Network device secure communication method and system
By constructing a pre-set preamble sequence at the physical layer of wireless communication and performing information matching, the problem of data leakage in wireless transmission is solved, and secure isolation between networks and reliable data transmission are achieved.
Patent Information
- Application Number
- CN202511221558.7
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-08-29
- Publication Date
- 2025-11-18
- Estimated Expiration
- 2045-08-29
AI Technical Summary
In existing wireless communication technologies, non-physical layer encryption methods are easily cracked, leading to the leakage of wireless transmission data, and there is a risk of information leakage between different networks.
By constructing a pre-set preamble sequence at the network physical layer, the receiver matches the preamble sequence information with the transmitter to determine whether to receive a wireless frame. This includes frequency offset estimation, channel estimation, and time synchronization processing. The content and quantity of long training fields are dynamically updated to improve security.
It effectively improves the security of wireless network data transmission, prevents unauthorized device access and data leakage, and ensures the accuracy and reliability of communication.
Smart Images

Figure CN120711501B_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of wireless communication technology, and in particular to a secure communication method and system for network devices. Background Technology
[0002] With the development of intelligent manufacturing, high real-time and high-reliability Wireless Network for Industrial Automation (WIA-FA) technology is widely used in various key industries. The Media Access Control Address (MAC) layer of WIA-FA technology adopts a Time Division Multiple Access (TDMA)-based access mechanism, ensuring deterministic communication cycles and latency, which perfectly meets the needs of industrial control applications. In industrial scenarios, wireless communication, with its flexibility and convenience, has become an important means of data transmission, powerfully promoting the automation and intelligentization of industrial production and playing a key role in improving production efficiency and quality.
[0003] Current wireless networks transmit data using standard communication protocols, relying heavily on non-physical layer encryption methods. However, these encryption algorithms are frequently cracked, leading to frequent data leaks. Furthermore, common wireless devices like WiFi and Bluetooth can capture surrounding wireless frame data using standard wireless network cards, thereby obtaining information such as device MAC addresses, posing a significant risk of device information leakage. In existing technologies, the physical layer communication standards between different networks are mutually known, which also leads to the risk of information leakage between different networks.
[0004] Therefore, there is an urgent need for a secure communication method and system for network devices to solve the above problems. Summary of the Invention
[0005] To address the problems existing in the prior art, this invention provides a secure communication method and system for network devices.
[0006] This invention provides a secure communication method for network devices, applied at the receiving end, comprising:
[0007] Based on the network physical layer, a preset preamble sequence is obtained from the wireless frame; wherein, the preset preamble sequence is constructed by the transmitting end according to the preset number of preset long training fields and the content of the preset long training fields corresponding to the wireless network it is in;
[0008] When it is determined that the information in the preset preamble sequence is the same as the target preamble sequence information, the receiving end continues to receive the wireless frame sent by the transmitting end, wherein the target preamble sequence information is the number of long training fields and the content of the long training fields configured in the receiving end.
[0009] According to a secure communication method for network devices provided by the present invention, after acquiring a preset preamble sequence in a wireless frame, frequency offset estimation, channel estimation, and time synchronization processing are performed based on a long training field in the preset preamble sequence.
[0010] According to a secure communication method for network devices provided by the present invention, the target preamble sequence information includes at least a set of long training field contents;
[0011] The step of continuing to receive the wireless frame sent by the transmitting end when it is determined that the information in the preset preamble sequence is the same as the target preamble sequence information includes:
[0012] When it is determined that the information in the preset preamble sequence is the same as at least one set of long training fields in the target preamble sequence information, the wireless frame sent by the transmitting end continues to be received.
[0013] According to a secure communication method for network devices provided by the present invention, the method further includes:
[0014] If the number and content of the preset long training fields in the preset preamble sequence are different from the target preamble sequence information, the reception of the wireless frame sent by the transmitting end is terminated.
[0015] According to a secure communication method for network devices provided by the present invention, the method further includes:
[0016] Receive a preamble sequence information update instruction sent by the sender; wherein the preamble sequence information update instruction includes long training field quantity update information and / or long training field content update information;
[0017] The target leader sequence information is updated according to the leader sequence information update instruction, or according to the leader sequence information update instruction and a preset update time period, to obtain the updated target leader sequence information.
[0018] This invention also provides a secure communication method for network devices, applied at the sending end, comprising:
[0019] Obtain the number of preset long training fields and the content of preset long training fields corresponding to the target wireless network, wherein the target wireless network is the wireless network where the sending end is located;
[0020] Based on the number of preset long training fields and the content of the preset long training fields, construct the preset preamble sequence and the wireless frame in the wireless frame to be sent;
[0021] Based on the network physical layer, the constructed wireless frame is sent to the receiving end.
[0022] According to a secure communication method for network devices provided by the present invention, the method further includes:
[0023] Identify multiple receivers in the target wireless network;
[0024] Based on the preset number of long training fields and the content of the preset long training fields, the same target preamble sequence is configured in each of the receiving ends.
[0025] According to a secure communication method for network devices provided by the present invention, the method further includes:
[0026] Based on a preset update time period or the number of offline receiving devices, the preset preamble sequence is updated, and based on the updated preset preamble sequence, the target preamble sequence of the corresponding receiving device in the target wireless network is updated.
[0027] The present invention also provides a secure communication method for network devices, comprising:
[0028] The network access device obtains the number of preset long training fields and the content of preset long training fields corresponding to the target wireless network, wherein the target wireless network is the wireless network to which the network access device is located;
[0029] The network access device constructs a preset preamble sequence and a wireless frame in the wireless frame to be sent based on the preset number of long training fields and the content of the preset long training fields.
[0030] The network access device, based on the network physical layer, sends the constructed wireless frame to the network wireless device;
[0031] The network wireless device obtains the preset preamble sequence in the wireless frame based on the network physical layer;
[0032] When the network wireless device determines that the information in the preset preamble sequence is the same as the target preamble sequence information, it continues to receive the wireless frame sent by the network access device, wherein the target preamble sequence information is the number of long training fields and the content of the long training fields configured in the network wireless device.
[0033] The present invention also provides a secure communication system for network devices, applied at the receiving end, comprising:
[0034] The receiving module is used to acquire a preset preamble sequence in a wireless frame based on the network physical layer; wherein the preset preamble sequence is constructed by the transmitting end based on the number of preset long training fields and the content of the preset long training fields corresponding to the wireless network it is in;
[0035] The wireless frame preamble sequence analysis module is used to continue receiving the wireless frame sent by the transmitting end when it is determined that the information in the preset preamble sequence is the same as the target preamble sequence information, wherein the target preamble sequence information is the number of long training fields and the content of the long training fields configured in the receiving end.
[0036] The secure communication method and system for network devices provided by this invention are based on the network physical layer. The sending end constructs a preset preamble sequence based on the number and content of long training fields preset in the wireless network, and the receiving end configures the target preamble sequence information. When the receiving end obtains the preset preamble sequence of the wireless frame, it compares it with the target preamble sequence information, and then determines whether to continue receiving the wireless frame based on the comparison result, thereby improving the security of network data transmission. Attached Figure Description
[0037] To more clearly illustrate the technical solutions in this invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.
[0038] Figure 1 This is one of the flowcharts illustrating the secure communication method for network devices provided by the present invention;
[0039] Figure 2 The second schematic flowchart of the secure communication method for network devices provided by the present invention;
[0040] Figure 3 The third flowchart illustrating the secure communication method for network devices provided by the present invention;
[0041] Figure 4 This is one of the structural schematic diagrams of the secure communication system for network devices provided by the present invention;
[0042] Figure 5 This is the second schematic diagram of the secure communication system for network devices provided by the present invention.
