WO2014127717A1

WO2014127717A1 - Method, device and network system to ensure positioning validity

Info

Publication number: WO2014127717A1
Application number: PCT/CN2014/072263
Authority: WO
Inventors: 陈淼; 丁志明; 杜振国
Original assignee: 华为终端有限公司
Priority date: 2013-02-19
Filing date: 2014-02-19
Publication date: 2014-08-28
Also published as: CN103997481B; CN103997481A

Abstract

Provided in the embodiments of the present invention are a method, a device and a network system for ensuring positioning validity, the method comprising: receiving a positioning configuration request frame at least comprising an integrity location temporal key (ILTK); generating a location tracking notification frame which includes message integrity information generated by means of the ILTK, said message integrity information being used by the positioning device receiving the location tracking notification frame for testing the integrity of same; transmitting the location tracking notification frame. By verifying that a received location tracking notification frame has not been subjected to malicious tampering or copying before location data is sent to a location server, the technical solution of the present invention is able to improve positioning security and prevent malicious attacks on positioning systems.

Description

The present application claims priority to Chinese Patent Application No. 201310053499.8, filed on Feb. 19, 2013, the entire disclosure of which is hereby incorporated by reference.

TECHNICAL FIELD Embodiments of the present invention relate to communication technologies, and in particular, to a method, an apparatus, and a network system for ensuring positioning effectiveness. BACKGROUND OF THE INVENTION With the development of social economy and science and technology, more and more large and complex buildings are appearing in our lives. These large buildings have extremely complex internal structures, which creates the need for positioning and navigation within these buildings. However, traditional Global Positioning System (GPS) signals cannot be received indoors, in order to meet indoor positioning needs. There is a need to develop a positioning system that uses other signals.

(Infrared, referred to as IR), Ultra Wideband (UWB), Radio Frequency Identification (RFID), Bluetooth, and Wireless Fidelity

Indoor positioning system for technologies such as Wireless Fidelity (Wi-Fi).

In the IEEE 802.il wireless communication system protocol, a mechanism for positioning is provided, and the location initiator can perform location tracking on a target workstation (Station, referred to as STA). The specific process is: the positioning initiator sends a positioning configuration request frame to the target workstation, and the sending target period, the destination address, and the channel information of the specified target station in the positioning configuration request frame are sent; the target workstation is in the designated channel according to the specified period. The location tracking notification frame is sent to the specified address; the receiver of the location tracking notification frame can measure the data required for the positioning and the data contained in the location tracking notification frame after the location tracking notification frame is received for location estimation of the target workstation. The receiver of the location initiator and the location tracking notification frame is usually an AP, and the receiver of the location tracking notification frame needs to have multiple, and may work on different channels separately, or multiple APs for positioning may be deployed on one channel. Tracked workstations use the broadcast/multicast method to send location tracking Know the frame. The destination address in the location tracking configuration frame indicates the address of the AP that receives the location tracking notification frame or the broadcast/multicast address. The specific location estimation may be completed by the positioning server behind the receiver of the location tracking notification frame, that is, the AP for positioning receives the location tracking notification frame to obtain the data required for the positioning, and then sends the data to the positioning server, and the positioning server according to the multiple The location-related data obtained by the APs is used to estimate the location of the target workstation.

However, the positioning mechanism in the existing wireless communication system protocol has a problem of low security, and the positioning system is vulnerable to malicious attacks. For example, the attack device sends a location tracking notification frame at another location using the address of the target workstation, so that the positioning system obtains The unrealistic location of the target workstation causes errors in various applications based on this positioning method, causing unpredictable damage. SUMMARY OF THE INVENTION Embodiments of the present invention provide a method, a device, and a network system for ensuring location validity, which are used to improve the security of positioning and prevent a positioning error caused by a malicious attack.

In a first aspect of the present invention, a method for ensuring location validity is provided, including:

Receiving a positioning configuration request frame, where the positioning configuration request frame includes at least an integrity positioning temporary key ILTK;

Generating a location tracking notification frame, the location tracking notification frame including message integrity information generated using the ILTK, the message integrity information being used by a positioning device receiving the location tracking notification frame to verify the location tracking notification frame Integrity

Sending the location tracking notification frame.

In a first possible implementation manner of the first aspect, the ILTK is encrypted and carried in the positioning configuration request frame.

With reference to the first aspect, or the first possible implementation manner of the first aspect, in the second possible implementation manner of the first aspect, the positioning configuration request frame further includes periodically sending the location tracking notification frame The information and the working channel information of the positioning device, the working channel information of the positioning device indicates a channel used for sending the location tracking notification frame, and the location tracking notification frame further includes a tracking sequence number, where the tracking sequence number is The one-way recursive processing is performed when the location tracking notification frame is generated.

