Terminal roaming method, storage medium, and electronic device

Through multi-link operation technology and key negotiation, terminal devices can roam with the target AP without interrupting the current connection, solving the problems of high latency and packet loss rate in FT roaming and achieving high efficiency and security in data transmission.

WO2025236648A1PCT designated stage Publication Date: 2025-11-20ZTE CORP
View PDF 4 Cites 0 Cited by

Patent Information

Application Number
PCT/CN2024/138954
Authority / Receiving Office
WO · WO
Patent Type
Applications
Current Assignee / Owner
Priority Date
2024-05-11
Filing Date
2024-12-12
Publication Date
2025-11-20

AI Technical Summary

Technical Problem

In existing technologies, terminal devices suffer from high latency and packet loss during FT roaming, especially during the rapid transfer of basic service sets, which leads to TCP packet retransmission and UDP packet loss. Furthermore, the context transfer method presents security risks and synchronization difficulties.

Method used

By employing multi-link operation technology, temporary pair transmission keys (PTKs) are generated, allowing terminal devices to negotiate keys with the target AP in advance and switch to the target AP without interrupting the current connection. Roaming preparation and response are carried out using request and response message interaction, enabling sequential configuration and cache management of data streams, thereby reducing latency and packet loss rate.

Benefits of technology

It effectively reduces latency and packet loss rate during terminal device roaming, improves the reliability and security of data transmission, and ensures the continuity and integrity of data streams.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN2024138954_20112025_PF_FP_ABST
    Figure CN2024138954_20112025_PF_FP_ABST
Patent Text Reader

Abstract

The embodiments of the present disclosure provide a terminal roaming method, a storage medium, and an electronic device. A first terminal device is configured to: communicate with a network by using a first PTK; transmit to the network a first request message for roaming preparation, and receive first response information from the network for a roaming response; and, communicate with the network by using a second PTK.
Need to check novelty before this filing date? Find Prior Art

Description

Terminal roaming method, storage medium and electronic device

[0001] Cross-reference to related applications

[0002] The present application is based on Chinese Patent Application No. CN202410584163.2 entitled "Terminal roaming method, storage medium and electronic device" filed on May 11, 2024, and claims priority to the patent application, the disclosure of which is incorporated herein by reference in its entirety. TECHNICAL FIELD

[0003] Embodiments of the present disclosure relate to the field of communication, in particular to a terminal roaming method, a storage medium and an electronic device. BACKGROUND

[0004] Fiber To The Room (FTTR) technology is to connect wireless routers access points (APs) in different rooms or positions in a home or small and medium-sized enterprise scenario through optical fibers, thereby providing high bandwidth and high reliability connection between multi-AP networking. The connection between the master control AP and the slave AP can be realized by using a point-to-multipoint optical distribution network.

[0005] In related technologies, in a Fast BSS Transition (FT) roaming mode, if there are still buffered messages on the source AP after the terminal device roams to the target AP, these messages can only be discarded. For reliable Transmission Control Protocol (TCP) messages, if the Wi-Fi layer discards the messages, the TCP protocol will retransmit the discarded messages, thereby causing a delay problem. For non-reliable User Datagram Protocol (UDP) messages, if the Wi-Fi layer discards the messages, the application layer will display packet loss.

[0006] In related technologies, in a traditional FT mode, before establishing a connection with the target AP, 4 frames of interaction are required to generate a Pairwise Transient Key (PTK). Since the 4 frames of interaction require additional air interface time interaction, it will cause a delay problem of the currently transmitted data frames. Especially in the case of frequent roaming of a terminal (Station, STA) between 2 APs, the delay problem will be more serious.

[0007] In the related art, the context transfer mode, i.e., the AP of the source connection, needs to transfer the encryption key information including the PTK to the target AP, which has certain security risks. In the context switching process, the STA cannot send uplink data to the AP, causing the problem of uplink data latency. The sequence number (SN) and the packet number (PN) in the context transfer mode need to be transferred to the target AP in advance, and the messages sent by the source AP and the target AP to the STA need to have a strict order, otherwise the messages sent by the source AP will be discarded by the receiving end, and it is difficult to implement the strict synchronization mechanism.

[0008] In summary, the FT roaming mode in the related art has the problems of large latency and high packet loss rate. SUMMARY

[0009] According to one embodiment of the present disclosure, a terminal roaming method is provided, applied to a first terminal device, comprising: communicating with a network using a first pairwise transmission key (PTK); sending a first request message for roaming preparation to the network, and receiving a first response information for roaming response from the network; and communicating with the network using a second PTK.

[0010] According to another embodiment of the present disclosure, a terminal roaming method is provided, applied to a network, comprising: communicating with a first terminal device using a first pairwise transmission key (PTK); receiving a first request message for roaming preparation from the first terminal device, and sending a first response information for roaming response to the first terminal device; and communicating with the first terminal device using a second PTK.

[0011] According to still another embodiment of the present disclosure, a computer readable storage medium is also provided, which stores a computer program, wherein the computer program is configured to execute the steps in any of the above method embodiments when running.

[0012] According to still another embodiment of the present disclosure, an electronic device is also provided, which comprises a memory and a processor, the memory stores a computer program, and the processor is configured to execute the computer program to perform the steps in any of the above method embodiments.

[0013] According to still another embodiment of the present disclosure, a computer program product is also provided, which comprises computer programs / instructions, and the computer programs / instructions are executed by a processor to implement the steps in any of the above method embodiments. BRIEF DESCRIPTION OF DRAWINGS

[0014] FIG. 1 is a schematic diagram of a multi-link connection establishment process in the related art;

[0015] FIG. 2 is a hardware structure block diagram of a mobile terminal of a terminal roaming method according to an embodiment of the present disclosure;

[0016] FIG. 3 is a flowchart of a terminal roaming method according to an embodiment of the present disclosure;

[0017] FIG. 4 is another flowchart of a terminal roaming method according to an embodiment of the present disclosure;

[0018] FIG. 5 is a flowchart of a seamless roaming method according to an embodiment of the present disclosure;

[0019] FIG. 6 is a memory information interaction flowchart according to an embodiment of the present disclosure;

[0020] FIG. 7 is a flowchart of another seamless roaming method according to an embodiment of the present disclosure;

[0021] FIG. 8 is a flowchart of yet another seamless roaming method according to an embodiment of the present disclosure;

[0022] FIG. 9 is a flowchart of still another seamless roaming method according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0023] Hereinafter, the embodiments of the present disclosure will be described in detail with reference to the accompanying drawings and in conjunction with embodiments.