[0043] Figure 6 This is a schematic diagram of the structure of the electronic device provided by the present invention. Detailed Implementation
[0044] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of this invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this invention. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without creative effort are within the scope of protection of this invention.
[0045] With the development of intelligent manufacturing in China, the high real-time and high-reliability industrial wireless WIA-FA technology has been applied in various key industries. The MAC layer of WIA-FA network technology is based on a TDMA access mechanism, ensuring deterministic communication cycles and latency, making it suitable for industrial control applications. However, in some industrial settings, the security of wireless data transmission remains a hot topic of discussion and requires improvement.
[0046] Current wireless network data transmission relies on software encryption. If the encryption algorithm is cracked, there is a risk of data leakage. Common wireless devices, such as WiFi and Bluetooth devices, can capture wireless frame data from their surroundings through standard wireless network cards. By analyzing this data, information such as the device's MAC address can be obtained, posing a significant risk of device information leakage. Furthermore, devices on two wireless networks can be mutually discovered, leading to potential data transmission leaks and security vulnerabilities within the same network.
[0047] In the existing Open System Interconnection (OSI) reference model, most methods for securing data transmission over a local area network (LAN) are based on the data link layer and above. To ensure compatibility between devices, this approach allows wireless modules on devices using the same protocol to fully receive wireless frames and determine whether to send the data for processing based on the decryption result. However, once the password is leaked, it can easily lead to data leakage.
[0048] This invention can be based on the OSI reference model to realize data transmission at the physical layer. By changing the wireless waveform format of the wireless frame sent at the physical layer, mutual isolation between networks can be achieved, and it supports wireless frame waveform formats of devices with the same protocol that are not configured for current network communication.
[0049] Figure 1 This is one of the flowcharts illustrating the secure communication method for network devices provided by the present invention, such as... Figure 1 As shown, the present invention provides a secure communication method for network devices, applied at the receiving end, comprising:
[0050] Step 101: Based on the network physical layer, obtain the preset preamble sequence in the wireless frame; wherein, the preset preamble sequence is constructed by the transmitting end according to the preset number of preset long training fields and the content of the preset long training fields corresponding to the wireless network.
[0051] In this invention, a wireless local area network (WLAN) can be formed by two or more wireless devices. Taking devices A, B, and C as an example, device A acts as an access device (i.e., a transmitter), while devices B and C act as field devices (i.e., receivers). All of them have wireless capabilities and can communicate and interact within the WLAN.
[0052] In this invention, the transmitting end constructs a preset preamble sequence based on the number and content of Long Training Fields (LTFs) pre-defined in the wireless network. It also supports dynamically modifying the number and content of LTFs in the preamble sequence of Physical Layer Protocol Data Unit (PPDU) frames. This allows the transmitting end to flexibly adjust the LTF parameters according to actual needs, such as different security levels and network environment changes, thereby constructing different preset preamble sequences. For example, in scenarios with high security requirements, the number of LTFs can be increased or their content changed to enhance the complexity and uniqueness of the preamble sequence. Furthermore, after receiving a wireless frame, the receiving end extracts the preset preamble sequence from it. This process is fundamental for subsequent sequence matching and judgment; only by accurately obtaining the preset preamble sequence can subsequent security verification operations be performed.
[0053] Step 102: When it is determined that the information in the preset preamble sequence is the same as the target preamble sequence information, continue to receive the wireless frame sent by the transmitter, wherein the target preamble sequence information is the number of long training fields and the content of the long training fields configured in the receiver.
[0054] In this invention, the receiving end can pre-configure target preamble sequence information, which includes the number and content of long training fields (LTFs). This pre-configured information can be set based on the security requirements and communication specifications of the wireless network and stored in specific registers at the receiving end. For example, the receiving end can store the corresponding number and content of LTFs in the appropriate registers according to the network's default settings or the administrator's configuration, as a basis for subsequent matching.
[0055] After receiving a radio frame and obtaining the preset preamble sequence, the receiver compares the number and content of the LTFs in the preamble sequence with the target preamble sequence information configured in the receiver (i.e., the information in the register storing the number and content of the LTFs). For example, the receiver will sequentially check whether the number of LTFs in the preset preamble sequence matches the number stored in the register, and at the same time compare the content of the LTFs bit by bit or according to a specific encoding rule.
[0056] If the information in the preset preamble sequence matches the target preamble sequence, it indicates that the sender is legitimate. The receiver considers the wireless frame to originate from a trusted source and will continue receiving wireless frames from the sender for subsequent data processing and communication. Conversely, if the two sequences do not match, it indicates a potential security risk, such as frames sent by unauthorized devices or data tampering. The receiver will then terminate the wireless frame reception process to prevent potential security threats from impacting the network. This preamble sequence matching mechanism effectively improves the security of network data transmission.
[0057] In the secure communication method for network devices provided by this invention, the sending end constructs a preset preamble sequence (and constructs a wireless frame) based on the preset number and content of long training fields in the wireless network, and the receiving end configures the target preamble sequence information. When the receiving end obtains the preset preamble sequence of the wireless frame, it compares it with the target preamble sequence information, and then determines whether to continue receiving the wireless frame based on the comparison result, thereby improving the security of network data transmission.
[0058] Based on the above embodiments, after obtaining the preset preamble sequence in the wireless frame, the method further includes:
[0059] Based on the short training fields in the preset preamble sequence, the first frequency offset estimation and time synchronization processing are performed.
[0060] In this invention, when the receiving end begins receiving wireless frames, the physical layer baseband can first process the Short Training Field (STF) in a preset preamble sequence. Due to the Doppler effect and frequency deviation of the local oscillator in the transceiver equipment during transmission, the frequency of the received signal deviates from the frequency of the transmitted signal, i.e., frequency offset. The physical layer baseband uses the STF for initial frequency offset estimation, also known as the first frequency offset estimate. The STF has specific structure and characteristics; by analyzing and calculating its relevant properties, such as detecting phase changes in the signal, the magnitude of the frequency offset can be initially estimated, providing a reference for subsequent more accurate frequency offset correction.
[0061] Time synchronization is crucial for ensuring that receiving devices can accurately receive all symbols in a radio frame. The Start Time Function (STF) helps the receiver determine the start time of the radio frame, achieving initial time synchronization. The physical layer baseband identifies the frame's start boundary by detecting and analyzing the STF, enabling the receiving device to sample and process subsequent signals according to the correct timing, avoiding data errors caused by time deviations. For example, if time synchronization is inaccurate, the receiving device may sample signals at incorrect times, resulting in inconsistencies between the received and transmitted data.
[0062] Based on the above embodiments, the method may further include:
[0063] Based on the long training field in the preset preamble sequence, perform the second frequency offset estimation and channel estimation;
[0064] The second frequency offset estimate has a higher estimation accuracy than the first frequency offset estimate.
[0065] In this invention, the physical layer baseband can also process the LTF in the preset preamble sequence. The LTF contains richer information for more accurate signal processing. In this invention, the LTF is used for fine frequency offset estimation, i.e., the second frequency offset estimation. Compared with the first frequency offset estimation based on STF, the second frequency offset estimation has higher estimation accuracy. In one embodiment, frequency offset fault diagnosis, channel estimation, and time synchronization processing can also be performed directly based on the LTF because the LTF has a longer duration and more sampling points, providing more accurate frequency offset information. Through in-depth analysis and calculation of the LTF, the physical layer baseband further refines the estimated frequency offset value, thereby more accurately correcting the frequency offset and improving the quality of signal reception. For example, in high-speed mobile communication scenarios, the frequency offset may change rapidly over time; fine frequency offset estimation based on LTF can better track this change and ensure communication stability.
