AUTHENTICATION ASSOCIATED SUITE DISCOVERY AND NEGOTIATION METHOD

• US 20110243330A1
• Filed: 12/08/2009
• Published: 10/06/2011
• Est. Priority Date: 12/09/2008
• Status: Active Grant

• Current Assignee: China Iwncomm Co., Ltd
• Original Assignee: China Iwncomm Co., Ltd
• Inventors: Xiao, Yuelei, Tie, Manxia, Huang, Zhenhai, Cao, Jun, Lai, Xiaolong, Hu, Yanan
• Granted Patent: US 8,625,801 B2
• Time in Patent Office: Days
• US Class Current: 380/278
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

An authentication associated suite discovery and negotiation method for ultra wide band network. The method includes the following steps of: 1) adding a pairwise temporal key PTK establishment IE and a group temporal key GTK distribution IE in an information element IE list of an initiator and a responder, and setting a corresponding information element identifier ID, and 2) an authentication associated process based on the authentication associated suite discovery and negotiation method. The authentication associated suite discovery and negotiation method for ultra wide band network provided by the present invention can provide the discovery and negotiation functions of a security solution to the network so as to satisfy all kinds of application requirements better when multiple pairwise temporal key PTK establishing plans or multiple group temporal key GTK distributing plans co-exist.

Claims

1. A method for discovering and negotiating about an authentication and association suite, comprising:

dependent upon an authentication and association process in the method for discovering and negotiating about an authentication and association suite, if an initiator and a responder are required to discover and negotiate about an authentication and association suite, then performing passive scanning in which the responder waits for reception of information of a beacon frame transmitted from the initiator or active scanning in which the responder transmits to the initiator a probe request frame requesting for relevant information; and

during the passive scanning or the active scanning, the responder adding, in a list of Information Elements, IEs, of a probe request frame transmitted to the initiator, a full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE to declare a list of responder supportable mechanisms for creating a Pairwise Temporal Key, PTK, or mechanisms for distributing a Group Temporal Key, GTK; and

the initiator constructing and transmitting to the responder a probe response frame according to the contents of the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE in a received probe request frame by adding, in a list of Information Elements, IEs, of the probe response frame, a full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE to declare an initiator selected mechanism for creating a Pairwise Temporal Key, PTK, or mechanism for distributing a Group Temporal Key, GTK.

2. The method for discovering and negotiating about an authentication and association suite according to claim 1, wherein:

an indicator of whether to support discovery of and negotiation about a mechanism for creating a Pairwise Temporal Key, PTK, and an indicator of whether to support discovery of and negotiation about a mechanism for distributing a Group Temporal Key, GTK, are added in the beacon frame transmitted from the initiator; and

an indicator of whether to support a process of discovering and negotiating about an authentication and association suite is added in the probe response frame transmitted from the initiator and the probe request frame transmitted from the responder.

3. The method for discovering and negotiating about an authentication and association suite according to claim 2, wherein:

if it is not required to discover and negotiate about a mechanism for creating a Pairwise Temporal Key, PTK, and a mechanism for distributing a Group Temporal Key, GTK, or a default security mechanism is used for both of the initiator and the responder, then the indicator of whether to support discovery of and negotiation about a mechanism for creating a Pairwise Temporal Key, PTK, and the indicator of whether to support discovery of and negotiation about a mechanism for distributing a Group Temporal Key, GTK, both of which are newly added in the beacon frame transmitted from the initiator, shall be configured as NO, and the indicator of whether to support a process of discovering and negotiating about an authentication and association suite, which is added in the probe response frame transmitted from the initiator and the probe request frame transmitted from the responder, shall also be configured as NO.

