Authentication techniques for seamless roaming

Abstract

This disclosure provides methods, components, devices and systems for authentication techniques for seamless roaming. Some aspects relate more specifically to techniques for a non-access point (AP) device to prepare the second security key and transition the non-AP device to a target AP multi-link device (MLD) via communications with the serving AP MLD, with the target AP MLD, or both. In some aspects, the target AP MLD may perform validation based on information from the non-AP device or based on communicating with a previous serving AP MLD. In some aspects, a network may initiate roaming by indicating for the non-AP device to roam from a serving AP MLD to one or more target AP MLDs. The non-AP device may identify a timer associated with performing the roaming, and may accept or reject the request to perform the roaming within a duration of the timer.

Description

Qualcomm Docket No. 2501299WO1AUTHENTICATION TECHNIQUES FOR SEAMLESS ROAMINGCROSS REFERENCE

[0001] The present Application for Patent claims priority to India Patent Application No. 202541000847 by CHISCI et al., entitled “AUTHENTICATION TECHNIQUES FOR SEAMLESS ROAMING,” filed January 3, 2025, which is assigned to the assignee hereof, and expressly incorporated by reference in its entirety herein.TECHNICAL FIELD

[0002] This disclosure relates generally to wireless communication and, more specifically, to authentication techniques for seamless roaming. Various aspects relate to techniques for roaming in a seamless mobility domain (SMD).DESCRIPTION OF THE RELATED TECHNOLOGY

[0003] Wireless communication networks may include various types of wireless communication devices including network entities (such as wireless access points (AP) or base stations (BS)), client devices (such as wireless stations (STAs) or user equipment (UEs)), and other wireless nodes. These wireless communication devices may communicate with one another via a variety of technologies and wireless communication protocols, including wireless local area network (WLAN) or Wi-Fibased protocols or cellular (such as 4G, 5G, or 6G)-based protocols. The wireless communication networks may be capable of supporting communication with multiple users by sharing the available system resources (such as time, frequency, and spatial resources). To enable features or provide improved performance, the wireless communication devices may employ technologies such as orthogonal frequency divisional multiple access (OFDMA), multi-user Multiple-Input Multiple-Output (MU-MIMO), spatial multiplexing, and beamforming. For greater inter-operability, the wireless communication networks may support backwards compatibility (such as supporting legacy wireless communication devices) as well as forward compatibility (such as supporting communication with wireless communication devices compatible with next-generation wireless communication standards).Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO2SUMMARY

[0004] The systems, methods, and devices of this disclosure each have several innovative aspects, no single one of which is solely responsible for the desirable attributes disclosed herein.

[0005] One innovative aspect of the subject matter described in this disclosure can be implemented in a method for wireless communications by a wireless station (STA) device. The method may include outputting a first message associated with roaming to a target wireless access point (AP) device, where the first message indicates first information associated with generation of a first security key associated with the target wireless AP device, obtaining a second message indicating second information associated with the generation of the first security key, generating the first security key based on the first message and the second message, outputting a third message that is protected using one of the first security key or a second security key associated with a serving wireless AP device, the third message indicating a message integrity check (MIC) associated with the first security key, where the first security key and the second security key are associated with a same pairwise transient key security association (PTKSA), obtaining a fourth message associated with the roaming, the fourth message protected using the one of the first security key or the second security key, and performing the roaming to the target wireless AP device based on obtaining the fourth message.

[0006] Another innovative aspect of the subject matter described in this disclosure can be implemented in a wireless STA device for wireless communications. The wireless STA device may include a processing system that includes processor circuitry and memory circuitry that stores code. The processing system may be configured to cause the wireless STA device to output a first message associated with roaming to a target wireless AP device, where the first message indicates first information associated with generation of a first security key associated with the target wireless AP device, obtain a second message indicating second information associated with the generation of the first security key, generate the first security key based on the first message and the second message, output a third message that is protected using one of the first security key or a second security key associated with a serving wireless AP device, the third message indicating a MIC associated with the first security key, where the first Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO3security key and the second security key are associated with a same PTKSA, obtain a fourth message associated with the roaming, the fourth message protected using the one of the first security key or the second security key, and perform the roaming to the target wireless AP device based on obtaining the fourth message.

[0007] Another innovative aspect of the subject matter described in this disclosure can be implemented in a wireless STA device for wireless communications. The wireless STA device may include means for outputting a first message associated with roaming to a target wireless AP device, where the first message indicates first information associated with generation of a first security key associated with the target wireless AP device, means for obtaining a second message indicating second information associated with the generation of the first security key, means for generating the first security key based on the first message and the second message, means for outputting a third message that is protected using one of the first security key or a second security key associated with a serving wireless AP device, the third message indicating a MIC associated with the first security key, where the first security key and the second security key are associated with a same PTKSA, means for obtaining a fourth message associated with the roaming, the fourth message protected using the one of the first security key or the second security key, and means for performing the roaming to the target wireless AP device based on obtaining the fourth message.

[0008] Another innovative aspect of the subject matter described in this disclosure can be implemented in a non-transitory computer-readable medium storing code for wireless communications. The code may include instructions executable by one or more processors to output a first message associated with roaming to a target wireless AP device, where the first message indicates first information associated with generation of a first security key associated with the target wireless AP device, obtain a second message indicating second information associated with the generation of the first security key, generate the first security key based on the first message and the second message, output a third message that is protected using one of the first security key or a second security key associated with a serving wireless AP device, the third message indicating a MIC associated with the first security key, where the first security key and the second security key are associated with a same PTKSA, obtain a fourth message associated with the roaming, the fourth message protected using the one of the firstAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO4security key or the second security key, and perform the roaming to the target wireless AP device based on obtaining the fourth message.

[0009] Some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for outputting the first message includes outputting the first message to the serving wireless AP device and obtaining the second message includes obtaining the second message from the serving wireless AP device.

[0010] In some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein, the first message and the second message are protected using the second security key.

[0011] Some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for outputting the third message includes outputting the third message to the serving wireless AP device and obtaining the fourth message includes obtaining the fourth message from the serving wireless AP device.

[0012] In some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein, the third message and the fourth message may be protected using the second security key.

[0013] Some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for outputting the third message includes outputting the third message to the target wireless AP device and obtaining the fourth message includes obtaining the fourth message from the target wireless AP device.

[0014] In some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein, the third message and the fourth message may be protected using the first security key.

[0015] Some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for outputting the first message includes outputting the firstAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO5message to the target wireless AP device and obtaining the second message includes obtaining the second message from the target wireless AP device.

[0016] In some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein, the third message and the fourth message may be unprotected.

[0017] Some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for outputting, to the serving wireless AP device, a capability message indicating a capability of the wireless STA device to use the first security key and the second security key associated with the same PTKSA, where the first security key and the second security key may be associated with the same PTKSA based on the capability.

[0018] In some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein, the capability message may be output during an association procedure associated with a seamless roaming mobility domain (SMD), the SMD including the serving wireless AP device and the target wireless AP device.

[0019] In some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein, the PTKSA, a pairwise master key security association (PMKSA) associated with the target wireless AP device and the serving wireless AP device, or both may be associated with a SMD, the SMD including the target wireless AP device and the serving wireless AP device.

[0020] Another innovative aspect of the subject matter described in this disclosure can be implemented in a method for wireless communications by a first wireless AP device. The method may include obtaining, from a wireless STA device, a first message associated with roaming to the first wireless AP device, the first message associated with a PTKSA and indicating information associated with validation of the wireless STA device, validating the wireless STA device based on the information associated with the validation, outputting a second message indicating one or more wireless communication links associated with the first wireless AP device, andAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO6communicating with the wireless STA device via a wireless communication link of the one or more wireless communication links based on outputting the second message.

[0021] Another innovative aspect of the subject matter described in this disclosure can be implemented in a first wireless AP device for wireless communications. The first wireless AP device may include a processing system that includes processor circuitry and memory circuitry that stores code. The processing system may be configured to cause the first wireless AP device to obtain, from a wireless STA device, a first message associated with roaming to the first wireless AP device, the first message associated with a PTKSA and indicating information associated with validation of the wireless STA device, validate the wireless STA device based on the information associated with the validation, output a second message indicating one or more wireless communication links associated with the first wireless AP device, and communicate with the wireless STA device via a wireless communication link of the one or more wireless communication links based on outputting the second message.

[0022] Another innovative aspect of the subject matter described in this disclosure can be implemented in a first wireless AP device for wireless communications. The first wireless AP device may include means for obtaining, from a wireless STA device, a first message associated with roaming to the first wireless AP device, the first message associated with a PTKSA and indicating information associated with validation of the wireless STA device, means for validating the wireless STA device based on the information associated with the validation, means for outputting a second message indicating one or more wireless communication links associated with the first wireless AP device, and means for communicating with the wireless STA device via a wireless communication link of the one or more wireless communication links based on outputting the second message.

[0023] Another innovative aspect of the subject matter described in this disclosure can be implemented in a non-transitory computer-readable medium storing code for wireless communications. The code may include instructions executable by one or more processors to obtain, from a wireless STA device, a first message associated with roaming to the first wireless AP device, the first message associated with a PTKSA and indicating information associated with validation of the wireless STA device, validate the wireless STA device based on the information associated with the validation, output Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO7a second message indicating one or more wireless communication links associated with the first wireless AP device, and communicate with the wireless STA device via a wireless communication link of the one or more wireless communication links based on outputting the second message.

[0024] In some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein, the information associated with the validation includes a first media access control (MAC) address associated with a second wireless AP device, a second MAC address associated with the wireless STA device, a security key, a MIC, a packet number, an association state, an encryption of the message, or any combination thereof.

[0025] Some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for obtaining, from the second wireless AP device, an indication of second information associated with the validation, where the validating may be based on a comparison of the information associated with the validation and the second information associated with the validation.

[0026] In some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein, the security key may be common to a SMD, the SMD including the first wireless AP device and the second wireless AP device.

[0027] Some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for receiving first signaling including an indication of the security key during an association procedure associated with the SMD.

[0028] Some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for receiving second signaling including an indication of a second security key based on validating the wireless STA device.

[0029] Some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein may further include operations, features,Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO8means, or instructions for outputting, to the second wireless AP device, a request message indicating a request for second information associated with the validation and obtaining, from the second wireless AP device, a response message indicating the second information associated with the validation, where the validating may be based on the second information associated with the validation.

[0030] In some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein, the second information associated with the validation includes the second MAC address associated with the wireless STA device, a second MIC, a second packet number, or any combination thereof.

[0031] In some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein, the request includes the information associated with the validation and the second information associated with the validation includes a verification of the information associated with the validation.

[0032] In some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein, the second message is protected with a security key associated with the PTKSA, a MIC, or both.

[0033] Another innovative aspect of the subject matter described in this disclosure can be implemented in a method for wireless communications by a wireless STA device. The method may include obtaining, from a first wireless AP device, a first message indicating a request for the wireless STA device to perform a roaming procedure to roam from the first wireless AP device to one of a set of second wireless AP devices, where the first message indicates the set of second wireless AP devices and a duration for the wireless STA device to perform the roaming procedure, outputting a response message indicating an acceptance or rejection of the request, and performing the roaming procedure to roam from the first wireless AP device to a second wireless AP device of the set of second wireless AP devices or to a third wireless AP device during the duration and in accordance with the acceptance or rejection.

[0034] Another innovative aspect of the subject matter described in this disclosure can be implemented in a wireless STA device for wireless communications. The wireless STA device may include a processing system that includes processor circuitryAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO9and memory circuitry that stores code. The processing system may be configured to cause the wireless STA device to obtain, from a first wireless AP device, a first message indicating a request for the wireless STA device to perform a roaming procedure to roam from the first wireless AP device to one of a set of second wireless AP devices, where the first message indicates the set of second wireless AP devices and a duration for the wireless STA device to perform the roaming procedure, output a response message indicating an acceptance or rejection of the request, and perform the roaming procedure to roam from the first wireless AP device to a second wireless AP device of the set of second wireless AP devices or to a third wireless AP device during the duration and in accordance with the acceptance or rejection.

[0035] Another innovative aspect of the subject matter described in this disclosure can be implemented in a wireless STA device for wireless communications. The wireless STA device may include means for obtaining, from a first wireless AP device, a first message indicating a request for the wireless STA device to perform a roaming procedure to roam from the first wireless AP device to one of a set of second wireless AP devices, where the first message indicates the set of second wireless AP devices and a duration for the wireless STA device to perform the roaming procedure, means for outputting a response message indicating an acceptance or rejection of the request, and means for performing the roaming procedure to roam from the first wireless AP device to a second wireless AP device of the set of second wireless AP devices or to a third wireless AP device during the duration and in accordance with the acceptance or rejection.

[0036] Another innovative aspect of the subject matter described in this disclosure can be implemented in a non-transitory computer-readable medium storing code for wireless communications. The code may include instructions executable by one or more processors to obtain, from a first wireless AP device, a first message indicating a request for the wireless STA device to perform a roaming procedure to roam from the first wireless AP device to one of a set of second wireless AP devices, where the first message indicates the set of second wireless AP devices and a duration for the wireless STA device to perform the roaming procedure, output a response message indicating an acceptance or rejection of the request, and perform the roaming procedure to roam from the first wireless AP device to a second wireless AP device of the set of second wirelessAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO10AP devices or to a third wireless AP device during the duration and in accordance with the acceptance or rejection.

[0037] Some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for obtaining a confirmation message based on outputting the response message, where performing the roaming procedure may be based on obtaining the confirmation message.

[0038] Some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for outputting a second message indicating a request to transition from communicating with the first wireless AP device to communicating with the second wireless AP device of the set of second wireless AP devices, where the confirmation message may be based on the second message.

[0039] In some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein, the response message indicates the acceptance of the request and performing the roaming procedure includes roaming from the first wireless AP device to the second wireless AP device of the set of second wireless AP devices.

[0040] In some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein, the response message further indicates a request to transition from communicating with the first wireless AP device to communicating with the second wireless AP device of the set of second wireless AP devices.

[0041] In some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein, the response message indicates the rejection of the request and performing the roaming procedure includes roaming from the first wireless AP device to the third wireless AP device.

[0042] In some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein, the first message indicates one or moreAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO11second wireless AP devices of the set of second wireless AP devices that may be associated with one or more prepared communication links.

[0043] In some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein, the first message indicates that the first wireless AP device may have performed a context transfer procedure to transfer a context associated with the wireless STA device to one or more second wireless AP devices of the set of second wireless AP devices.

[0044] In some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein, the request for the wireless STA device to perform the roaming procedure may be based on one or more measurements associated with a communication link between the wireless STA device and the first wireless AP device, a network load associated with the first wireless AP device, a capacity associated with the first wireless AP device, or any combination thereof.

[0045] Some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for outputting a measurement report indicating the one or more measurements.

[0046] In some examples of the method, wireless STA devices, and non-transitory computer-readable medium described herein, the first message indicates that the wireless STA device will be dissociated from the first wireless AP device after the duration.

[0047] Another innovative aspect of the subject matter described in this disclosure can be implemented in a method for wireless communications by a first wireless AP device. The method may include outputting, to a wireless STA device, a first message indicating a request for the wireless STA device to perform a roaming procedure to roam from the first wireless AP device to one of a set of second wireless AP devices, where the first message indicates the set of second wireless AP devices and a duration for the wireless STA device to perform the roaming procedure, communicating with the set of second wireless AP devices to transfer at least a portion of a context associated with the wireless STA device from the first wireless AP device to one or more of the setAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO12of second wireless AP devices, and obtaining a response message indicating an acceptance or rejection of the request.

[0048] Another innovative aspect of the subject matter described in this disclosure can be implemented in a first wireless AP device for wireless communications. The first wireless AP device may include a processing system that includes processor circuitry and memory circuitry that stores code. The processing system may be configured to cause the first wireless AP device to output, to a wireless STA device, a first message indicating a request for the wireless STA device to perform a roaming procedure to roam from the first wireless AP device to one of a set of second wireless AP devices, where the first message indicates the set of second wireless AP devices and a duration for the wireless STA device to perform the roaming procedure, communicate with the set of second wireless AP devices to transfer at least a portion of a context associated with the wireless STA device from the first wireless AP device to one or more of the set of second wireless AP devices, and obtain a response message indicating an acceptance or rejection of the request.

[0049] Another innovative aspect of the subject matter described in this disclosure can be implemented in a first wireless AP device for wireless communications. The first wireless AP device may include means for outputting, to a wireless STA device, a first message indicating a request for the wireless STA device to perform a roaming procedure to roam from the first wireless AP device to one of a set of second wireless AP devices, where the first message indicates the set of second wireless AP devices and a duration for the wireless STA device to perform the roaming procedure, means for communicating with the set of second wireless AP devices to transfer at least a portion of a context associated with the wireless STA device from the first wireless AP device to one or more of the set of second wireless AP devices, and means for obtaining a response message indicating an acceptance or rejection of the request.

[0050] Another innovative aspect of the subject matter described in this disclosure can be implemented in a non-transitory computer-readable medium storing code for wireless communications. The code may include instructions executable by one or more processors to output, to a wireless STA device, a first message indicating a request for the wireless STA device to perform a roaming procedure to roam from the first wireless AP device to one of a set of second wireless AP devices, where the first Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO13message indicates the set of second wireless AP devices and a duration for the wireless STA device to perform the roaming procedure, communicate with the set of second wireless AP devices to transfer at least a portion of a context associated with the wireless STA device from the first wireless AP device to one or more of the set of second wireless AP devices, and obtain a response message indicating an acceptance or rejection of the request.

[0051] Some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for outputting a confirmation message in response to obtaining the response message.

[0052] Some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for communicating with a second wireless AP device of the set of second wireless AP devices to transfer at least a second portion of the context from the first wireless AP device to the second wireless AP device based on the response message indicating the acceptance of the request.

[0053] Some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for obtaining a second message indicating a request for the wireless STA device to transition from communicating with the first wireless AP device to communicating with the second wireless AP device of the set of second wireless AP devices, where transferring at least the second portion of the context may be based on the second message.

[0054] In some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein, the response message further indicates a request for the wireless STA device to transition from communicating with the first wireless AP device to communicating with the second wireless AP device of the set of second wireless AP devices.

[0055] In some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein, the response message indicates the rejection of the request.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO14

[0056] In some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein, the first message indicates one or more second wireless AP devices of the set of second wireless AP devices that may be associated with one or more prepared communication links.

[0057] In some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein, the first message indicates that the first wireless AP device may have transferred at least the portion of the context associated with the wireless STA device to the one or more second wireless AP devices of the set of second wireless AP devices.

[0058] In some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein, the request for the wireless STA device to perform the roaming procedure may be based on one or more measurements associated with a communication link between the wireless STA device and the first wireless AP device, a network load associated with the first wireless AP device, a capacity associated with the first wireless AP device, or any combination thereof.

[0059] Some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein may further include operations, features, means, or instructions for obtaining a measurement report indicating the one or more measurements.In some examples of the method, first wireless AP devices, and non-transitory computer-readable medium described herein, the first message indicates that the wireless STA device will be dissociated from the first wireless AP device after the duration.

[0060] Details of one or more implementations of the subject matter described in this disclosure are set forth in the accompanying drawings and the description below. Other features, aspects, and advantages will become apparent from the description, the drawings and the claims. Note that the relative dimensions of the following figures may not be drawn to scale.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO15BRIEF DESCRIPTION OF THE DRAWINGS

[0061] Figure 1 shows a pictorial diagram of an example wireless communication network.

[0062] Figure 2 shows a hierarchical format of an example physical layer (PHY) protocol data unit (PPDU) usable for communications between a wireless AP and one or more wireless STAs.

[0063] Figure 3 shows an example of a signaling diagram that supports authentication techniques for seamless roaming.

[0064] Figure 4 shows an example of a process flow that supports authentication techniques for seamless roaming.

[0065] Figure 5 shows an example of a signaling diagram that supports authentication techniques for seamless roaming.

[0066] Figure 6 shows an example of a process flow that supports authentication techniques for seamless roaming.

[0067] Figure 7 shows an example of a process flow that supports authentication techniques for seamless roaming.

