Method and system for communication between an access controller based on a two-layer protocol and an access point

Abstract

The application discloses a communication method and system between an access controller and an access point based on a two-layer protocol, and the method comprises the following steps: the access controller receives a first message sent by the access point; the access controller judges whether to allow the access of the access point, and if yes, sends a second message to the access point; the access controller receives a third message and a configuration request sent by the access point after receiving the second message; the access controller sends configuration information to the access point; the access controller sends a fourth message to the access point; and the access controller receives a fifth message sent by the access point after receiving the fourth message, wherein the fifth message comprises a processing result of the access point after receiving the fourth message. The application simplifies network setting and use, and makes it relatively simple for consumers to add devices to a network, establish a secure link, realize QoS and the like.

Description

Technical Field

[0001] This invention relates to the field of wireless local area network communication, and more specifically, to a communication method and system between an access controller and an access point based on a Layer 2 protocol. Background Technology

[0002] The network equipment in a wireless LAN system, including the Access Controller (AC) and Access Points (APs), is divided into two main parts: the AC and the AP. The AC manages the Access Points (APs) within the wireless network area, and its main functions include: issuing configurations to APs, managing upgrades, controlling user access, and controlling roaming. The AP acts as a bridge between the wireless and wired networks, connecting wireless network stations (STAs) together and providing access to the wired network.

[0003] Currently, in wireless network environments, AC and AP interact via CAPWAP (Control and Provisioning of Wireless Access Points Protocol). AC manages and configures services for APs through CAPWAP, while STA selects a suitable AP to access the network.

[0004] CAPWAP is a general-purpose tunneling protocol. CAPWAP packets are formed by encapsulating the CAPWAP tunnel header on top of traditional TCP / IP packets. It uses the UDP protocol as its foundation, and therefore has the following disadvantages:

[0005] 1) CAPWAP itself may become a bottleneck for network performance because it requires additional processing power to handle the additional encapsulation overhead;

[0006] 2) Improper configuration may increase security risks, as CAPWAP communication may be intercepted and parsed;

[0007] 3) Because CAPWAP requires continuous communication between the access point and the controller, this may cause the controller to be overloaded;

[0008] 4) In some cases, CAPWAP may not be compatible with certain access point hardware or software, such as the presence of NAT devices or firewalls. Summary of the Invention

[0009] One objective of this invention is to provide a communication method between an access controller and an access point based on a Layer 2 protocol, which solves the technical problems caused by the use of the CAPWAP protocol in the prior art, such as performance bottlenecks, security risks, excessive controller load, and incompatibility. Another objective of this invention is to provide a communication system between an access controller and an access point based on a Layer 2 protocol.

[0010] To solve the above-mentioned technical problems, the technical solution of the present invention is as follows:

[0011] A first aspect of the present invention provides a communication method between an access controller and an access point based on a Layer 2 protocol, comprising the following steps:

[0012] The access controller receives the first message sent by the access point;

[0013] The access controller determines whether to allow the access point to access; if so, it sends a second message to the access point.

[0014] The access controller receives a third message and a configuration request sent by the access point after receiving the second message;

[0015] The access controller sends configuration information to the access point;

[0016] The access controller sends a fourth message to the access point;

[0017] The access controller receives a fifth message from the access point after receiving the fourth message, the fifth message including the processing result of the access point after receiving the fourth message.

[0018] Furthermore, if the access controller determines that access to the access point is not permitted, it discards the first message.

[0019] Furthermore, the configuration information is custom-encrypted configuration information.

[0020] Furthermore, the fourth message includes encrypted control instructions, which are used to control the access point to complete a preset task.

[0021] A second aspect of the present invention provides a communication method between an access controller and an access point based on a Layer 2 protocol, comprising the following steps:

[0022] The access point sends the first message to the access controller;

[0023] The access point receives a second message sent by the access controller after receiving the first message;

[0024] The access point sends a third message and a configuration request to the access controller;

[0025] The access point receives configuration information sent by the access controller after receiving a configuration request;

[0026] The access point obtains configuration parameters based on the configuration information and completes configuration management based on the configuration parameters;

[0027] The access point receives the fourth message;

[0028] After completing the preset task according to the fourth message, the access point sends a fifth message to the access controller. The fifth message includes the processing result of the access point after receiving the fourth message.

