A WAPI trusted wireless local area network communication system and its implementation method for warehousing scenarios

Abstract

This invention discloses a WAPI trusted wireless local area network (WLAN) communication system and implementation method for warehouse scenarios, belonging to the field of wireless local area network communication technology. The invention consists of a terminal subsystem, an access subsystem, a control subsystem, and a security authentication subsystem. It employs a 15°–30° low-power directional antenna to achieve directional coverage of the shelving aisles, reducing signal attenuation caused by metal obstructions. The control subsystem uses an intelligent RF anti-attenuation module to perform power compensation, channel optimization, dual-frequency switching, and beamforming, suppressing rapid signal attenuation. An intelligent load balancing module manages user numbers, traffic, and service load, resolving bandwidth contention among multiple terminals. A QoS bandwidth scheduling module provides priority guarantees and minimum bandwidth support for core services. This invention effectively improves signal coverage distance and stability in warehouse scenarios, optimizes air interface resource utilization, and is suitable for intelligent warehouse environments with high-level shelving and dense metal storage.

Description

Technical Field

[0001] This invention relates to the field of wireless local area network (WLAN) communication technology, and more particularly to a WAPI trusted WLAN communication system and its implementation method based on a warehouse scenario. Background Technology

[0002] Warehouse environments commonly suffer from problems such as severe metal obstruction, rapid signal attenuation, numerous coverage blind spots, bandwidth contention among multiple concurrent accesses, and frequent disconnections during mobile roaming. Traditional WAPI wireless LANs employ omnidirectional antennas, resulting in significant air interface loss and low coverage efficiency in densely shelved environments. Furthermore, they lack air interface resource scheduling mechanisms tailored to warehouse scenarios, leading to uneven bandwidth contention and access congestion. Simultaneously, it's difficult to balance security authentication with data transmission performance, failing to meet the high reliability, low latency, and high security requirements of AGVs, stacker cranes, and handheld terminals.

[0003] Therefore, there is an urgent need to develop a WAPI trusted wireless LAN communication system and implementation method to solve the defects of existing warehouse WAPI wireless LANs, such as rapid signal attenuation, low coverage efficiency, severe bandwidth contention, and unstable service transmission. Summary of the Invention

[0004] This invention provides a WAPI trusted wireless local area network communication system and implementation method based on warehousing scenarios. Through low half-power angular directional antennas, intelligent radio frequency anti-attenuation, and intelligent load balancing, it achieves coverage enhancement, attenuation suppression, fair bandwidth scheduling, and trusted and secure access, meeting the requirements of continuous operation in intelligent warehousing.

[0005] To achieve the above objectives, the technical solution adopted by the present invention is as follows: In a first aspect of the present invention, a WAPI trusted wireless local area network communication system based on a warehouse scenario is provided, comprising a terminal subsystem, an access subsystem, and a control subsystem; The terminal subsystem is deployed on various mobile operating devices in the warehouse site to collect business data and transmit it to the access subsystem in encrypted form. The access subsystem is used to receive the service data and integrate a low half-power angular directional antenna to build a scenario-based coverage network; The control subsystem is used to coordinate the scheduling of wireless air interface resources, optimize radio frequency coverage, balance access load, and ensure service bandwidth; at the same time, it works in conjunction with the security and trust subsystem to complete trusted access management. The control subsystem includes an intelligent radio frequency anti-attenuation module, an intelligent load balancing module, and a QoS bandwidth scheduling module. The intelligent radio frequency anti-attenuation module is used to dynamically sense the complex electromagnetic environment of the warehouse and suppress signal attenuation. The intelligent load balancing module is used to balance user load and traffic load, separate service load, and optimize the utilization of global air interface resources. The QoS bandwidth scheduling module is used to divide hardware priority queues according to the type of warehousing business, configure minimum bandwidth guarantee thresholds for different priority businesses, and dynamically schedule air interface resources.

[0006] Preferably, the terminal subsystem includes a WAPI encryption module and a host terminal; The WAPI encryption module incorporates the WAPI security protocol and cryptographic algorithm to encrypt, sign, and encapsulate the raw business data output by the host terminal. It also decrypts, verifies, and restores the encrypted data sent by the wireless network, enabling end-to-end trusted transmission and ensuring uninterrupted IP address and encrypted link during roaming. The host terminal is the hardware for warehouse operations, including a handheld PDA, forklift terminal, AGV controller and RFID reader, used for business data collection, instruction execution and equipment control, and sending and receiving raw business data to and from the WAPI encryption module through an interface.

