METHOD AND DEVICE FOR PROVIDING A RELAY FOR USE IN A WIRELESS CONFIGURATION

Abstract

A relay device is disclosed, wherein the relay device is configured to cooperate with a configurator according to a configuration protocol that enables the configuration of wireless networks and at least one wireless communication device for connection to a wireless network, wherein the configuration protocol uses a wired and / or wireless network connection, wherein the relay device is configured to communicate with the at least one wireless communication device via a transceiver according to a wireless communication protocol, and the relay device comprises a processor configured to provide the configurator with a specification of a transceiver configuration via the configuration connection.A configurator device can receive the configuration specification and, based on the specification and information about an enrollee device, perform one or both of the following: selecting a suitable relay and issuing a command to the relay device to change the transceiver's configuration.

Description

AREA OF INVENTION

[0001] The invention relates to a method and a device for providing and configuring a wireless network. BACKGROUND OF THE INVENTION

[0002] Wireless devices can securely connect to a wireless network using a configuration protocol, such as the Device Provisioning Protocol (DPP, see [DPP]). This protocol configures the wireless communication device, for example, to communicate according to a wireless communication protocol like WLAN, using a DPP configurator device, to gain access to a wireless network (identified by a Service Set Identifier, SSID) provided by a network access device, such as a WLAN access point (AP). A device, such as a wireless device, attempting to gain access to a network is called an enrollee (enrollment device) or sometimes a commissionee (commissioning device), and in the case of DPP, a DPP enrollee (DPP enrollee).An enrollee may need to be configured with security credentials, for example, to gain access to a network. A device used to configure the enrollee so that it gains access is called a configurator or sometimes a commissioner. It should be noted that in this application, the acronym DPP refers to every version of DPP, such as DPP R1, DPP R2, and all subsequent versions. Recently, the Wi-Fi Alliance decided to replace the name DPP with Wi-Fi Easy Connect. These names are used interchangeably in this text. It is also understood that the devices and methods disclosed herein are applicable to other commissioning protocols (e.g., Matter Commissionee, see [Matter]) and other radio technologies, such as those based on IEEE 802.15.4, cellular technologies, or others.

[0003] The DPP specification defines special WLAN frames for exchanging DPP messages. Almost all DPP messages use 802.11 Public Action Frames, with the exception of DPP Configuration Request / Response Frames, which have a similar header format but are exchanged using vendor-specific Generic Advertisement Service (GAS) Public Action Frames. Using DPP with these specific WLAN frames is referred to in this text as "DPP over WLAN." Another commissioning protocol may also use specific WLAN frames similar to those of DPP, but with the appropriate differences; these are called "commissioning over WLAN" frames. These specific WLAN frames can be sent from one WLAN device to any other WLAN device within radio range (RF range). It is important to note that these specific WLAN frames do not require the sending and receiving devices to be connected to an access point (AP).It is also not necessary for either device to be an access point (AP). This contrasts with transmitting TCP / IP packets over Wi-Fi, where a Wi-Fi device must first connect to an AP and establish a connection to the network (or SSID) provided by the AP. TCP / IP packets are the packets used by most internet traffic, such as when browsing the web. TCP / IP packets can be addressed to any IP address and travel from device to device via many hops. Hops are the connections between these devices. These connections can use a link-layer technology such as Ethernet or Wi-Fi. In other words, the specific Wi-Fi frames are messages at the so-called link layer or layer 2 messages, and the TCP / IP packets are at the network layer or layer 2 messages.Layer 3 of the ISO-Open Systems Interconnection (OSI) network model is transmitted.

[0004] Implementing DPP protocols requires access to low-level software on a Wi-Fi-enabled device. While this might not be a problem for a device running an open operating system like Linux, accessing this low-level software via a smartphone app is very difficult or impossible. This can complicate the use of such a device as a network access point (e.g., a soft AP) or as a configurator with a commissioning protocol like DPP.

[0005] In the present disclosure, the term “Configurator” can be replaced by “Commissioning Device”. BRIEF SUMMARY OF THE INVENTION

[0006] The inventor recognized that the network configuration, as described above, is problematic insofar as a configurator accessing the wireless network via a relay is subject to certain access restrictions.

[0007] The object of the invention is to provide methods and devices for configuring a network that alleviate at least one of the problems mentioned above.

[0008] According to one embodiment, a relay device is provided, wherein the relay device is configured to cooperate with a configurator according to a configuration protocol that enables the configuration of at least one wireless communication device for connection to a wireless network, wherein the configuration protocol uses the wired and / or the wireless configuration link, and wherein the relay device is configured to communicate with the at least one wireless communication device via a transceiver according to a wireless communication protocol. the relay device comprises a processor configured to - Providing a configuration specification for the transceiver to the Configurator via the configuration connection.

[0009] Furthermore, a relay device is provided, wherein the relay device is configured to cooperate with a configurator according to a configuration protocol that enables at least one wireless communication device to connect to a wireless network, wherein the configuration protocol uses the wired and / or wireless configuration link, and wherein the relay device is configured to communicate with the at least one wireless communication device via a transceiver according to a wireless communication protocol. the relay device comprising a relay device set up by the processor, which is configured to Receiving a configuration specification from the configurator via the configuration link, which is to be used by the transceiver to operate the wireless communication protocol between the relay device and the at least one wireless communication device.

[0010] The configurator can also be set up to configure wireless networks.

[0011] In many cases, relay devices can be coupled to transceivers that are already configured for a wireless communication network and are already set to use specific channels and / or frequencies. New Enrollee devices may not receive on these channels / frequencies. In such a situation, the configuration attempt will fail unless the transceiver used by the relay device changes its channel / frequency, because the Enrollee device will eventually stop responding to a message sent via the transceiver.

[0012] DPP relays are often part of an access point (AP). The primary goal of an AP is to achieve the highest possible throughput for its associated wireless access points (STAs). Therefore, an AP aims to keep each of its wireless devices on the same channel (an AP can have more than one wireless device, each operating on a different channel in the same or a different frequency band).

[0013] If the Configurator knows the channels on which the Enrollee receives, e.g., from the channel ABNF rule in the DPP bootstrapping URI (section 5.2.1 of [DPP]), it wants to select the relay device that actually uses at least one of the channels on which the Enrollee receives. However, the Configurator does not know which channel(s) the radio device(s) of the relay device uses.

[0014] By receiving configuration information, the configurator may be able to select a relay device paired with a suitably configured transceiver (if multiple options are available for a relay device transceiver). If the transceiver control function allows, the configurator may also be able to modify the transceiver's configuration to match the Enrollee device.

[0015] According to one embodiment, the processor (i.e., the relay device) is configured to convert messages between a first configuration protocol format and a second configuration protocol format, the second format possibly using the wireless communication protocol. This allows configurators that only use an IP-based protocol to configure an Enrollee for a wireless communication protocol.

[0016] According to one embodiment, specifying a configuration includes specifying at least one parameter value, wherein the at least one parameter is at least one of a radio channel and a frequency, and the parameter value corresponds to a setting of the transceiver. The configurator can then compare the channel and / or frequency settings of the transceiver with those of the Enrollee device or set the channels and / or frequency of the transceiver and the Enrollee device to the same value.

[0017] According to one embodiment, the information is received using the CAPWAP protocol (Control and Provisioning of Wireless Access Points).

[0018] Since the processor is configured to receive a configuration instruction, the instruction comprising a setting for the transceiver, and in response to the instruction to cause the transceiver to use the setting for communication using the wireless communication protocol, the configurator can cause and ensure that the transceiver uses a channel / frequency on which the Enrollee device receives.

[0019] According to one embodiment, the information is provided using an mDNS announcement. This makes it readily available to configurators that use IP-based protocols.

[0020] According to one embodiment, the information is provided using an access point configuration protocol, such as the CAPWAP (Control and Provisioning of Wireless Access Points) protocol according to RFC 5415, which can be extended for this purpose.

[0021] According to one embodiment, the configuration protocol is the Device Provisioning Protocol (DPP) over TCP / IP.

[0022] According to another embodiment, the configuration protocol is the Matter Commissioning Protocol over TCP / IP.

[0023] According to one embodiment, a network access device is provided, the network access device comprising a transceiver for wireless communication with the wireless communication device according to a wireless communication protocol and comprising at least one relay device.

[0024] According to one embodiment, a configurator is provided which is configured to cooperate with the relay device according to a configuration protocol which enables the configurator to configure at least one wireless communication device for connection to a wireless network, wherein the configurator includes a communication unit which is configured to communicate according to a wired and / or wireless network communication protocol; and A processor system configured to establish a configuration connection to the relay device via the communication unit in accordance with the wired and / or wireless network communication protocol, wherein the configurator is configured, while cooperating with the relay device, to perform at least one of the following actions selected from the group: receiving a specification of a transceiver configuration from the relay device and sending a specification of a configuration via the configuration connection to the relay device, which the relay device is to use to operate the wireless communication protocol between the relay device and the at least one wireless communication device acting as an enrollee device, and receiving information from the at least one wireless communication device acting as an enrollee device.wherein the Enrollee device includes an Enrollee transceiver configured for wireless communication using the wireless communication protocol of the relay device, wherein the information includes a specification of a parameter value of the Enrollee transceiver.

[0025] According to one embodiment, the configurator can be configured to receive the information via an out-of-band channel.

[0026] According to one embodiment, the configurator is configured to select a relay device from a plurality of relay devices, the selection being based on a match between the specification of a configuration of the Enrollee transceiver and the specification of a configuration of the transceiver.

[0027] According to one embodiment, the processor is configured to send a command to the network access device via the configuration link, the command comprising a parameter value for the network access device's transceiver.

[0028] According to one embodiment, the configurator is configured to participate in the configuration of a wireless communication device while cooperating with the relay device via the configuration link, in order to enable the assignment of the wireless communication device to the wireless network.

[0029] According to one embodiment, a method for use in a relay device is provided, wherein the relay device is configured to cooperate with a configurator according to a configuration protocol that enables the configuration of wireless networks and a wireless communication device for connection to a wireless network, and is configured to communicate with a network access device, wherein the network access device has a transceiver and is configured to communicate with the wireless communication device via the transceiver according to a wireless communication protocol, the method comprising establishing a configuration connection according to the network communication protocol by connecting the configurator to the configuration network, performing at least one,selected from the group providing a specification of a parameter of the transceiver to the configurator via the configuration network and receiving a specification of a configuration from the configurator via the configuration link, which is to be used by the transceiver to operate the wireless communication protocol between the relay device and the at least one wireless communication device, and providing a communication link with the wireless communication device to the configurator.

[0030] According to one embodiment, the method includes converting messages between a first format of the configuration protocol and a second format of the wireless communication protocol.

