MACsec link creation method, base station and storage medium

Abstract

The embodiment of the invention provides an MACsec link creation method, a base station and a storage medium, and belongs to the technical field of communication. The method comprises the following steps: acquiring base station information of a plurality of adjacent base stations; a local area network neighbor cell base station pool is established according to the base station information of the multiple neighbor cell base stations, and the local area network neighbor cell base station pool comprises multiple target neighbor cell base stations in the same local area network; acquiring an MACsec parameter of the local area network neighbor base station pool according to the base station information of the plurality of target neighbor base stations; and based on the MACsec parameter, creating an MACsec link of the local area network neighbor cell base station pool. According to the technical scheme provided by the embodiment of the invention, the maintenance cost of the MACsec link can be reduced under the condition of protecting the security of the communication link.

Description

Technical Field

[0001] This application relates to the field of communication technology, and in particular to a MACsec link creation method, a base station, and a storage medium. Background Technology

[0002] MACsec (Media Access Control Security) can be used to provide users with secure MAC (Media Access Control) layer data transmission and reception services. MACsec identifies messages sent by authenticated devices and encrypts and performs integrity checks on authenticated user data, preventing the port from processing messages from unauthenticated devices or messages tampered with by unauthenticated devices.

[0003] In 4G (4th generation) or 5G (5th generation) base station communication, the number of base stations is enormous, and secure communication between these numerous base stations is required. However, traditional MACsec uses a manual configuration method, which is prone to errors during configuration, thus affecting communication services, and also incurs high maintenance costs. Summary of the Invention

[0004] This application provides a MACsec link creation method, base station, and storage medium, aiming to solve the problems of traditional MACsec using manual configuration, which is prone to errors during configuration, thereby affecting communication services and having high maintenance costs.

[0005] In a first aspect, embodiments of this application provide a MACsec link creation method, comprising: acquiring base station information of multiple neighboring base stations; establishing a local area network (LAN) neighboring base station pool based on the base station information of the multiple neighboring base stations, wherein the LAN neighboring base station pool includes multiple target neighboring base stations within the same LAN; acquiring MACsec parameters of the LAN neighboring base station pool based on the base station information of the multiple target neighboring base stations; and creating a MACsec link of the LAN neighboring base station pool based on the MACsec parameters.

[0006] Secondly, embodiments of this application also provide a base station, the base station including a processor, a memory, a computer program stored in the memory and executable by the processor, and a data bus for implementing connection communication between the processor and the memory, wherein when the computer program is executed by the processor, it implements any of the MACsec link creation methods provided in embodiments of this application.

[0007] Thirdly, embodiments of this application also provide a storage medium for computer-readable storage, characterized in that the storage medium stores one or more programs, which can be executed by one or more processors to implement any of the MACsec link creation methods provided in embodiments of this application.

[0008] This application provides a MACsec link creation method, base station, and storage medium. This application can automatically create MACsec links for multiple target neighboring base stations within the same local area network based on the base station information of multiple neighboring base stations, thereby reducing manual intervention in the MACsec link creation process, saving MACsec link configuration time, and reducing the risk of communication service errors. Thus, it can reduce the maintenance cost of MACsec links while protecting the security of communication links. Attached Figure Description

[0009] Figure 1 This application provides a schematic flowchart of a MACsec link creation method according to an embodiment of the present application.

[0010] Figure 2 A schematic diagram of a scenario for implementing the MACsec link creation method provided in the embodiments of this application;

[0011] Figure 3 Another scenario diagram illustrating the implementation of the MACsec link creation method provided in the embodiments of this application;

[0012] Figure 4 A flowchart illustrating the steps of another MACsec link creation method provided in this application embodiment;

[0013] Figure 5 A flowchart illustrating the steps of another MACsec link creation method provided in this application embodiment;

[0014] Figure 6 A schematic diagram of another scenario for implementing the MACsec link creation method provided in the embodiments of this application;

[0015] Figure 7 A schematic diagram of another scenario for implementing the MACsec link creation method provided in the embodiments of this application;

[0016] Figure 8 This is a schematic block diagram of a base station structure provided in an embodiment of this application. Detailed Implementation

[0017] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0018] The flowchart shown in the attached diagram is for illustrative purposes only and does not necessarily include all content and operations / steps, nor does it necessarily have to be performed in the order described. For example, some operations / steps can be broken down, combined, or partially merged, so the actual execution order may change depending on the actual situation.