[0007] As a preferred option, a 15°-30° low half-power directional antenna is selected to directionally radiate energy along the shelf aisle. A differentiated deployment method is adopted, with side-mounted or wall-mounted directional coverage in the high shelf area and ceiling-mounted directional coverage in the low work area. At the same time, adjacent APs are isolated by non-overlapping channels, and the 5GHz band is reused first to reduce co-channel interference and signal superposition attenuation.

[0008] Preferably, the intelligent radio frequency anti-attenuation module includes a signal power compensation unit, a channel dynamic tuning unit, a dual-frequency intelligent switching unit, and a beamforming optimization unit. Signal power compensation unit: used to periodically collect key radio frequency indicators of each WAPI AP in the access subsystem, construct a real-time radio frequency heat map of the warehouse scenario, locate areas with excessively strong, weak, or coverage blind spots based on the heat map, and perform signal compensation in the areas based on the real-time monitored signal strength. Channel dynamic optimization unit: used to scan the electromagnetic environment of the warehouse across the entire frequency band in real time to construct a channel quality assessment table, allocate the non-overlapping channel with the lowest interference to each AP according to the assessment table, and perform channel isolation planning for adjacent APs; Dual-band intelligent handover unit: used to monitor the signal strength, location, mobility status and service type of each access terminal in real time, and execute differentiated dual-band access and handover strategies based on the monitoring results; Beamforming optimization unit: It is used to obtain the current location of the terminal, the deployment coordinates of the access AP and the signal propagation path information in real time. Combined with the preset warehouse rack layout structure and metal shielding environment parameters, it calculates and locks the best transmission direction and radiation angle of the signal facing the terminal in real time. It also performs phase detection and feature recognition on the multipath signal formed by reflection through beamforming algorithm, and performs phase reversal adjustment and amplitude cancellation on the multipath reflection components that interfere with the main signal.

[0009] Preferably, the key radio frequency indicators include the air interface signal-to-noise ratio of each WAPI AP in the access subsystem, the terminal received signal strength, and the bit error rate.

[0010] As a preferred option, when the terminal is in an area with good signal, it is forced to access the 5GHz band to obtain higher bandwidth and lower latency; when the terminal enters an area with weak signal, severe metal obstruction, or coverage edge, it is automatically switched to the 2.4GHz band, taking advantage of its strong diffraction capability to ensure link connectivity. Furthermore, during the terminal's movement and roaming, it continuously tracks changes in signal quality, maintains seamless switching, and ensures that the terminal always works in the optimal frequency band.

[0011] Preferably, the intelligent load balancing module achieves multi-dimensional load scheduling by monitoring the number of access terminals, air interface traffic usage, service type, and signal quality of each WAPI AP in real time.

[0012] As a preferred approach, when dynamically scheduling air interface resources, the QoS bandwidth scheduling module monitors the transmission status, bandwidth usage, and air interface resource usage of each service queue in real time, dynamically allocates air interface time slots and transmission opportunities according to priority weights, prioritizes scheduling high-priority service data, and reasonably limits the rate of low-priority services.

[0013] Preferably, the system further includes a secure and trusted subsystem, which includes an identity authentication module, a key module, a data encryption module, an access control module, and a storage module. Identity authentication module: Based on the WAPI national standard protocol, it works with the authentication server AS to achieve two-way authentication of certificates between the terminal and the AP, and between the terminal and the network, and to reject unauthorized terminal access; Key module: Used to dynamically generate session keys for terminals, APs, and ASs through key distribution devices, and to complete the secure distribution, online update, and expiration revocation of keys, ensuring that keys are not leaked throughout the process; Data encryption module: Based on hardware encryption and IPSec encryption mechanisms, it encrypts and encapsulates all business data collected, uploaded and sent by the terminal to achieve anti-eavesdropping, anti-tampering and anti-replay in air interface transmission; Access permission control module: used to allocate different access permissions according to terminal type, user identity, and business scenario, so as to realize hierarchical access control and isolation of devices; Storage module: Used to record log information of security events throughout the process, facilitating subsequent security auditing.

[0014] In a second aspect of the present invention, a method for implementing WAPI trusted wireless local area network communication based on a warehouse scenario is provided, comprising the following steps: S1: Real-time scanning of the full-frequency electromagnetic environment of the warehouse, directional transmission of signals along the shelf aisle via antenna, and combined with signal power compensation, dynamic channel optimization, frequency band switching, and detection and adjustment of multipath signals to achieve full signal coverage in the warehouse scenario; S2: Perform two-way authentication of terminal identity and encrypt transmitted data. Based on the terminal's access request, and combined with real-time monitoring of the number of access users, traffic usage, frequency band load and signal quality of each AP, assign the corresponding AP to the terminal according to the service type. S3: Divide the hardware priority queues into multiple levels according to the type of warehousing business, configure the minimum bandwidth guarantee threshold for different priority queues, and dynamically allocate air interface time slots and transmission opportunities according to priority weights to realize dynamic scheduling of air interface resources.