[0068] Figure 8 shows a block diagram of an example wireless communication device that supports authentication techniques for seamless roaming.

[0069] Figure 9 shows a block diagram of an example wireless communication device that supports authentication techniques for seamless roaming.

[0070] Figure 10 shows a flowchart illustrating an example process performable by or at a wireless station device that supports authentication techniques for seamless roaming.

[0071] Figure 11 shows a flowchart illustrating an example process performable by or at a first wireless access point device that supports authentication techniques for seamless roaming.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO16

[0072] Figure 12 shows a flowchart illustrating an example process performable by or at a wireless station device that supports authentication techniques for seamless roaming.

[0073] Figure 13 shows a flowchart illustrating an example process performable by or at a first wireless access point device that supports authentication techniques for seamless roaming.

[0074] Like reference numbers and designations in the various drawings indicate like elements.DETAILED DESCRIPTION

[0075] The following description is directed to some particular examples for the purposes of describing innovative aspects of this disclosure. However, a person having ordinary skill in the art will readily recognize that the teachings herein can be applied in a multitude of different ways. Some or all of the described examples may be implemented in any device, system or network that is capable of transmitting and receiving radio frequency (RF) signals according to one or more of the Institute of Electrical and Electronics Engineers (IEEE) 802.11 standards, the IEEE 802.15 standards, the Bluetooth® standards as defined by the Bluetooth Special Interest Group (SIG), or the Long Term Evolution (LTE), 3G, 4G, 5G (New Radio (NR)) or 6G standards promulgated by the 3rd Generation Partnership Project (3GPP), among others.

[0076] The described examples can be implemented in any suitable device, component, system or network that is capable of transmitting and receiving RF signals according to one or more of the following technologies or techniques: code division multiple access (CDMA), time division multiple access (TDMA), orthogonal frequency division multiplexing (OFDM), frequency division multiple access (FDMA), orthogonal FDMA (OFDMA), single-carrier FDMA (SC-FDMA), spatial division multiple access (SDMA), rate-splitting multiple access (RSMA), multi-user shared access (MUSA), single-user (SU) multiple-input multiple-output (MIMO) and multi-user (MU)-MIMO (MU-MIMO). The described examples also can be implemented using other wireless communication protocols or RF signals suitable for use in one or more of a wireless personal area network (WPAN), a wireless local area network (WLAN), a wireless wideAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO17area network (WWAN), a wireless metropolitan area network (WMAN), a nonterrestrial network (NTN), or an internet of things (IOT) network.

[0077] In some wireless communication systems, a non-AP device (such as a station (STA), a non-access point (AP) multi-link device (MLD), an STA MLD) may be mobile and may therefore perform a roaming procedure in which the non-AP device may switch from communicating with a first AP device to communicating with a second AP device (such as an AP or an AP MLD). In such examples, to reduce latency associated with roaming, the non-AP device may identify a set of AP MLDs that may be a part of a seamless roaming mobility domain (SMD) (such as an ultra-high reliability (UHR) SMD). The non-AP device may perform roaming between AP MLDs of the SMD without re-association, re-authentication, re-negotiations, and the like. Such techniques may be referred to herein as seamless roaming. In some examples, however, a target AP MLD may authenticate the non-AP device prior to completing the roaming, and there may therefore be a need for generation of security keys (such as via pairwise transient key (PTK) security association (PTKSA)) to authenticate the STA within the SMD.

[0078] Various aspects relate generally to methods for the non-AP device to identify a first security key (such as PTK1) associated with a serving AP MLD of the SMD and a second security key (such as PTK2) for authentication with the target AP MLD.Various aspects relate more specifically to techniques for the non-AP device to prepare the second security key and transition the non-AP device to the target AP MLD via communications with the serving AP MLD, with the target AP MLD, or both. In some aspects (such as examples in which the non-AP device performs “panic roaming”), the target AP MLD may perform validation based on information from the non-AP device (such as a security key) or based on communicating with a previous serving AP MLD. In some aspects, the target AP MLD and the serving AP MLD may be part of a same fast transfer mobility domain (FT MD) and a same SMD. In such examples, a pairwise master key (PMK) security association (PMKSA) or a PTKSA for the SMD may be associated with a media access control (MAC) address of the SMD. In some aspects, the non-AP device may re-associate with the target AP MLD.

[0079] Various aspects additionally relate to techniques for a network to initiate roaming. Various aspects relate more specifically to methods for the network to Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO18indicate for the non-AP device to roam from a serving AP MLD to one or more target AP MLDs. The non-AP device may identify a timer associated with performing the roaming, and may accept or reject the request to perform the roaming within a duration of the timer.

[0080] Particular aspects of the subject matter described in this disclosure may be implemented to realize one or more of the following potential advantages. The techniques employed by the described communication devices may provide benefits and enhancements to the operation of the communication devices, including increased security associated with roaming. For example, operations performed by the described communication devices may provide improvements to roaming techniques by enabling a target AP MLD to validate an non-AP device prior to enabling the non-AP device to roam to the target AP MLD. The described techniques may further enable relatively higher quality of communications by enabling an AP device to request for the non-AP device to roam to another AP device.

[0081] Figure 1 shows a pictorial diagram of an example wireless communication network 100. According to some aspects, the wireless communication network 100 can be an example of a wireless local area network (WLAN) such as a Wi-Fi network. For example, the wireless communication network 100 can be a network implementing at least one of the IEEE 802.11 family of wireless communication protocol standards, such as defined by the IEEE 802.11-2020 specification or amendments thereof (including, but not limited to, 802.1 lay, 802.1 lax (also referred to as Wi-Fi 6), 802.11 az, 802.11ba, 802.1 Ibc, 802.1 Ibd, 802.1 Ibe (also referred to as Wi-Fi 7), 802.1 Ibf, and 802.1 Ibn (also referred to as Wi-Fi 8)) or other WLAN or Wi-Fi standards, such as that associated with the 802.1 Ibq Integrated Millimeter Wave (IMMW) study group. In some other examples, the wireless communication network 100 can be an example of a cellular radio access network (RAN), such as a 5G or 6G RAN that implements one or more cellular protocols such as those specified in one or more 3GPP standards. In some other examples, the wireless communication network 100 can include a WLAN that functions in an interoperable or converged manner with one or more cellular RANs to provide greater or enhanced network coverage to wireless communication devices within the wireless communication network 100 or to enable such devices to connect to a cellular network’s core, such as to access the network management capabilities and functionalityAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO19offered by the cellular network core. In some other examples, the wireless communication network 100 can include a WLAN that functions in an interoperable or converged manner with one or more personal area networks, such as a network implementing Bluetooth or other wireless technologies, to provide greater or enhanced network coverage or to provide or enable other capabilities, functionality, applications or services.

[0082] The wireless communication network 100 may include numerous wireless communication devices including a wireless access point (AP) 102 and any number of wireless stations (STAs) 104. While only one AP 102 is shown in Figure 1, the wireless communication network 100 can include multiple APs 102 (such as in an extended service set (ESS) deployment, enterprise network or AP mesh network), or may not include any AP at all (such as in an independent basic service set (IBSS) such as a peer-to-peer (P2P) network or other ad hoc network). The AP 102 can be or represent various different types of network entities including, but not limited to, a home networking AP, an enterprise-level AP, a single-frequency AP, a dual-band simultaneous (DBS) AP, a tri -band simultaneous (TBS) AP, a standalone AP, a non-standalone AP, a software-enabled AP (soft AP), and a multi-link AP (also referred to as an AP multi-link device (MLD)), as well as cellular (such as 3GPP, 4G LTE, 5G or 6G) base stations or other cellular network nodes such as a Node B, an evolved Node B (eNB), a gNB, a transmission reception point (TRP) or another type of device or equipment included in a radio access network (RAN), including Open-RAN (O-RAN) network entities, such as a central unit (CU), a distributed unit (DU) or a radio unit (RU).

[0083] Each of the STAs 104 also may be referred to as a mobile station (MS), a mobile device, a mobile handset, a wireless handset, an access terminal (AT), a user equipment (UE), a subscriber station (SS), or a subscriber unit, among other examples. The STAs 104 may represent various devices such as mobile phones, other handheld or wearable communication devices, netbooks, notebook computers, tablet computers, laptops, Chromebooks, augmented reality (AR), virtual reality (VR), mixed reality (MR) or extended reality (XR) wireless headsets or other peripheral devices, wireless earbuds, other wearable devices, display devices (such as TVs, computer monitors or video gaming consoles), video game controllers, navigation systems, music or otherAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO20audio or stereo devices, remote control devices, printers, kitchen appliances (including smart refrigerators) or other household appliances, key fobs (such as for passive keyless entry and start (PKES) systems), Internet of Things (loT) devices, and vehicles, among other examples.

[0084] A single AP 102 and an associated set of STAs 104 may be referred to as an infrastructure basic service set (BSS), which is managed by the respective AP 102. Figure 1 additionally shows an example coverage area 108 of the AP 102, which may represent a basic service area (BSA) of the wireless communication network 100. The BSS may be identified by STAs 104 and other devices by a service set identifier (SSID), as well as a basic service set identifier (BSSID), which may be a medium access control (MAC) address of the AP 102. The AP 102 may periodically broadcast beacon frames (“beacons”) including the BSSID to enable any STAs 104 within wireless range of the AP 102 to “associate” or re-associate with the AP 102 to establish a respective communication link 106 (hereinafter also referred to as a “Wi-Fi link”), or to maintain a communication link 106, with the AP 102. For example, the beacons can include an identification or indication of a primary channel used by the respective AP 102 as well as a timing synchronization function (TSF) for establishing or maintaining timing synchronization with the AP 102. The AP 102 may provide access to external networks to various STAs 104 in the wireless communication network 100 via respective communication links 106.

[0085] To establish a communication link 106 with an AP 102, each of the STAs 104 is configured to perform passive or active scanning operations (“scans”) on frequency channels in one or more frequency bands (such as the 2.4 GHz, 5 GHz, 6 GHz, 45 GHz, or 60 GHz bands). To perform passive scanning, a STA 104 listens for beacons, which are transmitted by respective APs 102 at periodic time intervals referred to as target beacon transmission times (TBTTs). To perform active scanning, a STA 104 generates and sequentially transmits probe requests on each channel to be scanned and listens for probe responses from APs 102. Each STA 104 may identify, determine, ascertain, or select an AP 102 with which to associate in accordance with the scanning information obtained through the passive or active scans, and to perform authentication and association operations to establish a communication link 106 with the selected APAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO21102. The selected AP 102 assigns an association identifier (AID) to the STA 104 at the culmination of the association operations, which the AP 102 uses to track the STA 104.

[0086] As a result of the increasing ubiquity of wireless networks, a STA 104 may have the opportunity to select one of many BSSs within range of the STA 104 or to select among multiple APs 102 that together form an ESS including multiple connected BSSs. For example, the wireless communication network 100 may be connected to a wired or wireless distribution system that may enable multiple APs 102 to be connected in such an ESS. As such, a STA 104 can be covered by more than one AP 102 and can associate with different APs 102 at different times for different transmissions.Additionally, after association with an AP 102, a STA 104 also may periodically scan its surroundings to find a more suitable AP 102 with which to associate. For example, a STA 104 that is moving relative to its associated AP 102 may perform a “roaming” scan to find another AP 102 having more desirable network characteristics such as a greater received signal strength indicator (RS SI) or a reduced traffic load.

[0087] In some examples, STAs 104 may form networks without APs 102 or other equipment other than the STAs 104 themselves. One example of such a network is an ad hoc network (or wireless ad hoc network). Ad hoc networks may alternatively be referred to as mesh networks or P2P networks. In some examples, ad hoc networks may be implemented within a larger network such as the wireless communication network 100. In such examples, while the STAs 104 may be capable of communicating with each other through the AP 102 using communication links 106, STAs 104 also can communicate directly with each other via direct wireless communication links 110. Additionally, two STAs 104 may communicate via a direct wireless communication link 110 regardless of whether both STAs 104 are associated with and served by the same AP 102. In such an ad hoc system, one or more of the STAs 104 may assume the role filled by the AP 102 in a BSS. Such a STA 104 may be referred to as a group owner (GO) and may coordinate transmissions within the ad hoc network. Examples of direct wireless communication links 110 include Wi-Fi Direct connections, connections established by using a Wi-Fi Tunneled Direct Link Setup (TDLS) link, and other P2P group connections.

[0088] In some networks, the AP 102 or the STAs 104, or both, may support applications associated with high throughput or low-latency requirements, or may Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO1provide lossless audio to one or more other devices. For example, the AP 102 or the STAs 104 may support applications and use cases associated with ultra-low-latency (ULL), such as ULL gaming, or streaming lossless audio and video to one or more personal audio devices (such as peripheral devices) or AR / VR / MR / XR headset devices. In scenarios in which a user uses two or more peripheral devices, the AP 102 or the STAs 104 may support an extended personal audio network enabling communication with the two or more peripheral devices. Additionally, the AP 102 and STAs 104 may support additional ULL applications such as cloud-based applications (such as VR cloud gaming) that have ULL and high throughput requirements.

[0089] As indicated above, in some aspects, the AP 102 and the STAs 104 may function and communicate (via the respective communication links 106) according to one or more of the IEEE 802.11 family of wireless communication protocol standards. These standards define the WLAN radio and baseband protocols for the physical (PHY) and MAC layers. The AP 102 and STAs 104 transmit and receive wireless communications (hereinafter also referred to as “Wi-Fi communications” or “wireless packets”) to and from one another in the form of PHY protocol data units (PPDUs).

[0090] Each PPDU is a composite structure that includes a PHY preamble and a payload that is in the form of a PHY service data unit (PSDU). The information provided in the preamble may be used by a receiving device to decode the subsequent data in the PSDU. In instances in which a PPDU is transmitted over a bonded or wideband channel, the preamble fields may be duplicated and transmitted in each of multiple component channels. The PHY preamble may include both a legacy portion (or “legacy preamble”) and a non-legacy portion (or “non-legacy preamble”). The legacy preamble may be used for packet detection, automatic gain control and channel estimation, among other uses. The legacy preamble also may generally be used to maintain compatibility with legacy devices. The format of, coding of, and information provided in the non-legacy portion of the preamble is associated with the particular IEEE 802.11 wireless communication protocol to be used to transmit the payload.

[0091] The APs 102 and STAs 104 in the wireless communication network 100 may transmit PPDUs over an unlicensed spectrum, which may be a portion of spectrum that includes frequency bands traditionally used by Wi-Fi technology, such as the 2.4 GHz, 5 GHz, 6 GHz, 45 GHz, and 60 GHz bands. Some examples of the APs 102 and STAs Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO23104 described herein also may communicate in other frequency bands that may support licensed or unlicensed communications. For example, the APs 102 or STAs 104, or both, also may be capable of communicating over licensed operating bands, where multiple operators may have respective licenses to operate in the same or overlapping frequency ranges. Such licensed operating bands may map to or be associated with frequency range designations of FR1 (410 MHz - 7.125 GHz), FR2 (24.25 GHz -52.6 GHz), FR3 (7.125 GHz - 24.25 GHz), FR4a or FR4-1 (52.6 GHz - 71 GHz), FR4 (52.6 GHz - 114.25 GHz), and FR5 (114.25 GHz - 300 GHz).

[0092] Each of the frequency bands may include multiple sub-bands and frequency channels (also referred to as subchannels). The terms “channel” and “subchannel” may be used interchangeably herein, as each may refer to a portion of frequency spectrum within a frequency band (such as a 20 MHz, 40 MHz, 80 MHz, or 160 MHz portion of frequency spectrum) via which communication between two or more wireless communication devices can occur. For example, PPDUs conforming to the IEEE 802.1 In, 802.1 lac, 802.1 lax, 802.11be and 802.11bn standard amendments may be transmitted over one or more of the 2.4 GHz, 5 GHz, or 6 GHz bands, each of which is divided into multiple 20 MHz channels. As such, these PPDUs are transmitted over a physical channel having a minimum bandwidth of 20 MHz, but larger channels can be formed through channel bonding. For example, PPDUs may be transmitted over physical channels having bandwidths of 40 MHz, 80 MHz, 160 MHz, 240 MHz, 320 MHz, 480 MHz, or 640 MHz by bonding together multiple 20 MHz channels.

[0093] An AP 102 may determine or select an operating or operational bandwidth for the STAs 104 in its BSS and select a range of channels within a band to provide that operating bandwidth. For example, the AP 102 may select sixteen 20 MHz channels that collectively span an operating bandwidth of 320 MHz. Within the operating bandwidth, the AP 102 may typically select a single primary 20 MHz channel on which the AP 102 and the STAs 104 in its BSS monitor for contention-based access schemes. In some examples, the AP 102 or the STAs 104 may be capable of monitoring only a single primary 20 MHz channel for packet detection (such as for detecting preambles of PPDUs). Conventionally, any transmission by an AP 102 or a STA 104 within a BSS must involve transmission on the primary 20 MHz channel. As such, in conventional systems, the transmitting device must contend on and win a TXOP on the primaryAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO24channel to transmit anything at all. However, some APs 102 and STAs 104 supporting ultra-high reliability (UHR) communications or communication according to the IEEE 802.1 Ibn standard amendment can be configured to operate, monitor, contend and communicate using multiple primary 20 MHz channels. Such monitoring of multiple primary 20 MHz channels may be sequential such that responsive to determining, ascertaining or detecting that a first primary 20 MHz channel is not available, a wireless communication device may switch to monitoring and contending using a second primary 20 MHz channel. Additionally, or alternatively, a wireless communication device may be configured to monitor multiple primary 20 MHz channels in parallel. In some examples, a first primary 20 MHz channel may be referred to as a main primary (M-Primary) channel and one or more additional, second primary channels may each be referred to as an opportunistic primary (O-Primary) channel. For example, if a wireless communication device measures, identifies, ascertains, detects, or otherwise determines that the M-Primary channel is busy or occupied (such as due to an overlapping BSS (OBSS) transmission), the wireless communication device may switch to monitoring and contending on an O-Primary channel. In some examples, the M-Primary channel may be used for beaconing and serving legacy client devices and an O-Primary channel may be specifically used by non-legacy (such as UHR- or IEEE 802.1 Ibn-compatible) devices for opportunistic access to spectrum that may be otherwise under-utilized.

[0094] Figure 2 shows a hierarchical format of an example PPDU usable for communications between a wireless AP and one or more wireless STAs. For example, the AP and STAs may be examples of the AP 102 and the STAs 104 described with reference to Figure 1. As described, each PPDU 200 includes a PHY preamble 202 and a PSDU 204. Each PSDU 204 may represent (or “carry”) one or more MAC protocol data units (MPDUs) 216. For example, each PSDU 204 may carry an aggregated MPDU (A-MPDU) 206 that includes an aggregation of multiple A-MPDU subframes 208. Each A-MPDU subframe 208 may include an MPDU frame 210 that includes a MAC delimiter 212 and a MAC header 214 prior to the accompanying MPDU 216, which includes the data portion (“payload” or “frame body”) of the MPDU frame 210. Each MPDU frame 210 also may include a frame check sequence (FCS) field 218 for error detection (such as the FCS field 218 may include a cyclic redundancy check (CRC)) and padding bits 220. The MPDU 216 may carry one or more MAC serviceAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO25data units (MSDUs) 230. For example, the MPDU 216 may carry an aggregated MSDU (A-MSDU) 222 including multiple A-MSDU subframes 224. Each A-MSDU subframe 224 may be associated with an MSDU frame 226 and may contain a corresponding MSDU 230 preceded by a subframe header 228 and, in some examples, followed by padding bits 232.

[0095] Referring back to the MPDU frame 210, the MAC delimiter 212 may serve as a marker of the start of the associated MPDU 216 and indicate the length of the associated MPDU 216. The MAC header 214 may include multiple fields containing information that defines or indicates characteristics or attributes of data encapsulated within the frame body. The MAC header 214 includes a duration field indicating a duration extending from the end of the PPDU until at least the end of an acknowledgement (ACK) or Block ACK (BA) of the PPDU that is to be transmitted by the receiving wireless communication device. The use of the duration field serves to reserve the wireless medium for the indicated duration and enables the receiving device to establish its network allocation vector (NAV). The MAC header 214 also includes one or more fields indicating addresses for the data encapsulated within the frame body. For example, the MAC header 214 may include a combination of a source address, a transmitter address, a receiver address or a destination address. The MAC header 214 may further include a frame control field containing control information. The frame control field may specify a frame type, for example, a data frame, a control frame, or a management frame.