[0024] It should be noted that the terms "first", "second", and the like in the specification and claims of the embodiments of the present disclosure and the above-described drawings are used to distinguish similar objects, and do not necessarily have to describe a specific order or sequence.

[0025] In the related art, the 802.11be (Wi-Fi 7) protocol introduces a multi-link operation (MLO) technology, that is, a multi-link device (MLD) including a network device (AP MLD) and a terminal device (non-AP MLD) can simultaneously transmit data on multiple links, thereby improving the throughput of data transmission and reducing the latency.

[0026] After the AP MLD and the non-AP MLD complete a 4-way handshake on one link, the AP MLD and the non-AP MLD generate a MLO-level pairwise transient key (PTK) and a link-level group temporal key (GTK), which are respectively used for encrypting and decrypting transmitted unicast data frames and groupcast data frames, to ensure the security of data transmission. FIG. 1 is a schematic diagram of a multi-link connection establishment process in the related art. As shown in FIG. 1, the AP MLD and the non-AP MLD each include three links operating at 2.4 GHz, 5 GHz, and 6 GHz. The AP MLD and the non-AP MLD complete an authentication, connection, and 4-way handshake process on the 2.4 GHz link, and after the multi-link connection is established, data can be transmitted on the three links.

[0027] In the related art, the pairwise transient key (PTK) is generated in a 4-way handshake process between an AP and a STA. The PTK is a set of keys, which includes the following key information and functions: 1) a temporal key (TK): used for encrypting and decrypting unicast data frames; 2) a key confirmation key (KCK): used for generating message integrity code (MIC) information of a key frame in a key generation process; and 3) a key encryption key (KEK): used for encrypting and protecting a key frame in a key generation process.

[0028] In the related art, in order to solve the problem of latency caused by switching a connection of a terminal device (Client) in a mobile process to an AP, a fast BSS transfer (FT) technology is defined. The core idea is that the Client completes key negotiation with a target AP in advance while maintaining a connection with a current AP, and the entire process does not need to disconnect from the current AP, thereby maintaining the continuity of services. Then, the Client quickly switches to the target AP through a reconnection process, thereby achieving the goal of fast AP switching. According to differences in application scenarios, the FT is divided into two modes: an over-the-air mode and an over-the-distribution system (DS) mode.

[0029] The Over-the-Air mode completes the authentication (Authentication-Request / Response / Confirm / Ack frame interaction process) and generates the secret key information by interacting with the target AP in the air interface, and completes the entire roaming process (i.e., association to the target AP) by interacting with the target AP through the re-association request and response frames.

[0030] The Over-the-DS mode is to use the current connected AP (Current AP) to relay the authentication and secret key interaction messages of the Client and the target AP (Target AP) (the current AP and the target AP are connected to the same DS system). Specifically, the Client encapsulates the authentication information into an action frame and sends it to the current connected AP, and the current connected AP forwards the message to the target AP through the wired or wireless connection link with the target AP for processing, while the current AP is also responsible for encapsulating the authentication and secret key messages generated by the target AP into an action frame and sending them to the Client. After 4 frames (i.e., FT Request / Response / Confirm / ACK) interaction, the authentication with the target AP is completed and the secret key information is generated. Then, the entire roaming process (i.e., association to the target AP) is completed by interacting with the target AP through the re-association request frame and the re-association response frame.

[0031] In the related art, according to the connection state of the STA and the AP, 802.11 defines four states, State 1, State 2, State 3 and State 4. The characteristics of each state are described as follows: State 1: non-connected, non-authenticated state, only allows class 1 type frame transmission. State 2: authenticated but not connected state, allows class 1 and class 2 type frame transmission. State 3: authenticated and connected, but IEEE 802.1X control port blocking state. Allows class 1, class 2 and part of class 3 type frame transmission. State 4: authenticated and connected, but IEEE 802.1X control port open state. Allows class 1, class 2 and class 3 type frame transmission.

[0032] In the related art, IEEE establishes an ultra high reliability (UHR) study group (SG), the task of the SG is to study the evolution direction of next generation (Wi-Fi 8) technology, and an 802.11bn working group is established in November 2023 and drafts the Wi-Fi 8 protocol definition. The seamless roaming technology as a candidate technology of Wi-Fi 8 aims to solve the latency problem of device roaming. Related proposals include: 24 / 52 (Seamless Roaming details) proposes a roaming scheme based on context transfer mode, the general process is: (1) before the terminal device roams from AP1 to AP2, sends a roaming instruction to AP1; (2) AP1 transfers the context of the terminal device to AP2; (3) AP2 receives the downlink data of the terminal device issued by the protocol stack; (4) the terminal device can interact with AP2 for uplink and downlink data; (5) the terminal device can then receive the remaining buffered data from AP1; (6) after AP1 sends the remaining buffered data, sends a link disable instruction to the terminal device; (7) the terminal only transmits uplink and downlink data with AP2 to complete the roaming process.

[0033] In the related art, 24 / 349r1 (Enhanced Fast BSS Transition) proposes a method of modifying the existing FT protocol, adding roaming information interaction (implemented through Roaming Request / Response message interaction) and context transfer process (implemented through Context Transfer Request / Response message interaction) during the FT process, reducing the additional resource overhead caused by context reconstruction.

