 13 The specific steps of step 13 above are as follows:
• Step 131 The access controller AC sends a CAPWAP STA configuration request (Station Configuration Request) message to the destination wireless terminal point WTP, where the message includes the joining station STA (Add Station) and the GB15629.11 joining station STA (GB15629.11 Add Station). , GB15629.11 site STA session key (GB15629. il Station Session Key) and other message elements; wherein, GB15629.11 site STA session key message element A is set to 1 to inform the destination wireless terminal point WTP closed control port, wireless LAN only forwards a corresponding view from the other station STA 1 J infrastructure WAI (WLAN Authentication infrastructure) protocol data;
• CAPWAP STA configuration request Selection Configuration Request
• Step 132 The destination wireless terminal point WTP sends a CAPWAP STA configuration response (Station Configuration Response) message to the access controller AC, where the result message (Result Code) message element is used to identify the processing result of the CAPWAP site STA configuration request message. .
• step 2 The specific steps of step 2 above are as follows:
• Step 21 The access controller AC and the station STA perform an I unicast key update negotiation process based on the negotiated base key.
• the method includes: the destination wireless terminal point WTP wraps the WAI unicast of the CAPWAP data encapsulation format encapsulation from the access controller AC.
• the key negotiation data is decapsulated and then forwarded to the STA; the WAI unicast key negotiation data from the STA is encapsulated according to the CAP P data encapsulation format and sent to the access controller AC;
• Step 22 The access controller AC and the station STA perform a WAI multicast key update notification process.
• the method includes: the destination wireless terminal point WTP unpacks the WAI multicast key advertisement data encapsulated by the CAPWAP data encapsulation format of the access controller AC. Forwarded to the site STA; WAI from the site STA The multicast key advertisement data is encapsulated according to the CAPWAP data encapsulation format and sent to the access controller AC.
• step 3 The specific steps of step 3 above are as follows:
• Step 31 The access controller AC sends a CAPWAP STA configuration request (Station Configuration Request) message to the destination wireless terminal point WTP, where the message includes the STA station (Add Station) and the GB15629.11 join station STA (GB15629.11 Add Station), GB15629.11 site STA session key (GB15629. il Station Session Key), GB15629.11 information element (GB 15629.11 Information Element) and other message elements; according to the site STA message element in the site STA message MAC address, destination wireless The terminal point WTP opens the corresponding controlled port, and forwards all data from the STA of the station, including WAI protocol data and non-l protocol data;
• Step 32 The destination wireless terminal point WTP sends a CAPWAP site STA Configuration Response (Station Configuration Response) message to the access controller AC, where the result code (Result Code) message element is used to identify the processing result of the CAPWAP site STA configuration request message.
• CAPWAP site STA Configuration Response Selection Configuration Response
• Result Code result Code
• a STA switching system in a convergence WLAN when WPI is completed by WTP includes an access controller AC, a destination wireless terminal point WTP, an associated WTP, and a station STA; the station STA is used to pass the destination wireless terminal point WTP and The access controller AC performs re-association connection; the access controller AC is configured to notify the associated wireless terminal point WTP to delete the station STA and notify the destination wireless terminal point WTP to join the station ST A; the station STA is also used to negotiate with the access controller AC based on The base key updates the negotiation session key; the access controller AC is also used for key synchronization with the destination wireless terminal point WTP.
• the present invention provides a STA handover procedure when the WTP is completed by the WTP in the convergence WLAN architecture based on the WAPI protocol.
• the STA and the AC re-schedule the session key based on the negotiated BK.
• the method can quickly and securely switch between different WTPs of the STA under the same AC.
• FIG. 1 is a schematic diagram of switching between WTPs of STAs under the same AC
• FIG. 2 is a flow chart of switching between WTPs of STAs under the same AC. detailed description
• the above steps 1 1 ) may specifically include:
• the WTP beacon frame of the destination obtains the relevant parameters of the destination WTP including the WAPI information element, which includes the authentication and key management suite and cipher suite supported by the destination WTP. Or the STA sends an inquiry request frame to the destination WTP. After receiving the inquiry request frame of the STA, the destination WTP 1 sends a probe response frame to the STA. After receiving the inquiry response frame, the STA obtains the destination including the WAP I information element. Related parameters, the WAP I information element includes the authentication and key management suite and cipher suite supported by the destination WT;
• the STA sends a link verification request frame to the destination WTP to request link verification with the destination WTP.
• the destination WTP sends a link to the STA according to the link verification request frame of the STA. Verifying the response frame; in the split MAC mode, the STA sends a link verification request frame to the AC, requesting link verification with the AC, and the AC sends a link verification response frame to the STA according to the link verification request frame of the STA;
• the STA After the link is successfully authenticated, the STA sends a re-association request frame to the AC, requesting re-association with the AC.
• the STA includes the identifier of the currently associated WTP, the identity of the AC, and the WAP I in the re-association request frame.
• the above steps 1 1 ) may also specifically include:
• the STA STA passively listens to the destination wireless terminal WTP beacon frame to obtain the WTP parameters of the destination wireless terminal point including the WAP I information element, and the WAP H message element includes the destination wireless terminal point WTP support. Authentication and key management suite and cipher suite;
• the station STA sends a link verification request frame to the access controller AC, requesting link verification with the access controller AC, and the access controller AC performs link verification according to the station STA. Requesting a frame, sending a link verification response frame to the station S TA;
• the station STA sends a re-association request frame to the access controller AC, requesting re-association with the access controller AC, and the station STA includes the currently associated wireless terminal in the re-association request frame.
• the authentication and key management suite and cipher suite are selected when they are first associated with the access controller AC; the access controller AC resolves the re-association request frame of the station STA, and sends a re-association response frame to the station STA.
