Communication device, communication terminal, and communication method

Abstract

The present technology pertains to a communication device, a communication terminal, and a communication method that make it easy to manage private keys for performing cooperative transmission. The communication device shares a first private key for cooperative transmission and multicast with other communication devices, the first private key being used when performing cooperative transmission with a communication terminal and one or more other communication devices. The present technology can be applied to a wireless communication system.

Description

Technical Field

[0001] The present technology relates to a communication device, a communication terminal, and a communication method, and more particularly, to a communication device, a communication terminal, and a communication method capable of facilitating the management of a secret key for implementing cooperative transmission. Background Art

[0002] In recent years, there has been an increase in environments where multiple wireless local area network (LAN) access points (hereinafter referred to as APs) are installed in stadiums or homes, and technology that aims to improve throughput and reliability through cooperation between APs has also received attention.

[0003] For example, joint transmission (joint Tx or JTX) as one of the cooperative schemes is a technology that uses multiple-input multiple-output (MIMO) technology to implement cooperative transmission for wireless terminals (stations, hereinafter referred to as STAs) common to multiple APs. By implementing joint Tx, it is possible to form a high-dimensional beam without increasing the number of antennas provided in one AP.

[0004] In joint Tx, the same MAC processing needs to be performed on the same packet addressed to a specific STA.

[0005] Therefore, at least the APs implementing joint Tx must keep the same secret key.

[0006] For example, Patent Document 1 discloses a method of sharing a peer-to-peer (P2P) secret key (pairwise transient key, hereinafter referred to as PTK) generated between a specific AP and a STA with other APs through a connection.

[0007] Reference List

[0008] Patent Literature

[0009] Patent Document 1: Japanese Patent Application Laid-Open No. 2016-128869 Summary of the invention

[0010] Problems to be solved by the present invention

[0011] However, in the case of joint Tx, candidate STAs exist in multiple cells (basic service set, hereinafter referred to as BSS), so the number of STAs becomes huge and it becomes difficult to manage secret keys. In addition, in an environment where each AP is wirelessly connected to each other, the action of wirelessly sharing PTK has a high risk of information leakage.

[0012] The present technology has been proposed in view of such circumstances, and makes it possible to facilitate the management of secret keys for implementing cooperative transmission.

[0013] Solutions to the Problem

[0014] A communication device according to one aspect of the present technology includes a communication control unit that shares a first secret key for cooperative transmission and multicast with other communication devices, the first secret key being used when cooperative transmission is performed on a communication terminal together with one or more other communication devices.

[0015] According to another aspect of the present technology, a communication terminal includes a communication control unit, which sets a first secret key to be used for decryption based on identification information indicating the communication device when receiving signals by utilizing the collaborative transmission of multiple communication devices, and the communication device implements collaborative transmission together using the first secret key for collaborative transmission and multicast.

[0016] In one aspect of the present technology, a first secret key for cooperative transmission and multicast is shared with other communication devices, and the first secret key is used when cooperative transmission is performed on a communication terminal together with one or more other communication devices.

[0017] In another aspect of the present technology, when utilizing the collaborative transmission and reception of multiple communication devices, a first secret key to be used for decryption is set based on identification information indicating the communication device, and the communication device implements collaborative transmission together using the first secret key used for collaborative transmission and multicast. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 is a diagram showing a configuration example of a wireless communication system according to the first embodiment of the present technology.

[0019] Figure 2 is a block diagram showing a configuration example of a communication device operating as an AP.

[0020] Figure 3 is a block diagram showing a configuration example of a communication device operating as a STA.

[0021] Figure 4 is a diagram showing the overall sequence according to the first embodiment of the present technology.

[0022] Figure 5 is a diagram showing a first sequence in which AP1 and AP2 share the same JGTK in the joint Tx setup phase.

[0023] Figure 6 is a diagram showing a configuration example of a JGTK handshake msg#1 frame.

[0024] Figure 7 is a diagram showing a configuration example of a JGTK handshake msg#2 frame.

[0025] Figure 8is a diagram showing a second sequence in which AP1 and AP2 share the same JGTK in the joint Tx setup phase.

[0026] Fig. 9 is a diagram showing a configuration example of a JGTK shared frame.

[0027] Fig.10 This is a flowchart for explaining the process of starting the JGTK shared AP1.

[0028] Fig.11 It is a flowchart for explaining the processing of AP2.

[0029] Fig.12 is a diagram showing a sequence in a link setup phase.

[0030] Fig.13 is a diagram showing a configuration example of a 4-way handshake msg#3 frame.

[0031] Fig.14 is a flowchart for explaining the processing of STA.

[0032] Fig.15 is a diagram showing a configuration example of a wireless communication system according to a second embodiment of the present technology.

[0033] Fig.16 is a diagram showing a third sequence in which AP211 , AP1 , and AP2 share the same JGTK in the joint Tx setup phase.

[0034] Fig.17 is a diagram of a fourth sequence showing that AP1 and AP2 share the same JGTK in the joint Tx setup phase.

[0035] Fig.18 is a diagram showing a configuration example of a JGTK information request frame.

[0036] Fig.19 is a diagram showing a configuration example of a JGTK information response frame.

[0037] Fig. 20 is a diagram of a fifth sequence showing that AP1 and AP2 share the same JGTK in the joint Tx setup phase.

[0038] Fig.21 is a diagram showing a configuration example in which JGTK generates a request frame.

[0039] Fig. 22 is a diagram showing a configuration example in which JGTK generates a response frame.

[0040] Fig.23 is a flowchart for explaining the process of controlling the AP.

[0041] Fig.24 is a flowchart for explaining the processing of a non-controlling AP.

[0042] Fig.25 is a block diagram showing a configuration example of a computer. DETAILED DESCRIPTION

[0043] A mode for implementing the present technology will be described hereinafter. The description will be given in the following order.

[0044] 1. First embodiment

[0045] 2. Second embodiment

[0046] 3. Others

[0047] <1. First embodiment>

[0048] <System Configuration>

[0049] Figure 1 is a diagram of a configuration example of a wireless communication system according to the first embodiment of the present technology.

[0050] Figure 1 The wireless communication system 1 includes two AP1 and AP2 and two STA1 and STA2. It should be noted that AP1 and AP2 are referred to as APs when there is no particular need to distinguish them, and STA1 and STA2 are referred to as STAs when there is no particular need to distinguish them.

[0051] STA1 is connected to AP1 via wireless communication. STA2 is connected to AP2 via wireless communication.

[0052] Furthermore, there is a communication device that uses a channel in the same frequency band as that used by AP1, AP2, STA1, and STA2 around the communication device.

[0053] It should be noted that in Figure 1 In the embodiment, the link between AP1 and AP2 is called a backhaul link, and the link between AP1 and STA1 and the link between AP2 and STA2 are called fronthaul links. The communication form of the backhaul link is not particularly limited.

[0054] Furthermore, the target system configuration is not limited thereto as long as there are a plurality of communication devices with which connections are established and there are communication devices around each communication device, and as long as the conditions described above are satisfied, the positional relationship is not limited.

[0055] <Configuration of communication device>

[0056] Figure 2is a block diagram showing a configuration example of a communication device operating as an AP.

[0057] The communication device 11 includes a wireless communication unit 31 , a control unit 32 , a storage unit 33 , a wide area network (WAN) communication unit 34 , and an antenna 41 .

[0058] The wireless communication unit 31 transmits and receives data. The wireless communication unit 31 includes an amplification unit 51 , a wireless interface unit 52 , a signal processing unit 53 , a data processing unit 54 , a communication control unit 55 , and a communication storage unit 56 .

[0059] The wireless communication unit 31 includes only one set of the amplification unit 51, the wireless interface unit 52, the signal processing unit 53, and the data processing unit 54 as a minimum configuration, but may include a plurality of antennas 41 and the amplification unit 51 to implement MIMO transmission and reception processing. In addition, the wireless communication unit 31 may have a configuration capable of operating a plurality of links or a plurality of frequency channels in parallel.