[0096] In some wireless communication systems, wireless communication between an AP 102 and an associated STA 104 can be secured. For example, either an AP 102 or a STA 104 may establish a security key for securing wireless communication between itself and the other device and may encrypt the contents of the data and management frames using the security key. In some examples, the control frame and fields within the MAC header of the data or management frames, or both, also may be secured either via encryption or via an integrity check (such as by generating a message integrity check (MIC) for one or more relevant fields.

[0097] Some APs and STAs (such as the AP 102 and the STAs 104 described with reference to Figure 1) may implement techniques for spatial reuse that involve participation in a coordinated communication scheme. According to such techniques,Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO26an AP 102 may contend for access to a wireless medium to obtain control of the medium for a TXOP. The AP that wins the contention (hereinafter also referred to as a “sharing AP”) may select one or more other APs (hereinafter also referred to as “shared APs”) to share resources of the TXOP. The sharing and shared APs may be located in proximity to one another such that at least some of their wireless coverage areas at least partially overlap. Some examples may specifically involve coordinated AP TDMA or OFDMA techniques for sharing the time or frequency resources of a TXOP. To share its time or frequency resources, the sharing AP may partition the TXOP into multiple time segments or frequency segments each including respective time or frequency resources representing a portion of the TXOP. The sharing AP may allocate the time or frequency segments to itself or to one or more of the shared APs. For example, each shared AP may utilize a partial TXOP assigned by the sharing AP for its uplink or downlink communications with its associated STAs.

[0098] In some examples of such TDMA techniques, each portion of a plurality of portions of the TXOP includes a set of time resources that do not overlap with any time resources of any other portion of the plurality of portions of the TXOP. In such examples, the scheduling information may include an indication of time resources, of multiple time resources of the TXOP, associated with each portion of the TXOP. For example, the scheduling information may include an indication of a time segment of the TXOP such as an indication of one or more slots or sets of symbol periods associated with each portion of the TXOP such as for multi-user TDMA.

[0099] In some examples of OFDMA techniques, each portion of the plurality of portions of the TXOP includes a set of frequency resources that do not overlap with any frequency resources of any other portion of the plurality of portions. In such examples, the scheduling information may include an indication of frequency resources, of multiple frequency resources of the TXOP, associated with each portion of the TXOP. For example, the scheduling information may include an indication of a bandwidth portion of the wireless channel such as an indication of one or more subchannels or resource units associated with each portion of the TXOP such as for multi-user OFDMA.

[0100] In this manner, the sharing AP’s acquisition of the TXOP enables communication between one or more additional shared APs and their respective BSSs, Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO27subject to appropriate power control and link adaptation. For example, the sharing AP may limit the transmit powers of the selected shared APs such that interference from the selected APs does not prevent STAs associated with the TXOP owner from successfully decoding packets transmitted by the sharing AP. Such techniques may be used to reduce latency because the other APs may not need to wait to win contention for a TXOP to be able to transmit and receive data according to conventional CSMA / CA or enhanced distributed channel access (EDCA) techniques. Additionally, by enabling a group of APs 102 associated with different BSSs to participate in a coordinated AP transmission session, during which the group of APs may share at least a portion of a single TXOP obtained by any one of the participating APs, such techniques may increase throughput across the BSSs associated with the participating APs and also may achieve improvements in throughput fairness. Furthermore, with appropriate selection of the shared APs and the scheduling of their respective time or frequency resources, medium utilization may be maximized or otherwise increased while packet loss resulting from OBSS interference is minimized or otherwise reduced. Various implementations may achieve these and other advantages without requiring that the sharing AP or the shared APs be aware of the STAs 104 associated with other BSSs, without requiring a preassigned or dedicated master AP or preassigned groups of APs, and without requiring backhaul coordination between the APs participating in the TXOP.

[0101] In some examples in which the signal strengths or levels of interference associated with the selected APs are relatively low (such as less than a given value), or when the decoding error rates of the selected APs are relatively low (such as less than a threshold), the start times of the communications among the different BSSs may be synchronous. Conversely, when the signal strengths or levels of interference associated with the selected APs are relatively high (such as greater than the given value), or when the decoding error rates of the selected APs are relatively high (such as greater than the threshold), the start times may be offset from one another by a time period associated with decoding the preamble of a wireless packet and determining, from the decoded preamble, whether the wireless packet is an intra-BSS packet or is an OBSS packet. For example, the time period between the transmission of an intra-BSS packet and the transmission of an OBSS packet may allow a respective AP (or its associated STAs) toAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO28decode the preamble of the wireless packet and obtain the BSS color value carried in the wireless packet to determine whether the wireless packet is an intra-BSS packet or an OBSS packet. In this manner, each of the participating APs and their associated STAs may be able to receive and decode intra-BSS packets in the presence of OBSS interference.

[0102] In some examples, the sharing AP may perform polling of a set of unmanaged or non-co-managed APs that support coordinated reuse to identify candidates for future spatial reuse opportunities. For example, the sharing AP may transmit one or more spatial reuse poll frames as part of determining one or more spatial reuse criteria and selecting one or more other APs to be shared APs. According to the polling, the sharing AP may receive responses from one or more of the polled APs. In some specific examples, the sharing AP may transmit a coordinated AP TXOP indication (CTI) frame to other APs that indicates time and frequency of resources of the TXOP that can be shared. The sharing AP may select one or more candidate APs upon receiving a coordinated AP TXOP request (CTR) frame from a respective candidate AP that indicates a desire by the respective AP to participate in the TXOP. The poll responses or CTR frames may include a power indication, for example, a receive (RX) power or RSSI measured by the respective AP. In some other examples, the sharing AP may directly measure potential interference of a service supported (such as UL transmission) at one or more APs, and select the shared APs based on the measured potential interference. The sharing AP generally selects the APs to participate in coordinated spatial reuse such that it still protects its own transmissions (which may be referred to as primary transmissions) to and from the STAs in its BSS. The selected APs may be allocated resources during the TXOP as described above.

[0103] Retransmission protocols, such as hybrid automatic repeat request (HARQ), also may offer performance gains. A HARQ protocol may support various HARQ signaling between transmitting and receiving wireless communication devices (such as the AP 102 and the STAs 104 described with reference to Figure 1) as well as signaling between the PHY and MAC layers to improve the retransmission operations in a wireless communication network. HARQ uses a combination of error detection and error correction. For example, a HARQ transmission may include error checking bits that are added to data to be transmitted using an error-detecting (ED) code, such as aAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO29cyclic redundancy check (CRC). The error checking bits may be used by the receiving device to determine if it has properly decoded the received HARQ transmission. In some examples, the original data (information bits) to be transmitted may be encoded with a forward error correction (FEC) code, such as using a low-density parity check (LDPC) coding scheme that systematically encodes the information bits to produce parity bits. The transmitting device may transmit both the original information bits as well as the parity bits in the HARQ transmission to the receiving device. The receiving device may be able to use the parity bits to correct errors in the information bits, thus avoiding a retransmission.

[0104] Implementing a HARQ protocol in a wireless communication network may improve reliability of data communicated from a transmitting device to a receiving device. The HARQ protocol may support the establishment of a HARQ session between the two devices. Once a HARQ session is established, if a receiving device cannot properly decode (and cannot correct the errors) a first HARQ transmission received from the transmitting device, the receiving device may transmit a HARQ feedback message to the transmitting device (such as a negative acknowledgment (NACK)) that indicates at least part of the first HARQ transmission was not properly decoded. Such a HARQ feedback message may be different than the traditional Block ACK feedback message type associated with conventional ARQ. In response to receiving the HARQ feedback message, the transmitting device may transmit a second HARQ transmission to the receiving device to communicate at least part of further assist the receiving device in decoding the first HARQ transmission. For example, the transmitting device may include some or all of the original information bits, some or all of the original parity bits, as well as other, different parity bits in the second HARQ transmission. The combined HARQ transmissions may be processed for decoding and error correction such that the complete signal associated with the HARQ transmissions can be obtained.

[0105] In some examples, the receiving device may be enabled to control whether to continue the HARQ process or revert to a non-HARQ retransmission scheme (such as an automatic repeat request (ARQ) protocol). Such switching may reduce feedback overhead and increase the flexibility for retransmissions by allowing devices to dynamically switch between ARQ and HARQ protocols during frame exchanges. SomeAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO30implementations also may allow multiplexing of communications that employ ARQ with those that employ HARQ.

[0106] In some aspects, the AP 102 and STAs 104 can support various multi-user communications; that is, concurrent transmissions from one device to each of multiple devices (such as multiple simultaneous downlink communications from an AP 102 to corresponding STAs 104), or concurrent transmissions from multiple devices to a single device (such as multiple simultaneous uplink transmissions from corresponding STAs 104 to an AP 102). As an example, in addition to MU-MIMO, the AP 102 and STAs 104 may support OFDMA. OFDMA is in some aspects a multi-user version of OFDM.

[0107] In OFDMA schemes, the available frequency spectrum of the wireless channel may be divided into multiple resource units (RUs) each including multiple frequency subcarriers (also referred to as “tones”). Different RUs may be allocated or assigned by an AP 102 to different STAs 104 at particular times. The sizes and distributions of the RUs may be referred to as an RU allocation. In some examples, RUs may be allocated in 2 MHz intervals, and as such, the smallest RU may include 26 tones consisting of 24 data tones and 2 pilot tones. Consequently, in a 20 MHz channel, up to 9 RUs (such as 2 MHz, 26-tone RUs) may be allocated (because some tones are reserved for other purposes). Similarly, in a 160 MHz channel, up to 74 RUs may be allocated. Other tone RUs also may be allocated, such as 52 tone, 106 tone, 242 tone, 484 tone and 996 tone RUs. Adjacent RUs may be separated by a null subcarrier (such as a DC subcarrier), for example, to reduce interference between adjacent RUs, to reduce receiver DC offset, and to avoid transmit center frequency leakage.

[0108] For UL MU transmissions, an AP 102 can transmit a trigger frame to initiate and synchronize an UL OFDMA or UL MU-MIMO transmission from multiple STAs 104 to the AP 102. Such trigger frames may thus enable multiple STAs 104 to send UL traffic to the AP 102 concurrently in time. A trigger frame may address one or more STAs 104 through respective association identifiers (AIDs), and may assign each AID (and thus each STA 104) one or more RUs that can be used to send UL traffic to the AP 102. The AP also may designate one or more random access (RA) RUs that unscheduled STAs 104 may contend for.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO31

[0109] Some APs and STAs, such as, for example, the AP 102 and STAs 104 described with reference to Figure 1, are capable of multi -link operation (MLO). For example, the AP 102 and STAs 104 may support MLO as defined in one or both of the IEEE 802.1 Ibe and 802.1 Ibn standard amendments. An MLO-capable device may be referred to as a multi-link device (MLD). In some examples, MLO supports establishing multiple different communication links (such as a first link on the 2.4 GHz band, a second link on the 5 GHz band, and the third link on the 6 GHz band) between MLDs. Each communication link may support one or more sets of channels or logical entities. For example, an AP MLD may set, for each of the communication links, a respective operating bandwidth, one or more respective primary channels, and various BSS configuration parameters. An MLD may include a single upper MAC entity, and can include, for example, three independent lower MAC entities and three associated independent PHY entities for respective links in the 2.4 GHz, 5 GHz, and 6 GHz bands. This architecture may enable a single association process and security context. An AP MLD may include multiple APs 102 each configured to communicate on a respective communication link with a respective one of multiple STAs 104 of a non-AP MLD (also referred to as a “STA MLD”).

[0110] To support MLO techniques, an AP MLD and a STA MLD may exchange MLO capability information (such as supported aggregation types or supported frequency bands, among other information). In some examples, the exchange of information may occur via a beacon frame, a probe request frame, a probe response frame, an association request frame, an association response frame, another management frame, a dedicated action frame, or an operating mode indicator (OMI), among other examples. In some examples, an AP MLD may designate a specific channel of one link in one of the bands as an anchor channel on which it transmits beacons and other control or management frames periodically. In such examples, the AP MLD also may transmit shorter beacons (such as ones which may contain less information) on other links for discovery or other purposes.[OHl] MLDs may exchange packets on one or more of the communications links dynamically and, in some instances, concurrently. MLDs also may independently contend for access on each of the communication links, which achieves latency reduction by enabling the MLD to transmit its packets on the first communication linkAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO32that becomes available. For example, “alternating multi -link” may refer to an MLO mode in which an MLD may listen on two or more different high-performance links and associated channels concurrently. In an alternating multi-link mode of operation, an MLD may alternate between use of two links to transmit portions of its traffic.Specifically, an MLD with buffered traffic may use the first link on which it wins contention and obtains a TXOP to transmit the traffic. While such an MLD may in some examples be capable of transmitting or receiving on only one communication link at any given time, having access opportunities via two different links enables the MLD to avoid congestion, reduce latency, and maintain throughput.

[0112] Multi-link aggregation (MLA) (which also may be referred to as carrier aggregation (CA)) is another MLO mode in which an MLD may simultaneously transmit or receive traffic to or from another MLD via multiple communication links in parallel such that utilization of available resources may be increased to achieve higher throughput. That is, during at least some duration of time, transmissions or portions of transmissions may occur over two or more communication links in parallel at the same time. In some examples, the parallel communication links may support synchronized transmissions. In some other examples, or during some other durations of time, transmissions over the communication links may be parallel, but not be synchronized or concurrent. Additionally, in some examples or durations of time, two or more of the communication links may be used for communications between MLDs in the same direction (such as all uplink or all downlink), while in some other examples or durations of time, two or more of the communication links may be used for communications in different directions (such as one or more communication links may support uplink communications and one or more communication links may support downlink communications). In such examples, at least one of the MLDs may operate in a full duplex mode.

[0113] MLA may be packet-based or flow-based. For packet-based aggregation, frames of a single traffic flow (such as all traffic associated with a given traffic identifier (TID)) may be transmitted concurrently across multiple communication links. For flow-based aggregation, each traffic flow (such as all traffic associated with a given TID) may be transmitted using a single respective one of multiple communication links. As an example, a single STA MLD may access a web browser while streaming a videoAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO33in parallel. Per the above example, the traffic associated with the web browser access may be communicated over a first communication link while the traffic associated with the video stream may be communicated over a second communication link in parallel (such that at least some of the data may be transmitted on the first channel concurrently with data transmitted on the second channel). In some other examples, MLA may be implemented with a hybrid of flow-based and packet-based aggregation. For example, an MLD may employ flow-based aggregation in situations in which multiple traffic flows are created and may employ packet-based aggregation in other situations.Switching among the MLA techniques or modes may additionally, or alternatively, be associated with other metrics (such as a time of day, traffic load within the network, or battery power for a wireless communication device, among other factors or considerations).

[0114] Other MLO techniques may be associated with traffic steering and QoS characterization, which may achieve latency reduction and other QoS enhancements by mapping traffic flows having different latency or other requirements to different links. For example, traffic with low latency requirements may be mapped to communication links operating in the 6 GHz band and more latency -tolerant flows may be mapped to communication links operating in the 2.4 GHz or 5 GHz bands. Such an operation, referred to as TID-to-Link mapping (TTLM), may enable two MLDs to negotiate mapping of certain traffic flows in the DL direction or the UL direction or both directions to one or more set of communication links set up between them. In some examples, an AP MLD may advertise a global TTLM that applies to all associated non-AP MLDs. A communication link that has no TIDs mapped to it in either direction is referred to as a disabled link. An enabled link has at least one TID mapped to it in at least one direction.

[0115] In some examples, an MLD may include multiple radios and each communication link associated with the MLD may be associated with a respective radio of the MLD. Each radio may include one or more of its own transmit / receive (Tx / Rx) chains, include or be coupled with one or more of its own physical antennas or shared antennas, and include signal processing components, among other components. An MLD with multiple radios that may be used concurrently for MLO may be referred to as a multi-link multi-radio (MLMR) MLD. Some MLMR MLDs may further be capableAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO34of an enhanced MLMR (eMLMR) mode of operation, in which the MLD may be capable of dynamically switching radio resources (such as antennas or RF frontends) between multiple communication links (such as switching from using radio resources for one communication link to using the radio resources for another communication link) to enable higher transmission and reception using higher capacity on a given communication link. In this eMLMR mode of operation, MLDs may be able to move Tx / Rx radio resources from one communication link to another link, thereby increasing the spatial stream capability of the other communication link. For example, if a non-AP MLD includes four or more STAs, the STAs associated with the eMLMR links may “pool” their antennas so that each of the STAs can utilize the antennas of other STAs when transmitting or receiving on one of the eMLMR links.

[0116] Other MLDs may have more limited capabilities and not include multiple radios. An MLD with only a single radio that is shared for multiple communication links may be referred to as a multi-link single radio (MLSR) MLD. Control frames may be exchanged between MLDs before initiating data or management frame exchanges between the MLDs in cases in which at least one of the MLDs is operating as an MLSR MLD. Because an MLD operating in the MLSR mode is limited to a single radio, it cannot use multiple communication links simultaneously and may instead listen to (such as monitor), transmit or receive on only a single communication link at any given time. An MLSR MLD may instead switch between different bands in a TDM manner. In contrast, some MLSR MLDs may further be capable of an enhanced MLSR (eMLSR) mode of operation, in which the MLD can concurrently listen on multiple links for specific types of packets, such as buffer status report poll (BSRP) frames or multi-user (MU) request-to-send (RTS) (MU-RTS) frames. Although an MLD operating in the eMLSR mode can still transmit or receive on only one of the links at any given time, it may be able to dynamically switch between bands, resulting in improvements in both latency and throughput. For example, when the STAs of a non-AP MLD may detect a BSRP frame on their respective communication links, the non-AP MLD may tune all of its antennas to the communication link on which the BSRP frame is detected. By contrast, a non-AP MLD operating in the MLSR mode can only listen to, and transmit or receive on, one communication link at any given time.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO35

[0117] An MLD that is capable of simultaneous transmission and reception on multiple communication links may be referred to as a simultaneous transmission and reception (STR) device. In a STR-capable MLD, a radio associated with a communication link can independently transmit or receive frames on that communication link without interfering with, or without being interfered with by, the operation of another radio associated with another communication link of the MLD. For example, an MLD with a suitable filter may simultaneously transmit on a 2.4 GHz band and receive on a 5 GHz band, or vice versa, or simultaneously transmit on the 5 GHz band and receive on the 6 GHz band, or vice versa, and as such, be considered a STR device for the respective paired communication links. Such an STR-capable MLD may generally be an AP MLD or a higher-end STA MLD having a higher performance filter. An MLD that is not capable of simultaneous transmission and reception on multiple communication links may be referred to as a non-STR (NSTR) device. A radio associated with a given communication link in an NSTR device may experience interference when there is a transmission on another communication link of the NSTR device. For example, an MLD with a standard filter may not be able to simultaneously transmit on a 5 GHz band and receive on a 6 GHz band, or vice versa, and as such, may be considered a NSTR device for those two communication links.

[0118] In some wireless communication systems, an MLD may include multiple non-collocated entities. For example, an AP MLD may include non-collocated AP devices and a STA MLD may include non-collocated STA devices. In examples in which an AP MLD includes multiple non-collocated AP devices, a single mobility domain (SMD) entity may refer to a logical entity that controls the associated noncollocated APs. A non-AP STA (such as a non-MLD non-AP STA or a non-AP MLD that includes one or more associated non-AP STAs) may associate with the SMD entity via one of its constituent APs and may seamlessly roam (such as without requiring reassociation) between the APs associated with the SMD entity. The SMD entity also may maintain other context (such as security and Block ACK) for non-AP STAs associated with it.

