Information updating method and device, equipment and storage medium

Abstract

The invention discloses an information updating method and device, equipment and a storage medium, and belongs to the technical field of wireless local area networks. The method comprises the steps of updating new first information of site equipment according to first secret information when an over-the-air OTA medium access control address MAC of the site equipment is changed; wherein the first information is information used when transmission is carried out between the station equipment and access point equipment; the first secret information is information predetermined by the site equipment and the access point equipment. According to the scheme, signaling resources can be saved.

Description

Information updating method, device, equipment, and storage medium Technical Field

[0001] The present application relates to the technical field of wireless local area networks, and in particular to an information updating method, apparatus, device, and storage medium. Background Art

[0002] In a wireless local area network (WLAN), a station (STA) device can change its over-the-air (OTA) media access control (MAC) address to avoid being tracked and causing privacy leakage.

[0003] In related technologies, after a site device changes its OTA MAC address, the access point (Access Point) device can assign a new association ID (AID), MAC frame sequence number (SN), MAC frame encryption and decryption packet number (PN), and other information to the site device through signaling to prevent the site device from being tracked.

[0004] However, the solution in the above related art requires that the access point device sends signaling indicating information such as AID, SN, PN, etc. to the site device each time the site device changes the OTA MAC address, thereby occupying too many signaling resources.

[0005] Summary of the Invention

[0006] The embodiments of the present application provide an information updating method, apparatus, device, and storage medium. The technical solution is as follows:

[0007] In one aspect, an embodiment of the present application provides an information updating method, the method comprising:

[0008] When an over-the-air (OTA) media access control (MAC) address of the site device changes, updating new first information of the site device according to the first secret information;

[0009] The first information is information used for transmission between the station device and the access point device; and the first secret information is information predetermined by the station device and the access point device.

[0010] On the other hand, an embodiment of the present application provides an information updating device, the device comprising:

[0011] An updating module, configured to update the new first information of the site device according to the first secret information when an over-the-air (OTA) media access control (MAC) address of the site device changes;

[0012] The first information is information used for transmission between the station device and the access point device; and the first secret information is information predetermined by the station device and the access point device.

[0013] On the other hand, an embodiment of the present application provides a communication device, the communication device including a processor, a memory, and a transceiver;

[0014] The memory stores a computer program, and the processor executes the computer program to enable the communication device to implement the above-mentioned information updating method.

[0015] On the other hand, an embodiment of the present application further provides a computer-readable storage medium, in which a computer program is stored. The computer program is loaded and executed by a processor to implement the above-mentioned information updating method.

[0016] On the other hand, the present application also provides a chip, which is used to run in a communication device so that the communication device executes the above-mentioned information updating method.

[0017] In another aspect, the present application provides a computer program product, the computer program product including computer instructions stored in a computer-readable storage medium. A processor of a communication device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the communication device to perform the above-mentioned information updating method.

[0018] On the other hand, the present application provides a computer program, which is executed by a processor of a communication device to implement the above-mentioned information updating method.

[0019] Through the technical solution provided by the embodiments of the present application, when the OTA MAC address of the site device changes, the site device and the access point device can determine the new first information used for transmission between the site device and the access point device according to the first secret information. Since the first secret information is predetermined by the site device and the access point device, the site device and the access point device do not need to interact excessively in the process of determining the new first information, thereby saving signaling resources. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0021] FIG1 is a schematic diagram of the architecture of a communication system provided by an embodiment of the present application;

[0022] Figures 2 and 3 are schematic diagrams of the MAC frame header involved in this application;

[0023] Figures 4 and 5 are two formats of the SN in the Sequence Control field involved in this application;

[0024] FIG6 is a format diagram of the CCMP header involved in this application;

[0025] FIG7 is a format diagram of the GCMP header involved in this application;

[0026] FIG8 is a flowchart of an information updating method provided by an embodiment of the present application;

[0027] FIG9 is a schematic diagram of information update involved in an embodiment of the present application;

[0028] FIG10 is a flowchart of an information updating method provided by one embodiment of the present application;

[0029] FIG11 is a schematic diagram of a management frame according to the embodiment shown in FIG10 ;

[0030] FIG12 is a schematic diagram of a management frame according to the embodiment shown in FIG10 ;

[0031] FIG13 is a framework diagram of information update provided by one embodiment of the present application;

[0032] FIG14 is a block diagram of an information updating apparatus provided by one embodiment of the present application;

[0033] FIG15 is a schematic structural diagram of a communication device provided in one embodiment of the present application. DETAILED DESCRIPTION

[0034] In order to make the objectives, technical solutions and advantages of this application clearer, the implementation methods of this application will be further described in detail below with reference to the accompanying drawings.

[0035] The network architecture and business scenarios described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided by the embodiments of the present application. A person skilled in the art will appreciate that, with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided by the embodiments of the present application are equally applicable to similar technical problems.

[0036] The technical solutions of the embodiments of the present application can be applied to various communication systems, such as Wireless Local Area Networks (WLAN), Wireless Fidelity (WiFi), or other communication systems.

[0037] For example, please refer to Figure 1, which shows a schematic diagram of the network architecture of a communication system 100 provided in one embodiment of the present application. The communication system 100 may include an access point device 110 (ie, AP) and a station device 120 (ie, STA) that accesses the network through the access point 110.

[0038] In some scenarios, an AP is also called an AP STA. In a sense, an AP is also a STA.

[0039] In some scenarios, a STA is also called a non-AP STA.

[0040] The communication in the communication system 100 can be communication between an AP and a non-AP STA, communication between a non-AP STA and a non-AP STA, or communication between a STA and a peer STA, where a peer STA may refer to a device that communicates with the STA on a peer-to-peer basis. For example, the peer STA may be an AP or a non-AP STA.

[0041] An AP acts as a bridge between wired and wireless networks, connecting wireless network clients and then connecting the wireless network to the Ethernet. An AP can be a terminal device with a Wi-Fi chip (such as a mobile phone) or a network device (such as a wireless router, wireless switch, or wireless repeater).

[0042] It should be understood that the role of STA in the communication system is not absolute. For example, in some scenarios, when a mobile phone is connected to a router, the mobile phone is a non-AP STA. When the mobile phone serves as a hotspot for other mobile phones, the mobile phone plays the role of AP.

[0043] APs and non-AP STAs can be devices used in the Internet of Vehicles, IoT nodes and sensors in the Internet of Things (IoT), smart cameras, smart remote controls, smart water and electricity meters in smart homes, and sensors in smart cities.

[0044] In some embodiments, a non-AP STA may support 802.11be. A non-AP STA may also support various current and future 802.11 family wireless local area network (WLAN) standards, such as 802.11ax, 802.11ac, 802.11n, 802.11g, 802.11b, and 802.11a.

[0045] In some embodiments, the AP may be a device supporting the 802.11be standard. The AP may also be a device supporting various current and future 802.11 family WLAN standards, such as 802.11ax, 802.11ac, 802.11n, 802.11g, 802.11b, and 802.11a.

[0046] In the embodiment of the present application, the STA may be a mobile phone, tablet computer, computer, virtual reality (VR) device, augmented reality (AR) device, wireless device in industrial control, set-top box, wireless device in self-driving, in-vehicle communication device, wireless device in remote medical, wireless device in smart grid, wireless device in transportation safety, wireless device in smart city, wireless device in smart home, wireless communication chip / application specific integrated circuit (ASIC) / system on chip (SOC), etc. that supports WLAN or WiFi technology.

[0047] The frequency bands supported by WLAN technology may include but are not limited to: low frequency bands (eg, 2.4 GHz, 5 GHz, 6 GHz) and high frequency bands (eg, 60 GHz).

[0048] FIG1 exemplarily shows one AP STA and two non-AP STAs. Optionally, the communication system 100 may include multiple AP STAs and other numbers of non-AP STAs, which is not limited in the embodiments of the present application.

[0049] It should be understood that in the embodiments of the present application, a device having communication functionality in a network / system may be referred to as a communication device. Taking the communication system 100 shown in FIG1 as an example, the communication device may include an access point 110 and a station 120 having communication functionality. Access point 110 and station 120 may be the specific devices described above and will not be described in detail here. The communication device may also include other devices in the communication system 100, such as a network controller, a gateway, or other network entities, which is not limited in the embodiments of the present application.

[0050] It should be understood that the terms "system" and "network" are often used interchangeably herein. The term "and / or" is simply a description of an association between related objects, indicating that three possible relationships exist. For example, "A and / or B" can represent: A exists alone, A and B exist simultaneously, or B exists alone. Furthermore, the character " / " generally indicates that the related objects are in an "or" relationship.

[0051] It should be understood that the "indication" mentioned in the embodiments of this application can be a direct indication, an indirect indication, or an indication of an association. For example, "A indicates B" can mean that A directly indicates B, for example, B can be obtained through A; it can also mean that A indirectly indicates B, for example, A indicates C, and B can be obtained through C; it can also mean that there is an association between A and B.

[0052] In the description of the embodiments of the present application, the term "corresponding" may indicate a direct or indirect correspondence between the two, or an association relationship between the two, or a relationship between indication and being indicated, configuration and being configured, etc.

[0053] In the embodiments of the present application, "predefined" may be implemented by pre-storing corresponding codes, tables, or other methods that can be used to indicate relevant information in a device (e.g., including an access point and a station). The present application does not limit the specific implementation method. For example, predefined may refer to a method defined in a protocol.

[0054] In the embodiments of the present application, the “protocol” may refer to a standard protocol in the communication field, for example, it may include a WiFi protocol and related protocols used in future WiFi communication systems, and the present application does not limit this.

[0055] In a WLAN, attackers can identify STAs based on element fingerprints and behavioral fingerprints, thereby tracking the corresponding users of the STAs. Therefore, it is necessary to modify or obfuscate the relevant elements to prevent attackers from identifying and tracking users through these elements. The element fingerprints and behavioral fingerprints mentioned above may include MAC frame SN, MAC frame encryption and decryption PN, physical layer protocol data unit (PPDU) scrambler seed, AID, traffic identifier (TID), etc.

[0056] 1) SN

[0057] The SN is present in the Sequence Control field of the MAC frame header shown in Figures 2 and 3. When the frame is a Protocol Version 0 (PV0) frame, the Sequence Control field is not present in the PV0 control frame, but is present in all other PV0 frames. When the frame is a Protocol Version 1 (PV1) frame, the Sequence Control field is not present in the PV1 control frame or the PV1 probe response frame, but is present in all other PV1 frames.

[0058] When the Sequence Control field exists in the frame and the frame is not a Quality-of-Service Management Frame (QMF), the format of the SN in the Sequence Control field is shown in Figure 4, with a length of 12 bits. When the Sequence Control field exists in the frame and the frame is QMF, the format of the SN in the Sequence Control field is shown in Figure 5, with a length of 10 bits.