[0066] Furthermore, wireless signals are affected by the channel during transmission, such as multipath effects and fading, causing changes in signal amplitude and phase. Channel estimation involves analyzing the received signal to understand the characteristics of the channel's impact on the signal, thereby enabling appropriate compensation and correction at the receiving end to recover or restore the original transmitted signal. In this invention, the LTF has a specific structure and content. The receiving end can compare the received LTF with a known LTF stored locally, calculate the difference between the two, and estimate parameters such as the channel's frequency response and delay characteristics, providing accurate channel information for subsequent demodulation of the data portion of the frame.
[0067] In this invention, the first frequency offset estimation is an initial frequency offset estimation based on STF (Short-Term Frequency Shift). STF has a short duration and contains relatively few sampling points, thus providing limited frequency offset information and only allowing for a coarse frequency offset estimate. The second frequency offset estimation, on the other hand, is a fine frequency offset estimation based on LTF (Long-Term Frequency Shift). LTF has a longer duration and more sampling points, enabling it to more accurately capture frequency offset changes and provide a more precise frequency offset estimate. This hierarchical processing approach, performing coarse frequency offset estimation followed by fine frequency offset estimation, improves the efficiency and accuracy of frequency offset estimation. The initial coarse frequency offset estimation can quickly and roughly correct the frequency offset, bringing the signal into a relatively stable range and providing a good foundation for subsequent fine frequency offset estimation. Fine frequency offset estimation further refines the frequency offset correction, ensuring that the signal frequency is highly consistent with the transmitting end's frequency, thereby improving the quality and reliability of signal reception and reducing data transmission errors.
[0068] Based on the above embodiments, the target preamble sequence information may include at least a set of long training field contents;
[0069] The step of continuing to receive the wireless frame sent by the transmitting end when it is determined that the information in the preset preamble sequence is the same as the target preamble sequence information includes:
[0070] When it is determined that the information in the preset preamble sequence is the same as at least one set of long training fields in the target preamble sequence information, the wireless frame sent by the transmitting end continues to be received.
[0071] In this invention, to ensure the performance requirements of communication between devices, each device is configured to support at least one or more LTF sequences. In wireless communication, LTF plays a crucial role, containing important information for channel estimation and synchronization. This invention employs at least two sets of long training field contents, providing richer information for channel estimation and synchronization processing, thereby improving the accuracy and reliability of communication. For example, under different channel environments, multiple sets of LTF can more comprehensively reflect channel characteristics, enabling the receiver to perform channel compensation more accurately, reducing signal distortion and bit error rate, and improving communication quality.
[0072] Furthermore, when establishing a wireless local area network (WLAN), the initial configuration of the LTF-related registers of the network devices can include information such as the number of LTFs to be sent / received, the LTF content, and whether the LTFs can achieve network isolation. The wireless devices in this invention support at least two sets of long training field contents, providing a more flexible configuration method for network isolation. Different combinations of long training fields can be used to distinguish different network or device groups, achieving finer-grained network isolation. Simultaneously, it facilitates compatibility and interoperability between different devices and networks, allowing for the selection of appropriate LTF combinations for communication based on actual needs.
[0073] Specifically, before establishing a wireless local area network (WLAN), the LTF-related registers of the devices in the network can be initially configured. These registers not only record the number of LTFs but can also store at least one different set of LTF content. For example, the registers can store LTF sequence 1 and the corresponding transmit / receive count settings. This configuration provides the foundation for subsequent communication, ensuring that devices can transmit and receive data according to the predetermined LTF information.
[0074] In one embodiment of the present invention, the preset preamble sequence is the preamble sequence information used by the transmitter when sending a wireless frame, while the target preamble sequence information is the preamble sequence information that the receiver expects to receive. During communication, the receiver needs to compare the received preset preamble sequence with its stored target preamble sequence information, ensuring that the information in the preset preamble sequence is identical to all long training fields in the target preamble sequence information, rather than only partially identical. For example, if the target preamble sequence information contains LTF sequence 1, then the preset preamble sequence must also contain this exact same sequence for the receiver to consider the match successful.
[0075] In a further embodiment, when the access device activates LTF to achieve network isolation, it can only normally receive frames from the access device if the number of LTFs and the LTF content configuration in the field device are the same as those in the access device. This requires the receiving end to strictly check all long training field contents when determining whether the preset preamble sequence and the target preamble sequence are the same. Because different combinations of long training fields may represent different networks or device groups, only a complete match can ensure that the receiving end belongs to a legitimate device that can communicate with the sending end, thereby achieving the purpose of network isolation. For example, when the target preamble sequence information includes at least one set of long training field contents, it is necessary to determine that the information in the preset preamble sequence is the same as these two sets of long training field contents in the target preamble sequence information before continuing to receive the wireless frames sent by the sending end.
[0076] This invention, by strictly matching all long training field contents, avoids misreceptions caused by partial matching. In a wireless LAN, multiple devices may transmit signals simultaneously. If the receiver only performs partial matching, it may receive interference signals or malicious attack signals from other networks. Requiring all long training field contents to be identical effectively filters out these illegal signals, ensuring that the received wireless frames originate from legitimate senders, thereby improving communication security and accuracy. Furthermore, this invention supports at least one set of long training field contents and strict matching, providing a more refined network management approach. Different long training field combinations can be configured according to different service requirements, security levels, or device types, dividing the network into multiple logical subnets. Devices in different subnets can be isolated and their communication controlled through LTF matching, achieving reasonable allocation and effective protection of network resources.
[0077] Based on the above embodiments, the method further includes:
[0078] If the number and content of the preset long training fields in the preset preamble sequence are different from the target preamble sequence information, the reception of the wireless frame sent by the transmitting end is terminated.
[0079] In this embodiment of the invention, the receiving end must receive the matching long training field content and number in order to successfully complete the entire wireless frame reception process. LTFs play a crucial role in wireless frames; they are not only used by the receiving device for precise frequency offset estimation and channel estimation, providing key parameters for accurate demodulation of subsequent frame data, but also serve as an important basis for device identification and communication compatibility judgment. Only when the number and content of LTFs detected by the receiving end in the preset preamble sequence are completely consistent with its own pre-configured target preamble sequence information does it indicate that the sending and receiving ends are matched in communication parameter settings and have the basic conditions for normal communication. Only then will the receiving end continue to receive and process subsequent wireless frame data.
[0080] In this invention, isolation between devices supporting WLAN protocols can be achieved by configuring the sequence content and number of LTFs. When building a WLAN, different devices or different network areas can be configured with unique LTF parameters according to actual needs. For example, in an enterprise network, to ensure the security of core internal data, the LTFs of core department devices can be configured with specific sequences and numbers, distinguishing them from the LTF configurations of devices in ordinary office areas. When the access device activates the LTF-based network isolation function, only field devices with the same LTF number and content configuration as the access device can be identified as legitimate devices, thus enabling them to access the network and communicate normally, effectively preventing the access of unauthorized devices and potential security threats.
[0081] When the number and content of the preset long training fields in the preset preamble sequence are determined to be different from the target preamble sequence information, the physical layer baseband of the receiver will trigger an interrupt signal to notify the upper-layer protocol stack to stop the reception process of the current radio frame. Simultaneously, the receiver will discard some of the already received radio frame data, release the relevant receive buffer resources, and restore the receiving device to its initial state, preparing to receive the next radio frame. For example, in a practical wireless communication system, the baseband chip at the receiver can quickly stop sampling and demodulating subsequent signals after detecting an LTF mismatch, avoiding unnecessary resource consumption.