[0031] According to one embodiment, the provision of the transceiver configuration specification to the Configurator is carried out using an mDNS announcement.

[0032] According to one embodiment, the provision of the transceiver configuration specification to the configurator is carried out using an access point configuration protocol, such as the CAPWAP (Control and Provisioning of Wireless Access Points) protocol.

[0033] According to one embodiment, the method includes receiving a command from the configurator to change a parameter of the transceiver to a value provided by the configurator.

[0034] According to one embodiment, a method for use in a configurator device as described herein is provided, wherein the configurator is configured to cooperate with a relay device as described herein and to configure a wireless communication device, the wireless communication device comprising a wireless device transceiver configured to communicate with the relay device using a wireless communication protocol, the method comprising receiving a first specification of a parameter of the wireless device transceiver, performing at least one, selected from the group, receiving a second specification from the relay device, the specification comprising a specification of a parameter of the transceiver, and sending a command to the relay device to cause the network access device toto adjust a parameter of the transceiver according to a value provided by the configurator.

[0035] According to one embodiment, a method for use in a configurator device as described herein is also provided, wherein the configurator is configured to cooperate with a relay device as described herein and to configure a wireless communication device, the wireless communication device comprising a wireless device transceiver configured to communicate with the relay device using a wireless communication protocol, the method comprising receiving a first specification from a plurality of relay devices, the specification comprising a specification of a parameter of the transceiver, receiving a second specification of a parameter of the wireless device transceiver via an out-of-band channel, and selecting a relay device according to a match between the first and the second specification.which is to be used to configure the wireless communication device.

[0036] According to one embodiment, the second piece of information can be received via an out-of-band channel.

[0037] According to one embodiment, a configurator is provided which is configured to cooperate with the relay device as described herein according to a configuration protocol which enables the configurator to configure at least one wireless communication device for connection to a wireless network, wherein the configurator comprises a communication unit which is configured to communicate according to a network communication protocol; and a processor system which is configured to establish a configuration connection to the relay device via the communication unit according to the wired and / or wireless network communication protocol, wherein the configurator is configured, while cooperating with the relay device, to execute at least oneselected from the group receiving a specification of a transceiver configuration from the relay device and sending a command via the configuration link to the relay device, wherein the command includes a parameter value for the network access device's transceiver, and communicating with the at least one wireless communication device via the transceiver, and receiving information from the at least one wireless communication device acting as an enrollee device, wherein the enrollee device has an enrollee transceiver configured for wireless communication using the relay device's wireless communication protocol, wherein the information includes a specification of a parameter value of the enrollee transceiver.

[0038] According to one embodiment, the method includes sending a command to the network access device to cause the network access device to adjust a parameter of the transceiver according to a value provided by the configurator.

[0039] According to one embodiment, the provisioning protocol is the Device Provisioning Protocol (DPP) over TCP / IP.

[0040] From another perspective, the configuration protocol is the Matter Commissioning Protocol over TCP / IP.

[0041] According to one aspect, a computer program product is provided on a computer-readable medium, wherein the computer program product is configured, when executed on a processor of a device, to cause the device to perform the procedures described above. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] These and other aspects of the invention will obviously be explained from the following and further explained with regard to the exemplary embodiments described in the following description and with regard to the accompanying drawings, in which the following applies: Fig. Figure 1 shows a communication system in which the invention can be implemented, Fig. 2 shows a flowchart of a configuration process, Fig. Figure 3 shows a communication system with a configurator and the result of the first configuration steps. Fig. Figure 4 shows the result of the further configuration steps. Fig. Figure 5 shows the result of the further configuration steps. Fig. Figure 6 shows the result of the further configuration steps. Fig. Figure 7a shows a computer-readable medium and Fig. Figure 7b shows a schematic representation of a processor system.

[0043] The figures are merely diagrams and are not drawn to scale. Elements in the figures that correspond to elements already described may be labeled with the same reference numbers. DETAILED DESCRIPTION OF EXECUTION FORMS

[0044] The embodiments described herein serve only as examples.

[0045] An addition in version 2 of the DPP specification is the specification of how the aforementioned specific WLAN frames can be tunneled over a TCP / IP connection. This is referred to in this text as "DPP over TCP / IP." This addition allows devices that do not support DPP over WLAN to configure other DPP devices. Another addition in version 2 of the DPP specification is the specification of a DPP over TCP / IP relay. A device that supports DPP over WLAN, such as a WLAN access point, can make this relay available. The relay converts incoming "DPP over TCP / IP" packets into "DPP over WLAN" frames and transmits them as WLAN frames using its WLAN radio device.The relay also converts received "DPP over WLAN" frames into "DPP over TCP / IP" frames and forwards them as TCP / IP packets over its Ethernet connection(s) and over the WLAN networks (or SSIDs) to which it is connected as a non-WLAN access point, or over the WLAN networks (or SSIDs) it provides as an access point. A practical approach is to provide the relay functionality as part of the network access point's functionality. It is understood that similar problems and solutions may exist in other commissioning protocols, particularly those for use with wireless networks other than WLAN.

[0046] Network access devices, such as access points (APs), can by default create a normally open Wi-Fi network (or Service Set Identifier (SSID)) on which a server runs, implementing a user interface (UI) through which it can be configured. The IP address of this UI server is typically the gateway address of the device's TCP / IP stack. The gateway address of a router, such as an AP, is the interface through which it sends packets from its local network and usually to the internet. The UI allows, for example, the initially open network to be secured using a Wi-Fi passphrase or a pre-shared key (PSK). The UI server itself can also be protected by a user ID / password combination.The AP can support multiple SSIDs with only one radio device, using a technique called VLAN (Virtual Local Area Network) tagging, see [802.IQ].

[0047] The access point (AP) can provide TCP / IP access for configuration over a connection to an open wireless network operated by the AP, such as Wi-Fi Enhanced Open (WiFi_EO), or to a conventional, unencrypted network. An AP can also provide TCP / IP access for configuration (e.g., by an enterprise AP controller) over a local network such as Ethernet or a combination of Ethernet and wireless connections, such as WLAN, between the AP and a WLAN device connected to that AP.

[0048] Fig. Figure 1 shows a communication system 100 comprising a first device 110, a second device 120, and a third device 130. An external network 152 is also shown, for example, the Internet, a backend infrastructure, an infrastructure network, a local area network, or a cellular core network. Each of these devices has a transceiver 111, 121, 131, comprising suitable transmitters and receivers for wireless or wired communication over a physical channel such as WLAN, Bluetooth™, Ethernet, or another suitable technology. The devices may have an input / output unit for communication over a wired physical channel and include at least one antenna 113, 123, 133 that acts as an input / output for a wireless physical channel. Each of the devices would operate under the control of a processor 112, 122, 132.The transceiver, processor, and other device components can be integrated into a single system on a single chip. Communication between the transceiver and processor is schematically represented by a solid arrow. Each device can have a user interface with at least one user control (not shown). The user control can include, for example, a touchscreen, various buttons, a mouse, a touchpad, etc. The buttons can be conventional physical buttons, touch sensors, or virtual buttons, such as on a touchscreen, or icons activated by the mouse. The user interface can also be a remote user interface.

[0049] The second device can be a network access device 130 for providing wireless networks, such as an access point, a router, etc. The first device can be a wireless communication device 110, such as a mobile phone, a laptop, or a tablet with an end user. It could also be an IoT (Internet of Things) device. The user of the first device may be interested in connecting to the network access device to access one or more resources provided by the second device, such as accessing an external network 152 like the internet.The wireless communication device 110 can be an enrollee that wants to connect to the network operated by, or accessible through, the network access device. To do this, the enrollee may need to be provided with some additional configuration information (e.g., security credentials) to gain access to a wireless or wired network (e.g., the wireless network operated by the network access device) or to a logical network or security domain (e.g., a matter fabric) that can operate on, or be accessed through, a wireless or wired network.

[0050] The third device can be a Configurator 120 for configuring a wireless network according to a configuration protocol that enables the configuration of wireless networks and wireless communication devices for connecting to a wireless network. The network access device 130 is configured to cooperate with the Configurator 120 according to the configuration protocol. Additionally or alternatively, the third device can be a Configurator 120 for configuring a wired network, logical network, or security domain according to a configuration protocol that enables the configuration of these networks or security domains and communication devices 110 for linking to such a wired network, logical network, or security domain.

[0051] According to one embodiment, the second device 130 comprises a relay device 164 whose processor is configured to convert messages between a first format of the configuration protocol and a second format of the configuration protocol (e.g., a wireless communication protocol that can be used to configure an enrollee). This allows, for example, a configurator 120 that uses only an IP-based protocol (e.g., a configurator operating as part of an enterprise infrastructure controller) to configure an enrollee (e.g., the first device 110) for a wireless communication protocol, e.g., if the enrollee operates an onboarding protocol over a wireless interface and / or if it cannot yet operate an IP-based network (e.g.,, because it must first be equipped with the correct login credentials and other configuration information to connect to / access the access devices of a network in order to establish an IP connection). For this purpose, the Relay Device 164 receives configuration log messages from a Configurator 120 using the first format and forwards the log messages using the second format to the first Device 110, which can act as a registration receiver.Additionally or alternatively, the conversion between the first and second configuration protocol formats may involve encapsulating, re-encapsulating, or copying a portion of the received configuration protocol messages from a Configurator 120 into a set of new messages, and / or transmitting such a set of new messages over the wireless or wired communication protocol used to communicate with the first device 110 based on configuration protocol messages received from a Configurator 120. In a typical exemplary deployment of the Relay Device 164, the first configuration protocol format is transmitted as TCP / IP packets at the network layer, or layer 3 of the OSI model, and the second configuration protocol format is transmitted as messages / frames at the link layer, or layer 2 of the OSI model.

[0052] According to one embodiment, the configuration protocol is the Device Provisioning Protocol (DPP), which can be transmitted via TCP / IP between the Configurator 120 and the Relay Device 164 and which can be transmitted using the WLAN DPP protocol, which is based on the exchange of WLAN frames between the Relay Device 164 and a DPP Enrollee (e.g. the first Device 110).