[0060] When transmitting, the amplifying unit 51 amplifies the analog signal provided from the wireless interface unit 52 to a predetermined electric power, and outputs the analog signal obtained by amplifying the power to the antenna 41. When receiving, the amplifying unit 51 amplifies the analog signal provided from the antenna 41 to a predetermined electric power, and outputs the analog signal obtained by amplifying the power to the wireless interface unit 52.

[0061] A part of the function of the amplification unit 51 may be included in the wireless interface unit 52. In addition, a part of the function of the amplification unit 51 may be a component external to the wireless communication unit 31.

[0062] When transmitting, the wireless interface unit 52 converts the transmission symbol stream from the signal processing unit 53 into an analog signal, performs filtering, up-conversion to a carrier frequency and phase control, and outputs the analog signal after phase control to the amplification unit 51 .

[0063] At the time of reception, the wireless interface unit 52 performs phase control, down-conversion, and inverse filtering on the analog signal supplied from the amplification unit 51 , and outputs a received symbol stream as a result of conversion into a digital signal to the signal processing unit 53 .

[0064] At the time of transmission, the signal processing unit 53 performs encoding, interleaving, modulation, and the like on the data unit supplied from the data processing unit 54 , assigns a physical header, and outputs a transmission symbol stream to each wireless interface unit 52 .

[0065] Upon reception, the signal processing unit 53 analyzes the physical header of the received symbol stream supplied from each wireless interface unit 52 , performs demodulation, deinterleaving, decoding, etc. on the received symbol stream, and generates a data unit. The generated data unit is output to the data processing unit 54 .

[0066] It should be noted that the signal processing unit 53 implements complex channel characteristic estimation and spatial separation processing when necessary.

[0067] At the time of transmission, the data processing unit 54 performs sequence management and encryption processing on the data stored in the communication storage unit 56 and the control signal and management information received from the communication control unit 55. After the encryption processing, the data processing unit 54 assigns a medium access control (MAC) header and an error detection code, generates a packet, and performs multi-aggregation processing on the packet.

[0068] When receiving, the data processing unit 54 performs de-aggregation processing, analysis and error detection of the MAC header, retransmission request operation, and re-ordering processing on the received packets.

[0069] The communication control unit 55 controls the operation of each unit of the wireless communication unit 31 and information transfer between the units. In addition, the communication control unit 55 exercises control to deliver control signals and management information to the data processing unit 54, wherein notification of the control signals and management information is provided to another communication device.

[0070] The communication storage unit 56 stores information used by the communication control unit 55. In addition, the communication storage unit 56 stores packets to be transmitted and received packets. A transmission buffer that stores packets to be transmitted is included in the communication storage unit 56.

[0071] There may be a plurality of wireless communication units 31. For example, different wireless communication units 31 may be used to implement communication between APs and communication between APs and STAs.

[0072] In addition, there may be multiple identical blocks in one wireless communication unit 31. For example, the wireless communication unit 31 may include multiple wireless interface units 52, amplification units 51, and antennas 41 for MIMO communication. In addition, in order to support multi-link communication, in the wireless communication unit 31, the data processing unit 54 may be divided in the middle, and there may be multiple subsequent processing units (a part of the data processing unit 54, the signal processing unit 53, the wireless interface unit 52, and the amplification unit 51).

[0073] The control unit 32 includes a central processing unit (CPU), a read-only memory (ROM), a random access memory (RAM), etc. The control unit 32 executes a program stored in the ROM, etc., and controls the wireless communication unit 31 and the communication control unit 55. In addition, the control unit 32 may alternatively implement some operations of the communication control unit 55. In addition, the communication control unit 55 and the control unit 32 may be configured as one block.

[0074] The storage unit 33 stores information used by the wireless communication unit 31 and the control unit 32. Furthermore, the storage unit 33 may alternatively implement part of the operations of the communication storage unit 56. The storage unit 33 and the communication storage unit 56 may be configured as one block.

[0075] The WAN communication unit 34 analyzes the packet acquired from the backhaul link, and delivers the analyzed packet to the wireless communication unit 31 through the control unit 32. The format of the delivered packet may be in a state where the IP header is retained as it is (access point mode), or in a state where the IP header is analyzed and removed by the WAN communication unit 34 (router mode).

[0076] It should be noted that Figure 2 An example in which the wireless communication unit 31 is configured as one IC is shown, but the IC configuration of the present technology is not limited thereto. For example, the wireless interface unit 52 may be installed as an IC different from that of the wireless communication unit 31 .

[0077] <Configuration of communication device>

[0078] Figure 3 is a block diagram showing a configuration example of a communication device operating as a STA.

[0079] The communication device 111 includes a wireless communication unit 131 , a control unit 132 , a storage unit 133 , and an antenna 141 .

[0080] Figure 3 The control unit 132, the storage unit 133 and the antenna 141 in the embodiment have Figure 2 The control unit 32, storage unit 33 and antenna 41 are configured similarly.

[0081] The wireless communication unit 131 includes an amplification unit 151 , a wireless interface unit 152 , a signal processing unit 153 , a data processing unit 154 , a communication control unit 155 , and a communication storage unit 156 .

[0082] Figure 3 The amplification unit 151, the wireless interface unit 152, the signal processing unit 153, the data processing unit 154, the communication control unit 155 and the communication storage unit 156 have the same Figure 2The amplification unit 51, wireless interface unit 52, signal processing unit 53, data processing unit 54, communication control unit 55 and communication storage unit 56 are configured similarly.

[0083] It should be noted that the wireless communication unit 131 includes only one set of the amplification unit 151, the wireless interface unit 152, the signal processing unit 153, and the data processing unit 154 as a minimum configuration, but may include a plurality of antennas 141 and amplification units 151 to implement MIMO transmission and reception processing. In addition, the wireless communication unit 131 may have a configuration capable of operating a plurality of links or a plurality of frequency channels in parallel.

[0084] <Overall sequence>

[0085] Figure 4 is a diagram showing the overall sequence according to the first embodiment of the present technology.

[0086] exist Figure 4 In the embodiment, the overall sequence includes a joint Tx setup phase Ph1 and a link setup phase Ph2.

[0087] In the joint Tx setup phase Ph1 , AP1 and AP2 perform setup for cooperative communication between AP1 and AP2 .

[0088] Specifically, in the joint Tx setup phase, AP1 and AP2 exchange capability information with each other and establish a link and group for collaborative communication. In the present technology, in the joint Tx setup phase, a multicast secret key dedicated to joint Tx (joint Tx group temporary key, hereinafter referred to as JGTK) that is used only in joint Tx is shared between AP1 and AP2.

[0089] In the link setup phase Ph2 , AP1 , AP2 , STA1 , and STA2 perform link setup between AP1 and STA1 , and between AP2 and STA2 .

[0090] Specifically, AP1, AP2, STA1, and STA2 implement connection processing between AP1 and STA1 and between AP2 and STA2, respectively, and then generate a multicast secret key (group temporary key, hereinafter referred to as GTK) through a 4-way handshake. It should be noted that GTK is not dedicated to cooperative transmission, and is therefore a key different from JGTK dedicated to cooperative transmission. In addition, in the present technology, the JGTK described above is notified to STA in the 4-way handshake.

[0091] It should be noted that the notification of the JGTK may be implemented after the connection process and the secret key (GTK) generation process between the AP and the STA have been completed. That is, for example, after the connection process and the secret key (GTK) generation process with the AP and the STA are completed, the joint Tx setup phase described above may be implemented, and when the JGTK is generated for the first time or when the existing JGTK is updated, the notification of the JGTK for the STA may be implemented again.

[0092] <First sequence in joint Tx setup phase>

[0093] Figure 5 It shows that AP1 and AP2 are Figure 4 Illustration of the first sequence of the Joint Tx Setup phase sharing the same JGTK.

[0094] As the first sequence, Figure 5 The sequence in which the same JGTK is generated by AP1 and AP2 performing information exchange (handshake) is shown.

[0095] One of AP1 and AP2 (in Figure 5 In the case of AP2) sending a multi-AP group setting frame at timing t11, and setting a group for implementing cooperative communication. It should be noted that Figure 5 In the following figures, for the convenience of description, the characters of the frame are omitted in the name of the frame to be sent.