[0029] Furthermore, the access point obtains configuration parameters based on the configuration information, including:

[0030] The configuration information is a custom encrypted configuration information;

[0031] The access point decrypts the configuration information to obtain the configuration parameters.

[0032] Furthermore, the fourth message includes encrypted control instructions, which are used to control the access point to complete a preset task.

[0033] Furthermore, after the access point completes the preset task based on the fourth message, it includes:

[0034] After decrypting the fourth message, the access point obtains a control command, and then performs a preset task according to the control command.

[0035] A third aspect of the present invention provides a communication method between an access controller and an access point based on a Layer 2 protocol, comprising:

[0036] The access point sends the first message to the access controller;

[0037] The access controller receives the first message sent by the access point;

[0038] The access controller determines whether to allow the access point to access; if so, it sends a second message to the access point.

[0039] The access point receives the second message;

[0040] The access point sends a third message and a configuration request to the access controller;

[0041] The access controller receives the third message and configuration request;

[0042] The access controller sends configuration information to the access point;

[0043] The access point receives the configuration information;

[0044] The access point obtains configuration parameters based on the configuration information and completes configuration management based on the configuration parameters;

[0045] The access controller sends a fourth message to the access point;

[0046] The access point receives the fourth message;

[0047] After completing the preset task according to the fourth message, the access point sends a fifth message to the access controller. The fifth message includes the processing result of the access point after receiving the fourth message.

[0048] The access controller receives the fifth message from the access point after receiving the fourth message.

[0049] A fourth aspect of the present invention provides a communication system between an access controller and an access point based on a Layer 2 protocol, characterized in that it includes an access controller and an access point, wherein the access controller and the access point employ the aforementioned communication method between the access controller and the access point based on a Layer 2 protocol.

[0050] Compared with the prior art, the beneficial effects of the technical solution of the present invention are:

[0051] This invention provides a method for communication between an access controller and an access point based on a Layer 2 protocol, simplifying network setup and usage. This makes adding devices to the network, establishing secure links, and implementing QoS relatively simple for consumers. It supports multiple home network technologies, including Wi-Fi, Ethernet, and MoCA, without requiring modification to the underlying network technology, thus ensuring compatibility with existing home network devices. Furthermore, the communication method provided by this invention includes discovery and interface selection, simplifying the introduction of new devices and network management. Additionally, information security is ensured through encryption of user data. Attached Figure Description

[0052] Figure 1 This is a flowchart illustrating the communication method between an access controller and an access point based on a Layer 2 protocol, as provided in Example 1.

[0053] Figure 2 This is a flowchart illustrating the access point in a communication method between an access controller and an access point based on a Layer 2 protocol, as provided in Embodiment 2.

[0054] Figure 3 This is a schematic diagram illustrating the interaction between the access controller and the access point in a communication method between an access controller and an access point based on a Layer 2 protocol, as provided in Embodiment 3.

[0055] Figure 4This is a schematic diagram showing the connection between the access controller, access point, and terminal device provided in an embodiment of the present invention. Detailed Implementation

[0056] The accompanying drawings are for illustrative purposes only and should not be construed as limiting the scope of this patent.

[0057] To better illustrate this embodiment, some parts in the accompanying drawings may be omitted, enlarged, or reduced, and do not represent the actual product dimensions.

[0058] It will be understood by those skilled in the art that certain well-known structures and their descriptions may be omitted in the accompanying drawings.

[0059] The technical solution of the present invention will be further described below with reference to the accompanying drawings and embodiments.

[0060] Example 1

[0061] This invention provides a communication method between an access controller and an access point based on a Layer 2 protocol, such as... Figure 1 The processing flow of the access controller shown includes the following steps:

[0062] The access controller receives the first message sent by the access point;

[0063] The access controller determines whether to allow the access point to access; if so, it sends a second message to the access point.