[0019] It should be understood that the terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to limit the scope of the application. As used in this specification and the appended claims, the singular forms “a,” “an,” and “the” are intended to include the plural forms unless the context clearly indicates otherwise.

[0020] MACsec (Media Access Control Security) defines a method for secure data communication based on a LAN (Local Area Network), including user data encryption, data frame integrity checks, and data source authenticity verification. In communication systems with a very large number of base stations, the number of Xn / X2 links between neighboring base stations increases exponentially with the number of base stations, thus requiring secure communication between a large number of base stations.

[0021] In related technologies, IPsec (Internet Protocol Security) links can be established between neighboring links. However, this method incurs significant performance degradation. The MACsec link creation method provided in this application performs MACsec encryption and decryption in hardware, supporting line-speed encrypted throughput for high-speed Ethernet. By using MACsec for security protection, speed can be improved, latency minimized, and overhead reduced, thus minimizing performance degradation.

[0022] In related technologies, MACsec can be configured manually. However, manual configuration is prone to errors, which can affect services and result in high maintenance costs. The MACsec link creation method provided in this application can automatically create MACsec links, saving configuration time and reducing the risk of communication service errors, thereby lowering the maintenance cost of MACsec links.

[0023] In 4G or 5G base stations, there are often a large number of neighboring base stations that need to communicate securely with each other. If some or all of these neighboring base stations are in the same local area network, the solution of this invention can be used to dynamically create MACsec links. This MACsec link creation method can be applied to base stations, which may include macro base stations, micro base stations, remote radio base stations, edge stations, etc., and this application does not specifically limit the types of base stations.

[0024] The following detailed description of some embodiments of this application is provided in conjunction with the accompanying drawings. Unless otherwise specified, the following embodiments and features can be combined with each other.

[0025] Please refer to Figure 1 , Figure 1 This is a flowchart illustrating the steps of a MACsec link creation method provided in an embodiment of this application.

[0026] like Figure 1 As shown, the MACsec link creation method includes steps S101 to S104.

[0027] Step S101: Obtain base station information of multiple neighboring base stations.

[0028] The base station information includes, but is not limited to, the IP information, MAC address, and certificate information of neighboring base stations. It should be noted that, to achieve fully automated creation of MACsec links, the base station information of multiple neighboring base stations can be obtained from both the neighboring base stations and the core network, thereby acquiring common information such as the IP information of the neighboring base stations.

[0029] In one embodiment, base station information of multiple neighboring base stations is obtained via signaling. This signaling method may include System 1 interface signaling (S1). That is, the base station information can be obtained by sending S1 signaling to multiple neighboring base stations, but is not limited to this method.

[0030] In one embodiment, base station information of multiple neighboring base stations is obtained through network management configuration. This network management configuration can include obtaining the information from the core network. In other words, the base station information can be obtained by sending a base station information retrieval request to the core network, which, upon receiving the request, returns the base station information of multiple neighboring base stations.

[0031] For example, such as Figure 2As shown, base stations 1, 2, and 3 are all in the same Layer 2 switching network, while base station 4 is not in the same local area network as base station 1. The link between base station 1 and the core network is not limited by the specific network topology: it can be connected via either a Layer 3 network device group or a Layer 2 network device group. Base station 1 can obtain information about neighboring base stations, including those of base stations 2, 3, and 4, from the core network through network management configuration.

[0032] Step S102: Based on the base station information of multiple neighboring base stations, establish a local area network neighboring base station pool. The local area network neighboring base station pool includes multiple target neighboring base stations within the same local area network.

[0033] Based on the base station information of multiple neighboring base stations, multiple target neighboring base stations within the same local area network (LAN) are identified from these neighboring base stations. These multiple target neighboring base stations within the same LAN are called LAN neighboring base stations. In other words, the LAN neighboring base station pool refers to all LAN neighboring base stations among the base stations in the same LAN. LAN neighboring base stations refer to base stations in 4G and 5G base station networks that need to establish neighboring cell relationships for related services and are located within the same LAN.