[0096] AP1 receives the multi-AP group setting frame, and transmits an Ack indicating a response confirmation at timing t12.

[0097] Multi-AP group setting frame includes its own capability information, information for generating encryption keys (strong security network unit, hereinafter referred to as RSNE), etc. By sending and receiving multi-AP group setting frames and Ack (hereinafter referred to as multi-AP group setting), determine the collaborative scheme implemented between the AP (in this embodiment, the joint Tx) and encryption scheme.

[0098] AP1 and AP2 perform link setup between AP1 and AP2 at timing t13. Link setup mainly establishes a method for exchanging control signals between AP1 and AP2.

[0099] It should be noted that in the link setting, for example, two APs may implement the link setting using the relationship between AP and STA, or both may establish P2P communication as STA. In addition, a secret key between links may or may not be set.

[0100] At timing t14, AP1 or AP2 (at Figure 5In the case of AP1, it sends the JGTK handshake msg#1 frame. Details of the JGTK handshake msg#1 frame will be described later with reference to Figure 6 Describe the details of the JGTK handshake msg#1 frame.

[0101] By sending the JGTK handshake msg#1 frame, it notifies that a JGTK will be generated between AP1 and AP2. At the same time, it notifies the public key (pairwise master key, hereinafter referred to as PMK) information and random number information (ANonce) which are the necessary information for JGTK generation.

[0102] Another AP (AP2 in the case of Figure 5 receives the JGTK handshake msg#1 frame sent from AP1. At timing t15, AP2 generates the JGTK based on the information obtained by receiving the JGTK handshake msg#1 frame and the random number information (SNonce) generated by itself.

[0103] At timing t16, AP2 sends the JGTK handshake msg#2 frame to AP1. The JGTK handshake msg#2 frame includes the random number information (SNonce) and the RSNE which is the information for generating the responder's encryption key. Details of the JGTK handshake msg#2 frame will be described later with reference to Figure 7 Describe the details of the JGTK handshake msg#2 frame.

[0104] AP1 receives the JGTK handshake msg#2 frame sent from AP2. Subsequently, at timing t17, it generates the JGTK based on the information obtained from AP2 by receiving the JGTK handshake msg#2 frame and the random number information (ANonce) generated by itself. Subsequently, the first sequence ends.

[0105] As described above, the JGTK is shared by AP1 and AP2. In the first sequence, it is not necessary for both AP1 and AP2 to transmit the JGTK by themselves. Thus, when the radio wave is intercepted, there is no concern about JGTK leakage because it is for another person.

[0106] However, in the case of three or more APs performing cooperative communication, etc., it is difficult to handle generating the same JGTK for more than two APs in the first sequence.

[0107] At the same time, since a JGTK can be provided for each AP combination performing cooperative communication, the JGTK can be selectively used according to the AP combinations performing cooperative communication, such as the combination of AP1 and AP2 and the combination of AP1 and APx.

[0108] <Configuration of the JGTK handshake msg#1 frame>

[0109] Figure 6 is a diagram showing an example of the configuration of the JGTK handshake msg#1 frame.

[0110] The JGTK handshake msg#1 frame includes protocol version, packet type, packet body length, descriptor type, key information, key length, key replay counter, key nonce, EAPOL key IV, key RSC, reserved, key MIC, key data length, key data, etc.

[0111] As shown in the upper right, the key information includes each bit of key descriptor version, key type, reserved, installed, key Ack, key MIC, security, error, request, encrypted key data, SMK message, combined Tx key flag, reserved, etc.

[0112] Assign a combined Tx key flag to one bit of the key information. The combined Tx key flag is flag information indicating the relevance of the JGTK handshake msg#1 frame to JGTK.

[0113] The information in the key nonce indicates ANonce. ANonce is random number information generated by the requesting side that is necessary for JGTK generation.

[0114] The key data includes each field of type, length, OUI, data type, and data in one or more KDE formats.

[0115] One or more KDE format data fields included in the key data include PKMID information. As described previously, the PKMID information is information indicating the public key necessary for JGTK generation. In addition, a notification indicating that the PKMID information is included in the key data is given in the type field.

[0116] It should be noted that in Figure 6 the IEEE802.11-based EAPOL key frame describes the JGTK handshake msg#1 frame, but is not limited to the Figure 6 frame configuration, and only requires that at least the information described previously be included in the frame. In addition, although the JGTK handshake msg#1 frame in Figure 6 is described under the assumption of being transmitted as a MAC frame, the JGTK handshake msg#1 frame can be transmitted as a TCP / IP frame as long as the information described previously is described.

[0117] <Configuration of JGTK handshake msg#2 frame>

[0118] Figure 7 is a diagram showing an example configuration of the JGTK handshake msg#2 frame.

[0119] It should be noted that in Figure 7 since the JGTK handshake msg#2 frame has the same as Figure 6 The JGTK handshake msg#1 frame in the . Figure 6 The different parts of the JGTK handshake msg#1 frame.

[0120] One bit of the key information is assigned a Joint Tx Key Flag. The Joint Tx Key Flag is flag information indicating that the JGTK handshake msg#2 frame is related to JGTK.

[0121] The information in the key one-time random number indicates SNonce. SNonce is random number information generated by the responding side and necessary for JGTK generation.

[0122] RSNE is included in one or more KDE formatted data fields included in the key data. As described above, RSNE is information for generating the responder's encryption key. It should be noted that a notification indicating that RSNE is included in the key data is given in the type field.

[0123] <Second sequence in joint Tx setup phase>

[0124] Figure 8 It shows that AP1 and AP2 are Figure 4 Illustration of the second sequence of the Joint Tx Setup phase sharing the same JGTK.

[0125] As the second sequence, Figure 8 The sequence of distributing the JGTK generated by AP1 to AP2 is shown.

[0126] because Figure 8 The processing of timing t31 to t33 in is similar to Figure 5 The processing of timing t11 to t13 in FIG. 1 is omitted, and therefore its description will be omitted.

[0127] At timing t34, AP1 or AP2 (at Figure 8 In the case of AP1) JGTK is generated using only its own saved parameters.

[0128] At timing t35, AP1 sends a signal to another AP ( Figure 8 In the case of AP2), a JGTK sharing frame including the generated JGTK is sent.

[0129] AP2 receives the JGTK sharing frame transmitted from AP1. Then, at timing t36, AP2 sets the received JGTK as a key used in joint Tx.

[0130] At timing t37, AP2 transmits Ack as a reception confirmation to AP1. AP1 receives Ack transmitted from AP2. Then, the second sequence ends.

[0131] As described previously, JGTK is shared by AP1 and AP2. In the second sequence, since either AP generates and distributes JGTK, the second sequence can be applied even when three or more APs perform cooperative transmission.

[0132] Meanwhile, since JGTK must be wirelessly transmitted as it is, there is a risk that the secret key will be leaked when the radio wave is intercepted.

[0133] When an encryption scheme is set in the link between APs, the risk is reduced, but in cases where security concerns are emphasized, Figure 4 the first sequence in

[0134] is more appropriate although inefficient.

[0135] <Configuration of JGTK Shared Frame>

[0136] Fig. 9 is a diagram showing an example of the configuration of the JGTK shared frame.

[0137] It should be noted that in Fig. 9 since the JGTK shared frame has a frame configuration that is basically similar to the JGTK handshake msg#1 frame in Figure 6 only the parts different from the JGTK handshake msg#1 frame in Figure 6 will be described.

[0138] Assign a combined Tx key flag to one bit of the key information. The combined Tx key flag is flag information indicating the association of the JGTK shared frame with JGTK.

[0139] The encrypted key data of the key information is information indicating that the subsequent key data is encrypted, and is described as 1 in the case of Fig. 9 .

[0140] JGTK information is included in one or more data fields in KDE format included in the key data. JGTK information is information indicating the sharing of JGTK. It should be noted that a notification indicating that JGTK information is included in the key data is given in the type field.