[0034] The method embodiment provided in the embodiments of the application can be executed in a mobile terminal, a computer terminal or a similar computing device. Taking the case of running on a mobile terminal, FIG. 2 is a hardware structure block diagram of a mobile terminal of a terminal roaming method according to an embodiment of the present disclosure. As shown in FIG. 2, the mobile terminal can include one or more (only one is shown in FIG. 2) processors 202 (the processor 202 can include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA) and a memory 204 for storing data, wherein the mobile terminal can further include a transmission device 206 for communication function and an input and output device 208. Those skilled in the art can understand that the structure shown in FIG. 2 is only schematic, which does not limit the structure of the mobile terminal. For example, the mobile terminal can include more or fewer components than those shown in FIG. 2, or have a different configuration from that shown in FIG. 2.

[0035] The memory 204 can be used to store computer programs, such as software programs of application software and modules, such as a computer program corresponding to the terminal roaming method in the embodiments of the present disclosure. The processor 202 can execute various function applications and data processing, i.e., implement the above method, by running the computer program stored in the memory 204. The memory 204 can include a high-speed random access memory, and can further include a non-volatile memory, such as one or more magnetic storage devices, flash memories, or other non-volatile solid-state memories. In some examples, the memory 204 can further include a memory remotely arranged with respect to the processor 202, and the remote memory can be connected to the mobile terminal through a network. Examples of the above network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and a combination thereof.

[0036] The transmission device 206 is configured to receive or send data via a network. The specific examples of the above network can include a wireless network provided by a communication provider of the mobile terminal. In one example, the transmission device 206 includes a network adapter (NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 206 can be a radio frequency (RF) module, which is configured to communicate with the Internet in a wireless manner.

[0037] In the embodiments of the present disclosure, a terminal roaming method is provided, which is applied to a first terminal device. FIG. 3 is a flowchart of the terminal roaming method in the embodiments of the present disclosure. As shown in FIG. 3, the flow includes the following steps:

[0038] In step S302, the first PTK is used to communicate with the network.

[0039] In one example embodiment, the network includes a first network device and a second network device.

[0040] In one example embodiment, the first PTK is used to communicate with the network, including: the first PTK is used to communicate with the first network device in the network.

[0041] In step S304, a first request message for roaming preparation is sent to the network, and a first response information for roaming response is received from the network.

[0042] In an example embodiment, the first request information comprises at least one of the following: identification information of the second network device of the network; retrieval information of the second PTK; generation information of the second PTK; request link establishment information; identification information of the first terminal device; preset threshold information of the buffered packet; statistical information of the buffered downlink packet; expected sending completion time information; service flow information; configuration information of the sequence number SN and / or the frame number PN of the uplink / downlink data flow; configuration information of the SN and / or the PN of the management frame.

[0043] In an example embodiment, the first response information comprises at least one of the following: identification information of the second network device of the network; identification information of the first terminal device; request link establishment response information; retrieval response information of the second PTK; generation information of the second PTK; preset threshold information of the buffered packet; configuration information of the SN and / or the PN of the uplink / downlink data flow; configuration information of the SN and / or the PN of the management frame; link configuration information; feedback information of the first request information.

[0044] In an example embodiment, the first request information and / or the first response information is encrypted and / or authenticated by the first PTK or the second PTK.

[0045] In an example embodiment, the first response information is further used to indicate whether the second network device of the network has saved the second PTK.

[0046] In the embodiment of the present disclosure, after the first response message indicates that the AP MLD2 (the second network device) does not save the PTK2 (the second PTK) information, the PTK2 is subsequently regenerated in a traditional manner.

[0047] In an example embodiment, after receiving the first response information for roaming response from the network, the method further comprises: sending uplink data to the first network device of the network, and receiving a buffered packet from the first network device, wherein the buffered packet carries buffered packet information.

[0048] In the embodiment of the present disclosure, the AP MLD1 (the first network device) as a temporary service AP MLD can still receive uplink data of the non-AP MLD (the first terminal device) and forward the uplink data to the controller while sending downlink buffered data to the non-AP MLD.

[0049] In an example embodiment, after receiving the buffered packet from the first network device, the method further comprises: in a case where the buffered packet information of the first terminal device reaches a preset threshold, sending second request information to the network, wherein the second request information comprises roaming configuration information; and receiving second response information from the network.

[0050] In an example embodiment, the roaming configuration information comprises at least one of the following: configuration information of SN and / or PN of uplink / downlink data flow; configuration information of SN and / or PN of management frame; link configuration information.

[0051] In an example embodiment, after receiving the second response information from the network, the method further comprises switching the uplink / downlink data path of the network by the first network device of the network to the second network device of the network.

[0052] In an embodiment of the present disclosure, when the network completes the second request response message interaction with the non-AP MLD, the uplink / downlink data path of the non-AP MLD is switched to the AP MLD2.

[0053] Step S306, communicate with the network using the second PTK.

[0054] In an example embodiment, communicating with the network using the second PTK comprises: communicating with the second network device in the network using the second PTK.

[0055] In an example embodiment, communicating with the network using the second PTK comprises: in a case where the buffer message information of the first terminal device reaches a preset threshold, stopping communication with the first network device of the network, switching from the first PTK to the second PTK; and communicating with the second network device of the network through the second PTK.

[0056] In an embodiment of the present disclosure, when the message received by the non-AP MLD meets the threshold value, the non-AP MLD no longer receives data from the AP MLD1 using the PTK1, but switches from the PTK1 to the PTK2, and prepares to interact with the AP MLD2 uplink / downlink data messages.

[0057] In an example embodiment, after communicating with the second network device of the network through the second PTK, the method further comprises sending a release memory request information to the first network device, and receiving a release memory response information from the first network device.

[0058] In an embodiment of the present disclosure, the non-AP MLD (or the AP MLD1) sends a release request information to the AP MLD1 (or the non-AP MLD), and the AP MLD1 (or the non-AP MLD) sends a release memory response information to the non-AP MLD (AP MLD). The non-AP MLD and the AP MLD1 release the context information other than the PTK1, the non-AP MLD identifier information.

[0059] In one example embodiment, further comprising: after the request / response message interaction with the second network device of the network, the 802.11 state machine of the first terminal device and / or the second network device is in a fourth state state 4.