[0053] In one example, network device 130 contains a relay device 164 that functions as a DPP relay (i.e., it converts DPP / commissioning over TCP / IP packets to DPP / commissioning over WLAN frames and vice versa). This is often done purely for convenience, as the AP is already configured to communicate over TCP / IP with network 152 and over WLAN with devices 110 and 120 when these devices are connected to the AP. Furthermore, APs may also have one or more Ethernet ports that provide a local area network (LAN) through which TCP / IP connections can be established between devices on the LAN and between a device on the LAN and a device connected to the AP. However, it may also be possible to use a fourth device (not shown) as a relay.The accompanying drawings show the relay device 164 inside the network access device 130. However, this is merely an example and should not be interpreted as meaning that the relay device 164 must be located inside or in the same location as the network access device 130. If the relay device 164 is part of an access point, the relay processing function can be provided by a processor 132 in the network access device 130.When the relay device 164 is separate from the network access device 130, some of the functionality of the processor 132 is present in the relay device 164, the transceiver 131 can be used by the relay device for WLAN communication (both for sending and receiving DPP / commissioning over WLAN frames with DPP enrolments and for sending and receiving TCP / IP packets with an access point), and each (not shown) Ethernet port is used, for example, for TCP / IP packets. Furthermore, in the case of a relay device 164 that is separate from the network access device 130, the relay device 164 may have or use a different transceiver than the network access device 130. In this disclosure, the term "relay device" can be used to refer to a network access device that performs a relay function for a configuration protocol and vice versa.The functions described for the network access device can apply equally to a relay device and vice versa. UDP / IP can also be used in this disclosure where TCP / IP is mentioned.

[0054] It should also be understood that the relay can convert DPP-over-TCP / IP packets into "DPP-over-radio" frames, where the radio device is something different than WLAN and the DPP protocol has been adapted accordingly.

[0055] According to another embodiment, the configuration protocol is the Matter Commissioning Protocol, which can be transmitted over TCP / IP between the Configurator 120 and the Relay Device 164. This protocol can be transmitted using the Matter BLE Commissioning Protocol, which is based on the exchange of BLE frames between the Relay Device 164 and a Matter Commissionee (e.g., the first Device 110). Additionally or alternatively, the Matter Commissioning Protocol can be transmitted using Wi-Fi Aware / NAN, which is based on the exchange of Wi-Fi Aware / NAN frames between the Relay Device 164 and a Matter Commissionee (e.g., the first Device 110).In one example, a relay device 164 can act as a relay for matter commissioning and be located on the network device 130, wherein the relay device 164 can convert matter commissioning protocol received over TCP / IP from a matter commissionee 120 into matter commissioning protocol commands over BLE or Wi-Fi Aware / NAN or another wireless or wired communication protocol used between the relay device 164 and a matter commissionee (e.g., first device 110). For example, the relay can receive configuration commands from a Matter Commissioner via TCP / IP, based on which it transmits a series of BLE frames (e.g., for BLE discovery or GATT frame exchange) or Wi-Fi Aware / NAN frames (e.g., for Wi-Fi Aware / NAN Unsynchronized Service Discovery or Wi-Fi Aware / NAN data communication).

[0056] In the network access device, the processor 132 can be configured to host a first wireless network as the operational network 161. This operational network can be configured to allow access to an external network 152 using a network communication protocol, such as TCP / IP. The operational network can also be a logical network of devices that are part of the same security domain (e.g., a matter fabric). Furthermore, the processor can be configured to host a second wireless and / or wired network 162, which functions as the configuration network 162, through which a connection can be established with the TCP / IP input / output of the relay device 164. This second network can include the relay device 164, the configurator 120, and, optionally, a wireless network device 110 to be configured.Configuration network 162 can be configured to prevent access to external network 152 after or until the operational network is configured. In a practical example, both networks are wireless networks with corresponding network identifiers, such as SSIDs, while virtual local area network (VLAN) technology can be used to create both SSIDs over a single transceiver and / or to separate configuration network traffic from operational network traffic. In another practical example, the configuration network is an infrastructure network containing a set of network access devices and an infrastructure controller (such as a wireless LAN controller (WLC)) that can communicate with each other using protocols such as...an access point configuration protocol such as the CAPWAP (Control and Provisioning of Wireless Access Points) protocol defined in RFC 5415, which can be extended for this purpose. The operational network 161 can overlap with the configuration network 162, whereby, depending on the configuration or state of the first, second, or third device, access to parts of the operational network or the configuration network may be blocked. In another practical example, the configuration network could be an onboarding network for cellular communications, and the operational network could be a cellular core network providing access to a set of network services or access to the external network 152.

[0057] The processor 132 can also be configured to enable the establishment of a configuration connection 154 according to the network communication protocol (TCP / IP) by connecting the configurator 120 to the configuration network. This connection can be made via any physical path, such as wireless, wired, optical, or any combination thereof.

[0058] Optionally, the network access device can be configured to provide out-of-band (OOB) information over the configuration network using an out-of-band channel to enable the configurator to interact with the network access device. For example, the OOB information could be a QR code containing a network identifier (SSID) and other access data, port addresses, security information, etc. The network access device can also be configured to receive the configuration of the operational network and the configuration of any (wireless) communication device while interacting with the configurator over the configuration network, thus enabling the (wireless) communication device to be mapped to the operational network.

[0059] In the following embodiments, which relate to Fig. Referring to points 2 to 6, the network access device can be referred to as an access point (AP), and the configuration protocol can be the Device Provisioning Protocol (DPP), see [DPP]. The wireless communication protocol can be WLAN, and the network communication protocol can be TCP / IP. With TCP / IP, one of the communicating devices is the TCP client, and the other is the TCP server. It is understood that the other devices can also act as both TCP clients and TCP servers. If the network communication protocol is TCP / IP, the port address or port information can indicate whether the device is the TCP server or the TCP client.

[0060] Providing TCP / IP access to basic configurators via an access point (AP) can be done over a connection to an initially open wireless network, usually referred to as an association, without encryption, for example, Wi-Fi Enhanced Open (see [WiFi_EO]). The network created by the open WLAN connection is identified by a configuration SSID. Later, the same AP can create another SSID for operational communication, identified by an operational SSID. The configuration SSID can be removed or stopped after configuration. If not, the two networks (SSIDs) must be separated. To achieve this separation, the AP can use VLAN tagging, creating VLAN1 for the configuration SSID and later VLAN2 for the operational SSID.Using a VLAN for the configuration SSID is not necessary if the configuration SSID is stopped when the operational SSID starts.

[0061] For DPP configuration, the AP may need to expose two destinations on the configuration SSID, namely • the IP address / port number for configuration by DPP over TCP / IP itself and • the IP address / port number of its DPP via TCP / IP relay.

[0062] The port number to be used in both cases can be 8908. This number is specified in the DPP specification for DPP over TCP / IP Relay. In this case, the port number does not need to be included in the out-of-box (OOB) information. The IP address transfer process is described below. The access point (AP) can also specify in the OOB information, for each IP address / port number included, whether it is the TCP client or the TCP server.

[0063] Furthermore, the access point (AP) can provide a remote user interface on its configuration SSID, which a user can configure for all non-DPP-over-TCP / IP functions, for example, on port 80 of its gateway address. Providing a remote user interface by a device on a network might mean, for example, that this device provides one or more web pages with which a user can interact, perhaps by using a browser on another device to control the first device. The gateway address can also be used for configuration over DPP over TCP / IP itself or for DPP over TCP / IP relay. However, the gateway address cannot be used for both purposes simultaneously, as they share the same port number, 8908.

[0064] The access point can restrict the functionality available on the configuration SSID to the three mentioned above: the IP address / port number for its own configuration, DPP via TCP / IP relay, and the remote user interface. In particular, access to the external network can be completely blocked, or at least restricted to specific times or configuration purposes. Otherwise, any WLAN device could establish a connection to the internet, for example.

[0065] If the access point (AP) is later configured to provide a DPP Wi-Fi network or SSID, the AP can expose the IP address / port number of this DPP SSID to configurators that support a DPP Wi-Fi stack via a TCP / IP relay or another instance thereof. In effect, the configurator can then configure enroles that only support Wi-Fi bands that the configurator itself does not support, but which the AP does (e.g., 802.11ah). Existing configurators may have different capabilities, such as a configurator that can run DPP over TCP / IP (a so-called legacy configurator) and a configurator that can run DPP over Wi-Fi (a so-called Wi-Fi-enabled configurator). See also the explanation below.

[0066] The access point (AP) may support an IP address / port number that is configured by DPP itself over TCP / IP on the DPP WLAN network (or SSID). Optionally, the AP can be configured by DPP over both WLAN and TCP / IP. Providing both options can be advantageous, as it allows configuration by either type of configurator. Configurators can, if necessary, establish a connection to the configuration SSID on VLAN1 for DPP configuration of the AP itself. The AP provides an IP address / port number for self-configuration by DPP over TCP / IP on the DPP WLAN network (or SSID), thus offering configurators greater flexibility.

[0067] The access point (AP), and in particular its relay function, may need to be configured. For this purpose, the AP can provide out-of-band (OOB) information, such as displaying a DPP bootstrapping URI on its screen or a sticker, or making it available via NFC, Bluetooth™, or any other suitable OOB technology. Advantageously, the bootstrapping URI can include the configuration SSID and the IP address and / or port number for DPP's own configuration over TCP / IP, and / or the IP address and / or port number of the DPP relay. This DPP bootstrapping URI also allows the AP to be configured using a DPP configurator that supports DPP over Wi-Fi. However, this document does not describe DPP over Wi-Fi in detail; see [DPP].

[0068] In an optional step 201, "Capture DPP URI (OOB)," the configurator scans the AP's DPP bootstrapping URI or retrieves it via NFC. In step 202, "Associate with Configuration SSID," the configurator establishes a connection (association) with the configuration SSID specified by the SSID attribute in the AP's DPP bootstrapping URI. By associating with the configuration SSID, a legacy configurator can establish TCP / IP connections using IP address and port number combinations reachable on the configuration SSID's network. The configurator can also obtain the DPP's IP address and port number via TCP / IP relay on the configuration SSID from the configuration SSID beacon or the bootstrapping URI, or through one of the other methods described above or below, such as mDNS announcements.

[0069] In the optional step 204, "Configure AP with DPP over TCP / IP," the AP is configured. In step 204, the configurator uses the combination of the IP address specified by the HOST attribute in the AP's (DPP) bootstrapping URI, or by one of the other methods described above, and the DPP port number 8908 to configure the AP itself, for example, by creating a working network using DPP over TCP / IP via the configuration SSID. The new network can be a DPP network, which is assumed in the following steps. These steps are explained below with reference to the figures. It is understood that steps 201-204 only apply in the situation where the relay is associated with the AP (for example, the AP hosts the relay device 164) and where the AP must be configured before configuring the wireless network device 110.In the case of a standalone relay, establishing a TCP / IP connection between Device 130 and Configurator 120 should be done differently; examples are given above.