[0059] A STA maintains one or more sequence number spaces to determine the frame's SN when transmitting a frame. When multiple sequence number spaces are supported, the appropriate sequence number space is determined by information from the MAC Control field of the frame being transmitted. For each non-QMF MAC Service Data Unit (MSDU) or MAC Management Protocol Data Unit (MMPDU) transmitted using that sequence number space, each sequence number space is represented by a modulo-4096 counter, starting at 0 and incrementing by 1. For each QMF transmitted using that sequence number space, each sequence number space is represented by a modulo-1024 counter, starting at 0 and incrementing by 1.

[0060] A STA maintains one or more duplicate detection buffers. When a data, management, or extended frame is received, a record of the frame is inserted into the appropriate cache. The record is identified by the SN and possibly other information in the frame's MAC Control field. When a data, management, or extended frame is received with the Retry subfield of the Frame Control field equal to 1, the appropriate cache (if any) is searched for a matching frame. In the DMG, when a group-addressed frame is received, the appropriate cache is searched for a matching frame. When a PV1 data frame or PV1 management frame is received, the appropriate cache is searched for a matching frame, regardless of whether the Retry subfield of the Frame Control field is present. If the search is successful, the frame is considered a duplicate and is discarded.

[0061] 2) PN

[0062] The PN exists in the Counter mode with Cipher-block chaining Message Authentication Code Protocol (CCMP) header, shown in Figure 6, and the Galois Counter Mode Protocol (GCMP) header, shown in Figure 7. It is 48 bits long and appears only in data frames and individually addressed robust management frames.

[0063] During CCMP and GCMP encapsulation, the PN is used to construct the nonce, and for each MAC Protocol Data Unit (MPDU), the PN is incremented by a positive number. For the MPDUs that make up segmented MSDUs and MMPDUs, the PN should be incremented in steps of 1. For PV0 MPDUs, the PN must not be repeated for a series of encrypted MPDUs using the same temporary key. For PV1 MPDUs, the PN must not be repeated for a series of encrypted MPDUs using the same temporary key and TID / Access Category Index (ACI). The PN actually numbers each MPDU sequentially. Each transmitting device maintains a separate PN for each pairwise transient key security context (PTKSA) and each group temporal key security context (GTKSA). For example, the AP maintains one PN for all unicast frames sent to site 1 using the same PTKSA, maintains one PN for all multicast frames sent to site 1 using the same GTKSA, and site 1 maintains one PN for all unicast frames sent to the AP using the same PTKSA.

[0064] PN is also used to implement replay detection, and the processing rules are as follows:

[0065] ① The receiver maintains a separate set of replay counters for each PTKSA, GTKSA, and protocol version value. The receiver initializes these replay counters to 0 when resetting the pairwise transient key. The replay counters are set to the PN value of the sender's CCMP or GCMP MPDU.

[0066] ② For each PTKSA, GTKSA and protocol version value, the receiver shall maintain a separate replay counter for each TID, subject to the number of supported replay counters indicated in the RSN capability field, and shall use the PN of the received frame to detect duplicate frames. A replay frame occurs when the PN of the received frame is less than or equal to the replay counter value corresponding to the priority and frame type of the MSDU or Aggregate MAC Service Data Unit (A-MSDU).

[0067] ③ If dot11RSNAProtectedManagementFramesActivated is true, the receiver shall maintain a single replay counter for received individually addressed robust management frames with a To DS subfield equal to 0 and a single replay counter for received individually addressed robust PV1 management frames, and shall use the PN to detect replays from received frames. If dot11QMFActivated is also true, the receiver shall maintain an additional replay counter per ACI for received individually addressed robust management frames and robust PV1 management frames with a To DS subfield equal to 1. A QMF receiver shall use the ACI encoded in the sequence number field of the received frame to select the replay counter for the received frame and shall use the PN of the received frame to detect replays. A replay frame occurs when the PN from the frame is less than or equal to the current value of the management frame replay counter corresponding to the frame's ACI.

[0068] ④ The receiver shall discard any received data frame whose PN is less than or equal to the value of the replay counter associated with the TA and priority value of the received MPDU. The receiver shall discard MSDUs and MMPDUs whose constituent MPDU PN values ​​do not increase in steps of 1. If dot11RSNAProtectedManagementFramesActivated is true, the receiver shall discard any received individually addressed robust management frame whose PN is less than or equal to the value of the replay counter associated with the TA of the individually addressed management frame.

[0069] ⑤When a frame is discarded, the receiver should increase 1 dot11RSNAStatsCCMPReplays for data frames and 1 dot11RSNAStatsRobustMgmtCCMPReplays for robust management frames.

[0070] ⑥ For MSDUs or A-MSDUs sent using the block acknowledgment function, reordering of the received MSDUs or A-MSDUs is performed according to the block acknowledgment receiver operation before replay detection.

[0071] 3) scrambler seed

[0072] The data field of the physical (PHY) layer consists of four parts: SERVICE, PHY Service Data Unit (PSDU), tail, and pad parts. The value of bits B0-B6 of the SERVICE field is the scrambler seed. The initial value of the scrambler seed varies depending on the conditions of TXVECTORSTA and RXVECTOR. The value of the scrambler seed increases by 1 each time a frame is sent.

[0073] 4) AID

[0074] The AID is present in the (re)association request frame body and occupies 2 bytes. This frame is sent only by the AP. When a STA's association request to the AP is approved, the AP responds with a success status code 0 and an AID. The AID value ranges from 1 to 2007 and is unique within the BSS.

[0075] The AID exists in the Duration / ID field of a Power Save-Poll (PS-Poll) frame, which is sent only by STAs. A STA sends a PS-Poll frame to the AP to retrieve a temporarily stored frame. When the AP receives a PS-Poll frame from a STA, it determines whether a frame has been temporarily stored for the STA based on the AID value in the frame.

[0076] The AID exists in the AID12 field (if it is a non-S1G STA) or AID13 field (if it is an S1G STA) in the STA Info List field in the VHT NDP Announcement frame. This frame is only sent by the AP.

[0077] The AID exists in the trigger frame sent by the AP and occupies 12 bits.

[0078] 5) TID

[0079] When the frame is a PV0 frame, if the Type in the Frame Control field is equal to 1 and the value of the highest bit of Subtype is 1, the frame header contains the QoS Control field. The TID exists in bits B0-B3 of the QoS Control field and has a value range of 0 to 15.

[0080] When the frame is a PV1 frame, if the value of Type in the Frame Control field is equal to 0 or equal to 3, the TID exists in bits B5-B7 in the Frame Control field.

[0081] When the sender sends a data frame containing a TID field, it assigns a value to the TID field according to the type of data and the protocol.

[0082] When the receiver receives a data frame containing a TID field, it places the data frame into different priority queues according to the TID value to provide better quality of service.

[0083] To address the privacy leakage risks of SN, PN, scrambler seed, AID and TID, the 802.11bi working group is discussing defining a mechanism for STAs and APs to change the SN and scrambler seed sent on the downlink and uplink to unrelated new values ​​in Associated STA state 4 without losing any connection when the OTA MAC address of the CPE client changes, defining a mechanism for STAs and APs to change the PN transmitted on the downlink and uplink to unrelated new values ​​in Associated STA state 4 without losing any connection when the OTA MAC address of the CPE client changes, defining a mechanism for STAs and APs to change the AID of the CPE client to an unrelated new value in Associated STA state 4 without losing any connection when the CPE client OTA MAC address changes, and defining a mechanism for STAs and APs to confuse the sent TID as an unrelated new value on the downlink and a new value in Associated STA state 4 on the uplink without losing any connection.

[0084] In one possible solution, to address the privacy leakage risk of SN, PN, scrambler seed, and AID, when the STA changes its OTA MAC, the SN, PN, scrambler seed can be reset and the AID can be changed. The method used may be: the STA sends a request frame to the AP to indicate the random offset of its SN and PN. When the AP receives the request frame sent by the STA, if it accepts the STA's request, it assigns a new AID to the STA in a response frame. Alternatively, the STA may change its MAC address and parameters based on a pre-agreed or predetermined pattern at each pre-agreed predetermined period. The AP and each STA agree on the seed for each random number to be generated (such as the MAC address, SN offset, and PN offset). The AP and the STA agree on AID changes within a specific range. The AP will not assign AIDs within the range to other STAs that do not want to change their MAC addresses. The AP indicates the AID range to the STA through a protected management frame. The AP then indicates a seed to each STA to generate an AID permutation sequence within the specific range. When the STA changes its MAC address based on the seed for changing the MAC address agreed with the AP, the STA also changes its SN and PN based on the seed for changing the SN and PN offsets agreed with the AP, and changes its AID value based on the AID permutation sequence within the specific range specified by the AP. However, the above method does not protect TID, and the seeds used to process SN, PN and AID are independent of each other, which requires more resources.

[0085] In this regard, the subsequent solution of the present application provides a solution that can confuse the above-mentioned fingerprint elements and behavior elements while reducing the signaling interaction between AP and STA.

[0086] Please refer to FIG8 , which shows a flowchart of an information updating method provided by an embodiment of the present application. The method may be performed by a communication device; the communication device is one of a station device and an access point device used in a wireless local area network (WLAN). The access point device may be the access point device 110 in the network architecture shown in FIG1 , and the station device may be the station device 120 in the network architecture shown in FIG1 . The method may include the following steps:

[0087] Step 801: When an over-the-air (OTA) media access control (MAC) address of a site device changes, the site device is updated with new first information based on first secret information; wherein the first information is information used for transmission between the site device and the access point device; and the first secret information is information predetermined by the site device and the access point device.

[0088] In some embodiments, when the OTA MAC address of the site device changes, the site device and the access point device can use the same first secret information and the same generation algorithm to generate the above-mentioned new first information, thereby ensuring that the new first information generated by the site device and the access point device are consistent.

[0089] In some embodiments, the first secret information may be information determined through negotiation between the station device and the access point device during the process of accessing the access point device.

[0090] Alternatively, the first secret information may also be information allocated to the station device by the access point device during the process of the station device accessing the access point device.

[0091] In some embodiments, the first secret information is information that uniquely corresponds to the site device in the WLAN.

[0092] To summarize, in the solution shown in the embodiment of the present application, when the OTA MAC address of the site device changes, the site device and the access point device can determine the new first information used for transmission between the site device and the access point device according to the first secret information. Since the first secret information is predetermined by the site device and the access point device, the site device and the access point device do not need to interact too much in the process of determining the new first information, thereby saving signaling resources.

[0093] Based on the embodiment shown in FIG8 above, please refer to FIG9 , which shows a schematic diagram of the information update involved in the embodiment of the present application. As shown in FIG9 , the first secret information is pre-determined between the site device 91 and the access point device 92; thereafter, each time the site device 91 updates the OTA MAC address, the site device 91 and the access point device 92 each determine the new first information corresponding to the site device 91 according to the same first secret information. Because the site device 91 and the access point device 92 each determine the new first information according to the same first secret information, on the one hand, the site device 91 and the access point device 92 can determine the same first information, and on the other hand, the signaling interaction between the site device 91 and the access point device 92 when determining the first information can be reduced.