According to a second possible implementation manner of the first aspect, in a third possible implementation manner of the first aspect, the location tracking notification frame further includes working channel information of the positioning device. In a second aspect of the present invention, a method for ensuring positioning effectiveness is provided, including:

Receiving a location tracking notification frame sent by the station STA, the location tracking notification frame containing message integrity information generated by using the integrity positioning temporary key ILTK;

And verifying the integrity of the location tracking notification frame according to the ILTK and the message integrity information, so as to obtain data required to locate the STA according to the location tracking notification frame when the message integrity information is correct.

In a first possible implementation manner of the second aspect, before the location tracking notification frame sent by the receiving station STA, the method further includes:

Sending a positioning configuration request frame to the STA, where the positioning configuration request frame includes at least the ILTK.

According to the first possible implementation manner of the second aspect, in a second possible implementation manner of the second aspect, the ILTK is encrypted and carried in the positioning configuration request frame.

With reference to the second aspect, or any one of the first or the second possible implementation manner of the second aspect, in a third possible implementation manner of the second aspect, the positioning configuration request frame further includes a periodicity Transmitting the information of the location tracking notification frame and the working channel information of the positioning device, where the working channel information of the positioning device indicates the channel used for sending the location tracking notification frame, and the location tracking notification frame further includes a tracking sequence number. The tracking sequence number is subjected to one-way gradation processing each time the location tracking notification frame is generated;

Correspondingly, the method further includes:

It is judged whether or not the location tracking notification frame identical to the tracking sequence number included in the location tracking notification frame has been received.

According to a third possible implementation manner of the second aspect, in a fourth possible implementation manner of the second aspect, the location tracking notification frame further includes working channel information of the positioning device; The method also includes:

Comparing whether the working channel information included in the location tracking notification frame is consistent with its own working channel information.

According to a third aspect of the present invention, a workstation apparatus is provided, including:

a first receiving module, configured to receive a positioning configuration request frame, where the positioning configuration request frame includes at least an integrity positioning temporary key ILTK;

a first processing module, configured to generate a location tracking notification frame, where the location tracking notification frame includes message integrity information generated by using the ILTK, where the message integrity information is used to receive the location The positioning device of the location tracking notification frame checks the integrity of the location tracking notification frame. The first sending module is configured to send the location tracking notification frame.

In a first possible implementation manner of the third aspect, the ILTK is encrypted and carried in the positioning configuration request frame.

With the third aspect or the first possible implementation manner of the third aspect, in a second possible implementation manner of the third aspect, the positioning configuration request frame further includes periodically sending the location tracking notification frame The information and the working channel information of the positioning device, the working channel information of the positioning device indicates a channel used for sending the location tracking notification frame, and the location tracking notification frame further includes a tracking sequence number, where the tracking sequence number is The one-way recursive processing is performed when the location tracking notification frame is generated.

According to a second possible implementation manner of the third aspect, in a third possible implementation manner of the third aspect, the location tracking notification frame further includes working channel information of the positioning device.

A fourth aspect of the present invention provides a positioning apparatus, including:

a second receiving module, configured to receive a location tracking notification frame sent by the workstation STA, where the location tracking notification frame includes message integrity information generated by using the integrity positioning temporary key ILTK; and a second processing module, configured to use, according to the ILTK And verifying the integrity of the location tracking notification frame with the message integrity information to obtain data required to locate the STA according to the location tracking notification frame when the message integrity information is correct.

In a first possible implementation manner of the fourth aspect, the method further includes:

And a second sending module, configured to send a positioning configuration request frame to the STA before the location tracking notification frame sent by the receiving station STA, where the positioning configuration request frame includes at least the ILTK.

According to the first possible implementation manner of the fourth aspect, in a second possible implementation manner of the fourth aspect, the ILTK is encrypted and carried in the positioning configuration request frame.

With reference to the fourth aspect, or any one of the first or the second possible implementation manner of the fourth aspect, in a third possible implementation manner of the fourth aspect, the positioning configuration request frame further includes a periodicity Transmitting the information of the location tracking notification frame and the working channel information of the positioning device, where the working channel information of the positioning device indicates the channel used for sending the location tracking notification frame, and the location tracking notification frame further includes a tracking sequence number. The tracking sequence number is subjected to one-way gradation processing each time the location tracking notification frame is generated;

Correspondingly, the second processing module is further configured to: It is judged whether or not the location tracking notification frame identical to the tracking sequence number included in the location tracking notification frame has been received.

According to a third possible implementation manner of the fourth aspect, in a fourth possible implementation manner of the fourth aspect, the location tracking notification frame further includes working channel information of the positioning device; The second processing module is further configured to:

A fifth aspect of the present invention provides a network system, comprising: the workstation device in any one of the possible implementations of the third aspect or the third aspect, and any one of the fourth aspect or the fourth aspect The positioning device in the implementation, and the positioning server.