[0141] <Processing of AP1>

[0142] Fig.10is used to explain the start of the JGTK shared AP (in Fig.10 In the case of AP1) is a flowchart of the processing.

[0143] It should be noted that Fig.10 The processing is a processing implemented by the communication control unit 55 of the AP1 which controls each unit of the wireless communication unit 31.

[0144] In step S11, the communication control unit 55 of AP1 and AP2 implement multi-AP group setting (eg Figure 5 At this time, the communication control unit 55 receives the multi-AP group setting frame sent from AP2, and sends an Ack corresponding to the received multi-AP group setting frame to AP2.

[0145] In step S12, the communication control unit 55 acquires RSNE which is information for generating an encryption key of the AP2 from the received multi-AP group setting frame.

[0146] In step S13, the communication control unit 55 determines whether the same group data cipher suite exists between AP 1 and AP 2. The group data cipher suite is a scheme of a multicast encryption key.

[0147] In the case that AP1 does not have the same group data cipher suite as supported by AP2, it is determined in step S13 that there is no same group data cipher suite, and Fig.10 It should be noted that at this time, AP2 may be notified that AP1 and AP2 cannot perform joint Tx.

[0148] In the case that there is at least one group data cipher suite that can be used in common with AP2, it is determined in step S13 that the same group data cipher suite exists, and the process proceeds to step S14.

[0149] In step S14, the communication control unit 55 determines whether to handshake JGTK with AP2 and generate JGTK together (first sequence), or to generate and notify JGTK by itself (second sequence). As described above, this determination can be made by the communication control unit 55 of AP1 by checking the surrounding environment situation, can be made by allowing the user to change the setting fixed in one of the modes when the product is shipped, or can be specifically set and used according to the use purpose in the standard.

[0150] Furthermore, if the communication control unit 55 of the AP1 makes a determination by checking the surrounding situation, for example, the following determination criteria are provided.

[0151] (1) When there is no security established between the link between AP1 and AP2, ensure that both parties generate JGTK by performing a handshake.

[0152] (2) When only two APs can be used in joint Tx at the same time, make sure both APs generate JGTK by performing handshake.

[0153] (3) When encryption is established between the link between AP1 and AP2 and the number of APs that can be used simultaneously in joint Tx is three or more, it is determined that AP1 generates JGTK and distributes JGTK to other APs.

[0154] It should be noted that the aforementioned “number of APs that can be used simultaneously in joint Tx” is determined based on any one of an upper limit value set in the standard, the number of APs belonging to a multi-AP group, and capabilities between APs.

[0155] In step S14, in the case where it is determined that the JGTK is handshaked with the AP2 and the JGTK is generated together, the process proceeds to step S15.

[0156] In step S15, the communication control unit 55 sends a JGTK handshake msg#1 (eg Figure 5 Timing t14 in).

[0157] Upon receiving the JGTK handshake msg#1 frame, AP2 generates a JGTK and sends a JGTK handshake msg#2 frame (eg Figure 5 Timing t16 in ).

[0158] In step S16, the communication control unit 55 determines whether the JGTK handshake msg#2 frame transmitted from AP2 is received. In the case where it is determined in step S16 that the JGTK handshake msg#2 frame transmitted from AP2 is not received, Fig.10 The processing is finished.

[0159] In the event that it is determined in step S16 that the JGTK handshake msg#2 frame transmitted from AP2 is received, the process proceeds to step S17.

[0160] In step S17, the communication control unit 55 generates a JGTK. At this time, the SNonce and RSNE information included in the JGTK handshake msg#2 frame are used.

[0161] In step S18, the communication control unit 55 sets the joint Tx with AP2 to "enabled" as an internal process. Fig.10 The processing is finished.

[0162] When it is determined in step S14 that the JGTK for AP2 is generated and notified, the process proceeds to step S19.

[0163] In step S19, the communication control unit 55 generates a JGTK (e.g., Figure 8 at timing t34 in

[0164] In step S20, the communication control unit 55 sends a JGTK sharing frame including the generated JGTK to AP2 (e.g., Figure 8 at timing t35 in

[0165] Upon receiving the JGTK sharing frame, AP2 sets the JGTK as the key to be used in joint Tx and sends an Ack.

[0166] In step S21, the communication control unit 55 determines whether an Ack is received from AP2. When it is determined in step S21 that an Ack is received from AP2, the process proceeds to step S22.

[0167] In step S22, the communication control unit 55 sets the joint Tx with AP2 to "enabled" as an internal process. Subsequently, Fig.10 the process ends.

[0168] In addition, when it is determined in step S21 that an Ack is not received from AP2, Fig.10 the process ends.

[0169] It should be noted that regardless of whether the JGTK is generated by both or only one party, if there is no response from AP2 for a specific period, the process can be interrupted.

[0170] <Processing of AP2>

[0171] Fig.11 is a flowchart for explaining the processing of AP2.

[0172] It should be noted that Fig.11 the processing is performed by the communication control unit 55 of AP2 that controls each unit of the wireless communication unit 31.

[0173] In step S41, the communication control unit 55 receives a signal addressed to itself from AP1.

[0174] In step S42, the communication control unit 55 determines whether the received signal is a JGTK sharing frame.

[0175] When it is determined in step S42 that the received signal is a JGTK sharing frame, the process proceeds to step S43.

[0176] In step S43, the communication control unit 55 sets the shared JGTK as a key used in joint Tx based on the JGTK sharing frame (for example, Figure 8 Timing t36 in ).

[0177] In step S44, the communication control unit 55 sends an Ack to the AP1. Fig.11 The processing is finished.

[0178] Meanwhile, in the case where it is determined in step S42 that the signal is not a JGTK shared frame, the process proceeds to step S45.

[0179] The communication control unit 55 determines whether the received signal is a JGTK handshake msg#1 frame. In a case where it is determined in step S45 that the signal is a JGTK handshake msg#1 frame, the process proceeds to step S46.

[0180] In step S46, the communication control unit 55 generates a JGTK (eg, Figure 5 Timing t15 in ).

[0181] In step S47, the communication control unit 55 sends a JGTK handshake msg#2 frame to the AP1. Fig.11 The processing is finished.

[0182] Furthermore, in the case where it is determined in step S45 that the signal is not a JGTK handshake msg#1 frame, Fig.11 The processing is finished.

[0183] <Sequence in link setup phase>

[0184] Fig.12 is a diagram showing a sequence in a link setup phase.

[0185] Fig.12 The sequence in the link setup phase in is a common sequence between AP1 and STA1 and between AP2 and STA2.

[0186] At timing t51, the AP and STA perform authentication (set WEP encryption or do nothing).

[0187] At timing t52, the AP and the STA perform association (connection processing).

[0188] At timing t53, the STA sends an 802.1x authentication request to the authentication node to obtain authentication for the LAN connection.

[0189] It should be noted that the authentication node here is usually connected to the AP through an Internet line in many cases, and the STA needs to send a request signal to the AP.

[0190] The AP receives the 802.1x authentication request transmitted from the STA. Subsequently, at timing t54, the AP transmits an 802.1x authentication response signal and simultaneously transmits PMK which is a public key necessary for generating an encryption key.

[0191] In addition, although Fig.12 In fact, after several information exchanges are performed, the STA obtains the PMK, which is a public key necessary for generating an encryption key, while obtaining the 802.1x authentication response signal. As a result, at least the AP and the STA store the same PMK information. It should be noted that in the case where the 802.1x authentication is not necessary and the PMK setting has been performed, the processing of timings t53 and t54 is skipped.

[0192] At timing t55 to t58, the AP and STA perform a 4-way handshake. Fig.12 In the 4-way handshake, the JGTK information is included in msg#3.

[0193] Specifically, at timing t55, the AP transmits a 4-way handshake msg#1 frame including Anonce to the STA.

[0194] The STA receives the 4-way handshake msg#1 frame transmitted from the AP. Subsequently, at timing t56, the STA transmits a 4-way handshake msg#2 frame including Snonce and MIC to the AP.

[0195] The AP receives the 4-way handshake msg#2 frame transmitted from the STA. Subsequently, at timing t57, the AP transmits a 4-way handshake msg#3 frame including Anonce, GTK, JGTK, and MIC to the STA.