[0082] The target preamble sequence information at the receiving end is not limited to pre-configuration and can also be dynamically updated. Based on the above embodiments, the method may further include:
[0083] The system receives a preamble sequence information update instruction sent by the sender; wherein the preamble sequence information update instruction includes long training field quantity update information and / or long training field content update information.
[0084] In this invention, a pre-defined time period is set. When the network operates according to the predetermined schedule and this time period is reached, an LTF configuration update is triggered. For example, in some enterprise wireless LANs with extremely high security requirements, a weekly update cycle may be set. At this fixed time each week, the system will automatically initiate the LTF update process. This is because the network environment may change over time, and potential attack methods may also be constantly updated. Regularly updating the LTF configuration can increase the difficulty for attackers to crack it, thus ensuring network communication security.
[0085] Simultaneously, an update is triggered immediately when a network device goes offline. In this invention, device offline can occur in various ways, such as device malfunction, unauthorized removal, or normal maintenance. Once a device goes offline, the overall security posture of the network may change. To prevent attackers from exploiting offline devices to obtain current LTF configuration information and launch attacks on the network, it is necessary to update the number and / or content of LTFs promptly. For example, in an industrial wireless LAN, if a sensor device goes offline due to a malfunction, the system will immediately initiate the LTF update mechanism upon detecting this.
[0086] Based on the above embodiments, the method may further include, based on the preamble sequence information update instruction:
[0087] The target leader sequence information is updated according to the leader sequence information update instruction, or according to the leader sequence information update instruction and a preset update time period, to obtain the updated target leader sequence information.
[0088] In one embodiment of the present invention, when the network triggers an update, the access device undertakes the task of generating update instructions. The access device randomly selects a set as the configuration to be updated from a pre-defined set of available LTF sequence contents and numbers. This random selection method further enhances network security because it is difficult for attackers to predict what LTF configuration will be used in the next update.
[0089] In this invention, the preamble sequence information update instruction generated by the access device explicitly includes long training field (LTF) quantity update information and long training field content update information. The quantity update information indicates the new LTF number, while the content update information details the new LTF sequence content. For example, the update instruction may explicitly tell devices in the network to update the LTF number from 2 to 3, and simultaneously update the LTF content from "010101" to "101010".
[0090] Based on the current LTF configuration used by the network, the access device synchronizes the LTF sequence content and number configuration to be updated to all devices within the network. This ensures that all devices in the network can update according to a unified configuration, avoiding situations where some devices update while others do not, which could lead to communication failures. Simultaneously, the access device will specify the effective time of the LTF configuration item to be updated in the update command. For example, the command can specify that the new LTF configuration will take effect at the next full hour (e.g., 14:00), giving network devices sufficient time to complete the update operation and synchronously switch to the new configuration at the effective time.
[0091] In this embodiment of the invention, devices within the network constantly monitor instructions from access devices. Upon receiving a preamble sequence information update instruction, the device parses it to identify the long training field (LTF) count update information and the LTF content update information contained therein. Based on the parsed update information, the device updates its stored target preamble sequence information. The original LTF count and content are replaced with the new count and content specified in the update instruction, resulting in the updated target preamble sequence information. For example, if the device originally stored a target preamble sequence with 2 LTFs and the content "010101", upon receiving the update instruction, it updates it to have 3 LTFs and the content "101010".
[0092] This LTF configuration update mechanism, which is triggered periodically or due to device offline status, along with a strict update command synchronization and activation process, ensures that devices within the network always use the latest and most secure LTF configuration for communication. Even if an attacker obtains previous LTF configuration information, the constantly updated configuration prevents them from using this outdated information for effective attacks, thus guaranteeing the security of data communication within the network.
[0093] Figure 2 This is a second flowchart illustrating the secure communication method for network devices provided by the present invention, as shown below. Figure 2 As shown, the present invention provides a secure communication method for network devices, applied at the sending end, comprising:
[0094] Step 201: Obtain the number of preset long training fields and the content of preset long training fields corresponding to the target wireless network, wherein the target wireless network is the wireless network where the sending end is located.
[0095] In this invention, the transmitting end first determines the LTF configuration parameters specified by its own wireless network. In scenarios with multiple wireless LANs, each network has its unique LTF configuration. Only by accurately obtaining the preset parameters of its own network can the transmitting end ensure that the transmitted wireless frames can be correctly identified and processed by devices within its own network, while avoiding confusion and interference with devices in other networks.
[0096] In this invention, for two or more wireless local area networks (WLANs), devices within each network must configure the number of LTFs and LTF sequence content to be consistent, and the number of LTFs or LTF sequence content can differ between devices in different WLANs. This means that each wireless network has its own exclusive LTF configuration standard, and the transmitting end can obtain preset parameters according to this standard. For example, in a corporate campus, multiple WLANs with different purposes may be deployed, such as office networks and production networks. Each network has independently set LTF quantity and content. The transmitting end of the office network needs to obtain the corresponding preset values for the office network. Thus, the differences in LTF configuration between different networks form a physical layer isolation barrier, making it difficult for devices on external networks to forge or interfere with the communication of this network, reducing the risk of data eavesdropping and leakage.
[0097] Step 202: Based on the number of preset long training fields and the content of the preset long training fields, construct the preset preamble sequence and the wireless frame in the wireless frame to be sent.
[0098] In this invention, the pre-defined preamble sequence is constructed to embed network-specific identification information at the beginning of the radio frame, enabling the receiver to quickly and accurately identify whether the transmitter belongs to this network, and providing necessary parameters for subsequent operations such as channel estimation and frequency offset correction. Only by constructing a preamble sequence that conforms to the LTF configuration of this network can the receiver successfully complete the reception and demodulation process of the radio frame.
[0099] In this invention, the LTF includes information for channel estimation and synchronization. The transmitter constructs a preamble sequence based on the acquired preset number and content of training fields, ensuring that the preamble sequence matches the communication environment of the network. For example, the LTF contains 52 bits of sequence content, theoretically allowing for 2... 52 There are several possible combinations, and each network can choose one specific combination as its LTF sequence content, which the sender can then use to construct the LTF sequence.
[0100] In one embodiment, because different networks have different LTF configurations, the constructed pre-defined preamble sequence is also unique. This allows the receiver within the network to distinguish between legitimate and illegitimate signals by identifying the preamble sequence, effectively preventing malicious access and interference from external networks and further enhancing the security of network data transmission. Simultaneously, LTF updates are triggered based on the time period of the LTF configuration or device offline status, and the sender will also follow the updated configuration when constructing the preamble sequence, thus adapting to constantly changing security requirements.
[0101] Step 203: Based on the network physical layer, the constructed wireless frame is sent to the receiving end.
[0102] In this embodiment of the invention, a wireless frame carrying network-specific identification information (i.e., a preset preamble sequence) is transmitted to achieve data transmission and communication between the sending end and the receiving end. Since the wireless frame contains a preamble sequence constructed based on the network's LTF configuration, the receiving end, upon receiving the wireless frame, first detects and matches the preamble sequence. Only when the number and content of LTFs in the preamble sequence match the target preamble sequence information configured by the receiving end will the receiving end continue to receive and process subsequent data; otherwise, the wireless frame will be discarded. This mechanism ensures that wireless frames within this wireless LAN can only be normally received by the physical layer of devices within this network, effectively isolating communication between different networks and greatly improving the security of wireless LAN data transmission. Even in complex situations such as dynamic device additions and offline events within the wireless LAN, or long durations, this security can be continuously guaranteed by periodically updating the LTF configuration.