[0094] Based on the embodiments shown in Figures 8 and 9 above, please refer to Figure 10, which shows a flow chart of an information update method provided by an embodiment of the present application. The method can be interactively executed by a site device and an access point device; wherein the site device and access point device can be the site device 120 and access point device 110 in the network architecture shown in Figure 1. As shown in Figure 10, the method can include the following steps:

[0095] Step 1001: A station device and an access point device determine first secret information.

[0096] In some embodiments, when accessing the access point device, the station device may negotiate with the access point device to determine first secret information uniquely corresponding to the station device in the WLAN, or the access point device may allocate the first secret information to the station device.

[0097] In some embodiments, the first secret information may be used exclusively to generate new first information.

[0098] In other embodiments, the first secret information may also reuse other existing information that uniquely corresponds to a site device in the WLAN and is known to both the site device and the access point device, such as a temporary key (TK) in PTKSA.

[0099] Step 1002: When the OTA media access control address MAC of the station device changes, the station device updates new first information of the station device according to the first secret information; the first information is information used for transmission between the station device and the access point device.

[0100] Step 1003: When the OTA media access control address MAC of the station device changes, the access point device updates the new first information of the station device according to the first secret information; the first information is information used for transmission between the station device and the access point device.

[0101] In some embodiments, the first information includes at least one of the following information:

[0102] Air traffic identifier OTA-TID, MAC frame sequence number SN, MAC frame encryption and decryption packet number PN, physical layer protocol data unit PPDU scrambling code seed and connection identifier AID;

[0103] Among them, OTA-TID is used to obfuscate the actual TID during transmission.

[0104] The privacy leakage issues associated with the SN, PN, scrambler seed, AID, and TID in WLANs arise from the fact that even if a STA changes its MAC address within an association, if the SN, PN, and scrambler seed are never reset, they can be used to track the device (since the SN, PN, and scrambler seed change according to a certain pattern, they can be used to track the STA). Furthermore, if the AID is never changed, it can be used to track the device (since the AID is unique within a LAN, meaning that STAs within the LAN have different AID values, if a STA sends a frame containing an AID, that value can be used to identify the STA). Furthermore, if the TID is not obfuscated before being sent, the behavioral fingerprint formed by the TID can be used to track the device (since different STAs send or receive different types of data packets, the set of TIDs in a data packet can be used to identify the STA).

[0105] In this regard, this embodiment may update at least one of the OTA-TID, MAC frame SN, MAC frame PN, PPDU scrambling code seed, and AID (ie, the first information) when the OTA MAC of the site device changes.

[0106] For different types of information in the first information, this embodiment may adopt different processing solutions.

[0107] 1. Update scheme for OTA-TID, MAC frame SN, MAC frame PN, and PPDU scrambling code seed.

[0108] In some embodiments, when an Over-the-Air Medium Access Control (OTA) MAC address of a station device changes, calculating new first information of the station device based on the first secret information includes:

[0109] When the first information includes at least one of an OTA-TID, a SN, a PN, and a scrambling seed, when the OTA MAC address of the site device changes, generating a random number for the site device based on the first secret information and the changed first OTA MAC address of the site device;

[0110] New first information of the site device is generated according to the random number of the site device.

[0111] In an embodiment of the present application, for the OTA-TID, MAC frame SN, MAC frame PN, and PPDU scrambling seed, when the STA changes its OTA MAC within the association, the station device and the access point device can use the same algorithm and the same first secret information. For example, the same random number and algorithm are used to reset the SN, PN, and scrambler seed, and to change the air interface transmission value of the TID (i.e., the OTA TID). The random number can be obtained from the first secret information and the first OTA MAC address after the station device changes.

[0112] In some embodiments, when the OTA MAC address of the site device changes, generating a random number for the site device based on the first secret information and the changed first OTA MAC address of the site device includes:

[0113] A hash calculation is performed on the concatenated value of the first OTA MAC address and the first secret information to obtain a random number of the site device.

[0114] In some embodiments, generating new first information of the site device according to the random number of the site device includes:

[0115] When the first information includes an OTA-TID, a new OTA-TID for the site device is generated based on a first bit portion of a random number of the site device and each actual TID; the first bit portion is a bit value located in a first bit position interval in the random number of the site device.

[0116] In some embodiments, when determining the new OTA-TID of the site device, the site device or access point device can determine the first bit portion from the random number, and then calculate the OTA-TID corresponding to each actual TID value based on the first bit portion and each actual TID value (usually 0 to 15) using the same OTA-TID calculation method.

[0117] The bit position of the first bit portion in the random number of the site device (i.e., the first bit position interval) may be specified by a protocol; or, the first bit position interval may be pre-negotiated between the site device and the access point device. For example, when the site device accesses the access point device, the site device may negotiate and agree on the first bit position interval with the access point device.

[0118] In some embodiments, based on the first bit portion of the random number of the site device and each actual TID, a process of generating a new OTA-TID of the site device may include:

[0119] An exclusive OR operation is performed on the first bit portion and each actual TID to obtain each new OTA-TID of the site device; each new OTA-TID of the site device corresponds to each actual TID one by one.

[0120] For example, the number of bits in the first bit portion may be the same as the number of bits in the TID. The station device and the access point device respectively perform an XOR operation on the TID and the first bit portion to obtain OTA-TIDs corresponding to the actual TIDs.

[0121] In some embodiments, generating new first information of the site device according to the random number of the site device includes:

[0122] When the first information includes the SN, a new SN of the site device is generated according to the second bit portion of the random number of the site device and the old SN of the site device; the second bit portion is the bit value in the random number of the site device, located in the second bit position interval.

[0123] In some embodiments, when determining the new SN of the site device, the site device or access point device can determine the second bit part from the above random number, and then calculate the new SN based on the second bit part and the old SN corresponding to the site device using the same SN calculation method.

[0124] The bit position of the second bit portion in the random number of the site device (ie, the second bit position interval) may be specified by a protocol; or the second bit position interval may be pre-negotiated between the site device and the access point device.

[0125] In some embodiments, generating a new SN of the site device according to a first bit portion of a random number of the site device and an old SN of the site device includes:

[0126] An XOR operation is performed on the second bit portion and the old SN of the site device to obtain a new SN of the site device.

[0127] The old SN of the above-mentioned site device may be the SN used when transmitting data to the opposite end last time before obtaining the new SN, or the SN used when transmitting data to the opposite end last time increased by 1.

[0128] For example, the number of bits in the second bit part may be the same as the number of bits in the SN. The site device and the access point device respectively perform an XOR operation on the old SN of the terminal device and the second bit part to obtain a new SN of the site device.

[0129] In some embodiments, when the communication device is a station device, the old SN of the station device includes an old uplink SN of the station device, and the new SN of the station device includes a new uplink SN of the station device;

[0130] In the case that the communication device is an access point device, the old SN of the station device includes the old downlink SN of the station device, and the new SN of the station device includes the new downlink SN of the station device.

[0131] In an embodiment of the present application, when the site device updates the SN of the site device, it can be based on the uplink SN used when the data was last transmitted to the access point device, or the uplink SN used when the data was last transmitted to the access point device is increased by 1 to obtain a new uplink SN; when the access point device updates the SN of the site device, it can be based on the downlink SN used when the data was last transmitted to the site device, or the downlink SN used when the data was last transmitted to the site device is increased by 1 to obtain a new downlink SN.

[0132] In some embodiments, generating new first information of the site device according to the random number of the site device includes:

[0133] When the first information includes PN, a new PN of the site device is generated according to the third bit portion of the random number of the site device and the old PN of the site device; the third bit portion is the bit value located in the third bit position interval of the random number of the site device.

[0134] In some embodiments, when determining the new PN of the site device, the site device or access point device can determine the third bit portion from the above random number, and then calculate the new PN based on the third bit portion and the old PN corresponding to the site device using the same PN calculation method.

[0135] The bit position of the third bit portion in the random number of the site device (ie, the third bit position interval) may be specified by a protocol; or the third bit position interval may be pre-negotiated between the site device and the access point device.

[0136] In some embodiments, generating a new PN of the site device according to the third bit portion of the random number of the site device and the old PN of the site device includes:

[0137] An exclusive OR operation is performed on the third bit portion and the old PN of the site device to obtain a new PN of the site device.

[0138] The old PN of the above-mentioned site device may be the PN used when transmitting data to the opposite end last time before obtaining the new PN, or the PN used when transmitting data to the opposite end last time increased by 1.

[0139] For example, the number of bits in the third bit part may be the same as the number of bits in the PN. The station device and the access point device respectively perform an XOR operation on the old PN of the terminal device and the third bit part to obtain a new PN of the station device.

[0140] In some embodiments, when the communication device is a station device, the old PN of the station device includes an old uplink PN of the station device, and the new PN of the station device includes a new uplink PN of the station device;

[0141] In the case that the communication device is an access point device, the old PN of the station device includes the old downlink PN of the station device, and the new PN of the station device includes the new downlink PN of the station device.

[0142] In an embodiment of the present application, when the site device updates the PN of the site device, it can be based on the uplink PN used when the last data was transmitted to the access point device, or the uplink PN used when the last data was transmitted to the access point device is increased by 1 to obtain a new uplink PN; when the access point device updates the PN of the site device, it can be based on the downlink PN used when the last data was transmitted to the site device, or the downlink PN used when the last data was transmitted to the site device is increased by 1 to obtain a new downlink PN.

[0143] In some embodiments, generating new first information of the site device according to the random number of the site device includes:

[0144] In the case where the first information includes a scrambling seed, a new scrambling seed for the site device is generated based on the fourth bit portion of the random number of the site device and the old scrambling seed of the site device; the fourth bit portion is a bit value located in the fourth bit position interval in the random number of the site device.

[0145] In some embodiments, when determining a new scrambling code seed for a site device, the site device or access point device may determine the fourth bit portion from the random number, and then calculate a new scrambling code seed using the same scrambling code seed calculation method based on the fourth bit portion and the old scrambling code seed corresponding to the site device.

[0146] The bit position of the fourth bit portion in the random number of the site device (ie, the fourth bit position interval) may be specified by a protocol; or the fourth bit position interval may be pre-negotiated between the site device and the access point device.

[0147] In some embodiments, generating a new scrambling seed for the site device according to the fourth bit portion of the random number of the site device and an old scrambling seed of the site device includes:

[0148] An XOR operation is performed on the fourth bit portion and the old scrambling code seed of the site device to obtain a new scrambling code seed of the site device.

[0149] The old scrambling seed of the site device may be the scrambling seed used when transmitting data to the peer end last time before obtaining the new scrambling seed, or the scrambling seed used when transmitting data to the peer end last time increased by 1.

[0150] For example, the number of bits in the fourth bit part may be the same as the number of bits in the scrambling code seed. The site device and the access point device respectively perform an XOR operation on the old scrambling code seed of the terminal device and the fourth bit part to obtain a new scrambling code seed of the site device.

