A method, apparatus, device, and storage medium for transmitting encrypted data in 6G Radio mode.

Abstract

This application discloses a method, apparatus, device, and storage medium for transmitting encrypted modes for 6G Radio, relating to the field of wireless network communication technology. The method includes: receiving wireless service configuration information from an access control (AC); determining that the frequency band attribute of the radio interface to be configured is the 6G band; comparing the encryption mode field in the wireless service configuration information with a preset 6G Radio encryption whitelist; if the encryption mode field does not belong to the 6G Radio encryption whitelist, intercepting the wireless service configuration information and mapping the encryption mode field to the corresponding target encryption mode; replacing the encryption mode field with the target encryption mode; merging the replaced encryption mode field with other fields in the wireless service configuration information to obtain corrected wireless service configuration information; and writing the corrected wireless service configuration information into the driver layer of the radio to be configured. This method can achieve 6G Radio encryption mode adaptation, thereby improving the reliability of 6G band configuration in multi-band APs.

Description

Technical Field

[0001] This application relates to the field of wireless network communication technology, and in particular to a method, apparatus, device and storage medium for transmitting encrypted mode for 6G Radio. Background Technology

[0002] With the advancement of the IEEE (Institute of Electrical and Electronics Engineers) 802.11be (Wi-Fi 7) standard, the 6GHz band has become a core resource for improving network throughput. The Wi-Fi Alliance stipulates that devices on the 6GHz band must be required to enable WPA3 (Wi-Fi Protected Access 3) encryption, and are no longer compatible with WPA2 or earlier encryption methods.

[0003] In the existing AC (Access Controller) + AP (Access Point) centralized network architecture, the AC acts as the central control node and uniformly distributes encryption configuration templates to each AP. Administrators usually configure the same encryption mode for all frequency bands under the same SSID (Service Set Identifier). Due to the compatibility requirements of older terminals, they are accustomed to using mixed modes such as WPA / WPA2 Personal or WPA2 / WPA3 Personal.

[0004] The technical problem with the above-mentioned traditional solution is that the AC does not distinguish the differences in encryption capabilities of radios of different frequency bands when uniformly distributing configurations. This causes 6G radios that only support WPA3 to fail to start due to receiving incompatible low-version encryption configurations, resulting in poor reliability of frequency band resource adaptation. Summary of the Invention

[0005] This application provides a method, apparatus, device, and storage medium for transmitting encrypted 6G Radio, which can achieve 6G Radio encryption mode adaptation without modifying the AC-side configuration strategy, thereby improving the reliability of 6G band configuration in multi-band APs.

[0006] To achieve the above objectives, this application adopts the following technical solution: In a first aspect, this application provides a method for transmitting 6G Radio in encrypted mode, the method comprising: The system receives wireless service configuration information from the AC or local configuration interface; identifies the frequency band attribute of the radio interface to be configured; when the frequency band attribute is a 6G band, it compares the encryption mode field in the wireless service configuration information with a preset 6G Radio encryption whitelist; if the encryption mode field does not belong to the 6G Radio encryption whitelist, it intercepts the wireless service configuration information and maps the encryption mode field to the corresponding target encryption mode according to a preset target mapping rule, wherein the target encryption mode belongs to the preset 6G Radio encryption whitelist; it replaces the encryption mode field with the target encryption mode, and merges the replaced encryption mode field with the unencrypted service configuration field in the wireless service configuration information to obtain the corrected wireless service configuration information; and it writes the corrected wireless service configuration information into the driver layer of the radio to be configured.

[0007] In some possible implementations, the method further includes: When the frequency band attribute is 2.4G or 5G, the wireless service configuration information is directly written into the driver layer of the radio to be configured.

[0008] In some possible implementations, mapping the encryption mode field to the corresponding target encryption mode according to a preset target mapping rule includes: When the encryption mode field is WPA / WPA2 Personal mode, the encryption mode field is mapped to WPA3 Personal mode; when the encryption mode field is WPA2 / WPA3 Personal mode, the encryption mode field is mapped to WPA3 Personal mode; when the encryption mode field is WPA / WPA2 Enterprise mode, the encryption mode field is mapped to WPA3 Enterprise mode; when the encryption mode field is WPA2 / WPA3 Enterprise mode, the encryption mode field is mapped to WPA3 Enterprise mode; when the encryption mode field is Open mode, the encryption mode field is mapped to OWE mode. In some possible implementations, the method further includes: The configuration result information is returned to the AC, and the configuration result information carries the encryption mode identifier of the radio frequency to be configured.

[0009] In some possible implementations, the method further includes: The driver layer of the radio to be configured starts the wireless service of the radio to be configured according to the target encryption mode in the modified wireless service configuration information.

[0010] In some possible implementations, intercepting the wireless service configuration information includes: The direct writing of the wireless service configuration information into the driver layer of the radio to be configured is blocked, and the wireless service configuration information is temporarily stored in the AP's cache.

[0011] In some possible implementations, the preset 6G Radio encryption whitelist includes: WPA3 Personal mode, WPA3 Enterprise mode, and OWE mode.

