Wireless personal area network access method based on primitive

• US 8,984,287 B2
• Filed: 01/14/2009
• Issued: 03/17/2015
• Est. Priority Date: 01/18/2008
• Status: Active Grant

• Current Assignee: China Iwncomm Co., Ltd
• Original Assignee: China Iwncomm Co., Ltd
• Inventors: Xiao, Yuelei, Cao, Jun, Lai, Xiaolong, Huang, Zhenhai, Zhang, Bianling, Qin, Zhiqiang, Song, Qizhu
• Primary Examiner(s): Moorthy, Aravind
• Assistant Examiner(s): PLOTKIN, JASON R
• Application Number:
  US12/863,285
• Publication Number:
  US 20110029776A1
• Time in Patent Office: 2,253 Days
• Field of Search: 709/227, 380/255, 380/270, 713/168, 713/171
• US Class Current: 713/171
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/06 Authentication

Abstract

A wireless personal area network access method based on the primitive, includes: a coordinator broadcasts a beacon frame to the device which requests connecting to the wireless personal area network (WPAN), the beacon frame includes the authentication request information for the device and the authentication and a key management tool supported by the coordinator; the device authenticates the authentication request information, when the coordinator has an authentication request to the device, the coordinator and the device execute the authentication based on the primitive and obtains the conversation key.

Claims

1. A primitive-based Wireless Personal Area Network (WPAN) access method, comprising:

(step 11);

broadcasting, by a coordinator, a beacon frame to a device requesting to access a WPAN, the beacon frame comprising authentication requirement information for the device and suites of authentication and key management supported by the coordinator; and

(step 12);

verifying, by the device, the authentication requirement information, and if the coordinator requires authentication of the device, performing primitive-based authentication and a session key negotiation process by the coordinator and the device, and when the coordinator and the device obtain a session key, performing a security operation on an association process by using the session key;

if the coordinator does not require authentication of the device, performing association by the coordinator and the device;

wherein when the coordinator allows the device to access the WPAN during the association, the coordinator assigns a network address to the device during the association.

2. The method according to claim 1, wherein the coordinator performing primitive-based authentication with the device comprises:

(step 21);

obtaining, by the device, the suites of authentication and key management supported by the coordinator from the beacon frame sent by the coordinator;

(step 22);

sending, by the device, an access request to the coordinator, after selecting one of the suites of authentication and key management; and

(step 23);

performing, by the coordinator, an authentication process with the device based on an authentication primitive under the authentication and key management suite selected by the device, on reception of the access request from the device, wherein authentication protocol data is encapsulated and transmitted in an authentication command frame of a MAC layer.

3. The method according to claim 1, wherein the obtaining the session key comprises:

generating, in an authentication process, the session key between the coordinator and the device.

4. The method according to claim 1, wherein the obtaining the session key comprises:

generating, in an authentication process, a master key between the coordinator and the device; and

performing, by the coordinator, the session key negotiation process with the device by using the master key based on a session key negotiation primitive, wherein session key negotiation protocol data is encapsulated and transmitted in a session key negotiation command frame of a MAC layer.

5. The method according to claim 1, wherein performing the security operation comprises:

(step 51);

sending, by the device, an association request to the coordinator; and

performing, by the device, the security operation on the association request by using the session key;

(step 52);

performing, by the coordinator, desecuring on the association request, on reception of the association request sent by the device; and

generating an association response after verifying association request information;

(step 53);

sending, by the coordinator, the association response to the device; and

(step 54);

accessing, by the device, the WPAN via the coordinator.

6. The method according to claim 1, wherein the coordinator performing association with the device if the coordinator does not require authentication of the device comprises:

(step 61);

sending, by the device, an association request to the coordinator;

(step 62);

generating, by the coordinator, an association response after verifying association request information, on reception of the association request sent by the device;

(step 63);

sending, by the coordinator, the association response to the device; and

(step 64);

accessing, by the device, the WPAN via the coordinator.

7. The method according to claim 5, wherein the association response comprises:

the network address assigned by the coordinator to the device, or a reason for an association failure.

8. The method according to claim 6, wherein the association response comprises:

the network address assigned by the coordinator to the device, or a reason for an association failure.