[0196] STA receives the 4-way handshake msg#3 frame sent from AP. At this time, STA obtains GTK and JGTK. Subsequently, at timing t58, STA sends a 4-way handshake msg#4 frame including MIC to AP.

[0197] The AP receives the 4-way handshake msg#4 frame sent from the STA. Then, Fig.12 The sequence ends.

[0198] <Configuration of 4-way handshake msg#3 frame>

[0199] Fig.13 is a diagram showing a configuration example of a 4-way handshake msg#3 frame.

[0200] It should be noted that in Fig.13 In [text not provided], since the 4-way handshake msg#3 frame has a configuration substantially similar to that of the JGTK handshake msg#1 frame in Figure 6 , only the parts different from the JGTK handshake msg#1 frame in Figure 6 will be described.

[0201] The encrypted key data of the key information is information indicating that subsequent key data is encrypted, and is described as 1 in the case of Fig.13 .

[0202] The GTK information is included in one or more data fields in KDE format included in the key data. The GTK information is information indicating the shared GTK. It should be noted that a notification indicating that the GTK information is included in the key data is given in the type field. The GTK information is encrypted using a secret key (pairwise transient key, hereinafter referred to as PTK) generated before sending the frame.

[0203] The JGTK information is included in one or more data fields in KDE format included in the key data. The JGTK information is information indicating the shared JGTK. It should be noted that a notification indicating that the JGTK information is included in the key data is given in the type field. The JGTK information is encrypted using the previously generated PTK.

[0204] In addition, only in the case where the JGTK is generated by the handshake, the MAC address of the AP is also included in one or more data fields in KDE format together with the JGTK information. It should be noted that a notification indicating that the MAC address information of the AP is included in the key data is given in the type field. The MAC address of the AP is encrypted using the previously generated PTK.

[0205] The MAC address of the AP is identification information (other than the connecting destination AP) for identifying the AP that is the cooperation partner of the combined Tx to which the JGTK is applied. The identification information is the MAC address in the case of Fig.13 , but may also be other identification information. It should be noted that in the case of distributing the JGTK from a specific AP, this field indicates the broadcast address.

[0206] In the case of assigning a label number to each AP combination for implementing the combined Tx, the label number may be notified instead of the MAC address as the identification information.

[0207] <Processing of STA>

[0208] Fig.14 is a flowchart for explaining the processing of the STA.

[0209] It should be noted that Fig.14The processing is a processing implemented by the communication control unit 155 of the STA which controls each unit of the wireless communication unit 131.

[0210] In step S61, the communication control unit 155 of the STA and the AP implement the above-mentioned Fig.12 At this time, the communication control unit 155 receives the 4-way handshake msg#3 frame transmitted from the AP.

[0211] In step S62, the communication control unit 155 determines whether JGTK is included in the 4-way handshake msg#3 frame. In the case where it is determined that JGTK is not included in the 4-way handshake msg#3 frame, Fig.14 The processing is finished.

[0212] In step S62, in the case where it is determined that JGTK is included in the 4-way handshake msg#3 frame, the process proceeds to step S63.

[0213] In step S63, the communication control unit 155 stores the JGTK together with the MAC address of the AP in the communication storage unit 156 or the like, and sets the JGTK as a key used in joint Tx. Fig.14 The processing is finished.

[0214] It should be noted that in case the STA is not compatible with Joint Tx due to capability issues, the JGTK may be discarded without being stored.

[0215] <2. Second Embodiment>

[0216] <System Configuration>

[0217] Fig.15 is a diagram showing a configuration example of a wireless communication system according to a second embodiment of the present technology.

[0218] Fig.15 The wireless communication system 201 and Figure 1 The wireless communication system 1 is different in that an AP 211 is added.

[0219] AP1 and AP2 can each communicate reliably with AP2 11 , but communication is not always direct between AP1 and AP2 .

[0220] In the wireless communication system 201 , the AP 211 controls the joint Tx of the AP 1 and the AP 2 . That is, a sequence in which the AP 211 generates a JGTK used in the joint Tx between the AP 1 and the AP 2 or a sequence in which the AP 1 and the AP 2 generate a JGTK according to an instruction of the AP 211 is implemented.

[0221] It should be noted that in Fig.15In the embodiment, AP211 may have a different device form (e.g., a controller) from AP1 and AP2, or may play a different role (e.g., a dominant AP). In the second embodiment, for simplicity, AP211 is referred to as a "controlling AP" and the other AP1 and AP2 are referred to as "non-controlling APs".

[0222] In addition, similar to the previous reference Figure 4 The overall sequence of the wireless communication system 1 described above configures the overall sequence of the wireless communication system 201 by combining the Tx setting phase Ph1 and the link setting phase Ph2, and thus illustration thereof is omitted.

[0223] In addition, since the link setup phase Ph2 of the wireless communication system 201 is similar to the previous reference Fig.12 The link setup phase of the wireless communication system 1 described above is omitted, and thus its description will be omitted. Therefore, the joint Tx setup phase of the wireless communication system 201 will be described below.

[0224] <Third sequence in joint Tx setup phase>

[0225] Fig.16 is a diagram showing a third sequence in which AP211 , AP1 , and AP2 share the same JGTK in the joint Tx setup phase.

[0226] Fig.16 The sequence of distributing JGTK3 generated by AP211 to AP1 and AP2 is shown as the third sequence. It should be noted that Fig.16 The basic processing in is similar to that in the previous reference Figure 8 The second sequence of description.

[0227] At timing t211 , AP1 and AP2 transmit a multi-AP group setting frame to AP211 , and set a group for implementing cooperative communication.

[0228] The AP211 receives the multi-AP group setting frame, and transmits an Ack to the AP1 and AP2 at timing t212. The AP1 and AP2 receive the Ack.

[0229] The AP211 and the AP1 perform link setup between the AP211 and the AP1 at timing t213. The link setup mainly establishes a method for exchanging control signals between the AP211 and the AP1.

[0230] The AP211 and AP2 perform link setup between the AP211 and AP2 at timing t214. The link setup mainly establishes a method for exchanging control signals between the AP211 and AP2.

[0231] At timing t215, AP211 generates JGTK3 using only the parameters stored in itself.

[0232] At timing t216, AP211 sends a signal to other APs (at Fig.16 In the case of AP1 and AP2), a JGTK shared frame including the generated JGTK3 is sent.

[0233] AP1 and AP2 receive the JGTK sharing frame. At timing t217, AP1 and AP2 set the received JGTK3 as a key to be used at the time of joint Tx.

[0234] At timing t218, AP1 and AP2 transmit Ack to AP211. AP211 receives the Ack transmitted from AP1 and AP2.

[0235] As described above, JGTK3 is shared by AP211, AP1, and AP2. In the third sequence, since AP211 as a controlling AP generates JGTK3 and sends JGTK3 to AP1 and AP2 as non-controlling APs, the third sequence can be applied even when three or more APs implement cooperative communication.

[0236] At the same time, since JGTK must be wirelessly transmitted as it is, there is a risk that the secret key will be leaked when radio waves are intercepted.

[0237] It should be noted that, here, JGTK3 represents a secret key used when joint Tx is implemented by the combination of AP1, AP2, and AP211, and a similar secret key may be used when joint Tx of another combination of APs is implemented.

[0238] <Fourth sequence in joint Tx setup phase>

[0239] Fig.17 is a diagram of a fourth sequence showing that AP1 and AP2 share the same JGTK in the joint Tx setup phase.

[0240] As the fourth sequence, Fig.17 FIG. 10 shows a diagram in which AP211 as a control AP generates a JGTK that is used only by a pair of AP1 and AP2 as non-control APs. 12 And the JGTK generated by AP211 12 Sequence distributed to AP1 and AP2.

[0241] because Fig.17 The processing of timing t241 to t244 in is similar to Fig.16 The processing of timing t211 to t214 in FIG. 1 is omitted, and therefore its description will be omitted.

