CN101288063A - Wireless device discovery and configuration - Google Patents
Wireless device discovery and configuration Download PDFInfo
- Publication number
- CN101288063A CN101288063A CNA2006800129444A CN200680012944A CN101288063A CN 101288063 A CN101288063 A CN 101288063A CN A2006800129444 A CNA2006800129444 A CN A2006800129444A CN 200680012944 A CN200680012944 A CN 200680012944A CN 101288063 A CN101288063 A CN 101288063A
- Authority
- CN
- China
- Prior art keywords
- computer
- participant
- wireless network
- readable medium
- equipment
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Abstract
A wireless device that desires to be connected to a wireless network broadcasts itself and its capabilities to a network using an information element. The information element is provided with frames, such as management frames, in a channel that is not protected or encrypted. The information element is forwarded to one or more potential registrar devices. One of the registrar devices then provides configuration information to the enrollee, for example as a registrar information element. The configuration information may be passed out of band or in band, and may be passed using cryptography, which may involve public key cryptography, encryption with a PIN, or some other type of secure exchange.
Description
Technical field
The present invention relates generally to computer system, relate in particular to wireless network foundation and communicate by letter.
Background technology
Today, people use wireless network usually at home, make various electronic equipments in the family to communicate with one another and need not with the equipment line together.Music, video, finance and other data only are a few examples of project that can be by wireless network exchange.
Utilize the people of wireless network to expect safe communication usually.Exchanges data between should protection equipment is avoided eavesdropping and is pretended to be.
Be difficult to for secure communication comes configuration device, especially media-specific setting is such as the visit to the Wi-Fi network.As example, Wi-Fi equipment needs the special-purpose setting of Wi-Fi, such as service concentrator marker (SSID), cryptographic key and channel of operation is set, and allows the device to connect to the Wi-Fi network.Current, the connection of typical Wi-Fi equipment needs user's manually input configuration in equipment, and this may be very chaotic process.Therefore, the user of failure seeks help from support call usually or requires product to return goods.
Summary of the invention
These chapters and sections have presented the simplification general introduction of some embodiment of the present invention.This general introduction is not a wide in range general survey of the present invention.It is not intended to represent the element of key/critical of the present invention, does not describe scope of the present invention yet.Its sole purpose is to present in simplified form some embodiment of the present invention as the preamble in greater detail that presents after a while.
According to embodiment, expectation is connected to the wireless device (being called as " participant (enrollee) " equipment herein) of wireless network and had not only been found but also found automatically network capabilities automatically, makes to allow routine to come to provide necessary configuration setting to this equipment.According to embodiment, configuration device is provided by the equipment that is connected to network (being called as " registrant (registrar) " equipment herein).
According to embodiment, participant's equipment use information element will about it self and the information of ability send to network.This information element not protected or not encrypted frame in channel provides.According to embodiment, to Wi-Fi network (sometimes, by its standard name IEEE 802.11 or abbreviate 802.11 networks as and quote), information element is comprised with Wi-Fi Network Management frame.Can use similar management agreement distributing information element in the network except that the Wi-Fi network.
This information element directly receives and/or is forwarded to this one or more potential registrar device by one or more potential registrar device.One of registrar device offers the participant with configuration information then, for example as enrollee information element.This information element also can be by not protected or not encrypted protocol layer transmission, such as via the management frames in the Wi-Fi wireless network.
Configuration information can (include but not limited to USB flash memory, USB cable, Ethernet cable and Bluetooth via the connection except that Wi-Fi
TMConnect) be transferred to the registrant from the participant; This method is called as frequency band outer (OOB).
The configuration information art that can access to your password connects via Wi-Fi and is transferred to the registrant from the participant, comprising public-key cryptography, with PIN encrypt, with the secure exchange of PIN authentication or certain other type; This method is called as in the frequency band.
Method can be utilized certain form in 802.11 management frames, control frame or the clear data frame in the frequency band, so that participant and registrant are transmitted information and configuration information.
By transmitting certificate, password or other shared secret, can use configuration information exchange between participant and registrant, to set up and be subjected to trusting relationship, other application can utilize this relation as prearranged protected relation.