[0015] The beneficial effects of this invention are as follows: This invention employs 15°–30° directional antennas for precise coverage along shelving aisles, effectively reducing signal attenuation caused by metal obstruction and reflection, increasing coverage distance by 40%–60%, eliminating blind spots in warehouses, and significantly improving signal stability. Through power compensation, channel optimization, dual-frequency intelligent switching, and beamforming, it comprehensively suppresses rapid signal attenuation from the perspectives of transmission, interference, and propagation paths, improving communication reliability in complex environments. Based on multi-dimensional load balancing of user numbers, traffic, and service types, it avoids single AP overload congestion, achieving globally optimal allocation of air interface resources and fundamentally solving the bandwidth contention problem caused by concurrent access from multiple terminals. Through multi-level hardware priority queues and minimum bandwidth guarantees, it ensures priority transmission of core services such as AGV control and barcode scanning, preventing them from being overtaken, meeting the requirements of low-latency and high-reliability warehouse operations. Relying on WAPI two-way authentication, key management, and IPSec encryption to build a trusted security system, it achieves controllable terminal access, encrypted data transmission, and auditable access behavior, improving system security. It supports seamless roaming of mobile terminals, maintains uninterrupted IP and encrypted links, adapts to the high mobility and continuous operation requirements of smart warehousing scenarios, and improves the overall operating efficiency and work experience of wireless networks. Attached Figure Description

[0016] Figure 1 This is a block diagram of a WAPI trusted wireless local area network communication system based on a warehousing scenario according to the present invention; Figure 2 This is a flowchart of a WAPI trusted wireless local area network communication implementation method based on a warehouse scenario, according to the present invention. Detailed Implementation

[0017] To further illustrate the technical means and effects of the present invention in achieving its intended purpose, the following detailed description of the specific implementation methods, structures, features, and effects of the present invention, in conjunction with the accompanying drawings and preferred embodiments, is provided.

[0018] It should be noted that in this invention, AP stands for Access Point, which is used to provide WAPI wireless signal coverage, receive terminal access requests, and complete wireless signal transmission and reception and data forwarding. AS stands for Authentication Server, which is used to complete two-way authentication between the terminal and the wireless network, certificate verification, and legitimate access determination according to the WAPI national standard protocol.

[0019] Please see Figure 1 As shown, in a first aspect of the present invention, a WAPI trusted wireless local area network communication system based on a warehouse scenario is provided, comprising: a terminal subsystem, an access subsystem, and a control subsystem; The terminal subsystem is deployed on various mobile operating devices in the warehouse site to collect business data and transmit it to the access subsystem in encrypted form. The terminal subsystem includes a WAPI encryption module and a host terminal; The WAPI encryption module incorporates the WAPI security protocol and cryptographic algorithm to encrypt, sign, and encapsulate the raw business data output by the host terminal. It also decrypts, verifies, and restores the encrypted data sent by the wireless network, enabling end-to-end trusted transmission and ensuring uninterrupted IP address and encrypted link during roaming. The host terminal is the hardware for warehouse operations, including a handheld PDA, forklift terminal, AGV controller and RFID reader, used for business data collection, instruction execution and equipment control, and sending and receiving raw business data to and from the WAPI encryption module through an interface.

[0020] During operation, the host terminal collects warehousing business data and sends it to the WAPI encryption module through a hardware interface. The WAPI encryption module encapsulates the data using the WAPI protocol, performs authentication and encryption, and then sends it to the wireless access network. At the same time, it receives encrypted data returned from the network side, decrypts it, verifies the signature, and restores it. Then, it transmits the valid business data to the host terminal to execute instructions or display information, thus realizing secure, stable, and reliable wireless communication and business interaction of the warehousing terminal equipment.

[0021] The access subsystem is used to receive the service data and integrate a low half-power angular directional antenna to build a scenario-based coverage network; Select a 15°-30° low half-power directional antenna to radiate energy directionally along the shelf aisle. Adopt a differentiated deployment method: use side-mounted or wall-mounted directional coverage in the high shelf area and ceiling-mounted directional coverage in the low work area. At the same time, control adjacent APs to use non-overlapping channel isolation and prioritize the reuse of the 5GHz frequency band to reduce co-channel interference and signal superposition attenuation.