[0242] At timing t245, AP211 sends a JGTK information request frame to AP1 and AP2 to request from AP1 and AP2 the information (random number information) necessary for generating JGTK. 12 AP1 and AP2 receive the JGTK information request frame. The JGTK information request frame includes PMK information.

[0243] At timing t246, AP1 and AP2 send JGTK information response frames each including the information (random number information) necessary for generating JGTK. 12 AP211 receives the JGTK information response frames sent from AP1 and AP2 respectively.

[0244] At timing t247, AP211 generates JGTK based on the information included in the received JGTK information response frames. 12 .

[0245] It should be noted that Fig.17 the processing at timings t248 to t250 in Fig.16 is basically similar to the processing at timings t216 to t218 in

[0246] and thus its description will be omitted. 12 As described above, JGTK

[0247] <Configuration of JGTK Information Request Frame>

[0248] Fig.18 is a diagram showing a configuration example of the JGTK information request frame.

[0249] Fig.18 The JGTK information request frame in

[0250] includes each field of frame control, duration, receiver address (RA), transmitter address (TA), frame body, and frame check sequence (FCS).

[0251] The frame body includes at least category, MAP action, and PMKID.

[0252] The MAP action is information indicating that the frame is a JGTK information request.

[0253] It should be noted that in Fig.18 the action frame based on IEEE802.11 shows the JGTK information request frame. However, in this technology, the frame configuration is not limited to Fig.18frame configuration, and only requires including at least the MAP actions and PMKID described above.

[0254] In addition, the Fig.18 JGTK information request frame in is described under the assumption of a MAC frame, but can also be transmitted as a TCP / IP frame as long as the information described above is available.

[0255] <Configuration of JGTK information response frame>

[0256] Fig.19 is a diagram showing an example of the configuration of the JGTK information response frame.

[0257] Fig.19 The configuration of the JGTK information request frame of is basically similar to that of the Fig.18 JGTK information request frame of, so only the parts different from the Fig.18 JGTK information request frame of will be described.

[0258] Fig.19 The frame body in at least includes a category, MAP actions, and a one-time random number.

[0259] The MAP action is information indicating that the frame is a JGTK information response.

[0260] The one-time random number is random number information used to generate JGTK.

[0261] <Fifth sequence in the joint Tx setup phase>

[0262] Fig. 20 is a diagram showing the fifth sequence in which AP1 and AP2 share the same JGTK in the joint Tx setup phase.

[0263] As the fifth sequence, Fig. 20 shows the sequence in which AP1 and AP2 directly exchange and generate a JGTK dedicated to the joint Tx of AP1 and AP2 as non-control APs according to the instructions of AP211 as the control AP 12 sequence.

[0264] Since Fig. 20 the processing of timings t271 to t274 in is similar to the processing of timings t211 to t214 in Fig.16 its description will be omitted.

[0265] At timing t275, AP211 sends a JGTK generation request frame to AP1 or AP2 (AP1 in the case of Fig. 20 ). AP1 receives the JGTK generation request frame.

[0266] Since the processing of timings t276 to t279 is the same as that of Figure 5 The processing of timings t14 to t17 in is basically similar, so its description will be omitted. That is, during this time period, direct exchange is implemented by AP1 and AP2, and JGTK dedicated to joint Tx is generated in AP1 and AP2. 12 .

[0267] At timing 280, AP1 sends a JGTK generation response frame including information indicating whether the generation of 12 JGTK was successful or failed to AP211. Subsequently, Fig. 20 the processing ends.

[0268] As described previously, JGTK 12 is shared by AP1 and AP2. That is, similar to the JGTK generated through the fourth sequence, the JGTK generated through the fifth sequence is used according to the AP combination that jointly performs cooperative transmission.

[0269] <Configuration of JGTK Generation Request Frame>

[0270] Fig.21 is a diagram showing an example configuration of a JGTK generation request frame.

[0271] Since Fig.21 the configuration of the JGTK generation request frame in Fig.18 is basically similar to the JGTK information request frame in Fig.18 only the parts different from the JGTK information request frame in

[0272] Fig.21 will be described. The frame body in

[0273] at least includes a category, a MAP action, the MAC address of the AP, a PMKID, and an RSNE.

[0274] The MAP action is information indicating that this frame is a JGTK generation request frame.

[0275] The MAC address of the AP is the address information of the partner AP (e.g., AP1) that will generate JGTK together with the request destination of this request frame (e.g., AP2).

[0276] The PMKID is the PMK information used when generating JGTK.

[0277] <Configuration of JGTK Generation Response Frame>

[0278] Fig. 22 is a diagram showing an example configuration of a JGTK generation response frame.

[0279] Since Fig. 22 The configuration of JGTK in generating response frames is the same as Fig.18 The JGTK information request frame in is basically similar, so only the ones that are related to Fig.18 The different parts of the JGTK information request frame.

[0280] Fig. 22 The frame body in includes at least the category, MAP action and success code.

[0281] The MAP action is information indicating that this frame is a response generated by JGTK.

[0282] The success code is information indicating whether the generation of JGTK succeeded or failed. It should be noted that, in the case of failure, the success code may include information indicating the reason (reason code).

[0283] <Control AP Processing>

[0284] Fig.23 This is a flowchart for explaining the process of controlling the AP (AP211).

[0285] It should be noted that Fig.23 An example is shown in which AP211 selects a method of generating JGTK to be used between AP1 and AP2. Fig.23 The processing is a processing implemented by the communication control unit 55 of the AP 211 which controls each unit of the wireless communication unit 31.

[0286] In step S211, the communication control unit 55 of AP211 implements multi-AP group setting (eg, Fig. 20 Timing t1 and t2 in ).

[0287] In step S212, the communication control unit 55 acquires information (RSNE) for generating encryption keys of the AP1 and AP2 from each multi-AP group setting frame.

[0288] In step S213 , the communication control unit 55 determines whether the same group data cipher suite exists between AP1 and AP2 .

[0289] If there is no scheme identical to the group data cipher suite in which AP1 and AP2 are compatible with each other, it is determined in step S213 that there is no identical group data cipher suite, and Fig.23 It should be noted that at this time, the fact that joint Tx cannot be implemented between AP1 and AP2 can be notified to AP1 and AP2.

[0290] In the case that there is at least one group data cipher suite that can be used in common by AP1 and AP2, it is determined in step S213 that the same group data cipher suite exists, and the process proceeds to step S214.

[0291] In step S214, the communication control unit 55 determines whether to generate a common secret key only for AP1 and AP2 (the fourth or fifth sequence) or to generate and notify both AP1 and AP2 (the third sequence). The determination criteria in step S214 are the same as those described above with reference to FIG. Fig.10 Just as described.

[0292] In the event that it is determined in step S214 that a common secret key is generated only for AP1 and AP2 , the process proceeds to step S215 .

[0293] In step S215, the communication control unit 55 determines whether AP1 and AP2 can communicate directly with each other. At this time, it is determined whether direct communication is possible by obtaining detectable AP information when setting a multi-AP group. If no information related to the radio wave environment is obtained, it can be determined that "direct communication is not possible".

[0294] In a case where it is determined in step S215 that AP1 and AP2 can directly communicate with each other, the process proceeds to step S216.

[0295] In step S216, the communication control unit 55 sends a JGTK generation request frame (eg, Fig. 20 Timing t275 in).

[0296] AP1 receives the JGTK generation request frame and communicates with AP2 to generate the JGTK 12 . When generating JGTK 12 After that, AP1 sends a JGTK 12 The JGTK generates a response frame (e.g. Fig. 20 Timing t280 in ).

[0297] In step S217, the communication control unit 55 determines whether a JGTK generation response frame having "success code = true" is received from AP1 which is the request destination of the JGTK generation request frame. In the event that it is determined in step S217 that a JGTK generation response frame is received from the request destination, the process proceeds to step S218.

[0298] In step S218, the communication control unit 55 sets the joint Tx of the combination of AP1 and AP2 to enabled. Fig.23 The processing is finished.