[0103] The secure communication method for network devices provided by this invention involves the sending end constructing a preset preamble sequence based on the number and content of long training fields preset in the wireless network, and the receiving end configuring target preamble sequence information. When the receiving end acquires the preset preamble sequence of a wireless frame, it compares it with the target preamble sequence information, and then determines whether to continue receiving wireless frames based on the comparison result, thereby improving the security of network data transmission.
[0104] Based on the above embodiments, the method may further include:
[0105] Identify multiple receivers in the target wireless network;
[0106] Based on the preset number of long training fields and the content of the preset long training fields, the same target preamble sequence is configured in each of the receiving ends.
[0107] In this embodiment of the invention, multiple receiving ends in the target wireless network are first determined, that is, the scope of objects involved in this communication is defined, to ensure that the data sent can be accurately delivered to the receiving device, and to avoid data being sent to irrelevant devices, which would cause resource waste and security risks.
[0108] In a wireless LAN, a large number of devices may communicate simultaneously. Identifying the receiving end helps avoid communication chaos. By defining the receiving end, the sending end can transmit data with these devices according to certain rules and order, ensuring efficient and orderly network communication.
[0109] Each device can perform authentication and association operations when connecting to a wireless LAN, thereby establishing a connection with the network and determining its affiliation. Based on this affiliation, a foundation can be provided for accurately identifying all receiving devices belonging to the target wireless network.
[0110] In this invention, different communication needs and business scenarios determine which receivers need to be communicated with. For example, in a smart factory's wireless local area network, a control device on the production line needs to send control commands to multiple specific sensor receivers, and these receivers can be determined based on the production process and monitoring requirements.
[0111] In this embodiment of the invention, devices within each network are configured with the same number of LTFs and LTF sequence content, and the number of LTFs or LTF sequence content differs between devices in different wireless LANs. The aim is to ensure that wireless frames within the same wireless LAN can only be normally received by the physical layer of devices within that network. Configuring the same target preamble sequence (based on a preset number and content of LTFs) in each receiver is the key step in achieving this goal. When a transmitter sends a wireless frame with a specific preamble sequence, only receivers within the same network configured with the same target preamble sequence can correctly identify and demodulate the wireless frame. Devices in other networks, due to mismatched preamble sequences, cannot receive the frame normally, thus achieving physical layer isolation between networks and enhancing network security.
[0112] In this invention, the preamble sequence plays a crucial role in the radio frame, containing information for channel estimation, synchronization, and other purposes. Only after the receiver is configured with the same target preamble sequence information as the transmitter can it accurately perform channel estimation and synchronization operations, thereby correctly receiving and demodulating subsequent data. The receiver needs to adjust its own reception parameters based on the LTF information in the preamble sequence to adapt to changes in the channel and ensure accurate data reception.
[0113] In the design and planning phase of a wireless local area network (WLAN), this invention allows for the pre-setting of configuration rules regarding the number and content of Long-Term Preamble (LTF) sequences. These rules can be determined based on a comprehensive consideration of factors such as network security and communication performance. Each receiving end configures the same target preamble sequence information according to these pre-set rules, ensuring consistency and compatibility of communication within the network. For example, to meet certain security requirements, specific LTF sequence content may be selected, and the number of LTFs for all devices within the network may be fixed.
[0114] In wireless LAN communication, the transmitting and receiving ends need to work together to complete data transmission. The transmitting end constructs the preamble sequence of the wireless frame according to the preset LTF configuration, and the receiving end must also identify and process the preamble sequence based on the same configuration; otherwise, normal communication cannot be achieved.
[0115] Based on the above embodiments, the method may further include:
[0116] Based on a preset update time period or the number of offline receiving devices, the preset preamble sequence is updated, and based on the updated preset preamble sequence, the target preamble sequence of the corresponding receiving device in the target wireless network is updated.
[0117] In this invention, a fixed time period is preset as the update cycle, such as every 24 hours, weekly, or monthly. When the network operation time reaches this preset cycle, an update operation on the preset preamble sequence is triggered. This is to address the situation where potential security risks in the network environment gradually increase over time. For example, in a public wireless LAN, using the same LTF configuration for an extended period may allow malicious users to crack it through long-term eavesdropping and analysis, thereby threatening network communication security.
[0118] In this embodiment of the invention, the access device randomly selects a set of available LTF sequence content or number of sequences. This random selection increases the difficulty of cracking. For example, if the original LTF sequence content was a specific 52-bit combination, a new 52-bit combination is randomly generated as the new sequence content. Then, based on the LTF configuration currently used by the network, the LTF sequence content and number configuration to be updated are synchronized to all devices within the network. The time point at which the updated LTF configuration item takes effect is also specified. This time point can be immediate or set at a specific future time to ensure that all devices can update in an orderly manner. For example, the new LTF configuration information can be sent to all access devices via network broadcast, informing them to start using the new configuration at the exact hour of the next update.
[0119] Furthermore, based on the updated preset preamble sequence, the target preamble sequence of the corresponding receiver in the target wireless network is updated. After receiving the update instruction, the receiver can adjust its own reception parameters (target preamble sequence information) according to the new configuration so as to correctly identify and process wireless frames with the new preamble sequence.
[0120] In this invention, regularly updating the preamble sequence effectively prevents malicious users from cracking the network's communication keys through long-term eavesdropping and analysis, thereby ensuring the security of data communication between network devices. Even if an attacker eavesdrops on the network for a period of time, the information they previously obtained will become useless because the preamble sequence is updated regularly. Over time, the network environment may change, such as the access of new devices or adjustments to the network topology. Regularly updating the preamble sequence allows the network to better adapt to these changes, ensuring the stability and reliability of communication.
[0121] In one embodiment of the present invention, when the number of offline receiving devices in the target wireless network reaches or exceeds a preset threshold, an update to the preset preamble sequence can also be triggered. This is because device offline status may indicate a change in the network environment or the existence of potential security threats. For example, a large number of devices suddenly going offline may indicate that malicious attackers are attempting to interfere with network communication, or that there are security risks such as device theft. Similar to time-based updates, the access device randomly selects a set of available LTF sequence contents or numbers to replace the identifier for network communication. Then, the LTF sequence contents and number configuration to be updated are synchronized to all still online devices in the network, specifying the effective time point to ensure that online devices can obtain the new configuration information in a timely manner and update within the specified time.
[0122] In this embodiment of the invention, for receiving devices that subsequently reconnect to the network, they can be configured according to the updated preset preamble sequence information upon reconnection, enabling them to communicate normally with other devices in the network. For example, when an offline device reconnects to the network, the access device sends it new LTF configuration information, and the device makes corresponding settings based on this information.
[0123] When a large number of devices go offline, timely updates to the preamble sequence can prevent the further spread of potential security threats. For example, if the offline status is due to a malicious attack, updating the preamble sequence can prevent attackers from using previously acquired information to launch further attacks, protecting the communication security of the remaining devices within the network. By updating the preamble sequence, communication identifiers between devices within the network can be re-established, ensuring that devices can communicate normally after reconnecting to the network and maintaining the stable operation of the network.
[0124] Figure 3 This is the third flowchart illustrating the secure communication method for network devices provided by the present invention, as shown below. Figure 3 As shown, the present invention provides a secure communication method for network devices, comprising:
[0125] Step 301: The network access device obtains the number of preset long training fields and the content of preset long training fields corresponding to the target wireless network, wherein the target wireless network is the wireless network to which the network access device is located;
[0126] Step 302: The network access device constructs a preset preamble sequence and wireless frame in the wireless frame to be sent based on the preset number of long training fields and the content of the preset long training fields.
[0127] Step 303: The network access device sends the constructed wireless frame to the network wireless device based on the network physical layer;
[0128] Step 304: The network wireless device obtains the preset preamble sequence in the wireless frame based on the network physical layer;
[0129] Step 305: When the network wireless device determines that the information in the preset preamble sequence is the same as the target preamble sequence information, it continues to receive the wireless frame sent by the network access device, wherein the target preamble sequence information is the number of long training fields and the content of the long training fields configured in the network wireless device.
