Encryption and decryption method and device for wireless local area network communication system

Abstract

The invention provides an encryption and decryption method and device for a wireless local area network communication system. The encryption and decryption method comprises the steps of receiving a data stream from an MAC layer, extracting a frame body part needing to be encrypted according to different frame types, performing encryption operation on the MAC frame body part according to a specified algorithm and mode, outputting an MAC frame after frame body encryption, and sending the MAC frame through a physical layer; receiving the data of a physical layer, decrypting the MAC frame after the frame body encryption, and writing the decrypted MAC frame into a memory in a direct memory access mode. According to the encryption and decryption method provided by the invention, additional data migration is not needed, system resources can be effectively saved, and system time delay is reduced.

Description

technical field

[0001] The invention belongs to the technical field of wireless local area network communication, and in particular relates to an encryption and decryption method and device of a wireless local area network communication system. Background technique

[0002] Encryption and decryption are usually implemented as independent functional units in hardware systems and used as hardware accelerators, that is, when data needs to be encrypted and decrypted, Figure 1a , 1b It is the flow chart of encryption and decryption in the prior art. The software initiates encryption and decryption operations. The hardware encryption and decryption module reads plaintext or ciphertext through direct memory access DMA (Direct memory access). After encryption and decryption, the ciphertext and plaintext are passed through Write back in DMA mode, after the software receives the encryption and decryption completion interrupt, it can initiate the encryption and decryption operation ag...

Examples

Embodiment 1

[0053] An encryption and decryption method of a wireless local area network communication system provided by the present invention, such as figure 2 shown, including:

[0054] S1. Receive the data stream from the MAC layer, extract the frame body part in the MAC frame for encryption processing, and output the encrypted MAC frame of the frame body and send it through the physical layer; the flow chart is as follows image 3 shown;

[0055] Specifically, the following steps are included:

[0056] S11. Identify the MAC frame header to obtain frame type and frame structure information, and extract the frame body part to be encrypted according to different frame types;

[0057] The frame types include: data frame, serial number management control frame, and non-serial number management control frame;

[0058] Frames at the MAC layer include data frames and management control frames. The data frame format is as follows: Figure 4a , including a 6-byte MAC header, a variable-len...

Embodiment 2

[0080] This embodiment provides an encryption device 200 of a wireless local area network communication system, such as Figure 7 shown, including:

[0081] Frame analysis module 210 receives the data flow from the MAC layer, extracts the frame body part in the MAC frame, and sends the frame body content to be encrypted to the encryption operation unit 222 for encryption processing, and will not need other parts of encryption (MAC frame header) , frame check sequence) to the frame combination unit 223;

[0082] The frame analysis module 210 identifies the MAC frame header to obtain frame type and frame structure information, and extracts the frame body part that needs to be encrypted according to different frame types:

[0083] Each MAC frame begins with a 16-bit frame control field, the format of which is as follows Figure 4e As shown; wherein, the frame type field occupies 1 bit, 1 means it is a data frame, and 0 means it is a management control frame. The subtype field ...

technical field

[0001] The invention belongs to the technical field of wireless local area network communication, and in particular relates to an encryption and decryption method and device of a wireless local area network communication system. Background technique

[0002] Encryption and decryption are usually implemented as independent functional units in hardware systems and used as hardware accelerators, that is, when data needs to be encrypted and decrypted, Figure 1a , 1b It is the flow chart of encryption and decryption in the prior art. The software initiates encryption and decryption operations. The hardware encryption and decryption module reads plaintext or ciphertext through direct memory access DMA (Direct memory access). After encryption and decryption, the ciphertext and plaintext are passed through Write back in DMA mode, after the software receives the encryption and decryption completion interrupt, it can initiate the encryption and decryption operation ag...

Examples

Embodiment 1

[0053] An encryption and decryption method of a wireless local area network communication system provided by the present invention, such as figure 2 shown, including:

[0054] S1. Receive the data stream from the MAC layer, extract the frame body part in the MAC frame for encryption processing, and output the encrypted MAC frame of the frame body and send it through the physical layer; the flow chart is as follows image 3 shown;

[0055] Specifically, the following steps are included:

[0056] S11. Identify the MAC frame header to obtain frame type and frame structure information, and extract the frame body part to be encrypted according to different frame types;

[0057] The frame types include: data frame, serial number management control frame, and non-serial number management control frame;

[0058] Frames at the MAC layer include data frames and management control frames. The data frame format is as follows: Figure 4a , including a 6-byte MAC header, a variable-len...

Embodiment 2

[0080] This embodiment provides an encryption device 200 of a wireless local area network communication system, such as Figure 7 shown, including:

[0081] Frame analysis module 210 receives the data flow from the MAC layer, extracts the frame body part in the MAC frame, and sends the frame body content to be encrypted to the encryption operation unit 222 for encryption processing, and will not need other parts of encryption (MAC frame header) , frame check sequence) to the frame combination unit 223;

[0082] The frame analysis module 210 identifies the MAC frame header to obtain frame type and frame structure information, and extracts the frame body part that needs to be encrypted according to different frame types:

[0083] Each MAC frame begins with a 16-bit frame control field, the format of which is as follows Figure 4e As shown; wherein, the frame type field occupies 1 bit, 1 means it is a data frame, and 0 means it is a management control frame. The subtype field ...

Images