Description of drawings
Although appended claims is described feature of the present invention in detail, read following detailed description in conjunction with the accompanying drawings and can understand the present invention and advantage thereof best, in the accompanying drawing:
Fig. 1 is the block diagram that expression can comprise computer network of the present invention therein;
Fig. 2 is the block diagram that can comprise the architecture of computing machine of the present invention therein;
Fig. 3 is a synoptic diagram of representing to attempt to be connected to participant's equipment of infrastructure mode wireless network according to embodiments of the invention;
Fig. 4 is a synoptic diagram of representing to attempt to be connected to the participant of self-organization (ad hoc) wireless network according to embodiments of the invention;
Fig. 5 shows the architecture of registrar device and participant's equipment according to embodiments of the invention;
Fig. 6 is the process flow diagram that general expression is used for the step of participant's device discovery and configuration according to embodiments of the invention;
Fig. 7 is a block diagram of representing the participant information element according to embodiments of the invention;
Fig. 8 is a block diagram of representing enrollee information element according to embodiments of the invention;
Fig. 9 is the expression according to the user interface of embodiments of the invention participant equipment;
Figure 10 is a synoptic diagram of representing the user interface of registrar device according to embodiments of the invention, and this user interface illustrates bubble message;
Figure 11 is a synoptic diagram of representing the user interface of registrar device according to embodiments of the invention, this user interface requests pin;
Figure 12 is a block diagram of representing the alternative embodiment of participant information element according to embodiments of the invention.
Embodiment
In the following description, various aspects of the present invention will be described.For purposes of illustration, customized configuration and details have been described so that thorough understanding of the present invention to be provided.Yet, to those skilled in the art, obviously of the present inventionly need not these specific details and realize.In addition, can omit or simplify well-known characteristic so that fuzzy the present invention.
Before the description that continues each embodiment of the present invention, will provide the description of computing machine and the networked environment that can realize each embodiment of the present invention therein now.Although optional, the present invention can be realized by the performed program of computing machine.Generally speaking, such program comprises routine, program, object, assembly, data structure etc., and they are carried out particular task or realize particular abstract.In addition, term " program " can refer to single program module or a plurality of program modules of coordinating actions as used herein.Term " computing machine " comprises that electronics carries out any equipment of one or more programs as used herein, such as personal computer (PC), portable equipment, multicomputer system, programmable consumer electronics, network PC, minicomputer, mainframe computer, the consumer device that contains microprocessor or microcontroller, router, gateway, hub or other electronic equipment based on microprocessor.The present invention also can use in distributed computing environment, and wherein task is carried out by the teleprocessing equipment that connects by communication network.In distributed computing environment, program module can be arranged in local and remote memory storage device.
The example that can use networked environment of the present invention is therein described referring now to Fig. 1.This example network comprises the some computing machines 10 that communicate with one another by the network of being represented by cloud 11.Network 11 can comprise known assemblies, such as router, gateway, hub etc., and allows computing machine 10 communications.
The present invention has the application-specific to wireless network.Therefore, be the purpose of this instructions, hypothetical network 11 is wireless networks that most computers 10 connects via wireless medium, although one or more computing machine 10 can connect via wire medium.
When by network 11 when mutual each other, one or more in the computing machine 10 can be used as client computer, server or peer device for other computing machine 10.Thereby each embodiment of the present invention can realize in client computer, server, peer device or its combination, although the specific example that comprises is not indicated the computing machine of all these types herein.
With reference to figure 2, show the example of the basic configuration that can realize of the present invention all or part of computing machine 10 described herein thereon.In its most basic configuration, computing equipment 10 generally comprises at least one processing unit 14 and storer 16.According to each embodiment of the present invention, processing unit 14 execution commands are come the realization task.When realizing such task, processing unit 14 produces certain result can for electronic signal transmission the other parts of computing machine 10 and the equipment beyond the computing machine 10.The definite configuration and the type that depend on computing machine 10, storer 16 can be (such as the RAM) of volatibility, non-volatile (such as ROM, flash memory etc.) or both certain combinations.This most basic configuration is illustrated by dotted line 18 in Fig. 2.
The present invention has specific application to new wireless network equipment is connected to wireless network, especially provides the required information of wireless network that is connected to Wireless Communication Equipment.Therefore, according to embodiment, network 11 shown in Figure 1 is wireless networks, and computing machine 10 is the equipment that is connected to or attempts to be connected to wireless network 11.As used herein, for conveniently quote unrestricted for the purpose of, the equipment that is connected to wireless network and can participates in process described herein via wired or wireless medium is called as " registrant " equipment, and the equipment of attempting to be connected to wireless network is " participant " equipment.
An example shown in Figure 3, wherein notebook 300 (for example, one of computing machine 10) is participant's equipment, and desk-top computer 302 (for example, also being one of computing machine 10) is a registrar device.In the embodiment shown in fig. 3, registrar device 302 is wirelessly connected to the infrastructure mode wireless network 304 with access point 306.As known, generally comprise one or more access points (AP),, can be connected to wireless network through it such as the wireless device of registrar device 302 such as access point 306 such as the infrastructure mode wireless network of wireless network 304.Access point 306 also can be used as the bridge between wireless and the cable network.In the embodiment shown in fig. 3, provide second registrar device 308 that is connected to access point 306 via wire medium.