[0064] The access controller receives a third message and a configuration request sent by the access point after receiving the second message;

[0065] The access controller sends configuration information to the access point;

[0066] The access controller sends a fourth message to the access point;

[0067] The access controller receives a fifth message from the access point after receiving the fourth message, the fifth message including the processing result of the access point after receiving the fourth message.

[0068] In specific embodiments, the present invention uses the IEEE 1905 protocol as the Layer 2 protocol. The advantages of the IEEE 1905 protocol include:

[0069] 1) Ease of use: The 1905 protocol provides an adaptation layer that simplifies network setup and use, making it relatively simple for consumers to add devices to the network, establish secure links, and implement QoS.

[0070] 2) Compatibility: The 1905 protocol supports a variety of home networking technologies, including Wi-Fi, Ethernet and MoCA, without requiring modifications to the underlying network technology, thus ensuring compatibility with already deployed home network devices.

[0071] 3) Seamless integration: The 1905 protocol introduces an intermediate sublayer between the Logical Link Control (LLC) layer and the underlying network technology MAC sublayer, which abstracts the details of each interface, aggregates available bandwidth, and promotes seamless integration.

[0072] 4) End-to-end QoS: This protocol supports end-to-end QoS, ensuring the quality of network services.

[0073] 5) Secure connection: The 1905 protocol supports the establishment of secure connections, ensuring network security.

[0074] 6) Advanced network management features: including discovery and interface selection, simplifying the introduction of new devices and network management.

[0075] 7) User data encryption processing: to ensure information security.

[0076] This embodiment processes IEEE 1905 protocol messages to achieve communication between the AC and AP, thereby enabling the AC to manage and control the AP. The specific implementation steps are as follows:

[0077] S1.AP initiates a broadcast packet to find AC via AP autoconfiguration search message;

[0078] S2.AC receives AP autoconfiguration search messages to determine whether the AP is authorized. If it is authorized, it notifies the AP that it can access the AP via Topology query messages.

[0079] After receiving the Topology query message, S3.AP replies with a Topology response message and simultaneously sends a WSCM1 request for configuration information.

[0080] After receiving M1, S4.AC sends the custom encryption configuration through WSC M2;

[0081] After receiving M2, S5.AP decrypts it and applies the corresponding parameters, thus completing configuration management; the M2 message carries the AP's configuration information.

[0082] S6. If the AC needs to control the AP, it sends the vendor-specific encrypted content in the Higher layer query message to the AP; the Higher layer query message carries the AP's management information.

[0083] After receiving the HL query, S7.AP decrypts it, processes it accordingly, and replies with a Higher layer response message.

[0084] In a further embodiment, if the access controller determines that the access point is not allowed to access, the first packet is discarded.

[0085] In a further embodiment, the configuration information is custom-encrypted configuration information to avoid information leakage.

[0086] In a further embodiment, the fourth message includes an encrypted control command, which is used to control the access point to complete a preset task.

[0087] Example 2

[0088] This embodiment provides a communication method between an access controller and an access point based on a Layer 2 protocol, such as... Figure 2 The processing flow of the access point shown includes the following steps:

[0089] The access point sends the first message to the access controller;

[0090] The access point receives a second message sent by the access controller after receiving the first message;

[0091] The access point sends a third message and a configuration request to the access controller;

[0092] The access point receives configuration information sent by the access controller after receiving a configuration request;

[0093] The access point obtains configuration parameters based on the configuration information and completes configuration management based on the configuration parameters;

[0094] The access point receives the fourth message;

[0095] After completing the preset task according to the fourth message, the access point sends a fifth message to the access controller. The fifth message includes the processing result of the access point after receiving the fourth message.

[0096] In specific embodiments, the present invention uses the IEEE 1905 protocol as the Layer 2 protocol. The advantages of the IEEE 1905 protocol include:

[0097] 1) Ease of use: The 1905 protocol provides an adaptation layer that simplifies network setup and use, making it relatively simple for consumers to add devices to the network, establish secure links, and implement QoS.