[0119] The afore-mentioned and related MLO techniques may provide multiple benefits to a wireless communication network 100. For example, MLO may improve user perceived throughput (UPT) (such as by quickly flushing per-user transmit queues).Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO36Similarly, MLO may improve throughput by improving utilization of available channels and may increase spectral utilization (such as increasing the bandwidth-time product). Further, MLO may enable smooth transitions between multi-band radios (such as where each radio may be associated with a given RF band) or enable a framework to set up separation of control channels and data channels. Other benefits of MLO include reducing the “on” time of a modem, which may benefit a wireless communication device in terms of power consumption. Another benefit of MLO is the increased multiplexing opportunities in the case of a single BSS. For example, MLA may increase the number of users per multiplexed transmission served by the multi-link AP MLD.

[0120] Techniques described herein may enable a non-AP device to identify a first security key (such as PTK1) associated with a serving AP MLD of an SMD and a second security key (such as PTK2) for authentication with the target AP MLD. For example, the non-AP device may prepare the second security key and transition the non-AP device to the target AP MLD via communications with the serving AP MLD, with the target AP MLD, or both. In some aspects (such as examples in which the non-AP device performs “panic roaming”), the target AP MLD may perform validation based on information from the non-AP device (such as a security key) or based on communicating with a previous serving AP MLD. In some aspects, the target AP MLD and the serving AP MLD may be part of a same FT MD and a same SMD. In such examples, a PMKSA or a PTKSA for the SMD may be associated with a MAC address of the SMD.

[0121] Techniques described herein may additionally enable a network (such as a network associated with the SMD) to initiate roaming by the non-AP device. For example, the network may indicate for the non-AP device to roam from a serving AP MLD to one or more target AP MLDs. The non-AP device may identify a timer associated with performing the roaming, and may accept or reject the request to perform the roaming within a duration of the timer.

[0122] Figure 3 shows an example of a signaling diagram 300 that supports authentication techniques for seamless roaming. The signaling diagram 300 may implement or may be implemented by aspects of the wireless communication network 100 or the PPDU 200. For example, the signaling diagram 300 may implement or mayAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO37be implemented by a non-AP device 104-a (such as a wireless device, a non-AP STA 104, a non-AP MLD) and one or more AP devices 102 (such as AP STAs, AP MLDs), which may be examples of the corresponding devices as described with reference to Figure 1. In some examples, the signaling diagram 300 may include a DS 304, which may include an AP device 102-a, an AP device 102-b, an AP device 102-c, and an AP device 102-d.

[0123] As described herein, seamless roaming techniques may enable relatively faster roaming of a non-AP device 104-a (such as a non-AP MLD or a non-AP STA 104) between AP devices 102 (such as AP MLDs including one or more affiliated APs or AP STAs of a SMD), and may reduce time associated with re-association and reauthentication for roaming. AP devices 102 of the SMD (such as an AP device 102-a, which may be a serving AP device 102, an AP device 102-b, which may be a target AP device 102, an AP device 102-c, and an AP device 102-d) may operate cooperatively by transmitting signaling over the air or over a DS 304. In some examples, the signaling diagram 300 may include a higher level logical entity (such as the SMD) spanning multiple non-collocated AP MLDs. Accordingly, the non-AP device 104-a may associate with and maintain association and authentication context with the AP MLDs of the SMD. The SMD may accordingly enable the AP devices 102 to obtain a relatively higher level of coordination for relatively smoother transition of the non-AP device 104-a.

[0124] Techniques described herein may enable the non-AP device 104-a to participate in a sequence for the roaming procedure. The AP devices 102 may accordingly prepare for the transition (such as by allocating resources on a serving or queried AP device 102 and / or transferring context information of the non-AP device 104-a). The non-AP device 104-a may roam from a serving AP device 102-a to a target AP device 102-b and may be served by both of the target AP device 102-b and the serving AP device 102-a for a period of time, which may result in relatively more seamless roaming (such as by providing uninterrupted service). In some aspects, the devices of the signaling diagram 300 may perform one or more operations described herein in a given order, or may skip performing one or more operations described herein.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO38

[0125] In some examples, the sequence for the roaming procedure may include multiple phases to facilitate transition from a serving AP device 102-a (such as an AP MLD) to a target AP device 102-b that is in a same SMD as the serving AP device 102. For example, the sequence for the roaming procedure may include a discovery phase, a link preparation phase, and a roaming phase. The discover phase may be a phase during which the non-AP device 104-a (such as a client) may discover a neighboring AP (such as one or more neighboring AP devices 102 that are part of the same SMD as the serving AP device 102-a). The link preparation phase may be a phase during which the serving AP device 102-a and the non-AP device 104-a may exchange information to facilitate preparation of one or more candidate AP devices 102 to receive the non-AP device 104-a (such as to enable a relatively faster and smoother transition of the non-AP device 104-a from the serving AP device 102-a to the target AP device 102-b). The roaming phase may be a phase in which the non-AP device 104-a may roam to the target AP device 102-b (such as an AP device 102 of the one or more candidate AP devices 102 that have been prepared to receive the non-AP device 104-a).

[0126] In some aspects, as part of the roaming phase, the non-AP device 104-a may re-associate with the target AP device 102-b. For example, to perform the reassociation, the non-AP device 104-a and the AP device 102-b may initialize an association state machine (such as in a state 4 of the non-AP device 104-a and the AP device 102-b). As described herein, a state 4 may be a state in which the non-AP device 104-a and the AP device 102-b may perform secure communications (such as due to a secure port being open) and / or a state associated with establishing a PTK for encryption of communications.

[0127] As described herein, preparing resources may refer to AP MLDs of the mobility domain exchanging messages over a distribution system (DS) 304 or over the air such that the one or more AP MLDs (upon verifying that the non-AP device may be served) allocate resources, prepare data structures, store parameters (such as context information of the non-AP device), and so on. For example, the candidate APs may be provisioned with static context of the client (such as security keys, blockAck context, and so on) and by each of the candidate APs may reserve resources to support quality of service (QoS) parameters (such as requirements) of the non-AP device. The non-AP device 104-a may receive uninterrupted service while roaming from a serving APAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO39device 102-a to a target AP device 102-b as a result of the prepared resources. That is, by transferring the context of the non-AP device 104-a, the AP devices 102 may preserve the context used for resuming communications after the transition, which may avoid re-associated, reauthentication, and re-negotiation of agreements such as BA, stream classification service (SCS), target wake time (TWT), and so on.

[0128] In some examples, the non-AP device 104-a may perform an informative query for readiness of resources on the AP devices 102 of the SMD. In some examples, the non-AP device 104-a may transmit an informative query to one or more AP devices 102 in the SMD (such as the serving AP device 102-a, another AP device 102) to generate a list of potential AP devices 102 for roaming (such as without the AP devices 102 performing resource allocation for the roaming non-AP device 104-a). The non-AP device 104-a may perform a frame exchange with one or more AP devices 102 of the SMD (such as via a communication link 302-a with the AP device 102-a) to gather information on the AP devices 102 within the SMD that may satisfy traffic parameters associated with the non-AP device 104-a. The non-AP device 104-a may request (such as to the serving AP device 102-a or another queried AP device 102) which AP devices 102 in the SMD may accommodate service of the non-AP device 104-a. The non-AP device 104-a may include a set of suggested AP devices 102 in the request, or the request may omit suggestions.

[0129] The serving AP device 102-a or queried AP device 102 may respond to the request by providing a solicited list of one or more AP devices 102 that may be ready or able to serve the non-AP device 104-a (such as via a response frame to the non-AP device 104-a). The AP devices 102 may not commit any resources in response to the informative query. For example, the AP devices 102 may not add links 302, create data structures, or save or transfer context in response to the informative query. The serving AP device 102-a or queried AP device 102 may confirm a subset of the APs indicated via the request from the non-AP device 104-a (such as with a bitmap). The serving AP device 102-a or the queried AP device 102 may add one or more other AP devices 102 to the list of requested candidate AP devices 102. The serving AP device 102-a or the queried AP device 102 may provide a list of recommended AP devices 102 in the SMD to the non-AP device 104-a. For example, the list may indicate an order of preferenceAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO40for target AP devices 102 (such as a preference of the network, the DS 304, the SMD, and so on).

[0130] Additionally, or alternatively, the AP device 102 may use a different signaling mechanism. For example, the non-AP device 104-a may transmit the informative query via a BSS transition management (BTM) Query frame, a Neighbor Report Request frame, or another frame to the serving AP device 102-a or to another AP device 102. Upon receiving a query, the serving AP device may respond by transmitting an ML probe response, a BTM Response, a Neighbor Report Response, or another response. Additionally, or alternatively, the serving AP device 102-a may provide the recommendations unsolicited indicating recommendations such as a ranking of AP devices 102 in the SMD that the non-AP device 104-a may roam to.

[0131] In some examples, the non-AP device 104-a and an AP device (such as the serving AP device 102-a or another AP device 102 of the SMD) may perform a frame exchange for preparing links 302 of one or more APs 102 in the SMD for roaming (such as without interruption of service. For example, the non-AP device 104-a may transmit a link preparation request message (such as to the serving AP device 102-a or to another AP device 102 of the SMD) and may monitor for a link preparation response. In some examples, the non-AP device 104-a may not request the AP devices 102 to prepare all links of an AP device 102. For example, the non-AP device 104-a may be interested in operating on a band associated with a link 302-b of an AP device 102-b and not on a band associated with a link 302-c of the AP device 102-b. Accordingly, the non-AP device 104-a may not request for the AP device 102-b to prepare the link 302-c for roaming. In some examples, the preparation may not involve a mapping change by the DS 304.

[0132] The serving AP device 102-a or queried AP device 102 may communicate with the other AP devices 102 of the SMD over the DS 304 or over the air (such as via a request or response) to identify whether the AP devices 102 may serve the non-AP device 104-a. The serving AP device 102-a or queried AP device 102 may transmit a link preparation response to the non-AP device 104-a via a response frame. The serving AP device 102-a or the queried AP device 102 may confirm a subset of the requested AP devices 102 from the link preparation request. For example, the link preparationAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO41response may indicate that one or more links 302 of the AP device 102-b and the AP device 102-c are prepared for roaming.

[0133] The serving AP device 102-a or the queried AP device 102 may add one or more other AP devices 102 to a list of “ready” or candidate APs 102. The serving AP device 102-a or the queried AP devicel02 may provide a list of recommended AP devices 102 in the SMD. In some examples, the link preparation response message may indicate a status of the candidate AP devices 102. For example, the list may indicate an order of preference for target AP devices 102 (such as a preference of the network, the DS 304, the SMD, and so on).

[0134] The serving AP device 102-a may transfer a static context (or a portion of static context) of the non-AP device 104-a to the AP devices 102 (a subset of the SMD). Accordingly, the AP devices 102 may create and populate data structures and allocate and resources for the potential roaming of the non-AP device 104-a. In some examples, the preparation of resources may initiate before sending the link preparation response. For example, the serving AP device 102-a or queried AP device 102 may indicate, via the link preparation response, whether one or more of the AP devices 102 have initiated or completed transfer or storage of at least a portion of the static context. In some examples, the commitment of resources of the AP devices 102 (such as the prepared links) may expire (such as after expiration of a timer).

[0135] The static context may include connectivity information such as a MAC address (to identify the non-AP device 104-a), capabilities of the non-AP device 104-a, a target AP MLD MAC address (to identify the target AP device 102-b), the target AP MAC addresses (to identify the target AP setup or requested links), a TTLM at the target AP device 102-b, security and BA sessions (such as security keys, PTK*, a last downlink sequence number (SN) and packet number assigned for each TID (such as with BA session info), a last uplink SN and packet number received for each TID (such as with BA session info), or a SN and packet number of last uplink MPDU delivered to the gateway), QoS information (such as QoS info or each SCS ID, such as uplink, downlink, and P2P), and the like.

[0136] In some examples, to perform roaming in the SMD, the non-AP device 104-a, the AP device 102-a, and the AP device 102-b may use security keys (such asAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO42PTKs, PMK-RO, PML-R1) associated with a same PTKSA or a same pairwise masterkey security associated (PMKSA). For example, in examples in which the non-APdevice 104-a roams from the AP device 102-a to the AP device 102-b, the non-APdevice 104-a, the AP device 102-a, and the AP device 102-b may use security keysassociated with a same PMKSA and / or PTKSA. Additionally, or alternatively, the non-AP device 104-a, the AP device 102-a, and the AP device 102-b may use security keys(such as PTKs, PMK-RO, PML-R1) associated with a different PTKSA or PMKSA. For example, the non-AP device 104-a and the AP devices 102 of the SMD may generatemultiple security keys (such as transient keys (TKs) generated via a key distribution key(KDK) or PTKs) for a same PTKSA, or may generate multiple PTKSAs for a samePMKSA.

[0137] In some aspects, a TK may be generated according to a function TKAP—MLD[i] = KDF - Hash - Length(KDK, "SMD TK", AP - MLD[i]'s - MLD - MAC -address). A length of the TK may be a value TKbitsnegotiated from a pairwise ciphersuite. In some examples, each TK TKAP— MLD[i] of the SMD (such as for each APdevice 102 that the non-AP device 104-a has roamed to) may be stored in a PTKSA atthe non-AP device 104-a. In some aspects, a PTK may be generated according to afunction PTK = PRF —Length(PMK, “Pairwise key expansion”, Min(AA,SPA) || Max(AA,SPA) || Min(AN once, S Non . In such examples, AA may represent a MAC address of the SMD.

[0138] In some examples, to facilitate reordering packets that may come fromdifferent AP devices 102 during seamless roaming, a packet number space maycontinue monotonically increasing between the serving AP device 102-a and the targetAP device 102-b (such as regardless of which TK is used). That is, the packet numbermay be maintained at an SMD level (such as per PTKSA, regardless of a TK value usedto encrypt the frame). In some examples, the serving AP device 102-a may facilitate the packet number continuation in the SMD by transferring the context of the non-APdevice 104-a to the target AP device 102-b.

[0139] In some examples, the non-AP device 104-a may perform authenticationwith an authenticator (such as an authenticator that spans the AP devices 102 within theSMD) to establish the PMKSA. The non-AP device 104-a may derive the PTKSA fromAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO43the PMKSA. Accordingly, each AP device 102 of the SMD may use a same PTKSA and PMKSA. In some examples, a same transient key (TK) may encrypt frames from both of the serving AP device 102-a and the target AP device 102-b.

[0140] In some examples, multiple non-colocated AP devices 102 may not use a same PTK. For example, an unauthorized party (such as an attacker) may intercept one or more messages associated with physically sharing the same TK between the AP devices 102. The TK may accordingly be compromised as-is, and the unauthorized party may decrypt data previously recorded from the AP devices 102.

[0141] In some examples, the devices of the signaling diagram 300 may perform a transition (such as a frame exchange) to roam the non-AP device 104-a to a target AP device 102-b. For example, the non-AP device 104-a (such as a non-AP device 104-a in state 4) may transmit a roaming request or initiation frame to the serving AP device 102-a or to the target AP device 102-b. In some examples, the roaming request message may include a subelement indicating one or more links of the target AP device 102-b that the non-AP device 104-a requests to roam to.

[0142] The serving AP device 102-a or the target AP device 102-b may respond to the roaming request with a roaming request response (RRR) frame (such as a Link Reconfiguration Response Frame) that indicates completion of one or more roaming procedures. The frame exchange may add a subset of AP devices 102 (or links 302) of the target AP device 102-b to the non-AP device 104-a. The frame exchange may be performed between the non-AP device 104-a and the target AP device 102-b or the serving AP device 102-a. The frame exchange may include a non-AP MLD dynamic context transfer and DS path switching (such as over the DS 304). That is, the transition may include the DS 304 performing a mapping change and one or more other actions (such as an update or transfer of remaining context). The transition may be relatively faster as compared to some other roaming techniques (such as to reduce a service interruption for the non-AP device 104-a).

[0143] In some aspects, techniques described herein may enable sequences (such as key generation sequences) for seamless roaming, including key generation (such as preparation of the security keys and transition from the serving AP device 102-a to the target AP device 102-b using the prepared keys), such as in examples in which theAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO44recommendations provided by the serving AP device 102-a occur prior to preparation of the security keys. Additionally, or alternatively, techniques described herein may enable panic roaming request validation (such as procedures for validating roaming requests for first connection by a target AP device 102-b for a non-AP device 104-a that has lost connectivity with the serving AP device 102-a). Additionally, or alternatively, techniques described herein may enable sequences for network-initiated roaming (such as recommendation and next phases), and BSS transition (such as for seamless roaming in SMDs that are part of an FT mobility domain (FT MD) or eFT).

[0144] Figure 4 shows an example of a process flow 400 that supports authentication techniques for seamless roaming. The process flow 400 may implement or may be implemented by aspects of the wireless communication network 100, the PPDU 200, or the signaling diagram 300. For example, the process flow 400 may be implemented by a non-AP device 104-b (such as a STA 104) and one or more AP devices 102 (such as an AP device 102-e, an AP device 102-f), which may be examples of the corresponding devices as described with reference to Figure 1.

[0145] In the following description of the process flow 400, the operations between the non-AP device 104-b, the AP device 102-e, and the AP device 102-f may occur in a different order than the example order shown and, in some examples, may be performed by one or more different devices other than those shown as examples. Some operations also may be omitted from the process flow 400, and other operations may be added to the process flow 400. Further, although some operations or signaling may be shown to occur at different times for discussion purposes, these operations may actually occur at the same time.

[0146] In some examples, the process flow 400 may include techniques for a roaming sequence (such as four messages or frames) that may generate a new security key within a PTKSA for a target AP device 102-f. The described techniques may define destinations for the frames, protection (such as encryption) of the frames, and content of the frames. In some examples, the roaming sequence may include two phases, such as a preparation phase and a transition phase. Such techniques may reduce (such as minimize) a service interruption associated with uplink suspension during a DS mapping change. The non-AP device 104-b may perform preparation and transition with the serving AP device 102-e, the target AP device 102-f, or both (such asAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO45preparation with the serving AP device 102-e and transition with the target AP device 102-f). In some examples, generation (such as preparation) of the security key may use two or more messages.

[0147] At 402, the non-AP device 104-b may output, to a serving AP device 102-e, a capability message indicating a capability of the wireless station device to use a first security key (such as PTK2 or TK2) and a second security key (such as PTK1 or TK1) associated with a same PTKSA or a same PMKSA. For example, the non-AP device 104-b may output the capability message during an association procedure associated with an SMD including the serving AP device 102-e. In some examples, the first security key may be associated with a target AP device 102-f and the second security key may be associated with the serving AP device 102-e. In some examples, the AP device 102-e and / or the AP device 102-f may obtain the first security key and / or the second security key during an association procedure associated with the SMD.

[0148] In some examples, each non-AP device 104 communicating with AP devices 102 in the SMD may support seamless roaming using a same security key for the serving AP device 102-e and the target AP device 102-f. A subset of non-AP devices 104 may support seamless roaming using different security keys for the serving AP device 102-e and the target AP device 102-f. In some examples, the non-AP devices 104 may use a single (such as same) security key, or may use a same or different security key depending on a preference of the non-AP devices 104. For example, a non-AP device 104-b may use different security keys even in examples in which the non-AP device 104-b may not receive downlink frames simultaneously from the serving AP device 102-e and the target AP device 102-f. In such examples, the non-AP device 104-b may finish receiving downlink data from the serving AP device 102-e prior to communicating with the target AP device 102-f.

[0149] At 404, the non-AP device 104-b may output, to the serving AP device 102-e or a target AP device 102-f, a first message (such as Msgl) associated with roaming to the target AP device 102-f from the serving AP device 102-e. For example, the first message may indicate information associated with generation of a first security key for use with the target AP device 102-f. The information may indicate an S-Nonce and / or S-EPK for derivation of the first security key. In some examples, the first message mayAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO46request preparation (such as set-up) of one or more communication links of the AP device 102-f.

[0150] In some examples (such as if the non-AP device 104-b outputs the first message to the serving AP device 102-e), the first message may be protected (such as encrypted or protected using a MIC, such as a MIC associated with the second security key) using the second security key associated with the serving AP device 102-e. Such techniques may enable local validation of the non-AP device 104-b by the serving AP device 102-e (such as without fetching of information via the backhaul). Such techniques may therefore be more secure by being relatively less prone to denial-of-service (DoS) attacks as compared to preparation with the target AP device 102-f.