4. The method for discovering and negotiating about an authentication and association suite according to claim 1, wherein the Pairwise Temporal Key, PTK, Creation IE is in the following format:

5. The method for discovering and negotiating about an authentication and association suite according to claim 1, wherein the Group Temporal Key, GTK, Creation IE is in the following format:

6. The method for discovering and negotiating about an authentication and association suite according to claim 1, wherein the passive scanning comprises:

1) the initiator broadcasting relevant Information Elements, IEs, about a device of the initiator in the beacon frame periodically;

2) upon reception of the beacon frame transmitted from the initiator, the responder determining a process of discovering and negotiating about an authentication and association suite to be performed and transmitting to the initiator the probe request frame in which the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, to declare the list of responder supportable mechanisms for creating a Pairwise Temporal Key, PTK, or mechanisms for distributing a Group Temporal Key, GTK; and

furthermore, the responder checking whether the beacon frame transmitted form the initiator comprises all of Information Elements, IEs, required for the authentication and association process, and if not so, then the probe request frame transmitted to the initiator further comprising the identifier, ID, of an Information Element, IE, requested by the responder from the initiator;

3) upon reception of the probe request frame transmitted from the responder, the initiator constructing and transmitting to the responder the probe response frame according to the identifier, ID, of the Information Element, IE, as requested and the contents of the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE in the probe request frame, wherein the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements (IEs) of the probe response frame to declare the initiator selected mechanism for creating a Pairwise Temporal Key, PTK, or mechanism for distributing a Group Temporal Key, GTK; and

the probe response frame further comprises the Information Element, IE, requested by the responder from the initiator;

4) upon reception of the probe response frame transmitted from the initiator, the responder determining an authentication and association suite commonly used for both of the initiator and the responder and checking whether the contents of Information Elements, IEs, other than the authentication and association suite comply with required authentication and association, and if not so, then failing to perform the authentication and association process;

otherwise, performing an operation of

     5); and

5) the responder initiating a negotiated mechanism for creating or updating a Pairwise Temporal Key, PTK, between Ultra Wideband, UWB, devices or mechanism for creating or updating a Group Temporal Key, GTK, between the Ultra Wideband, UWB, devices after a Pairwise Temporal Key, PTK, between the Ultra Wideband, UWB, devices has been created successfully, and the initiator and the responder finishing the authentication and association process after both of them have created successfully a Pairwise Temporal Key, PTK, and a Group Temporal Key, GTK.

7. The method for discovering and negotiating about an authentication and association suite according to claim 1, wherein the active scanning comprises:

1) if the responder receives no beacon frame transmitted from the initiator, then the responder transmitting to the initiator the probe request frame in which the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, to declare the list of responder supportable mechanisms for creating a Pairwise Temporal Key, PTK, or mechanisms for distributing a Group Temporal Key, GTK; and

furthermore, the probe request frame further comprises the identifier, ID, of an Information Element, IE, requested by the responder from the initiator;

2) upon reception of the probe request frame transmitted from the responder, the initiator constructing and transmitting to the responder the probe response frame according to the identifier, ID, of the Information Element, IE, as requested and the contents of the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE in the probe request frame, wherein the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, of the probe response frame to declare the initiator selected mechanism for creating a Pairwise Temporal Key, PTK, or mechanism for distributing a Group Temporal Key, GTK; and

the probe response frame further comprises the Information Element, IE, requested by the responder from the initiator;

3) upon reception of the probe response frame transmitted from the initiator, the responder determining an authentication and association suite commonly used for both of the initiator and the responder and checking whether the contents of Information Elements, IEs, other than the authentication and association suite comply with required authentication and association, and if not so, then failing to perform the authentication and association process;

otherwise, performing an operation of

     4); and

4) the responder initiating a negotiated mechanism for creating or updating a Pairwise Temporal Key, PTK, between Ultra Wideband, UWB, devices or mechanism for creating or updating a Group Temporal Key, GTK, between the Ultra Wideband, UWB, devices after a Pairwise Temporal Key, PTK, between the Ultra Wideband, UWB, devices has been created successfully, and the initiator and the responder finishing the authentication and association process after both of them have created successfully a Pairwise Temporal Key, PTK, and a Group Temporal Key, GTK.