[0034] In one embodiment, the base station information includes IP information. Based on the IP information of multiple neighboring base stations, multiple target neighboring base stations located within the same local area network (LAN) are identified from among the multiple neighboring base stations. A LAN neighboring base station pool is then established based on these multiple target neighboring base stations. It should be noted that by using the IP information of multiple neighboring base stations, it is possible to accurately determine whether multiple neighboring base stations are within the same LAN, thereby enabling the establishment of a LAN neighboring base station pool that includes multiple target neighboring base stations.

[0035] Understandably, multiple target neighboring base stations within the same local area network (LAN) are considered MACsec members, and all Layer 2 reachable neighboring base stations can be included as MACsec members. When changes occur in neighboring base stations or the LAN itself, the LAN neighboring base station pool can update its MACsec member information.

[0036] In one embodiment, multiple target neighboring base stations within the same local area network are identified from multiple neighboring base stations using the Address Resolution Protocol (ARP) and base station information of multiple neighboring base stations, and these multiple target neighboring base stations within the same local area network are determined as a local area network neighboring base station pool.

[0037] For example, based on the IP information of multiple neighboring base stations, probe data packets are sent to multiple neighboring base stations; response data packets returned by multiple neighboring base stations are received, and the multiple neighboring base stations that returned the response data packets are identified as target neighboring base stations.

[0038] It should be noted that, in order to identify multiple target neighboring base stations within the same local area network (LAN) from among multiple neighboring base stations, probe data packets can be sent to each of the neighboring base stations using their IP information. If a response data packet is received from a neighboring base station, that neighboring base station can be identified as a target neighboring base station within the same LAN. If no response data packet is received from a neighboring base station, that neighboring base station can be identified as not being within the same LAN.

[0039] For example, such as Figure 2 As shown, base station 1 first obtains base station information from the core network side for multiple neighboring base stations, including base station 2, base station 3, and base station 4. Then, base station 1 can use the ARP protocol to obtain target neighboring base stations in the same local area network as base station 1, including base station 2 and base station 3, but excluding base station 4. Based on this, a MACsec link can be automatically created based on base station 1, base station 2, and base station 3.

[0040] Step S103: Obtain the MACsec parameters of the local area network neighboring cell base station pool based on the base station information of multiple target neighboring cell base stations.

[0041] The MACsec parameters of the local area network (LAN) neighboring cell base station pool include parameters required for MACsec negotiation, such as MAC address and certificate information. The base station information of the target neighboring cell base station can include parameters required for MACsec negotiation, such as MAC address and certificate information. Therefore, the parameters required for MACsec negotiation can be easily obtained from the base station information of multiple target neighboring cell base stations to obtain the MACsec parameters of the LAN neighboring cell base station pool.

[0042] Step S104: Based on the MACsec parameters, create MACsec links for the local area network neighbor cell base station pool.

[0043] After obtaining the MACsec parameters of the LAN neighboring cell base station pool, these parameters can be used to automatically create MACsec links for the LAN neighboring cell base station pool. MACsec links enable encryption of communication between target LAN base stations within the LAN neighboring cell base station pool, allowing for normal service communication. This saves configuration time for MACsec links and reduces the risk of communication service errors.

[0044] It should be noted that traditional MACsec links establish MACsec links between two target neighboring base stations within the same local area network (LAN), and the creation method involves manually configuring MACsec parameters, which is time-consuming and prone to errors. This application provides a method for automatically creating MACsec links. These MACsec links are automatically created by multiple target neighboring base stations in a LAN neighboring base station pool, avoiding the risk of errors from manual configuration and reducing the maintenance cost of MACsec links while protecting communication link security.

[0045] In one embodiment, after creating a MACsec link for the local area network neighboring cell base station pool based on MACsec parameters, the method further includes: generating communication data to be sent; and encrypting the communication data within the local area network neighboring cell base station pool using the MACsec link. It should be noted that after creating the MACsec link for the local area network neighboring cell base station pool, service communication can be implemented within the pool using the MACsec link. Specifically, the communication data to be sent is encrypted using the MACsec link, thereby protecting the security of the communication link and overcoming the performance degradation problem caused by IPsec links.