[0151] In some examples (such as if the non-AP device 104-b outputs the first message to the target AP device 102-f), the first message may be unprotected (such as unencrypted). In some examples, the non-AP device 104-b may output the first message to the target AP device 102-f as a result of a signal with the serving AP device 102-e reducing (such as vanishing) to support seamless roaming via the target AP device 102-f. Such examples may be referred to herein as “panic roaming.” In some examples, panic roaming may be relatively more prone to DoS attacks (such as due to the target AP device 102-f contacting the serving AP device 102-e over the backhaul for information retrieval).

[0152] In such examples, the target AP device 102-f may not have a context of the non-AP device 104-b, which may result in relatively more complex roaming as compared to examples in which the target AP device 102-f has a context of the non-AP device 104-b. Accordingly, in some examples, the target AP device 102-f may obtain a context of the non-AP device 104-b (such as from the serving AP device 102-e). For example, the target AP device 102-f may exchange one or more messages (such as unprotected messages) with the serving AP device 102-e or the non-AP device 104-b that indicate at least a portion of the context of the non-AP device 104-b. The target AP device 102-f may accordingly prepare to transmit and receive one or more frames (such as protected frames, which may be examples of the first message, second message, third message, and fourth message described herein) with the non-AP device 104-b. In some examples, the one or more messages exchanged with the serving AP device 102-e or the non-AP device 104-b may be authentication frames indicating information (such as aAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO47new S-Nonce or A-Nonce) which may enable the target AP device 102-f to implement a per-AP MLD PTK. In such examples, the first message may be protected (such as encrypted using the first security key). The one or more messages may not perform link addition or other management operations. For example, the one or more messages may enable a validation such that the target AP device 102-f may perform operations reserved for validated non-AP devices 104.

[0153] In such examples, the target AP device 102-f may perform a validation of the non-AP device 104-b as described herein with reference to Figure 6. That is, the first message may trigger the validation of the non-AP device 102-b. Such validation may include backhaul message exchanges between AP devices 102 of the SMD. For example, the target AP device 102-e may validate association by confirming a MAC address of the non-AP device 104-b with the serving AP device 102-e, validating that a packet number of the first message is greater than a target packet number (such as that the request is not a replay attack), validating that a MIC (such as S-MIC) carried in the first message is generated with the second security key (such as to validate a secure association), and the like.

[0154] The first security key and the second security key may be derived from a same PTKSA, a same PMKSA (such as a PTKSA or PMKSA associated with an SMD including the AP device 102-e and the AP device 102-f), or different PTKSAs or PMKSAs (such as in accordance with the capability message).

[0155] In some examples (such as if the non-AP device 104-b outputs the first message to the serving AP device 102-e), at 406, the serving AP device 102-e may output the information (or second information) associated with generation of the first security key for use with the target AP device 102-f. For example, the AP device 102-e may output a message indicating the PMKSA, the PTKSA, a target packet number, and / or relaying the request to generate the communication links. In some examples, at 408, the serving AP device 102-e may transfer at least a first portion of a context of the non-AP device 104-b to the AP device 102-f. In some examples (such as if the non-AP device 104-b outputs the first message to the target AP device 102-f), the target AP device 102-f may request the context from the serving AP device 102-e.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO48

[0156] In some examples, at 410, the AP device 102-f may generate the first security key based on the first information and the second information. For example, receiving the information associated with the key generation may trigger the AP device 102-f to generate the first security key. In some examples, the AP device 102-f may initialize an association state machine and store the context of the non-AP device 104-b. The AP device 102-f may set up (such as prepare) the communication links in accordance with the request (such as including sending back a group temporal key (GTK) associated with the new communication links). In some examples, the AP device 102-f may send, to the AP device 102-e, an A-Nonce or A-EPK for derivation of the first security key. Additionally, or alternatively, the AP device 102-f may send, to the AP device 102-e, an A-MIC generated with the first security key.

[0157] At 412, the non-AP device 104-b may receive, from the serving AP device 102-e or the target AP device 102-f, a second message (such as Msg2) associated with roaming to the target AP device 102-f from the serving AP device 102-e. For example, the second message may indicate second information associated with generation of the first security key (such as the A-Nonce or A-EPK). The second message may include the A-MIC generated using the first security key and / or the GTKs of the communication links of the AP device 102-f.

[0158] In some examples (such as if the non-AP device 104-b outputs the first message to the serving AP device 102-e), the second message may be protected (such as encrypted or protected using a MIC, such as a MIC associated with the second security key) using the second security key and may be received from the serving AP device 102-e. In some examples (such as if the non-AP device 104-b outputs the first message to the target AP device 102-f), the first message may be unprotected (such as unencrypted) and may be received from the target AP device 102-f. In such examples, the second message may not include the GTKs of the communication links.

[0159] At 414, the non-AP device 104-b may generate the first security key based on the first information and the second information. The non-AP device 104-b may validate the A-MIC with the newly generated first security key. The non-AP device 104-b may generate an S-MIC with the first security key.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO49

[0160] At 416, the non-AP device 104-b may output a third message (such as Msg3) to the serving AP device 102-e or the target AP device 102-f, indicating a MIC (such as the S-MIC) generated based on the first security key. The third message may use a packet number that is greater than the target packet number.

[0161] In some examples (such as if the non-AP device 104-b outputs the third message to the serving AP device 102-e), the third message may be protected (such as encrypted or protected using a MIC, such as a MIC associated with the second security key) using the second security key. Transitioning via communications with the serving AP device 102-e may avoid channel switching when retrieving pending downlink data that is buffered by the AP device 102-e prior to communications with the target AP device 102-f, which may be useful for eMLSR non-AP devices 104.

[0162] In some examples (such as if the non-AP device 104-b outputs the third message to the target AP device 102-f) the third message may be protected (such as encrypted or protected using a MIC, such as a MIC associated with the first security key) using the first security key. In such examples, the target AP device 102-f may perform a validation of the non-AP device 104-b as described herein with reference to Figure 6. For example, the AP device 102-f may validate the third message if the packet number is greater than the target packet number, may validate the S-MIC using the first security key, and the like. Transitioning via communications with the target AP device 102-f may result in relatively higher quality of communications in examples in which a signal between the non-AP device 104-b and the serving AP device 102-e may be fading and / or when pending downlink data is not being buffered at the serving AP device 102-e. Such techniques may support panic roaming (such as in the context of seamless roaming) with different security keys (such as PTKs) under a same PTKSA.

[0163] In some examples, at 418, the serving AP device 102-e may transfer at least a second portion of the context of the non-AP device 104-b to the AP device 102-f. For example, the serving AP device 102-e may transfer the second portion of the context via a backhaul connection between the serving AP device 102-e and the target AP device 102-f. The target AP device 102-f may request a DS mapping change (such as in response to the context transfer). In some examples, the serving AP device 102-e may relay a request for the DS mapping change and / or may relay the S-MIC generated with the first security key.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO50

[0164] At 420, the non-AP device 104-b may receive, from the serving AP device 102-e or the target AP device 102-f, a fourth message (such as Msg4) associated with roaming to the target AP device 102-f from the serving AP device 102-e. For example, the fourth message may indicate one or more links of the target AP device 102-f to which the non-AP device 104-b may roam. In such examples, the target AP device 102-f may perform the validation (such as validating the S-MIC) using the first security key.

[0165] In some examples (such as if the non-AP device 104-b outputs the third message to the serving AP device 102-e), the fourth message may be protected (such as encrypted or protected using a MIC, such as a MIC associated with the second security key) using the second security key and may be received from the serving AP device 102-e. In some examples (such as if the non-AP device 104-b outputs the third message to the target AP device 102-f), the fourth message may be protected (such as encrypted or protected using a MIC, such as a MIC associated with the first security key) using the first security key and may be received from the target AP device 102-f.

[0166] At 422, the non-AP device 104-b may perform the roaming to roam from the serving AP device 102-e to the target AP device 102-f based on the first security key. For example, the non-AP device 104-b may use the first security key and / or the information indicated in the fourth message to perform the roaming. In some examples, the target AP device 102-f may perform a validation of the non-AP device 104-b as described herein with reference to Figure 5.

[0167] Figure 5 shows an example of a signaling diagram 500 that supports authentication techniques for seamless roaming. The signaling diagram 500 may implement or may be implemented by aspects of the wireless communication network 100, the PPDU 200, or signaling diagram 300, or the process flow 400. For example, the process flow 600 may be implemented by one or more AP devices 102 (such as an AP device 102-g, an AP device 102-h, an AP device 102-i, an AP device 102-j, an AP device 102-k, an AP device 102-1, an AP device 102-m), which may be examples of the corresponding devices as described with reference to Figure 1.

[0168] In some aspects, AP devices 102 within the SMD may be controlled by a management entity (such as an SMD entity) that may provide upper MACAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO51functionalities to the non-AP device 104 such as association, authentication. In some aspects, the SMD may be associated with an identifier. In some aspects, the SMD entity is associated with a MAC address. In some aspects, the PMKSA is associated with the SMD entity MAC address. In some aspects, the PTKSA may be associated with the SMD entity MAC address.

[0169] In some examples, a wireless communication system may include one or more AP devices 102 (such as AP MLDs) that may be part of an SMD 506, an FT MD 502, both, or neither. For example, an AP device 102-g may not be in an SMD 506 or an FT MD 502. An AP device 102-h and an AP device 102-i may be part of an FT MD 502, and may not be part of an SMD 506. An AP device 102-j and an AP device 102-k may be part of the FT MD 502, and may be part of an SMD 506-a. An AP device 102-1 and an AP device 102-m may not be part of the FT MD 502, and may be part of an SMD 506-b. In some examples, for an FT MD 502 that includes multiple (such as smaller) SMDs 506, a mobility domain identifier (MDID) (such as an MDID used for the FT MD 502 and the SMDs 506) may be unique within an ESS of the FT MD 502.

[0170] In some examples, to enable seamless roaming in the SMD 506-b (such as an SMD 506 that is not part of an FT MD), a client (such as a non-AP device) may have a PMKSA and PTKSA associated with a MAC address of the respective SMD 506. For example, the non-AP device may have the MAC address by SMD association (such as from an initial association with the SMD 506, such as communication with the AP device 102-1).

[0171] In some examples, a PMKSA of the SMD 506-b may use the MAC address of the SMD 506-b (such as such that the devices in the SMD 506-b use a single PMKSA for both of the AP device 102-1 and the AP device 102-m associated with the SMD 506-b). For example, the PMKSA may use a MAC address of an SMD MLD 508-b. A PTKSA of the SMD 506-b may use the MAC address of the SMD 506-a (such as such that the devices in the SMD 506-b use a single PTKSA for both of the AP device 102-1 and the AP device 102-m associated with the SMD 506-b). In such examples, the devices in the SMD 506-b may use a same key (such as PTK) for each AP device 102 in the SMD 502-b, or a different key (such as PTK) associated with the same PTKSA for each AP device 102 in the SMD 506-b. Additionally, or alternatively, each AP device 102 in the SMD 506-b may be associated with a different PTKSA based Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO52on a MAC address associated with a target AP device 102 (such as multiple PTKSAs within the SMD 506-b).

[0172] In some examples, to enable seamless roaming in the SMD 506-a (such as an SMD 506 that is part of an FT MD), a client (such as a non-AP device) may have a PMKSA and PTKSA associated with a MAC address of the SMD 506-a. For example, the non-AP device may have the MAC address by initial associated with the FT MD 502 (such as from association with the AP device 102-j) or by using eFT to transfer to the SMD 506-a (such as to the AP device 102-j) after initial association with the FT MD 502 (such as from association with the AP device 102-h).

[0173] In some examples, a PMK R0 SA (such as generated according to a function ExtractBits(R0 — Key — Data, 0, Q), where R0 — Key — Data = KDF — Hash — Length(XXKey, "FT - R0”, SSIDlength || SSID || MDID || R0KHlength|| R0KH -ID 11 S0KH — ID) for regular fast transfer, where the MDID is the FT MD ID, or where R0 - Key - Data = KDF — Hash — Length(XXKey, "FT —R0", SSIDlength || SSID || MDID || R0KHlength|| R0KH - ID || S0KH - ID) for seamless roaming, where the MDID is the UHR SMD ID) associated with the SMD 506-a may use a MAC address of a FT MD-level entity such as an FT MD keyholder 504.

[0174] A PMK R1 SA (such as generated according to KDF — Hash — Length(P MK - R0, "FT - Rl", R1KH - ID 11 SIKH - ID) for regular fast transfer or KDF - Hash - Length(PMK - R0, "SR - Rl", R1KH - ID 11 SIKH - ID) for SMD level seamless roaming) may use a MAC address associated with the SMD 506-a (such as a MAC address associated with an SMD MLD keyholder 508-a). In such examples, the PMK R1 may be used with the AP device 102-j and the AP device 102-k such that there is a single PMK R1 SA within the SMD 506-a.

[0175] In some examples, a PTKSA of the SMD 506-a may use the MAC address associated with the SMD 506-a, such that the PTKSA is a single PTKSA associated with the SMD 506-a. In such examples, the devices of the SMD 506-a may use a single security key (such as a single PTK generated according to KDF — Hash — Length PMK - Rl, "SR - PTK", SNonce 11 AN once 11 BSSID 11 ST A - ADDR), where the BSSID is the MAC address of the SMD 506-a) for each AP device 102 of theAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO53SMD 506-a (such as the AP device 102-j and the AP device 102-k), or may use a different security key (such as a different PTK) for each of the AP device 102-j and the AP device 102-k. Additionally, or alternatively, the SMD 506-a may be associated with multiple PTKSAs. In such examples, each AP device 102 of the SMD 506-a (such as the AP device 102-j and the AP device 102-k) may be associated with a different PTKSA.

[0176] Figure 6 shows an example of a process flow 600 that supports authentication techniques for seamless roaming. The process flow 600 may implement or may be implemented by aspects of the wireless communication network 100, the PPDU 200, or signaling diagram 300, the process flow 400, or the signaling diagram 500. For example, the process flow 600 may be implemented by a non-AP device 104-c (such as a STA 104) and one or more AP devices 102 (such as an AP device 102-n, an AP device 102-o), which may be examples of the corresponding devices as described with reference to Figure 1.

[0177] In the following description of the process flow 600, the operations between the non-AP device 104-c, the AP device 102-n, and the AP device 102-o may occur in a different order than the example order shown and, in some examples, may be performed by one or more different devices other than those shown as examples. Some operations also may be omitted from the process flow 600, and other operations may be added to the process flow 600. Further, although some operations or signaling may be shown to occur at different times for discussion purposes, these operations may actually occur at the same time.

[0178] Techniques described herein with reference to the process flow 600 may enable “panic roaming,” as described with reference to Figure 4. For example, the described techniques may enable an AP device 102-o to validate a first request message from a non-AP device 104-c (such as a client device) using four messages (as illustrated and described with reference to Figure 4) or using two messages (as illustrated with reference to Figure 6). The described techniques may prevent or reduce DoS attacks. As described herein, AP-to-AP communications (such as between the AP device 102-o and the AP device 102-n) may be via a wired backhaul, a wireless backhaul, or a DS (such as depending on network implementation).Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO54

[0179] In some examples, at 602, the AP device 102-n and the AP device 102-o may receive security information (such as a security key associated with the non-AP device 104-c that may be used to validate a MIC). For example, the AP device 102-n and the AP device 102-o may receive the security key, an association state, a latest packet number used, and so on periodically or during an association procedure of an SMD including the AP device 102-n and the AP device 102-o. In some examples, the security key may be common to the SMD. For example, the security information may be refreshed periodically within the SMD or within a neighbor list of the SMD.

[0180] In some examples, the AP device 102-o may not have a context of the non-AP device 104-c, which may result in relatively more complex roaming as compared to examples in which the AP device 102-o has a context of the non-AP device 104-c. Accordingly, in some examples, the AP device 102-o may obtain a context of the non-AP device 104-c (such as from the AP device 102-n). For example, the AP device 102-o may exchange one or more messages (such as unprotected messages) with the AP device 102-n or the non-AP device 104-c that indicate at least a portion of the context of the non-AP device 104-c. The AP device 102-o may accordingly prepare to transmit and receive one or more frames (such as protected frames, which may be examples of the roaming message and the second message) with the non-AP device 104-c. In some examples, the one or more messages exchanged with the AP device 102-n or the non-AP device 104-c may be authentication frames indicating information (such as a new S-Nonce or A-Nonce) which may enable the AP device 102-o to implement a per-AP MLD PTK. In such examples, the first message may be protected (such as encrypted using the first security key). The one or more messages may not perform link addition or other management operations. For example, the one or more messages may enable a validation such that the AP device 102-o may perform operations reserved for validated non-AP devices 104.

[0181] At 604, the AP device 102-o may receive, from the non-AP device 104-c, a roaming message (such as Msg3) indicating a request for the non-AP device 104-c to roam to the AP device 102-o. The roaming message may include first information associated with verification of the non-AP device 104-c. For example, the first information may include a MAC address associated with the AP device 102-n, a MAC address associated with the AP device 102-o, a second media access control addressAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO55associated with the non-AP device 104-c, the security key, a MIC (such as a MIC generated according to a security key associated with a PTKSA), a packet number (such as a packet number that is grater than a last packet number used with the AP device 102-n), an association state, and / or an encryption of the roaming message. The roaming message may be associated with a PTKSA. In some examples, the roaming message may be unprotected (such as unencrypted). In some examples, the roaming message may indicate a request to set up one or more communication links of the AP device 102-O.

[0182] In some examples, at 606, the AP device 102-o may output, to the AP device 102-n, a request (such as an on-demand request) for second information associated with the validation. The second information may include the MAC address associated with the non-AP device 104-c, a second MIC, a security key to validate the MIC and / or decrypt the roaming request, a second packet number, or verification of the first information. For example, the AP device 102-o may fetch the second information in response to a Msgl or the Msg3 from the non-AP device 104-c. The request may indicate the first information. In some examples, the request may be output to the AP device 102-n based on a MAC address of the AP device 102-n reported by the non-AP device 104-c in the request message.

[0183] In some examples, at 608, the AP device 102-o may receive, from the AP device 102-n, a message indicating the second information. For example, the AP device 102-n may perform the validation and may indicate the verification in response to receiving the validation. For example, the AP device 102-o may indicate the MAC address (such as in a transmitter address field of the request message), the MIC, and / or the packet number. The AP device 102-n may output (or dial back), via the message, a verification (such as a checkmark) associated with each valid first information. In some examples, the AP device 102-n may transfer at least a portion of a context associated with the non-AP device 104-c to the AP device 102-o.

[0184] Additionally, or alternatively, the AP device 102-n may indicate the second information without performing the validation. In some examples, the AP device 102-n may output the message indicating the second information in response to the request or autonomously. Additionally, or alternatively, the second information may be predistributed to the AP device 102-o and / or the AP device 102-n. For example, the Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO56second information may be pre-distributed to each AP device 102 of the SMD (such as during the association procedure of the SMD or periodically) or to a neighbor list of the SMD. For example, the AP device 102-n may track one or more neighboring AP devices 102 of the SMD that may be potential roaming targets for the non-AP device 104-c (such as based on measurement reports from the non-AP device 104-c, such as RSSIs associated with the neighboring AP devices 102). The AP device 102-n may share an identity (such as the MAC address) of the non-AP device 104-c with the neighbor list.

[0185] At 610, the AP device 102-o may validate the non-AP device 104-c based on the first information (such as and the second information). In some examples, the AP device 102-o may perform a 3 -step validation procedure to validate a MAC address (such as a MAC address associated with the non-AP device 104-c, a MAC address associated with the AP device 102-n within the SMD, a dedicated MAC address for roaming), to perform an integrity check (such as a check of a MIC generated with the security key associated with the AP device 102-n such as a PTK1 or a single PTK), and to validate a latest packet number used (such as to protect against replay attacks). In some examples, a MAC address of the non-AP device 104-c may change periodically (such as based on epochs or frequently), and the dedicated MAC address for roaming may not change.

[0186] Additionally, or alternatively, the AP device 102-o may use the security key to bypass the 3 -step validation. In such examples, the security key may be a one-use key. For example, the AP devices 102 may generate a new one-use key for panic roaming after the non-AP device 104-c uses the one-use key.