[0098] 2) Compatibility: The 1905 protocol supports a variety of home networking technologies, including Wi-Fi, Ethernet and MoCA, without requiring modifications to the underlying network technology, thus ensuring compatibility with already deployed home network devices.

[0099] 3) Seamless integration: The 1905 protocol introduces an intermediate sublayer between the Logical Link Control (LLC) layer and the underlying network technology MAC sublayer, which abstracts the details of each interface, aggregates available bandwidth, and promotes seamless integration.

[0100] 4) End-to-end QoS: This protocol supports end-to-end QoS, ensuring the quality of network services.

[0101] 5) Secure connection: The 1905 protocol supports the establishment of secure connections, ensuring network security.

[0102] 6) Advanced network management features: including discovery and interface selection, simplifying the introduction of new devices and network management.

[0103] 7) User data encryption processing: to ensure information security.

[0104] This embodiment processes IEEE 1905 protocol messages to achieve communication between the AC and AP, thereby enabling the AC to manage and control the AP. The specific implementation steps are as follows:

[0105] S1.AP initiates a broadcast packet to find AC via AP autoconfiguration search message;

[0106] S2.AC receives AP autoconfiguration search messages to determine whether the AP is authorized. If it is authorized, it notifies the AP that it can access the AP via Topology query messages.

[0107] After receiving the Topology query message, S3.AP replies with a Topology response message and simultaneously sends a WSCM1 request for configuration information.

[0108] After receiving M1, S4.AC sends the custom encryption configuration through WSC M2;

[0109] After receiving M2, S5.AP decrypts it and applies the corresponding parameters, thus completing configuration management; the M2 message carries the AP's configuration information.

[0110] S6. If the AC needs to control the AP, it sends the vendor-specific encrypted content in the Higher layer query message to the AP; the Higher layer query message carries the AP's management information.

[0111] After receiving the HL query, S7.AP decrypts it, processes it accordingly, and replies with a Higher layer response message.

[0112] In a further embodiment, the access point obtains configuration parameters based on the configuration information, including:

[0113] The configuration information is custom-encrypted to prevent information leakage.

[0114] The access point decrypts the configuration information to obtain the configuration parameters.

[0115] In a further embodiment, the fourth message includes an encrypted control command, which is used to control the access point to complete a preset task.

[0116] In a further embodiment, after the access point completes the preset task according to the fourth message, it includes:

[0117] After decrypting the fourth message, the access point obtains a control command, and then performs a preset task according to the control command.

[0118] Example 3

[0119] This invention provides a communication method between an access controller and an access point based on a Layer 2 protocol, such as... Figure 3 The processing flow for the interaction between the access controller and the access point, as shown, includes:

[0120] The access point sends the first message to the access controller;

[0121] The access controller receives the first message sent by the access point;

[0122] The access controller determines whether to allow the access point to access; if so, it sends a second message to the access point.

[0123] The access point receives the second message;

[0124] The access point sends a third message and a configuration request to the access controller;

[0125] The access controller receives the third message and configuration request;

[0126] The access controller sends configuration information to the access point;

[0127] The access point receives the configuration information;

[0128] The access point obtains configuration parameters based on the configuration information and completes configuration management based on the configuration parameters;

[0129] The access controller sends a fourth message to the access point;

[0130] The access point receives the fourth message;

[0131] After completing the preset task according to the fourth message, the access point sends a fifth message to the access controller. The fifth message includes the processing result of the access point after receiving the fourth message.

[0132] The access controller receives the fifth message from the access point after receiving the fourth message.

[0133] In specific embodiments, the present invention uses the IEEE 1905 protocol as the Layer 2 protocol. The advantages of the IEEE 1905 protocol include:

[0134] 1) Ease of use: The 1905 protocol provides an adaptation layer that simplifies network setup and use, making it relatively simple for consumers to add devices to the network, establish secure links, and implement QoS.

[0135] 2) Compatibility: The 1905 protocol supports a variety of home networking technologies, including Wi-Fi, Ethernet and MoCA, without requiring modifications to the underlying network technology, thus ensuring compatibility with already deployed home network devices.