[0060] Through the above steps, the first terminal device communicates with the network using the first PTK; sends a first request message for roaming preparation to the network, and receives a first response message for roaming response from the network; and communicates with the network using the second PTK. The problems of large time delay and high packet loss rate in the FT roaming manner in the related art are solved, and the effect of reducing the time delay and packet loss rate of terminal roaming is achieved.

[0061] The disclosure embodiments further provide a terminal roaming method applied to a network. FIG. 4 is another flowchart of the terminal roaming method of the disclosure embodiments. As shown in FIG. 4, the flow includes the following steps:

[0062] Step S402, communicating with the first terminal device using the first PTK.

[0063] In one example embodiment, the network includes a first network device and a second network device.

[0064] In one example embodiment, the communicating with the first terminal device using the first PTK includes: the first network device communicating with the first terminal device using the first PTK.

[0065] Step S404, receiving a first request message for roaming preparation from the first terminal device, and sending a first response message for roaming response to the first terminal device.

[0066] In one example embodiment, after the sending the first response message for roaming response to the first terminal device, the method further includes: receiving uplink data from the first terminal device, and sending a cache packet to the first terminal device, the cache packet carrying cache packet information.

[0067] In one example embodiment, after the sending the cache packet to the first terminal device, the method further includes: in a case where the cache packet information of the first terminal device reaches a preset threshold, receiving second request information from the first terminal device, wherein the second request information includes roaming configuration information; and sending second response information to the first terminal device.

[0068] In one example embodiment, after the sending the cache packet to the first terminal device, the method further includes: in a case where the cache packet information of the first terminal device reaches a preset threshold, copying remaining cache packets in the first network device to the second network device, and sending the cache packets by the second network device to the first terminal device.

[0069] In the embodiments of the present disclosure, when the network perceives that the received packet meets the threshold value (such as the block ack information feedback by the non-AP MLD), the AP MLD1 stops sending subsequent buffered packets to the non-AP MLD, and the buffered packets (such as MPDU or MSDU format) not sent on the AP MLD1 are copied to the AP MLD2, and the subsequent sending to the non-AP MLD is continued through the AP MLD2.

[0070] In the embodiments of the present disclosure, during roaming, the AP MLD2 (second network device) temporarily uses the PTK1 (first PTK) to communicate with the non-AP MLD (first terminal device), and after a period of time, the AP MLD2 and the non-AP MLD use the regenerated PTK, such as generating the PTK2 (second PTK) by using the rekey method, and then the AP MLD2 and the non-AP MLD switch to the PTK2 for subsequent communication, such as interaction of uplink and downlink data.

[0071] In one example embodiment, after receiving the first request message for roaming preparation from the first terminal device, the method further comprises switching the downlink data from the first terminal device to the second network device of the network for buffering.

[0072] In the embodiments of the present disclosure, when the Controller receives the first request message forwarded by the AP MLD1 or the AP MLD2, the network side received downlink data of the non-AP MLD is switched to the AP MLD2 for buffering.

[0073] In one example embodiment, after receiving the first request message for roaming preparation from the first terminal device, the method further comprises extracting or copying the downlink buffered data from the first terminal device to the second network device of the network for buffering.

[0074] In the embodiments of the present disclosure, when the Controller receives the first request message forwarded by the AP MLD1 or the AP MLD2, the downlink buffered data of the non-AP MLD located on the AP MLD1 is extracted or copied and transferred to the AP MLD2 for buffering.

[0075] Step S406, the second PTK is used to communicate with the first terminal device.

[0076] In one example embodiment, the second PTK is used to communicate with the first terminal device, comprising: the second network device uses the second PTK to communicate with the first terminal device.

[0077] In one example embodiment, the first terminal device communicates with the network using the second PTK, including: in a case where the message information in the buffer of the first terminal device reaches a preset threshold, the first network device of the network stops communicating with the first terminal device, and the second network device of the network communicates with the first terminal device using the second PTK.

[0078] In one example embodiment, after the first terminal device communicates with the network using the second PTK, the method further includes: the first network device receives a release memory request information from the first terminal device, and sends a release memory response information to the first terminal device.

[0079] From the above description of the embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by means of software and the necessary universal hardware platform, and of course, it can also be implemented by hardware, but in many cases, the former is a better implementation. Based on such understanding, the technical solutions of the embodiments of the disclosure can be embodied in the form of a software product, which is stored in a storage medium (such as a ROM / RAM, a magnetic disk, or an optical disk), and includes a plurality of instructions for causing a terminal device (which can be a mobile phone, a computer, a server, or a network device) to execute the methods described in the embodiments of the disclosure.

[0080] In the embodiments, a terminal roaming device is also provided, which is used to implement the above embodiments and preferred embodiments, and will not be described again. As used below, the term "module" can be a combination of software and / or hardware that implements a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, hardware or a combination of software and hardware is also possible and is contemplated.

[0081] The terminal roaming device provided by the embodiments of the disclosure can be applied to a first terminal device, and includes: a first communication module, configured to communicate with a network using a first PTK. A first transmission module, configured to send a first request message for roaming preparation to the network, and receive a first response information for roaming response from the network. A second communication module, configured to communicate with the network using a second PTK.

[0082] The terminal roaming device provided by the embodiments of the disclosure can be applied to a network, and includes: a third communication module, configured to communicate with a first terminal device using a first PTK. A second transmission module, configured to receive a first request message for roaming preparation from the first terminal device, and send a first response information for roaming response to the first terminal device. A fourth communication module, configured to communicate with the first terminal device using a second PTK.

[0083] It should be noted that the above various modules can be implemented by software or hardware, and for the latter, the implementation can be achieved by the following ways, but is not limited to: the above modules are located in the same processor; or the above various modules are located in different processors in any combination. The terminal roaming device provided by the embodiments of the present disclosure is not only limited to the above terminal device and network, but also can be set on other network devices, or independently of the terminal and network device. It can also include different functional modules, and the naming method and function limitation of different modules are not only limited to the above method, and the naming method and function division method of different modules can be selected according to the actual situation.