[0012] Secondly, this application provides an encrypted transmission device for 6G Radio, the device comprising: The receiving module is used to receive wireless service configuration information from the AC or the local configuration interface; The identification module is used to identify the frequency band attributes of the radio interface to be configured. The comparison module is used to compare the encryption mode field in the wireless service configuration information with a preset 6G Radio encryption whitelist when the frequency band attribute is 6G frequency band; if the encryption mode field does not belong to the 6G Radio encryption whitelist, the wireless service configuration information is intercepted, and the encryption mode field is mapped to the corresponding target encryption mode according to the preset target mapping rule, wherein the target encryption mode belongs to the preset 6G Radio encryption whitelist. The correction module is used to replace the encryption mode field with the target encryption mode, and merge the replaced encryption mode field with the unencrypted service configuration field in the wireless service configuration information to obtain the corrected wireless service configuration information. The writing module is used to write the corrected wireless service configuration information into the driver layer of the radio to be configured.

[0013] Thirdly, this application provides a computing device, including a memory and a processor; The memory stores one or more computer programs, the one or more computer programs including instructions; when the instructions are executed by the processor, the computing device performs the method as described in any one of the first aspects.

[0014] Fourthly, this application provides a computer-readable storage medium for storing a computer program for performing the method as described in any one of the first aspects.

[0015] Fifthly, this application provides a computer program product comprising one or more computer instructions, wherein when the computer instructions are executed by a computer, the computer performs the method as described in any one of the first aspects.

[0016] As can be seen from the above technical solution, this application has at least the following beneficial effects: In this application, wireless service configuration information is received from the AC or local configuration interface; then, the frequency band attribute of the radio interface to be configured is identified; when the frequency band attribute is 6G, the encryption mode field in the wireless service configuration information is compared with the preset 6G Radio encryption whitelist; if the encryption mode field does not belong to the 6G Radio encryption whitelist, the wireless service configuration information is intercepted, and the encryption mode field is mapped to the corresponding target encryption mode according to the preset target mapping rule; the target encryption mode replaces the encryption mode field, and the replaced encryption mode field is merged with the unencrypted service configuration field in the wireless service configuration information to obtain the corrected wireless service configuration information; the corrected wireless service configuration information is written into the driver layer of the radio to be configured.

[0017] In existing technical solutions, the AC (Access Controller) does not differentiate between the encryption capabilities of different frequency bands when uniformly distributing configurations. This results in 6G Radios that only support WPA3 failing to start due to receiving incompatible low-version encryption configurations, leading to poor frequency band resource adaptation reliability. Therefore, this application addresses this issue by automatically intercepting 6G frequency band configuration information and correcting encryption mode mapping on the AP side. This allows 6G Radios to start wireless services normally in compliant WPA3 mode, improving the compatibility and reliability of 6G frequency band configurations in multi-band APs without requiring modifications to the AC-side configuration strategy. Simultaneously, the 2.4G and 5G frequency bands under the same SSID can still use the original low-version encryption configurations distributed by the AC, achieving differentiated deployment of different encryption modes on different frequency bands and avoiding the waste of frequency band resources caused by 6G Radio configuration failures.

[0018] It should be understood that the descriptions of technical features, technical solutions, beneficial effects, or similar language in this application do not imply that all features and advantages can be achieved in any single embodiment. Rather, it is understood that the description of a feature or beneficial effect means that a specific technical feature, technical solution, or beneficial effect is included in at least one embodiment. Therefore, the descriptions of technical features, technical solutions, or beneficial effects in this specification do not necessarily refer to the same embodiment. Furthermore, the technical features, technical solutions, and beneficial effects described in this embodiment can be combined in any suitable manner. Those skilled in the art will understand that embodiments can be implemented without one or more specific technical features, technical solutions, or beneficial effects of a particular embodiment. In other embodiments, additional technical features and beneficial effects may be identified in specific embodiments that do not embody all embodiments. Attached Figure Description

[0019] Figure 1 A schematic diagram illustrating an application scenario provided in an embodiment of this application; Figure 2 A flowchart illustrating a method for transmitting data in encrypted mode for 6G Radio, provided as an embodiment of this application; Figure 3 A schematic diagram of a transmission device for 6G Radio in encrypted mode provided in an embodiment of this application; Figure 4 This is a schematic diagram of a computing device provided in an embodiment of this application. Detailed Implementation

[0020] The terms "first," "second," and "third," etc., used in this application specification and accompanying drawings are used to distinguish different objects, not to limit a specific order.

[0021] In the embodiments of this application, the terms "exemplary" or "for example" are used to indicate that something is an example, illustration, or description. Any embodiment or design that is described as "exemplary" or "for example" in the embodiments of this application should not be construed as being more preferred or advantageous than other embodiments or design. Specifically, the use of the terms "exemplary" or "for example" is intended to present the relevant concepts in a specific manner.

[0022] To ensure clarity and conciseness in the description of the following embodiments, a brief introduction to the related technologies is given first: AP refers to the access point device in a wireless network. It is a physical node used to provide wireless clients with access to the wireless network and is responsible for transmitting and receiving wireless signals as well as bridging with wired networks.

[0023] AC refers to the centralized control and management device in a wireless network. It is used to centrally configure and distribute multiple APs within the network, monitor their status, and manage their radio frequency, thereby achieving unified operation and maintenance of the wireless network.

[0024] WPA (Wi-Fi Protected Access) is a wireless network security encryption protocol standard developed by the Wi-Fi Alliance. It is used to protect the security of wireless network data transmission and the reliability of access authentication. Currently, it includes three main versions: WPA, WPA2, and WPA3.