An embodiment of the present invention provides a method, a device, and a network system for ensuring the validity of a positioning. The STA first receives a positioning configuration request frame including at least an ILTK, and generates a location tracking notification frame including message integrity information generated by using the ILTK. The message integrity information is used by the positioning device receiving the location tracking notification frame to verify the integrity of the location tracking notification frame, and send the location tracking notification frame for receiving the location tracking notification frame by the target AP according to the receiving The ILTK of the self-positioning server verifies the location tracking notification frame, which can improve the security of the positioning and prevent the positioning system from being maliciously attacked. BRIEF DESCRIPTION OF THE DRAWINGS In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, a brief description of the drawings used in the embodiments or the prior art description will be briefly described below. The drawings are some embodiments of the present invention, and those skilled in the art can obtain other drawings based on these drawings without any inventive labor.

1 is a flowchart of Embodiment 1 of a method for ensuring location validity provided by the present invention; FIG. 2A is a schematic diagram of a format of a positioning parameter element of a positioning configuration request frame in Embodiment 1 of a method for ensuring location validity according to the present invention;

2B is a schematic diagram of a format of a message integrity code element in Embodiment 1 of a method for ensuring location validity according to the present invention;

3 is a flowchart of Embodiment 2 of a method for ensuring location validity provided by the present invention; FIG. 4 is a flowchart of Embodiment 3 of a method for ensuring location validity provided by the present invention; FIG. 6 is a schematic structural diagram of Embodiment 1 of a workstation device according to the present invention; FIG. 7 is a schematic structural diagram of Embodiment 2 of a workstation device according to the present invention;

FIG. 8 is a schematic structural diagram of Embodiment 1 of a positioning device according to the present invention;

FIG. 9 is a schematic structural diagram of Embodiment 2 of a positioning device according to the present invention;

FIG. 10 is a schematic structural diagram of Embodiment 1 of a network system according to the present invention. The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. The embodiments are a part of the embodiments of the invention, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

A scenario in which the technical solution of the present invention can be applied is a positioning service based on a wireless communication system, and an access point (AP) can be used to initiate a location service, so that the STA can be used for location tracking. The location tracking configuration, after the STA successfully responds to the location tracking configuration, the STA sends a positioning notification to the specified target AP on the specified channel according to the configuration information, so that the target AP measures the corresponding positioning data, so that the positioning server obtains the positioning according to the positioning. The data estimates the position coordinates of the STA.

FIG. 1 is a flowchart of Embodiment 1 of a method for ensuring location validity provided by the present invention, as shown in FIG. 1

S101. Receive a positioning configuration request frame, where the positioning configuration request frame includes at least an ILTK.

For example, after the associated AP initiates the location service, the location configuration request frame is sent to the STA for location tracking configuration. The location configuration request frame in this embodiment includes at least an integrity location temporary key (Integrity Location Temporal Key). , referred to as ILTK), ILTK is sent by the location server to the associated AP when the location service starts.

Optionally, the ILTK is encrypted and carried in the positioning configuration request frame.

2A is a schematic diagram of a format parameter of a positioning parameter of a positioning configuration request frame in Embodiment 1 of the method for ensuring the validity of the positioning provided in the present invention. As shown in FIG. 2A, the positioning parameter element in the positioning configuration request frame in the prior art is located. Element includes element ID and length to And locating the three elements of the sub-element, the embodiment carries the ILTK by adding a security subelement (Security Subelement) in the positioning parameter element included in the positioning configuration request frame, wherein the security sub-element may further include the sub-element ID and the length. And the three fields of the ILTK, after receiving the positioning configuration request frame, the STA may perform broadcast/multicast integrity protection on the location tracking notification frame sent by the STA to each target AP according to the read ILTK (Broadcast/Multicast Integrity Protocol, referred to as ΒΙΡ) Package processing.

It can be understood that the positioning configuration request frame may further include a plurality of working channel numbers for indicating that the location tracking notification frame is sent to each target channel on the working channel corresponding to each working channel number.

Specifically, the target of the location service is configured by the location server, and the location configuration request frame may include multiple working channel numbers, and the location configuration request frame including the working channel number is sent to the STA, where A location tracking notification frame is sent to each of the working channels corresponding to each working channel number, and the plurality of working channel numbers may be included in the positioning sub-element in the positioning configuration request frame.

S102. Generate a location tracking notification frame, where the location tracking notification frame includes message integrity information generated by using the ILTK, and the message integrity information is used by the positioning device that receives the location tracking notification frame to check the integrity of the location tracking notification frame.

Specifically, the STA may generate message integrity information according to the ILTK, and the message integrity information may specifically be a Message Integrity Code (MIC).

Optionally, the positioning configuration request frame further includes information for periodically transmitting the location tracking notification frame and working channel information of the positioning device, where the working channel information of the positioning device indicates the channel used by the sending location tracking notification frame, and the location tracking notification frame is further Including the tracking sequence number, the tracking sequence number is subjected to one-way recursive processing each time the location tracking notification frame is generated.