[0046] Please refer to Figure 3 , Figure 3 A schematic diagram of a scenario for implementing the MACsec link creation method provided in the embodiments of this application, such as... Figure 3 The diagram shows base stations 10, 20, 30, and 40. Base station 10 acquires base station information from multiple neighboring base stations, including base stations 20, 30, and 40. Based on this information, it establishes an initial local area network (LAN) neighboring base station pool, determining that base stations 10, 30, and 40 belong to the same LAN neighboring base station pool. Furthermore, based on the base station information from base stations 10, 30, and 40, it obtains the MACsec parameters of the LAN neighboring base station pool and creates a MACsec link. This MACsec link enables communication between all base stations in the LAN neighboring base station pool, encrypting communication data between base stations 10, 30, and 40 via the MACsec link.

[0047] The MACsec link creation method provided in the above embodiments can automatically create MACsec links for multiple target neighboring base stations within the same local area network based on the base station information of multiple neighboring base stations. This reduces manual intervention in the MACsec link creation process, saves MACsec link configuration time, and reduces the risk of communication service errors. As a result, it can reduce the maintenance cost of MACsec links while protecting the security of communication links.

[0048] Please refer to Figure 4 , Figure 4 This is a flowchart illustrating the steps of another MACsec link creation method provided in this application embodiment.

[0049] like Figure 4 As shown, the MACsec link creation method includes steps S201 to S205.

[0050] Step S201: Obtain base station information of multiple neighboring base stations.

[0051] The base station information includes, but is not limited to, general information such as IP information, MAC address, and certificate information of neighboring base stations.

[0052] In one embodiment, the base station information of multiple neighboring base stations can be obtained through signaling, network management configuration, or other methods. This embodiment does not impose any specific limitations on these methods.

[0053] Step S202: Based on the base station information of multiple neighboring base stations, establish a local area network neighboring base station pool. The local area network neighboring base station pool includes multiple target neighboring base stations within the same local area network.

[0054] In one embodiment, probe data packets are sent to multiple neighboring base stations based on their IP information; the neighboring base station that returns a response data packet is identified as a target neighboring base station in the same local area network, thereby establishing a local area network neighboring base station pool that includes multiple target neighboring base stations.

[0055] Step S203: Obtain the MACsec parameters of the local area network neighboring cell base station pool based on the base station information of multiple target neighboring cell base stations.

[0056] The MACsec parameters of the local area network neighboring cell base station pool include the parameters required for MACsec negotiation, such as MAC address, certificate information, etc. The parameters required for MACsec negotiation can be obtained from the base station information of multiple target neighboring cell base stations.

[0057] Step S204: Based on the MACsec parameters, generate the group security connection joint CA information of the local area network neighboring cell base station pool.

[0058] In one embodiment, the Secure Connectivity Association (CA) information of the local area network neighboring cell base station pool is negotiated through the Media Access Control Key Agreement protocol (MACsec Key Agreement protocol, MKA) and MACsec parameters.

[0059] It should be noted that when the number of target neighboring base stations in the local area network neighboring base station pool is greater than or equal to three (in fact, this is common in 4 / 5G base station communication networking), using group CA (Secure Connectivity Association) information can achieve the effect of communication security while reducing maintenance costs.

[0060] Step S205: Based on the group CA information, create a MACsec link for the local area network neighbor cell base station pool.

[0061] After obtaining the group CA information of the LAN neighboring cell base station pool, the MACsec link of the LAN neighboring cell base station pool can be automatically created using this group CA information. The MACsec link enables encryption of communication content between target LAN base stations within the LAN neighboring cell base station pool, allowing for normal service communication. This saves MACsec link configuration time and reduces the risk of communication service errors.

[0062] It should be noted that traditional MACsec links are mostly implemented using paired CAs, meaning that two members in a CA group establish a MACsec link between each other. This creation is achieved through manual configuration of MACsec parameters, which is time-consuming and prone to errors. In the MACsec link creation method provided in this application, a CA group has more than two members, who jointly establish a MACsec link, avoiding the risk of errors from manual configuration and saving resources.