[0136] 3) Seamless integration: The 1905 protocol introduces an intermediate sublayer between the Logical Link Control (LLC) layer and the underlying network technology MAC sublayer, which abstracts the details of each interface, aggregates available bandwidth, and promotes seamless integration.

[0137] 4) End-to-end QoS: This protocol supports end-to-end QoS, ensuring the quality of network services.

[0138] 5) Secure connection: The 1905 protocol supports the establishment of secure connections, ensuring network security.

[0139] 6) Advanced network management features: including discovery and interface selection, simplifying the introduction of new devices and network management.

[0140] 7) User data encryption processing: to ensure information security.

[0141] This embodiment processes IEEE 1905 protocol messages to achieve communication between the AC and AP, thereby enabling the AC to manage and control the AP. The specific implementation steps are as follows:

[0142] S1.AP initiates a broadcast packet to find AC via AP autoconfiguration search message;

[0143] S2.AC receives AP autoconfiguration search messages to determine whether the AP is authorized. If it is authorized, it notifies the AP that it can access the AP via Topology query messages.

[0144] After receiving the Topology query message, S3.AP replies with a Topology response message and simultaneously sends a WSCM1 request for configuration information.

[0145] After receiving M1, S4.AC sends the custom encryption configuration through WSC M2;

[0146] After receiving M2, S5.AP decrypts it and applies the corresponding parameters, thus completing configuration management; the M2 message carries the AP's configuration information.

[0147] S6. If the AC needs to control the AP, it sends the vendor-specific encrypted content in the Higher layer query message to the AP; the Higher layer query message carries the AP's management information.

[0148] After receiving the HL query, S7.AP decrypts it, processes it accordingly, and replies with a Higher layer response message.

[0149] like Figure 4 As shown, there is one AC controller (device A), one AP access terminal (device B), and one STA terminal device (device C).

[0150] The process of establishing communication between device A and device B is as follows:

[0151] Step 1: Device B sends an AP autoconfiguration search message;

[0152] Step 2: Device A receives the AP autoconfiguration search, determines whether access is allowed, and then sends a Topology query message;

[0153] Step 3: After receiving the Topology query message, device B replies with a Topology response message and simultaneously sends a WSC M1 request for configuration information;

[0154] Step 4: After receiving M1, device A sends the custom encryption configuration through WSC M2;

[0155] Step 5: After receiving M2, device B decrypts it and applies the corresponding parameters, thus completing the configuration management.

[0156] Step 6: Device A needs to control Device B, so it sends the vendor-specific encrypted content in the Higher layer query message to Device B;

[0157] Step 7: After receiving the HL query, device B decrypts it and processes it accordingly, replying with a Higher layer response message;

[0158] After the above steps, device A and device B establish a communication mechanism, enabling them to form a wireless local area network via the IEEE 1905 protocol. Then, STA device C accesses the Internet through device B and device A.

[0159] Example 4

[0160] This invention provides a communication system between an access controller and an access point based on a Layer 2 protocol, comprising an access controller and an access point, wherein the access controller and the access point employ the communication method between the access controller and the access point based on a Layer 2 protocol as described in any one of Embodiments 1 to 3.

[0161] The same or similar labels correspond to the same or similar parts;

[0162] The terms used to describe positional relationships in the accompanying drawings are for illustrative purposes only and should not be construed as limiting this patent.

[0163] Obviously, the above embodiments of the present invention are merely examples for clearly illustrating the present invention, and are not intended to limit the implementation of the present invention. Those skilled in the art can make other variations or modifications based on the above description. It is neither necessary nor possible to exhaustively describe all embodiments here. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included within the scope of protection of the claims of the present invention.