[0299] In step S217, in the case where the communication control unit 55 receives a JGTK generation response frame having "success code = false" from the request destination, or in the case where it is determined that the JGTK generation response frame is not received from the request destination, Fig.23 Specifically, if there is no response from the request destination for a certain period of time, or if a request including an instruction JGTK is received 12 In the case of a JGTK generation response frame with generation failure information, the process is interrupted. It should be noted that the AP 211 may resend the same JGTK generation request frame if possible.

[0300] In the event that it is determined in step S215 that AP1 and AP2 cannot directly communicate with each other, the process proceeds to step S219.

[0301] In step S219, the communication control unit 55 sends a JGTK information request frame (eg, Fig.17 Timing t245 in).

[0302] AP1 and AP2 receive the JGTK information request frame and send a JGTK information response frame (eg Fig.17 Timing t246 in.

[0303] In step S220 , the communication control unit 55 receives the JGTK information response frames transmitted from the AP1 and the AP2 .

[0304] In step S221, the communication control unit 55 generates a JGTK based on the JGTK information response frames transmitted from the AP1 and the AP2. 12 (For example Fig.17 Timing t247 in).

[0305] In step S222, the communication control unit 55 sends a JGTK signal to each of AP1 and AP2. 12 The JGTK shared frame (e.g. Fig.17 Timing t248 in).

[0306] AP1 and AP2 receive the JGTK shared frame and send JGTK 12 Set to the key used in the joint Tx and send an Ack (e.g. Fig.17 Timing t250 in).

[0307] In step S223, the communication control unit 55 receives the Ack sent from AP1 and AP2. It should be noted that at this time, if there is no response from AP1 or AP2 for a certain period of time, the process is also interrupted. In addition, the communication control unit 55 of AP211 can resend the same JGTK shared frame if possible.

[0308] In step S224, the communication control unit 55 sets the joint Tx of the combination of AP1 and AP2 to enabled. Fig.23 The processing is finished.

[0309] Meanwhile, in step S214, in the case where it is determined that AP1 and AP2 are uniformly generated and notified, the process proceeds to step S225.

[0310] In step S225, the communication control unit 55 generates JGTK3 (for example, Fig.16 Timing t216 in.

[0311] In step S226, the communication control unit 55 transmits a JGTK shared frame (eg, JGTK3) including the generated JGTK3 to AP1 and AP2. Fig.16 Timing t217 in.

[0312] AP1 and AP2 receive the JGTK shared frame, set JGTK3 as the key used in joint Tx, and send Ack (e.g. Fig.16 Timing t218 in.

[0313] In step S227, the communication control unit 55 determines whether or not Ack transmitted from the AP1 and the AP2 is received. In a case where it is determined in step S227 that the Ack is received, the process proceeds to step S228.

[0314] In step S228, the communication control unit 55 sets the joint Tx of all combinations of (AP211, AP1, AP2) to enabled. Fig.23 The processing is finished.

[0315] In a case where it is determined in step S227 that the Ack of at least one of AP1 or AP2 has not been received, the process proceeds to step S229.

[0316] In step S229, the communication control unit 55 sets the joint Tx of the AP 211 and only the AP whose Ack is received to enable. It should be noted that in step S229, in the case where Acks from both are not received, the joint Tx of all combinations is set to disable. Subsequently, Fig.23 The processing is finished.

[0317] <Handling of non-controlling APs>

[0318] Fig.24 It is a flowchart for explaining the processing of the non-controlling AP (AP1).

[0319] It should be noted that, in addition to the different communication partners, Fig.24 The processing in steps S251 to S257 in is similar to Fig.11 The processing of steps S41 to S47 in , therefore, its description will be omitted. Fig.24 The processing is a processing implemented by the communication control unit 55 of the AP1 which controls each unit of the wireless communication unit 31.

[0320] In the event that it is determined in step S255 that the signal is not a JGTK handshake msg#1 frame, the process proceeds to step S258.

[0321] In step S258, the communication control unit 55 of the AP1 determines whether the received signal is a JGTK generation request frame.

[0322] In a case where it is determined in step S258 that the received signal is a JGTK generation request frame, the process proceeds to step S259 .

[0323] In step S259, the communication control unit 55 sends a JGTK handshake msg#1 frame (eg, Fig. 20 Timing t276 in.

[0324] AP2 receives the JGTK handshake msg#1 frame and generates a JGTK 12 , and sends a JGTK handshake msg#2 frame to AP1 (e.g. Fig. 20 Timing t278 in).

[0325] In step S260, the communication control unit 55 determines whether the JGTK handshake msg#2 frame is received from the AP 2. In a case where it is determined in step S260 that the JGTK handshake msg#2 frame has been received from the AP 2, the process proceeds to step S261.

[0326] In step S261, the communication control unit 55 generates a JGTK handshake msg#2 frame based on the received JGTK handshake msg#2 frame. 12 (For example Fig. 20 Timing t279 in.

[0327] In step S262, the communication control unit 55 sends a JGTK generation request frame to the request source (AP211) that sent the JGTK generation request frame. 12 The JGTK generates a response frame (e.g. Fig. 20Then, Fig.24 The processing is finished.

[0328] In a case where it is determined in step S260 that the JGTK handshake msg#2 frame has not been received from the AP2 within the certain period of time, for example, the process of step S261 is skipped, and the process proceeds to step S262.

[0329] In this case, in step S262, the communication control unit 55 sends a notification JGTK generation request frame to the request source (AP211) that sent the JGTK generation request frame. 12 Generate a failed JGTK generated response frame. Then, Fig.24 It should be noted that the retransmission of the JGTK handshake msg#1 frame may be implemented several times.

[0330] Meanwhile, in the case where it is determined in step S258 that the signal is not a JGTK generation request frame, the process proceeds to step S263.

[0331] In step S263, the communication control unit 55 determines whether the received signal is a JGTK information request frame. In a case where it is determined in step S263 that the received signal is a JGTK information request frame, the process proceeds to step S264.

[0332] In step S264, the communication control unit 55 sends a JGTK information response frame (eg, Fig.17 Then, Fig.24 In this case, the JGTK is then generated by AP211, the JGTK sharing frame is sent from AP211, and the process is repeated again. Fig.24 processing.

[0333] In the case where it is determined in step S263 that the received signal is not a JGTK information request frame, Fig.24 The processing is finished.

[0334] <3. Others>

[0335] <Effects of this technology>

[0336] In the present technology, a communication device (AP1) shares a first secret key (JGTK) for cooperative transmission and multicast with other communication devices, and the first secret key is used when cooperative transmission is performed to a communication terminal (STA) with one or more other communication devices (AP2).

[0337] Therefore, according to the present technology, by distributing the JGTK generated between APs to STAs, when multiple APs implement data transmission in joint Tx, each AP can uniformly implement encryption using the secret key JGTK regardless of the destination STA and start transmission. In addition, similarly, when receiving data in joint Tx, the STA can obtain data necessary for itself by releasing encryption using the JGTK of the AP combination suitable for cooperative transmission.

[0338] Even if the number of STAs increases, the encryption key used for multicast is easy to manage. In addition, since the joint Tx physically forms a high-dimensional beam, it is difficult for a third party to intercept packets transmitted through the joint Tx even if the secret key dedicated to the joint Tx is leaked.

[0339] As described above, according to the present technology, the AP does not need to know the individual secret keys (PTKs) of all STAs belonging to other BSSs, and can easily manage the secret keys.

[0340] <Computer Configuration Example>

[0341] The series of processing steps described above can be executed by hardware or software. In the case where the series of processing is executed by software, a program constituting the software is installed from a program recording medium into a computer incorporated in dedicated hardware, a general-purpose personal computer, or the like.

[0342] Fig.25 is a block diagram showing a hardware configuration example of a computer that executes the series of processes described above by a program.

[0343] A central processing unit (CPU) 301 , a read only memory (ROM) 302 , and a random access memory (RAM) 303 are connected to each other via a bus 304 .

[0344] Furthermore, an input / output interface 305 is connected to the bus 304. An input unit 306 including a keyboard, a mouse, etc. and an output unit 307 including a display, a speaker, etc. are connected to the input / output interface 305. Furthermore, a storage unit 308 including a hard disk, a nonvolatile memory, etc., a communication unit 309 including a network interface, etc., and a drive 310 that drives a removable medium 311 are connected to the input / output interface 305.