Specifically, the tracking sequence number in the location tracking notification frame performs one-way recursive processing each time the location tracking notification frame is generated to ensure the tracking sequence number in the location tracking notification frame received by the target AP in the case of no malicious copying. The fields are different.

For example, the message integrity information, the working channel information of the locating device, and the tracking sequence number may be carried in a Location Message Integrity Code Element (LME). In this embodiment, the LME pair location may be used. Track notification frames for BIP encapsulation.

Optionally, the location tracking notification frame further includes working channel information of the positioning device. Specifically, since the location tracking notification frame is transmitted in different channels, the same tracking sequence number may be used, that is, the tracking sequence number has its own independent space on each channel number and is unidirectional on each channel. In the case of the change processing, the location tracking notification frame further includes the working channel information of the positioning device, and the positioning device can determine whether the received location tracking notification frame is maliciously copied according to the working channel information and the tracking sequence number of the positioning device.

2B is a schematic diagram of a format of an LME in the first embodiment of the method for ensuring the validity of the positioning provided by the present invention. As shown in FIG. 2B, the LME of the embodiment includes six fields: an element ID (Element ID), and a length (Length). Key ID, Channel Number, LIPN, and MIC, where Element ID, Length, KeylD, and MIC are the same as those in the Management MIC Element (MME) in the prior art. The meaning is the same, the Channel Number indicates the channel on which the target AP works, and the location IGTK Packet Number (LIPN) contains 5 bytes, which is a 40-bit unsigned integer, and the location tracking notification frame is sent. Each time the number of times is incremented, the sequence number is unidirectionally changed. The LIPN may be the tracking sequence number in the embodiment, and the location tracking notification frame may be prevented from being retransmitted after being copied, and the channel number may be the working channel information in this embodiment. , for further preventing the location tracking notification frame on a certain channel from being retransmitted after being copied on another channel, if the STA obtains A plurality ILTK, using different ILTK in each designated channel, it may not necessarily be contained in the Channel Number of the LME.

It should be noted that the above LME is only a way of carrying the organization data of the MIC, LIPN and Channel Number information of the embodiment, and the present invention does not limit the manner in which the MIC, LIPN and Channel Number information are carried.

S103. Send a location tracking notification frame.

Specifically, after receiving the positioning configuration request frame sent by the associated AP to instruct the STA to send the location tracking notification frame, the STA sends the positioning configuration to the associated AP according to its own support capability and whether there is a positioning requirement. Or the failed positioning configuration response frame. If the positioning configuration response frame is successful, the positioning server sends the ILTK to the positioning target AP. It can be understood that the positioning server can also send the ILTK to the target AP while sending the ILTK to the associated AP.

Specifically, the MIC uses ILTK to digest the location tracking notification frame so that the attacker (without ILTK) cannot tamper with the location tracking notification frame because any tampering will be checked by the target AP. In order to prevent an attacker from maliciously copying the location tracking notification frame, The tracking sequence number information is added to the location tracking notification frame, and the target AP knows that the tracking sequence number is different in each location tracking notification frame, otherwise it is malicious replication. In addition, since the location tracking notification frame is transmitted in different channels, the same tracking sequence number may be used, that is, the tracking sequence has its own independent space on each channel number and performs one-way transformation on each channel. Therefore, the location tracking notification frame also includes channel number information. It can be understood that if the tracking sequence number is monotonically changed globally, the working channel information may not be carried, and the location tracking notification frame includes the working channel information to better prevent the attacker from maliciously copying the sending location tracking notification frame.

If the location tracking notification frame received by the target AP is not maliciously tampering and is not maliciously copied, the received location tracking notification frame is a valid frame, and the target AP sends the measured positioning data to the positioning server, and the positioning server is short. The location data received from the plurality of target APs in the time estimate the location coordinates of the STA. If the received location tracking notification frame is found to be maliciously falsified or maliciously copied, the measured positioning data is not sent to the positioning server.

In the prior art, there is a problem that other malicious STAs tamper or copy after the location tracking notification frame is audible on the channel. For example, after the malicious STA steers the location tracking notification frame, the frame is copied and sent to different channels, and the target AP receives the target AP. After copying the frames, it is impossible to determine which frames are valid frames, and thus the position of the STA is incorrectly estimated, thereby affecting the accuracy of the positioning.

In the method for ensuring the positioning validity of the embodiment, the STA first receives the positioning configuration request frame including at least the ILTK, and generates a location tracking notification frame including the message integrity information generated by using the ILTK, and the message integrity information is used to receive the location tracking. The positioning device of the notification frame checks the integrity of the location tracking notification frame, and sends a location tracking notification frame, so that the target AP that receives the location tracking notification frame checks the location tracking notification frame according to the ILTK received from the positioning server. After the target AP verifies that the received location tracking notification frame has not been maliciously falsified or maliciously copied, the measured positioning data is sent to the positioning server, and if the received location tracking notification frame is verified to be maliciously falsified or maliciously copied, The measured positioning data is not sent to the positioning server, which can improve the security of the positioning and prevent the positioning system from being maliciously attacked.

