Wireless access device and method based on reconfigurable intelligent surface combined WAPI (Wireless Local Area Network Authentication and Privacy Infrastructure)

Abstract

The invention discloses a wireless access device and method based on a reconfigurable intelligent surface in combination with a WAPI (Wireless Local Area Network Authentication and Privacy Infrastructure), and relates to the technical field of wireless communication. The device comprises a reconfigurable intelligent surface module, a WAPI security authentication module, a wireless access control module and a collaborative optimization module, the phase and amplitude of a wireless channel are dynamically regulated and controlled through the reconfigurable intelligent surface, and the signal coverage quality is enhanced; meanwhile, a WAPI protocol is integrated to achieve identity authentication and data encryption of terminal access, communication safety is guaranteed, the channel state and safety requirements are analyzed in real time through the collaborative optimization module, RIS reflection parameters and a WAPI key management strategy are jointly optimized, and the method is suitable for scenes such as an intelligent power grid and the industrial Internet of Things. According to the method, the high-security wireless access requirement is met while the network throughput is improved and the time delay is reduced.

Description

Technical Field

[0001] The present invention relates to the field of wireless communication technology, and in particular to a wireless access device and method based on a reconfigurable intelligent surface combined with WAPI. Background Art

[0002] In existing wireless LAN (WLAN) deployments, traditional wireless access points (APs), limited by their physical antenna structure and signal propagation characteristics, suffer from inherent flaws such as limited coverage and severe interference in dense deployments. When these networks adopt the national standard Wireless LAN Authentication and Privacy Infrastructure (WAPI) security protocol, performance bottlenecks are further accentuated, creating a key technical barrier to application in high-density, high-mobility scenarios. These flaws stem from the fundamental conflict between the static radiation characteristics of traditional APs and the dynamic security requirements of WAPI. Existing solutions, such as the 802.11k / v / r fast handoff protocol, fail to fundamentally address the problem due to architectural conflicts with WAPI's certificate system.

[0003] Therefore, it is an urgent problem for those skilled in the art to propose a wireless access device and method based on a reconfigurable smart surface combined with WAPI to solve the problems existing in the prior art. Summary of the Invention

[0004] In view of this, the present invention provides a wireless access device and method based on a reconfigurable intelligent surface combined with WAPI, which can improve network throughput and reduce latency while meeting high-security wireless access requirements.

[0005] In order to achieve the above object, the present invention adopts the following technical solutions:

[0006] A wireless access device based on a reconfigurable smart surface combined with WAPI, comprising a reconfigurable smart surface module, a WAPI security authentication module, a wireless access control module, and a collaborative optimization module;

[0007] The first port of the reconfigurable smart surface module, the collaborative optimization module, the first port of the wireless access control module and the WAPI security authentication module are connected in sequence, and the second port of the reconfigurable smart surface module is also signal-connected to the second port of the wireless access control module.

[0008] The above device, optionally, has a reconfigurable smart surface module for controlling beam width and coverage, comprising a microstrip patch antenna, a phase-amplitude dual control unit, and a programmable bias circuit unit, wherein the phase-amplitude dual control unit and the programmable bias circuit unit are connected in parallel to the microstrip patch antenna;

[0009] The WAPI security authentication module is used to implement identity authentication and data encryption, including a two-way certificate authentication unit, a session key unit, and a data encryption and decryption unit connected in sequence;

[0010] The wireless access control module is used for load balancing and includes a multi-protocol access gateway unit, an intelligent load balancing unit, and a mobility management unit connected in parallel;

[0011] The collaborative optimization module is used to optimize and allocate channels, including a parallel connected intelligent beam control unit and a network optimization unit.

[0012] The above-mentioned device may optionally further include a terminal, which is in communication connection with the WAPI security authentication module. The network optimization unit divides the WAPI channel into a control channel and a service channel, and the service channel is dynamically allocated to the corresponding terminal.