8. The method for discovering and negotiating about an authentication and association suite according to claim 2, wherein the passive scanning comprises:

1) the initiator broadcasting relevant Information Elements, IEs, about a device of the initiator in the beacon frame periodically;

2) upon reception of the beacon frame transmitted from the initiator, the responder determining a process of discovering and negotiating about an authentication and association suite to be performed and transmitting to the initiator the probe request frame in which the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, to declare the list of responder supportable mechanisms for creating a Pairwise Temporal Key, PTK, or mechanisms for distributing a Group Temporal Key, GTK; and

furthermore, the responder checking whether the beacon frame transmitted form the initiator comprises all of Information Elements, IEs, required for the authentication and association process, and if not so, then the probe request frame transmitted to the initiator further comprising the identifier, ID, of an Information Element, IE, requested by the responder from the initiator;

3) upon reception of the probe request frame transmitted from the responder, the initiator constructing and transmitting to the responder the probe response frame according to the identifier, ID, of the Information Element, IE, as requested and the contents of the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE in the probe request frame, wherein the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements (IEs) of the probe response frame to declare the initiator selected mechanism for creating a Pairwise Temporal Key, PTK, or mechanism for distributing a Group Temporal Key, GTK; and

the probe response frame further comprises the Information Element, IE, requested by the responder from the initiator;

4) upon reception of the probe response frame transmitted from the initiator, the responder determining an authentication and association suite commonly used for both of the initiator and the responder and checking whether the contents of Information Elements, IEs, other than the authentication and association suite comply with required authentication and association, and if not so, then failing to perform the authentication and association process;

otherwise, performing an operation of

     5); and

5) the responder initiating a negotiated mechanism for creating or updating a Pairwise Temporal Key, PTK, between Ultra Wideband, UWB, devices or mechanism for creating or updating a Group Temporal Key, GTK, between the Ultra Wideband, UWB, devices after a Pairwise Temporal Key, PTK, between the Ultra Wideband, UWB, devices has been created successfully, and the initiator and the responder finishing the authentication and association process after both of them have created successfully a Pairwise Temporal Key, PTK, and a Group Temporal Key, GTK.

9. The method for discovering and negotiating about an authentication and association suite according to claim 3, wherein the passive scanning comprises:

1) the initiator broadcasting relevant Information Elements, IEs, about a device of the initiator in the beacon frame periodically;

2) upon reception of the beacon frame transmitted from the initiator, the responder determining a process of discovering and negotiating about an authentication and association suite to be performed and transmitting to the initiator the probe request frame in which the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, to declare the list of responder supportable mechanisms for creating a Pairwise Temporal Key, PTK, or mechanisms for distributing a Group Temporal Key, GTK; and

furthermore, the responder checking whether the beacon frame transmitted form the initiator comprises all of Information Elements, IEs, required for the authentication and association process, and if not so, then the probe request frame transmitted to the initiator further comprising the identifier, ID, of an Information Element, IE, requested by the responder from the initiator;

3) upon reception of the probe request frame transmitted from the responder, the initiator constructing and transmitting to the responder the probe response frame according to the identifier, ID, of the Information Element, IE, as requested and the contents of the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE in the probe request frame, wherein the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements (IEs) of the probe response frame to declare the initiator selected mechanism for creating a Pairwise Temporal Key, PTK, or mechanism for distributing a Group Temporal Key, GTK; and

the probe response frame further comprises the Information Element, IE, requested by the responder from the initiator;

4) upon reception of the probe response frame transmitted from the initiator, the responder determining an authentication and association suite commonly used for both of the initiator and the responder and checking whether the contents of Information Elements, IEs, other than the authentication and association suite comply with required authentication and association, and if not so, then failing to perform the authentication and association process;

otherwise, performing an operation of

     5); and

5) the responder initiating a negotiated mechanism for creating or updating a Pairwise Temporal Key, PTK, between Ultra Wideband, UWB, devices or mechanism for creating or updating a Group Temporal Key, GTK, between the Ultra Wideband, UWB, devices after a Pairwise Temporal Key, PTK, between the Ultra Wideband, UWB, devices has been created successfully, and the initiator and the responder finishing the authentication and association process after both of them have created successfully a Pairwise Temporal Key, PTK, and a Group Temporal Key, GTK.