[0130] In this invention, the network access device first determines the LTF configuration parameters specified by the wireless network it is in. In scenarios with multiple wireless LANs, each network has its unique LTF configuration. Only by accurately obtaining the preset parameters of its own network can the network access device ensure that the transmitted wireless frames can be correctly identified and processed by the wireless devices within its own network, while avoiding confusion and interference with devices in other networks.
[0131] In one embodiment of the present invention, for two or more wireless local area networks (WLANs), devices within each network must configure the number of LTFs and LTF sequence content to be consistent, and the number of LTFs or LTF sequence content must be inconsistent between devices in different WLANs. This means that each wireless network has its own exclusive LTF configuration standard, and network access devices must obtain preset parameters according to this standard. For example, multiple WLANs with different purposes, such as office networks and production networks, may be deployed in a corporate campus. Each network has independently set LTF quantity and content. The network access device of the office network needs to obtain the corresponding preset value for the office network, thereby forming a physical layer isolation barrier through the differences in LTF configurations of different networks. This makes it difficult for devices on external networks to forge or interfere with the communication of this network, reducing the risk of data eavesdropping and leakage.
[0132] In this embodiment of the invention, the network access device constructs a preset preamble sequence to embed network-specific identification information at the beginning of the radio frame. This enables the network wireless device to quickly and accurately identify whether the network access device belongs to the network, and provides necessary parameters for subsequent operations such as channel estimation and frequency offset correction. Only by constructing a preamble sequence that conforms to the LTF configuration of the network can the network wireless device successfully complete the reception and demodulation process of the radio frame.
[0133] In this invention, the LTF includes information for channel estimation and synchronization. The network access device constructs a preamble sequence based on the acquired preset number and content of long training fields, ensuring that the preamble sequence matches the communication environment of the network. For example, the LTF contains 52 bits of sequence content, theoretically allowing for 2... 52 There are several possible combinations, and each network can choose one specific combination as its LTF sequence content. The network access device then builds according to this selected content.
[0134] Because different networks have different LTF configurations, the pre-defined preamble sequence constructed by network access devices is also unique. This allows wireless devices within the network to distinguish between legitimate and illegitimate signals by recognizing the preamble sequence, effectively preventing malicious access and interference from external networks and further enhancing the security of network data transmission. Simultaneously, based on the LTF configuration usage period or device offline status triggering LTF updates, network access devices will also follow the updated configuration when constructing preamble sequences, thus adapting to constantly changing security requirements.
[0135] Furthermore, network access devices can send out wireless frames carrying network-specific identification information (i.e., a preset preamble sequence) to enable data transmission and communication between network access devices and network wireless devices. Since the wireless frame contains a preamble sequence built based on the network's LTF configuration, the network wireless device, upon receiving the wireless frame, will first detect and match the preamble sequence. Only if the number and content of the LTFs in the preamble sequence match the receiver's own configuration will the network wireless device continue to receive and process subsequent data; otherwise, the wireless frame will be discarded. This mechanism ensures that wireless frames within the same wireless LAN can only be normally received by the physical layer of devices within that network, effectively isolating communication between different networks and greatly improving the security of wireless LAN data transmission. Even in complex situations such as dynamic device additions and offline events within the wireless LAN, or long durations, this security can be continuously guaranteed by periodically updating the LTF configuration.
[0136] In this invention, a wireless local area network (WLAN) can be formed by two or more wireless devices. Taking devices A, B, and C as an example, device A serves as an access device (i.e., a network access device), while devices B and C serve as field devices (i.e., network wireless devices). All of them have wireless capabilities and can communicate and interact within the WLAN.
[0137] In this embodiment of the invention, the network access device constructs a preset preamble sequence based on the number and content of the long training fields (LTFs) pre-defined in the wireless network it is in. It also supports dynamically modifying the number and content of the LTFs in the preamble sequence of the transmitted physical layer protocol data unit (PLT) frames. This allows the network access device to flexibly adjust the LTF parameters according to actual needs, such as different security levels and changes in the network environment, thereby constructing different preset preamble sequences. For example, in scenarios with high security requirements, the number of LTFs can be increased or their content changed to enhance the complexity and uniqueness of the preamble sequence. Furthermore, after receiving a wireless frame, the network wireless device extracts the preset preamble sequence from the wireless frame. This process is the basis for subsequent preamble sequence matching and judgment; only by accurately obtaining the preset preamble sequence can subsequent security verification operations be performed.
[0138] In one embodiment of the present invention, the network wireless device may pre-configure target preamble sequence information, which includes the number and content of long training fields (LTFs). This pre-configured information may be based on the security requirements and communication specifications of the wireless network and stored in specific registers of the network wireless device. For example, the network wireless device may store the corresponding number and content of LTFs in the appropriate registers according to the network's default settings or the administrator's configuration, as a basis for subsequent matching.
[0139] After acquiring the preset preamble sequence, the network wireless device compares the number and content of LTFs in it with its own configured target preamble sequence information (i.e., the information in the register that stores the number and content of LTFs). For example, the network wireless device will sequentially check whether the number of LTFs in the preset preamble sequence matches the number stored in the register, and at the same time compare the content of the LTFs bit by bit or according to a specific encoding rule.
[0140] If the information in the preset preamble sequence matches the target preamble sequence, it indicates that the network access device is legitimate. The network wireless device considers the wireless frame to originate from a trusted source and will continue to receive wireless frames sent by the network access device for subsequent data processing and communication operations. Conversely, if the two sequences do not match, it indicates a potential security risk, such as frames sent by an unauthorized device or data tampering. The network wireless device will then terminate the wireless frame reception process to prevent potential security threats from impacting the network. This preamble sequence matching mechanism effectively improves the security of network data transmission.
[0141] The secure communication method for network devices provided by this invention involves the sending end constructing a preset preamble sequence based on the number and content of long training fields preset in the wireless network, and the receiving end configuring target preamble sequence information. When the receiving end acquires the preset preamble sequence of a wireless frame, it compares it with the target preamble sequence information, and then determines whether to continue receiving wireless frames based on the comparison result, thereby improving the security of network data transmission.
[0142] Based on the above embodiments, the method further includes:
[0143] The network access device updates the preset preamble sequence based on a preset update time period or the number of offline network wireless devices, and generates a corresponding preamble sequence information update instruction based on the updated preset preamble sequence to send to the network wireless devices.
[0144] The network wireless device receives the preamble sequence information update instruction sent by the network access device; wherein the preamble sequence information update instruction includes long training field quantity update information and / or long training field content update information.
[0145] The network wireless device updates the target preamble sequence information according to the preamble sequence information update instruction, or according to the preamble sequence information update instruction and the preset update time period, to obtain the updated target preamble sequence information.
[0146] In this invention, the network access device randomly selects a set of available LTF sequence contents or numbers, which increases the difficulty of cracking. For example, the original LTF sequence contents were a specific 52-bit combination; now, a new 52-bit combination is randomly generated as the new sequence contents. Then, based on the current LTF configuration used by the network, the network access device synchronizes the LTF sequence contents and number configuration to be updated to all network wireless devices within the network, while specifying the effective time of the updated LTF configuration items. This time can be immediate or set at a specific future time to ensure that all devices can update in an orderly manner. For example, the new LTF configuration information can be sent to all network access devices via network broadcast, informing them to start using the new configuration at the exact hour of the next update.