[0084] The embodiments of the present disclosure further provide a computer readable storage medium, which stores a computer program, and the computer program is configured to execute the steps in any of the method embodiments when running.

[0085] In an example embodiment, the computer readable storage medium can include, but is not limited to: a U disk, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk, and various media that can store computer programs.

[0086] The embodiments of the present disclosure further provide an electronic device, which includes a memory storing a computer program and a processor configured to execute the computer program to perform the steps in any of the method embodiments.

[0087] In an example embodiment, the electronic device can further include a transmission device connected to the processor and an input / output device connected to the processor.

[0088] The embodiments of the present disclosure further provide a computer program product, which includes computer programs / instructions, and the computer programs / instructions are executed by a processor to implement the steps in any of the method embodiments.

[0089] The specific examples in the present embodiment can refer to the examples described in the above embodiments and example embodiments, and the present embodiment will not be repeated here.

[0090] It is obvious that those skilled in the art should understand that each module or each step of the above-mentioned embodiments of the present disclosure can be realized by a general computing device, which can be centralized on a single computing device or distributed on a network composed of multiple computing devices, which can be realized by program codes executable by the computing device, so that they can be stored in a storage device and executed by the computing device, and in some cases, the steps shown or described can be executed in different order, or they can be respectively manufactured into each integrated circuit module, or multiple modules or steps among them can be manufactured into a single integrated circuit module. Thus, the embodiments of the present disclosure are not limited to any specific combination of hardware and software.

[0091] In order for those skilled in the art to better understand the technical solutions of the embodiments of the present disclosure, the technical solutions of the embodiments of the present disclosure are described below in combination with specific embodiments.

[0092] Embodiment one

[0093] FIG. 5 is a flowchart of a seamless roaming method according to an embodiment of the present disclosure. As shown in FIG. 5, a first network device (AP MLD1), a second network device (AP MLD2) and a controller (Controller) jointly constitute a network, and a first terminal device (non-AP MLD) accesses the network through a connected AP MLD1, and the specific steps are as follows:

[0094] Step S501, the Non-AP MLD communicates with the AP MLD1 using a first key (PTK1).

[0095] Step S502, the Non-AP MLD sends first request information (preparation roaming request) to the network.

[0096] In an embodiment, the first request information contains one of the following information: AP MLD2 identification information. PTK2 retrieval information. PTK2 generation information, such as key generation algorithm information, first public key information, etc. Request to establish link information. Non-AP MLD identification information. Threshold value information for receiving remaining messages; that is, the non-AP MLD end configuration countdown, countdown threshold value. Request for statistical information of downlink buffered messages, expected sending completion time information, service flow information. SN and / or PN configuration message related to uplink or downlink data flow. SN and / or PN configuration information of management frame.

[0097] Step S503, based on the above request information, the network sends first response information (preparation roaming response) to the non-AP MLD.

[0098] In an embodiment, the first response information comprises one of the following information: AP MLD2 identification information. Non-AP MLD identification information. Request link establishment response information, i.e. whether each requested link is allowed to be established. PTK2 retrieval response, such as feedback of whether the AP MLD2 contains the PTK2. PTK2 generation information, such as key generation algorithm information, second public key information, etc. Threshold value information for receiving remaining messages, i.e. the countdown, countdown threshold value configured by the network side. SN and / or PN configuration message related to uplink or downlink data flow. SN and / or PN configuration information of management frame. Link configuration information, such as control frame key generation or configuration information of each link, link identifier information, link quantity information, multicast key information such as group temporary key (GTK) of the link, integrity group temporary key (IGTK), beacon integrity group temporary key (BIGTK), etc. Feedback information for request information, such as buffer statistics information, expected completion time, and service flow response information.

[0099] In an embodiment, the first request / response message is transmitted after being encrypted and / or authenticated (i.e. containing MIC information) using PTK1 or PTK2.

[0100] In an embodiment, when the identification information of the non-AP MLD and the AP MLD2 is contained in the first request / response information, the identification information is transmitted after being encrypted or authenticated using PTK1 or PTK2, such as being encrypted or authenticated using KCK in PTK1 or PTK2 to generate MIC for transmission.

[0101] In an embodiment, when the Controller receives the first request message forwarded by the AP MLD1 or the AP MLD2, the downlink data of the non-AP MLD received by the network side is switched to the AP MLD2 for buffering.

[0102] In an embodiment, when the Controller receives the first request message forwarded by the AP MLD1 or the AP MLD2, the downlink buffer data of the non-AP MLD located on the AP MLD1 is extracted or copied and transferred to the AP MLD2 for buffering, and step S504 is skipped.

[0103] In step S504, the AP MLD1 sends the remaining buffer messages to the non-AP MLD, and the messages carry the remaining buffer message information.

[0104] In an embodiment, the remaining buffer data amount (countdown) or the remaining transmission time (countdown) information is carried in the A-control (i.e. HT-control) field of the MPDU.

[0105] In the embodiments of the present disclosure, the sending of the buffered packet in step S504 can be determined according to actual conditions.

[0106] In step S505, when the remaining buffered packet information meets a certain threshold value, the non-AP MLD sends second request information (roaming request) containing configuration information to the network.

[0107] In step S506, the network sends second response information (roaming response) containing configuration information to the non-AP MLD.

[0108] In the embodiments of the present disclosure, the sending and receiving of the second request information and the second response information in steps S505-S506 can be determined according to actual conditions.

[0109] In an embodiment, the first and second request and response information is exchanged between the non-AP MLD and the first or second network device.

[0110] In an embodiment, in steps S502-S506, the AP MLD1, as a temporary service AP MLD, can still receive uplink data from the non-AP MLD and forward the data to the controller while sending downlink buffered data to the non-AP MLD.

[0111] In an embodiment, when the network perceives that the received packet meets the threshold value (for example, perceives the received information through the block ack information fed back by the non-AP MLD), the AP MLD2 is notified to continue sending the packet after encrypting the data using PTK2. Steps S505-S506 are skipped.