[0025] 6G Radio (6 Gigahertz Radio, 6GHz band RF module) refers to the RF hardware module inside the AP specifically designed for transmitting and receiving wireless signals in the 6GHz band. It includes an RF chip, power amplifier, and antenna interface, and its underlying driver firmware is forced to support only WPA3 encryption mode.

[0026] Currently, with the advancement of the IEEE 802.11be (Wi-Fi 7) standard, the 6GHz band, with its abundant spectrum resources and ultra-wide channel capabilities, has become a core resource for improving network throughput. The Wi-Fi Alliance stipulates that devices on the 6GHz band must be enabled with WPA3 encryption and are no longer compatible with WPA2 or earlier encryption methods.

[0027] In the existing AC+AP centralized network architecture, the AC acts as the central control node to uniformly distribute encryption configuration templates to each AP. Administrators usually configure the same encryption mode for all frequency bands under the same SSID, and due to the compatibility requirements of old terminals, they are accustomed to using mixed modes such as WPA / WPA2 Personal or WPA2 / WPA3 Personal.

[0028] In view of this, this application provides a method for transmitting encrypted mode for 6G Radio. Compared with the prior art, this method can identify the frequency band attribute of the Radio to be configured. When it is determined to be a 6G frequency band and the encryption configuration transmitted by the AC is non-compliant, it automatically maps the configuration to a compliant WPA3 encryption mode and then writes it into the 6G Radio driver layer, so that the 6G Radio can start normally, while the 2.4G frequency band and 5G frequency band still operate according to the original configuration transmitted by the AC.

[0029] To make the technical solution of this application clearer and easier to understand, the application scenarios of the technical solution of this application are described below with reference to the accompanying drawings. Figure 1 As shown, this figure is a schematic diagram of an application scenario provided by an embodiment of this application. It should be noted that... Figure 1This example uses a single access point (AP). In actual deployment scenarios, multiple APs can be included depending on network coverage requirements. The functions and configurations of each AP are similar to those of the previous one. Figure 1 The AP shown is the same as or similar to the one shown.

[0030] This application scenario is a wireless LAN deployment environment, which specifically includes: wireless controller AC, communication network, and access point AP.

[0031] As the centralized control and management node in the network, the AC establishes a connection with the APs through the communication network and is responsible for the unified configuration management and policy distribution of all APs in the network. The AC is configured with a wireless service template, which includes parameters such as SSID, encryption mode, password, and VLAN. The AC distributes this template to all APs under its management through the communication network.

[0032] The access point (AP) contains multiple radio interfaces, each corresponding to a different operating frequency band, including 2.4GHz, 5GHz, and 6GHz radios. The radio hardware for different frequency bands has different encryption constraints: the 2.4GHz and 5GHz radios are compatible with WPA2 and WPA3 encryption modes, while the 6GHz radio is subject to Wi-Fi Alliance mandatory compliance requirements, and its underlying driver firmware only supports WPA3 encryption mode, not WPA2 or earlier encryption methods.

[0033] In actual deployments, network administrators, for compatibility reasons with older terminals, typically configure a unified encryption mode such as WPA / WPA2 Personal or WPA2 / WPA3 Personal for all frequency bands on the AC side. After this unified configuration is distributed to each AP via the communication network, the AP needs to write the configuration into the driver layer of 2.4G Radio, 5G Radio, and 6G Radio respectively.

[0034] For 2.4G Radio and 5G Radio, the wireless service can be started normally due to hardware compatibility with the hybrid encryption mode issued by the AC. However, for 6G Radio, if the hybrid encryption mode issued by the AC is directly written into the driver layer, the driver firmware will refuse to execute due to the non-compliance of the encryption mode, causing 6G Radio to fail to start and resulting in a waste of 6GHz frequency band resources.

[0035] To address the aforementioned issues, the technical solution provided in this application deploys an encryption mode adaptation layer within the AP. This adaptation layer can identify the frequency band attribute of the radio to be configured before the configuration information issued by the AC is written into the Radio driver layer. If it determines that the frequency band is 6G and the encryption mode is non-compliant, it automatically maps the encryption mode to a compliant mode supported by 6G Radio, and then writes the corrected configuration information into the 6G Radio driver layer, thereby ensuring the normal startup of 6G Radio.

[0036] like Figure 1 As shown, after the AC sends configuration information to the AP via the communication network, the AP's configuration management module identifies the frequency band attribute of the Radio to be configured and performs differentiated processing based on the frequency band attribute: the 2.4G Radio and 5G Radio directly apply the original configuration sent by the AC, while the 6G Radio applies the corrected compliant configuration after adaptation layer processing. Finally, each frequency band Radio starts its wireless service according to its own effective encryption mode, providing wireless network access for terminal devices.

[0037] To make the technical solution of this application clearer and easier to understand, the following describes a method for transmitting encrypted 6G Radio in an embodiment of this application, in conjunction with the above application scenarios. For example... Figure 2 As shown, this figure is a flowchart of a method for transmitting data in encrypted mode for 6G Radio provided in an embodiment of this application. The method includes: S201. Receive wireless service configuration information from the AC or local configuration interface.

[0038] The local configuration interface refers to the local management page provided by the AP device. Network administrators can configure the AP directly through this local management page without going through the AC.