[0070] Fig. Figure 3 shows a communication system with a configurator and the result of the initial configuration steps, numbered 201, 202, and 204 above. The figure schematically shows the devices as in Fig. 1 described and a configuration network 162, e.g., a configuration SSID on VLAN 1. Furthermore, configuration network 162 has a configuration tunnel 163, which allows the transmission of messages according to the configuration protocol over configuration connection 154, e.g., a DPP-over-TCP / IP configuration port, and through which the AP itself can be configured. Configuration network 162 also provides a configuration port that allows access to the TCP / IP inbound / outbound interface of relay 164, for example, a DPP-over-TCP / IP relay. The relay is for forwarding configuration messages between configuration connection 154, 155, or 173 and the

[0071] Wireless communication is provided. For example, the relay can convert messages in the configuration network into special WLAN frames and receive them, which are sent and received via the WLAN transceiver. Therefore, messages according to the configuration protocol are subsequently transmitted using the wireless communication protocol, e.g., DPP over WLAN. To this end, configuration relay 164 has a part that communicates using TCP / IP packets in the configuration SSID or over Ethernet, and a part that communicates using the specific WLAN frames outside the configuration SSID. This latter part is shown extending beyond the dashed box 162. Fig. 3 shows an arrow 153 indicating the result of the above steps 201-204, whereby a configuration protocol (e.g. DPP) is provided via TCP / IP by linking to the configuration SSID and the arrow connects the Configurator to the configuration tunnel.

[0072] Fig. Figure 4 shows the result of the further configuration steps. The figure schematically shows the devices as described in... Fig. 3 described and an operational network 161, e.g., a DPP SSID on VLAN2. The Configurator has now configured the operational network, which can be a DPP network, i.e., a network in which the AP and the devices that want to connect to it exchange their DPP ports using the network introduction protocol, as specified in section 6.6 of [DPP]. The operational network can also be a normal WLAN network, i.e., a network in which the AP and the devices are configured with WPA2 or WPA3 credentials and use normal WLAN connection protocols as defined in [IEEE 802.11] to initiate communication. The DPP protocol allows the provision of WPA2 or WPA3 or other credentials for linking to a WLAN network. The operational network can also be a logical network of devices operating in the same security domain, i.e.,A network in which the access point (AP) and devices are configured with credentials from the same security domain and use regular connection establishment protocols (e.g., TCP / IP) over an underlying connectivity protocol (e.g., WLAN). The DPP protocol enables the provision of credentials for linking to such a logical network.

[0073] The operational network allows access to the external network 152, as indicated by arrow 151, for example, via a wired Ethernet connection. Additionally, the operational network may have another relay 165, for example, a DPP-over-TCP / IP relay. Relay 165 may have the same functions as relay device 164, may be the same device, and / or may share the same processor or network interfaces. Arrow 155 schematically shows that TCP / IP connections are possible by linking to the configuration SSID.

[0074] In step 206, "Start SSID," the operational network 161 is started; for example, the access point starts the DPP network as configured by the configurator. VLAN tagging can be used to keep the DPP SSID separate from the configuration SSID, preventing a device associated with the AP's configuration SSID from connecting to the external network (e.g., the internet). As mentioned, the operational network can also be a regular Wi-Fi network operating an SSID that may have been configured by the configurator or by other means.

[0075] Fig. Figure 5 shows the result of the further configuration steps. The figure schematically shows the devices as described in... Fig. 4 described. In step 207 “Capture DPP-URI (OOB)”, the Configurator performs bootstrapping with a DPP-Enrollee 110 by, for example, capturing a QR code containing the DPP bootstrapping URI of this Enrollee, and starts the DPP protocol with the Enrollee via Relay 164, for example with the Enrollee as the responder.

[0076] The configuration protocol can be initiated via the TCP / IP connection on the AP's configuration SSID using the DPP's IP address / port 8908 via TCP / IP relay, and subsequently using DPP over WLAN. In step 208, "Configure DPP Enrollee with DPP over TCP / IP," the configurator configures the DPP enrollee via the AP's DPP over TCP / IP relay, as indicated by arrow 173. Then, in step 209, "DPP over WLAN," messages are transmitted using the wireless network protocol, such as DPP over WLAN, as indicated by arrow 174. Note that communication via arrow 174 can use transceiver 131, and communication via arrow 173 can use either transceiver 131 or an Ethernet port (not shown) on device 130.

[0077] Fig. Figure 6 shows the result of the further configuration steps. The figure schematically shows the devices as described in... Fig. As described in section 5, in the final step 210, "Link to DPP SSID," the Enrollee configured by the Configurator in the preceding steps 208 and 209 establishes a connection to the operational network. Arrow 156 indicates that TCP / IP connections are possible through this connection to the operational network (e.g., via the DPP SSID). It should be noted that the reference to "DPP SSID" here is merely an example and that the corresponding entities can be used for other networks, including those that are not DPP- and WLAN-based.

[0078] Steps 207 to 210 are examined in more detail below. These correspond to the configuration of the Enrollee.

[0079] A commissioning process typically begins with the commissioning device (in the case of DPP, the Configurator) and the enrollee device; that is, the Configurator can initiate the commissioning process. In step 207, in the case of DPP and other protocols, the bootstrapping information (e.g., the DPP bootstrapping URI) of the enrollee is retrieved. The DPP bootstrapping URI of the enrollee contains at least the public bootstrapping key of the enrollee. It may also contain one or more WLAN channels, e.g., from the channel ABNF rule (Section 5.2.1 of [DPP]), on which the enrollee receives.

[0080] If the bootstrapping URI of the enrollment has the form of a QR code, the relevant WLAN channels may be encoded in the QR code.

[0081] When bootstrapping information is retrieved via another radio technology such as NFC, the Wi-Fi channels may be in the form of a data set received via that other radio technology. In the case of DPP, this is referred to as an "Alternative Carrier Record." Generally, the Alternative Carrier Record references a Carrier Configuration Record containing an application-defined MIME type. In the case of DPP, the Alternative Carrier Record references a Carrier Configuration Record containing "application / vnd.wfa.dpp" to specify DPP and a DPP Bootstrapping Uniform Resource Identifier (URI), see the [RTD-URI] reference document, which contains a public bootstrapping key and may include a MAC address and a Wi-Fi-only channel list. Alternative Carrier Records can also be used to specify other technologies, such as Wi-Fi P2P [P2P], Wi-Fi Simple Configuration [WSC], Bluetooth [BT], and 802.15.4 [802.15.4], ZigBee [ZIGBEE], Thread [TR-ZIG], etc. Thread is an open-standards-based IPv6 networking protocol designed for secure, low-power 802.15.4 mesh networks. The 802.15.4 WLAN standard, see reference document [802.15], is the MAC / PHY layer for both Zigbee (http: / / www.zigbee.org / ) and Thread (https: / / www.threadgroup.org / ).

[0082] Once the configurator has retrieved the enrollee's bootstrapping URI in step 208, it can begin the configuration process. In the case of DPP, the first configuration phase is the DPP authentication protocol, initiated by the configurator sending a DPP authentication request message to the enrollee's MAC address, if the configurator knows this MAC address (e.g., from the enrollee's DPP bootstrapping URI), or to the broadcast address. With a direct connection between the configurator and enrollee, if the configurator knows one or more channels on which the enrollee is receiving (e.g., from the enrollee's DPP bootstrapping URI), it can try each of these channels until it receives a response from the enrollee. Otherwise, the configurator must try all supported WLAN channels.However, if a relay is used, the configurator can only try the channels (or frequencies) used by the radio side of the relay.

[0083] In another embodiment in connection with the Fig. In steps 2 through 6, the network access device can be referred to as an access point (AP) and may include a relay device as described above, but instead of or in addition to using a configuration SSID, it provides IP access to a configurator over an Ethernet connection or another connectivity technology (e.g., IP over BLE or cellular). In such a case, the DPP bootstrapping URI in step 201 may not contain a configuration SSID, but it may contain the IP address and / or port number for configuration by DPP over IP and / or the IP address and / or port number of the DPP relay, or other relevant information for communication over Ethernet or the respective connectivity technology, such as subnet mask, MAC address, VLAN identifier, BLE UUID, BLE GAP / GATT service information, mobile device identity (e.g., International Mobile Subscriber Identity (IMSI)), etc.In such a case, step 202 may also be called "Set up configuration connection" and is an optional step for setting up a configuration connection with the AP based on the relevant information of the respective connectivity technology. Furthermore, in such a case, step 204 and the description of [missing information] are also relevant. Fig. 3 to 6 are similar to those described above, however, the configuration IP connection is now established via Ethernet or the respective communication technology instead of using the configuration SSID, and the IP connection to relays 164 and / or 165 is established via Ethernet or the respective communication technology to configure an Enrole.

[0084] In another embodiment in connection with Fig. Steps 2 through 6 can refer to the network access device as an access point (AP) and can include a relay device that provides configuration access via a configuration SSID or over an Ethernet connection or other connectivity technology as described above, but using a different configuration protocol, such as the Matter commissioning protocol, instead of or in addition to DPP. In such a case, step 201 can be titled "Capture Matter Onboarding Payload," step 202 "Establish Configuration Connection," step 204 "Configure AP with Matter over IP," step 207 "Capture Enrollee Bootstrapping Information (OOB)," step 208 "Configure Enrollee via Relay over TCP / IP," step 209 "Configure Enrollee over Wireless Network," and step 210 "Link to Operational Network."In such a case, the Configurator can provide bootstrapping for a Matter enrollee 110 in step 207 by, for example, scanning a Matter Commissionee's QR code containing the Matter onboarding payload and initiating the Matter commissioning protocol with the commissioner via relay 164. If Wi-Fi Aware is used for Matter commissioning, the Matter Commissionee's QR code may need to be augmented with information about a DefaultPublishChannel or PublishChannelList used or supported by the enrollee for unsynchronized service discovery with Wi-Fi Aware. This may also include information about the time / schedule of switching between the different channels in such a channel list.The Matter Commissioning Protocol can be established over a TCP / IP connection on the configuration SSID or over an Ethernet port of the AP using the IP address / port of relays 164 and / or 165, and subsequently using Matter over BLE or Wi-Fi Aware. In such a case, relays 164 and / or 165 can convert Matter Commissioning Protocol commands received over IP from a Matter Commissioner into Matter Commissioning Protocol commands over BLE or Wi-Fi Aware / NAN, or another wireless or wired communication protocol used between relay 164 and / or 165 and a Matter Commissionee. Therefore, in step 208, the Matter Commissioner can configure the Matter Commissionee via the AP's relay 164. This is also indicated by arrow 173 in [reference missing]. Fig. 5 is specified. In step 209, the messages are transmitted using the wireless network protocol, e.g., Matter over BLE or Matter over Wi-Fi Aware. This is also indicated by arrow 174 in Fig. 5. In steps 202 to 210, a Matter Onboarding Payload is used as bootstrapping information (i.e., instead of or in addition to the DPP URI). The Matter Onboarding Payload can contain an enrole identifier, discovery-related information (e.g., whether BLE or WLAN is used), and / or a passcode to establish an initial secure channel between the Matter Commissionee and the Matter Commissioner.