[0112] In an embodiment, when the received packet of the non-AP MLD meets the threshold value, the non-AP MLD no longer receives data from the AP MLD1 using PTK1, but switches from PTK1 to PTK2, and prepares to interact with the AP MLD2 for uplink and downlink data packets.

[0113] In an embodiment, when the network senses that the received packets meet the threshold value (such as sensing the reception information through the block ack information feedback by the non-AP MLD), the AP MLD1 stops sending subsequent buffered packets to the non-AP MLD, and the buffered packets (such as MPDU or MSDU format) not sent on the AP MLD1 are copied to the AP MLD2, and the subsequent sending to the non-AP MLD is continued through the AP MLD2.

[0114] In an embodiment of the present disclosure, during roaming, the AP MLD2 temporarily uses the PTK1 to communicate with the non-AP MLD, and after a period of time, the AP MLD2 and the non-AP MLD use the regenerated PTK, such as generating the PTK2 by using the rekey method, and then the AP MLD2 and the non-AP MLD switch to the PTK2 to perform subsequent communication, such as interacting with the uplink and downlink data.

[0115] In an embodiment, in steps S505-S506, the roaming configuration information includes one of the following: (a) SN and / or PN configuration information related to the uplink or downlink data stream. (b) SN and / or PN configuration information of the management frame. (c) Link configuration information, such as control frame key generation or configuration information of each link, link identifier information, link quantity information, multicast key information such as link GTK, IGTK, BIGTK, etc.

[0116] In an embodiment, when the roaming configuration message does not carry the SN and / or PN configuration information related to the uplink or downlink data stream, the non-AP MLD and the AP MLD2 set the SN and / or PN value of the corresponding data stream to 0 before interacting with the data.

[0117] In an embodiment, when the network completes the interaction of the second request response message with the non-AP MLD, the uplink and downlink data paths of the non-AP MLD are all switched to the AP MLD2.

[0118] In step S507, after the above roaming request and response information interaction, the non-AP MLD and the AP MLD2 install the PTK2.

[0119] In an embodiment, when the non-AP MLD has not established a connection with the AP MLD2, the PTK is generated in advance through the over-the-air or over-the-DS method before initiating the roaming request message.

[0120] In an embodiment, when the first response message indicates that the AP MLD2 does not save the PTK2 information, the PTK2 is regenerated in the subsequent traditional manner.

[0121] In one embodiment, PTK1 and PTK2 are the same PTK.

[0122] In step S508, the Non-AP MLD uses PTK2 to exchange uplink and downlink data with AP MLD2.

[0123] In one embodiment, Figure 6 is a flowchart of memory information interaction according to an embodiment of this disclosure. As shown in Figure 6, non-AP MLD (or AP MLD1) sends a release request message to AP MLD1 (or non-AP MLD), and AP MLD1 (or non-AP MLD) sends a memory release response message to non-AP MLD (AP MLD). Non-AP MLD and AP MLD1 release context information other than PTK1 and non-AP MLD identifier information.

[0124] In one embodiment, the Controller in the network acts as an independent physical carrier, responsible for the data path switching function, and is connected to AP MLD1 and AP MLD2 via wired or wireless means. In other application instances, the Controller acts as a software function with data switching capabilities, attached to AP MLD1 or AP MLD2, and AP MLD1 and AP MLD2 are connected via wired or wireless means.

[0125] In one embodiment, after the non-AP MLD and the network interact via a first request / response frame or a second request / response frame, the non-AP MLD and / or AP MLD2 state machine is in state 4.

[0126] Example 2

[0127] Figure 7 is a flowchart of another seamless roaming method according to an embodiment of this disclosure. As shown in Figure 7, AP MLD1 and AP MLD2 are connected to the Controller via wired or wireless means, and the Controller is responsible for ultimately accessing the network. Based on the enhanced FT architecture, the roaming operation steps are as follows:

[0128] In step S701, the first terminal device (non-AP MLD) and the first network device (AP MLD1) communicate using the first key (PTK1).

[0129] In step S702, when certain roaming conditions are met, the non-AP MLD sends a roaming preparation request to the second network device (AP MLD2). This includes PTK2 retrieval information and cached message request information on AP MLD1.

[0130] Step S703, after receiving the above roaming request, the AP MLD2 forwards the information to the Controller, and the Controller sends it to the AP MLD2 after obtaining the downlink buffer message information from the AP MLD1. And the Controller switches the subsequent downlink data received from the network side to the AP MLD2.

[0131] Step S704, the AP MLD2 sends the roaming response information to the non-AP MLD. The information includes PTK2 retrieval response information, and buffer message response information on the AP MLD1.

[0132] Step S705, the AP MLD1 sends the buffered downlink data message to the non-AP MLD, and the message header carries the remaining message quantity information.

[0133] Step S706, the Non-AP MLD sends the roaming configuration request information to the AP MLD2, and carries the non-AP MLD capability set configuration information, and requests the link establishment information.

[0134] Step S707, the AP MLD2 converts the above request information into the switch service AP MLD service request information, and sends it to the Controller.

[0135] Step S708, the Controller sends the switch service AP MLD response information to the AP MLD2.

[0136] Step S709, the AP MLD2 sends the roaming configuration response information to the non-AP MLD, which includes the AP MLD capability set configuration information, the response information of the request link establishment, and the multicast key configuration information on each link. At this time, the non-AP MLD is formally connected to the AP MLD2.

[0137] Step S710, after the Non-AP MLD installs the PTK2 with the AP MLD2, the subsequent uplink and downlink data interaction is carried out.

[0138] Step S711, the Non-AP MLD sends the release context request message to the AP MLD1.

[0139] Step S712, the AP MLD1 sends the release context response message to the Non-AP MLD, and both sides complete the memory space release except for the PTK.

[0140] Example three

[0141] Figure 8 is a flow chart of another seamless roaming method according to an embodiment of the present disclosure. As shown in Figure 8, the AP MLD1 and the AP MLD2 are connected to the Controller through wired or wireless means, and the Controller is responsible for the final access to the network. The roaming operation steps are as follows:

[0142] Step S801, the first terminal device (non-AP MLD) communicates with the first network device (AP MLD1) using the first key (PTK1).