[0039] Wireless service configuration information refers to the set of parameters required for an AP to start its wireless service. Wireless service configuration information includes Service Set Identifier (SSID), encryption mode field, and VLAN field, etc.

[0040] The encryption mode field refers to the parameter in the wireless service configuration information used to identify the encryption method and authentication method. The value of the encryption mode field determines which security protocol the wireless network uses to protect data transmission.

[0041] The AC (Access Controller) distributes wireless service configuration information to the AP (Access Point) via the communication network. The AP's configuration management module then parses the received wireless service configuration information. Besides being distributed by the AC, the AP's configuration management module can also receive wireless service configuration information from the local configuration interface. Network administrators can directly configure wireless service information by logging into the AP's local management page; this configuration information is also received and parsed by the AP's configuration management module.

[0042] S202. Identify the frequency band attributes of the radio interface to be configured.

[0043] The radio frequency (RF) interface refers to the logical interface corresponding to the wireless network card inside the access point (AP). Each RF RF interface corresponds to one physical wireless network card, and each physical wireless network card is configured to operate on a specific frequency band. An AP contains multiple RF RF interfaces, namely RF RF RF interfaces for the 2.4 GHz band, RF RF RF interfaces for the 5 GHz band, and RF RF interfaces for the 6 GHz band.

[0044] Frequency band attributes refer to the frequency range in which the RF Radio interface operates. Frequency band attributes include 2.4 GHz, 5 GHz, and 6 GHz bands. RF Radios in the 2.4 GHz and 5 GHz bands are compatible with WPA2 and WPA3 encryption modes, while RF Radios in the 6 GHz band only support WPA3 encryption mode.

[0045] After obtaining the wireless service configuration information, the AP's configuration management module retrieves the interface identifier of the radio interface to be configured. Based on this interface identifier, the AP's configuration management module queries the radio interface's configuration information and reads its frequency band attribute. The AP's configuration management module then identifies whether the radio interface operates in the 2.4GHz, 5GHz, or 6GHz band.

[0046] If the AP's configuration management module identifies that the frequency band attribute of the radio interface to be configured is 2.4G or 5G, the AP's configuration management module will directly write the wireless service configuration information into the driver layer of the radio, and the radio will start the wireless service according to the original encryption mode issued by the AC.

[0047] If the AP's configuration management module identifies that the frequency band attribute of the radio interface to be configured is 6G, the AP's configuration management module will enter the encryption mode compliance check process, i.e., execute S203.

[0048] S203. When the frequency band attribute is 6G frequency band, compare the encryption mode field in the wireless service configuration information with the preset 6G Radio encryption whitelist.

[0049] The default 6G Radio encryption whitelist refers to a set of encryption modes pre-stored in the AP. Each encryption mode in the 6G Radio encryption whitelist is a compliant encryption mode supported by the 6G band radio frequency hardware driver. The default 6G Radio encryption whitelist includes: WPA3 Personal mode, WPA3 Enterprise mode, and OWE (Opportunistic Wireless Encryption) mode.

[0050] WPA3 Personal mode refers to a personal version of WPA3 encryption mode that uses pre-shared key authentication and SAE (Simultaneous Authentication of Equals) handshake protocol. WPA3 Personal mode is suitable for home and small office networks.

[0051] WPA3 Enterprise mode refers to the WPA3 encryption mode that uses an 802.1X authentication server for enterprise-level authentication. WPA3 Enterprise mode is suitable for large enterprise and government agency networks.

[0052] OWE mode refers to Opportunistic Wireless Encryption Mode. OWE mode automatically establishes an independent encrypted tunnel for each terminal device in an open network, and OWE mode does not require pre-shared passwords.

[0053] After identifying that the frequency band attribute of the Radio interface to be configured is the 6GHz band, the AP's configuration management module extracts the encryption mode field from the radio service configuration information received in S201. The AP's configuration management module then reads the locally stored preset 6GHz Radio encryption whitelist. The AP's configuration management module matches the extracted encryption mode field against each encryption mode in the 6GHz Radio encryption whitelist one by one. If the encryption mode field successfully matches a particular encryption mode in the whitelist, the AP's configuration management module determines that the encryption mode field belongs to the 6GHz Radio encryption whitelist. If the encryption mode field fails to match any encryption mode in the whitelist, the AP's configuration management module determines that the encryption mode field does not belong to the 6GHz Radio encryption whitelist.

[0054] If the AP's configuration management module determines that the encryption mode field belongs to the 6G Radio encryption whitelist, the AP's configuration management module will directly write the wireless service configuration information into the driver layer of the 6G Radio, and the 6G Radio will start the wireless service according to the original encryption mode issued by the AC.

[0055] If the AP's configuration management module determines that the encryption mode field does not belong to the 6G Radio encryption whitelist, the AP's configuration management module will trigger the encryption mode correction process, i.e., execute S204.

[0056] S204. If the encryption mode field is not in the 6G Radio encryption whitelist, then the wireless service configuration information is intercepted, and the encryption mode field is mapped to the corresponding target encryption mode according to the preset target mapping rules.

[0057] Interception refers to the behavior of the AP's configuration management module preventing wireless service configuration information from being directly written to the radio driver layer along the original path.

[0058] The preset target mapping rule refers to the encryption mode conversion relationship table stored in the AP in advance. This conversion relationship table is used to convert encryption mode fields that are not in the 6G Radio encryption whitelist into target encryption modes that are in the 6G Radio encryption whitelist.