[0063] In one embodiment, after creating a MACsec link for the local area network neighboring cell base station pool based on group CA information, the method further includes: generating communication data to be sent; and encrypting the communication data within the local area network neighboring cell base station pool using the MACsec link. It should be noted that after creating the MACsec link for the local area network neighboring cell base station pool, the MACsec link can be used for Xn / X2 communication required for services within the local area network neighboring cell base station pool. Specifically, the MACsec link is used to encrypt the communication data to be sent, thereby protecting the security of the communication link and overcoming performance degradation issues.

[0064] The MACsec link creation method provided in the above embodiments can generate group CA information of the local area network neighboring base station pool based on the base station information of multiple neighboring base stations. This enables the automatic creation of MACsec links between multiple target neighboring base stations in the same local area network based on the group CA information. This reduces manual intervention in the MACsec link creation process, saves MACsec link configuration time, and reduces the risk of communication service errors. As a result, it can reduce the maintenance cost of MACsec links while protecting the security of communication links.

[0065] In one embodiment, please refer to Figure 5 The MACsec link creation method also includes steps S301 to S304.

[0066] Step S301: Obtain the base station information of multiple neighboring base stations after the changes.

[0067] It should be noted that neighboring base stations can change; these changes can include adding or deleting them. Alternatively, an anomaly in the MACsec link, leading to a decrease in MACsec members, will also cause changes in neighboring base stations.

[0068] Therefore, when there are changes in neighboring base stations, the base station information of the neighboring base stations will also change, so it is possible to obtain the base station information of multiple neighboring base stations after the changes.

[0069] like Figure 6 and Figure 7 As shown, Figure 6 The local area network neighbor cell base station pool includes base station A, base station B, and base station C. Figure 7 Base station A is no longer a neighboring base station; base stations D and E have been newly added as neighboring base stations in the local area network. The base station information for the changed neighboring base stations includes the base station information for base stations D and E, but excludes the base station information for base station A.

[0070] Step S302: Update the local area network neighboring cell base station pool based on the changed information of multiple base stations; wherein, the updated local area network neighboring cell base station pool includes multiple new neighboring cell base stations within the same local area network.

[0071] It should be noted that neighboring base stations can be added or deleted. Based on the base station information of multiple neighboring base stations after the changes, the local area network neighboring base station pool can be updated, thereby realizing the dynamic maintenance of the local area network neighboring base station pool.

[0072] Based on the base station information of multiple neighboring base stations, multiple target neighboring base stations within the same local area network (LAN) are identified from these neighboring base stations. These multiple target neighboring base stations within the same LAN are called LAN neighboring base stations. In other words, the LAN neighboring base station pool refers to all LAN neighboring base stations among the base stations in the same LAN. LAN neighboring base stations refer to base stations in 4G and 5G base station networks that need to establish neighboring cell relationships for related services and are located within the same LAN.

[0073] In one embodiment, the modified information of the multiple base stations all includes IP information. Based on the modified IP information of the multiple neighboring base stations, multiple new target neighboring base stations located in the same local area network are determined from the modified multiple neighboring base stations; based on the multiple new target neighboring base stations, a new local area network neighboring base station pool is established.

[0074] It should be noted that, based on the IP information of multiple neighboring base stations, it is possible to accurately determine whether multiple neighboring base stations are within the same local area network (LAN), thereby enabling the establishment of a LAN neighboring base station pool that includes multiple target neighboring base stations. When changes occur in the neighboring base stations or the LAN, the LAN neighboring base station pool can update its MACsec member information.

[0075] In one embodiment, the changed information of multiple base stations is compared with the information of multiple base stations before the change to obtain the change information of neighboring base stations; based on the change information of neighboring base stations, the local area network neighboring base station pool is updated. It should be noted that the changed information of multiple base stations can be compared with the information of multiple base stations before the change to obtain the change information of neighboring base stations. Then, based on the change information of neighboring base stations, the local area network neighboring base station pool is updated, thereby realizing the dynamic maintenance of the local area network neighboring base station pool.

[0076] Step S303: Update the MACsec parameters of the local area network neighboring cell base station pool based on the base station information of multiple new neighboring cell base stations.

[0077] It should be noted that the base station information of multiple new neighboring cells can include parameters required for MACsec negotiation, such as MAC address and certificate information. Therefore, the MACsec parameters of the local area network neighboring cell base station pool can be updated using the base station information of multiple new neighboring cells.