[0013] A wireless access method based on a reconfigurable smart surface combined with WAPI, applied to any of the above-mentioned wireless access devices based on a reconfigurable smart surface combined with WAPI, comprises the following steps:

[0014] Obtain the initial phase of the reconfigurable smart surface module, optimize the phase of the reconfigurable smart surface module in real time based on the intelligent beam dynamic management algorithm, and obtain the optimized channel matrix;

[0015] Establish the optimal transmission channel based on the optimized channel matrix combined with the wireless channel reconstruction algorithm;

[0016] Business terminals that have passed the WAPI security authentication module are connected to the device, which uses an intelligent load balancing algorithm to allocate network resources and allocate exclusive optimal signal channels to key business terminals.

[0017] In the above method, optionally, the intelligent beam dynamic management algorithm includes an environment perception stage, a decision optimization stage, and an execution control stage;

[0018] The environmental perception stage is used to build a three-dimensional polarization channel model.

[0019] The decision optimization stage is used to define the environment parameters, and the reward function expression is:

[0020] R = α·SINR+β·security level-γ·energy consumption,

[0021] Among them, α represents the SINR weight coefficient, β represents the security level weight coefficient, γ represents the energy consumption weight coefficient, and SINR represents the signal-to-interference-and-noise ratio;

[0022] The execution control stage is used to adjust and optimize the channel beam.

[0023] In the above method, optionally, the wireless channel reconstruction algorithm includes sparse channel estimation, RIS phase calculation and dynamic trigger mechanism.

[0024] Sparse channel estimation is used for optimization problem, which is expressed as:

[0025]

[0026] Where y is the observed signal vector, B is the perception matrix, x is the sparse channel parameter vector to be estimated, μ is the regularization parameter used to balance the data fitting term and the sparsity regularization term, ||·||2 represents the Euclidean norm, and ||·||1 represents the L1 norm;

[0027] The RIS phase calculation is used to solve the problem through the joint algorithm of convex optimization and simulated annealing, and the expression is:

[0028]

[0029] Among them, H direct is the direct channel matrix, H RIS (φ) is the channel matrix controlled by the reconfigurable smart surface RIS, φ is the phase shift parameter vector of RIS, ||·|| F represents the Frobenius norm;

[0030] A dynamic trigger mechanism is used to trigger the reconstruction instructions.

[0031] In the above method, optionally, the intelligent load balancing algorithm includes load evaluation and intelligent distribution;

[0032] Load evaluation is used to calculate the comprehensive load index, and the corresponding expression is:

[0033] L=ω1·B u +ω2·D q +ω3·E c ,

[0034] Among them, B u 、D q 、E c are three different load indicators or parameters, ω1, ω2, and ω3 are corresponding weight coefficients used to adjust the importance of each indicator in the comprehensive load indicator;

[0035] Resource allocation is used to establish a game model and solve the Nash equilibrium. The game model expression is:

[0036] ∑[log(1+SINR i )-P i ·C i ],

[0037] Among them, SINR i is the signal to interference plus noise ratio of user i, P i is the transmit power of user i, C i is the cost coefficient of user i.

[0038] It can be seen from the above technical solution that compared with the existing technology, the present invention provides a wireless access device and method based on a reconfigurable smart surface combined with WAPI, which has the following beneficial effects: 1) The present invention dynamically controls the phase and amplitude of the wireless channel through the reconfigurable smart surface to enhance the signal coverage quality; at the same time, the WAPI protocol is integrated to realize the identity authentication and data encryption of terminal access to ensure communication security; 2) The present invention analyzes the channel status and security requirements in real time through a collaborative optimization module, and jointly optimizes the RIS reflection parameters and the WAPI key management strategy to meet the high-security wireless access requirements while improving network throughput and reducing latency; 3) The present invention is suitable for scenarios such as smart grids and industrial Internet of Things, and solves the performance bottleneck problem caused by the limited coverage capability and separation of security mechanisms of traditional wireless networks. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are merely embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0040] Figure 1 This is a diagram of the architecture of the wireless access device disclosed in the present invention;

[0041] Figure 2 This is a flow chart of the wireless access method disclosed in the present invention. DETAILED DESCRIPTION

[0042] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0043] In this application, relational terms such as first and second are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. The terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or apparatus comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article or apparatus. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of other identical elements in the process, method, article or apparatus comprising the element.