[0143] Step S802, when certain roaming conditions are met, the non-AP MLD sends a roaming preparation request message to the first network device (AP MLD1), containing: PTK2 retrieval information, a set of non-AP MLD capabilities, link establishment request information on the AP MLD2, buffered packet request information on the AP MLD1, and buffered packet threshold setting information.

[0144] Step S803, the AP MLD1 forwards the roaming request message to the Controller.

[0145] Step S804, the Controller generates link request information containing link request and PTK2 retrieval information, and sends it to the AP MLD2.

[0146] Step S805, the Controller obtains link response information from the AP MLD2, including link request response information, PTK2 retrieval response information, and multicast key information for each link allowed to establish a connection, and forwards it to the AP MLD1.

[0147] Step S806, the Controller switches the new downlink packets received from the network to the AP MLD2.

[0148] Step S807, the AP MLD1 sends a roaming response message to the non-AP MLD, containing PTK2 retrieval response information, AP MLD2 link establishment request response information and multicast key information for each link, and AP MLD1 buffered packet request response information.

[0149] Step S808, the AP MLD1 sends the remaining buffered packets to the non-AP MLD, and the packets carry remaining buffered packet quantity information and estimated transmission completion time information.

[0150] Step S809, when the values of the remaining packet quantity, the remaining time, etc. meet certain threshold values:

[0151] a) non-AP MLD locally deletes the context related to AP MLD1 (except PTK1), releases memory space, switches to the individual operating channels allowed by AP MLD2 to establish multi-link, installs PTK2, waits for receiving new downlink data packets from AP MLD2, and sends uplink data packets after encryption using PTK2.

[0152] b) AP MLD1 sends a message start transmission instruction on the link connected with AP MLD2, and locally deletes the context related to non-AP MLD (except PTK1), and releases memory space.

[0153] c) If AP MLD2 has the ability to collect and monitor the data sent by AP MLD1 to non-AP MLD, AP MLD2 senses that the threshold set by non-AP MLD is met, and does not need to wait for the instruction of step b), and can directly send downlink data to non-AP MLD.

[0154] Step S810, AP MLD2 sends a switch service AP MLD request for non-AP MLD to Controller.

[0155] Step S811, Controller sends a response of switching service AP MLD to AP MLD2 and AP MLD1. AP MLD2 interacts with non-AP MLD by uplink and downlink data encrypted by PTK2.

[0156] Embodiment Four

[0157] FIG. 9 is a flow chart of another seamless roaming method according to an embodiment of the present disclosure. As shown in FIG. 9, the service AP MLD is immediately adjusted by the message buffering and copying method. AP MLD1 and AP MLD2 are connected to Controller by wired or wireless manner, and Controller is responsible for the final access to network. The roaming operation steps are as follows:

[0158] Step S901, a first terminal device (non-AP MLD) communicates with a first network device (AP MLD1) using a first key (PTK1).

[0159] Step S902, when certain roaming conditions are met, non-AP MLD sends a roaming preparation request message to first network device (AP MLD1), which contains: a set of capabilities of non-AP MLD, PTK2 retrieval information, request link establishment information on AP MLD2, and SN and / or PN information of current uplink and downlink data frames. The SN and / or PN information of management frame is managed.

[0160] Step S903, after receiving the roaming request, the AP MLD2 forwards the information to the Controller, and the Controller copies and sends the downlink buffered data to the AP MLD2 after obtaining the downlink buffered data from the AP MLD1. The SN and / or PN information of each downlink data is reset according to the SN and / or PN information in the request information.

[0161] Step S904, the Controller switches the subsequent downlink data received from the network side to the AP MLD2.

[0162] Step S905, the AP MLD2 sends a roaming response information to the non-AP MLD, including the capability set of the AP MLD2, the PTK2 retrieval response information, the request link response information, and the multicast key information of each link, and indicates that the non-AP MLD can immediately communicate data with the AP MLD2. At this time, the AP MLD2 officially serves as the service AP MLD of the non-AP MLD.

[0163] Step S906, the Non-AP MLD and the AP MLD2 use PTK2 to interact with uplink and downlink data.

[0164] In summary, the embodiment of the present disclosure provides a terminal roaming method, which realizes seamless roaming, further enhances in the traditional FT, reduces the packet loss rate, reduces the delay, improves the safety and reliability, and realizes seamless roaming. The terminal roaming method provided by the embodiment of the present disclosure is dominated by the client (Client) throughout the roaming process, including the following aspects: (1) By increasing the query signal and data receiving process of the downlink buffered data of the source access point before roaming, the delay problem caused by the loss of buffered data is reduced. (2) By transferring the downlink buffered data, the delay problem caused by the loss of buffered data is reduced. (3) By buffering PTK, the frame interaction process of the key generation process in the roaming process is reduced. (4) Through the two-level service AP MLD switching process (i.e. preparation switching and formal switching), the problems of uplink data packet loss and delay transmission are solved. (5) The seamless roaming realized by the non-context transfer method reduces the complexity of implementation.

[0165] The terminal roaming method provided by the embodiment of the present disclosure reduces the air interface resource overhead during roaming based on the PTK buffering and retrieval method. Based on the buffered data information indication method, the delay problem caused by the loss of buffered data is reduced. Based on the client-led roaming process, the context transfer method is not required, which reduces the difficulty of implementation. Based on the two-level transfer process of the service AP MLD (temporary service AP MLD and formal service AP MLD), the uplink data transmission delay is reduced. Based on the release context request and response method, the memory space is released in time, and the memory overhead is reduced.

[0166] The above merely provides preferred embodiments of the present disclosure, and is not intended to limit the present disclosure. For those skilled in the art, the present disclosure can have various modifications and changes. Any modifications, equivalent replacements, improvements, etc. made within the principles of the present disclosure should be included in the protection scope of the present disclosure.