[0147] Furthermore, the network access device updates the target preamble sequence of the corresponding network wireless device in the target wireless network according to the updated preset preamble sequence. After receiving the update instruction, the network wireless device will adjust its receiving parameters according to the new configuration so that it can correctly identify and process wireless frames with the new preamble sequence.
[0148] In this invention, regularly updating the preamble sequence effectively prevents malicious users from cracking the network's communication keys through long-term eavesdropping and analysis, thereby ensuring the security of data communication between network devices. Even if an attacker eavesdrops on the network for a period of time, the information they previously obtained will become useless because the preamble sequence is updated regularly. Over time, the network environment may change, such as the access of new devices or adjustments to the network topology. Regularly updating the preamble sequence allows the network to better adapt to these changes, ensuring the stability and reliability of communication.
[0149] In one embodiment of the present invention, when the number of offline receiving devices in the target wireless network reaches or exceeds a preset threshold, an update to the preset preamble sequence can be triggered. This is because device offlineness may indicate a change in the network environment or the existence of potential security threats. For example, a large number of devices suddenly going offline may indicate that malicious attackers are attempting to interfere with network communication, or that there are security risks such as device theft. Similar to time-based updates, the network access device randomly selects a set of available LTF sequence contents or numbers to replace the identifier for network communication. Then, the LTF sequence contents and number configuration to be updated are synchronized to all still online devices in the network, specifying the effective time point to ensure that online devices can obtain the new configuration information in a timely manner and update within the specified time.
[0150] In this invention, for wireless network devices that subsequently reconnect to the network, they are configured according to the updated preset preamble sequence information upon reconnection, enabling them to communicate normally with other devices in the network. For example, when an offline device reconnects to the network, the network access device sends it new LTF configuration information, and the device makes corresponding settings based on this information.
[0151] When a large number of devices go offline, timely updates to the preamble sequence can prevent the further spread of potential security threats. For example, if the offline status is due to a malicious attack, updating the preamble sequence can prevent attackers from using previously acquired information to launch further attacks, protecting the communication security of the remaining devices within the network. By updating the preamble sequence, communication identifiers between devices within the network can be re-established, ensuring that devices can communicate normally after reconnecting to the network and maintaining the stable operation of the network.
[0152] The secure communication system for network devices provided by the present invention is described below. The secure communication system for network devices described below can be referred to in correspondence with the secure communication method for network devices described above.
[0153] Figure 4 This is one of the structural schematic diagrams of the secure communication system for network devices provided by the present invention. For example... Figure 4As shown, the present invention provides a secure communication system for network devices, applied at a receiving end, including a receiving module 401 and a wireless frame preamble sequence analysis module 402. The receiving module 401 is used to acquire a preset preamble sequence in a wireless frame based on the network physical layer. The preset preamble sequence is constructed by the sending end based on the preset number of long training fields and the content of the preset long training fields corresponding to the wireless network it is in. The wireless frame preamble sequence analysis module 402 is used to continue receiving the wireless frame sent by the sending end when it is determined that the information in the preset preamble sequence is the same as the target preamble sequence information. The target preamble sequence information is the number of long training fields and the content of the long training fields configured in the receiving end.
[0154] The secure communication system for network devices provided by this invention involves a transmitting end constructing a preset preamble sequence based on the number and content of long training fields predefined by the wireless network, and a receiving end configuring target preamble sequence information. When the receiving end acquires the preset preamble sequence of a wireless frame, it compares it with the target preamble sequence information and then determines whether to continue receiving wireless frames based on the comparison result, thereby improving the security of network data transmission.
[0155] Figure 5 This is a second schematic diagram of the network device secure communication system provided by the present invention. (See diagram below.) Figure 5 As shown, this invention provides a secure communication system for network devices, applied at the transmitting end, including a configuration module 501, a wireless frame preamble sequence construction module 502, and a transmitting module 503. The configuration module 501 is used to obtain the number and content of a preset long training field corresponding to a target wireless network, wherein the target wireless network is the wireless network where the transmitting end is located. The wireless frame preamble sequence construction module 502 is used to construct a preset preamble sequence and a wireless frame to be transmitted based on the preset number and content of the preset long training field. The transmitting module 503 is used to transmit the constructed wireless frame to the receiving end based on the network physical layer.
[0156] The secure communication system for network devices provided by this invention involves a transmitting end constructing a preset preamble sequence based on the number and content of long training fields predefined by the wireless network, and a receiving end configuring target preamble sequence information. When the receiving end acquires the preset preamble sequence of a wireless frame, it compares it with the target preamble sequence information and then determines whether to continue receiving wireless frames based on the comparison result, thereby improving the security of network data transmission.
[0157] The system provided in this embodiment of the invention can be used to execute the above-described method embodiments. For specific processes and details, please refer to the above embodiments, which will not be repeated here.
[0158] Figure 6 This is a schematic diagram of the structure of the electronic device provided by the present invention, such as... Figure 6 As shown, the electronic device may include: a processor 601, a communications interface 602, a memory 603, and a communication bus 604, wherein the processor 601, the communications interface 602, and the memory 603 communicate with each other through the communication bus 604. The processor 601 can call logical instructions in the memory 603 to execute a secure communication method for network devices. This method includes: acquiring a preset preamble sequence in a wireless frame based on the network physical layer; wherein the preset preamble sequence is constructed by the transmitting end based on the preset number of long training fields and the preset content of the long training fields corresponding to the wireless network; when it is determined that the information in the preset preamble sequence is the same as the target preamble sequence information, continuing to receive the wireless frame sent by the transmitting end, wherein the target preamble sequence information is the number of long training fields and the content of the long training fields configured in the receiving end.
[0159] Alternatively, obtain the number and content of the preset long training fields corresponding to the target wireless network, wherein the target wireless network is the wireless network where the sending end is located; construct a preset preamble sequence and wireless frame in the wireless frame to be sent based on the number and content of the preset long training fields; and send the constructed wireless frame to the receiving end based on the network physical layer.
[0160] Alternatively, the network access device obtains the preset number of long training fields and the preset content of the long training fields corresponding to the target wireless network, wherein the target wireless network is the wireless network to which the network access device is located; the network access device constructs a preset preamble sequence and a wireless frame in the wireless frame to be sent based on the preset number of long training fields and the preset content of the long training fields; the network access device sends the constructed wireless frame to the network wireless device based on the network physical layer; the network wireless device obtains the preset preamble sequence in the wireless frame based on the network physical layer; when the network wireless device determines that the information in the preset preamble sequence is the same as the target preamble sequence information, it continues to receive the wireless frame sent by the network access device, wherein the target preamble sequence information is the number of long training fields and the content of the long training fields configured in the network wireless device.
[0161] Furthermore, the logical instructions in the aforementioned memory 603 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, essentially, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.
[0162] On the other hand, the present invention also provides a computer program product, the computer program product comprising a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions, wherein when the program instructions are executed by a computer, the computer is able to execute the network device secure communication method provided by the above methods, the method comprising: acquiring a preset preamble sequence in a wireless frame based on the network physical layer; wherein the preset preamble sequence is constructed by the transmitting end according to the preset number of long training fields and the preset content of the long training fields corresponding to the wireless network; and when it is determined that the information in the preset preamble sequence is the same as the target preamble sequence information, continuing to receive the wireless frame sent by the transmitting end, wherein the target preamble sequence information is the number of long training fields and the content of the long training fields configured in the receiving end;
[0163] Alternatively, obtain the number and content of the preset long training fields corresponding to the target wireless network, wherein the target wireless network is the wireless network where the sending end is located; construct a preset preamble sequence and wireless frame in the wireless frame to be sent based on the number and content of the preset long training fields; and send the constructed wireless frame to the receiving end based on the network physical layer.