FIG. 3 is a flowchart of Embodiment 2 of a method for ensuring the validity of positioning provided by the present invention, as shown in FIG. 3: , ' , , , , ,

S301. Receive a location tracking notification frame sent by the STA, where the location tracking notification frame includes message integrity information generated by using the ILTK.

Specifically, the positioning device in this embodiment may be an AP, and the STA receives the associated AP to send. After the positioning configuration request frame for instructing the STA to send the location tracking notification frame, according to its own support capability and whether there is a positioning requirement, it is determined whether the positioning configuration is successfully accepted, and the positioning configuration response frame of the success or failure is sent to the associated AP. The positioning configuration response frame, the STA sends a location tracking notification frame to the AP according to the configuration of the positioning configuration request frame. The location tracking notification frame contains message integrity information generated using ILTK.

Specifically, the message integrity information in the location tracking notification frame may specifically be a MIC, and the MIC uses the ILTK to perform a digest processing on the location tracking notification frame, so that the attacker (without holding the ILTK) cannot tamper with the location tracking notification frame. Because any tampering will be checked by the target AP.

S302. Verify the integrity of the location tracking notification frame according to the ILTK and the message integrity information, so as to obtain the data required to locate the STA according to the location tracking notification frame when the message integrity information is correct.

Specifically, if the positioning configuration response frame sent by the STA to the associated AP indicates that the positioning configuration is successful, the positioning server sends the ILTK to the positioning target AP. It can be understood that the positioning server may also send the ILTK to the target AP at the same time. Send ILTK.

The AP verifies the location tracking notification frame according to the ILTK sent by the positioning server. If the location tracking notification frame received by the target AP is not maliciously tampering and is not maliciously copied, the received location tracking notification frame is a valid frame, and the target The AP sends the measured positioning data to the positioning server, and the positioning server estimates the position coordinates of the STA according to the positioning data received from the plurality of target APs in a short time, and if the verification finds that the received location tracking notification frame is maliciously tampered with. Or maliciously copied, the measured positioning data is not sent to the positioning server.

The method for ensuring the validity of the positioning provided by the embodiment, the AP receives the location tracking notification frame sent by the STA, and the location tracking notification frame includes the message integrity information generated by using the ILTK, and checks according to the ILTK and the message integrity information sent by the positioning server. The integrity of the location tracking notification frame can improve the security of the positioning, thereby improving the accuracy of the positioning.

FIG. 4 is a flowchart of Embodiment 3 of the method for ensuring the validity of positioning provided by the present invention, as shown in FIG. 4: , ' , , , , and

S401. Send a positioning configuration request frame to the STA, where the positioning configuration request frame includes at least an ILTK, where the positioning configuration request frame further includes information for periodically sending the location tracking notification frame and working channel information of the positioning device, and the working channel information of the positioning device is sent. The location tracking notification uses the channel for the frame. Optionally, the ILTK is encrypted and carried in the positioning configuration request frame.

Specifically, the positioning device in this embodiment may be an AP, and the embodiment may carry the ILTK in the security sub-element Security Subelement added in the positioning parameter element included in the positioning configuration request frame received by the STA, where the security sub- The element may be configured by the STA element ID, the length, and the ILTK field. The STA may receive the positioning configuration request frame, and perform BIP encapsulation processing on the location tracking notification frame sent by the STA to each target AP according to the read ILTK.

It should be noted that the APs in the positioning process can be classified into two types: one is an associated AP that initiates positioning, and also receives a location tracking notification frame; the other is an AP that only accepts the location tracking notification frame for positioning, S401 is The associated AP that initiated the positioning is executed.

5402. Receive a location tracking notification frame sent by the STA, where the location tracking notification frame includes message integrity information generated by using the ILTK, and the location tracking notification frame further includes a tracking sequence number, and the tracking sequence number is used for each time the location tracking notification frame is generated. Change processing.

Specifically, the tracking sequence number in the location tracking notification frame received by the positioning device performs one-way recursive processing each time the location tracking notification frame is generated to ensure that the target AP receives the location tracking notification without malicious copying. The fields of the tracking sequence number in the frame are different.

For example, the message integrity information in the location tracking notification frame sent by the STA to the positioning device, the working channel information of the positioning device, and the tracking sequence number may be carried in the LME, and the location tracking notification frame may be further used by the LME. BIP package.

The LME in this embodiment may be the same as the LME in the first embodiment of the present invention, and details are not described herein.

5403. Determine whether a location tracking notification frame that is the same as the tracking sequence number included in the location tracking notification frame is received.

5404. Check whether the working channel information included in the location tracking notification frame is consistent with its working channel information.