Claims

1. A terminal roaming method applied to a first terminal device, comprising: communicating with a network by using a first pairwise transient key (PTK) ; sending a first request message for roaming preparation to the network, and receiving a first response information for roaming response from the network; communicating with the network by using a second PTK. 2.The method of claim 1, wherein: the network comprises a first network device and a second network device.

3. The method of claim 2, wherein, the communicating with the network by using a first pairwise transient key (PTK) comprises: communicating with the first network device in the network by using the first PTK.

4. The method of claim 2, wherein, the communicating with the network by using a second PTK comprises: communicating with the second network device in the network by using the second PTK.

5. The method of claim 1, wherein, the first request information comprises at least one of: identification information of the second network device of the network; retrieval information of the second PTK; generation information of the second PTK; request link establishment information; identification information of the first terminal device; preset threshold information of buffered packets; statistical information of requested downlink buffered packets; expected sending completion time information; service flow information; configuration information of sequence number (SN) and / or frame number (PN) of uplink / downlink data flow; configuration information of SN and / or PN of management frame.

6. The method of claim 1, wherein, the first response information comprises at least one of: identification information of the second network device of the network; identification information of the first terminal device; request link establishment response information; retrieval response information of the second PTK; generation information of the second PTK; preset threshold information of buffered packets; configuration information of SN and / or PN of uplink / downlink data flow; configuration information of SN and / or PN of management frame; link configuration information; feedback information of the first request information. 7.The method of claim 1, wherein: the first request information and / or the first response information is encrypted and / or authenticated by the first PTK or the second PTK. the first response information is further used to indicate whether the second network device of the network has the second PTK. after receiving the first response information for roaming response from the network, the method further comprises:

8. The method of claim 1, wherein, sending uplink data to the first network device of the network, and receiving a buffered packet from the first network device, wherein the buffered packet carries buffered packet information.

9. The method of claim 1, wherein, the communicating with the network by using a second PTK comprises: stopping communication with the first network device of the network, switching from the first PTK to the second PTK, when the buffered packet information of the first terminal device reaches a preset threshold; 10. The method of claim 9, wherein, communicating with the second network device of the network by using the second PTK. after communicating with the second network device of the network by using the second PTK, the method further comprises: sending a memory release request information to the first network device, and receiving a memory release response information from the first network device.

11. The method of claim 10, wherein, after receiving the buffered packet from the first network device, the method further comprises: ​ 12. The method of claim 9, wherein, ​ In a case where the buffer message information of the first terminal device reaches a preset threshold, a second request information is sent to the network, wherein the second request information comprises roaming configuration information; Second response information is received from the network.

13. The method of claim 12, wherein, The roaming configuration information comprises at least one of the following: Configuration information of SN and / or PN of uplink / downlink data flow; configuration information of SN and / or PN of management frame; link configuration information.

14. The method of claim 12, wherein, After the second response information is received from the network, the method further comprises: The uplink / downlink data path is switched by the first network device of the network to the second network device of the network.

15. The method of claim 1, wherein, Further comprising: After the request / response message interaction with the second network device of the network, the 802.11 state machine of the first terminal device and / or the second network device is in a fourth state state 4.

16. A terminal roaming method applied to a network, comprising: Communicating with a first terminal device using a first pairwise transmission key (PTK); Receiving a first request message for roaming preparation from the first terminal device, and sending a first response information for roaming response to the first terminal device; Communicating with the first terminal device using a second PTK.

17. The method of claim 16, wherein The network comprises a first network device and a second network device.

18. The method of claim 17, wherein, The communicating with the first terminal device using a first pairwise transmission key (PTK) comprises: The first network device communicates with the first terminal device using the first PTK.

19. The method of claim 17, wherein, The communicating with the first terminal device using a second PTK comprises: The second network device communicates with the first terminal device using the second PTK.

20. The method of claim 16, wherein, After the first response information for roaming response is sent to the first terminal device, the method further comprises: Receiving uplink data from the first terminal device, and sending a buffer message to the first terminal device, wherein the buffer message carries buffer message information.

21. The method of claim 20, wherein, The communicating with the first terminal device using a second PTK comprises: In a case where the buffer message information of the first terminal device reaches a preset threshold, the first network device of the network stops communicating with the first terminal device, and the second network device of the network communicates with the first terminal device through the second PTK.

22. The method of claim 21, wherein, After the communication with the first terminal device through the second PTK, the method further comprises: The first network device receives a release memory request information from the first terminal device, and sends a release memory response information to the first terminal device.

23. The method of claim 20, wherein, After the buffer message is sent to the first terminal device, the method further comprises: In a case where the buffer message information of the first terminal device reaches a preset threshold, a second request information is received from the first terminal device, wherein the second request information comprises roaming configuration information; Second response information is sent to the first terminal device.

24. The method of claim 20, wherein, After the buffer message is sent to the first terminal device, the method further comprises: In a case where the packet information in the buffer of the first terminal device reaches a preset threshold, the remaining buffered packets in the first network device are copied to a second network device, and the second network device sends the buffered packets to the first terminal device.

25. The method of claim 16, wherein, After receiving the first request message for roaming preparation from the first terminal device, the method further comprises: Switching downlink data from the first terminal device to a second network device of the network for buffering.

26. The method of claim 16, wherein, After receiving the first request message for roaming preparation from the first terminal device, the method further comprises: Extracting or copying downlink buffered data from the first terminal device to a second network device of the network for buffering.

27. A computer readable storage medium having stored therein a computer program, wherein, The computer program, when executed by a processor, implements the method recited in any one of claims 1 to 26.

28. An electronic device comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein the processor implements the method recited in any one of claims 1 to 26 when executing the computer program.

29. A computer program product comprising computer programs / instructions, wherein the computer programs / instructions, when executed by a processor, implement the method recited in any one of claims 1 to 26.

Citation Information

Patent Citations

  • Multi-link wireless communication security

    CN115211155A

  • Roaming method and system

    CN116156493A

  • Assisting roaming

    CN117896795A

  • Fast basic service set transition for multi-link operation

    US20220022033A1