[0022] The access subsystem uses a 15°-30° low-power directional antenna as its core coverage carrier. Unlike traditional omnidirectional antennas that suffer from energy dispersion, this directional antenna radiates wireless signal energy along warehouse racking aisles, significantly reducing lateral signal leakage to the outside of the racking. It also reduces signal reflections caused by obstacles such as metal racks and stacker cranes, suppressing attenuation loss at the signal source. Through the concentrated energy characteristics of the directional antenna, the effective signal coverage distance is increased by 40%-60% compared to traditional solutions, and the signal attenuation rate is reduced by ≥40%. This directly addresses the technical pain points of rapid signal attenuation and short coverage distance in warehouse scenarios, making it suitable for the coverage needs of high-level racking and large-span warehouses. Adjacent access points (APs) are configured with non-overlapping channels to avoid co-channel interference at the frequency domain level. The 5GHz band is prioritized for signal reuse, leveraging its clean and low-interference characteristics to reduce co-channel interference and minimize the attenuation risk caused by the superposition of multiple AP signals, further ensuring the stability and reliability of signal coverage.

[0023] The control subsystem is used to coordinate the scheduling of wireless air interface resources, optimize radio frequency coverage, balance access load, and ensure service bandwidth; at the same time, it works in conjunction with the security and trust subsystem to complete trusted access management. The control subsystem includes an intelligent radio frequency anti-attenuation module, an intelligent load balancing module, and a QoS bandwidth scheduling module. The intelligent radio frequency anti-attenuation module is used to dynamically sense the complex electromagnetic environment of the warehouse and suppress signal attenuation. The intelligent radio frequency anti-attenuation module includes a signal power compensation unit, a channel dynamic tuning unit, a dual-frequency intelligent switching unit, and a beamforming optimization unit. Signal power compensation unit: used to periodically collect key radio frequency indicators of each WAPI AP in the access subsystem, construct a real-time radio frequency heat map of the warehouse scenario, locate areas with excessively strong, weak, or coverage blind spots based on the heat map, and perform signal compensation in the areas based on the real-time monitored signal strength. The key radio frequency indicators include the air interface signal-to-noise ratio (SNR), received signal strength (RSSI), and bit error rate of each WAPI AP in the access subsystem.

[0024] Specifically, the signal power compensation unit collects key radio frequency (RF) indicators from each WAPI AP in the access subsystem, calculates and generates the wireless signal coverage distribution status of the warehouse scenario in real time based on these indicators, forming a real-time RF heat map of the warehouse scenario. Based on the heat map, it locates areas with excessively strong signals, weak signals, or coverage blind spots. When the detected signal strength is below a preset lower threshold, it automatically increases the transmission power of the corresponding AP to compensate for signal gaps; when the detected signal strength is above a preset upper threshold, it automatically reduces the transmission power of the corresponding AP to reduce cross-area coverage and co-channel interference, thereby achieving adaptive and fine-tuned adjustment of the wireless signal power across the entire warehouse area, stabilizing signal strength and suppressing rapid signal attenuation.

[0025] Channel dynamic optimization unit: used to scan the electromagnetic environment of the warehouse across the entire frequency band in real time to construct a channel quality assessment table, allocate the non-overlapping channel with the lowest interference to each AP according to the assessment table, and perform channel isolation planning for adjacent APs; The channel dynamic optimization unit continuously collects parameters such as interference intensity, channel utilization, noise floor level, and co-channel conflict status of each channel by scanning the electromagnetic environment of the 2.4GHz and 5GHz full-band in the warehouse scenario in real time. Based on the collection results, it quantitatively evaluates the usable quality of each channel and constructs a channel quality evaluation table. The system automatically selects and allocates the non-overlapping channel with the lowest interference to each WAPI AP according to the evaluation table. At the same time, it performs channel isolation planning for adjacent APs, so that adjacent APs work on independent channels without interference, avoiding signal attenuation and transmission errors caused by co-channel and adjacent-channel interference, and ensuring stable and reliable wireless signal transmission in the warehouse scenario.