10. The method for discovering and negotiating about an authentication and association suite according to claim 4, wherein the passive scanning comprises:

1) the initiator broadcasting relevant Information Elements, IEs, about a device of the initiator in the beacon frame periodically;

2) upon reception of the beacon frame transmitted from the initiator, the responder determining a process of discovering and negotiating about an authentication and association suite to be performed and transmitting to the initiator the probe request frame in which the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, to declare the list of responder supportable mechanisms for creating a Pairwise Temporal Key, PTK, or mechanisms for distributing a Group Temporal Key, GTK; and

furthermore, the responder checking whether the beacon frame transmitted form the initiator comprises all of Information Elements, IEs, required for the authentication and association process, and if not so, then the probe request frame transmitted to the initiator further comprising the identifier, ID, of an Information Element, IE, requested by the responder from the initiator;

3) upon reception of the probe request frame transmitted from the responder, the initiator constructing and transmitting to the responder the probe response frame according to the identifier, ID, of the Information Element, IE, as requested and the contents of the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE in the probe request frame, wherein the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements (IEs) of the probe response frame to declare the initiator selected mechanism for creating a Pairwise Temporal Key, PTK, or mechanism for distributing a Group Temporal Key, GTK; and

the probe response frame further comprises the Information Element, IE, requested by the responder from the initiator;

4) upon reception of the probe response frame transmitted from the initiator, the responder determining an authentication and association suite commonly used for both of the initiator and the responder and checking whether the contents of Information Elements, IEs, other than the authentication and association suite comply with required authentication and association, and if not so, then failing to perform the authentication and association process;

otherwise, performing an operation of

     5); and

5) the responder initiating a negotiated mechanism for creating or updating a Pairwise Temporal Key, PTK, between Ultra Wideband, UWB, devices or mechanism for creating or updating a Group Temporal Key, GTK, between the Ultra Wideband, UWB, devices after a Pairwise Temporal Key, PTK, between the Ultra Wideband, UWB, devices has been created successfully, and the initiator and the responder finishing the authentication and association process after both of them have created successfully a Pairwise Temporal Key, PTK, and a Group Temporal Key, GTK.

11. The method for discovering and negotiating about an authentication and association suite according to claim 5, wherein the passive scanning comprises:

1) the initiator broadcasting relevant Information Elements, IEs, about a device of the initiator in the beacon frame periodically;

2) upon reception of the beacon frame transmitted from the initiator, the responder determining a process of discovering and negotiating about an authentication and association suite to be performed and transmitting to the initiator the probe request frame in which the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, to declare the list of responder supportable mechanisms for creating a Pairwise Temporal Key, PTK, or mechanisms for distributing a Group Temporal Key, GTK; and

furthermore, the responder checking whether the beacon frame transmitted form the initiator comprises all of Information Elements, IEs, required for the authentication and association process, and if not so, then the probe request frame transmitted to the initiator further comprising the identifier, ID, of an Information Element, IE, requested by the responder from the initiator;

3) upon reception of the probe request frame transmitted from the responder, the initiator constructing and transmitting to the responder the probe response frame according to the identifier, ID, of the Information Element, IE, as requested and the contents of the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE in the probe request frame, wherein the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements (IEs) of the probe response frame to declare the initiator selected mechanism for creating a Pairwise Temporal Key, PTK, or mechanism for distributing a Group Temporal Key, GTK; and

the probe response frame further comprises the Information Element, IE, requested by the responder from the initiator;