[0078] For example, based on the base station information of multiple new neighboring base stations, the MACsec parameters of the local area network neighboring base station pool are regenerated, thereby updating the MACsec parameters of the local area network neighboring base station pool.

[0079] In one embodiment, after updating the MACsec parameters of the local area network neighboring cell base station pool, other base stations in the pool are notified to add or remove MACsec members. For example, an instruction message can be sent to other base stations in the new local area network neighboring cell base station pool, instructing them to add or remove MACsec members.

[0080] Step S304: Based on the updated MACsec parameters, update the MACsec links of the local area network neighboring cell base station pool.

[0081] After obtaining the updated MACsec parameters, these parameters can be used to automatically create new MACsec links for the new LAN neighboring cell base station pool. These new MACsec links enable encryption of communication between target LAN base stations within the new pool, allowing for normal service communication. This saves MACsec link configuration time and reduces the risk of communication service errors.

[0082] For example, when a new neighboring base station joins, it can be dynamically added to this MACsec link. When a base station leaves the neighboring cell, it can be dynamically removed from this MACsec link. This enables dynamic maintenance of MACsec links, reduces manual intervention during the MACsec link creation process, and lowers the maintenance cost of MACsec links.

[0083] In one embodiment, new group CA information is negotiated via the MKA protocol, and the MACsec links of the local area network neighboring base station pool are updated based on the new group CA information. It should be noted that the information of neighboring base stations is maintained in real time; once a change occurs, the local area network neighboring base station pool is updated, and the MACsec group CA is re-established. Group CA information is generated using parameters obtained by the MACsec parameter generation module. This invention uses MACsec links with group CAs, allowing the entire Layer 2 switching network to be maintained as a whole. Base stations only need to focus on the service network between each other, rather than individually on the MACsec links, which also helps to protect link security while reducing maintenance costs.

[0084] For example, such as Figure 7 As shown, base stations B, C, D, and E establish a new local area network (LAN) neighboring base station pool. Based on the base station information of these new neighboring base stations (including B, C, D, and E), the MACsec parameters of the LAN neighboring base station pool are updated. Based on the updated MACsec parameters, the MACsec links of the LAN neighboring base station pool are updated. Encrypted communication between base stations B, C, D, and E is achieved through the new MACsec links; base station A no longer communicates with these base stations via encrypted links.

[0085] The MACsec link creation method provided in the above embodiments can dynamically maintain neighboring base station information, neighboring base station information in the local area network, and MACsec links. That is, once neighboring base stations or neighboring base stations in the local area network change (whether by addition or reduction), the method can dynamically respond and automatically update the MACsec links of multiple target neighboring base stations within the same local area network. This reduces manual intervention during the MACsec link creation process, saves MACsec link configuration time, and reduces the risk of communication service errors, thereby reducing the maintenance cost of MACsec links while protecting communication link security.

[0086] Please see Figure 8 , Figure 8 This is a schematic block diagram of a base station structure provided in an embodiment of this application.

[0087] like Figure 8As shown, the base station 400 includes a processor 401 and a memory 402, which are connected by a bus 403, such as an I2C (Inter-integrated Circuit) bus.

[0088] Specifically, processor 401 provides computing and control capabilities to support the operation of the entire base station. Processor 401 can be a Central Processing Unit (CPU), but it can also be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or any conventional processor.

[0089] Specifically, the memory 402 can be a Flash chip, a read-only memory (ROM) disk, an optical disk, a USB flash drive, or a portable hard drive, etc.

[0090] Those skilled in the art will understand that Figure 8 The structure shown is merely a block diagram of a portion of the structure related to the embodiments of this application and does not constitute a limitation on the base station to which the embodiments of this application are applied. A specific base station may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0091] The processor is used to run a computer program stored in a memory, and when executing the computer program, implements any of the MACsec link creation methods provided in the embodiments of this application.

[0092] In one embodiment, the processor is configured to run a computer program stored in memory, and when executing the computer program, perform the following steps:

[0093] Obtain base station information from multiple neighboring base stations;

[0094] Based on the base station information of the multiple neighboring base stations, a local area network neighboring base station pool is established, which includes multiple target neighboring base stations within the same local area network.