[0026] Dual-band intelligent handover unit: used to monitor the signal strength, location, mobility status and service type of each access terminal in real time, and execute differentiated dual-band access and handover strategies based on the monitoring results; When the terminal is in an open area with good signal, it is forcibly guided to access the 5GHz band to obtain higher bandwidth and lower latency. When the terminal enters an area with weak signal, severe metal obstruction, or coverage edge, it is automatically switched to the 2.4GHz band, utilizing its strong diffraction capability to ensure link connectivity. During the terminal's mobile roaming, signal quality changes are continuously tracked, maintaining seamless switching to ensure the terminal always operates in the optimal frequency band, thereby suppressing signal attenuation and improving transmission stability.

[0027] Beamforming optimization unit: It is used to obtain the current location of the terminal, the deployment coordinates of the access AP and the signal propagation path information in real time. Combined with the preset warehouse rack layout structure and metal shielding environment parameters, it calculates and locks the best transmission direction and radiation angle of the signal facing the terminal in real time. It also performs phase detection and feature recognition on the multipath signal formed by reflection through beamforming algorithm, and performs phase reversal adjustment and amplitude cancellation on the multipath reflection components that interfere with the main signal.

[0028] Specifically, the beamforming optimization unit collects in real time the Received Signal Strength Indication (RSSI), Channel State Information (CSI), terminal location coordinates, and deployment location parameters of the access point (AP) reported by the terminal. Combined with pre-entered information on warehouse rack layout, metal obstruction distribution, and scene 3D structure, and based on signal propagation models and direction estimation algorithms, it performs comprehensive analysis and iterative calculations on the terminal's location, distance, and obstruction status. It dynamically determines a signal propagation path that avoids metal obstructions and reaches the terminal directly along the rack aisle, thus outputting the optimal transmission direction and radiation angle parameters. These parameters are then sent to the low-power angular directional antenna in the access subsystem. Hardware-driven locking of the antenna's transmission direction and radiation angle ensures that the wireless signal energy is precisely directed towards the target terminal with the narrowest beam and lowest loss, reducing lateral radiation and energy diffusion, and achieving real-time calculation and closed-loop locking of the optimal direction and angle.

[0029] When performing phase detection and feature identification of multipath signals using beamforming algorithms, the mixed air interface signal received by the AP is first sampled at high speed to separate the direct main signal from the multipath reflection signals generated by reflections from shelves and metal equipment. Then, the beamforming algorithm accurately detects and extracts features of the phase, amplitude, arrival time, and propagation direction of each signal. Based on phase shift, time delay difference, and intensity attenuation characteristics, the multipath reflection components that interfere with the main signal are identified. Subsequently, a cancellation signal with opposite phase and equal amplitude is generated for these interference components and superimposed on the original transmitted signal, causing coherent cancellation of the interfering multipath components in the spatial domain. This weakens or eliminates signal fading, distortion, and jitter caused by multipath reflections, ensuring stable transmission of the direct main signal.

[0030] The intelligent load balancing module is used to balance user load and traffic load, separate service load, and optimize global air interface resource utilization. The intelligent load balancing module achieves multi-dimensional load scheduling by monitoring the number of access terminals, air interface traffic usage, service type, and signal quality of each WAPI AP in real time.

[0031] Through the coordinated operation of user number balancing, traffic balancing and service layering, the intelligent load balancing module uniformly allocates wireless resources across the entire domain, avoiding local overload and resource idleness, significantly improving the utilization rate of global air interface resources in the warehouse scenario, and fundamentally solving the problems of bandwidth contention and transmission instability caused by concurrent access of multiple terminals.

[0032] Specifically, regarding user load balancing, the intelligent load balancing module presets a threshold for the number of stable connected terminals per AP. When the number of users associated with an AP exceeds this threshold, it automatically redirects newly connected users or users with weak signals to adjacent lightly loaded APs, preventing congestion on a single AP due to excessive user access. Regarding traffic load balancing, the intelligent load balancing module monitors the bandwidth utilization, air interface utilization, and data transmission rate of each AP in real time, dynamically migrating high-traffic, high-bandwidth-consuming terminals to APs with lower loads, preventing bandwidth contention and transmission delays caused by concentrated traffic. Regarding service load separation, the intelligent load balancing module allocates high-bandwidth, low-latency services to the 5GHz band and low-speed IoT services to the 2.4GHz band based on service priorities and bandwidth requirements, such as AGV control commands, barcode scanning data, and background logs, achieving physical isolation of different services in terms of frequency bands and air interface resources.

[0033] The QoS bandwidth scheduling module is used to divide hardware priority queues according to the type of warehousing business, configure minimum bandwidth guarantee thresholds for different priority businesses, and dynamically schedule air interface resources.