Fig. 4 shows the example that participant's equipment 400 is wherein just attempting to be connected to the ad hoc deployed wireless networks 402 with two registrants 404,406.As known, self-organizing network is not rely on any fixing support architecture, such as the temporary transient association of the wireless device of access point or wire medium.Though connect and disconnect by the distance between the wireless device and forms the cooperation wish of condensing when being temporary transient community process and control.In an embodiment, each voluntary participant all is potential registrar device in the self-organizing network.
Fig. 5 shows such as the registrar device of registrar device 302 and such as the architecture of participant's equipment of participant's equipment 300 according to embodiment.Registrar device 302 comprises that maybe can visit radio configuration is provided with 500 so that be connected to wireless network such as wireless network 304.Registrar device 304 also comprises registration component 502.Registration component 502 can comprise the automatic Registration Module 504 that is associated with Local or Remote database 506.Registration component also can comprise alarm modules 507 and/or Registration Module 508.Each module 504,507 and 508 is used to different embodiments of the invention, and these modules needn't be all available on registrar, on the contrary, and the subclass of available these modules only.
Participant's equipment 300 shown in Figure 5 comprises finds module 510, Registration Module 512 and error module 520.Similarly, these modules are used to different embodiment, and not all module all must be present on participant's equipment 300.
Briefly, according to embodiment, find that module is configured to participant information element 514 is broadcast to network such as network 304 or network 402.Below, provide out of Memory in conjunction with the description of Fig. 7 about participant information element 514.Participant information element 514 is finally received by registrar device 302.Registrar device 302 returns to participant's equipment 300 with enrollee information element 518 again.Description below with reference to Fig. 8 further describes enrollee information element 518.The Registration Module 518 of participant's equipment 300 utilizes the information in the enrollee information element 518 to attempt to wireless network registration participant equipment 300.
Fig. 6 is that general expression is used to find and dispose process flow diagram such as the step of participant's equipment of participant's equipment 300 according to embodiments of the invention.The place begins in step 600, opens the electric power of participant's equipment 300.At step 602 place, participant's equipment 300 is broadcasted information and the ability thereof about himself in participant information element 514.As mentioned above, this can for example finish via discovery module 510.Participant information element 514 can be broadcasted automatically, maybe can require the user to start this sequence.
According to embodiment, participant's equipment 300 utilizes agreement not protected or that encrypt to broadcast participant information element 514, and this equipment on the wireless network of therefore can being delivered to is just being attempted the miscellaneous equipment that connects.As example, for the Wi-Fi network, can be with class 1 management frames as finding channel.As another example, can use the data of interim foundation to connect frame, such as control frame or other unencrypted Frame.
In an embodiment, participant information element 514 can be comprised with the probe requests thereby to management frames, can be comprised or can be used as new frame in the management channel with action action frame.Can in other network environment, utilize similar channel.As example, in ethernet environment, participant information element 514 can be used as the ARP(Address Resolution Protocol) frame and sends.For Internet Protocol (IP), can use Internet Control Message Protocol (ICMP) grouping.For WiMAX, can utilize one of dedicated management channel that sends the Mac protocol Data Unit.In any situation, generally speaking, can utilize general transmission grouping or frame to set up or carry out the channel of other management function, so that broadcasting participant information element 514 with maintain communications.
Fig. 7 shows participant information element 514 according to an embodiment of the invention.Participant information element 514 comprises product information 702, configuration status 704 and config option 706.Product information 702 can comprise mark and model, sequence number, media interviews control (MAC) address and/or other unique identification information of participant's equipment 300.Configuration status 704 can comprise participant's equipment 300 whether be new, whether just attempting to set up new registration procedure or another state of participant's equipment 300 because of wrong.
Config option comprises the information of being ready to receive the mode of enrollee information element 516 about participant's equipment 300.May only list an option, or have option more than one.Option can comprise that frequency band exchanges or utilizes the method for designated pin to exchange outward in frequency band.
As an example, config option 706 can be specified in the process described in No. the 2005/0044372nd, the U.S. Patent application submitted on August 21st, 2003, be entitled as " PhysicalDevice Bonding (physical equipment binding) ".This application has been described by calling the installation that the installation agreement that is used for non-physical connection and/or authentication protocol be convenient to equipment and/or the system or the method for authentication.Such as the physical interface component of USB physical interface, between at least one wireless device and at least one network entity, provide physical connection, commutative installation agreement and/or authentication protocol in this connects.Physical interface component can utilize token key to set up a plurality of non-physical connection with a plurality of wireless devices.In addition, physical interface component can utilize the daisy chain pattern to install and/or any wireless device.