[0095] Based on the base station information of the multiple target neighboring base stations, obtain the MACsec parameters of the local area network neighboring base station pool;

[0096] Based on the MACsec parameters, create MACsec links for the local area network neighbor cell base station pool.

[0097] In one embodiment, the base station information includes IP information; when the processor implements the step of establishing a local area network neighboring cell base station pool based on the base station information of the plurality of neighboring cell base stations, it is used to implement:

[0098] Based on the IP information, determine multiple target neighboring base stations that are in the same local area network from the multiple neighboring base stations;

[0099] A local area network neighboring cell base station pool is established based on multiple target neighboring cell base stations.

[0100] In one embodiment, when the processor determines multiple target neighboring base stations located in the same local area network from the multiple neighboring base stations based on the multiple IP information, it is configured to:

[0101] Based on the IP information of the multiple neighboring base stations, probe data packets are sent to the multiple neighboring base stations;

[0102] Receive response data packets returned by multiple neighboring base stations, and determine the multiple neighboring base stations that returned the response data packets as the target neighboring base station.

[0103] In one embodiment, when the processor acquires base station information from multiple neighboring base stations, it is configured to:

[0104] Obtain base station information from multiple neighboring base stations via signaling; or

[0105] Base station information of multiple neighboring base stations can be obtained through network management configuration.

[0106] In one embodiment, when the processor implements the creation of the MACsec link of the local area network neighboring cell base station pool based on the MACsec parameters, it is configured to:

[0107] Based on the MACsec parameters, generate the group secure connection joint CA information of the local area network neighbor cell base station pool;

[0108] Based on the group CA information, a MACsec link is created for the local area network neighbor cell base station pool.

[0109] In one embodiment, after implementing the creation of the MACsec link of the local area network neighbor cell base station pool based on group CA information, the processor is further configured to implement:

[0110] Generate communication data to be sent;

[0111] The MACsec link is used to encrypt the communication data within the local area network neighboring cell base station pool.

[0112] In one embodiment, the processor is further configured to implement:

[0113] Obtain base station information for multiple neighboring base stations after the changes;

[0114] The local area network neighboring cell base station pool is updated based on the changed base station information; wherein, the updated local area network neighboring cell base station pool includes multiple new neighboring cell base stations within the same local area network;

[0115] Update the MACsec parameters of the local area network neighboring cell base station pool based on the base station information of the multiple new neighboring cell base stations;

[0116] Based on the updated MACsec parameters, the MACsec links of the local area network neighboring cell base station pool are updated.

[0117] In one embodiment, when the processor updates the local area network neighbor cell base station pool based on the changed information of the plurality of base stations, it is configured to:

[0118] The changed base station information is compared with the original base station information to obtain the change information of neighboring base stations.

[0119] The local area network neighboring base station pool is updated based on the change information of the neighboring base stations.

[0120] It should be noted that those skilled in the art will understand that, for the sake of convenience and brevity, the specific working process of the base station 400 described above can be referred to the corresponding process in the aforementioned MACsec link creation method embodiment, and will not be repeated here.

[0121] This application also provides a storage medium for computer-readable storage, wherein the storage medium stores one or more programs that can be executed by one or more processors to implement the steps of any of the MACsec link creation methods provided in this application.

[0122] The storage medium can be an internal storage unit of the base station described in the foregoing embodiments, such as the hard disk or memory of the base station. Alternatively, the storage medium can be an external storage device of the base station, such as a plug-in hard disk, smart media card (SMC), secure digital card (SD), flash card, etc., equipped on the base station.

[0123] It will be understood by those skilled in the art that all or some of the steps, systems, or apparatuses disclosed above, and their functional modules / units, can be implemented as software, firmware, hardware, or suitable combinations thereof. In hardware implementations, the division between functional modules / units mentioned in the above description does not necessarily correspond to the division of physical components; for example, a physical component may have multiple functions, or a function or step may be performed collaboratively by several physical components. Some or all physical components may be implemented as software executed by a processor, such as a central processing unit, digital signal processor, or microprocessor, or as hardware, or as an integrated circuit, such as an application-specific integrated circuit (ASIC). Such software may be distributed on a computer-readable medium, which may include computer storage media (or non-transitory media) and communication media (or transient media). As is known to those skilled in the art, the term computer storage media includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data).