[0151] In some embodiments, when the communication device is a station device, the old scrambling code seed of the station device includes an old uplink scrambling code seed of the station device, and the new scrambling code seed of the station device includes a new uplink scrambling code seed of the station device;

[0152] In the case that the communication device is an access point device, the old scrambling code seed of the station device includes an old downlink scrambling code seed of the station device, and the new scrambling code seed of the station device includes a new downlink scrambling code seed of the station device.

[0153] In an embodiment of the present application, when updating the scrambling code seed of the site device, the site device may update the new uplink scrambling code seed based on the uplink scrambling code seed used when last transmitting data to the access point device, or increase the uplink scrambling code seed used when last transmitting data to the access point device by 1; and when updating the scrambling code seed of the site device, the access point device may update the new downlink scrambling code seed based on the downlink scrambling code seed used when last transmitting data to the site device, or increase the downlink scrambling code seed used when last transmitting data to the site device by 1.

[0154] In some embodiments, the parameters and algorithms used to process PN, SN, scrambler seed, and TID may be as follows:

[0155] 1) STA

[0156] In this solution, the algorithm for calculating the random number RN used by the STA, the TID value transmitted over the air interface corresponding to the real TID value (i.e., the OTA-TID value), the random number corresponding to the uplink SN, the random number used for the uplink PN, and the random number used for the uplink scrambler seed is as follows:

[0157] RN=HSAH(MAC STA ||IV). Parameter MAC STAis the OTA MAC value currently used by the STA, IV is the secret value between the AP and the STA (that is, the first secret information mentioned above), the calculation result RN is the random number that the STA needs to store, || represents string concatenation, and the function HASH(X) represents the hash operation on the parameter X. The algorithm can be SHA2, SHA3, etc.

[0158] The parameter TID is the actual TID value of the frame sent by the STA. The calculated result OTA-TID is the TID value of the air interface transmission of the frame sent by the STA. Represents the exclusive OR operation (the same below).

[0159] The parameter SN is the uplink sequence number value corresponding to the OTA MAC last used by the STA when the STA updates the OTA MAC. The calculated result SN' is the uplink sequence number value corresponding to the OTA MAC currently used by the STA.

[0160] The parameter PN is the uplink packet number corresponding to the OTA MAC last used by the STA when the STA updates the OTA MAC. The calculated result PN' is the uplink packet number corresponding to the OTA MAC currently used by the STA.

[0161] The parameter scrambler seed is the uplink scrambling seed value corresponding to the OTA MAC previously used by the STA when the STA updates the OTA MAC. The calculated result scrambler seed' is the uplink scrambling seed value corresponding to the OTA MAC currently used by the STA.

[0162] Among them, the parameter RN X Indicates that X bits are cut from RN, for example, X bits can be cut from bit 0 and forward, or X bits can be cut from the last bit and forward. For example, in the above algorithm, 4 bits are cut from bit 0 of RN and backward to get RN4, and 12 bits are cut from bit 4 of RN and backward to get RN 12 RN is obtained by intercepting 48 bits from the 16th bit of RN. 48 , starting from the 64th bit of RN and truncating 7 bits backward to obtain RN7.

[0163] 2) AP

[0164] In this solution, the algorithm for calculating the random number RN corresponding to an associated STA, the TID value transmitted over the air interface corresponding to the real TID value of frames sent to the STA, the random number corresponding to the STA's downlink sequence number, the random number corresponding to the STA's downlink PN, and the random number corresponding to the STA's downlink scrambler seed is as follows:

[0165] RN=HSAH(MAC STA ||IV). Parameter MAC STA is the OTA MAC value currently used by the STA, the parameter IV is a secret value between the STA and the AP, the calculation result RN is the random number corresponding to the STA stored by the AP, and the meaning of || and the function HASH(X) are the same as above.

[0166] The parameter TID is the actual TID value of the frames sent by the AP to the STA. The calculated result OTA-TID is the TID value transmitted over the air interface when the AP sends frames to the STA.

[0167] The parameter SN is the value of the STA's previous OTA MAC downlink sequence number maintained by the AP when the STA updates the OTA MAC. The calculated result SN' is the value of the OTA MAC downlink sequence number currently used by the STA maintained by the AP.

[0168] The parameter PN is the value corresponding to the last OTA MAC downlink packet number of the STA maintained by the AP when the STA updates the OTA MAC. The calculated result PN' is the value corresponding to the OTA MAC downlink packet number currently used by the STA maintained by the AP.

[0169] The parameter scrambler seed is the value of the STA's previous OTA MAC downlink scrambling seed maintained by the AP when the STA updates the OTA MAC. The calculated result scrambler seed' is the value of the OTA MAC downlink scrambling seed currently used by the STA maintained by the AP.

[0170] Parameter RN X The meaning is the same as above.

[0171] In this solution, when a STA changes its OTA MAC address, it first calculates a random number based on a secret value between it and the AP and the current OTA MAC address. This random number and the same algorithm are then used to reset the SN, PN, and scrambler seed to calculate the over-the-air transmission value corresponding to the stored TID value (0 to 15). This solution uses the same random number and algorithm for the SN, PN, scrambler seed, and TID.

[0172] In this solution, when a STA changes its OTA MAC address, it is assumed that the STA's OTA MAC changes from MAC i Update to MAC i+1 STA generates MAC using the same random number and the same algorithm i+1 The initial values ​​of SN, PN and scrambler seed on the corresponding uplink, MAC of STA i+1 The corresponding SN, PN and scrambler seed values ​​on the downlink are sent from AP to MAC. i+1 The frames sent contain the values ​​of SN, PN, and scrambler seed. When a STA changes its OTA MAC address, in addition to maintaining the new uplink and downlink SN, PN, and scrambler seed values, the STA and AP also need to maintain the STA's OTA MAC as MAC for a predefined period of time or the time agreed upon during association. i The SN, PN and scrambler seed values ​​on the uplink and downlink when the STA processes the receiving end address as MAC i Frame, according to MAC i The corresponding uplink and downlink SN, PN and scrambler seed values ​​are used to process the frame. When the AP processes the sender address as MAC i Frame, according to MAC i The corresponding uplink and downlink SN, PN and scrambler seed values ​​are processed.

[0173] 2. AID update plan.

[0174] Method 1: AP allocation.

[0175] In some embodiments, when an Over-the-Air Medium Access Control (OTA) MAC address of a station device changes, calculating new first information of the station device based on the first secret information includes:

[0176] In a case where the first information includes an AID and the communication device is an access point device, when the OTA MAC address of the station device changes, a new AID is allocated to the station device;

[0177] The new AID of the site device is sent to the site device.

[0178] In some embodiments, when an Over-the-Air Medium Access Control (OTA) MAC address of a station device changes, calculating new first information of the station device based on the first secret information includes:

[0179] In the case that the first information includes an AID and the communication device is a station device, when the OTA MAC address of the station device changes, a new AID allocated by the access point device to the station device is received.

[0180] In some embodiments, after the OTA MAC address of the station device is changed, the access point device may directly allocate a new AID for the station device and send the new AID to the station device.

[0181] In some embodiments, the new AID of the station device is encrypted by the access point device using the first secret information and then sent to the station device via an action frame.

[0182] In some embodiments, the category field of the action frame includes a first indication bit, and the bit value of the first indication bit is used to indicate whether a designated bit in the action frame includes the encrypted new AID.

[0183] If the above method 1 is adopted (i.e., whenever the STA changes its OTA MAC, the AP distributes a new AID to the STA), when the STA changes its OTA MAC from MAC i Update for MAC i+1 When the AP receives the MAC address of the sender from the STA for the first time i+1 When an AP receives a frame, it selects an AID from its unassigned AIDs, encrypts it using the secret information IV shared with the STA (the same secret information used to process the PN, SN, scrambler seed, and TID), and then places it in a management frame and sends it to the STA. The format of the management frame is shown in Figure 11. After receiving the management frame, the STA decrypts it using the secret information IV shared with the AP to obtain a new AID.

[0184] Figure 11 shows a management frame diagram. This frame is an Action frame. Since the Category field in the Action frame has reserved values ​​between 30 and 125, this solution uses a value (for example, 32) to indicate the presence of an AID field. Setting the AID Present bit to 1 indicates the presence of an AID field; otherwise, it indicates the absence of an AID field. If a STA receives this frame, it decrypts the ciphertext in the AID field in the management frame using the secret information (IV) shared with the AP to obtain the new AID.

[0185] Method 2: First, each station generates an AID to be used for the next update according to the same algorithm. If there is a conflict with the AID of other stations, it will be allocated by the AP.

[0186] In some embodiments, when an Over-the-Air Medium Access Control (OTA) MAC address of a station device changes, calculating new first information of the station device based on the first secret information includes:

[0187] When the first information includes an AID, a new AID of the site device is generated according to the first secret information, the changed first OTA MAC address of the site device, and the AID currently used by the site device; the new AID of the site device is used after the site device updates the OTA MAC address next time.

[0188] In some embodiments, when the communication device is an access point device, detecting whether the new AID of the site device conflicts with the new AID and currently used AID of other sites; the other sites are sites other than the site device among the sites accessed by the access point device;

[0189] When the new AID of the site device conflicts with the new AIDs and currently used AIDs of other sites, a first AID is allocated to the site device;

[0190] Update the new AID of the station device using the first AID;

[0191] The first AID is sent to the site device.

[0192] In some embodiments, when the communication device is a station device, receiving a first AID sent by the access point device, and using the first AID to update a new AID of the station device;

[0193] The first AID is an AID allocated to the site device when the access point device detects a new AID of the site device and there is a conflict between the new AID of other sites and the currently used AID; other sites are sites other than the site device among the sites accessed by the access point device.

[0194] In some embodiments, the first AID is encrypted by the access point device using the first secret information and then sent to the station device via an action frame.

[0195] In some embodiments, the category field of the action frame includes a second indication bit, and the bit value of the second indication bit is used to indicate whether a designated bit in the action frame includes the encrypted first AID.

[0196] If the second method above is used (i.e., the STA and the AP pre-calculate the next AID to be used based on shared secret information, and whenever the STA changes its OTA MAC, the STA directly uses the pre-calculated next AID to be used and calculates the next AID to be used at the same time), the algorithm used by the AP and STA to calculate the next AID to be used by the STA is as follows:

[0197] HASH(MACSTA||IV||AID now ) 11 , the parameter MACSTA is the OTA MAC address currently used by the STA, the parameter IV is the secret information between the AP and the STA (the IV here is the same as the secret information IV for processing PN, SN, scrambler seed and TID), the parameter AID now is the AID currently used by STA, || represents string concatenation, and the function HASH(X) represents the hash operation of parameter X. The algorithm can be SHA2, SHA3, etc. HASH(X) 11 It means to cut off 11 bits from the result of HASH(X). For example, it can cut off 11 bits from the first digit to the back, or it can cut off 11 bits from the last digit to the front, etc.