[0034] Specifically, the QoS bandwidth scheduling module first divides different services, such as AGV control commands, stacker crane control signals, barcode scanning data collection, background log uploads, and firmware upgrades, into multi-level hardware priority queues based on the business characteristics and real-time requirements of the warehousing scenario. High-priority queues are allocated to core operations with high real-time and high reliability requirements, while low-priority queues are allocated to non-real-time background services. Simultaneously, a corresponding minimum bandwidth guarantee threshold is configured for each priority queue level to ensure that high-priority services still receive dedicated bandwidth resources during network congestion and are not squeezed out by low-priority services.

[0035] In the dynamic scheduling of air interface resources, the QoS bandwidth scheduling module monitors the transmission status, bandwidth usage and air interface resource usage of each service queue in real time, dynamically allocates air interface time slots and transmission opportunities according to priority weights, prioritizes scheduling high-priority service data, and reasonably limits the rate of low-priority services.

[0036] The QoS bandwidth scheduling module collects real-time operational status information such as packet buffer length, data transmission rate, bandwidth utilization ratio, and air interface resource utilization of each service priority queue. Based on preset service priority weights, it performs quantitative calculations and dynamically allocates air interface transmission time slots and transmission opportunities according to the principle of prioritizing high-priority services. It prioritizes the time slot occupation and transmission rate of high-priority services such as AGV control instructions and barcode scanning data. At the same time, it monitors and statistically analyzes the real-time traffic of low-priority services. When their bandwidth utilization exceeds the limit threshold, it activates a traffic rate limiting mechanism to prevent low-priority services from excessively occupying air interface resources. This ensures that high-priority services still have stable transmission bandwidth and latency guarantees when the network is busy, achieving fair, efficient, and differentiated scheduling of air interface resources.

[0037] The system also includes a security and trust subsystem, which includes an identity authentication module, a key module, a data encryption module, an access permission control module, and a storage module. Identity authentication module: Based on the WAPI national standard protocol, it works with the authentication server AS to achieve two-way authentication of certificates between the terminal and the AP, and between the terminal and the network, and to reject unauthorized terminal access; Key module: Used to dynamically generate session keys for terminals, APs, and ASs through key distribution devices, and to complete the secure distribution, online update, and expiration revocation of keys, ensuring that keys are not leaked throughout the process; Data encryption module: Based on hardware encryption and IPSec encryption mechanisms, it encrypts and encapsulates all business data collected, uploaded and sent by the terminal to achieve anti-eavesdropping, anti-tampering and anti-replay in air interface transmission; Access control module: Used to allocate different access permissions according to terminal type, user identity, and business scenario, so as to realize hierarchical access control and isolation of devices such as AGV, handheld device, and sensor; Storage module: Used to record log information of security events such as authentication results, access time, terminal information, and key status throughout the process, which facilitates subsequent security auditing.

[0038] In a second aspect of the invention, please refer to Figure 2 As shown, a method for implementing WAPI trusted wireless local area network communication in a warehouse scenario is provided, including the following steps: S1: Real-time scanning of the full-frequency electromagnetic environment of the warehouse, directional transmission of signals along the shelf aisle via antenna, and combined with signal power compensation, dynamic channel optimization, frequency band switching, and detection and adjustment of multipath signals to achieve full signal coverage in the warehouse scenario; After the AP is powered on, the intelligent RF anti-attenuation module scans the electromagnetic environment of the warehouse across the entire frequency band in real time. The access subsystem transmits signals directionally along the shelving aisles via a 15°–30° small half-power directional antenna. High-level shelving areas use side-mounted or wall-mounted coverage, while low-level work areas use ceiling-mounted coverage. The signal power compensation unit periodically collects the air interface signal-to-noise ratio, terminal received signal strength, and bit error rate of each AP to construct a real-time RF heat map. It increases the transmission power in weak coverage blind spots and reduces the power in over-coverage areas. The channel dynamic optimization unit allocates non-overlapping channels with the lowest interference to each AP and performs channel isolation between adjacent APs. The dual-frequency intelligent switching unit performs frequency band optimization based on terminal signal strength, location, and service type. The beamforming optimization unit calculates the optimal transmission direction and angle in real time, performs phase detection, reverse adjustment, and interference cancellation on reflected multipath signals, and completes stable coverage.

[0039] S2: Perform two-way authentication of terminal identity and encrypt transmitted data. Based on the terminal's access request, and combined with real-time monitoring of the number of access users, traffic usage, frequency band load and signal quality of each AP, assign the corresponding AP to the terminal according to the service type. After a terminal initiates an access request, the control subsystem monitors the number of access users, traffic usage, frequency band load, and signal quality of each AP in real time through the intelligent load balancing module. When the number of users on an AP exceeds the threshold, the newly accessed terminal is directed to an adjacent lightly loaded AP. When traffic is overloaded, high-bandwidth services are diverted to low-load APs. At the same time, high-real-time services are allocated to 5GHz and low-speed IoT services are allocated to 2.4GHz according to service type, thereby achieving service load separation and global air interface resource optimization.