[0044] Reference Figure 1 As shown, the present invention discloses a wireless access device based on a reconfigurable smart surface combined with WAPI, including a reconfigurable smart surface module, a WAPI security authentication module, a wireless access control module and a collaborative optimization module;

[0045] The first port of the reconfigurable smart surface module, the collaborative optimization module, the first port of the wireless access control module and the WAPI security authentication module are connected in sequence, and the second port of the reconfigurable smart surface module is also signal-connected to the second port of the wireless access control module.

[0046] Furthermore, the reconfigurable smart surface module is used to control the beam width and coverage, and includes a microstrip patch antenna, a phase-amplitude dual control unit, and a programmable bias circuit unit, wherein the phase-amplitude dual control unit and the programmable bias circuit unit are connected in parallel to the microstrip patch antenna;

[0047] The WAPI security authentication module is used to implement identity authentication and data encryption, including a two-way certificate authentication unit, a session key unit, and a data encryption and decryption unit connected in sequence;

[0048] The wireless access control module is used for load balancing and includes a multi-protocol access gateway unit, an intelligent load balancing unit, and a mobility management unit connected in parallel;

[0049] The collaborative optimization module is used to optimize and allocate channels, including a parallel connected intelligent beam control unit and a network optimization unit.

[0050] Furthermore, in the reconfigurable smart surface module, the microstrip patch antenna supports operating frequency bands covering the 2.4GHz / 5.8GHz WAPI communication band; the phase-amplitude dual control module uses PIN diodes to achieve independent 180-degree phase and 1-bit amplitude adjustment of electromagnetic waves; and the programmable bias circuit module is used to receive control signals to adjust the unit degree switching parameters.

[0051] Furthermore, in the WAPI security authentication module, the two-way certificate authentication unit is used to realize two-way identity authentication between the terminal and the access device; the session key unit includes an identity-based key derivation submodule, which generates session keys through the WAPI-specific ternary peer authentication TePA protocol; the data encryption and decryption unit integrates a symmetric encryption engine, which supports the SM4 national encryption algorithm to encrypt the transmission data stream; and the SHA-256 hash algorithm is used to generate the message authentication code.

[0052] Furthermore, the WAPI security authentication module also includes a hardware security area for protecting the master key and temporary session key to prevent physical side channel attacks.

[0053] Furthermore, in the wireless access control module, the protocol access gateway unit supports the compatibility processing of the WAPI protocol stack and IEEE802.11a / b / g / n / ac / ax protocols, includes a dual-mode baseband processor that can dynamically switch between WAPI encryption mode and conventional Wi-Fi open mode, and integrates a protocol converter to achieve mutual encapsulation of WAPI security frames and standard Ethernet data frames;

[0054] The intelligent load balancing unit monitors the signal quality (RSSI / SINR) of each terminal in the RIS coverage area in real time and dynamically allocates the terminal to the optimal RIS beam based on the reinforcement learning algorithm;

[0055] The mobility management unit supports roaming switching of access devices with the assistance of RIS, and establishes new links in advance based on the terminal movement trajectory prediction.

[0056] Furthermore, it also includes a terminal, which is in communication connection with the WAPI security authentication module. The network optimization unit divides the WAPI channel into a control channel and a service channel, and the service channel is dynamically allocated to the corresponding terminal.

[0057] Specifically, in the collaborative optimization module, the intelligent beam control unit adopts a two-stage intelligent beam optimization algorithm. In the coarse adjustment stage, a genetic algorithm is used to globally search for the optimal beam direction. In the fine adjustment stage, the gradient descent method is applied to optimize the phase offset. It also combines dynamic beam management methods to use static beam coverage for stationary terminals and implement beam tracking for mobile terminals. The network optimization unit divides the WAPI channel into a control channel (fixed 20MHz) and a service channel (dynamically allocated), using an improved weighted polling algorithm to ensure that the latency of high-priority services is less than 10ms. A triangular association matrix of "terminal-RIS unit-AP" is established, and dedicated RIS unit groups are allocated to critical service terminals.