Another replacement as config option, can be used in disclosed process in No. the 11/026th, 193, the U.S. Patent application submitted on Dec 30th, 2004, be entitled as " Extensible Architecture for Entrusted Medium Device Configuration via TrustedMedium (via the expandable system structure that is used to be entrusted the medium apparatus configuration that is subjected to trusted medium) ".In this application, use portable computer-readable media device to come configure network devices to allow network function and to be connected.Configuring application program generates or assisting users generates network settings, is provided with and the WAN setting such as radio configuration setting, LAN.These are provided with by operating system or by the user and import to determine.Configuring application program generates extend markup language (XML) file that embodies network settings then, and this document is write portable computer-readable media device.The user can be installed in this portable computer-readable media device one or more other network settings then by automatically configuration is sent to those network equipments.Can provide to wireless device to add the required radio configuration setting of wireless network, and need not the manual fan-in network setting of user.
Another option of config option 706 is to use label or PIN.PIN and/or label can for example be encrypted by Advanced Encryption Standard (AES), RC4, RC5 or RC6 symmetric encipherment algorithm or another cryptographic algorithm, perhaps are used for authentication as secret of sharing or combining encryption algorithm separately.Can be via hash, challenge/response, proof to PIN knowledge is carried out in the authentication of the progressively proof of knowledge or another form.Config option 706 can additionally comprise the cryptology of public key exchange, Diffie-Hellman cipher key agreement protocol or another form.
Return Fig. 6 now, at step 604 place, participant information element 514 is transmitted to potential registrar device, such as registrar device 302.In situation such as the infrastructure mode wireless network of wireless network 304, such as the access point of access point 306 for example via distributing participant information element 514 such as Web service discovery or incident, UPnP discovery or incident or as the mechanism of the expansion of Topology Discovery.In the example depicted in fig. 3, registrar device 302 receives participant information element 514 by access point 306 via wire communication.Registering apparatus 308 via from participant's equipment 300 to access point 306 wireless transmission, then via 308 wire medium receives participant information element 514 from access point 306 to registrar device.Registrar device 404,406 in the self-organizing network 402 of Fig. 4 can directly receive participant information element 514 from participant 400, and perhaps the participant information element can be forwarded to the opposing party from one of registrant 404,406.
At step 606 place, the registrant provides configuration information to the participant.For example, this information can provide by enrollee information element 518 is provided.Fig. 8 illustrates the example that can be included in some assembly in the enrollee information element 518.In the enrollee information element shown in this figure 518, comprised wireless network name element 802, for example, it can be the SSID of wireless network.Enrollee information element 518 also comprises the enciphered message 804 such as encryption key.Also can in enrollee information element 518, provide channel 806 and registrant IP address 808.
In an embodiment, registrar device 302 offers the participant with configuration information in the mode of one of config option 706 of being described to participant information element 514.Similarly, according to the option that is provided in the config option 706, transmitting enrollee information element 518 can transmit outside frequency band, or for example cryptographically transmits in frequency band via the same channel of broadcasting participant information element 514, or can set up interim immediate data with the participant and be connected so that transmit configuration.Certainly, if an option only is provided, then use this option.In an embodiment, if any option is not provided, then can use default configuration.In such embodiments, participant's equipment 300 is not by specifying different options or providing about expecting the information of default option by not indicating default option should not be used to.
In one embodiment, as the result who receives participant information element 514, the automatic Registration Module 504 of registrar device 302 is checked product information 702 in the participant information element 514 at the list of devices in the database 506.If one of equipment in product information 702 and the database 506 coupling, then registrar device 302 need not user's input and provides enrollee information element 518 or other required configuration information of participant's device registration possibility from trend participant equipment 300.For example, can register automatically the equipment that is installed in the user family.
In another embodiment, registrar device 302 can take positive step to determine whether that participant's equipment just asking configuration information.For example, registrar device 302 can be moved the application program whether detection has participant information element 514 to be broadcasted, such as registration component 502, and if then according to this it is handled, such as the sequence that is used for sending via Registration Module 508 enrollee information element 518 by initiation.
According to another embodiment, after receiving participant information element 514, provide alarm at registrar device place such as registrar device 302.One example is provided in Fig. 9-11, and wherein participant's equipment 300 comprises user interface 900 (Fig. 9).In order to begin discovery procedure, user interface 900 provides dialog box 902, and it requires the user to go to registrar device 302 to import personal identification number (PIN).In the embodiment shown, on user interface 900, provide PIN, but it is printed on replacedly or otherwise is included on participant's equipment 300, for example on shell.