[0059] If the encryption mode field is not in the 6G Radio encryption whitelist, the direct writing of the wireless service configuration information to the driver layer of the radio to be configured will be blocked, and the wireless service configuration information will be temporarily stored in the AP's cache.

[0060] After determining in S203 that the encryption mode field is not in the 6G Radio encryption whitelist, the AP's configuration management module performs an interception operation. The AP's configuration management module blocks the direct writing of wireless service configuration information into the data path of the Radio driver layer to be configured. Instead, it temporarily stores the wireless service configuration information in the AP's cache. Through this interception operation, the original non-compliant wireless service configuration information is prevented from entering the 6G Radio driver layer, avoiding the situation where the driver layer refuses to start due to receiving a non-compliant encryption mode.

[0061] The AP's configuration management module reads the preset target mapping rules from the AP's local storage medium. The AP's configuration management module takes the encryption mode field extracted in S203 as input and searches for the target encryption mode corresponding to that encryption mode field in the target mapping rules.

[0062] The target mapping rules define the following correspondence: When the encryption mode field is WPA / WPA2 Personal mode, it is mapped to WPA3 Personal mode. WPA / WPA2 Personal mode refers to a hybrid personal encryption mode that supports both WPA Personal and WPA2 Personal authentication methods. WPA3 Personal mode refers to a personal version of WPA3 encryption mode using the SAE handshake protocol.

[0063] When the encryption mode field is WPA2 / WPA3 Personal mode, the encryption mode field is mapped to WPA3 Personal mode. WPA2 / WPA3 Personal mode refers to a hybrid transitional personal encryption mode that simultaneously supports both WPA2 Personal and WPA3 Personal authentication methods.

[0064] When the encryption mode field is WPA / WPA2 Enterprise mode, it is mapped to WPA3 Enterprise mode. WPA / WPA2 Enterprise mode refers to a hybrid enterprise-level encryption mode that supports both WPA Enterprise and WPA2 Enterprise authentication methods. WPA3 Enterprise mode refers to WPA3 encryption mode that uses an 802.1X authentication server for enterprise-level authentication.

[0065] When the encryption mode field is WPA2 / WPA3 Enterprise mode, the encryption mode field is mapped to WPA3 Enterprise mode. WPA2 / WPA3 Enterprise mode refers to a hybrid transitional enterprise version encryption mode that simultaneously supports both WPA2 Enterprise and WPA3 Enterprise authentication methods.

[0066] When the encryption mode field is set to Open mode, it is mapped to OWE mode. Open mode refers to an open wireless network mode that does not employ any encryption or authentication. OWE mode automatically establishes an independent encrypted tunnel for each terminal device.

[0067] Through the mapping operation described above, the AP's configuration management module converts non-compliant encryption mode fields into compliant target encryption modes. The target encryption mode belongs to the preset 6G Radio encryption whitelist.

[0068] The AP's configuration management module prevents non-compliant configurations from entering the 6G Radio driver layer through interception, thus avoiding 6G Radio startup failures due to configuration errors. The AP's configuration management module also uses target mapping rules to convert non-compliant encryption mode fields into compliant target encryption modes, allowing configuration information that would otherwise be rejected by the 6G Radio driver layer to be accepted. These steps together achieve the encryption mode conversion of non-compliant encryption modes, enabling 6G Radio to start wireless services normally in compliant WPA3 mode.

[0069] S205. Replace the encryption mode field with the target encryption mode, and merge the replaced encryption mode field with the unencrypted service configuration field in the wireless service configuration information to obtain the corrected wireless service configuration information.

[0070] Merging refers to the operation of combining the replaced encryption mode field with other unmodified fields in the wireless service configuration information to form a complete set of wireless service configuration information. Unencrypted service configuration fields in the wireless service configuration information include the SSID field, VLAN field, etc.

[0071] After obtaining the target encryption mode mapped from S204, the AP's configuration management module reads the wireless service configuration information temporarily stored in S204 from the AP's cache. The AP's configuration management module locates the encryption mode field within this wireless service configuration information. The AP's configuration management module then replaces the value of the encryption mode field from the original non-compliant encryption mode with the target encryption mode.

[0072] After the replacement operation is completed, the AP's configuration management module retrieves the unencrypted service configuration field from the wireless service configuration information. The AP's configuration management module then merges the replaced encryption mode field with the unencrypted service configuration field. This merging operation generates a complete and corrected wireless service configuration information. In this corrected wireless service configuration information, the encryption mode field has been replaced with the target encryption mode, while the unencrypted service configuration field remains consistent with the original wireless service configuration information and has not been modified.

[0073] The AP's configuration management module corrected the encryption mode field from a non-compliant value to a compliant value through a replacement operation. The AP's configuration management module also retained the unencrypted service configuration fields from the original wireless service configuration information through a merging operation. This ensures that the corrected wireless service configuration information meets the 6GHz band encryption compliance requirements while fully preserving other network parameters configured by the network administrator on the AC side. These steps avoid the extra work of administrators creating separate configuration templates for the 6GHz band.

[0074] S206. Write the corrected wireless service configuration information into the driver layer of the radio to be configured.

[0075] The driver layer is the software interface layer between the radio frequency (RF) hardware device and the operating system. The driver layer is responsible for receiving configuration parameters from the upper layer and converting the configuration parameters into hardware register instructions, thereby controlling the RF RF hardware to start the wireless service according to the specified encryption mode.