[0198] Each STA needs to maintain two AIDs simultaneously: the current AID and the next AID to be used. The AP considers the next AID to be used by all associated STAs to be the assigned AID. After calculating the next AID to be used by a STA, the AP compares this value with the current and next AIDs used by other STAs, as well as the STA's current AID. If a conflict occurs, the AP selects an AID from its unassigned AIDs, encrypts it using the secret information (IV) shared with the STA (the same secret information used to process the PN, SN, scrambler seed, and TID), and sends it to the STA in a management frame. The management frame format is shown in Figure 12. When the STA receives the management frame, it decrypts it using the secret information (IV) shared with the AP to obtain its next AID to be used.

[0199] Figure 12 shows a management frame diagram. This frame is an Action frame. Since the Category field in the Action frame has reserved values ​​between 30 and 125, this solution uses a value (for example, 32) to indicate the presence of a Next AID field. Setting the Next AID Present bit to 1 indicates the presence of a Next AID field; otherwise, it indicates the absence of a Next AID field. If a STA receives this frame, it decrypts the ciphertext in the Next AID field using the secret information (IV) shared with the AP to obtain the next AID to be used.

[0200] In some embodiments, the station device and the access point device maintain the old first information of the station device within a first period of time after the new first information of the station device is updated according to the first secret information.

[0201] In this embodiment, since the new first information is generated by the site device and the access point device respectively, both parties may not be sure when the other party generates the new first information. It is possible that one device has generated the new first information while the other device has not yet generated the new first information. At this time, the other device may continue to use the old first information for data transmission. Therefore, the device that has generated the new first information needs to retain the old first information for a period of time to ensure that it can correctly receive the data transmitted by the other end according to the old first information.

[0202] For example, in the above AID update method 1, when the STA changes its OTA MAC from MAC i Update for MAC i+1 After that, STA will maintain the previous OTA MAC address MAC i and MAC i The corresponding AID is used for a period of time, and the STA uses the old AID before receiving the new AID assigned by the AP.

[0203] In the above AID update method 1, when STA changes its OTA MAC from MAC i Update for MAC i+1 After that, the AP will maintain the STA's previous OTA MAC address MAC i and MAC i The corresponding AID lasts for a period of time, and during this period, the STA's past AID and the new AID are regarded as the same STA. The AP will reclaim the STA's past AID after a period of time. Before this, the STA's past AID and the new AID will be regarded as allocated AIDs.

[0204] This solution provides two methods for changing the STA's AID. The first method is for the AP to distribute a new AID to the STA whenever the STA changes its OTA MAC address. The second method is for the STA and the AP to pre-calculate the next AID to be used based on shared secret information. Whenever the STA changes its OTA MAC address, the STA directly uses the pre-calculated next AID and simultaneously calculates the next AID to be used.

[0205] In this solution, if the method 1 is adopted to change the STA's AID, assuming that the STA's OTA MAC address is changed from MAC i Change to MAC i+1 , when the AP receives the sender address as MAC i+1 In this solution, if the second method is used to change the STA's AID, when the STA's OTA MAC is MAC i When the AP and STA calculate the next AID to be used by the STA based on the same secret information and the same algorithm, when the STA's OTA MAC is changed from MAC i Change to MAC i+1 In the first method, the STA directly changes the AID value to the pre-calculated value of the next AID to be used, and then calculates the updated AID value when the OTA MAC is changed next time. In the second method, after the AP calculates the next AID to be used by a STA, it compares the value with the AIDs currently and next used by other STAs and the AID currently used by the STA. If a conflict occurs, the AP assigns a valid AID to the STA for the next use.

[0206] Step 1004: The station device and the access point device perform data transmission according to the new first information.

[0207] In this solution, the STA places MSDUs into different priority queues based on the TID value provided by the MSDU. It then searches a locally maintained TID mapping table for the corresponding air-interface transmission value for that TID value and assigns the TID field in the frame to the corresponding air-interface transmission value. Because the STA's current OTA MAC address is used in the calculation of the random number, the STA's air-interface transmission TID value changes with changes in the STA's OTA MAC address. When the AP receives a frame containing a TID from the STA, it uses the air-interface transmission value of the TID to find the actual value at the STA's location in the TID mapping table. The AP then places the MSDU into different priority queues based on the actual TID value. Because the AP always processes the actual TID value of the MSDU, changes in the air-interface transmission value of the TID ensure that the connection between the AP and the STA is not lost. In this solution, the STA does not need to exchange frames with the AP when changing the air-interface transmission value of the TID.

[0208] The following describes how the site device and access point device handle the five elements described above when acting as the transmitter and receiver, respectively.

[0209] 1. STA as the sender

[0210] 1) AID processing:

[0211] If method 1 in the AID update solution is used to generate a new AID, when the STA updates the OTA MAC and has not yet received the new AID assigned by the AP, the old AID is used for framing. In other cases, the STA directly uses the AID corresponding to the current OTA MAC address for framing.

[0212] If method 2 of the AID update solution is adopted, the STA can directly use the AID corresponding to the currently used OTA MAC address to form a frame.

[0213] 2) TID processing:

[0214] When a STA sends a QoS data frame, the STA processes the QoS data frame as follows:

[0215] Step 1: The STA places the MSDU into different priority queues based on the TID value provided by the MSDU;

[0216] Step 2: STA limits the rate of MSDUs;

[0217] Step 3: STA aggregates the MSDU frames;

[0218] Step 4: STA (if STA is an IBSS STA) puts the A-MSDU into the delay queue;

[0219] Step 5: The STA assigns a sequence number to the A-MSDU based on the locally cached SN value.

[0220] Step 6: STA segments the A-MSDU (if necessary);

[0221] Step 7: STA performs integrity calculation and protection on the A-MSDU (optional).

[0222] Step 8: The STA assigns a packet number to the A-MSDU based on the locally cached PN value;

[0223] Step 9: STA encrypts and performs integrity calculation on the A-MSDU (optional);

[0224] Step 10: The STA adds a header and CRC to the A-MSDU. The value of the TID field in the header is the TID value transmitted over the air interface corresponding to the TID provided by the MSDU in the TID mapping table.

[0225] Step 11: The STA aggregates the MPDUs generated in step 11.

[0226] 3) Resetting of uplink SN, PN and scrambler seed:

[0227] When a STA changes its OTA MAC address within an association, it resets its uplink SN, PN, and scrambler seed values. The process is as follows:

[0228] Step 1: The STA copies the uplink sequence number, PN, and scrambler seed values ​​corresponding to the last used OTA MAC address and maintains these values ​​for a period of time.

[0229] Step 2: The STA obtains the currently stored RN and calculates the initial uplink sequence number, PN, and scrambler seed values ​​corresponding to the current OTA MAC address according to the algorithm shown above;

[0230] Step 3: The STA begins to encapsulate frames using the new OTA MAC address and the SN, PN, and scrambler seed values ​​obtained in step 2.

[0231] 2. AP as the transmitter

[0232] 1) AID processing:

[0233] The AP can directly use the AID corresponding to the STA's current OTA MAC address to form a frame.

[0234] 2) TID processing:

[0235] When the AP sends a QoS data frame, the process of processing the QoS data frame is as follows:

[0236] Step 1: The AP places the MSDU into different priority queues based on the TID value provided by the MSDU;

[0237] Step 2: The AP limits the rate of MSDUs.

[0238] Step 3: The AP aggregates the MSDU frames.

[0239] Step 4: The AP (if the STA is an IBSS STA) places the A-MSDU into the delay queue;

[0240] Step 5: The AP assigns a sequence number to the A-MSDU based on the locally cached SN value.

[0241] Step 6: The AP segments the A-MSDU (if necessary).

[0242] Step 7: The AP performs integrity calculation and protection on the A-MSDU (optional).

[0243] Step 8: The AP assigns a packet number to the A-MSDU based on the locally cached PN value;

[0244] Step 9: The AP encrypts and performs integrity calculation on the A-MSDU (optional).

[0245] Step 10: The AP adds a header and CRC to the A-MSDU. The TID value in the header is the TID value transmitted over the air interface corresponding to the TID value provided by the MSDU in the TID mapping table.

[0246] Step 11: The AP aggregates the MPDUs generated in step 13.

[0247] 3) Resetting of downlink SN, PN and scrambler seed:

[0248] When a STA changes its OTA MAC address within an association, the AP resets the sequence number, PN, and scrambler seed values ​​for the STA's downlink. The process is as follows:

[0249] Step 1: The AP copies the downlink sequence number, PN, and scrambler seed values ​​corresponding to the STA's last used OTA MAC address and maintains these values ​​for a period of time.

[0250] Step 2: The AP obtains the RN corresponding to the STA and calculates the initial values ​​of the SN, PN, and scrambler seed for the STA's downlink according to the algorithm shown above.

[0251] Step 3: The AP begins to encapsulate frames using the STA's new OTA MAC address and the SN, PN, and scrambler seed values ​​calculated in step 2.

[0252] 3. STA as a receiver

[0253] 1) AID processing:

[0254] If the STA maintains its last used OTA MAC address and last used AID, any received frame containing the STA's current AID or the last used AID will be processed. If the STA does not maintain its last used OTA MAC address and last used AID, only frames containing the STA's current AID will be processed.

[0255] 2) TID processing:

[0256] When a STA receives a QoS data frame, it processes it as follows:

[0257] Step 1: The STA deaggregates the received A-MPDU (aggregate medium access control (MAC) protocol data unit) frame.

[0258] Step 2: The STA obtains the OTA-TID from the MPDU frame header. If the receiving end address is the OTA MAC currently used by the STA, the STA searches for the TID corresponding to the OTA-TID in the locally maintained TID mapping table. If the receiving end address is the OTA MAC used by the STA last time, the STA searches for the TID corresponding to the OTA-TID in the locally maintained temporary TID mapping table. The STA then replaces the OTA-TID contained in the frame header with the found TID.

[0259] Step 3: The STA verifies the MPDU frame header and CRC.

[0260] Step 4: STA filters the frame based on Address1;

[0261] Step 5: STA counts Block acks;

[0262] Step 6: The STA performs duplicate detection on the MPDU.

[0263] Step 7: The STA decrypts the MPDU detected in step 8.

[0264] Step 8: STA caches and sorts Block Acks;

[0265] Step 9: STA performs SYNRA receiver filtering on MPDU;

[0266] Step 10: The STA performs replay detection on the A-MSDU (optional).

[0267] Step 11: STA reassembles the A-MSDU fragments;

[0268] Step 12: The STA de-aggregates the A-MSDU frame to obtain the MSDU.

[0269] Step 13: The STA limits the rate of MSDUs.

[0270] Step 14: STA puts MUSD into different priority queues according to the value of TID.

[0271] 3) Resetting of downlink SN, PN and scrambler seed:

[0272] When a STA first receives a frame from an AP with the receiving end address being the STA's updated OTA MAC address and containing a SN, the STA first copies the downlink sequence number value corresponding to the previously used OTA MAC address (the STA maintains this value for a period of time and then deletes it), and then resets the current downlink sequence number value to the SN value in the frame.