[0085] Current systems address many aspects of individual device connections. Despite this fact, the inventor has realized that current systems still exhibit a number of unexpected problems.

[0086] The device, which acts as a relay, is in most cases set up for the use of specific WLAN channels / frequencies.

[0087] Currently, the commissioner / configurator has no way of determining which channels / frequencies are being used by the relay device. This is because the configurator is connected to the IP side of the relay and not to the radio side.

[0088] One situation where a problem can occur is when multiple relays are available and at least one relay is paired with a transceiver that uses one or more channels on its radio side that correspond to the channels on which the Enrollee receives. Ideally, the commissioner / configurator would be able to select the relay that happens to be using the same channels on which the Enrollee receives. Assuming that a relay is indeed using a channel on which the Enrollee is receiving, the configuration process will be halted if the configurator selects a relay that is not using a channel on which the Enrollee receives, because the Enrollee will not respond to a message. In the case of DPP (Dynamic Pairing), the Enrollee will not respond to the DPP configuration request. In this case, the configurator must try a different relay and / or inform the user of the problem.

[0089] If the relay device is part of an access point (AP), the problem is even more acute, as APs are generally configured to maximize throughput for their associated storage and access points (STAs). Therefore, the AP would "prefer" to remain on a given channel rather than change channels. It's possible for multiple relays to be housed within the same AP, especially if the AP has multiple radio devices, each configured to use different frequencies. All of them are subject to the same constraint: no channel / frequency changes. While it might work if the configurator tries one relay at a time, this is undesirably inefficient—even if the relays are all within the same AP location.

[0090] According to one embodiment, the relay device provides the configurator, e.g., via the configuration connection over IP, with a configuration specification of the relay device's transceiver. This configuration specification includes at least one parameter value, where the at least one parameter is at least one of a radio channel and frequency, and the parameter value corresponds to a setting of the transceiver. The configurator can then compare the channel and / or frequency settings of the transceiver with those of the enrollee device, or configure / set the channels and / or frequency of the transceiver and the enrollee device to be the same.Additionally or alternatively, the Configurator can receive an identifier used by the Relay device (or the device comprising the Relay device) and / or information about a device type of the Relay device (or the device comprising the Relay device), e.g., by scanning a QR code that may contain information about an identifier or device type of the device, or by receiving such information via NFC or another out-of-band (OOB) mechanism, based on which the Configurator can retrieve functions and / or configuration information (such as supported channels / frequencies and / or configured or default channels / frequencies used by the Relay device) from a memory / database containing information about Relay devices (or comprising devices) (which can be indexed based on device identifiers and / or device types).

[0091] According to one embodiment, the relay device specifies the radio channel(s) (e.g., WLAN) used by the transceiver in mDNS announcements. The relay service is published as the "_relay" subservice of the DPP service ("_dpp._tcp"), i.e., as "_relay._sub._dpp._tcp". So-called TXT records can provide further information about a service or subservice. In addition to TXT entries containing information such as the IP address and port number used by the relay for its TCP / IP input / output, a DPP relay could contain TXT entries such as... channels=81 / 1,115 / 36 (i.e., channel 1 in the 2.4 GHz band and channel 36 in the 5 GHz band) channels=81 / 1,6,11 (also channels 1, 6 and 11 in the 2.4 GHz band) frequencies=2412,2437,2462 (frequencies in MHz, channels 1, 6 and 11 in the 2.4 GHz band).

[0092] In another example implementation, the radio channel(s) supported or used by the transceiver for the relay device, or other configuration parameters for the relay device, are provided to the configurator by the relay device (or a device comprising the relay device) using an access point configuration protocol, such as the CAPWAP (Control and Provisioning of Wireless Access Points) protocol defined in RFC 5415, which can be extended for this purpose.

[0093] In another example implementation, the radio channel(s) provided to the configurator by the relay device (or a device comprising the relay device) contain information about a DefaultPublishChannel or PublishChannelList used or supported by the relay device for non-synchronized service discovery using Wi-Fi Aware. This can also include information about the time / schedule of switching between the different channels in such a channel list.

[0094] The commissioner / configurator can then compare the channels / frequencies reported by the relay device with those found at the enrollee – for example, in the bootstrapping URI. If multiple relays are available, the commissioner / configurator can select the relay device using a channel / frequency on which the enrollee receives.

[0095] In one embodiment, the configurator is configured to select a relay device from a plurality of relay devices, the selection being based on a match between the specification of a configuration of the Enrollee transceiver and the specification of a configuration of the transceiver of the relay device.

[0096] A second problem arises if no relay is available that uses a radio channel on which the Enrollee receives. Currently, the configuration process cannot be started, and the user is forced to find another solution – which may even lead to switching to a different configurator.

[0097] In such a situation, the configurator can send a command to the relay via the TCP / IP connection to switch (one of its) radio devices to a channel specified by the enrollee's bootstrapping URI. The configurator can do this after receiving the bootstrapping URI, which allows it to find the channels / frequencies on which the enrollee is receiving.

[0098] In one embodiment, the relay device receives from the configurator, e.g., via the configuration connection over IP, a configuration specification that the transceiver is to use to operate the wireless communication protocol between the relay device and the at least one wireless communication device. The relay device's processor is configured to receive a configuration specification in the form of a command. In other words, the configurator's processor is configured to send a command to the network access device via the configuration connection, the command including a parameter value for the network access device / relay device's transceiver.The command can include a setting for the relay device's transceiver and, in response to the command, cause the transceiver to use that setting for communication using the wireless communication protocol. Thus, the configurator can cause and ensure that the transceiver uses a channel / frequency on which the Enrollee device receives. To this end, the configurator can obtain information about the Enrollee device's configuration, such as information about the channel / frequency it is using. This can be done, for example, by scanning a QR code that may contain information about the (default) channel / frequency used by the device, or by receiving such information via NFC or another out-of-band (OOB) mechanism.The configurator can use the received information to select a channel / frequency for the relay device to operate and send a command to the relay device to instruct the transceiver to operate on a suitable frequency within the selected channel / frequency. Additionally or alternatively, the configurator can receive an identifier used by an Enrollee device and / or information about the type of Enrollee device, e.g.,by scanning a QR code, which may contain information about an identifier or device type of the device, or by receiving such information via NFC or another out-of-band (OOB) mechanism, on the basis of which the Configurator can retrieve functions and / or configuration information (such as supported channels / frequencies and / or configured or default channels / frequencies used by the Enrollee device) from a memory / database containing information about Enrollee devices (which may be indexed on the basis of device identifiers and / or device types).Additionally or alternatively, the Configurator receives information about an Enrollee device's configuration, an identifier used by the Enrollee device, or the device type of an Enrollee device by other means, such as receiving a message about / from the Relay device containing such information. The Relay device may have received a message / signal (e.g., a probe request or a BLE detection message) from the Enrollee device containing the respective information. A Relay device that supports the command to switch to another channel may include in its Relay mDNS announcements an IP address / port number through which a REST API is supported for receiving commands to the Relay device. This REST API may support a POST request, for example, to the resource " / relay / command," with this POST containing a command as data.The content type of the HTTP POST request could be, for example, "application / x-www-form-urlencode".

[0099] The IP address / port number that the relay device specifies in its relay mDNS announcements can be in the form of a TXT record, such as: command_URI=192.168.0.234:8912 (IPv4 address 192.168.0.234, port 8912) In the example above, a command to the relay to switch channels would be, for example, a POST to 192.168.0.234:8912 / relay / command

[0100] The command could, for example, be the following text in the body of the HTTP POST request.

[0101] The relay may offer secure POST requests in the form of an HTTPS POST. The secure POST can use only server-side authentication, where the relay device offers the configurator a certificate so that the configurator knows it is a legitimate relay device, or Additionally, client-side authentication is used so that the relay device knows that it is a legitimate configurator, or non-certificate authentication with RFC 8492 (TLS-pwd) or RFC 5054 (TLS-SRP), etc.

[0102] The use of RFC 8492 (TLS-pwd) has the advantage that the password in the relay device and the configurator can be set by their owner, so that the owner can be sure that their relay device(s) only accept commands from their configurator(s).

[0103] In another example implementation, the command containing the radio channel(s) to be used by the relay device is supported or used, or other configuration parameters for the relay device are provided by the configurator to the relay device (or a device comprising the relay device) by using an access point configuration protocol, such as the CAPWAP (Control and Provisioning of Wireless Access Points) protocol defined in RFC 5415, which can be extended for this purpose.

[0104] In another example implementation, the command provided by the Configurator to the Relay device (or a device comprising the Relay device) contains information about a DefaultPublishChannel or PublishChannelList to be used by the Relay device for unsynchronized service discovery using Wi-Fi Aware, where the Relay device can receive commands from the Configurator, acting as the Matter Commissioner and received over TCP / IP, and translate them into Wi-Fi Aware frames for unsynchronized service discovery.

[0105] In one embodiment, the configurator is configured to participate in the configuration of a wireless communication device while cooperating with the relay device via the configuration link, in order to enable the assignment of the wireless communication device to the wireless network.

[0106] In one embodiment, the Configurator can provide an Enrollee with information via the Relay Device regarding which channel / frequency to switch to or which to use for configuration protocol communication via the Relay Device. For this purpose, the Configurator can transmit such information and / or an associated command via IP to the Relay Device (or the device enclosing the Relay Device). Upon receiving such information / command, the Relay Device (or the device enclosing the Relay Device) can transmit an indication of such a channel by sending one or more messages over a range of channels / frequencies on which the Enrollee might receive, for example, using a frequency-hopping schedule.

[0107] For example, the relay device can contain information about which channel the Enrollee must use for configuration as part of a beacon frame. This beacon frame can be transmitted on one or more other channels / frequencies, specifying which channel / frequency to switch to or which to use for configuration protocol communication.

[0108] In other words, the processor of the relay device can be configured to: Receiving, from the Configurator via the configuration link, a specification of a configuration comprising at least one parameter value for at least one of a radio channel and frequency to be used for operating the wireless communication protocol to configure the wireless communication device.

[0109] Transmitting the at least one parameter value received by the configurator to the wireless communication device by transmitting over a frequency different from the frequency specified by the at least one parameter value.