[0076] After the AP's configuration management module obtains the corrected wireless service configuration information generated in S205, it passes the corrected wireless service configuration information to the driver layer of the radio to be configured. This radio is a 6GHz band radio. Upon receiving the corrected wireless service configuration information, the driver layer parses it. The driver layer reads the target encryption mode from the corrected wireless service configuration information. The driver layer configures the encryption-related registers of the radio hardware according to the target encryption mode. The driver layer calls the radio hardware's transmit interface, causing the 6GHz band radio to broadcast a beacon frame. This beacon frame carries a declaration that the radio supports the target encryption mode. At this point, the 6GHz band radio normally starts the wireless service according to the target encryption mode, waiting for connection requests from terminal devices.

[0077] The AP's configuration management module writes the corrected wireless service configuration information into the 6G Radio driver layer, enabling the 6G Radio driver layer to correctly parse and load the compliant encryption configuration. The 6G Radio successfully starts the wireless service according to the target encryption mode, avoiding the waste of 6G frequency band resources due to non-compliant encryption configurations issued by the AC.

[0078] In some embodiments, configuration result information is returned to the AC, which carries an identifier of the encryption mode for the radio frequency to be configured.

[0079] Specifically, the configuration result information refers to the configuration execution result data fed back by the AP to the AC. This configuration result information is used to inform the AC of the processing result of the wireless service configuration information on the AP side.

[0080] The encryption mode identifier is a tag information used to identify the encryption mode that the radio frequency radio is ultimately in effect. This encryption mode identifier is used by the AC side to know the encryption method currently being used by the radio frequency radio.

[0081] After writing the corrected wireless service configuration information into the driver layer of the radio to be configured, the AP's configuration management module obtains the actual effective encryption mode of the radio. This actual effective encryption mode is the target encryption mode mapped in S204. The AP's configuration management module uses this target encryption mode as an encryption mode identifier and encapsulates it into the configuration result information. The AP's configuration management module then sends the configuration result information to the AC via the communication network.

[0082] After receiving the configuration result information, the AC parses the encryption mode identifier in the configuration result information to obtain the actual effective encryption mode of the radio to be configured in the AP, which is WPA3 Personal mode, WPA3 Enterprise mode, or OWE mode. The AC displays the encryption mode identifier in the AC's network management interface. Network administrators can see through the AC's network management interface that the radio is actually running in WPA3 encryption mode, while the encryption mode recorded in the original configuration template on the AC side is still a mixed mode such as WPA / WPA2 Personal or WPA2 / WPA3 Personal. This method allows the AC side to know the actual execution status of the encryption configuration on the AP side, which is convenient for network administrators to audit and monitor the encryption status of all frequency bands across the network.

[0083] It should be noted that this step is optional. In some embodiments, the configuration result information returned by the AP's configuration management module to the AC does not include the encryption mode identifier; it only returns a configuration success status. The AC side does not need to be aware of the AP's modification of the encryption configuration. Network administrators can continue with their existing management practices without needing to understand the details of the modified 6GHz band encryption mode.

[0084] The AP's configuration management module returns configuration result information carrying an encryption mode identifier to the AC, enabling the AC to know the actual encryption mode of the 6G radio. This method provides network administrators with visibility into the actual encryption status without altering the AC's original configuration template. This method also supports returning only a configuration success status to the AC to meet the needs of different management scenarios.

[0085] In some embodiments, the driver layer of the radio to be configured starts the wireless service of the radio to be configured according to the target encryption mode in the modified wireless service configuration information.

[0086] Specifically, wireless service refers to the process by which radio frequency (RF) announces its existence to terminal devices by broadcasting beacon frames and accepts association requests from terminal devices.

[0087] After receiving the corrected wireless service configuration information, the driver layer of the radio to be configured parses the corrected information. The driver layer reads the target encryption mode field from the corrected information. Based on the value of the target encryption mode field, the driver layer configures the encryption-related parameters in the radio hardware. The driver layer configures the key management suite in the radio hardware. For WPA3 Personal mode, the driver layer configures the key management suite to SAE and the encryption algorithm to GCMP-256. For WPA3 Enterprise mode, the driver layer configures the key management suite to 802.1X and the encryption algorithm to GCMP-256. For OWE mode, the driver layer configures the encryption algorithm to GCMP-256 and automatically establishes an independent encrypted tunnel for each terminal device without requiring a pre-shared password.

[0088] After the driver layer completes the above parameter configuration, it calls the startup interface of the RF Radio hardware. The RF Radio hardware starts the wireless service according to the parameters configured by the driver layer. The RF Radio begins broadcasting beacon frames. These beacon frames carry announcement information indicating that the RF Radio supports the target encryption mode. After scanning the beacon frame of the RF Radio, the terminal device initiates an association request to the RF Radio based on the encryption mode information announced in the beacon frame. The terminal device and the RF Radio complete a handshake negotiation according to the target encryption mode and establish an encrypted connection.

[0089] At this point, the 6G band radio to be configured has started its wireless service normally according to the corrected target encryption mode, providing secure wireless network access for terminal devices.

[0090] The driver layer initiates the radio service of the RF Radio based on the target encryption mode in the corrected radio service configuration information, enabling the 6GHz band RF Radio to finally function normally in a compliant WPA3 encryption mode. This step completes the entire process from the AC issuing the original configuration to the normal startup of the 6GHz Radio, ensuring the efficient utilization of 6GHz band resources.