[0273] When a STA receives a frame from an AP for the first time with the receiving end address being the STA's updated OTA MAC address and containing a PN, the STA first copies the value of the downlink replay counter corresponding to the previously used OTA MAC address (the STA maintains this value for a period of time and then deletes it), and then resets the current downlink replay counter value to the value of the PN contained in the frame.

[0274] When a STA receives a frame from an AP for the first time with the receiving end address being the STA's updated OTA MAC address and containing a scrambler seed, the STA first copies the downlink scrambler seed value corresponding to the last used OTA MAC address (the STA maintains the value for a period of time and then deletes it), and then resets the current downlink scrambler seed value to the scrambler seed value in the frame.

[0275] When a STA receives a frame from an AP with the receiving address being the STA's last used OTA MAC address, and if the frame contains an SN, PN, or scrambler seed, the STA processes the frame based on the values ​​of the sequence number counter, replay counter, and scrambler seed corresponding to the STA's last used OTA MAC address.

[0276] 4. AP as a Receiver

[0277] 1) AID processing:

[0278] If method 1 of the AID update solution is used to generate a new AID: while the AP maintains the STA's last OTA MAC address and last AID, the AP will process any frames sent by the STA using the last OTA MAC address and last AID, any frames using the updated OTA MAC address and last AID, and any frames using the updated OTA MAC address and updated AID. If the AP does not maintain the STA's last OTA MAC address and last AID, the AP will process only any frames received from the STA using the current OTA MAC address and current AID.

[0279] If method 2 of the AID update solution is used to generate a new AID: Because the STA's next AID has been pre-calculated, while the AP maintains the STA's last OTA MAC address and AID, the AP processes frames sent by the STA using the last OTA MAC address and AID, as well as frames using the updated OTA MAC address and AID. If the AP does not maintain the STA's last OTA MAC address and AID, it processes frames only when it receives a frame from the STA using the current OTA MAC address and AID.

[0280] 2) TID processing:

[0281] When the AP receives a QoS data frame, it processes it as follows:

[0282] Step 1: The AP deaggregates the received A-MPDU frame.

[0283] Step 2: The AP obtains the OTA-TID from the MPDU frame header. If the receiving end address is the OTA MAC address currently used by the STA, the AP searches for the TID corresponding to the OTA-TID in the locally maintained TID mapping table. If the receiving end address is the OTA MAC address last used by the STA, the STA searches for the TID corresponding to the OTA-TID in the locally maintained temporary TID mapping record. The AP then replaces the OTA-TID contained in the frame header with the found TID.

[0284] Step 3: The AP performs integrity check on the MPDU;

[0285] Step 4: The AP filters the frame based on Address1;

[0286] Step 5: AP counts Block acks;

[0287] Step 6: The AP performs duplicate detection on the MPDU.

[0288] Step 9: The AP decrypts the MPDU detected in step 8.

[0289] Step 10: The AP caches and sorts Block Acks.

[0290] Step 11: The AP performs SYNRA receiver filtering on the MPDU;

[0291] Step 13: The AP performs replay detection on the A-MSDU (optional).

[0292] Step 14: The AP de-aggregates the A-MSDU frame to obtain the MSDU.

[0293] Step 15: The AP limits the rate of MSDUs.

[0294] Step 16: The AP places the MSDU into different priority queues based on the TID value.

[0295] 3) Resetting of uplink SN, PN and scrambler seed:

[0296] When the AP first receives a frame sent by a STA with the receiving end address being the STA's updated OTA MAC address and containing an SN, the AP first copies the uplink sequence number value corresponding to the STA's last used OTA MAC address (the AP maintains this value for a period of time and then deletes it), and then resets the current uplink sequence number value to the SN value in the frame.

[0297] When the AP first receives a frame sent by a STA with the receiving end address being the STA's updated OTA MAC address and containing a PN, the AP first copies the value of the uplink replay counter corresponding to the STA's last used OTA MAC address (the AP maintains this value for a period of time and then deletes it), and then resets the current uplink replay counter value to the value of the PN contained in the frame.

[0298] When the AP first receives a frame with the receiving end address of the AP being the STA's updated OTA MAC address and containing a scrambler seed, the STA first copies the uplink scrambler seed value corresponding to the STA's last used OTA MAC address (the AP maintains the value for a period of time and then deletes it), and then resets the current uplink scrambler seed value to the scrambler seed value in the frame.

[0299] When an AP receives a frame from a STA with a transmitter address that is the STA's last used OTA MAC address, and if the frame contains an SN, PN, or scrambler seed, the AP processes the frame based on the values ​​of the sequence number counter, replay counter, and scrambler seed corresponding to the STA's last used OTA MAC address.

[0300] To summarize, in the solution shown in the embodiment of the present application, when the OTA MAC address of the site device changes, the site device and the access point device can determine the new first information used for transmission between the site device and the access point device according to the first secret information. Since the first secret information is predetermined by the site device and the access point device, the site device and the access point device do not need to interact too much in the process of determining the new first information, thereby saving signaling resources.

[0301] Based on the solution shown in FIG10 above, please refer to FIG13, which shows a framework diagram of information update provided by one embodiment of the present application. Taking the first information including the five types of information, namely AID, OTA-TID, SN, PN, and scrambling code seed, as an example, when the OTA MAC address of the site device changes, the communication device can update these five types of information as follows:

[0302] S1: During access, the station device and the access point device negotiate first secret information IV.

[0303] S2, AID update.

[0304] Method 1: The AP allocates an AID to be used for the next OTA MAC update.

[0305] Method 2: Calculate HASH(MACSTA||IV||AID now ) 11 , determine whether there is a conflict with the current AID and the next AID used by other sites. If there is no conflict, HASH(MACSTA||IV||AID now ) 11 The AID used by the station device for the next OTA MAC update is assigned by the AP. Otherwise, the AID used for the next OTA MAC update is assigned by the AP.

[0306] S3, calculate the random number RN = HASH (MACSTA||IV).

[0307] S4: Update OTA-TID, SN, PN, and scrambling code seed according to RN.

[0308] OTA-TID update: calculate the actual Get the new OTA-TID.

[0309] SN Update: Calculate the old Get a new SN.

[0310] PN Update: Calculate the old Get a new PN.

[0311] Scrambler seed update: calculate the old scrambler seed Get a new scrambling seed.

[0312] The process of generating and updating the random number, TID mapping table, and AID list maintained by the STA and AP can be as follows:

[0313] 1) STA generates and updates random numbers and mapping tables:

[0314] When a STA connects to an AP, it first generates a random number and then creates a mapping table. When a STA changes its OTA MAC address within an association, it first updates the random number and then the mapping table. When a STA disassociates from an AP, the stored random number and mapping table are cleared.

[0315] ①Generation of random number RN

[0316] When a STA accesses an AP, it negotiates and stores a secret value IV with the AP, and calculates and stores a random number RN = HASH(MACSTA||IV) locally. Initially, MACSTA is the OTA MAC address used by the STA when accessing the AP.

[0317] ② Update of random number RN

[0318] When a STA changes its OTA MAC address within an association, it locally calculates HASH(MACSTA||IV), where MACSTA is the STA's updated OTA MAC address. The STA updates the stored random number RN to the value of HASH(MACSTA||IV).

[0319] ③ Generation of TID mapping table

[0320] When a STA successfully accesses the AP, it will generate a TID mapping table as shown in Table 1 below. The first row of the table is all the values ​​in the TID value range (the value range is 0 to 15), the length is 16, and all the values ​​in the TID value range are stored in ascending order. The values ​​in this row remain unchanged in the association. The second row is the TID value of all the values ​​in the TID value range corresponding to the air interface transmission under the current OTA MAC of the STA. The values ​​are as follows:

[0321] Table 1

[0322] TID0123…15OTA TIDOTA TID0OTA TID1OTA TID2OTA TID3…OTA TID 15

[0323] ④TID mapping table update

[0324] When a STA changes its OTA MAC within an association, the process of updating the maintained TID mapping table is as follows:

[0325] Step 1: The STA copies a TID mapping table corresponding to the previous OTA MAC address and maintains the table for a period of time. This table is called a temporary TID mapping table.

[0326] Step 2: The STA obtains the locally stored random number RN. Since the STA updates the random number first and then updates the AID mapping table, the random number obtained at this time is a new random number.

[0327] Step 3: STA calculation

[0328] Step 4: The STA updates the value of the second row in the TID mapping table to the value obtained in step 3.

[0329] ⑤Generation of AID list (exists when method 2 is adopted)

[0330] When a STA successfully connects to an AP, it will locally generate an AID list as shown in Table 2 below.

[0331] The first column of the table is the OTA MAC address currently used by the STA. The second column of the table is the AID corresponding to the OTA MAC address currently used by the STA. Initially, this value is the AID contained in the association response frame sent by the AP to the STA when the STA associates with the AP. The third column of the table is the next AID used by the STA, that is, when the STA updates the OTA MAC, the AID value corresponding to the new OTA MAC address is calculated by HASH(MACSTA||IV||AIDnow) 11 After the AP calculates the next AID to be used by a STA, it compares the value with the AIDs currently and next used by other STAs and the AID currently used by the STA. If a conflict occurs, the AP uses the management frame shown in Figure 12 to assign a valid AID to the STA as its next AID. When the STA receives the management frame shown in Figure 12, it should set the value of its next AID to the value of the AID in the management frame.

[0332] Table 2

[0333] The air interface address of the site. The AID currently used by the site. The next AID to be used by the site. OTA MACAID now AID next

[0334] ⑥ Update of AID list (exists when method 2 is adopted)

[0335] When a STA changes its OTA MAC within an association, the process for updating the AID list it maintains is as follows:

[0336] Step 1: The STA saves the last used OTA MAC address and its corresponding AID (cleared after a period of time);

[0337] Step 2: The STA updates the first column in Table 2 with the new OTA MAC address.

[0338] Step 3: STA assigns the value of AIDnow in Table 2 to the value of AIDnext;

[0339] Step 4: STA calculates HASH(MACSTA||IV||AIDnow) 11 , assign the value of AIDnext to HASH(MACSTA||IV||AIDnow) 11 If the STA receives the management frame shown in Figure 12, it will reassign the value of AIDnext to the decrypted value of the Next AID field in the frame.

[0340] 2) AP generates and updates random numbers and mapping tables

[0341] When a STA connects to an AP, the AP generates a random number for the STA, creates a record for the STA, and inserts the record into the mapping table. If the STA changes its OTA MAC address within an association, the AP updates the random number for the STA and then updates the record for the STA in the mapping table. When the STA disassociates from the AP, the AP clears the random number for the STA and the record for the STA in the mapping table.

[0342] ①Generation of random number RN

[0343] When a STA accesses an AP, the AP negotiates and stores a secret value IV with the STA, and locally calculates and stores a random number RN = HASH(MACSTA||IV). MACSTA is the OTA MAC address currently used by the STA. Initially, MACSTA is the OTA MAC address used by the STA when accessing the AP.