Among Figure 10, receive participant information element 514 in response to registrar device 302, alarm modules 507 provides bubble message 1000 on the user interface 1002 of registrar device 302.Bubble message 1000 indications, participant's equipment 300 is just being asked configuration information.The user can click or otherwise choose bubble message 1000, can be directed to dialog box 1102 (Figure 11) then.In this dialog box 1102, the user is requested to import and finds on participant's equipment 300 or otherwise by its PIN that provides.For example, this PIN can provide the PIN on the user interface 900 of Fig. 9.After this PIN was provided, Registration Module 508 was ready to provide enrollee information element 518 according to config option 706.
In case participant's equipment 300 has received after the enrollee information element 518, at step 608 place, participant's equipment 300 attempts to use the configuration information in the enrollee information element 518 to register to wireless network.At step 610 place, make the judgement of whether failing when using this configuration information to connect.If not, then step 610 advances to step 612 by branch, and participant's equipment is connected to wireless network there.If there is failure, then step 610 advances to step 614 by branch, reports this failure there.This failure can for example be reported via the error module on participant's equipment 300 520 (Fig. 5).Report can for example be carried out via error message element 522, and it can be broadcasted according to the mode that is similar to as above refer step 602 described participant information elements 514.Invalid key, the SSID that does not find that the error code in the error message element 522 includes, but not limited to just exchanging can be included in and the IP address can't be obtained.
According to embodiment, can utilize process of the present invention to set up the self-organization meeting.In such meeting, before meeting, provide ID to each equipment that participates in this meeting.This ID for example can be the Conference ID 1200 among Figure 12.Conference ID is comprised that as the part of participant information element 1514 it can comprise some or all information from participant information 514, and/or additional information.Utilize this participant information element 1514, equipment can add the self-organization meeting by broadcasting this Conference ID.Because each equipment in the self-organization meeting all has this Conference ID, so the originator of meeting can leave away, and all the other equipment can continue meeting.
Example
Provide specific example for reader's interests now.In this example, in the environment of IEEE 802.11 technology, carry out setting to participant's equipment 300.Registrar device 302 is connected to network (for example, network 304) via 802.11 access points (for example, access point 306).Access point 306 can or can not be configured to as registrar device.And, can have a plurality of registrar device 302, and the mixing of registrar device 300 is as the agency of one or more registrar device.
At first, the discovery that participant's equipment 300 carries out registrar device, and be provided for the control of communication channel.For this reason, participant's equipment 300 sends the probe requests thereby that comprises participant information element 514.In this example, probe request header comprises: the network (the expectation network name that is disposed) of SSID/ expectation; Network type (architecture); And the basic service of access point 306 broadcasting is provided with identifier (BSSID).Comprise that BSSID avoids unnecessary probe response.
Utilize the probe requests thereby of this example that numerous benefits are arranged.For example, in basic 802.11 standards, support frame turnaround sequence, so it is all available in 802.11 all versions of realizing to probe requests thereby.In addition, probe request has been carried on and has set up all required other ability information of direct communication between two wireless devices.In fact, probe request/response is an exchanging capability information and form the standard mode of virtual associated between two wireless devices in self-organizing network.
In addition, the probe request frame exchange sequence is a high flexible; Be that it can be carried out at any time, and do not consider the connection status on arbitrary wireless device.Probe request frame exchange is also carried out two physics between the wireless device for direct communication and is arrived aptitude tests.
Probe request frame exchange also provides complete bypass access point 306 and does not consider whether access point 306 can carry out the mode of the function of registrar device 302.At last, the use permission participant equipment 300 of probe request frame sequence is found registrar device 302, and use single probe request message to determine the ability of access point 306 as registrar device.When registrar device 302 can not directly be found by participant's equipment 300, obtain this information easily.
In this example, if request type field=1, then registrar device 302 is participant's equipment 300 creation state, matching capacity is set, and open the L2 FPDP only be used to be provided with the exchange of participant's equipment 300 (for example, by being that such communication is used as the AD HOC of specific EtherType, and block the transmission and the reception of all other data communication).Registrar device 302 also can make state aging on one's own initiative, and falls port, maybe participant's equipment 300 can't be set if it does not for example receive any response from participant's equipment 300 after default time restriction.
On the other hand, if access point 306 supports to be provided with feature really, then access point 306 finds participant information element 514 in probe request, and respond with the probing response frame that comprises enrollee information element 518, this information element can comprise that access point 306 is the registrar device or the agency of registrar device, and such as the additional capabilities of the access point of being showed for described enrollee information element 518 before in this example.