[0110] In another embodiment, the channel / frequency or SSID used by an enrollee and a relay device to communicate a configuration protocol between the enrollee and the relay can differ for various configuration protocols (e.g., DPP or Matter, or another configuration protocol or variations within these configuration protocols). The configurator can select a configuration protocol to use and a suitable relay device, and / or configure a relay device to select a channel / frequency or SSID corresponding to the configuration protocol to be used, with the configurator being informed by the relay device (e.g., via CAPWAP or through DPP URI, Matter onboarding payload over OOB channel) and / or the enrollee device (e.g., via a DPP URI).The configurator can obtain a specification of a number of supported configuration protocols (via DPP URI, Matter Onboarding Payload over OOB channel). An enrollee can select a configuration protocol and / or channel / frequency and / or SSID for its transceiver that applies to the selected configuration protocol according to some default or (pre-)configured settings or user settings. The configurator can specify to an enrollee via the relay device which configuration protocol to use. For this purpose, the configurator can provide such a specification (e.g., in the form of a configuration protocol identifier / configuration protocol type) and / or an associated command (e.g.,a command including a configuration protocol identifier / configuration protocol type) via IP to the relay device (or the device including the relay device), wherein the relay device (or the device including the relay device), upon receiving such an identifier / command, may transmit an identifier of such a configuration protocol by sending one or more messages over a set of channels / frequencies on which the Enrollee may receive.

[0111] For example, the relay device can include information about which configuration protocol (e.g., in the form of a configuration protocol identifier / configuration protocol type) or which SSID the enrole must use for configuration as part of a beacon frame.

[0112] In other words, the processor of the relay device can be configured to: Received from the Configurator via the configuration link, a specification of a configuration comprising at least one parameter value that specifies a configuration protocol to be used for configuring the wireless communication device.

[0113] Transmitting the at least one parameter value received by the configurator to the wireless communication device by transmitting the at least one parameter value over a range of frequencies.

[0114] In another embodiment, the identifier (e.g., MAC address or other Layer 2 identifier) ​​used by an enrollee or relay device to communicate a configuration protocol between the enrollee and the relay can differ for different configuration protocols (e.g., for different versions of DPP or for different options / variants within DPP). The configurator can select a configuration protocol to use and a suitable relay device, and / or configure a relay device to receive messages with a specific identifier used as the source or destination of the messages (e.g.,Messages received at a specific MAC address of the relay device), or that it uses a specific identifier as the source or destination of messages to be forwarded to the enrollee, corresponding to the configuration protocol to be used, whereby the configurator can obtain a specification of a number of supported configuration protocols from the relay device (e.g., via CAPWAP or through DPP-URI, Matter Onboarding Payload over OOB channel) and / or the enrollee device (e.g., through DPP-URI, Matter Onboarding Payload over OOB channel). Additionally or alternatively, the configurator can configure the relay device with policies or filters to include or discard messages (e.g., messages with specific identifiers) to be forwarded between an enrollee and the configurator.An enrole can select a configuration protocol and / or select and / or transmit a message with a specific identifier, which is used as the source or destination of the message applicable to the selected configuration protocol according to certain default, pre-configured, or user settings. The configurator can specify to an enrole, via the relay device, which identifier should be used.For this purpose, the Configurator can transmit such a specification and / or an associated command via IP to the Relay device (or the device including the Relay device), wherein, upon receiving such a specification / command, the Relay device (or the device including the Relay device) can transmit a specification of such identifier by sending one or more messages over a number of channels / frequencies on which the Enrollee may receive.

[0115] In other words, the processor of the relay device can be configured to: Received from the Configurator via the configuration link, a specification of a configuration comprising at least one parameter value that specifies a layer 2 identifier to be used for the configuration of the wireless communication device.

[0116] Transmitting the at least one parameter value received by the configurator to the wireless communication device by transmitting the at least one parameter value over a range of frequencies.

[0117] In another embodiment, the signals (e.g., chirp signals for DPP) used by an enrollee or relay device to communicate a configuration protocol between the enrollee and the relay can differ for different configuration protocols (e.g., for different versions of DPP or for different options / variants within DPP). The configurator can select a configuration protocol to use and a suitable relay device, and / or configure a relay device to receive or use signals corresponding to the configuration protocol to be used. The configurator can obtain a specification of a set of supported configuration protocols from the relay device (e.g., via CAPWAP or through DPP URI, Matter Onboarding Payload over OOB channel) and / or the enrollee device (e.g., through DPP URI, Matter Onboarding Payload over OOB channel).The configurator can transmit information to the relay device about which signals to receive or which to use by transmitting such information (e.g., in the form of a configuration protocol identifier / type or signal identifier / type) and / or an associated command (e.g., configuration protocol identifier / type or signal identifier / type) over IP to the relay device (or the device comprising the relay device), whereby, upon receiving such information / command, the relay device (or the device comprising the relay device) can configure the transceiver and / or processor to receive or use signals that match the configuration protocol identifier / type or signal identifier / type.An Enrollee can select a configuration protocol and choose and / or transmit a specific signal applicable to the selected configuration protocol according to certain default or (pre-)configured settings or user settings.

[0118] In other words, the processor of the relay device can be configured to: Received from the Configurator via the configuration link, a specification of a configuration comprising at least one parameter value that specifies a configuration protocol to be used for configuring the wireless communication device or a signal to be used during the configuration of the wireless communication device.

[0119] Configuring the transceiver or processor to receive or use signals that conform to the configuration protocol or signal specified by the one or more parameters received from the configurator.

[0120] According to one embodiment, the relay device can be configured to transmit the information received from the configurator to the enrollee (i.e., the wireless communication device).

[0121] In another embodiment, the Configurator configures the relay device with some configuration parameters that indicate to the relay device which identifiers or other content it must include in its messages to communicate with the Enrollee(s), e.g. for detection, such as Wi-Fi beacon frames, probe request / response frames, GAS frames, BLE announcements, cellular system information blocks.

[0122] In another embodiment, the Configurator configures the relay device with some configuration parameters that specify to the relay device the time it needs to receive certain channels / frequencies and / or a series of channels to switch between them, including the timing of the channel switching interval or the time / frequency resource plan.

[0123] Another potential issue is that some configuration protocols, such as Matter, may require the Enrollee to be actively recognized as such by the relay device and / or a connection to the relay device to be established before it can be configured. Therefore, some information may be required on the relay device to enable this.

[0124] In one embodiment, the configurator configures the relay device with several configuration parameters that specify how the relay device should discover the enrollee. These configuration parameters can include, for example, which discovery protocol to use, which signals (e.g., chirp signals) or discovery messages (e.g., Wi-Fi Aware Unsynchronized discovery messages or BLE discovery messages) to transmit, what payload these discovery messages must include (e.g., the SSID used by the enrollee if the enrollee connects via a soft AP), which identifier (e.g., MAC address) to use as the destination for such a discovery message, which channels / frequencies to use for discovering the enrollee, and which security credentials to use to protect these discovery messages.Similarly, the configurator can configure the relay device with several configuration parameters that specify how to establish a connection to a (detected) enrollee, thus enabling configuration by the configurator via the relay device. These configuration parameters can include, for example, the security credentials to be used to protect such a connection between the enrollee and the relay device.

[0125] In other words, the processor of the relay device can be configured to: Received from the Configurator via the configuration link, a specification of a configuration comprising at least one parameter value for at least one from the group of detection protocol and detection signals and detection payload and layer 2 identifiers, as well as radio channel and frequency to be used for the detection of the wireless communication device.

[0126] Configure the transceiver or processor so that it recognizes the wireless communication device according to at least one parameter received from the configurator.

[0127] The relay device can be configured to receive information from the configurator about how the Enrollee can be detected. This information can contain one or more of the following: a recognition protocol, a recognition payload, identifiers to be used, source or destination addresses (such as layer 2 identifiers), a radio channel and a radio frequency.

[0128] If the network is a mesh network, other relays and their mDNS announcements may be reachable through the mesh, even if they are located at different physical locations. However, if the wireless technology is not Wi-Fi, or if the network consists of a subnet with bridges, the other relays may not be reachable through the network itself, and the configurator may need to be physically moved to that location to establish an IP connection with that relay. This would require informing the user and prompting them to take appropriate action, which is also an undesirable burden for the user. The user might then prefer that the configurator instructs the current relay to change its settings.

[0129] Fig. Figure 7a shows a computer-readable medium 1000 with a writable part 1010 comprising a computer program 1020, wherein the computer program 1020 comprises instructions that cause a processor system to execute one or more of the above-mentioned procedures in the system, as described with reference to Fig. The computer program 1020 is described in Figures 1-6. It can be embodied on the computer-readable medium 1000 as physical markers or by magnetizing the computer-readable medium 1000. However, any other suitable embodiment is also conceivable. Furthermore, it should be noted that although the computer-readable medium 1000 is shown here as an optical disc, it can also be any suitable computer-readable medium, such as a hard disk, solid-state memory, flash memory, etc., and that it can be either non-writable or writable. The computer program 1020 comprises instructions that cause a processor system to execute the procedures.

[0130] Typically, devices that perform the above process each comprise a processor connected to memory containing the corresponding software code stored on the devices; for example, this software may have been downloaded and / or stored in appropriate memory, such as volatile memory like RAM or non-volatile memory like flash (not shown). The devices may be equipped with microprocessors and memory (not shown). Alternatively, the devices may be implemented wholly or partially in programmable logic, such as a field-programmable gate array (FPGA). The devices and servers may be implemented wholly or partially as application-specific integrated circuits (ASICs), i.e., integrated circuits (ICs) adapted for their specific application.For example, the circuits can be implemented in CMOS, e.g. using a hardware description language such as Verilog, VHDL, etc.

[0131] Fig. Figure 7b shows a schematic representation of a processor system 1100 according to an embodiment of the network access device, the configurator or the configurator interface or the configurator controller, as described with reference to Fig.The processor system is described in Figures 1-6. The processor system can be embodied by one or more circuits 1110, each comprising, for example, one or more integrated circuits. The circuit 1110 comprises a processing unit 1120, such as a CPU, for executing computer program components to perform a method according to an embodiment and / or to implement its modules or units. The circuit 1110 comprises a memory 1122 for storing program code, data, etc. A portion of the memory 1122 may be write-protected. The circuit 1110 may include a communication element 1126, such as a transceiver with an antenna, connectors, or both, and the like. The circuit 1110 may include a dedicated integrated circuit 1124 for performing some or all of the processing defined in the method.A processor 1120, a memory 1122, the dedicated IC 1124, and the communication element 1126 can be interconnected via a connection 1130, for example, a bus. The processor system 1110 can be configured for contactless and / or contactless communication, using an antenna and / or connectors in each case.