[0344] ② Update of random number RN

[0345] When a STA associated with an AP changes its OTA MAC address, the AP locally calculates HASH(MACSTA||IV). MACSTA is the STA's updated OTA MAC address. The AP updates the stored random number corresponding to the STA to HASH(MACSTA||IV).

[0346] ③ Generation of TID mapping table

[0347] The TID mapping table generated by the AP is shown in Table 3 below. The first row contains all the values ​​within the TID value range (the range is 0 to 15). The values ​​are stored in ascending order and remain unchanged in the mapping table. The other rows contain the TID values ​​transmitted over the air interface corresponding to the STAs associated with the AP. The values ​​are as follows: The values ​​in the other rows are mapped one-to-one with the values ​​in the first row. For example, as shown in Table 3 below, when the actual TID value of the frame sent by the AP to STA1 is 0, the TID value of the air interface transmission of the frame sent by the AP to STA1 is OTA-TID 1-0 When no STA is associated with the AP, the table is empty.

[0348] When a STA associates with an AP, the AP calculates the TID value transmitted over the air interface corresponding to the STA according to the above calculation method. If the STA successfully associates with the AP, the AP inserts the TID value transmitted over the air interface corresponding to the STA into the end of the table.

[0349] Table 3

[0350]

[0351] ④TID mapping table update

[0352] When a STA associated with an AP updates its OTA MAC, the update process of the corresponding record in the TID mapping table of the STA is as follows:

[0353] Step 1: The AP copies a record of the STA's last used OTA MAC address in the AID mapping table, which is called a temporary TID mapping record.

[0354] Step 2: The AP obtains the stored random number RN corresponding to the STA;

[0355] Step 3: The AP obtains the AID value of the STA's air interface transmission corresponding to the OTA MAC currently used by the STA according to the calculation method described in 3.1.

[0356] Step 4: The AP updates the record corresponding to the OTA MAC address last used by the STA in the TID mapping table maintained by the AP to the value in step 3.

[0357] ⑤Generation of AID list (exists when method 2 is adopted)

[0358] The AID list generated by the AP is shown in Table 4 below. The first column is the OTA MAC currently used by all STAs in the associated state with the AP. The second column is the AID currently used by all STAs in the associated state with the AP. The initial value of this column is the AID value in the association response frame when the STA associates with the AP. The third column is the next AID value used by all STAs in the associated state with the AP. This value is calculated by HASH(MACSTA||IV||AIDnow) 11 Calculated, but when HASH(MACSTA||IV||AIDnow) 11 When the value conflicts with the value in Table 4, the value is the AID value selected by the AP from the unassigned AIDs. At the same time, the AP uses the management frame shown in Figure 12 to send the STA its next used AID ciphertext, HASH(MACSTA||IV||AIDnow) 11 If there is no conflict, no management frame is sent.

[0359] Table 4

[0360] Site Current AID Next AIDSTA1AID 11 AID 12 STA2AID 21 AID 22 STA3AID 31 AID 32 ………STAn AID n1 AID n2

[0361] ⑥ Update of AID list (exists when method 2 is adopted)

[0362] When a STA associated with an AP updates its OTA MAC address, the update process for the STA's corresponding record in the AID list is as follows:

[0363] Step 1: The AP saves the STA's last used OTA MAC address and its corresponding AID (deleted after a period of time. During the period of time, the AID is also considered as an assigned AID).

[0364] Step 2: The AP assigns the value of the second column in the record corresponding to the STA to the value of the third column;

[0365] Step 3: AP calculates HASH(MACSTA||IV||AIDnow) 11 If the value does not conflict with any value in Table 4, the AP assigns the value of the third column in the record corresponding to the STA to HASH(MACSTA||IV||AIDnow) 11 If there is a conflict, the AP selects an AID from the unassigned AIDs, assigns the value of the third column in the record corresponding to the STA to the value of the selected AID, and uses the management frame shown in Figure 12 to send the STA the ciphertext of the next AID to be used.

[0366] Please refer to Figure 14, which shows a block diagram of an information update device provided by an embodiment of the present application. The information update device has the functions of implementing the method shown in Figure 8 or Figure 10 above, which is performed by the communication device (station device or access point device). As shown in Figure 14, the device may include:

[0367] An updating module 1401 is configured to update the new first information of the site device according to the first secret information when an over-the-air (OTA) media access control (MAC) address of the site device changes.

[0368] The first information is information used for transmission between the station device and the access point device; and the first secret information is information predetermined by the station device and the access point device.

[0369] In some embodiments, the first information includes at least one of the following information:

[0370] Air traffic identifier OTA-TID, MAC frame sequence number SN, MAC frame encryption and decryption packet number PN, physical layer protocol data unit PPDU scrambling code seed and connection identifier AID;

[0371] Among them, OTA-TID is used to obfuscate the actual TID during transmission.

[0372] In some embodiments, the update module 1401 is used to:

[0373] When the first information includes at least one of an OTA-TID, a SN, a PN, and a scrambling seed, when the OTA MAC address of the site device changes, generating a random number for the site device based on the first secret information and the changed first OTA MAC address of the site device;

[0374] Generate new first information of the site device according to the random number of the site device.

[0375] In some embodiments, the update module 1401 is configured to, when the first information includes an OTA-TID, generate a new OTA-TID for the site device based on a first bit portion of a random number of the site device and each actual TID; the first bit portion being a bit value located in a first bit position interval in the random number of the site device.

[0376] In some embodiments, the update module 1401 is configured to perform an exclusive OR operation on the first bit portion and each actual TID to obtain each new OTA-TID of the site device; each new OTA-TID of the site device corresponds one-to-one to each actual TID.

[0377] In some embodiments, the update module 1401 is used to generate a new SN of the site device based on the second bit portion in the random number of the site device and the old SN of the site device when the first information includes the SN; the second bit portion is the bit value in the random number of the site device located in the second bit position interval.

[0378] In some embodiments, the updating module 1401 is configured to perform an XOR operation on the second bit portion and the old SN of the site device to obtain a new SN of the site device.

[0379] In some embodiments, when the communication device is the site device, the old SN of the site device includes the old uplink SN of the site device, and the new SN of the site device includes the new uplink SN of the site device;

[0380] In the case that the communication device is the access point device, the old SN of the site device includes the old downlink SN of the site device, and the new SN of the site device includes the new downlink SN of the site device.

[0381] In some embodiments, the update module 1401 is used to generate a new PN for the site device based on the third bit portion in the random number of the site device and the old PN of the site device when the first information includes a PN; the third bit portion is the bit value in the random number of the site device that is located in the third bit position interval.

[0382] In some embodiments, the updating module 1401 is configured to perform an XOR operation on the third bit portion and the old PN of the site device to obtain a new PN of the site device.

[0383] In some embodiments, when the communication device is the station device, the old PN of the station device includes the old uplink PN of the station device, and the new PN of the station device includes the new uplink PN of the station device;

[0384] In the case that the communication device is the access point device, the old PN of the station device includes the old downlink PN of the station device, and the new PN of the station device includes the new downlink PN of the station device.

[0385] In some embodiments, the update module 1401 is configured to, when the first information includes a scrambling seed, generate a new scrambling seed for the site device based on a fourth bit portion in the random number of the site device and an old scrambling seed of the site device; the fourth bit portion is a bit value located in a fourth bit position interval in the random number of the site device.

[0386] In some embodiments, the updating module 1401 is configured to perform an XOR operation on the fourth bit portion and an old scrambling code seed of the site device to obtain a new scrambling code seed of the site device.

[0387] In some embodiments, when the communication device is the station device, the old scrambling code seed of the station device includes an old uplink scrambling code seed of the station device, and the new scrambling code seed of the station device includes a new uplink scrambling code seed of the station device;

[0388] In the case that the communication device is the access point device, the old scrambling code seed of the station device includes an old downlink scrambling code seed of the station device, and the new scrambling code seed of the station device includes a new downlink scrambling code seed of the station device.

[0389] In some embodiments, the update module 1401 is configured to perform a hash calculation on a concatenation of the first OTA MAC address and the first secret information to obtain a random number of the site device.

[0390] In some embodiments, the update module 1401 is used to:

[0391] In a case where the first information includes an AID and the communication device is the access point device, when the OTA MAC address of the station device changes, allocating a new AID to the station device;

[0392] Sending a new AID of the site device to the site device.

[0393] In some embodiments, the update module 1401 is configured to, when the first information includes an AID and the communication device is the site device, receive a new AID allocated by the access point device to the site device when the OTA MAC address of the site device changes.

[0394] In some embodiments, the new AID of the station device is encrypted by the access point device using the first secret information and then sent to the station device via an action frame.

[0395] In some embodiments, the category field of the action frame includes a first indication bit, and the bit value of the first indication bit is used to indicate whether a designated bit in the action frame includes the encrypted new AID.

[0396] In some embodiments, the update module 1401 is used to generate a new AID of the site device according to the first secret information, the changed first OTA MAC address of the site device, and the AID currently used by the site device when the first information includes an AID; the new AID of the site device is used after the site device updates the OTA MAC address next time.

[0397] In some embodiments, the apparatus further comprises:

[0398] a detection module, configured to, when the communication device is the access point device, detect whether the new AID of the site device conflicts with the new AID and currently used AID of other sites; the other sites being sites other than the site device among the sites accessed by the access point device;

[0399] an allocating module, configured to allocate a first AID to the site device if the new AID of the site device conflicts with the new AID and currently used AID of other sites;

[0400] The updating module 1401 is further configured to update a new AID of the site device using the first AID;

[0401] A sending module is configured to send the first AID to the site device.

[0402] In some embodiments, the apparatus further comprises:

[0403] a receiving module, configured to, when the communication device is the station device, receive the first AID sent by the access point device, and use the first AID to update a new AID of the station device;

[0404] The first AID is an AID allocated to the site device when the access point device detects a new AID of the site device and conflicts with the new AID and currently used AID of other sites; the other sites are other sites other than the site device among the sites accessed by the access point device.

[0405] In some embodiments, the first AID is encrypted by the access point device using the first secret information and then sent to the station device via an action frame.

[0406] In some embodiments, the category field of the action frame includes a second indication bit, and the bit value of the second indication bit is used to indicate whether a designated bit in the action frame includes the encrypted first AID.

[0407] In some embodiments, the apparatus further comprises:

[0408] The maintaining module is configured to maintain the old first information of the site device within a first time period after the new first information of the site device is updated according to the first secret information.

[0409] It should be noted that the device provided in the above embodiment only uses the division of the above-mentioned functional modules as an example to implement its functions. In actual applications, the above-mentioned functions can be assigned to different functional modules according to actual needs, that is, the content structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0410] Regarding the apparatus in the above embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be elaborated here.

[0411] Please refer to FIG15 , which shows a schematic diagram of the structure of a communication device 1500 provided in one embodiment of the present application. The communication device 1500 may include: a processor 1501 , a receiver 1502 , a transmitter 1503 , a memory 1504 , and a bus 1505 .

[0412] The processor 1501 includes one or more processing cores. The processor 1501 executes various functional applications and information processing by running software programs and modules.