[0058] A wireless access method based on a reconfigurable smart surface combined with WAPI is applied to any of the above-mentioned wireless access devices based on a reconfigurable smart surface combined with WAPI, referring to Figure 2As shown, the following steps are included:

[0059] Obtain the initial phase of the reconfigurable smart surface module, optimize the phase of the reconfigurable smart surface module in real time based on the intelligent beam dynamic management algorithm, and obtain the optimized channel matrix;

[0060] Establish the optimal transmission channel based on the optimized channel matrix combined with the wireless channel reconstruction algorithm;

[0061] Business terminals that have passed the WAPI security authentication module are connected to the device, which uses an intelligent load balancing algorithm to allocate network resources and allocate exclusive optimal signal channels to key business terminals.

[0062] Furthermore, the intelligent beam dynamic management algorithm includes the environment perception stage, decision optimization stage, and execution control stage;

[0063] The environment perception stage is used to build a three-dimensional polarization channel model using WAPI detection frames.

[0064] The decision optimization phase is used to define the environment parameters, including the state space S = {terminal coordinates, CSI matrix, interference map}, the action space A = {RIS phase combination}, and the reward function expression is:

[0065] R = α·SINR+β·security level-γ·energy consumption,

[0066] Among them, α represents the SINR weight coefficient, β represents the security level weight coefficient, γ represents the energy consumption weight coefficient, and SINR represents the signal-to-interference-and-noise ratio;

[0067] The execution control phase is used to adjust and optimize the channel beam, including the use of a hierarchical control architecture of macro beams (60°) and micro beams (10°), with a dynamic adjustment period of 1-100ms.

[0068] Furthermore, the wireless channel reconstruction algorithm includes sparse channel estimation, RIS phase calculation and dynamic triggering mechanism;

[0069] Sparse channel estimation is used for optimization problem, which is expressed as:

[0070]

[0071] Where y is the observed signal vector, B is the perception matrix, which represents the linear transformation during signal transmission, x is the sparse channel parameter vector to be estimated, μ is the regularization parameter, which is used to balance the data fitting term and the sparsity regularization term, ||·||2 represents the Euclidean norm (L2 norm), and ||·||1 represents the L1 norm, which is used to promote the sparsity of the solution.

[0072] RIS phase calculation is used to solve the problem through the joint algorithm of convex optimization and simulated annealing. The corresponding expression is:

[0073]

[0074] Among them, H direct is the direct channel matrix, H RIS (φ) is the channel matrix controlled by the reconfigurable smart surface RIS, φ is the phase shift parameter vector of RIS, ||·|| F represents the Frobenius norm;

[0075] Dynamic trigger mechanism: Reconfiguration is initiated when the CSI change rate is greater than 15% or a new terminal is connected, with a latency of less than 5ms.

[0076] Furthermore, the intelligent load balancing algorithm includes load evaluation and intelligent distribution;

[0077] Load evaluation is used to calculate the comprehensive load index, and the corresponding expression is:

[0078] L=ω1·B u +ω2·D q +ω3·E c ,

[0079] Among them, B u 、D q 、E c are three different load indicators or parameters, ω1, ω2, and ω3 are corresponding weight coefficients used to adjust the importance of each indicator in the comprehensive load indicator;

[0080] Resource allocation: Establish a game model and solve the Nash equilibrium. The game model expression is:

[0081] ∑[log(1+SINR i )-P i ·C i ],

[0082] Among them, SINR i is the signal to interference plus noise ratio of user i, P i is the transmit power of user i, C i is the cost coefficient of user i, which is related to the transmission power.

[0083] Each embodiment in this specification is described in a progressive manner. The same or similar parts between the embodiments can be referred to each other. Each embodiment focuses on the differences from other embodiments. In particular, for system or system embodiments, since they are basically similar to method embodiments, the description is relatively simple. For relevant parts, refer to the partial description of the method embodiment. The system and system embodiments described above are merely schematic, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment. A person of ordinary skill in the art can understand and implement it without expending creative work.

[0084] The above description of the disclosed embodiments is intended to enable one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be readily apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention is not limited to the embodiments shown herein but is intended to conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A wireless access device based on a reconfigurable smart surface combined with WAPI, characterized in that: It includes reconfigurable smart surface module, WAPI security authentication module, wireless access control module and collaborative optimization module; The first port of the reconfigurable smart surface module, the collaborative optimization module, the first port of the wireless access control module and the WAPI security authentication module are connected in sequence, and the second port of the reconfigurable smart surface module is also signal-connected to the second port of the wireless access control module.