[0040] S3: Divide the hardware priority queues into multiple levels according to the type of warehousing business, configure the minimum bandwidth guarantee threshold for different priority queues, and dynamically allocate air interface time slots and transmission opportunities according to priority weights to realize dynamic scheduling of air interface resources.

[0041] The QoS bandwidth scheduling module divides the warehouse business into multi-level hardware priority queues according to the type of warehouse business, and configures corresponding priorities and minimum bandwidth guarantee thresholds for services such as AGV control instructions, barcode scanning data, and background logs. It monitors the transmission status, bandwidth usage, and air interface utilization of each business queue in real time, dynamically allocates air interface time slots and transmission opportunities according to priority weights, prioritizes scheduling high-priority business data, and reasonably limits the rate of low-priority business to avoid bandwidth contention.

[0042] The above embodiments are merely descriptions of preferred embodiments of the present invention and are not intended to limit the scope of the present invention. Various modifications and improvements made by those skilled in the art to the technical solutions of the present invention without departing from the spirit of the present invention should fall within the protection scope defined by the claims of the present invention.

Claims

1. A WAPI trusted wireless local area network communication system based on a warehousing scenario, characterized in that, Includes terminal subsystem, access subsystem, and control subsystem; The terminal subsystem is deployed on various mobile operating devices in the warehouse site to collect business data and transmit it to the access subsystem in encrypted form. The access subsystem is used to receive the service data and integrate a low half-power angular directional antenna to build a scenario-based coverage network; The control subsystem is used to coordinate the scheduling of wireless air interface resources, optimize radio frequency coverage, balance access load, and ensure service bandwidth; at the same time, it works in conjunction with the security and trust subsystem to complete trusted access management. The control subsystem includes an intelligent radio frequency anti-attenuation module, an intelligent load balancing module, and a QoS bandwidth scheduling module. The intelligent radio frequency anti-attenuation module is used to dynamically sense the complex electromagnetic environment of the warehouse and suppress signal attenuation. The intelligent load balancing module is used to balance user load and traffic load, separate service load, and optimize the utilization of global air interface resources. The QoS bandwidth scheduling module is used to divide hardware priority queues according to the type of warehousing business, configure minimum bandwidth guarantee thresholds for different priority businesses, and dynamically schedule air interface resources.

2. The WAPI trusted wireless local area network communication system based on a warehouse scenario according to claim 1, characterized in that, The terminal subsystem includes a WAPI encryption module and a host terminal; The WAPI encryption module incorporates the WAPI security protocol and cryptographic algorithm to encrypt, sign, and encapsulate the raw business data output by the host terminal. It also decrypts, verifies, and restores the encrypted data sent by the wireless network, enabling end-to-end trusted transmission and ensuring uninterrupted IP address and encrypted link during roaming. The host terminal is the hardware for warehouse operations, including a handheld PDA, forklift terminal, AGV controller and RFID reader, used for business data collection, instruction execution and equipment control, and sending and receiving raw business data to and from the WAPI encryption module through an interface.

3. The WAPI trusted wireless local area network communication system based on a warehouse scenario according to claim 1, characterized in that, Select a 15°-30° low half-power directional antenna to radiate energy directionally along the shelf aisle. Adopt a differentiated deployment method: use side-mounted or wall-mounted directional coverage in the high shelf area and ceiling-mounted directional coverage in the low work area. At the same time, control adjacent APs to use non-overlapping channel isolation and prioritize the reuse of the 5GHz frequency band to reduce co-channel interference and signal superposition attenuation.