If the probe requests thereby that access point 306 is received comprises request type=1, then access point 306 can as above be handled registrar device 302.If participant's equipment 300 is changed to 0 with request type, then access point 306 uses simply or does not use enrollee information element 518 to receive all probe responses, and finishes only discovery procedure.If participant's equipment 300 is changed to 1 with request type, if and it receives probe response from registrar device 302, (unless being provided with or user's covering by the upper strata) compares to access point 306 then acquiescently, it more preference registrar device 302 be used as registrant or registrant's agency, and only when it can't successfully carry out being provided with of registrar device 302, just attempt access point 306.In this case, participant's equipment 300 at first is registrar device 302 creation state, matching capacity is set, and open the L2 FPDP only be used to be provided with the exchange of registrar device 302 (for example, pass through once more to be the such communication use as the AD HOC of specific EtherType, and block the transmission and the reception of all other data communication).The participant also can make state aging on one's own initiative, and falls port, maybe can't carry out EasySetup to registrar device 302 if it does not receive any response from registrar device 302.
In an embodiment, if participant's equipment 300 can not successfully be provided with first registrar device 302, and it has received probe response from a plurality of registrar device 302, then participant's equipment 300 orders (are for example attempted other registrar device 302, by using certain exploration of this order) up to 300 successes of participant's equipment or exhaust tabulation, in this case, if access point 306 also as registrant or registrant's proxy response, then its attempts access point 306.If participant's equipment 300 has also been failed herein, if perhaps access point 306 is legacy equipments, then participant's equipment 300 moves to next candidate's access point of desired network, the complex phase of laying equal stress on step together.If participant's equipment 300 has also exhausted the tabulation of candidate's access point, then 300 statements of participant's equipment are to the failure that is provided with of desired network.
Use the L2 FPDP as control channel, only open to communication exchange is set, this provides numerous benefits.Do exchange being set separating like this, this means that identical exchange can be used for other wireless technology with specific wireless technology with actual.In addition, the change minimum of the wireless technology protocol that use L2 FPDP needs is for example to 802.11, to the change minimum of syntax and semantics.
And using and allowing a logical OR physical entity on this switching method architecture is that any wireless technology is carried out setting.In addition, the state of setting is the known state of wireless stack and platform, and it allows any wireless stack to manage this state uniformly and also allow this state and any other system component such as group policy, diagnosis etc. integrated.In addition, use this exchange that system can be seen extensively progress is set: promptly, each L2 FPDP indication is as registrant or registrant's agency's specific registered person's equipment 302 or access point 306, and there is clearly state transitions, no matter it is from unloading the current L2 FPDP that is used for real data and create the new port that is used to be provided with, still unloads to be used to be provided with the L2 FPDP and after setting is finished, to use required voucher to create and be used for the new port of real data.
Make in this way and also represent the frequency band outer channel according to the identical mode of channel in the frequency band.At last, this method is extendible, this means that can be in the future individual and enterprise is provided with situation and easily provides on the top of the same L2 FPDP of control channel exchange newly is set.Enterprise is provided with situation, and L2 data port model and 802.1X agreement well merge, because also carry 802.1X grouping (EtherType difference) in 802.11 packets.
Be used for logical OR physical entity that participant's equipment 300 is provided with and its and carrying out signal exchange as registrant or registrant agency's registrar device 300 or the peer-entities on the access point 306.Among this embodiment since then, (for example be used for logical OR physical entity that participant's equipment 300 is provided with, find module 510 and/or Registration Module 512) be called as " participant's equipment is provided with entity ", as being called as " registrar device is provided with entity ", registrant's registrar device 300 and the peer-entities on the access point 306 (for example, registrant's assembly 502) be called as " registrar proxy device is provided with entity " as the peer-entities on the agency's of registrar device 302 the equipment.
Participant's equipment is provided with entity by entity being set or with registrar proxy device entity being set for the open L2 FPDP of exchange and registrar device are set that directly (that is, on a hop) transmission and reception are provided with frame.In its media-specific Frame, be the work of specific wireless storehouse to frame encapsulation being set and going to encapsulate.
Registrar device is provided with entity by the open L2 FPDP of exchange and participant's equipment are provided with entity direct (that is, on a hop) transmission and reception is provided with frame in order to be provided with.Again, in its media-specific Frame, be the work of specific wireless storehouse to frame encapsulation being set and going to encapsulate.
Registrar device is provided with that entity and registrar proxy device are provided with that entity sends and reception is provided with frame and divides into groups as L4/L3, for example UDP packet encapsulation UPnP message.For such message management L4/L3 pipeline is the work that registrar device is provided with entity.