[0187] In some examples, the validating may be based on a comparison of the first information and the second information. Additionally, or alternatively, the validation may be based on receiving a verification of the first information from the AP device 102-n. Additionally, or alternatively, the validation may be based on performing one or more validation operations to validate the first information (such as generating the security key or the MIC to confirm validity of the first information).

[0188] In some aspects, to perform the validation, the AP device 102-o may use a packet number that is a latest used packet number. The packet number may be retrievedAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO57on-demand (such as via backhaul signaling) from the AP device 102-n, pre-distributed to one or more AP devices 102 (such as to one or more AP devices 102 in the SMD, in a neighbor list, or both). In some aspects, the packet number may be a number associated with tracking roaming attempts from the non-AP device 104-c. Such a number may be retrieved on-demand from the AP device 102-n or pre-distributed.

[0189] At 612, the AP device 102-o may output a second message indicating one or more wireless communication links of the AP device 102-o that the non-AP device 104-c may roam to (such as in response to success of the validation). The second message may be protected (such as encrypted) with a security key associated with the PTKSA, a MIC, or both. At 614, the AP device 102-o and the non-AP device 104-c may communicate via the one or more wireless communication links of the AP device 102-o based on the fourth message.

[0190] In some examples, at 616, the AP device 102-n and the AP device 102-o may receive a second security key associated with the non-AP device 104-c. For example, the AP device 102-n and the AP device 102-o may receive the second security key based on the AP device 102-o validating the non-AP device 104-c. In some examples, the security key may be common to the SMD.

[0191] Figure 7 shows an example of a process flow 700 that supports authentication techniques for seamless roaming. The process flow 700 may implement or may be implemented by aspects of the wireless communication network 100, the PPDU 200, or signaling diagram 300, the process flow 400, the signaling diagram 500, or the process flow 600. For example, the process flow 700 may be implemented by a non-AP device 104-d (such as a STA 104) and one or more AP devices 102 (such as an AP device 102-p, an AP device 102-q, an AP device 102-r), which may be examples of the corresponding devices as described with reference to Figure 1.

[0192] In the following description of the process flow 700, the operations between the non-AP device 104-d, the AP device 102-p, the AP device 102-q, and the AP device 102-r may occur in a different order than the example order shown and, in some examples, may be performed by one or more different devices other than those shown as examples. Some operations also may be omitted from the process flow 700, and other operations may be added to the process flow 700. Further, although someAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO58operations or signaling may be shown to occur at different times for discussion purposes, these operations may actually occur at the same time.

[0193] In some examples, a network (such as an AP device 102) may provide an informative unsolicited recommendation for a non-AP device 104 to perform roaming in an SMD. However, such a recommendation may not be compelling for the non-AP device 104. That is, the non-AP device 104 may remain in communication with an AP device 102 despite receiving a recommendation to roam. Accordingly, techniques described herein may enable the AP device 102 to compel (such as request) for the non-AP device 104 to roam. Such techniques may be described herein as network-initiated roaming.

[0194] For example, the SMD (such as a network) may have one or more algorithms that the SMD may use to steer non-AP devices 104 to communicate with different AP devices 102 of the SMD. The SMD may determine to steer the non-AP devices based on metrics, such as network load, capacity, over-the-air (OTA) measurements, RSSIs, and so on. In such examples, the SMD may desassociated the non-AP device 104 from a previous serving AP device 102. The SMD may accordingly provide an alternative AP device 102 (such as a recommendation) for the non-AP device 104 to roam to and may solicit the roaming by indicating that the non-AP device 104 may be desassociated from the previous serving AP device 102 if the non-AP device 104 does not perform the roaming as requested.

[0195] In some examples, at 702, the non-AP device 104-d may receive a measurement request from the AP device 102-p. At 704, the non-AP device 104-d may output a measurement report to the AP device 102-p (such as autonomously or in response to the measurement request). The measurement report may indicate one or more measurements of a wireless communications link between the AP device 102-p and the non-AP device 104-d.

[0196] At 706, the AP device 102-p may transfer at least a first portion of a context associated with the non-AP device 104-d to one or more other AP devices 102 (such as an AP device 102-q, one or more preferred AP devices 102) that are in an SMD with the AP device 102-p. For example, the AP device 102-p may determine to request for the non-AP device 104-d to perform a roaming procedure (such as based on theAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO59measurement report, such as based on one or more measurements of the wireless communications link between the AP device 102-p and the non-AP device 104-d satisfying a threshold), and may transfer the at least first portion of the context to the AP devices 102 based on the determination. In some examples, the AP device 102-p may perform a LinkAdd operation to one or more multi-link setup links of the AP device 102-q.

[0197] At 708, the AP device 102-p may output a roaming request message (such as a MsgA) to the non-AP device 104-d that requests for the non-AP device 104-d to perform a roaming procedure to roam from the AP device 102-p to another AP device 102 (such as another AP device 102 of the SMD, such as the AP device 102-q, or another AP device 102 outside of the SMD, such as the AP device 102-r). In some examples, the roaming request message may indicate a duration (such as a disassociation timer Deassoc timeout) for the non-AP device 104-d to perform the roaming. For example, the timer may initiate at a time at which the AP device 102-p outputs the roaming request message and may expire after a threshold duration. The roaming request message may indicate that the non-AP device 104-d may be desassociated from the AP device 102-p (such as after expiration of the timer).

[0198] In some examples, the roaming request message may indicate one or more candidate AP devices 102 of the SMD (such as the AP device 102-q). In some examples, the roaming request message may indicate one or more of the candidate AP devices 102 (such as a preferred candidate AP device 102, a preemptively prepared AP device 102) that are associated with one or more prepared wireless communication links (such as based at least in part on the context transfer), and / or that the AP device 102-p has performed the context transfer. In some examples, the roaming request message may indicate one or more tiers of AP devices 102 for the non-AP devices 104-d to roam to. For example, a target AP device 102-q (such as a prepared AP device 102-q to which the AP device 102-p has transferred a context of the non-AP device 104-d or that has one or more prepared links) may be in a highest tier (such as Tier 3), a relatively less preferred AP device 102 of the SMD may be in a middle tier (such as Tier 2), and a relatively lease preferred AP device 102 of the SMD may be in a lowest tier (such as Tier 1).Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO60

[0199] At 710, the non-AP device 104-d may output a response message (such as a roaming initiation (RAI) message, a MsgB) indicating acceptance or rejection of the roaming request message. For example, if the response message indicates acceptance of the roaming request message, the non-AP device 104-d may accept to roam to one of the AP devices 102 of the SMD (such as the AP device 102-q). If the response message indicates rejection of the roaming request message, the non-AP device 104-d may expect to roam to an AP device 102-r outside of the SMD (such as an AP device 102 to which the AP device 102-p may not perform the context transfer) prior to expiration of the timer. In some examples, the request / response exchange described herein may use a BTM request / response framework. In some examples, if the response message indicates rejection of the roaming request message, the AP device 102-p may retransmit the roaming request message. The non-AP device 104-d may output the response message within the duration of the timer. The response message may be a multi-link reconfiguration that triggers a DS mapping change.

[0200] In some examples, at 712, the non-AP device 104-d may output a transition request message (such as a RAI message, a Msg3) indicating a request to transition the AP device 102-p to one of the AP devices 102 of the SMD (such as the AP device 102-q). For example, if the non-AP device 104-d indicates an acceptance of the roaming request, the non-AP device 104-d may output an additional message indicating the transfer request. Additionally, or alternatively, if the non-AP device 104-d indicates an acceptance of the roaming request, the non-AP device 104-d may indicate the transfer request via the response message. The non-AP device 104-d may output the transition request message within the duration of the timer.

[0201] In some examples, at 714, the AP device 102-p may perform a context transfer to transfer a remaining context of the non-AP device 104-d to the AP device 102-q (such as in response to acceptance of the roaming request and / or in response to the transition request). In some examples, the AP device 102-p may perform a LinkAdd operation to one or more multi-link setup links of the AP device 102-q.

[0202] In some examples, at 716, the AP device 102-p may output, to the non-AP device 104-d, a confirmation message (such as a MsgC, a Msg4) indicating a confirmation of the transition request and / or indicating completion of the contextAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO61transfer. The AP device 102-p may output the confirmation message within the duration of the timer.

[0203] At 718, the non-AP device 104-d may perform the roaming procedure (such as in accordance with the response message). For example, if the response message indicated an acceptance of the roaming request, the non-AP device 104-d may perform the roaming procedure to roam from the AP device 102-p to the AP device 102-q (or another AP device 102 of the SMD that includes one or more prepared communication links and / or has received the context transfer). If the response message indicated a rejection of the roaming request the non-AP device 104-d may perform a fallback roaming sequence (such as prepare and transition or transition directly) to roam from the AP device 102-p to the AP device 102-r. The non-AP device 104-d may perform the roaming procedure within the duration of the timer.

[0204] Figure 8 shows a block diagram of an example wireless communication device 800 that supports authentication techniques for seamless roaming. In some examples, the wireless communication device 800 is configured to perform the processes 1000 and 1200 described with reference to Figures 10 and 12, respectively. The wireless communication device 800 may include one or more chips, SoCs, chipsets, packages, components or devices that individually or collectively constitute or include a processing system. The processing system may interface with other components of the wireless communication device 800, and may generally process information (such as inputs or signals) received from such other components and output information (such as outputs or signals) to such other components. In some aspects, an example chip may include a processing system, a first interface to output or transmit information and a second interface to receive or obtain information. For example, the first interface may refer to an interface between the processing system of the chip and a transmission component, such that the wireless communication device 800 may transmit the information output from the chip. In such an example, the second interface may refer to an interface between the processing system of the chip and a reception component, such that the wireless communication device 800 may receive information that is then passed to the processing system. In some such examples, the first interface also may obtain information, such as from the transmission component, and the second interface also may output information, such as to the reception component.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO62

[0205] The processing system of the wireless communication device 800 includes processor (or “processing”) circuitry in the form of one or multiple processors, microprocessors, processing units (such as central processing units (CPUs), graphics processing units (GPUs), neural processing units (NPUs) (also referred to as neural network processors or deep learning processors (DLPs)), or digital signal processors (DSPs)), processing blocks, application-specific integrated circuits (ASIC), programmable logic devices (PLDs) (such as field programmable gate arrays (FPGAs)), or other discrete gate or transistor logic or circuitry (all of which may be generally referred to herein individually as “processors” or collectively as “the processor” or “the processor circuitry”). One or more of the processors may be individually or collectively configurable or configured to perform various functions or operations described herein. The processing system may further include memory circuitry in the form of one or more memory devices, memory blocks, memory elements or other discrete gate or transistor logic or circuitry, each of which may include tangible storage media such as randomaccess memory (RAM) or read-only memory (ROM), or combinations thereof (all of which may be generally referred to herein individually as “memories” or collectively as “the memory” or “the memory circuitry”). One or more of the memories may be coupled with one or more of the processors and may individually or collectively store processor-executable code that, when executed by one or more of the processors, may configure one or more of the processors to perform various functions or operations described herein. Additionally, or alternatively, in some examples, one or more of the processors may be preconfigured to perform various functions or operations described herein without requiring configuration by software. The processing system may further include or be coupled with one or more modems (such as a Wi-Fi (such as IEEE compliant) modem or a cellular (such as 3GPP 4G LTE, 5G or 6G compliant) modem). In some aspects, one or more processors of the processing system include or implement one or more of the modems. The processing system may further include or be coupled with multiple radios (collectively “the radio”), multiple RF chains or multiple transceivers, each of which may in turn be coupled with one or more of multiple antennas. In some aspects, one or more processors of the processing system include or implement one or more of the radios, RF chains or transceivers.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO63

[0206] In some examples, the wireless communication device 800 can be configurable or configured for use in a STA, such as the STA 104 described with reference to Figure 1. In some other examples, the wireless communication device 800 can be a STA that includes such a processing system and other components including multiple antennas. The wireless communication device 800 is capable of transmitting and receiving wireless communications in the form of, for example, wireless packets. For example, the wireless communication device 800 can be configurable or configured to transmit and receive packets in the form of physical layer PPDUs and MPDUs conforming to one or more of the IEEE 802.11 family of wireless communication protocol standards. In some other examples, the wireless communication device 800 can be configurable or configured to transmit and receive signals and communications conforming to one or more 3GPP specifications including those for 5G NR or 6G. In some examples, the wireless communication device 800 also includes or can be coupled with one or more application processors which may be further coupled with one or more other memories. In some examples, the wireless communication device 800 further includes a user interface (UI) (such as a touchscreen or keypad) and a display, which may be integrated with the UI to form a touchscreen display that is coupled with the processing system. In some examples, the wireless communication device 800 may further include one or more sensors such as, for example, one or more inertial sensors, accelerometers, temperature sensors, pressure sensors, or altitude sensors, that are coupled with the processing system.

[0207] The wireless communication device 800 includes a key generation information component 825, a key generation component 830, a MIC outputting component 835, a roaming message reception component 840, a roaming component 845, a roaming request reception component 850, a roaming request response component 855, a roaming procedure component 860, a capability message component 865, a confirmation message component 870, a transition request component 875, and a measurement report component 880. Portions of one or more of the key generation information component 825, the key generation component 830, the MIC outputting component 835, the roaming message reception component 840, the roaming component 845, the roaming request reception component 850, the roaming request response component 855, the roaming procedure component 860, the capabilityAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO64message component 865, the confirmation message component 870, the transition request component 875, and the measurement report component 880 may be implemented at least in part in hardware or firmware. For example, one or more of the key generation information component 825, the key generation component 830, the MIC outputting component 835, the roaming message reception component 840, the roaming component 845, the roaming request reception component 850, the roaming request response component 855, the roaming procedure component 860, the capability message component 865, the confirmation message component 870, the transition request component 875, and the measurement report component 880 may be implemented at least in part by at least a processor or a modem. In some examples, portions of one or more of the key generation information component 825, the key generation component 830, the MIC outputting component 835, the roaming message reception component 840, the roaming component 845, the roaming request reception component 850, the roaming request response component 855, the roaming procedure component 860, the capability message component 865, the confirmation message component 870, the transition request component 875, and the measurement report component 880 may be implemented at least in part by a processor and software in the form of processor-executable code stored in memory.

[0208] The wireless communication device 800 may support wireless communications in accordance with examples as disclosed herein, such as with reference to Figures 3-7. The key generation information component 825 is configurable or configured to output a first message associated with roaming to a target wireless AP device, where the first message indicates first information associated with generation of a first security key associated with the target wireless AP device. In some examples, the key generation information component 825 is configurable or configured to obtain a second message indicating second information associated with the generation of the first security key. The key generation component 830 is configurable or configured to generate the first security key based on the first message and the second message. The MIC outputting component 835 is configurable or configured to output a third message that is protected using one of the first security key or a second security key associated with a serving wireless AP device, the third message indicating a message integrity check associated with the first security key, where the first securityAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO65key and the second security key are associated with a same pairwise transient key security association. The roaming message reception component 840 is configurable or configured to obtain a fourth message associated with the roaming, the fourth message protected using the one of the first security key or the second security key. The roaming component 845 is configurable or configured to perform the roaming to the target wireless AP device based on obtaining the fourth message.

[0209] In some examples, outputting the first message includes outputting the first message to the serving wireless AP device. In some examples, obtaining the second message includes obtaining the second message from the serving wireless AP device.

[0210] In some examples, the first message and the second message are protected using the second security key.

[0211] In some examples, outputting the third message includes outputting the third message to the serving wireless AP device. In some examples, obtaining the fourth message includes obtaining the fourth message from the serving wireless AP device.

[0212] In some examples, the third message and the fourth message are protected using the second security key.

[0213] In some examples, outputting the third message includes outputting the third message to the target wireless AP device. In some examples, obtaining the fourth message includes obtaining the fourth message from the target wireless AP device.

[0214] In some examples, the third message and the fourth message are protected using the first security key.

[0215] In some examples, outputting the first message includes outputting the first message to the target wireless AP device. In some examples, obtaining the second message includes obtaining the second message from the target wireless AP device.

[0216] In some examples, the third message and the fourth message are unprotected.

[0217] In some examples, the capability message component 865 is configurable or configured to output, to the serving wireless AP device, a capability message indicating a capability of the wireless STA device to use the first security key and the second security key associated with the same pairwise transient key security association, whereAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO66the first security key and the second security key are associated with the same pairwise transient key security association based on the capability.

[0218] In some examples, the capability message is output during an association procedure associated with a seamless roaming mobility domain, the seamless roaming mobility domain including the serving wireless AP device and the target wireless AP device.

[0219] In some examples, the pairwise transient key security association, a pairwise master key security association associated with the target wireless AP device and the serving wireless AP device, or both are associated with a seamless roaming mobility domain, the seamless roaming mobility domain including the target wireless AP device and the serving wireless AP device.

[0220] Additionally, or alternatively, the wireless communication device 800 may support wireless communications in accordance with examples as disclosed herein. The roaming request reception component 850 is configurable or configured to obtain, from a first wireless AP device, a first message indicating a request for the wireless STA device to perform a roaming procedure to roam from the first wireless AP device to one of a set of second wireless AP devices, where the first message indicates the set of second wireless AP devices and a duration for the wireless STA device to perform the roaming procedure. The roaming request response component 855 is configurable or configured to output a response message indicating an acceptance or rejection of the request. The roaming procedure component 860 is configurable or configured to perform the roaming procedure to roam from the first wireless AP device to a second wireless AP device of the set of second wireless AP devices or to a third wireless AP device during the duration and in accordance with the acceptance or rejection.

[0221] In some examples, the confirmation message component 870 is configurable or configured to obtain a confirmation message based on outputting the response message, where performing the roaming procedure is based on obtaining the confirmation message.

[0222] In some examples, the transition request component 875 is configurable or configured to output a second message indicating a request to transition from communicating with the first wireless AP device to communicating with the secondAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO67wireless AP device of the set of second wireless AP devices, where the confirmation message is based on the second message.

[0223] In some examples, the response message indicates the acceptance of the request. In some examples, performing the roaming procedure includes roaming from the first wireless AP device to the second wireless AP device of the set of second wireless AP devices.

[0224] In some examples, the response message further indicates a request to transition from communicating with the first wireless AP device to communicating with the second wireless AP device of the set of second wireless AP devices.

[0225] In some examples, the response message indicates the rejection of the request. In some examples, performing the roaming procedure includes roaming from the first wireless AP device to the third wireless AP device.

[0226] In some examples, the first message indicates one or more second wireless AP devices of the set of second wireless AP devices that are associated with one or more prepared communication links.

[0227] In some examples, the first message indicates that the first wireless AP device has performed a context transfer procedure to transfer a context associated with the wireless STA device to one or more second wireless AP devices of the set of second wireless AP devices.

[0228] In some examples, the request for the wireless STA device to perform the roaming procedure is based on one or more measurements associated with a communication link between the wireless STA device and the first wireless AP device, a network load associated with the first wireless AP device, a capacity associated with the first wireless AP device, or any combination thereof.

[0229] In some examples, the measurement report component 880 is configurable or configured to output a measurement report indicating the one or more measurements.

[0230] In some examples, the first message indicates that the wireless STA device will be dissociated from the first wireless AP device after the duration.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO68

[0231] Figure 9 shows a block diagram of an example wireless communication device 900 that supports authentication techniques for seamless roaming. In some examples, the wireless communication device 900 is configured to perform the processes 1100 and 1300 described with reference to Figures 11 and 13, respectively. The wireless communication device 900 may include one or more chips, SoCs, chipsets, packages, components or devices that individually or collectively constitute or include a processing system. The processing system may interface with other components of the wireless communication device 900, and may generally process information (such as inputs or signals) received from such other components and output information (such as outputs or signals) to such other components. In some aspects, an example chip may include a processing system, a first interface to output or transmit information and a second interface to receive or obtain information. For example, the first interface may refer to an interface between the processing system of the chip and a transmission component, such that the wireless communication device 900 may transmit the information output from the chip. In such an example, the second interface may refer to an interface between the processing system of the chip and a reception component, such that the wireless communication device 900 may receive information that is then passed to the processing system. In some such examples, the first interface also may obtain information, such as from the transmission component, and the second interface also may output information, such as to the reception component.