When transmitting a location tracking notification frame in different channels, the same tracking sequence number may be used, that is, the tracking sequence has its own independent space on each channel number and performs one-way gradual processing on each channel. The tracking notification frame also needs to include the working channel information of the positioning device, and the positioning device can determine whether the received location tracking notification frame is maliciously copied according to the working channel information and the tracking sequence number of the positioning device.

Specifically, the target AP according to the ILTK check location integrity of the notification frame may include a malicious tamper check and a malicious copy check, wherein the malicious tamper check is the target AP according to the target AP. The information in the received location tracking notification frame is checked by the message integrity check algorithm to check whether the received location tracking notification frame has been tampered with, if the calculated value of the message integrity information is carried in the location tracking notification frame. If the value of the message integrity information is the same, the received location tracking notification frame has not been tampered with. If not, the received location tracking notification frame has been tampered with; the malicious replication verification includes the target AP comparison location tracking notification frame. Whether the channel number included in the working channel information is consistent with its actual working channel information, and whether the location tracking notification frame that is the same as the tracking sequence number included in the location tracking notification frame is received, if the work included in the location tracking notification frame is included The channel information Channel Number is consistent with its actual working channel information, and the location tracking notification frame that is the same as the tracking sequence number included in the location tracking notification frame is not received, and the received location tracking notification frame is not copied by the malicious STA. Send, if the work channel included in the location tracking notification frame Channel Number information with their actual working channel information is inconsistent, or received over the same track the location notification frame including the tracking position tracking number notification frame, then the received frame is unavailable position tracking notification.

The method for ensuring the validity of the positioning provided by the embodiment, the AP sends a receiving positioning configuration request frame to the STA, and receives the location tracking notification frame sent by the STA. The location tracking notification frame includes message integrity information generated by using the ILTK, and then according to the positioning server. The transmitted ILTK and message integrity information verify the integrity of the location tracking notification frame, which can improve the security of the positioning and improve the accuracy of the positioning. The associated AP is the AP that initiates the positioning, and also receives the location tracking notification frame and performs checksum positioning. The target AP is an AP that only receives the location tracking notification frame for checksum positioning. As shown in the embodiment, the method for ensuring the validity of the positioning includes:

5501. The positioning server sends an ILTK to the associated AP.

S502. The associated AP sends a positioning configuration request frame including at least an ILTK to the STA. For example, the ILTK is encrypted and carried in the positioning configuration request frame.

S503. The STA sends a positioning configuration response frame to the associated AP.

Specifically, after receiving the positioning configuration request frame sent by the associated AP, the STA determines whether the positioning configuration is successfully accepted according to its own support capability and whether there is a positioning requirement, and sends a positioning configuration response frame to the associated AP, and if the positioning configuration response frame indicates positioning If the configuration succeeds, the subsequent operations are continued. If the positioning configuration response frame indicates that the positioning configuration fails, the process ends. 5504. The positioning server sends an ILTK to the target AP.

It can be understood that the associated AP can be one.

S505. The STA generates a location tracking notification frame, and generates message integrity information of the location tracking notification frame according to the ILTK.

S506. The STA sends a location tracking notification frame that includes message integrity information to the associated AP and the target AP.

S507. The associated AP and the target AP verify the integrity of the location tracking notification frame according to the message integrity information contained in the ILTK and the location tracking notification frame.

S508. The associated AP and the target AP send the positioning data to the positioning server.

Specifically, if the target AP and the associated AP check that the received location tracking notification frame is a valid frame, the positioning data is sent to the positioning server, so that the positioning server estimates the coordinates of the STA according to the received positioning data; If the location tracking notification frame received by the associated AP is maliciously falsified or maliciously repeated, the positioning data is not sent to the positioning server, which can improve the security of the positioning.

The method for ensuring the validity of the positioning provided by the embodiment, the AP sends a positioning configuration request frame including at least the ILTK to the STA, and the STA generates the message integrity information of the location tracking notification frame according to the ILTK, and sends the message integrity information to the associated AP and the target AP. The location tracking notification frame including the message integrity information, the associated AP and the target AP verify the integrity of the location tracking notification frame according to the ILTK and the message integrity information, thereby improving the security of the positioning and improving the positioning accuracy.

FIG. 6 is a schematic structural diagram of Embodiment 1 of a workstation device according to the present invention. As shown in FIG. 6, the workstation device of the present embodiment includes: a first receiving module 61, a first processing module 62, and a first sending module 63, where The first receiving module 61 is configured to receive a positioning configuration request frame, where the positioning configuration request frame includes at least an integrity positioning temporary key ILTK; the first processing module 62 is configured to generate a location tracking notification frame, where the location tracking notification frame is generated by using the ILTK Message integrity information, the message integrity information is used by the positioning device that receives the location tracking notification frame to verify the integrity of the location tracking notification frame; the first sending module 63 is configured to send the location tracking notification frame.