4. The WAPI trusted wireless local area network communication system based on a warehouse scenario according to claim 1, characterized in that, The intelligent radio frequency anti-attenuation module includes a signal power compensation unit, a channel dynamic tuning unit, a dual-frequency intelligent switching unit, and a beamforming optimization unit. Signal power compensation unit: used to periodically collect key radio frequency indicators of each WAPI AP in the access subsystem, construct a real-time radio frequency heat map of the warehouse scenario, locate areas with excessively strong, weak, or coverage blind spots based on the heat map, and perform signal compensation in the areas based on the real-time monitored signal strength. Channel dynamic optimization unit: used to scan the electromagnetic environment of the warehouse across the entire frequency band in real time to construct a channel quality assessment table, allocate the non-overlapping channel with the lowest interference to each AP according to the assessment table, and perform channel isolation planning for adjacent APs; Dual-band intelligent handover unit: used to monitor the signal strength, location, mobility status and service type of each access terminal in real time, and execute differentiated dual-band access and handover strategies based on the monitoring results; Beamforming optimization unit: It is used to obtain the current location of the terminal, the deployment coordinates of the access AP and the signal propagation path information in real time. Combined with the preset warehouse rack layout structure and metal shielding environment parameters, it calculates and locks the best transmission direction and radiation angle of the signal facing the terminal in real time. It also performs phase detection and feature recognition on the multipath signal formed by reflection through beamforming algorithm, and performs phase reversal adjustment and amplitude cancellation on the multipath reflection components that interfere with the main signal.

5. A WAPI trusted wireless local area network communication system based on a warehousing scenario according to claim 4, characterized in that, The key radio frequency indicators include the air interface signal-to-noise ratio, terminal received signal strength, and bit error rate of each WAPI AP in the access subsystem.

6. The WAPI trusted wireless local area network communication system based on a warehouse scenario according to claim 4, characterized in that, When the terminal is in an area with good signal, it is forced to access the 5GHz band to obtain higher bandwidth and lower latency. When the terminal enters an area with weak signal, severe metal obstruction, or coverage edge, it is automatically switched to the 2.4GHz band. It utilizes the strong diffraction capability of the 2.4GHz band to ensure link connectivity. Furthermore, during the terminal's movement and roaming, it continuously tracks changes in signal quality to maintain seamless switching and ensure that the terminal always works in the optimal frequency band.

7. A WAPI trusted wireless local area network communication system based on a warehousing scenario according to claim 4, characterized in that, The intelligent load balancing module achieves multi-dimensional load scheduling by monitoring the number of access terminals, air interface traffic usage, service type, and signal quality of each WAPI AP in real time.

8. A WAPI trusted wireless local area network communication system based on a warehouse scenario according to claim 4, characterized in that, When dynamically scheduling air interface resources, the QoS bandwidth scheduling module monitors the transmission status, bandwidth usage, and air interface resource usage of each service queue in real time. It dynamically allocates air interface time slots and transmission opportunities according to priority weights, prioritizes scheduling high-priority service data, and reasonably limits the rate of low-priority services.

9. A WAPI trusted wireless local area network communication system based on a warehouse scenario according to claim 1, characterized in that, The system also includes a security and trust subsystem, which includes an identity authentication module, a key module, a data encryption module, an access permission control module, and a storage module. Identity authentication module: Based on the WAPI national standard protocol, it works with the authentication server AS to achieve two-way authentication of certificates between the terminal and the AP, and between the terminal and the network, and to reject unauthorized terminal access; Key module: Used to dynamically generate session keys for terminals, APs, and ASs through key distribution devices, and to complete the secure distribution, online update, and expiration revocation of keys, ensuring that keys are not leaked throughout the process; Data encryption module: Based on hardware encryption and IPSec encryption mechanisms, it encrypts and encapsulates all business data collected, uploaded and sent by the terminal to achieve anti-eavesdropping, anti-tampering and anti-replay in air interface transmission; Access permission control module: used to allocate different access permissions according to terminal type, user identity, and business scenario, so as to realize hierarchical access control and isolation of devices; Storage module: Used to record log information of security events throughout the process, facilitating subsequent security auditing.

10. A method for implementing WAPI trusted wireless local area network communication in a warehouse scenario, applied to the WAPI trusted wireless local area network communication system in a warehouse scenario as described in any one of claims 1-9, characterized in that, Includes the following steps: S1: Real-time scanning of the full-frequency electromagnetic environment of the warehouse, directional transmission of signals along the shelf aisle via antenna, and combined with signal power compensation, dynamic channel optimization, frequency band switching, and detection and adjustment of multipath signals to achieve full signal coverage in the warehouse scenario; S2: Perform two-way authentication of terminal identity and encrypt transmitted data. Based on the terminal's access request, and combined with real-time monitoring of the number of access users, traffic usage, frequency band load and signal quality of each AP, assign the corresponding AP to the terminal according to the service type. S3: Divide the hardware priority queues into multiple levels according to the type of warehousing business, configure the minimum bandwidth guarantee threshold for different priority queues, and dynamically allocate air interface time slots and transmission opportunities according to priority weights to realize dynamic scheduling of air interface resources.

Images