• the above steps 1 1 ) may further include:
• the station STA actively sends a probe request frame to the destination wireless terminal point WTP. After receiving the inquiry request frame of the station STA, the destination wireless terminal point WTP sends a probe response frame to the station STA, and the station STA receives the probe response frame. That is, obtaining a parameter of a destination wireless terminal point WTP including a WAP I information element, where the WAP I information element includes an authentication and key management suite and a cipher suite supported by the destination wireless terminal point WTP;
• the station STA sends a link verification request frame to the destination wireless terminal point WTP, requesting link verification with the destination wireless terminal point WTP, and the destination wireless terminal point WTP is based on the station STA.
• a link verification request frame sending a link verification response frame to the station STA;
• the station STA sends a reassociation request to the access controller AC.
• the frame, the request is re-associated with the access controller AC, and the station STA includes the identifier of the currently associated wireless terminal point WTP, the identifier of the access controller AC, and the WAP I information element in the re-association request frame to determine the authentication selected by the station STA.
• the access controller AC resolves the reassociation request frame of the station STA, and sends a reassociation response frame to the station STA.
• the above step 11) may further specifically include:
• the station STA actively sends a query request frame to the destination wireless terminal point WTP. After receiving the inquiry request frame of the station STA, the destination wireless terminal point WTP sends an inquiry response frame to the station STA, and the station STA obtains the inquiry response frame.
• a parameter of a destination wireless terminal point WTP including a WAPI information element, the WAPI information element including an authentication and key management suite and a cipher suite supported by the destination wireless terminal point WTP;
• the station STA sends a link verification request frame to the access controller AC, requesting link verification with the access controller AC, and the access controller AC according to the link verification request frame of the station STA Sending a link ⁇ risk response frame to the station STA;
• the station STA sends a re-association request frame to the access controller AC, requesting re-association with the access controller AC, and the station STA includes the currently associated wireless terminal point WTP in the re-association request frame. Identifying, accessing the identity of the controller AC, and the WAP I information element to determine the authentication and key management suite and cipher suite selected by the site STA, wherein the authentication and key management suite and cipher suite selected by the site ST A and its initial The authentication and key management suite and cipher suite are selected when associated with the access controller AC; the access controller AC resolves the re-association request frame of the station STA, and sends a re-association response frame to the station STA.
• the AC notification is associated with the WTP deletion STA
• the AC sends a CAPWAP Station Configuration Request message to the associated WTP, and the message includes a message element such as Delete Stat ion;
• Associated WTP sends CAPWAP Station Configuration Response to AC
• the message which contains a Result Code message element, is used to identify the processing result of the CAPWAP Station Conf iguration Request.
• the AC sends a CAPWAP Station Configuration Request message to the destination WTP.
• the message contains Add Station, GB15629. il Add Station, GB15629. il
• the message element such as the Station Session Key; wherein A of the GB15629.11 Station Session Key message element is set to 1 to inform the destination WTP to close the controlled port, and only forward the WAI protocol data from the corresponding STA;
• the WTP sends a CAPWAP Station Configuration Response message to the AC, which contains a Result Code message element, which is used to identify the processing result of the CAPWAP Station Conf iguration Request.
• the AC and the STA perform the WAI unicast key update negotiation process based on the negotiated BK.
• the method includes: the destination WTP decapsulates the WAI unicast key negotiation data encapsulated by the CAPWAP data encapsulation format from the AC, and then forwards the data to the STA;
• the WAI unicast key negotiation data from the STA is encapsulated according to the CAPWAP data encapsulation format and sent to the AC;
• the process of the WAI multicast key update notification is performed by the AC and the STA.
• the destination WTP decapsulates the multicast key advertisement data encapsulated by the CAPWAP data encapsulation format from the AC and forwards it to the STA.
• the multicast key advertisement data is encapsulated according to the CAPWAP data encapsulation format and then sent to the AC.
• the AC sends a CAPWAP Station Configuration Request message to the destination WTP.
• the message includes the message elements such as Add Station, GB15629.11 Add Station, GB15629.11 Station Session Key, GB 15629.11 Information Element; according to the MAC address of the STA in the Add Station message element.
• the destination WTP1 opens the corresponding controlled port, and forwards all data from the STA, including protocol data and non-WAI protocol data;
• the destination WTP sends a CAPWAP Station Configuration Response message to the AC, which contains a Result Code message element, which is used to identify the processing result of the CAPWAP Station Conf iguration Request information.
• the present invention also provides a site ST A handover system when a WI is completed by WTP in a convergence WLAN, the system includes an access controller AC, a destination wireless terminal point WTP, an associated WTP, and a station STA;
• the wireless terminal point WTP is re-associated with the access controller AC;
• the access controller AC is used to notify the associated wireless terminal point WTP to delete the station STA and notify the destination wireless terminal point WTP to join the station STA;
• the station STA is also used to access the controller
• the AC updates the negotiation session key based on the negotiated base key;
• the access controller AC is also used for key synchronization with the destination wireless terminal point WTP.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Mobile Radio Communication Systems (AREA)

Applications Claiming Priority (2)

Publications (1)

Family

ID=41175480

Family Applications (1)

Country Status (2)

Cited By (1)

Families Citing this family (2)

Citations (5)

Family Cites Families (3)

• 2009
  • 2009-05-14 CN CN2009100225235A patent/CN101557591B/zh active Active
  • 2009-12-23 WO PCT/CN2009/075899 patent/WO2010130138A1/zh active Application Filing

Patent Citations (5)

Also Published As

Similar Documents

Legal Events