Claims

1. A communication method between an access controller and an access point based on a Layer 2 protocol, characterized in that, Includes the following steps: The access controller receives a first message sent by the access point, the first message being an autoconfiguration search message of the IEEE 1905 protocol; The access controller determines whether to allow the access point to access. If allowed, it sends a second message to the access point. The second message is a Topology query message of the IEEE 1905 protocol. The access controller receives a third message and a configuration request sent by the access point after receiving the second message. The third message is a Topology response message of the IEEE 1905 protocol. The access controller sends configuration information to the access point; The access controller sends a fourth message to the access point, the fourth message being a Higher layer query message of the IEEE 1905 protocol; The access controller receives a fifth message from the access point after receiving the fourth message. The fifth message includes the processing result of the access point after receiving the fourth message. The fifth message is a Higher layer response message of the IEEE 1905 protocol.

2. The communication method between the access controller and the access point based on a Layer 2 protocol according to claim 1, characterized in that, If the access controller determines that the access point is not allowed to access, it discards the first message.

3. The communication method between the access controller and the access point based on a Layer 2 protocol according to claim 1, characterized in that, The configuration information is a custom encrypted configuration information to prevent interception and eavesdropping.

4. The communication method between the access controller and the access point based on a Layer 2 protocol according to claim 1, characterized in that, The fourth message includes encrypted control instructions, which are used to control the access point to complete a preset task.

5. A communication method between an access controller and an access point based on a Layer 2 protocol, characterized in that, Includes the following steps: The access point sends a first message to the access controller, the first message being an autoconfiguration search message of the IEEE 1905 protocol; The access point receives a second message sent by the access controller after receiving the first message, the second message being a Topology query message of the IEEE 1905 protocol; The access point sends a third message and a configuration request to the access controller, wherein the third message is a Topology response message of the IEEE 1905 protocol; The access point receives configuration information sent by the access controller after receiving a configuration request; The access point obtains configuration parameters based on the configuration information and completes configuration management based on the configuration parameters; The access point receives a fourth message, which is a Higher layer query message of the IEEE 1905 protocol. After completing the preset task according to the fourth message, the access point sends a fifth message to the access controller. The fifth message includes the processing result of the access point after receiving the fourth message. The fifth message is a Higher layer response message of the IEEE 1905 protocol.

6. The communication method between the access controller and the access point based on a Layer 2 protocol according to claim 5, characterized in that, The access point obtains configuration parameters based on the configuration information, including: The configuration information is a custom encrypted configuration information; The access point decrypts the configuration information to obtain the configuration parameters.

7. The communication method between the access controller and the access point based on a Layer 2 protocol according to claim 5, characterized in that, The fourth message includes encrypted control instructions, which are used to control the access point to complete a preset task.

8. The communication method between the access controller and the access point based on a Layer 2 protocol according to claim 5, characterized in that, After the access point completes the preset task based on the fourth message, it includes: After decrypting the fourth message, the access point obtains a control command, and then performs a preset task according to the control command.

9. A communication method between an access controller and an access point based on a Layer 2 protocol, characterized in that, include: The access point sends a first message to the access controller, the first message being an autoconfiguration search message of the IEEE 1905 protocol; The access controller receives the first message sent by the access point; The access controller determines whether to allow the access point to access. If allowed, it sends a second message to the access point. The second message is a Topology query message of the IEEE 1905 protocol. The access point receives the second message; The access point sends a third message and a configuration request to the access controller, wherein the third message is a Topology response message of the IEEE 1905 protocol; The access controller receives the third message and configuration request; The access controller sends configuration information to the access point; The access point receives the configuration information; The access point obtains configuration parameters based on the configuration information and completes configuration management based on the configuration parameters; The access controller sends a fourth message to the access point, the fourth message being a Higher layer query message of the IEEE 1905 protocol; The access point receives the fourth message; After completing the preset task according to the fourth message, the access point sends a fifth message to the access controller. The fifth message includes the processing result of the access point after receiving the fourth message. The access controller receives a fifth message from the access point after receiving the fourth message. The fifth message is a Higher layer response message of the IEEE 1905 protocol.

10. A communication system between an access controller and an access point based on a Layer 2 protocol, characterized in that, It includes an access controller and an access point, wherein the access controller and the access point employ the communication method between the access controller and the access point based on a Layer 2 protocol as described in any one of claims 1 to 9.

Images