[0132] The software may only include the steps that are executed by a specific subunit of the system. The software can be stored on a suitable storage medium such as a hard drive, a floppy disk, memory, etc. The software can be transmitted as a signal via a cable, wirelessly, or via a data network such as the internet. The software can be made available for download and / or remote use on a server. A method according to the invention can be executed using a bitstream configured to configure programmable logic, e.g., a field-programmable gate array (FPGA), to execute the method.It is noted that the software may be in the form of source code, object code, an intermediate source code and object code, such as in partially compiled form, or in any other form suitable for use in implementing the methods of the invention. One embodiment relating to a computer program product comprises computer-executable instructions corresponding to each of the processing steps of at least one of the methods described. These instructions may be subdivided into subroutines and / or stored in one or more files that may be linked statically or dynamically. Another embodiment relating to a computer program product comprises computer-executable instructions corresponding to each of the means of at least one of the systems and / or products described herein.

[0133] It is understood that, for the sake of clarity, the above description describes embodiments of the invention with reference to different functional units and processors. However, it is obvious that any suitable distribution of functionality among different functional units or processors can be used without deviating from the invention. For example, functionality illustrated as being performed by separate units, processors, or controllers can be performed by the same processor or controllers. Therefore, references to specific functional units should be understood only as references to suitable means of providing the described functionality, rather than to a strict logical or physical structure or organization. The invention can be implemented in any suitable form, including hardware, software, firmware, or any combination thereof.

[0134] It should be noted that in this document the word "comprising" does not preclude the presence of elements or steps other than those listed, and the word "a" or "an" before an element does not preclude the presence of a plurality of such elements; that any reference numerals do not limit the scope of the claims; that the invention can be implemented by means of both hardware and software; that several "means" or "units" can be represented by the same hardware or software element; and that a processor can perform the function of one or more units, possibly in conjunction with hardware elements. Furthermore, the invention is not limited to the embodiments, and the invention lies in each individual new feature or combination of features described above or set forth in the different dependent claims.Furthermore, the phrase "at least one of A, B and C" should rather be understood as "one or more elements from a group of elements comprising A, B and C".

[0135] In summary, this disclosure relates to relay, configurator, and network access devices. A relay device is provided, wherein the relay device is configured to cooperate with a configurator according to a configuration protocol that enables the configuration of wireless networks and at least one wireless communication device to connect to a wireless network, wherein the configuration protocol uses a configuration connection, and wherein the relay device is configured to communicate with the at least one wireless communication device via a transceiver according to a wireless communication protocol. The relay device comprises a processor configured to provide a configuration specification of the transceiver to the configurator via the configuration link.

[0136] According to one embodiment, a relay device is provided, wherein the relay device is configured to cooperate with a configurator according to a configuration protocol that enables the configuration of at least one wireless communication device for connection to a wireless network, wherein the configuration protocol uses the wired and / or the wireless configuration link, wherein the relay device is configured to communicate with the at least one wireless communication device via a transceiver according to a wireless communication protocol, the relay device comprising a processor that is configured to provide a specification of a configuration of the transceiver to the configurator via the configuration link.

[0137] Furthermore, a relay device is provided, wherein the relay device is configured to cooperate with a configurator according to a configuration protocol that enables at least one wireless communication device to connect to a wireless network, wherein the configuration protocol uses a wired and / or wireless communication link, wherein the relay device is configured to communicate with the at least one wireless communication device via a transceiver according to a wireless communication protocol, the relay device comprising a processor-arranged relay device that is configured to receive a configuration specification from the configurator via the configuration link that is to be used by the transceiver to operate the wireless communication protocol between the relay device and the at least one wireless communication device.

[0138] The configurator can also be set up to configure wireless networks.

[0139] In many cases, relay devices can be coupled to transceivers that are already configured for a wireless communication network and are already set to use specific channels and / or frequencies. New Enrollee devices may not receive on these channels / frequencies. In such a situation, the configuration attempt will fail unless the transceiver used by the relay device changes its channel / frequency, because the Enrollee device will eventually stop responding to a message sent via the transceiver.

[0140] DPP relays are often part of an access point (AP). The primary goal of an AP is to achieve the highest possible throughput for its associated wireless access points (STAs). Therefore, an AP aims to keep each of its wireless devices on the same channel (an AP can have more than one wireless device, each operating on a different channel in the same or a different frequency band).

[0141] If the Configurator knows the channels on which the Enrollee receives, e.g., from the channel ABNF rule in the DPP bootstrapping URI (section 5.2.1 of [DPP]), it wants to select the relay device that actually uses at least one of the channels on which the Enrollee receives. However, the Configurator does not know which channel(s) the radio device(s) of the relay device uses.

[0142] By receiving configuration information, the configurator may be able to select a relay device paired with a suitably configured transceiver (if multiple options are available for a relay device transceiver). If the transceiver control function allows, the configurator may also be able to modify the transceiver's configuration to match the Enrollee device.

[0143] According to one embodiment, the processor (i.e., the relay device) is configured to convert messages between a first configuration protocol format and a second configuration protocol format, the second format possibly using the wireless communication protocol. This allows configurators that only use an IP-based protocol to configure an Enrollee for a wireless communication protocol.

[0144] According to one embodiment, specifying a configuration includes specifying at least one parameter value, wherein the at least one parameter is at least one of a radio channel and a frequency, and the parameter value corresponds to a setting of the transceiver. The configurator can then compare the channel and / or frequency settings of the transceiver with those of the Enrollee device or set the channels and / or frequency of the transceiver and the Enrollee device to the same value.

[0145] According to one embodiment, the information is received using the CAPWAP protocol (Control and Provisioning of Wireless Access Points).

[0146] Since the processor is configured to receive a configuration instruction, the instruction comprising a setting for the transceiver, and in response to the instruction to cause the transceiver to use the setting for communication using the wireless communication protocol, the configurator can cause and ensure that the transceiver uses a channel / frequency on which the Enrollee device receives.

[0147] According to one embodiment, the information is provided using an mDNS announcement. This makes it readily available to configurators that use IP-based protocols.

[0148] According to one embodiment, the information is provided using an access point configuration protocol, such as the CAPWAP (Control and Provisioning of Wireless Access Points) protocol according to RFC 5415, which can be extended for this purpose.

[0149] According to one embodiment, the configuration protocol is the Device Provisioning Protocol (DPP) over TCP / IP.

[0150] According to another embodiment, the configuration protocol is the Matter Commissioning Protocol over TCP / IP.

[0151] According to one embodiment, a network access device is provided, the network access device comprising a transceiver for wireless communication with the wireless communication device according to a wireless communication protocol and comprising at least one relay device.

[0152] According to one embodiment, a configurator is provided which is configured to cooperate with the relay device according to a configuration protocol which enables the configurator to configure at least one wireless communication device for connection to a wireless network, wherein the configurator includes a communication unit which is configured to communicate according to a wired and / or wireless network communication protocol; and A processor system configured to establish a configuration connection to the relay device via the communication unit in accordance with the wired and / or wireless network communication protocol, wherein the configurator is configured, while cooperating with the relay device, to perform at least one of the following actions selected from the group: receiving a specification of a transceiver configuration from the relay device and sending a specification of a configuration via the configuration connection to the relay device, which the relay device is to use to operate the wireless communication protocol between the relay device and the at least one wireless communication device acting as an enrollee device, and receiving information from the at least one wireless communication device acting as an enrollee device.wherein the Enrollee device includes an Enrollee transceiver configured for wireless communication using the wireless communication protocol of the relay device, wherein the information includes a specification of a parameter value of the Enrollee transceiver.

[0153] According to one embodiment, the configurator can be configured to receive the information via an out-of-band channel.

[0154] According to one embodiment, the configurator is configured to select a relay device from a plurality of relay devices, the selection being based on a match between the specification of a configuration of the Enrollee transceiver and the specification of a configuration of the transceiver.

[0155] According to one embodiment, the processor is configured to send a command to the network access device via the configuration link, the command comprising a parameter value for the network access device's transceiver.

[0156] According to one embodiment, the configurator is configured to participate in the configuration of a wireless communication device while cooperating with the relay device via the configuration link, in order to enable the assignment of the wireless communication device to the wireless network.

[0157] According to one embodiment, a method for use in a relay device is provided, wherein the relay device is configured to cooperate with a configurator according to a configuration protocol that enables the configuration of wireless networks and a wireless communication device for connection to a wireless network, and is configured to communicate with a network access device, wherein the network access device has a transceiver and is configured to communicate with the wireless communication device via the transceiver according to a wireless communication protocol, the method comprising establishing a configuration connection according to the network communication protocol by connecting the configurator to the configuration network, performing at least one,selected from the group providing a specification of a parameter of the transceiver to the configurator via the configuration network and receiving a specification of a configuration from the configurator via the configuration link, which is to be used by the transceiver to operate the wireless communication protocol between the relay device and the at least one wireless communication device, and providing a communication link with the wireless communication device to the configurator.

[0158] According to one embodiment, the method includes converting messages between a first format of the configuration protocol and a second format of the wireless communication protocol.

[0159] According to one embodiment, the provision of the transceiver configuration specification to the Configurator is carried out using an mDNS announcement.

[0160] According to one embodiment, the provision of the transceiver configuration specification to the configurator is carried out using an access point configuration protocol, such as the CAPWAP (Control and Provisioning of Wireless Access Points) protocol.

[0161] According to one embodiment, the method includes receiving a command from the configurator to change a parameter of the transceiver to a value provided by the configurator.

[0162] According to one embodiment, a method for use in a configurator device as described herein is provided, wherein the configurator is configured to cooperate with a relay device as described herein and to configure a wireless communication device, the wireless communication device comprising a wireless device transceiver configured to communicate with the relay device using a wireless communication protocol, the method comprising receiving a first specification of a parameter of the wireless device transceiver, performing at least one, selected from the group, receiving a second specification from the relay device, the specification comprising a specification of a parameter of the transceiver, and sending a command to the relay device to cause the network access device toto adjust a parameter of the transceiver according to a value provided by the configurator.

[0163] According to one embodiment, a method for use in a configurator device as described herein is provided, wherein the configurator is configured to cooperate with a relay device as described herein and to configure a wireless communication device, the wireless communication device comprising a wireless device transceiver configured to communicate with the relay device using a wireless communication protocol, the method comprising receiving a first specification from a plurality of relay devices, the specification comprising a specification of a parameter of the transceiver, receiving a second specification of a parameter of the wireless device transceiver via an out-of-band channel, and selecting a relay device according to a match between the first and second specifications.which is to be used to configure the wireless communication device.

[0164] According to one embodiment, the second piece of information can be received via an out-of-band channel.