[0164] Alternatively, the network access device obtains the preset number of long training fields and the preset content of the long training fields corresponding to the target wireless network, wherein the target wireless network is the wireless network to which the network access device is located; the network access device constructs a preset preamble sequence in the wireless frame to be sent based on the preset number of long training fields and the preset content of the long training fields; the network access device sends the constructed wireless frame to the network wireless device based on the network physical layer; the network wireless device obtains the preset preamble sequence in the wireless frame based on the network physical layer; when the network wireless device determines that the information in the preset preamble sequence is the same as the target preamble sequence information, it continues to receive the wireless frame sent by the network access device, wherein the target preamble sequence information is the number of long training fields and the content of the long training fields configured in the network wireless device.
[0165] In another aspect, the present invention also provides a non-transitory computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements the secure communication method for network devices provided in the above embodiments. The method includes: acquiring a preset preamble sequence in a wireless frame based on the network physical layer; wherein the preset preamble sequence is constructed by the transmitting end based on the preset number of long training fields and the content of the preset long training fields corresponding to the wireless network; and when it is determined that the information in the preset preamble sequence is the same as the target preamble sequence information, continuing to receive the wireless frame sent by the transmitting end, wherein the target preamble sequence information is the number of long training fields and the content of the long training fields configured in the receiving end.
[0166] Alternatively, obtain the number and content of the preset long training fields corresponding to the target wireless network, wherein the target wireless network is the wireless network where the sending end is located; construct a preset preamble sequence and wireless frame in the wireless frame to be sent based on the number and content of the preset long training fields; and send the constructed wireless frame to the receiving end based on the network physical layer.
[0167] Alternatively, the network access device obtains the preset number of long training fields and the preset content of the long training fields corresponding to the target wireless network, wherein the target wireless network is the wireless network to which the network access device is located; the network access device constructs a preset preamble sequence in the wireless frame to be sent based on the preset number of long training fields and the preset content of the long training fields; the network access device sends the constructed wireless frame to the network wireless device based on the network physical layer; the network wireless device obtains the preset preamble sequence in the wireless frame based on the network physical layer; when the network wireless device determines that the information in the preset preamble sequence is the same as the target preamble sequence information, it continues to receive the wireless frame sent by the network access device, wherein the target preamble sequence information is the number of long training fields and the content of the long training fields configured in the network wireless device.
[0168] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.
[0169] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.
[0170] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.
Claims
1. A secure communication method for network devices, characterized in that, Applied to the receiving end, including: Based on the network physical layer, a preset preamble sequence is obtained from the wireless frame; wherein, the preset preamble sequence is constructed by the transmitting end according to the preset number of preset long training fields and the content of the preset long training fields corresponding to the wireless network it is in; When it is determined that the information in the preset preamble sequence is the same as the target preamble sequence information, the wireless frame sent by the transmitting end continues to be received, wherein the target preamble sequence information is the number of long training fields and the content of the long training fields configured in the receiving end; When it is determined that the number and content of the preset long training fields in the preset preamble sequence are different from the target preamble sequence information, the reception of the wireless frame sent by the transmitting end is terminated; and the received part of the wireless frame data is discarded, the receiving buffer resources are released, the system is restored to the initial state, and the system is ready to receive the next wireless frame. After acquiring the preset preamble sequence in the wireless frame, frequency offset estimation, channel estimation, and time synchronization are performed based on the long training field in the preset preamble sequence.
2. The secure communication method for network devices according to claim 1, characterized in that, The target preamble sequence information includes at least a set of long training field contents; The step of continuing to receive the wireless frame sent by the transmitting end when it is determined that the information in the preset preamble sequence is the same as the target preamble sequence information includes: When it is determined that the information in the preset preamble sequence is the same as at least one set of long training fields in the target preamble sequence information, the wireless frame sent by the transmitting end continues to be received.
3. The secure communication method for network devices according to claim 1, characterized in that, The method further includes: Receive a preamble sequence information update instruction sent by the sender; wherein the preamble sequence information update instruction includes long training field quantity update information and / or long training field content update information; The target leader sequence information is updated according to the leader sequence information update instruction, or according to the leader sequence information update instruction and a preset update time period, to obtain the updated target leader sequence information.
4. A secure communication method for network devices, characterized in that, Applied to the sending end, including: Obtain the number of preset long training fields and the content of preset long training fields corresponding to the target wireless network, wherein the target wireless network is the wireless network where the sending end is located; Based on the number of preset long training fields and the content of the preset long training fields, construct the preset preamble sequence and the wireless frame in the wireless frame to be sent; Based on the network physical layer, the constructed wireless frame is sent to the receiving end, wherein the receiving end is used to execute the network device secure communication method according to any one of claims 1 to 3.
5. The secure communication method for network devices according to claim 4, characterized in that, The method further includes: Identify multiple receivers in the target wireless network; Based on the preset number of long training fields and the content of the preset long training fields, the same target preamble sequence is configured in each of the receiving ends.
6. The secure communication method for network devices according to claim 5, characterized in that, The method further includes: Based on a preset update time period or the number of offline receiving devices, the preset preamble sequence is updated, and based on the updated preset preamble sequence, the target preamble sequence of the corresponding receiving device in the target wireless network is updated.
7. A secure communication method for network devices, characterized in that, include: The network access device obtains the number of preset long training fields and the content of preset long training fields corresponding to the target wireless network, wherein the target wireless network is the wireless network to which the network access device is located; The network access device constructs a preset preamble sequence and a wireless frame in the wireless frame to be sent based on the preset number of long training fields and the content of the preset long training fields. The network access device, based on the network physical layer, sends the constructed wireless frame to the network wireless device; The network wireless device obtains the preset preamble sequence in the wireless frame based on the network physical layer. After obtaining the preset preamble sequence in the wireless frame, frequency offset estimation, channel estimation and time synchronization processing are performed based on the long training field in the preset preamble sequence. When the network wireless device determines that the information in the preset preamble sequence is the same as the target preamble sequence information, it continues to receive the wireless frame sent by the network access device, wherein the target preamble sequence information is the number of long training fields and the content of the long training fields configured in the network wireless device. When it is determined that the number and content of the preset long training fields in the preset preamble sequence are different from the target preamble sequence information, the reception of the wireless frame sent by the network access device is terminated; and the received part of the wireless frame data is discarded, the receive buffer resources are released, the system is restored to the initial state, and it is ready to receive the next wireless frame.
8. A secure communication system for network devices, characterized in that, Applied to the receiving end, including: The receiving module is used to acquire a preset preamble sequence in a wireless frame based on the network physical layer; wherein the preset preamble sequence is constructed by the transmitting end according to the number of preset long training fields and the content of the preset long training fields corresponding to the wireless network it is in; wherein, after acquiring the preset preamble sequence in the wireless frame, frequency offset estimation, channel estimation and time synchronization processing are performed based on the long training fields in the preset preamble sequence. The wireless frame preamble sequence analysis module is used to continue receiving the wireless frame sent by the transmitting end when it is determined that the information in the preset preamble sequence is the same as the target preamble sequence information, wherein the target preamble sequence information is the number of long training fields and the content of the long training fields configured in the receiving end. When it is determined that the number and content of the preset long training fields in the preset preamble sequence are different from the target preamble sequence information, the reception of the wireless frame sent by the transmitting end is terminated; and the received part of the wireless frame data is discarded, the receive buffer resources are released, the system is restored to the initial state, and preparations are made to receive the next wireless frame.
Citation Information
Patent Citations
Synchronization estimation method and receiving end device
CN105635002A
Method for identifying network equipment through STF symbol in wireless frame and realizing security
CN118764867A