2. The wireless access device based on reconfigurable smart surface combined with WAPI according to claim 1, characterized in that: The reconfigurable smart surface module is used to control beam width and coverage, and includes a microstrip patch antenna, a phase-amplitude dual control unit, and a programmable bias circuit unit. The phase-amplitude dual control unit and the programmable bias circuit unit are connected in parallel to the microstrip patch antenna. The WAPI security authentication module is used to implement identity authentication and data encryption, including a two-way certificate authentication unit, a session key unit, and a data encryption and decryption unit connected in sequence; The wireless access control module is used for load balancing and includes a multi-protocol access gateway unit, an intelligent load balancing unit, and a mobility management unit connected in parallel; The collaborative optimization module is used to optimize and allocate channels, including a parallel connected intelligent beam control unit and a network optimization unit.

3. The wireless access device based on reconfigurable smart surface combined with WAPI according to claim 2, characterized in that: It also includes a terminal, which is in communication with the WAPI security authentication module. The network optimization unit divides the WAPI channel into a control channel and a service channel, and the service channel is dynamically allocated to the corresponding terminal.

4. A wireless access method based on a reconfigurable smart surface combined with WAPI, applying a wireless access device based on a reconfigurable smart surface combined with WAPI according to any one of claims 1 to 3, characterized in that: The following steps are involved: Obtain the initial phase of the reconfigurable smart surface module, optimize the phase of the reconfigurable smart surface module in real time based on the intelligent beam dynamic management algorithm, and obtain the optimized channel matrix; Establish the optimal transmission channel based on the optimized channel matrix combined with the wireless channel reconstruction algorithm; Business terminals that have passed the WAPI security authentication module are connected to the device, which uses an intelligent load balancing algorithm to allocate network resources and allocate exclusive optimal signal channels to key business terminals.

5. The wireless access method based on reconfigurable intelligent surface combined with WAPI according to claim 4, characterized in that: The intelligent beam dynamic management algorithm includes the environmental perception stage, the decision optimization stage and the execution control stage; The environmental perception stage is used to build a three-dimensional polarization channel model. The decision optimization stage is used to define the environment parameters, and the reward function expression is: R = α·SINR+β·security level-γ·energy consumption, Among them, α represents the SINR weight coefficient, β represents the security level weight coefficient, γ represents the energy consumption weight coefficient, and SINR represents the signal-to-interference-and-noise ratio; The execution control stage is used to adjust and optimize the channel beam.

6. The wireless access method based on reconfigurable intelligent surface combined with WAPI according to claim 4, characterized in that: The wireless channel reconstruction algorithm includes sparse channel estimation, RIS phase calculation and dynamic trigger mechanism. Sparse channel estimation is used for optimization problem, which is expressed as: Where y is the observed signal vector, B is the perception matrix, x is the sparse channel parameter vector to be estimated, μ is the regularization parameter used to balance the data fitting term and the sparsity regularization term, ||·||2 represents the Euclidean norm, and ||·||1 represents the L1 norm; The RIS phase calculation is used to solve the problem through the joint algorithm of convex optimization and simulated annealing, and the expression is: Among them, H direct is the direct channel matrix, H RIS (φ) is the channel matrix controlled by the reconfigurable smart surface RIS, φ is the phase shift parameter vector of RIS, ||·|| F represents the Frobenius norm; A dynamic trigger mechanism is used to trigger the reconstruction instructions.

7. The wireless access method based on reconfigurable intelligent surface combined with WAPI according to claim 4, characterized in that: Intelligent load balancing algorithm includes load evaluation and intelligent distribution; Load evaluation is used to calculate the comprehensive load index, and the corresponding expression is: L=ω1·B u +ω2·D q +ω3·E c , Among them, B u 、D q 、E c are three different load indicators or parameters, ω1, ω2, and ω3 are corresponding weight coefficients used to adjust the importance of each indicator in the comprehensive load indicator; Resource allocation is used to establish a game model and solve the Nash equilibrium. The game model expression is: ∑[log(1+SINR i )-P i ·C i ], Among them, SINR i is the signal to interference plus noise ratio of user i, P i is the transmit power of user i, C i is the cost coefficient of user i.

Images