Optionally, the positioning configuration request frame further includes information for periodically transmitting the location tracking notification frame and working channel information of the positioning device, where the working channel information of the positioning device indicates the channel used by the sending location tracking notification frame, and the location tracking notification frame is further Including the tracking sequence number, the tracking sequence number is subjected to one-way recursive processing each time the location tracking notification frame is generated. Optionally, the location tracking notification frame further includes working channel information of the positioning device.

The workstation device of this embodiment may be a STA.

The device in this embodiment may be used to implement the technical solution of the method embodiment shown in FIG. 1. The implementation principle and technical effects are similar, and details are not described herein again.

FIG. 7 is a schematic structural diagram of Embodiment 2 of a workstation device according to the present invention. As shown in FIG. 7, the workstation device of this embodiment includes a transmitter 71, a receiver 72, a memory 73, and a transmitter 71 and a receiver 72, respectively. The processor 74 is connected to the memory 74. Of course, the workstation device may also include a common component such as an antenna, a baseband processing component, a medium-frequency processing component, and an input/output device. The embodiment of the present invention does not impose any limitation here.

The memory 73 stores a set of program codes, and the processor 74 is configured to call the program code stored in the memory 73 for performing the following operations:

Generating a location tracking notification frame, the location tracking notification frame containing message integrity information generated using the ILTK, and the message integrity information for receiving the location tracking notification frame by the positioning device to verify the integrity of the location tracking notification frame;

Send a location tracking notification frame.

FIG. 8 is a schematic structural diagram of Embodiment 1 of a positioning device according to the present invention. As shown in FIG. 8, the positioning device of this embodiment includes: a second receiving module 81 and a second processing module 82, where the second receiving module 81 is used. And receiving, by the receiving station STA, a location tracking notification frame, where the location tracking notification frame includes message integrity information generated by using the integrity positioning temporary key ILTK; and the second processing module 82 is configured to verify the location tracking notification according to the ILTK and the message integrity information. The integrity of the frame, in order to obtain the data required to locate the STA based on the location tracking notification frame when the message integrity information is correct.

Optionally, the locating device of the embodiment further includes: a second sending module, where the second sending module is configured to send a positioning configuration request frame to the STA, and locate the configuration request frame at least before receiving the location tracking notification frame sent by the station STA Includes ILTK.

Optionally, the positioning configuration request frame further includes information for periodically transmitting the location tracking notification frame and working channel information of the positioning device, where the working channel information of the positioning device indicates the channel used by the sending location tracking notification frame, and the location tracking notification frame is further Including tracking number, tracking number is every time One-way recursive processing when generating a location tracking notification frame;

Correspondingly, the second processing module 82 is further configured to:

It is judged whether or not the position tracking notification frame having the same tracking number included in the position tracking notification frame has been received.

Optionally, the location tracking notification frame further includes working channel information of the positioning device. Correspondingly, the second processing module 82 is further configured to:

The working channel information included in the comparison location tracking notification frame is consistent with its own working channel information.

The positioning device of this embodiment may be an AP.

The device in this embodiment may be used to implement the technical solution of the method embodiment shown in FIG. 2 or FIG. 3, and the implementation principle and the technical effect are similar, and details are not described herein again.

FIG. 9 is a schematic structural diagram of Embodiment 2 of a positioning apparatus according to the present invention. As shown in FIG. 9, the positioning apparatus of this embodiment includes a transmitter 91, a receiver 92, a memory 93, and a transmitter 91 and a receiver 92, respectively. The processor 93 is connected to the memory 93. Of course, the locating device may also include a common component such as an antenna, a baseband processing component, a medium-frequency processing component, and an input/output device. The embodiment of the present invention is not limited herein.

The memory 93 stores a set of program codes, and the processor 94 is configured to call the program code stored in the memory 93 for performing the following operations:

Receiving a location tracking notification frame sent by the STA, the location tracking notification frame includes message integrity information generated by using the integrity positioning temporary key ILTK;

Based on the ILTK and message integrity information, the integrity of the location tracking notification frame is verified to obtain the data required to locate the STA based on the location tracking notification frame when the message integrity information is correct.

FIG. 10 is a schematic structural diagram of Embodiment 1 of a network system according to the present invention. As shown in FIG. 10, the network system of this embodiment includes: a workstation device 100, a positioning device 200, and a positioning server 300, where the workstation device 100 may be The locating device 200 of any one of the above-mentioned locating device embodiments may be the locating device of any one or two of the locating device embodiments.

The network system provided in this embodiment sends a location tracking notification frame to the positioning device by using the workstation device. The location tracking notification frame includes message integrity information generated according to the ILTK, and then checks the location according to the ILTK and message integrity information sent by the positioning server. Tracking the integrity of the notification frame can improve the security of the positioning, thereby improving the accuracy of the positioning. In the several embodiments provided by the present invention, it should be understood that the disclosed apparatus and method may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored, or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form. The components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a hardware plus software functional unit.