[0091] Based on the above, this application achieves differentiated deployment by identifying frequency band attributes, allowing the 2.4G and 5G bands to retain the original AC configuration while the 6G band independently performs compliance checks, thus meeting different encryption requirements for different frequency bands under the same SSID. This application maps non-compliant encryption mode fields to target encryption modes belonging to the 6G Radio encryption whitelist, enabling 6G Radio to start normally in compliant WPA3 mode, avoiding wasted frequency band resources due to configuration errors and improving the reliability of frequency band resource adaptation. While correcting the encryption mode fields, this application retains the non-encrypted service configuration fields in the wireless service configuration information. Network administrators do not need to create separate configuration templates for the 6G band or upgrade the AC software version, reducing network change risks and maintenance complexity.

[0092] The above text combined Figures 1 to 2 The encrypted transmission method for 6G Radio provided in this application embodiment has been described in detail. The apparatus and device provided in this application embodiment will be described below with reference to the accompanying drawings.

[0093] This application also provides a transmission device for encrypted mode of 6G Radio, such as... Figure 3 As shown in the figure, this is a schematic diagram of a transmission device for 6G Radio in encrypted mode according to an embodiment of this application. The device includes: The receiving module 301 is used to receive wireless service configuration information from the AC or the local configuration interface; The identification module 302 is used to identify the frequency band attribute of the radio interface to be configured. The comparison module 303 is used to compare the encryption mode field in the wireless service configuration information with a preset 6G Radio encryption whitelist when the frequency band attribute is a 6G frequency band; if the encryption mode field does not belong to the 6G Radio encryption whitelist, the wireless service configuration information is intercepted, and the encryption mode field is mapped to the corresponding target encryption mode according to the preset target mapping rule, wherein the target encryption mode belongs to the preset 6G Radio encryption whitelist. The correction module 304 is used to replace the encryption mode field with the target encryption mode, and merge the replaced encryption mode field with the unencrypted service configuration field in the wireless service configuration information to obtain the corrected wireless service configuration information. The writing module 305 is used to write the corrected wireless service configuration information into the driver layer of the radio to be configured.

[0094] In some possible implementations, the comparison module 303 is further configured to directly write the wireless service configuration information into the driver layer of the radio to be configured when the frequency band attribute is a 2.4G band or a 5G band.

[0095] In some possible implementations, the comparison module 303 is specifically used to map the encryption mode field to WPA3 Personal mode when the encryption mode field is WPA / WPA2 Personal mode; to map the encryption mode field to WPA3 Personal mode when the encryption mode field is WPA2 / WPA3 Personal mode; to map the encryption mode field to WPA3 Enterprise mode when the encryption mode field is WPA / WPA2 Enterprise mode; to map the encryption mode field to WPA3 Enterprise mode when the encryption mode field is WPA2 / WPA3 Enterprise mode; and to map the encryption mode field to OWE mode when the encryption mode field is Open mode.

[0096] In some possible implementations, the device further includes: The sending module is used to return configuration result information to the AC, the configuration result information carrying the encryption mode identifier of the radio frequency to be configured.

[0097] In some possible implementations, the device further includes: A startup module is used by the driver layer of the radio to be configured to start the wireless service of the radio to be configured according to the target encryption mode in the modified wireless service configuration information.

[0098] In some possible implementations, the comparison module 303 is specifically used to block the direct writing of the wireless service configuration information into the driver layer of the radio to be configured, and to temporarily store the wireless service configuration information in the AP's cache.

[0099] In some possible implementations, the preset 6G Radio encryption whitelist includes: WPA3 Personal mode, WPA3 Enterprise mode, and OWE mode.

[0100] The encrypted transmission device for 6G Radio according to the embodiments of this application can correspondingly execute the method described in the embodiments of this application, and the other operations and / or functions of each module / unit of the encrypted transmission device for 6G Radio are respectively for implementing Figure 2For the sake of brevity, the corresponding processes of each method in the illustrated embodiments will not be described in detail here.

[0101] This application also provides a computing device. For example... Figure 4 As shown in the figure, this is a schematic diagram of a computing device provided in an embodiment of this application. The computing device 400 includes a bus 401, a processor 402, a communication interface 403, and a memory 404. The processor 402, the memory 404, and the communication interface 403 communicate with each other via the bus 401.

[0102] Bus 401 can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be categorized as address buses, data buses, control buses, etc. For ease of representation, Figure 4 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0103] Processor 402 can be any one or more of the following processors: central processing unit (CPU), graphics processing unit (GPU), microprocessor (MP), or digital signal processor (DSP).

[0104] The communication interface 403 is used for communication with external devices. For example, if the computing device is a first switch, the communication interface 403 can be used for communication between the first switch and a first user terminal, or for communication between the first switch and a second switch.

[0105] Memory 404 may include volatile memory, such as random access memory (RAM). Memory 404 may also include non-volatile memory, such as read-only memory (ROM), flash memory, hard disk drive (HDD), or solid state drive (SSD).

[0106] The memory 404 stores executable code, which the processor 402 executes to perform the aforementioned encrypted delivery method for 6G Radio.