[0165] According to one embodiment, a configurator is provided which is configured to cooperate with the relay device as described herein according to a configuration protocol which enables the configurator to configure at least one wireless communication device for connection to a wireless network, wherein the configurator comprises a communication unit which is configured to communicate according to a network communication protocol; and a processor system which is configured to establish a configuration connection to the relay device via the communication unit according to the wired and / or wireless network communication protocol, wherein the configurator is configured, while cooperating with the relay device, to execute at least oneselected from the group receiving a specification of a transceiver configuration from the relay device and sending a command via the configuration link to the relay device, wherein the command includes a parameter value for the network access device's transceiver, and communicating with the at least one wireless communication device via the transceiver, and receiving information from the at least one wireless communication device acting as an enrollee device, wherein the enrollee device has an enrollee transceiver configured for wireless communication using the relay device's wireless communication protocol, wherein the information includes a specification of a parameter value of the enrollee transceiver.

[0166] According to one embodiment, the method includes sending a command to the network access device to cause the network access device to adjust a parameter of the transceiver according to a value provided by the configurator.

[0167] According to one embodiment, the provisioning protocol is the Device Provisioning Protocol (DPP) over TCP / IP.

[0168] According to another embodiment, the configuration protocol is the Matter Commissioning Protocol over TCP / IP.

[0169] According to one aspect, a computer program product is provided on a computer-readable medium, wherein the computer program product is configured, when executed on a processor of a device, to cause the device to perform the procedures described above.

[0170] Documents mentioned: [802.11] IEEE Computer Society, „EEE Standard for Information Technology-Telecommunications and Information Exchange Between Systems - Local and Metropolitan Area Networks - Specific requirements Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications“ (IEEE-Standard 802.11-2016), Dezember 2016. [802.1Q] IEEE Standard for Local and metropolitan area networks--Bridges and Bridged Networks, 2014. [DPP] Device Provisioning Protocol - Technical Specification - Version 2.0, Wi-Fi Alliance, 2020, (https: / / www.wi-fi.org / downloads-public / Wi-Fi_Easy_Connect_Specification_v2.0.pdf / 35330) [RFC 6763] RFC 6763, DNS-Based Service Discovery, Februar 2013, https: / / datatracker.ietf.org / doc / rfc6763. [WiFi _EO] Opportunistic Wireless Encryption Specification, Version 1.1, Wi-Fi Alliance, 2020, (https: / / www.wi-fi.org / file-member / opportunistic-wirelessencryption-specification) [WPA3] WPA3™ Specification, Version 3.0, December 14, 2020, Wi-Fi Alliance. QUOTES INCLUDED IN THE DESCRIPTION

[0000] This list of documents cited by the applicant was automatically generated and is included solely for the reader's convenience. The list is not part of the German patent or utility model application. The DPMA accepts no liability for any errors or omissions. Cited non-patent literature

[0000] [802.11] IEEE Computer Society, “EEE Standard for Information Technology-Telecommunications and Information Exchange Between Systems - Local and Metropolitan Area Networks - Specific requirements Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications” (IEEE Standard 802.11-2016), December 2016.

[0170] [802.1Q] IEEE Standard for Local and metropolitan area networks--Bridges and Bridged Networks, 2014.

[0170] [DPP] Device Provisioning Protocol - Technical Specification - Version 2.0, Wi-Fi Alliance, 2020,

[0170] (https: / / www.wi-fi.org / downloads-public / Wi-Fi_Easy_Connect_Specification_v2.0.pdf / 35330)

[0170] [RFC 6763] RFC 6763, DNS-Based Service Discovery, Februar 2013, https: / / datatracker.ietf.org / doc / rfc6763.

[0170] [WiFi _EO] Opportunistic Wireless Encryption Specification, Version 1.1, Wi-Fi Alliance, 2020, (https: / / www.wi-fi.org / file-member / opportunistic-wirelessencryption-specification)

[0170] [WPA3] WPA3™ Specification, Version 3.0, 14. Dezember 2020, Wi-Fi Alliance.

[0170]

Claims

[1] Relay device (164, 165), wherein the relay device is configured to cooperate with a configurator (120) according to a configuration protocol that enables the configuration of at least one wireless communication device (110) for connection to a wireless network, wherein the configuration protocol uses a configuration connection (154, 155, 173), wherein the relay device is configured to communicate with the at least one wireless communication device (110) via a transceiver 131 according to a wireless communication protocol, the relay device comprising a processor (132) configured to enable communication between the configurator (120) and the wireless communication device via the transceiver, and Providing an indication of a configuration of the transceiver (131) to the configurator (120) via the configuration connection (154, 155, 173). [2] Relay device (164, 165), wherein the relay device is configured to cooperate with a configurator (120) according to a configuration protocol that enables the configuration of at least one wireless communication device (110) for connection to a wireless network, wherein the configuration protocol uses a configuration connection (154, 155, 173), wherein the relay device is configured to communicate with the at least one wireless communication device (110) via a transceiver 131 according to a wireless communication protocol, the relay device comprising a processor (132) configured to enable communication between the configurator (120) and the wireless communication device via the transceiver, and Receiving an indication of a configuration from the configurator over the configuration connection to be used by the relay device for operating the wireless communication protocol between the relay device and the at least one wireless communication device. [3] The relay device of claim 1, wherein the processor is configured to convert messages between a first format of the configuration protocol and a second format of the configuration protocol. [4] The relay device of claim 3, wherein the second format uses the wireless communication protocol. [5] A relay device according to claim 1 and 3-4 when dependent on claim 1, wherein the indication of a configuration comprises an indication of at least one parameter value, the at least one parameter being at least one of a radio channel and a frequency, and the parameter value corresponding to a setting of the transceiver. [6] The relay device of claim 2, wherein the indication is received using the CAPWAP (Control and Provisioning of Wireless Access Points) protocol. [7] The relay device of claim 3 or 4, wherein the indication is provided using an mDNS advertisement. [8] A relay device according to any one of claims 3 to 7 when dependent on claim 2, wherein the first format of the configuration protocol is DPP (Device Provisioning Protocol) over TCP / IP. [9] Relay device according to one of claims 2-8, wherein the indication includes at least one selected from the group: a configuration protocol to be used, a radio channel to be used, a frequency to be used, a detection protocol, detection signals to be used, an identifier to be used as an address. [10] Relay device according to any one of claims 2-9, arranged to transmit the indication. [11] Network access device (130), the network access device comprising a transceiver (131) for wireless communication with the wireless communication device (110) according to a Wireless communication protocol and comprising at least one relay device (164, 165) according to claims 1-10. [12] Configurator (120) configured to cooperate with the relay device (164, 165) of claims 1-8 according to a configuration protocol that enables the configurator to configure at least one wireless communication device (110) for connection to a wireless network, the configurator comprehensive a communication unit (121) configured to communicate according to a network communication protocol; and a processor system (122) configured to establish a configuration connection (154, 155 or 173) to the relay device (164, 165) via the communication unit in accordance with the wired and / or wireless network communication protocol, wherein the configurator, when cooperating with the relay device (164, 165), is arranged to - perform at least one selected from the group: receiving an indication of a configuration of the transceiver (131) from the relay device and sending a command to the relay device via the configuration connection, the command comprising a parameter value for the transceiver of the network access device, and - to communicate with the at least one wireless communication device via the transceiver, and - from the at least one wireless communication device (110) acting as an enrollee device (110), wherein the enrollee device (110) has an enrollee transceiver configured for wireless communication using the wireless communication protocol of the relay device, to receive the information comprising an indication of a parameter value of the enrollee transceiver (111). [13] Configurator according to claim 12, which is arranged to receive the information comprising the indication via an out-of-band channel. [14] The configurator of claim 12, configured to select a relay device (164, 165) from a plurality of relay devices, the selection being based on a match between the indication of a configuration of the enrollee transceiver and the indication of a configuration of the transceiver (131). [15] Configurator according to one of claims 10 to 14, wherein the configurator is arranged to participate in the configuration of a wireless communication device while cooperating with the relay device via the configuration connection to enable the wireless communication device to be associated with the wireless network. [16] A method for use in a relay device according to claim 1 or 2, wherein the relay device is configured to cooperate with a configurator (120) according to a configuration protocol which enables the configuration of a wireless communication device (110) for connection to a wireless network, and is configured to communicate with the wireless communication device (110) via a transceiver according to a wireless communication protocol, the method comprising - establishing a configuration connection (154, 155, 173) according to the network communication protocol by connecting the configurator to the configuration network; - performing at least one selected from the group: providing an indication of a parameter of the transceiver (131) to the configurator (120) via the configuration network (164, 165) and receiving a command from the configurator to change a parameter of the transceiver to a value provided by the configurator, and - Providing a communication connection with the wireless communication device (110) to the configurator (120). [17] The method of claim 16, comprising converting messages between a first format of the configuration protocol and a second format of the wireless communication protocol. [18] The method of claim 16 or 17, wherein providing the indication of a configuration of the transceiver to the configurator is performed using an mDNS advertisement. [19] The method of claims 16-18, wherein the indication is received using the CAPWAP (Control and Provisioning of Wireless Access Points) protocol. [20] A method for use in a configurator device according to claims 12-15, wherein the configurator is configured to cooperate with a relay device according to claims 1-9 and to configure a wireless communication device, the wireless communication device comprising a wireless device transceiver configured to communicate with the relay device using a wireless communication protocol, the method comprising - Obtaining a first indication of a parameter of the wireless device transceiver; - Performing at least one selected from the group: receiving a second indication from the relay device, the indication comprising an indication of a parameter of the transceiver, and sending a command to the relay device to cause the network access device to adjust a parameter of the transceiver according to a value provided by the configurator. [21] A method for use in a configurator device according to claims 12-15, wherein the configurator is configured to cooperate with a relay device according to claims 1-9 and to configure a wireless communication device, the wireless communication device comprising a wireless device transceiver configured to communicate with the relay device using a wireless communication protocol, the method comprising - receiving a first indication from a plurality of the relay devices, the indication comprising an indication of a parameter of the transceiver; - receiving a second indication of a parameter of the wireless device transceiver over an out-of-band channel and selecting a relay device according to a match between the first and second indications to be used for configuring the wireless network device. [22] A method according to claim 20 or 21, wherein the second indication is received via an out-of-band channel. [23] The method of any of claims 21-22, wherein the configuration protocol is the Device Provisioning Protocol (DPP) over TCP / IP. [24] A computer program product on a computer-readable medium, the computer program product being arranged, when executed on a processor of a device according to any one of claims 1-10, to cause the device to perform the method according to any one of claims 16-19. [25] A computer program product on a computer-readable medium, the computer program product being arranged, when executed on a processor of a device according to any one of claims 12-15, to cause the device to perform the method according to any one of claims 20-23.

Images