The above-described integrated unit implemented in the form of a software functional unit can be stored in a computer readable storage medium. The above software functional unit is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) or a processor to perform the methods of the various embodiments of the present invention. Part of the steps. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and the like, which can store program codes. .

A person skilled in the art can clearly understand that for the convenience and brevity of the description, only the division of each functional module described above is exemplified. In practical applications, the above function assignment can be completed by different functional modules as needed, that is, the device is installed. The internal structure is divided into different functional modules to perform all or part of the functions described above. For the specific working process of the device described above, reference may be made to the corresponding process in the foregoing method embodiments, and details are not described herein again.

It should be noted that the above embodiments are merely illustrative of the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art The technical solutions described in the foregoing embodiments can still be A modification of the line, or equivalent replacement of some or all of the technical features, and the modifications or substitutions do not depart from the scope of the technical solutions of the embodiments of the present invention.

Claims

Rights request

A method for ensuring the effectiveness of positioning, characterized in that it comprises:

Sending the location tracking notification frame.

2. The method according to claim 1, wherein the ILTK is encrypted and carried in the positioning configuration request frame.

The method according to claim 1 or 2, wherein the positioning configuration request frame further includes information for periodically transmitting the location tracking notification frame and working channel information of the positioning device, where the positioning The working channel information of the device indicates the channel used for sending the location tracking notification frame, and the location tracking notification frame further includes a tracking sequence number, where the tracking sequence number is unidirectionally processed each time the location tracking notification frame is generated. .

The method according to claim 3, wherein the location tracking notification frame further includes working channel information of the positioning device.

5. A method for ensuring the effectiveness of positioning, characterized in that it comprises:

The method according to claim 5, wherein before the receiving the location tracking notification frame sent by the STA, the method further includes:

7. The method according to claim 6, wherein the ILTK is encrypted and carried in the positioning configuration request frame.

The method according to any one of claims 5-7, wherein the positioning configuration is The request frame further includes information for periodically transmitting the location tracking notification frame and working channel information of the positioning device, where the working channel information of the positioning device indicates a channel used for sending the location tracking notification frame, and the location tracking notification frame The tracking sequence number is further included in the tracking sequence number, and the tracking sequence number is subjected to one-way gradation processing each time the location tracking notification frame is generated;

Correspondingly, the method further includes:

The method according to claim 8, wherein the location tracking notification frame further includes working channel information of the positioning device;

Correspondingly, the method further includes:

10. A workstation device, comprising:

a first processing module, configured to generate a location tracking notification frame, where the location tracking notification frame includes message integrity information generated by using the ILTK, where the message integrity information is used to receive the location tracking notification frame Verifying the integrity of the location tracking notification frame;

The first sending module is configured to send the location tracking notification frame.

The workstation device according to claim 10, wherein the ILTK is encrypted and carried in the positioning configuration request frame.

The workstation device according to claim 10 or 11, wherein the positioning configuration request frame further includes information for periodically transmitting the location tracking notification frame and working channel information of the positioning device, where The working channel information of the positioning device indicates the channel used for sending the location tracking notification frame, and the location tracking notification frame further includes a tracking sequence number, and the tracking sequence number is unidirectionally changed each time the location tracking notification frame is generated. deal with.

The workstation device according to claim 12, wherein the location tracking notification frame further includes working channel information of the positioning device.

14. A positioning device, comprising:

a second receiving module, configured to receive a location tracking notification frame sent by the workstation STA, where the location tracking notification frame includes message integrity information generated by using the integrity positioning temporary key ILTK; a second processing module, configured to verify integrity of the location tracking notification frame according to the ILTK and the message integrity information, so as to obtain a location location according to the location tracking notification frame when the message integrity information is correct Describe the data required by the STA.

The locating device according to claim 14, further comprising: a second sending module, configured to send a positioning configuration request frame to the STA before the location tracking notification frame sent by the receiving station STA, The positioning configuration request frame includes at least the ILTK.

The positioning device according to claim 15, wherein the ILTK is encrypted and carried in the positioning configuration request frame.

The positioning device according to any one of claims 14-16, wherein the positioning configuration request frame further includes information for periodically transmitting the location tracking notification frame and working channel information of the positioning device, where The working channel information of the positioning device indicates the channel used for sending the location tracking notification frame, and the location tracking notification frame further includes a tracking sequence number, and the tracking sequence number is unidirectionally changed each time the location tracking notification frame is generated. deal with;

Correspondingly, the second processing module is further configured to:

The positioning device according to claim 17, wherein the location tracking notification frame further includes working channel information of the positioning device;

Correspondingly, the second processing module is further configured to:

A network system, comprising: the workstation device according to any one of claims 10 to 13, the positioning device according to any one of claims 14 to 18, and a positioning server.