[0232] The processing system of the wireless communication device 900 includes processor (or “processing”) circuitry in the form of one or multiple processors, microprocessors, processing units (such as central processing units (CPUs), graphics processing units (GPUs), neural processing units (NPUs) (also referred to as neural network processors or deep learning processors (DLPs)), or digital signal processors (DSPs)), processing blocks, application-specific integrated circuits (ASIC), programmable logic devices (PLDs) (such as field programmable gate arrays (FPGAs)), or other discrete gate or transistor logic or circuitry (all of which may be generally referred to herein individually as “processors” or collectively as “the processor” or “the processor circuitry”). One or more of the processors may be individually or collectively configurable or configured to perform various functions or operations described herein. The processing system may further include memory circuitry in the form of one or moreAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO69memory devices, memory blocks, memory elements or other discrete gate or transistor logic or circuitry, each of which may include tangible storage media such as randomaccess memory (RAM) or read-only memory (ROM), or combinations thereof (all of which may be generally referred to herein individually as “memories” or collectively as “the memory” or “the memory circuitry”). One or more of the memories may be coupled with one or more of the processors and may individually or collectively store processor-executable code that, when executed by one or more of the processors, may configure one or more of the processors to perform various functions or operations described herein. Additionally, or alternatively, in some examples, one or more of the processors may be preconfigured to perform various functions or operations described herein without requiring configuration by software. The processing system may further include or be coupled with one or more modems (such as a Wi-Fi (such as IEEE compliant) modem or a cellular (such as 3GPP 4G LTE, 5G or 6G compliant) modem). In some aspects, one or more processors of the processing system include or implement one or more of the modems. The processing system may further include or be coupled with multiple radios (collectively “the radio”), multiple RF chains or multiple transceivers, each of which may in turn be coupled with one or more of multiple antennas. In some aspects, one or more processors of the processing system include or implement one or more of the radios, RF chains or transceivers.

[0233] In some examples, the wireless communication device 900 can be configurable or configured for use in an AP, such as the AP 102 described with reference to Figure 1. In some other examples, the wireless communication device 900 can be an AP that includes such a processing system and other components including multiple antennas. The wireless communication device 900 is capable of transmitting and receiving wireless communications in the form of, for example, wireless packets. For example, the wireless communication device 900 can be configurable or configured to transmit and receive packets in the form of physical layer PPDUs and MPDUs conforming to one or more of the IEEE 802.11 family of wireless communication protocol standards. In some other examples, the wireless communication device 900 can be configurable or configured to transmit and receive signals and communications conforming to one or more 3GPP specifications including those for 5G NR or 6G. In some examples, the wireless communication device 900 also includes or can be coupledAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO70with one or more application processors which may be further coupled with one or more other memories. In some examples, the wireless communication device 900 further includes at least one external network interface coupled with the processing system that enables communication with a core network or backhaul network that enables the wireless communication device 900 to gain access to external networks including the Internet.

[0234] The wireless communication device 900 includes a roaming message reception component 925, a STA validation component 930, a communication link indication component 935, a STA communication component 940, a roaming request outputting manager 945, a context transfer manager 950, a roaming request response reception manager 955, a confirmation message manager 960, an information request component 965, a transition request manager 970, and a measurement report manager 975. Portions of one or more of the roaming message reception component 925, the STA validation component 930, the communication link indication component 935, the STA communication component 940, the roaming request outputting manager 945, the context transfer manager 950, the roaming request response reception manager 955, the confirmation message manager 960, the information request component 965, the transition request manager 970, and the measurement report manager 975 may be implemented at least in part in hardware or firmware. For example, one or more of the roaming message reception component 925, the STA validation component 930, the communication link indication component 935, the STA communication component 940, the roaming request outputting manager 945, the context transfer manager 950, the roaming request response reception manager 955, the confirmation message manager 960, the information request component 965, the transition request manager 970, and the measurement report manager 975 may be implemented at least in part by at least a processor or a modem. In some examples, portions of one or more of the roaming message reception component 925, the STA validation component 930, the communication link indication component 935, the STA communication component 940, the roaming request outputting manager 945, the context transfer manager 950, the roaming request response reception manager 955, the confirmation message manager 960, the information request component 965, the transition request manager 970, andAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO71the measurement report manager 975 may be implemented at least in part by a processor and software in the form of processor-executable code stored in memory.

[0235] The wireless communication device 900 may support wireless communications in accordance with examples as disclosed herein. The roaming message reception component 925 is configurable or configured to obtain, from a wireless STA device, a first message associated with roaming to the first wireless AP device, the first message associated with a pairwise transient key security association and indicating information associated with validation of the wireless STA device. The STA validation component 930 is configurable or configured to validate the wireless STA device based on the information associated with the validation. The communication link indication component 935 is configurable or configured to output a second message indicating one or more wireless communication links associated with the first wireless AP device. The STA communication component 940 is configurable or configured to communicate with the wireless STA device via a wireless communication link of the one or more wireless communication links based on outputting the second message.

[0236] In some examples, the information associated with the validation includes a first media access control address associated with a second wireless AP device, a second media access control address associated with the wireless STA device, a security key, a message integrity check, a packet number, an association state, an encryption of the message, or any combination thereof.

[0237] In some examples, the STA validation component 930 is configurable or configured to obtain, from the second wireless AP device, an indication of second information associated with the validation, where the validating is based on a comparison of the information associated with the validation and the second information associated with the validation.

[0238] In some examples, the security key is common to a seamless roaming mobility domain, the seamless roaming mobility domain including the first wireless AP device and the second wireless AP device.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO72

[0239] In some examples, the STA validation component 930 is configurable or configured to receive first signaling including an indication of the security key during an association procedure associated with the seamless roaming mobility domain.

[0240] In some examples, the STA validation component 930 is configurable or configured to receive second signaling including an indication of a second security key based on validating the wireless STA device.

[0241] In some examples, the information request component 965 is configurable or configured to output, to the second wireless AP device, a request message indicating a request for second information associated with the validation. In some examples, the STA validation component 930 is configurable or configured to obtain, from the second wireless AP device, a response message indicating the second information associated with the validation, where the validating is based on the second information associated with the validation.

[0242] In some examples, the second information associated with the validation includes the second media access control address associated with the wireless STA device, a second message integrity check, a second packet number, or any combination thereof.

[0243] In some examples, the request includes the information associated with the validation. In some examples, the second information associated with the validation includes a verification of the information associated with the validation.

[0244] In some examples, the second message is protected with a security key associated with the pairwise transient key security association, a message integrity check, or both.

[0245] Additionally, or alternatively, the wireless communication device 900 may support wireless communications in accordance with examples as disclosed herein. The roaming request outputting manager 945 is configurable or configured to output, to a wireless STA device, a first message indicating a request for the wireless STA device to perform a roaming procedure to roam from the first wireless AP device to one of a set of second wireless AP devices, where the first message indicates the set of second wireless AP devices and a duration for the wireless STA device to perform the roamingAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO73procedure. The context transfer manager 950 is configurable or configured to communicate with the set of second wireless AP devices to transfer at least a portion of a context associated with the wireless STA device from the first wireless AP device to one or more of the set of second wireless AP devices. The roaming request response reception manager 955 is configurable or configured to obtain a response message indicating an acceptance or rejection of the request.

[0246] In some examples, the confirmation message manager 960 is configurable or configured to output a confirmation message in response to obtaining the response message.

[0247] In some examples, the context transfer manager 950 is configurable or configured to communicate with a second wireless AP device of the set of second wireless AP devices to transfer at least a second portion of the context from the first wireless AP device to the second wireless AP device based on the response message indicating the acceptance of the request.

[0248] In some examples, the transition request manager 970 is configurable or configured to obtain a second message indicating a request for the wireless STA device to transition from communicating with the first wireless AP device to communicating with the second wireless AP device of the set of second wireless AP devices, where transferring at least the second portion of the context is based on the second message.

[0249] In some examples, the response message further indicates a request for the wireless STA device to transition from communicating with the first wireless AP device to communicating with the second wireless AP device of the set of second wireless AP devices.

[0250] In some examples, the response message indicates the rejection of the request.

[0251] In some examples, the first message indicates one or more second wireless AP devices of the set of second wireless AP devices that are associated with one or more prepared communication links.

[0252] In some examples, the first message indicates that the first wireless AP device has transferred at least the portion of the context associated with the wirelessAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO74STA device to the one or more second wireless AP devices of the set of second wireless AP devices.

[0253] In some examples, the request for the wireless STA device to perform the roaming procedure is based on one or more measurements associated with a communication link between the wireless STA device and the first wireless AP device, a network load associated with the first wireless AP device, a capacity associated with the first wireless AP device, or any combination thereof.

[0254] In some examples, the measurement report manager 975 is configurable or configured to obtain a measurement report indicating the one or more measurements.

[0255] In some examples, the first message indicates that the wireless STA device will be dissociated from the first wireless AP device after the duration.

[0256] Figure 10 shows a flowchart illustrating an example process 1000 performable by or at a wireless STA device that supports authentication techniques for seamless roaming. The operations of the process 1000 may be implemented by a wireless STA device or its components as described herein. For example, the process 1000 may be performed by a wireless communication device, such as the wireless communication device 800 described with reference to Figure 8, operating as or within a wireless STA. In some examples, the process 1000 may be performed by a wireless STA, such as one of the STAs 104 described with reference to Figure 1.

[0257] In some examples, in 1005, the wireless STA device may output a first message associated with roaming to a target wireless AP device, where the first message indicates first information associated with generation of a first security key associated with the target wireless AP device. The operations of 1005 may be performed in accordance with examples as disclosed herein, such as the transmission of the first message in Figure 4. In some implementations, aspects of the operations of 1005 may be performed by a key generation information component 825 as described with reference to Figure 8.

[0258] In some examples, in 1010, the wireless STA device may obtain a second message indicating second information associated with the generation of the first security key. The operations of 1010 may be performed in accordance with examples asAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO75disclosed herein, such as transmission of the second message in Figure 4. In some implementations, aspects of the operations of 1010 may be performed by a key generation information component 825 as described with reference to Figure 8.

[0259] In some examples, in 1015, the wireless STA device may generate the first security key based on the first message and the second message. The operations of 1015 may be performed in accordance with examples as disclosed herein, such as generation of the security key as described with reference to Figures 4 and 5. In some implementations, aspects of the operations of 1015 may be performed by a key generation component 830 as described with reference to Figure 8.

[0260] In some examples, in 1020, the wireless STA device may output a third message that is protected using one of the first security key or a second security key associated with a serving wireless AP device, the third message indicating a message integrity check associated with the first security key, where the first security key and the second security key are associated with a same pairwise transient key security association. The operations of 1020 may be performed in accordance with examples as disclosed herein, such as outputting of the third message of Figure 4. In some implementations, aspects of the operations of 1020 may be performed by a MIC outputting component 835 as described with reference to Figure 8.

[0261] In some examples, in 1025, the wireless STA device may obtain a fourth message associated with the roaming, the fourth message protected using the one of the first security key or the second security key. The operations of 1025 may be performed in accordance with examples as disclosed herein, such as obtaining the fourth message in Figure 4. In some implementations, aspects of the operations of 1025 may be performed by a roaming message reception component 840 as described with reference to Figure 8.

[0262] In some examples, in 1030, the wireless STA device may perform the roaming to the target wireless AP device based on obtaining the fourth message. The operations of 1030 may be performed in accordance with examples as disclosed herein, such as performing the roaming as described with reference to Figures 3 and 4. In some implementations, aspects of the operations of 1030 may be performed by a roaming component 845 as described with reference to Figure 8.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO76

[0263] Figure 11 shows a flowchart illustrating an example process 1100 performable by or at a first wireless AP device that supports authentication techniques for seamless roaming. The operations of the process 1100 may be implemented by a first wireless AP device or its components as described herein. For example, the process 1100 may be performed by a wireless communication device, such as the wireless communication device 900 described with reference to Figure 9, operating as or within a wireless AP. In some examples, the process 1100 may be performed by a wireless AP, such as one of the APs 102 described with reference to Figure 1.

[0264] In some examples, in 1105, the first wireless AP device may obtain, from a wireless STA device, a first message associated with roaming to the first wireless AP device, the first message associated with a pairwise transient key security association and indicating information associated with validation of the wireless STA device. The operations of 1105 may be performed in accordance with examples as disclosed herein, such as obtaining the roaming request message in Figure 6. In some implementations, aspects of the operations of 1105 may be performed by a roaming message reception component 925 as described with reference to Figure 9.

[0265] In some examples, in 1110, the first wireless AP device may validate the wireless STA device based on the information associated with the validation. The operations of 1110 may be performed in accordance with examples as disclosed herein, such as validating the non-AP device in Figure 6. In some implementations, aspects of the operations of 1110 may be performed by a STA validation component 930 as described with reference to Figure 9.

[0266] In some examples, in 1115, the first wireless AP device may output a second message indicating one or more wireless communication links associated with the first wireless AP device. The operations of 1115 may be performed in accordance with examples as disclosed herein, such as outputting the second message in Figure 6. In some implementations, aspects of the operations of 1115 may be performed by a communication link indication component 935 as described with reference to Figure 9.

[0267] In some examples, in 1120, the first wireless AP device may communicate with the wireless STA device via a wireless communication link of the one or more wireless communication links based on outputting the second message. The operationsAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO77of 1120 may be performed in accordance with examples as disclosed herein, such as communicating in Figure 6. In some implementations, aspects of the operations of 1120 may be performed by a STA communication component 940 as described with reference to Figure 9.

[0268] Figure 12 shows a flowchart illustrating an example process 1200 performable by or at a wireless STA device that supports authentication techniques for seamless roaming. The operations of the process 1200 may be implemented by a wireless STA device or its components as described herein. For example, the process 1200 may be performed by a wireless communication device, such as the wireless communication device 800 described with reference to Figure 8, operating as or within a wireless STA. In some examples, the process 1200 may be performed by a wireless STA, such as one of the STAs 104 described with reference to Figure 1.

[0269] In some examples, in 1205, the wireless STA device may obtain, from a first wireless AP device, a first message indicating a request for the wireless STA device to perform a roaming procedure to roam from the first wireless AP device to one of a set of second wireless AP devices, where the first message indicates the set of second wireless AP devices and a duration for the wireless STA device to perform the roaming procedure. The operations of 1205 may be performed in accordance with examples as disclosed herein, such as obtaining the roaming request message in Figure 7. In some implementations, aspects of the operations of 1205 may be performed by a roaming request reception component 850 as described with reference to Figure 8.

[0270] In some examples, in 1210, the wireless STA device may output a response message indicating an acceptance or rejection of the request. The operations of 1210 may be performed in accordance with examples as disclosed herein, such as outputting the response message in Figure 7. In some implementations, aspects of the operations of 1210 may be performed by a roaming request response component 855 as described with reference to Figure 8.

[0271] In some examples, in 1215, the wireless STA device may perform the roaming procedure to roam from the first wireless AP device to a second wireless AP device of the set of second wireless AP devices or to a third wireless AP device during the duration and in accordance with the acceptance or rejection. The operations of 1215Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO78may be performed in accordance with examples as disclosed herein, such as performing the roaming as described in Figures 3 and 7. In some implementations, aspects of the operations of 1215 may be performed by a roaming procedure component 860 as described with reference to Figure 8.

[0272] Figure 13 shows a flowchart illustrating an example process 1300 performable by or at a first wireless AP device that supports authentication techniques for seamless roaming. The operations of the process 1300 may be implemented by a first wireless AP device or its components as described herein. For example, the process 1300 may be performed by a wireless communication device, such as the wireless communication device 900 described with reference to Figure 9, operating as or within a wireless AP. In some examples, the process 1300 may be performed by a wireless AP, such as one of the APs 102 described with reference to Figure 1.

[0273] In some examples, in 1305, the first wireless AP device may output, to a wireless STA device, a first message indicating a request for the wireless STA device to perform a roaming procedure to roam from the first wireless AP device to one of a set of second wireless AP devices, where the first message indicates the set of second wireless AP devices and a duration for the wireless STA device to perform the roaming procedure. The operations of 1305 may be performed in accordance with examples as disclosed herein, such as outputting the roaming request message in Figure 7. In some implementations, aspects of the operations of 1305 may be performed by a roaming request outputting manager 945 as described with reference to Figure 9.

[0274] In some examples, in 1310, the first wireless AP device may communicate with the set of second wireless AP devices to transfer at least a portion of a context associated with the wireless STA device from the first wireless AP device to one or more of the set of second wireless AP devices. The operations of 1310 may be performed in accordance with examples as disclosed herein, such as transferring the context as described in Figures 3 and 7. In some implementations, aspects of the operations of 1310 may be performed by a context transfer manager 950 as described with reference to Figure 9.

[0275] In some examples, in 1315, the first wireless AP device may obtain a response message indicating an acceptance or rejection of the request. The operationsAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO79of 1315 may be performed in accordance with examples as disclosed herein, such as obtaining the response message in Figure 7. In some implementations, aspects of the operations of 1315 may be performed by a roaming request response reception manager 955 as described with reference to Figure 9.

[0276] Implementation examples are described in the following numbered clauses:

[0277] Aspect 1 : A method for wireless communications by a wireless STA device, comprising: outputting a first message associated with roaming to a target wireless AP device, wherein the first message indicates first information associated with generation of a first security key associated with the target wireless AP device; obtaining a second message indicating second information associated with the generation of the first security key; generating the first security key based at least in part on the first message and the second message; outputting a third message that is protected using one of the first security key or a second security key associated with a serving wireless AP device, the third message indicating a MIC associated with the first security key, wherein the first security key and the second security key are associated with a same PTKSA; obtaining a fourth message associated with the roaming, the fourth message protected using the one of the first security key or the second security key; and performing the roaming to the target wireless AP device based at least in part on obtaining the fourth message.

[0278] Aspect 2: The method of aspect 1, wherein outputting the first message comprises outputting the first message to the serving wireless AP device, and obtaining the second message comprises obtaining the second message from the serving wireless AP device.

[0279] Aspect 3 : The method of aspect 2, wherein the first message and the second message are protected using the second security key.

[0280] Aspect 4: The method of any of aspects 1 through 3, wherein outputting the third message comprises outputting the third message to the serving wireless AP device, and obtaining the fourth message comprises obtaining the fourth message from the serving wireless AP device.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO80

[0281] Aspect 5: The method of aspect 4, wherein the third message and the fourth message are protected using the second security key.

[0282] Aspect 6: The method of any of aspects 1 through 5, wherein outputting the third message comprises outputting the third message to the target wireless AP device, and obtaining the fourth message comprises obtaining the fourth message from the target wireless AP device.

[0283] Aspect 7 : The method of any of aspects 1 through 6, wherein the third message and the fourth message are protected using the first security key.

[0284] Aspect 8: The method of any of aspects 1 through 7, wherein outputting the first message comprises outputting the first message to the target wireless AP device, and obtaining the second message comprises obtaining the second message from the target wireless AP device.

[0285] Aspect 9: The method of any of aspects 1, 2, 4, 6, and 8, wherein the third message and the fourth message are unprotected.

[0286] Aspect 10: The method of any of aspects 1 through 9, further comprising: outputting, to the serving wireless AP device, a capability message indicating a capability of the wireless STA device to use the first security key and the second security key associated with the same PTKSA, wherein the first security key and the second security key are associated with the same PTKSA based at least in part on the capability.

[0287] Aspect 11 : The method of aspect 10, wherein the capability message is output during an association procedure associated with a SMD, the SMD comprising the serving wireless AP device and the target wireless AP device.

[0288] Aspect 12: The method of any of aspects 1 through 11, wherein the PTKSA, a PMKSA associated with the target wireless AP device and the serving wireless AP device, or both are associated with a SMD, the SMD comprising the target wireless AP device and the serving wireless AP device.