4) upon reception of the probe response frame transmitted from the initiator, the responder determining an authentication and association suite commonly used for both of the initiator and the responder and checking whether the contents of Information Elements, IEs, other than the authentication and association suite comply with required authentication and association, and if not so, then failing to perform the authentication and association process;

otherwise, performing an operation of

     5); and

5) the responder initiating a negotiated mechanism for creating or updating a Pairwise Temporal Key, PTK, between Ultra Wideband, UWB, devices or mechanism for creating or updating a Group Temporal Key, GTK, between the Ultra Wideband, UWB, devices after a Pairwise Temporal Key, PTK, between the Ultra Wideband, UWB, devices has been created successfully, and the initiator and the responder finishing the authentication and association process after both of them have created successfully a Pairwise Temporal Key, PTK, and a Group Temporal Key, GTK.

12. The method for discovering and negotiating about an authentication and association suite according to claim 2, wherein the active scanning comprises:

1) if the responder receives no beacon frame transmitted from the initiator, then the responder transmitting to the initiator the probe request frame in which the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, to declare the list of responder supportable mechanisms for creating a Pairwise Temporal Key, PTK, or mechanisms for distributing a Group Temporal Key, GTK; and

furthermore, the probe request frame further comprises the identifier, ID, of an Information Element, IE, requested by the responder from the initiator;

2) upon reception of the probe request frame transmitted from the responder, the initiator constructing and transmitting to the responder the probe response frame according to the identifier, ID, of the Information Element, IE, as requested and the contents of the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE in the probe request frame, wherein the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, of the probe response frame to declare the initiator selected mechanism for creating a Pairwise Temporal Key, PTK, or mechanism for distributing a Group Temporal Key, GTK; and

the probe response frame further comprises the Information Element, IE, requested by the responder from the initiator;

3) upon reception of the probe response frame transmitted from the initiator, the responder determining an authentication and association suite commonly used for both of the initiator and the responder and checking whether the contents of Information Elements, IEs, other than the authentication and association suite comply with required authentication and association, and if not so, then failing to perform the authentication and association process;

otherwise, performing an operation of

     4); and

4) the responder initiating a negotiated mechanism for creating or updating a Pairwise Temporal Key, PTK, between Ultra Wideband, UWB, devices or mechanism for creating or updating a Group Temporal Key, GTK, between the Ultra Wideband, UWB, devices after a Pairwise Temporal Key, PTK, between the Ultra Wideband, UWB, devices has been created successfully, and the initiator and the responder finishing the authentication and association process after both of them have created successfully a Pairwise Temporal Key, PTK, and a Group Temporal Key, GTK.

13. The method for discovering and negotiating about an authentication and association suite according to claim 3, wherein the active scanning comprises:

1) if the responder receives no beacon frame transmitted from the initiator, then the responder transmitting to the initiator the probe request frame in which the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, to declare the list of responder supportable mechanisms for creating a Pairwise Temporal Key, PTK, or mechanisms for distributing a Group Temporal Key, GTK; and

furthermore, the probe request frame further comprises the identifier, ID, of an Information Element, IE, requested by the responder from the initiator;

2) upon reception of the probe request frame transmitted from the responder, the initiator constructing and transmitting to the responder the probe response frame according to the identifier, ID, of the Information Element, IE, as requested and the contents of the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE in the probe request frame, wherein the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, of the probe response frame to declare the initiator selected mechanism for creating a Pairwise Temporal Key, PTK, or mechanism for distributing a Group Temporal Key, GTK; and

the probe response frame further comprises the Information Element, IE, requested by the responder from the initiator;

3) upon reception of the probe response frame transmitted from the initiator, the responder determining an authentication and association suite commonly used for both of the initiator and the responder and checking whether the contents of Information Elements, IEs, other than the authentication and association suite comply with required authentication and association, and if not so, then failing to perform the authentication and association process;

otherwise, performing an operation of

     4); and

4) the responder initiating a negotiated mechanism for creating or updating a Pairwise Temporal Key, PTK, between Ultra Wideband, UWB, devices or mechanism for creating or updating a Group Temporal Key, GTK, between the Ultra Wideband, UWB, devices after a Pairwise Temporal Key, PTK, between the Ultra Wideband, UWB, devices has been created successfully, and the initiator and the responder finishing the authentication and association process after both of them have created successfully a Pairwise Temporal Key, PTK, and a Group Temporal Key, GTK.