[0345] In the computer configured as described above, for example, the CPU 301 loads the program stored in the storage unit 308 into the RAM 303 via the input / output interface 305 and the bus 304 and executes the program, thereby implementing the series of processing described above.

[0346] The program executed by the CPU 301 is provided by being recorded in the removable medium 311 or through a wired or wireless transmission medium such as a local area network, the Internet, or digital broadcasting, for example, and is installed in the storage unit 308 .

[0347] It should be noted that the program executed by the computer may be a program that implements processing in time series in the order described in this specification, or may be a program that implements processing in parallel or at necessary timing such as when a call is made.

[0348] It should be noted that in this specification, a system means a collection of multiple components (devices, modules (components), etc.), and it is not important whether all components are in the same housing. Therefore, multiple devices housed in separate housings and connected via a network and one device housing multiple modules in one housing are both systems.

[0349] Furthermore, the effects described in this specification are merely examples and not limitations, and other effects may be provided.

[0350] The embodiments of the present technology are not limited to the embodiments described above, and various modifications can be made without departing from the gist of the present technology.

[0351] For example, the present technology may have a configuration of cloud computing in which one function is collaboratively shared and processed by multiple devices over a network.

[0352] Furthermore, each step described in the flowchart described above may be performed by one device, or may be shared and performed by a plurality of devices.

[0353] Furthermore, in the case where a plurality of processes are included in one step, the plurality of processes included in one step may be executed by one device, or may be shared and executed by a plurality of devices.

[0354] <Configuration combination example>

[0355] The present technology may also have the following configurations.

[0356] (1) A communication device comprising

[0357] The communication control unit shares a first secret key used for cooperative transmission and multicast with other communication devices, wherein the first secret key is used when cooperative transmission is performed on a communication terminal together with one or more other communication devices.

[0358] (2) The communication device according to (1),

[0359] The communication control unit notifies the communication terminal of the first secret key and the second secret key used for multicast.

[0360] (3) The communication device according to (2),

[0361] The communication control unit notifies the communication terminal of the first secret key together with identification information, wherein the identification information indicates other communication devices that implement cooperative transmission using the first secret key.

[0362] (4) The communication device according to any one of (1) to (3),

[0363] The communication control unit selectively uses the first secret key according to the number and identification information of other communication devices that implement the coordinated transmission together.

[0364] (5) The communication device according to any one of (1) to (3), further comprising:

[0365] a generating unit for generating a first secret key,

[0366] The communication control unit shares the generated first secret key with one or more other communication devices.

[0367] (6) The communication device according to any one of (1) to (3), further comprising:

[0368] A generating unit for generating the same first secret key as other communication devices by exchanging information with other communication devices.

[0369] (7) The communication device according to any one of (1) to (3),

[0370] The communication control unit requests at least one other communication device to generate a first secret key between a plurality of other communication devices.

[0371] (8) The communication device according to (7),

[0372] The communication control unit acquires, from at least one other communication device, a generation result as to whether the first secret key is successfully generated between the plurality of other communication devices.

[0373] (9) The communication device according to any one of (1) to (3),

[0374] The communication control unit requests information necessary for generating the first secret key from a plurality of other communication devices.

[0375] (10) The communication device according to (9),

[0376] The communication control unit acquires information necessary for generating a first secret key from a plurality of other communication devices, generates the first secret key, and transmits the first secret key to the other communication devices.

[0377] (11) A communication method, wherein

[0378] The communication device is configured to perform the following operations:

[0379] A secret key for cooperative transmission and multicast is shared with other communication devices, and is used when cooperative transmission is performed on the communication terminal together with one or more other communication devices.

[0380] (12) A communication terminal comprising

[0381] A communication control unit sets a first secret key to be used for decryption based on identification information indicating a plurality of communication devices when receiving a signal by cooperative transmission using the plurality of communication devices, the communication devices implementing cooperative transmission together using the first secret key for cooperative transmission and multicast.

[0382] (13) The communication terminal according to (12),

[0383] The communication control unit acquires the first secret key simultaneously with the second secret key for multicast notified from the communication device.

[0384] (14) The communication terminal according to (12) or (13), further comprising:

[0385] A storage unit stores the identification information together with the first secret key.

[0386] (15) A communication method, wherein

[0387] The communication terminal is configured to perform the following operations:

[0388] When receiving a signal by cooperative transmission using a plurality of communication devices, a first secret key to be used for decryption is set based on identification information indicating the communication devices, and the communication devices implement cooperative transmission together using the first secret key for cooperative transmission and multicast.

[0389] Reference numerals list

[0390] 1——Wireless communication system

[0391] 11——Communication device

[0392] 31——Wireless communication unit

[0393] 32 - Control unit

[0394] 33 - Storage unit

[0395] 34——WAN communication unit

[0396] 41 - Antenna

[0397] 51——Amplification unit

[0398] 52——Wireless Interface Unit

[0399] 53——Signal processing unit

[0400] 54——Data processing unit

[0401] 55——Communication control unit

[0402] 56——Communication storage unit

[0403] 111——Communication device

[0404] 131——Wireless communication unit

[0405] 132——Control unit

[0406] 133 - Storage unit

[0407] 134——WAN communication unit

[0408] 141——Antenna

[0409] 151——Amplification unit

[0410] 152——Wireless Interface Unit

[0411] 153——Signal Processing Unit

[0412] 154——Data processing unit

[0413] 155——Communication control unit

[0414] 156——Communication storage unit

Claims

1. A communication device, comprising: The communication control unit shares a first secret key for cooperative transmission and multicast with other communication devices, wherein the first secret key is used when cooperative transmission is performed on a communication terminal together with one or more other communication devices.

2. The communication device according to claim 1, in, The communication control unit notifies the communication terminal of the first secret key together with the second secret key used for multicast.

3. The communication device according to claim 2, in, The communication control unit notifies the communication terminal of the first secret key together with identification information indicating other communication devices that jointly perform cooperative transmission to which the first secret key is applied.

4. The communication device according to claim 1, in, The communication control unit selectively uses the first secret key according to the number and identification information of other communication devices that perform cooperative transmission together.

5. The communication device according to claim 1, further comprising a generating unit for generating a first secret key, in, The communication control unit shares the generated first secret key with one or more other communication devices.

6. The communication device according to claim 1, further comprising A generating unit for generating the same first secret key as other communication devices by exchanging information with other communication devices.

7. The communication device according to claim 1, in, The communication control unit requests at least one other communication device to generate a first secret key between a plurality of other communication devices.

8. The communication device according to claim 7, in, The communication control unit acquires, from at least one other communication device, a generation result as to whether the first secret key is successfully generated between the plurality of other communication devices.

9. The communication device according to claim 1, in, The communication control unit requests information necessary for generating a first secret key from a plurality of other communication devices.

10. The communication device according to claim 9, in, The communication control unit acquires information necessary for generating a first secret key from a plurality of other communication devices, generates the first secret key, and transmits the first secret key to the other communication devices.

11. A communication method, wherein The communication device is configured to perform the following operations: A secret key for cooperative transmission and multicast is shared with other communication devices, and is used when cooperative transmission is performed on the communication terminal together with one or more other communication devices.

12. A communication terminal comprising A communication control unit sets a first secret key to be used for decryption based on identification information indicating a plurality of communication devices when receiving a signal by cooperative transmission using the plurality of communication devices, the communication devices implementing cooperative transmission together using the first secret key for cooperative transmission and multicast.

13. The communication terminal according to claim 12, in, The communication control unit acquires the first secret key simultaneously with the second secret key for multicast notified from the communication device.

14. The communication terminal according to claim 12, further comprising A storage unit stores the identification information together with the first secret key.

15. A communication method, wherein The communication terminal is configured to perform the following operations: When receiving a signal by cooperative transmission using a plurality of communication devices, a first secret key to be used for decryption is set based on identification information indicating the communication devices, and the communication devices implement cooperative transmission together using the first secret key for cooperative transmission and multicast.

Images