[0107] Specifically, in achieving Figure 3 In the case of the illustrated embodiment, and Figure 3 When the modules or units of the encrypted transmission device for 6G Radio described in the embodiments are implemented in software, the execution... Figure 3 The software or program code required for the functions of each module / unit can be partially or wholly stored in memory 404. Processor 402 executes the program code corresponding to each unit stored in memory 404, and executes the aforementioned encryption mode transmission method for 6G Radio.

[0108] This application also provides a computer-readable storage medium. The computer-readable storage medium can be any available medium that a computing device can store, or a data storage device such as a data center containing one or more available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid-state drive). The computer-readable storage medium includes instructions that instruct the computing device to execute the above-described encryption mode transmission method for 6G Radio.

[0109] This application also provides a computer program product comprising one or more computer instructions. When the computer instructions are loaded and executed on a computing device, all or part of the processes or functions described in this application are generated.

[0110] The computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions may be transmitted from one website, computer, or data center to another website, computer, or data center via wired (e.g., coaxial cable, fiber optic) or wireless (e.g., infrared, wireless, microwave, etc.) means.

[0111] When the computer program product is executed by a computer, the computer executes any of the aforementioned methods of the encrypted transmission method for 6G Radio. The computer program product can be a software installation package; when any of the aforementioned methods of the encrypted transmission method for 6G Radio needs to be used, the computer program product can be downloaded and executed on the computer.

[0112] The descriptions of the processes or structures corresponding to the above figures each have their own emphasis. For parts of a process or structure that are not described in detail, please refer to the relevant descriptions of other processes or structures.

[0113] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any changes or substitutions within the technical scope disclosed in this application should be covered within the scope of protection of this application.

Claims

1. A method for transmitting encrypted mode for 6G Radio, characterized in that, The method includes: Receive wireless service configuration information from the AC or local configuration interface; Identify the frequency band attributes of the radio interface to be configured; When the frequency band attribute is 6G frequency band, the encryption mode field in the wireless service configuration information is compared with the preset 6GRadio encryption whitelist; If the encryption mode field does not belong to the 6G Radio encryption whitelist, the wireless service configuration information is intercepted, and the encryption mode field is mapped to the corresponding target encryption mode according to the preset target mapping rule. The target encryption mode belongs to the preset 6G Radio encryption whitelist. Replace the encryption mode field with the target encryption mode, and merge the replaced encryption mode field with the unencrypted service configuration field in the wireless service configuration information to obtain the corrected wireless service configuration information. The corrected wireless service configuration information is written into the driver layer of the radio to be configured.

2. The method according to claim 1, characterized in that, The method further includes: When the frequency band attribute is 2.4G or 5G, the wireless service configuration information is directly written into the driver layer of the radio to be configured.

3. The method according to claim 1, characterized in that, The step of mapping the encryption mode field to the corresponding target encryption mode according to the preset target mapping rule includes: When the encryption mode field is WPA / WPA2 Personal mode, the encryption mode field is mapped to WPA3 Personal mode; When the encryption mode field is WPA2 / WPA3 Personal mode, the encryption mode field is mapped to WPA3 Personal mode; When the encryption mode field is WPA / WPA2 Enterprise mode, the encryption mode field is mapped to WPA3 Enterprise mode; When the encryption mode field is WPA2 / WPA3 Enterprise mode, the encryption mode field is mapped to WPA3 Enterprise mode; When the encryption mode field is in Open mode, the encryption mode field is mapped to OWE mode.

4. The method according to claim 1, characterized in that, The method further includes: The configuration result information is returned to the AC, and the configuration result information carries the encryption mode identifier of the radio frequency to be configured.

5. The method according to claim 1, characterized in that, The method further includes: The driver layer of the radio to be configured starts the wireless service of the radio to be configured according to the target encryption mode in the modified wireless service configuration information.

6. The method according to claim 1, characterized in that, Intercepting the wireless service configuration information includes: The direct writing of the wireless service configuration information into the driver layer of the radio to be configured is blocked, and the wireless service configuration information is temporarily stored in the AP's cache.

7. The method according to claim 1, characterized in that, The preset 6G Radio encryption whitelist includes: WPA3 Personal mode, WPA3 Enterprise mode, and OWE mode.

8. A transmission device for encrypted mode for 6G Radio, characterized in that, The device includes: The receiving module is used to receive wireless service configuration information from the AC or the local configuration interface; The identification module is used to identify the frequency band attributes of the radio interface to be configured. The comparison module is used to compare the encryption mode field in the wireless service configuration information with a preset 6G Radio encryption whitelist when the frequency band attribute is 6G frequency band; if the encryption mode field does not belong to the 6G Radio encryption whitelist, the wireless service configuration information is intercepted, and the encryption mode field is mapped to the corresponding target encryption mode according to the preset target mapping rule, wherein the target encryption mode belongs to the preset 6G Radio encryption whitelist. The correction module is used to replace the encryption mode field with the target encryption mode, and merge the replaced encryption mode field with the unencrypted service configuration field in the wireless service configuration information to obtain the corrected wireless service configuration information. The writing module is used to write the corrected wireless service configuration information into the driver layer of the radio to be configured.

9. A computing device, characterized in that, Including memory and processor; The memory stores one or more computer programs, the one or more computer programs including instructions; when the instructions are executed by the processor, the computing device performs the method as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium is used to store a computer program for performing the method as described in any one of claims 1 to 7.

Images