14. The method for discovering and negotiating about an authentication and association suite according to claim 4, wherein the active scanning comprises:

1) if the responder receives no beacon frame transmitted from the initiator, then the responder transmitting to the initiator the probe request frame in which the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, to declare the list of responder supportable mechanisms for creating a Pairwise Temporal Key, PTK, or mechanisms for distributing a Group Temporal Key, GTK; and

furthermore, the probe request frame further comprises the identifier, ID, of an Information Element, IE, requested by the responder from the initiator;

2) upon reception of the probe request frame transmitted from the responder, the initiator constructing and transmitting to the responder the probe response frame according to the identifier, ID, of the Information Element, IE, as requested and the contents of the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE in the probe request frame, wherein the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, of the probe response frame to declare the initiator selected mechanism for creating a Pairwise Temporal Key, PTK, or mechanism for distributing a Group Temporal Key, GTK; and

the probe response frame further comprises the Information Element, IE, requested by the responder from the initiator;

3) upon reception of the probe response frame transmitted from the initiator, the responder determining an authentication and association suite commonly used for both of the initiator and the responder and checking whether the contents of Information Elements, IEs, other than the authentication and association suite comply with required authentication and association, and if not so, then failing to perform the authentication and association process;

otherwise, performing an operation of

     4); and

4) the responder initiating a negotiated mechanism for creating or updating a Pairwise Temporal Key, PTK, between Ultra Wideband, UWB, devices or mechanism for creating or updating a Group Temporal Key, GTK, between the Ultra Wideband, UWB, devices after a Pairwise Temporal Key, PTK, between the Ultra Wideband, UWB, devices has been created successfully, and the initiator and the responder finishing the authentication and association process after both of them have created successfully a Pairwise Temporal Key, PTK, and a Group Temporal Key, GTK.

15. The method for discovering and negotiating about an authentication and association suite according to claim 5, wherein the active scanning comprises:

1) if the responder receives no beacon frame transmitted from the initiator, then the responder transmitting to the initiator the probe request frame in which the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, to declare the list of responder supportable mechanisms for creating a Pairwise Temporal Key, PTK, or mechanisms for distributing a Group Temporal Key, GTK; and

furthermore, the probe request frame further comprises the identifier, ID, of an Information Element, IE, requested by the responder from the initiator;

2) upon reception of the probe request frame transmitted from the responder, the initiator constructing and transmitting to the responder the probe response frame according to the identifier, ID, of the Information Element, IE, as requested and the contents of the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE in the probe request frame, wherein the full field of Pairwise Temporal Key, PTK, Creation IE or Group Temporal Key, GTK, Distribution IE is comprised in the list of Information Elements, IEs, of the probe response frame to declare the initiator selected mechanism for creating a Pairwise Temporal Key, PTK, or mechanism for distributing a Group Temporal Key, GTK; and

the probe response frame further comprises the Information Element, IE, requested by the responder from the initiator;

3) upon reception of the probe response frame transmitted from the initiator, the responder determining an authentication and association suite commonly used for both of the initiator and the responder and checking whether the contents of Information Elements, IEs, other than the authentication and association suite comply with required authentication and association, and if not so, then failing to perform the authentication and association process;

otherwise, performing an operation of

     4); and

4) the responder initiating a negotiated mechanism for creating or updating a Pairwise Temporal Key, PTK, between Ultra Wideband, UWB, devices or mechanism for creating or updating a Group Temporal Key, GTK, between the Ultra Wideband, UWB, devices after a Pairwise Temporal Key, PTK, between the Ultra Wideband, UWB, devices has been created successfully, and the initiator and the responder finishing the authentication and association process after both of them have created successfully a Pairwise Temporal Key, PTK, and a Group Temporal Key, GTK.