Communication system, wireless communication apparatus, and communication method

• US 10,250,566 B2
• Filed: 01/10/2017
• Issued: 04/02/2019
• Est. Priority Date: 12/26/2001
• Status: Expired due to Term

• Current Assignee: Palmira Wireless AG
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Adachi, Tomoko, Toshimitsu, Kiyoshi
• Primary Examiner(s): Ho, Dao Q
• Application Number:
  US15/402,737
• Publication Number:
  US 20170126637A1
• Time in Patent Office: 812 Days
• CPC Class Codes: H04L 12/189 in combination with wireless systems selective distribution or broadcast in wireless communication networks H04W4/06
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0464 using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/67 Risk-dependent, e.g. selecting a security level depending on risk profiles
• CPC Class Codes: H04W 28/18 Negotiating wireless communication parameters
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A wireless communication circuit includes a receiver to receive at least one of a beacon frame and a probe response frame from a first wireless communication apparatus belonging to a first communication group, at least one of the beacon frame and the probe response frame including first security information indicating a first encryption method. The circuit includes a transmitter to transmit an association request frame to the first wireless communication apparatus, the association request frame including second security information indicating a second encryption method which is supported by the wireless communication circuit, after a determination that the second encryption method overlaps with the first encryption method. The transmitter declines to associate with the first wireless communication apparatus if the first encryption method fails to overlap with the second encryption method. The transmitter transmits a data frame including a frame body after a reception of an association response frame.

Claims

1. A wireless communication terminal configured to belong to a first communication group, the wireless communication terminal comprising:

an antenna;

a memory configured to store a first encryption method used by the first communication group to protect at least one of broadcast communication or multicast communication in the first communication group;

a transmitter configured to transmit, via the antenna, a beacon frame including information of the first encryption method;

a receiver configured to receive, via the antenna, an association request frame from a first wireless communication apparatus, the association request frame including information of a second encryption method supported by the first wireless communication apparatus; and

circuitry configured to, prior to completion of establishment of a connection between the wireless terminal and the first wireless communication apparatus, check whether the second encryption method is equal to the first encryption method to determine whether a request of the association request frame is permitted or rejected,

wherein the transmitter is further configured to transmit, via the antenna, an association response frame indicating either one of an association successful or an association failure, and the connection between the wireless communication terminal and the first wireless communication apparatus is not established,

wherein the receiver is further configured to receive, via the antenna, a data frame after a transmission of the association response frame indicating the association successful and the completion of establishment of the connection between the wireless communication terminal and the first wireless communication apparatus, a frame body of the data frame including data encrypted by the second encryption method, the data frame is either one of broadcast communication or multicast communication in the first communication group, and one of destinations of the data frame is the wireless communication terminal, and

wherein the association request frame includes a frame control field and a frame body, the frame body includes the information of the second encryption method, the frame control field includes a type field, and the type field includes information indicating that the association request frame is classified as a management frame.

2. The wireless communication terminal of claim 1, wherein

the first encryption method is based on either one of a first encryption algorithm having a first encryption strength or the first encryption algorithm having a second encryption strength different from the first encryption strength, and

the second encryption method is based on either one of the first encryption algorithm having the first encryption strength or the first encryption algorithm having the second encryption strength.

3. The wireless communication terminal of claim 1, wherein the first encryption method is the highest encryption strength in a plurality of encryption methods which is supported by the wireless communication terminal.

4. The wireless communication terminal of claim 1, wherein the association response frame includes an address indicating the first communication group.

5. The wireless communication terminal of claim 1, wherein the frame control field further includes a protected frame field and the protected frame field includes information indicating whether the frame body includes encrypted information.

6. The wireless communication terminal of claim 1, wherein the first encryption method is selected from a plurality of encryption methods supported by the wireless communication terminal.

7. The wireless communication terminal of claim 1, further comprising a processor configured to input information included in the data frame received via the antenna, and to output information to be included in a second data frame transmitted via the antenna, wherein the information to be included in the second data frame is generated based on an operation of an user.

8. The wireless communication terminal of claim 7, further comprising a wired network interface coupled to the processor, wherein the processor is further configured to receive information via the wired network interface, and the information to be included in the second data frame is generated based on the information received via the wired network interface.

9. A method at least partially implemented by an electronic circuit of a wireless communication terminal that includes an antenna and is configured to belong to a first communication group, the method comprising:

storing, in a memory, a first encryption method used by the first communication group to protect at least one of broadcast communication or multicast communication in the first communication group;

transmitting, with a transmitter and via the antenna, a beacon frame including information of the first encryption method;

receiving, with a receiver configured to receive and via the antenna, an association request frame from a first wireless communication apparatus, the association request frame including information of a second encryption method supported by the first wireless communication apparatus; and

checking, with circuitry and prior to completion of establishment of an connection between the wireless terminal and the first wireless communication apparatus, whether the second encryption method is equal to the first encryption method to determine whether a request of the association request frame is permitted or rejected,

wherein the method further includes;

transmitting, with the transmitter and via the antenna, an association response frame indicating either one of an association successful or an association failure, the connection between the wireless communication terminal and the first wireless communication apparatus not being established,

receiving, with the receiver and via the antenna, a data frame after a transmission of the association response frame indicating the association successful and the completion of establishment of the connection between the wireless communication terminal and the first wireless communication apparatus, a frame body of the data frame including data encrypted by the second encryption method, the data frame is either one of broadcast communication or multicast communication in the first communication group, and one of destinations of the data frame is the wireless communication terminal, and

wherein the association request frame includes a frame control field and a frame body, the frame body includes the information of the second encryption method, the frame control field includes a type field, and the type field includes information indicating that the association request frame is classified as a management frame.

10. The method of claim 9, wherein

the first encryption method is based on either one of a first encryption algorithm having a first encryption strength or the first encryption algorithm having a second encryption strength different from the first encryption strength, and

the second encryption method is based on either one of the first encryption algorithm having the first encryption strength or the first encryption algorithm having the second encryption strength.

11. The method of claim 9, wherein the first encryption method is the highest encryption strength in a plurality of encryption methods which is supported by the wireless communication terminal.

12. The method of claim 9, wherein the association response frame includes an address indicating the first communication group.

13. The method of claim 9, wherein the frame control field further includes a protected frame field and the protected frame field includes information indicating whether the frame body includes encrypted information.

14. The method of claim 9, wherein the first encryption method is selected from a plurality of encryption methods supported by the wireless communication terminal.

15. The method of claim 9, further comprising:

inputting, with a processor, information included in the data frame received via the antenna; and

outputting, with the processor, information to be included in a second data frame transmitted via the antenna,

wherein the information to be included in the second data frame is generated based on an operation of an user.

16. The wireless communication terminal of claim 15, further comprising:

receiving, via a wired network interface coupled to the processor, information via the wired network interface,

wherein the information to be included in the second data frame is generated based on the information received via the wired network interface.