Registrar proxy device is provided with entity by the open L2 FPDP of exchange and participant's equipment are provided with entity direct (that is, on a hop) transmission and reception is provided with frame in order to be provided with.Again, in its media-specific Frame, be the work of specific wireless storehouse to frame encapsulation being set and going to encapsulate.
Registrar proxy device is provided with that entity and registrar device are provided with that entity sends and reception is provided with frame and divides into groups as L4/L3.For such message management L4/L3 pipeline is the work that registrar proxy device is provided with entity.
On participant's equipment 300, when 802.11 grouping indication L2 FPDP were opened for exchange is set, participant's equipment was provided with entity and sends on the L2 FPDP message (for example, key message) is set.Decide by the manufacturer of participant's equipment 300 and what in message is set, to spread out of and when invoke user is so that interactive input.
802.11 storehouse encapsulates in 802.11 packets message is set, and based on the peer type of L2 FPDP, is filling 802.11 via radio transmitting before it.For example, if the peer type of L2 FPDP is the access point 306 of registrant or registrant's proxy role, then the grouping address in 802.11 is: source---the MAC Address of participant's equipment 300; The MAC Address of destination---access point 306; The BSSID of BSSID=access point 306.In 802.11, the FromDS position is changed to 0, and the ToDS position is changed to 1.If the peer type of L2 FPDP is the agency of registrar device 302 or registrar device, then except that the ToDS position is changed to 0, be provided with identical.These settings guarantee that targeted registrar device 302 receives grouping.Registrar device 302 should temporarily or be enabled 802.11 promiscuous modes or forbidding sender's address so that can directly receive 802.11 packets that are not derived from its access point 306.
802.11 storehouses on the peer device receive grouping, peel off 802.11, and indication is corresponding to the message that is provided with on the sender's of receive grouping the L2 FPDP.If peer device is a registrar device entity is set, then it consumes the grouping that is received locally, and sends corresponding to the message that is provided with on the receive sender's who divides into groups the L2 FPDP.Decide in message is set what spreads out of by manufacturer equally herein, and when invoke user is so that interactive input.
If peer device is a registrar proxy device entity is set, then it uses the L4/L3 channel that the packet forward that is received is provided with entity to registrar device, and be provided with from registrar device after entity meets with a response, send the message that is provided with on the L2 FPDP that the institute of acting on behalf of corresponding to it receives the sender who divides into groups.By registrar proxy device the L4/L3 pipeline that entity and registrar device are provided with entity design proxy requests/response is set, and what decision spreads out of in these L4/L3 message, and when invoke user is so that interactive input.
To above two kinds of situations, 802.11 storehouse encapsulates from registrar device the message that is provided with that entity and registrar proxy device be provided with entity being set respectively in 802.11 packets, and based on its current operator scheme, via radio transmitting 802.11 of fillings as described below before it about the peer device of L2 FPDP.For example, if 802.11 storehouses are in (no matter being registrant or registrant's proxy role) in the access point mode about the peer device of L2 FPDP, then the grouping address in 802.11 is: the MAC Address of source---access point 306; Destination---the MAC Address of participant's equipment 300; The BSSID of BSSID=access point 306.In 802.11, the FromDS position is changed to 1, and the ToDS position is changed to 0.These settings guarantee that target participant equipment 300 directly receives grouping.If 802.11 storehouses are in the client mode,, then except that the FromDS position is changed to 0, be provided with identical perhaps as registrar device 302 or its agency.These are provided with guarantees that also target participant equipment 300 directly receives grouping.
802.11 storehouses on participant's equipment 300 receive grouping, peel off 802.11, and indication is corresponding to the message that is provided with on the sender's of receive grouping the L2 FPDP.Participant's equipment is provided with entity and consumes the grouping that is received locally, and exchange continuation like this is set.In exchange constantly after a while, participant's equipment is provided with entity and registrar device and entity is set successfully obtains key or fail to obtain key (clear and definite code and overtime).
If successfully obtained key; then since then; remaining is provided with exchange; except being provided with L2 packet switched, the Agency in registrar device 302 become L4/L3 to be provided with the required message header of grouping; use some encryption method that its integrality is encrypted and protected to the remainder of message service load, wherein encrypt and integrity protection is provided with entity at participant's equipment and with registrar device application end-to-end between the entity is set.Bottom 802.11 storehouses are not understood such encryption and the integrity protection that comprises two employed encryption methods of entity fully.At last, exchange is set with success or failure terminating (clear and definite code and overtime).