[0124] Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technologies, CD-ROM, digital versatile disc (DVD) or other optical disc storage, magnetic cartridges, magnetic tape, disk storage or other magnetic storage devices, or any other medium that can be used to store desired information and can be accessed by a computer. Furthermore, it is well known to those skilled in the art that communication media typically contain computer-readable instructions, data structures, program modules, or other data in modulated data signals such as carrier waves or other transmission mechanisms, and may include any information delivery medium.

[0125] The sequence numbers of the embodiments in this application are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments. The above descriptions are merely specific implementations of this application, but the scope of protection of this application is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in this application, and these modifications or substitutions should all be covered within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A method for establishing a media access control security MACsec link, characterized in that: include: Obtain base station information of multiple neighboring base stations; Establishing a local area network neighboring base station pool according to the base station information of the multiple neighboring base stations, wherein the local area network neighboring base station pool includes multiple target neighboring base stations in the same local area network; Acquire the MACsec parameters of the local area network neighboring base station pool according to the base station information of the multiple target neighboring base stations; Based on the MACsec parameters, a MACsec link of the local area network neighboring base station pool is created.

2. The MACsec link establishment method according to claim 1, characterized in that: The base station information includes IP information; and establishing a local area network neighboring base station pool according to the base station information of the plurality of neighboring base stations includes: Determine, according to the plurality of IP information, a plurality of target neighboring cell base stations located in the same local area network from the plurality of neighboring cell base stations; Based on the multiple target neighboring cell base stations, a local area network neighboring cell base station pool is established.

3. The MACsec link establishment method according to claim 2, characterized in that: The step of determining a plurality of target neighboring cell base stations located in the same local area network from the plurality of neighboring cell base stations according to the plurality of IP information includes: Sending a detection data packet to the multiple neighboring cell base stations according to the IP information of the multiple neighboring cell base stations; Receive response data packets returned by multiple neighboring cell base stations, and determine the multiple neighboring cell base stations that return the response data packets as the target neighboring cell base stations.

4. The MACsec link establishment method according to claim 1, characterized in that: The obtaining base station information of multiple neighboring base stations includes: Acquire base station information of multiple neighboring base stations by signaling; or The base station information of multiple neighboring base stations is obtained through network management configuration.

5. The MACsec link establishment method according to any one of claims 1 to 4, characterized in that: The step of creating a MACsec link of the local area network neighboring base station pool based on the MACsec parameter further includes: Based on the MACsec parameters, generating group security connection joint CA information of the local area network neighboring base station pool; Based on the group CA information, a MACsec link of the local area network neighboring base station pool is created.

6. The MACsec link establishment method according to claim 5, characterized in that: After the MACsec link of the local area network neighboring base station pool is created based on the group CA information, the method further includes: Generate communication data to be sent; The communication data is encrypted using the MACsec link in the local area network neighboring base station pool.

7. The MACsec link establishment method according to any one of claims 1 to 4, characterized in that: The method further comprises: Obtaining base station information of multiple neighboring base stations after the change; According to the changed information of the plurality of base stations, the local area network neighboring base station pool is updated; wherein the updated local area network neighboring base station pool includes a plurality of new neighboring base stations in the same local area network; Update the MACsec parameters of the local area network neighboring base station pool according to the base station information of the multiple new neighboring base stations; Based on the updated MACsec parameters, the MACsec link of the local area network neighboring base station pool is updated.

8. The MACsec link establishment method according to claim 7, characterized in that: The updating of the local area network neighboring base station pool according to the changed information of the plurality of base stations includes: Comparing the information of the plurality of base stations after the change with the information of the plurality of base stations before the change to obtain the change information of the neighboring base stations; Based on the change information of the neighboring base station, the local area network neighboring base station pool is updated.

9. A base station, characterized in that: The base station includes a processor, a memory, a computer program stored in the memory and executable by the processor, and a data bus for implementing connection communication between the processor and the memory, wherein when the computer program is executed by the processor, the MACsec link establishment method according to any one of claims 1 to 8 is implemented.

10. A storage medium for computer-readable storage, characterized in that: The storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the MACsec link establishment method according to any one of claims 1 to 8.

Images