[0289] Aspect 13 : A method for wireless communications by a first wireless AP device, comprising: obtaining, from a wireless STA device, a first message associated with roaming to the first wireless AP device, the first message associated with a PTKSAAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO81and indicating information associated with validation of the wireless STA device; validating the wireless STA device based at least in part on the information associated with the validation; outputting a second message indicating one or more wireless communication links associated with the first wireless AP device; and communicating with the wireless STA device via a wireless communication link of the one or more wireless communication links based at least in part on outputting the second message.

[0290] Aspect 14: The method of aspect 13, wherein the information associated with the validation comprises a first MAC address associated with a second wireless AP device, a second MAC address associated with the wireless STA device, a security key, a MIC, a packet number, an association state, an encryption of the message, or any combination thereof.

[0291] Aspect 15: The method of aspect 14, further comprising: obtaining, from the second wireless AP device, an indication of second information associated with the validation, wherein the validating is based at least in part on a comparison of the information associated with the validation and the second information associated with the validation.

[0292] Aspect 16: The method of any of aspects 14 through 15, wherein the security key is common to a SMD, the SMD comprising the first wireless AP device and the second wireless AP device.

[0293] Aspect 17: The method of aspect 16, further comprising: receiving first signaling comprising an indication of the security key during an association procedure associated with the SMD.

[0294] Aspect 18: The method of any of aspects 16 through 17, further comprising: receiving second signaling comprising an indication of a second security key based at least in part on validating the wireless STA device.

[0295] Aspect 19: The method of any of aspects 14 through 18, further comprising: outputting, to the second wireless AP device, a request message indicating a request for second information associated with the validation; and obtaining, from the second wireless AP device, a response message indicating the second information associatedAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO82with the validation, wherein the validating is based at least in part on the second information associated with the validation.

[0296] Aspect 20: The method of aspect 19, wherein the second information associated with the validation comprises the second MAC address associated with the wireless STA device, a second MIC, a second packet number, or any combination thereof.

[0297] Aspect 21 : The method of any of aspects 19 through 20, wherein the request comprises the information associated with the validation, and the second information associated with the validation comprises a verification of the information associated with the validation.

[0298] Aspect 22: The method of any of aspects 13 through 21, wherein the second message is protected with a security key associated with the PTKSA, a MIC, or both.

[0299] Aspect 23 : A method for wireless communications by a wireless STA device, comprising: obtaining, from a first wireless AP device, a first message indicating a request for the wireless STA device to perform a roaming procedure to roam from the first wireless AP device to one of a set of second wireless AP devices, wherein the first message indicates the set of second wireless AP devices and a duration for the wireless STA device to perform the roaming procedure; outputting a response message indicating an acceptance or rejection of the request; and performing the roaming procedure to roam from the first wireless AP device to a second wireless AP device of the set of second wireless AP devices or to a third wireless AP device during the duration and in accordance with the acceptance or rejection.

[0300] Aspect 24: The method of aspect 23, further comprising: obtaining a confirmation message based at least in part on outputting the response message, wherein performing the roaming procedure is based at least in part on obtaining the confirmation message.

[0301] Aspect 25: The method of aspect 24, further comprising: outputting a second message indicating a request to transition from communicating with the first wireless AP device to communicating with the second wireless AP device of the set of secondAttorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO83wireless AP devices, wherein the confirmation message is based at least in part on the second message.

[0302] Aspect 26: The method of any of aspects 23 through 25, wherein the response message indicates the acceptance of the request, and performing the roaming procedure comprises roaming from the first wireless AP device to the second wireless AP device of the set of second wireless AP devices.

[0303] Aspect 27: The method of aspect 26, wherein the response message further indicates a request to transition from communicating with the first wireless AP device to communicating with the second wireless AP device of the set of second wireless AP devices.

[0304] Aspect 28: The method of any of aspects 23 through 25, wherein the response message indicates the rejection of the request, and performing the roaming procedure comprises roaming from the first wireless AP device to the third wireless AP device.

[0305] Aspect 29: The method of any of aspects 23 through 28, wherein the first message indicates one or more second wireless AP devices of the set of second wireless AP devices that are associated with one or more prepared communication links.

[0306] Aspect 30: The method of any of aspects 23 through 29, wherein the first message indicates that the first wireless AP device has performed a context transfer procedure to transfer a context associated with the wireless STA device to one or more second wireless AP devices of the set of second wireless AP devices.

[0307] Aspect 31 : The method of any of aspects 23 through 30, wherein the request for the wireless STA device to perform the roaming procedure is based at least in part on one or more measurements associated with a communication link between the wireless STA device and the first wireless AP device, a network load associated with the first wireless AP device, a capacity associated with the first wireless AP device, or any combination thereof.

[0308] Aspect 32: The method of aspect 31, further comprising: outputting a measurement report indicating the one or more measurements.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO84

[0309] Aspect 33: The method of any of aspects 23 through 32, wherein the first message indicates that the wireless STA device will be dissociated from the first wireless AP device after the duration.

[0310] Aspect 34: A method for wireless communications by a first wireless AP device, comprising: outputting, to a wireless STA device, a first message indicating a request for the wireless STA device to perform a roaming procedure to roam from the first wireless AP device to one of a set of second wireless AP devices, wherein the first message indicates the set of second wireless AP devices and a duration for the wireless STA device to perform the roaming procedure; communicating with the set of second wireless AP devices to transfer at least a portion of a context associated with the wireless STA device from the first wireless AP device to one or more of the set of second wireless AP devices; and obtaining a response message indicating an acceptance or rejection of the request.

[0311] Aspect 35: The method of aspect 34, further comprising: outputting a confirmation message in response to obtaining the response message.

[0312] Aspect 36: The method of any of aspects 34 through 35, further comprising: communicating with a second wireless AP device of the set of second wireless AP devices to transfer at least a second portion of the context from the first wireless AP device to the second wireless AP device based at least in part on the response message indicating the acceptance of the request.

[0313] Aspect 37: The method of aspect 36, further comprising: obtaining a second message indicating a request for the wireless STA device to transition from communicating with the first wireless AP device to communicating with the second wireless AP device of the set of second wireless AP devices, wherein transferring at least the second portion of the context is based at least in part on the second message.

[0314] Aspect 38: The method of any of aspects 36 through 37, wherein the response message further indicates a request for the wireless STA device to transition from communicating with the first wireless AP device to communicating with the second wireless AP device of the set of second wireless AP devices.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO85

[0315] Aspect 39: The method of any of aspects 34 through 35, wherein the response message indicates the rejection of the request.

[0316] Aspect 40: The method of any of aspects 34 through 39, wherein the first message indicates one or more second wireless AP devices of the set of second wireless AP devices that are associated with one or more prepared communication links.

[0317] Aspect 41 : The method of any of aspects 34 through 40, wherein the first message indicates that the first wireless AP device has transferred at least the portion of the context associated with the wireless STA device to the one or more second wireless AP devices of the set of second wireless AP devices.

[0318] Aspect 42: The method of any of aspects 34 through 41, wherein the request for the wireless STA device to perform the roaming procedure is based at least in part on one or more measurements associated with a communication link between the wireless STA device and the first wireless AP device, a network load associated with the first wireless AP device, a capacity associated with the first wireless AP device, or any combination thereof.

[0319] Aspect 43: The method of aspect 42, further comprising: obtaining a measurement report indicating the one or more measurements.

[0320] Aspect 44: The method of any of aspects 34 through 43, wherein the first message indicates that the wireless STA device will be dissociated from the first wireless AP device after the duration.

[0321] Aspect 45: A wireless STA device for wireless communications, comprising one or more memories storing processor-executable code, and one or more processors coupled with the one or more memories and individually or collectively operable to execute the code to cause the wireless STA device to perform a method of any of aspects 1 through 12.

[0322] Aspect 46: A wireless STA device for wireless communications, comprising at least one means for performing a method of any of aspects 1 through 12.

[0323] Aspect 47: A non-transitory computer-readable medium storing code for wireless communications, the code comprising instructions executable by one or more processors to perform a method of any of aspects 1 through 12.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO86

[0324] Aspect 48: A first wireless AP device for wireless communications, comprising one or more memories storing processor-executable code, and one or more processors coupled with the one or more memories and individually or collectively operable to execute the code to cause the first wireless AP device to perform a method of any of aspects 13 through 22.

[0325] Aspect 49: A first wireless AP device for wireless communications, comprising at least one means for performing a method of any of aspects 13 through 22.

[0326] Aspect 50: A non-transitory computer-readable medium storing code for wireless communications, the code comprising instructions executable by one or more processors to perform a method of any of aspects 13 through 22.

[0327] Aspect 51 : A wireless STA device for wireless communications, comprising one or more memories storing processor-executable code, and one or more processors coupled with the one or more memories and individually or collectively operable to execute the code to cause the wireless STA device to perform a method of any of aspects 23 through 33.

[0328] Aspect 52: A wireless STA device for wireless communications, comprising at least one means for performing a method of any of aspects 23 through 33.

[0329] Aspect 53: A non-transitory computer-readable medium storing code for wireless communications, the code comprising instructions executable by one or more processors to perform a method of any of aspects 23 through 33.

[0330] Aspect 54: A first wireless AP device for wireless communications, comprising one or more memories storing processor-executable code, and one or more processors coupled with the one or more memories and individually or collectively operable to execute the code to cause the first wireless AP device to perform a method of any of aspects 34 through 44.

[0331] Aspect 55: A first wireless AP device for wireless communications, comprising at least one means for performing a method of any of aspects 34 through 44.

[0332] Aspect 56: A non-transitory computer-readable medium storing code for wireless communications, the code comprising instructions executable by one or more processors to perform a method of any of aspects 34 through 44.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO87

[0333] As used herein, the term “determine” or “determining” encompasses a wide variety of actions and, therefore, “determining” can include calculating, computing, processing, deriving, estimating, investigating, looking up (such as via looking up in a table, a database, or another data structure), inferring, ascertaining, or measuring, among other possibilities. Also, “determining” can include receiving (such as receiving information), accessing (such as accessing data stored in memory) or transmitting (such as transmitting information), among other possibilities. Additionally, “determining” can include resolving, selecting, obtaining, choosing, establishing and other such similar actions.

[0334] As used herein, a phrase referring to “at least one of’ or “one or more of’ a list of items refers to any combination of those items, including single members. As an example, “at least one of: a, b, or c” is intended to cover: a, b, c, a-b, a-c, b-c, and a-b-c. As used herein, “or” is intended to be interpreted in the inclusive sense, unless otherwise explicitly indicated. For example, “a or b” may include a only, b only, or a combination of a and b. Furthermore, as used herein, a phrase referring to “a” or “an” element refers to one or more of such elements acting individually or collectively to perform the recited function(s). Additionally, a “set” refers to one or more items, and a “subset” refers to less than a whole set, but non-empty.

[0335] As used herein, “based on” is intended to be interpreted in the inclusive sense, unless otherwise explicitly indicated. For example, “based on” may be used interchangeably with “based at least in part on,” “associated with,” “in association with,” or “in accordance with” unless otherwise explicitly indicated. Specifically, unless a phrase refers to “based on only ‘a,’” or the equivalent in context, whatever it is that is “based on ‘a,’” or “based at least in part on ‘a,’” may be based on “a” alone or based on a combination of “a” and one or more other factors, conditions, or information.

[0336] The various illustrative components, logic, logical blocks, modules, circuits, operations, and algorithm processes described in connection with the examples disclosed herein may be implemented as electronic hardware, firmware, software, or combinations of hardware, firmware, or software, including the structures disclosed in this specification and the structural equivalents thereof. The interchangeability of hardware, firmware and software has been described generally, in terms of functionality, and illustrated in the various illustrative components, blocks, modules, Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO88circuits and processes described above. Whether such functionality is implemented in hardware, firmware or software depends upon the particular application and design constraints imposed on the overall system.

[0337] Various modifications to the examples described in this disclosure may be readily apparent to persons having ordinary skill in the art, and the generic principles defined herein may be applied to other examples without departing from the spirit or scope of this disclosure. Thus, the claims are not intended to be limited to the examples shown herein, but are to be accorded the widest scope consistent with this disclosure, the principles and the novel features disclosed herein.

[0338] Additionally, various features that are described in this specification in the context of separate examples also can be implemented in combination in a single implementation. Conversely, various features that are described in the context of a single implementation also can be implemented in multiple examples separately or in any suitable subcombination. As such, although features may be described above as acting in particular combinations, and even initially claimed as such, one or more features from a claimed combination can in some cases be excised from the combination, and the claimed combination may be directed to a subcombination or variation of a subcombination.

[0339] Similarly, while operations are depicted in the drawings in a particular order, this should not be understood as requiring that such operations be performed in the particular order shown or in sequential order, or that all illustrated operations be performed, to achieve desirable results. Further, the drawings may schematically depict one or more example processes in the form of a flowchart or flow diagram. However, other operations that are not depicted can be incorporated in the example processes that are schematically illustrated. For example, one or more additional operations can be performed before, after, simultaneously, or between any of the illustrated operations. In some circumstances, multitasking and parallel processing may be advantageous.Moreover, the separation of various system components in the examples described above should not be understood as requiring such separation in all examples, and it should be understood that the described program components and systems can generally be integrated together in a single software product or packaged into multiple software products.Attorney Docket No. PW832IN.WO (83043.TBD)

Claims

Qualcomm Docket No. 2501299WO89CLAIMSWhat is claimed is:

1. A wireless station device, comprising:a processing system that includes processor circuitry and memory circuitry that stores code, the processing system configured to cause the wireless station device to:output a first message associated with roaming to a target wireless access point device, wherein the first message indicates first information associated with generation of a first security key associated with the target wireless access point device;obtain a second message indicating second information associated with the generation of the first security key;generate the first security key based at least in part on the first message and the second message;output a third message that is protected using one of the first security key or a second security key associated with a serving wireless access point device, the third message indicating a message integrity check associated with the first security key, wherein the first security key and the second security key are associated with a same pairwise transient key security association;obtain a fourth message associated with the roaming, the fourth message protected using the one of the first security key or the second security key; andperform the roaming to the target wireless access point device based at least in part on obtaining the fourth message.

2. The wireless station device of claim 1, wherein:outputting the first message comprises outputting the first message to the serving wireless access point device, andobtaining the second message comprises obtaining the second message from the serving wireless access point device.

3. The wireless station device of claim 2, wherein the first message and the second message are protected using the second security key.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO904. The wireless station device of claim 1, wherein:outputting the third message comprises outputting the third message to the serving wireless access point device, andobtaining the fourth message comprises obtaining the fourth message from the serving wireless access point device.

5. The wireless station device of claim 4, wherein the third message and the fourth message are protected using the second security key.

6. The wireless station device of claim 1, wherein:outputting the third message comprises outputting the third message to the target wireless access point device, andobtaining the fourth message comprises obtaining the fourth message from the target wireless access point device.

7. The wireless station device of claim 1, wherein the third message and the fourth message are protected using the first security key.

8. The wireless station device of claim 1, wherein:outputting the first message comprises outputting the first message to the target wireless access point device, andobtaining the second message comprises obtaining the second message from the target wireless access point device.

9. The wireless station device of claim 8, wherein:the third message and the fourth message are unprotected.

10. The wireless station device of claim 1, wherein the processing system is further configured to cause the wireless station device to:output, to the serving wireless access point device, a capability message indicating a capability of the wireless station device to use the first security key and the second security key associated with the same pairwise transient key security association, wherein the first security key and the second security key are associated with the same pairwise transient key security association based at least in part on the capability.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO9111. The wireless station device of claim 10, wherein the capability message is output during an association procedure associated with a seamless roaming mobility domain, the seamless roaming mobility domain comprising the serving wireless access point device and the target wireless access point device.

12. The wireless station device of claim 1, wherein the pairwise transient key security association, a pairwise master key security association associated with the target wireless access point device and the serving wireless access point device, or both are associated with a seamless roaming mobility domain, the seamless roaming mobility domain comprising the target wireless access point device and the serving wireless access point device.

13. A first wireless access point device, comprising:a processing system that includes processor circuitry and memory circuitry that stores code, the processing system configured to cause the first wireless access point device to:obtain, from a wireless station device, a first message associated with roaming to the first wireless access point device, the first message associated with a pairwise transient key security association and indicating information associated with validation of the wireless station device;validate the wireless station device based at least in part on the information associated with the validation;output a second message indicating one or more wireless communication links associated with the first wireless access point device; and communicate with the wireless station device via a wireless communication link of the one or more wireless communication links based at least in part on outputting the second message.

14. The first wireless access point device of claim 13, wherein the information associated with the validation comprises a first media access control address associated with a second wireless access point device, a second media access control address associated with the wireless station device, a security key, a message integrity check, a packet number, an association state, an encryption of the message, or any combination thereof.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO9215. The first wireless access point device of claim 14, wherein the processing system is further configured to cause the first wireless access point device to:obtain, from the second wireless access point device, an indication of second information associated with the validation, wherein the validating is based at least in part on a comparison of the information associated with the validation and the second information associated with the validation.

16. The first wireless access point device of claim 14, wherein the security key is common to a seamless roaming mobility domain, the seamless roaming mobility domain comprising the first wireless access point device and the second wireless access point device.

17. The first wireless access point device of claim 16, wherein the processing system is further configured to cause the first wireless access point device to:receive first signaling comprising an indication of the security key during an association procedure associated with the seamless roaming mobility domain.

18. The first wireless access point device of claim 16, wherein the processing system is further configured to cause the first wireless access point device to:receive second signaling comprising an indication of a second security key based at least in part on validating the wireless station device.

19. The first wireless access point device of claim 14, wherein the processing system is further configured to cause the first wireless access point device to:output, to the second wireless access point device, a request message indicating a request for second information associated with the validation; and obtain, from the second wireless access point device, a response message indicating the second information associated with the validation, wherein the validating is based at least in part on the second information associated with the validation.

20. The first wireless access point device of claim 19, wherein the second information associated with the validation comprises the second media access control address associated with the wireless station device, a second message integrity check, a second packet number, or any combination thereof.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO9321. The first wireless access point device of claim 19, wherein: the request comprises the information associated with the validation, and the second information associated with the validation comprises a verification of the information associated with the validation.

22. The first wireless access point device of claim 13, wherein the second message is protected with a security key associated with the pairwise transient key security association, a message integrity check, or both.

23. A method for wireless communications by a wireless station device, comprising:outputting a first message associated with roaming to a target wireless access point device, wherein the first message indicates first information associated with generation of a first security key associated with the target wireless access point device;obtaining a second message indicating second information associated with the generation of the first security key;generating the first security key based at least in part on the first message and the second message;outputting a third message that is protected using one of the first security key or a second security key associated with a serving wireless access point device, the third message indicating a message integrity check associated with the first security key, wherein the first security key and the second security key are associated with a same pairwise transient key security association;obtaining a fourth message associated with the roaming, the fourth message protected using the one of the first security key or the second security key; and performing the roaming to the target wireless access point device based at least in part on obtaining the fourth message.

24. The method of claim 23, wherein outputting the first message comprises outputting the first message to the serving wireless access point device, and wherein obtaining the second message comprises obtaining the second message from the serving wireless access point device.Attorney Docket No. PW832IN.WO (83043.TBD)Qualcomm Docket No. 2501299WO9425. The method of claim 24, wherein the first message and the second message are protected using the second security key.

26. The method of claim 23, wherein outputting the third message comprises outputting the third message to the serving wireless access point device, and wherein obtaining the fourth message comprises obtaining the fourth message from the serving wireless access point device.

27. The method of claim 26, wherein the third message and the fourth message are protected using the second security key.

28. The method of claim 23, wherein outputting the third message comprises outputting the third message to the target wireless access point device, and wherein obtaining the fourth message comprises obtaining the fourth message from the target wireless access point device.

29. The method of claim 23, wherein the third message and the fourth message are protected using the first security key.

30. A method for wireless communications by a first wireless access point device, comprising:obtaining, from a wireless station device, a first message associated with roaming to the first wireless access point device, the first message associated with a pairwise transient key security association and indicating information associated with validation of the wireless station device;validating the wireless station device based at least in part on the information associated with the validation;outputting a second message indicating one or more wireless communication links associated with the first wireless access point device; and communicating with the wireless station device via a wireless communication link of the one or more wireless communication links based at least in part on outputting the second message.Attorney Docket No. PW832IN.WO (83043.TBD)

Images