[0413] The receiver 1502 and the transmitter 1503 may be implemented as a communication component, which may be a communication chip, which may also be called a transceiver.

[0414] The memory 1504 is connected to the processor 1501 via a bus 1505 .

[0415] The memory 1504 may be used to store a computer program, and the processor 1501 may be used to execute the computer program to implement each step in the above method embodiment.

[0416] In addition, memory 1504 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, including but not limited to: magnetic disk or optical disk, electrically erasable programmable read-only memory, erasable programmable read-only memory, static access memory, read-only memory, magnetic memory, flash memory, and programmable read-only memory.

[0417] In an exemplary embodiment, the processor executes the computer program so that the communication device implements the steps performed by the site device or the access point device in the method shown in either Figure 8 or Figure 10; for example, the processor can update the new first information of the site device according to the first secret information when the air-over-the-air (OTA) media access control address (MAC) of the site device changes; wherein the first information is information used for transmission between the site device and the access point device; and the first secret information is information predetermined by the site device and the access point device.

[0418] An embodiment of the present application further provides a computer-readable storage medium, in which a computer program is stored. The computer program is loaded and executed by a processor to implement all or part of the steps performed by the site device or access point device in the method shown in Figure 8 or Figure 10 above.

[0419] The present application also provides a chip, which is used to run in a communication device so that the communication device executes all or part of the steps performed by the site device or access point device in the method shown in Figure 8 or Figure 10 above.

[0420] The present application also provides a computer program product, which includes computer instructions stored in a computer-readable storage medium. A processor of a communication device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, causing the communication device to perform all or part of the steps performed by the station device or access point device in the method shown in Figures 8 or 10 above.

[0421] The present application also provides a computer program, which is executed by a processor of a communication device to implement all or part of the steps performed by the site device or access point device in the method shown in Figure 8 or Figure 10 above.

[0422] Those skilled in the art will appreciate that in one or more of the above examples, the functions described in the embodiments of the present application can be implemented using hardware, software, firmware, or any combination thereof. When implemented using software, these functions can be stored in a computer-readable medium or transmitted as one or more instructions or codes on a computer-readable medium. Computer-readable media include computer storage media and communication media, wherein communication media include any media that facilitates the transmission of computer programs from one place to another. The storage medium can be any available medium that can be accessed by a general-purpose or special-purpose computer.

[0423] The above description is merely an exemplary embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present application shall be included in the scope of protection of the present application.

Claims

1. An information updating method, characterized in that: The method is performed by a communication device; the communication device is one of a station device and an access point device used in a wireless local area network (WLAN); the method includes: When an over-the-air (OTA) media access control (MAC) address of the site device changes, updating new first information of the site device according to the first secret information; The first information is information used for transmission between the station device and the access point device; and the first secret information is information predetermined by the station device and the access point device.

2. The method according to claim 1, characterized in that The first information includes at least one of the following information: Air traffic identifier OTA-TID, MAC frame sequence number SN, MAC frame encryption and decryption packet number PN, physical layer protocol data unit PPDU scrambling code seed and connection identifier AID; Among them, OTA-TID is used to obfuscate the actual TID during transmission.

3. The method according to claim 2, characterized in that When an Over-the-Air Medium Access Control (OTA) MAC address of the site device changes, calculating new first information of the site device according to the first secret information includes: When the first information includes at least one of an OTA-TID, a SN, a PN, and a scrambling seed, when the OTA MAC address of the site device changes, generating a random number for the site device based on the first secret information and the changed first OTA MAC address of the site device; Generate new first information of the site device according to the random number of the site device.

4. The method according to claim 3, characterized in that Generating new first information of the site device according to the random number of the site device includes: When the first information includes an OTA-TID, a new OTA-TID of the site device is generated based on a first bit portion of a random number of the site device and each actual TID; the first bit portion is a bit value located in a first bit position interval of the random number of the site device.

5. The method according to claim 4, characterized in that Generating a new OTA-TID of the site device according to the first bit portion of the random number of the site device and each actual TID includes: An exclusive OR operation is performed on the first bit portion and each actual TID to obtain each new OTA-TID of the site device; each new OTA-TID of the site device corresponds to each actual TID one by one.

6. The method according to claim 3, characterized in that Generating new first information of the site device according to the random number of the site device includes: In the case where the first information includes an SN, a new SN of the site device is generated based on the second bit portion in the random number of the site device and the old SN of the site device; the second bit portion is the bit value in the random number of the site device, located in the second bit position interval.

7. The method according to claim 6, characterized in that Generating a new SN of the site device according to the first bit portion of the random number of the site device and the old SN of the site device includes: An exclusive OR operation is performed on the second bit portion and the old SN of the site device to obtain a new SN of the site device.

8. The method according to claim 6 or 7, characterized in that In a case where the communication device is the site device, the old SN of the site device includes an old uplink SN of the site device, and the new SN of the site device includes a new uplink SN of the site device; In the case that the communication device is the access point device, the old SN of the site device includes the old downlink SN of the site device, and the new SN of the site device includes the new downlink SN of the site device.

9. The method according to claim 3, characterized in that Generating new first information of the site device according to the random number of the site device includes: In the case where the first information includes PN, a new PN of the site device is generated based on the third bit portion in the random number of the site device and the old PN of the site device; the third bit portion is the bit value located in the third bit position interval in the random number of the site device.

10. The method according to claim 9, characterized in that Generating a new PN of the site device according to the third bit portion of the random number of the site device and the old PN of the site device includes: An exclusive OR operation is performed on the third bit portion and the old PN of the site device to obtain a new PN of the site device.

11. The method according to claim 9 or 10, characterized in that In a case where the communication device is the station device, the old PN of the station device includes the old uplink PN of the station device, and the new PN of the station device includes the new uplink PN of the station device; In the case that the communication device is the access point device, the old PN of the station device includes the old downlink PN of the station device, and the new PN of the station device includes the new downlink PN of the station device.

12. The method according to claim 3, characterized in that Generating new first information of the site device according to the random number of the site device includes: In a case where the first information includes a scrambling seed, a new scrambling seed for the site device is generated based on a fourth bit portion in the random number of the site device and an old scrambling seed for the site device; the fourth bit portion is a bit value located in a fourth bit position interval in the random number of the site device.

13. The method according to claim 12, characterized in that Generating a new scrambling seed for the site device according to the fourth bit portion of the random number of the site device and the old scrambling seed for the site device includes: An exclusive OR operation is performed on the fourth bit portion and the old scrambling code seed of the site device to obtain a new scrambling code seed of the site device.

14. The method according to claim 12 or 13, characterized in that In a case where the communication device is the station device, the old scrambling code seed of the station device includes an old uplink scrambling code seed of the station device, and the new scrambling code seed of the station device includes a new uplink scrambling code seed of the station device; In the case that the communication device is the access point device, the old scrambling code seed of the station device includes an old downlink scrambling code seed of the station device, and the new scrambling code seed of the station device includes a new downlink scrambling code seed of the station device.

15. The method according to any one of claims 3 to 14, characterized in that: When the OTA MAC address of the site device changes, generating a random number for the site device according to the first secret information and the changed first OTA MAC address of the site device includes: A hash calculation is performed on the concatenation of the first OTA MAC address and the first secret information to obtain a random number of the site device.

16. The method according to claim 2, characterized in that When an Over-the-Air Medium Access Control (OTA) MAC address of the site device changes, calculating new first information of the site device according to the first secret information includes: In a case where the first information includes an AID and the communication device is the access point device, when the OTA MAC address of the station device changes, allocating a new AID to the station device; Sending a new AID of the site device to the site device.

17. The method according to claim 2, characterized in that When an Over-the-Air Medium Access Control (OTA) MAC address of the site device changes, calculating new first information of the site device according to the first secret information includes: In a case where the first information includes an AID and the communication device is the station device, when the OTA MAC address of the station device changes, a new AID allocated by the access point device to the station device is received.

18. The method according to claim 16 or 17, characterized in that The new AID of the station device is encrypted by the access point device using the first secret information and sent to the station device through an action frame.

19. The method according to claim 18, characterized in that The category field of the action frame includes a first indication bit, and the bit value of the first indication bit is used to indicate whether a designated bit in the action frame includes the encrypted new AID.

20. The method according to claim 2, characterized in that When an Over-the-Air Medium Access Control (OTA) MAC address of the site device changes, calculating new first information of the site device according to the first secret information includes: When the first information includes an AID, a new AID of the site device is generated according to the first secret information, the changed first OTA MAC address of the site device, and the AID currently used by the site device; the new AID of the site device is used for use after the site device updates the OTA MAC address next time.

21. The method according to claim 20, characterized in that The method further comprises: In the case where the communication device is the access point device, detecting whether the new AID of the site device conflicts with the new AID and currently used AID of other sites; the other sites are sites other than the site device among the sites accessed by the access point device; When the new AID of the site device conflicts with the new AID and currently used AID of other sites, allocating a first AID to the site device; Updating a new AID of the site device using the first AID; Send the first AID to the site device.

22. The method according to claim 20, characterized in that The method further comprises: In a case where the communication device is the station device, receiving the first AID sent by the access point device, and using the first AID to update a new AID of the station device; The first AID is an AID allocated to the site device when the access point device detects a new AID of the site device and conflicts with the new AID and currently used AID of other sites; the other sites are other sites other than the site device among the sites accessed by the access point device.

23. The method according to claim 21 or 22, characterized in that The first AID is encrypted by the access point device using the first secret information and is sent to the station device through an action frame.

24. The method according to claim 23, wherein The category field of the action frame includes a second indication bit, and the bit value of the second indication bit is used to indicate whether a designated bit in the action frame includes the encrypted first AID.

25. The method according to any one of claims 1 to 24, characterized in that The method further comprises: The old first information of the site device is maintained within a first time period after the new first information of the site device is updated according to the first secret information.

26. An information updating device, characterized in that: The device comprises: An updating module, configured to update the new first information of the site device according to the first secret information when an over-the-air (OTA) media access control (MAC) address of the site device changes; The first information is information used for transmission between the station device and the access point device; and the first secret information is information predetermined by the station device and the access point device.

27. A communication device, characterized in that: The communication device includes a processor, a memory and a transceiver; The memory stores a computer program, and the processor executes the computer program to enable the communication device to implement the information updating method as described in any one of claims 1 to 25.

28. A computer-readable storage medium, characterized in that The storage medium stores a computer program, and the computer program is used to be executed by a processor to implement the information updating method according to any one of claims 1 to 25.

29. A chip, characterized in that: The chip is configured to operate in a communication device, so that the communication device executes the information updating method according to any one of claims 1 to 25.

30. A computer program product, characterized in that The computer program product includes computer instructions, which are stored in a computer-readable storage medium; the processor of the communication device reads the computer instructions from the computer-readable storage medium and executes the computer instructions, so that the communication device executes the information update method as described in any one of claims 1 to 25.

31. A computer program, characterized in that The computer program is executed by a processor of a communication device to implement the information updating method according to any one of claims 1 to 25.

Images