After this process, if failure is set, then on participant's equipment 300, participant's equipment is provided with entity requests 802.11 storehouses deletion L2 FPDP and next of desired network is provided with peer device creates new port.802.11 the port that storehouse deletion is specified is perhaps created the another port, has perhaps exhausted peer list and has indicated the failure of desired network.The failure indication is a system scope, by participant's equipment entity is set and represents failure to the user.
On registrar device 302, registrar device is provided with entity requests 802.11 storehouses deletion L2 FPDP.802.11 storehouse is only deleted specified port.
On the agency of registrar device 302, registrar proxy device is provided with entity requests 802.11 storehouses deletion L2 FPDP.802.11 storehouse is only deleted specified port.
If success is set, then on participant's equipment 300, participant's equipment is provided with entity requests 802.11 storehouses deletion L2 FPDP.802.11 storehouse is only deleted specified port.Then, participant's equipment is provided with entity and disposes 802.11 storehouses with 802.11 configuration files and voucher, connects the member of participant's equipment 300 as 802.11 network domains.802.11 storehouse uses the configuration file and the voucher that are disposed to be connected to 802.11 network domains.On registrar device 302 or its agency, registrar device is provided with entity (or registrar proxy device is provided with entity) request 802.11 storehouses deletion L2 FPDP.802.11 storehouse is only deleted specified port.
All references described herein comprises open, patented claim and patent, is all comprised by quoting and quotes identical content with its integral body said and be comprised in this by quoting as each to be separately and specially instructed for.
Describe that the use to term " ", " " and " being somebody's turn to do " and similar indicant should be interpreted as covering odd number and plural number in the context of the present invention (the especially context of appended claims), unless have in addition herein indication or with the obvious contradiction of context.Term " comprises ", " having ", should be interpreted as " comprising " and " containing " term (that is, the meaning is " including, but are not limited to ") of opening unless indication is arranged in addition.Unless indication is arranged herein in addition, otherwise the narration of value scope only is intended to fall into each simple method of value separately in this scope as indication separately herein, and each separately value be included in the instructions as it herein by the independent description.All methods described herein can be carried out according to any suitable order, unless have in addition herein the indication or with the obvious contradiction of context.Use to any and all examples provided herein or exemplary language (for example, " such as ") is intended to only illustrate better the present invention, scope of the present invention is not proposed restriction, Unless Otherwise Requested.Any language in the instructions should not be interpreted as indicating the necessary any non-claimed element of realization of the present invention.
Describe the preferred embodiments of the present invention herein, comprised realization known for inventor optimal mode of the present invention.Those skilled in the art is after having read aforementioned description, and the modification of those preferred embodiments will be conspicuous.The inventor expects that the technician suitably adopts such modification, and the inventor wishes that invention is implemented, unless clearly describe herein.Thereby, the present invention includes all modifications or the equivalent way of the theme described in the appending claims herein that allows as governing law.And, the present invention includes above-mentioned element its any combination in might modification, unless have in addition herein indication or with the obvious contradiction of context.
Claims (25)
1. computer-readable medium that contains computer executable instructions on it, described instruction is used to carry out following method:
On wireless device, by wireless network broadcast about the information of described equipment with about the information of one or more methods of being used to receive configuration information;
Receive described configuration information via one of described one or more methods; And
Utilize described configuration information, attempt being connected to described wireless network.
2. computer-readable medium as claimed in claim 1 is characterized in that, described broadcasting is carried out via not encrypted and not protected channel.
3. computer-readable medium as claimed in claim 1 is characterized in that, described wireless network is the Wi-Fi wireless network, and wherein said broadcasting is carried out via the management frames of described Wi-Fi wireless network.
4. computer-readable medium as claimed in claim 3 is characterized in that, described reception via the management frames of described Wi-Fi wireless network and the interim data of setting up be connected frame one of them carries out at least.
5. computer-readable medium as claimed in claim 3 is characterized in that, described reception is capable via frequency band diplomacy swap-in.
6. computer-readable medium as claimed in claim 1 is characterized in that, described wireless network is the Wi-Fi wireless network, and wherein said reception via the management frames of described Wi-Fi wireless network and the interim data of setting up be connected frame one of them carries out at least.
7. computer-readable medium as claimed in claim 1 is characterized in that, described reception is capable via frequency band diplomacy swap-in.
8. computer-readable medium as claimed in claim 1 is characterized in that, described method comprises uses PIN, and wherein said wireless device provides described PIN via user interface.
9. computer-readable medium as claimed in claim 1 is characterized in that, described method comprises uses PIN, and wherein said PIN is provided on the described wireless device.
10. computer-readable medium as claimed in claim 1 is characterized in that, contains to be included in other computer executable instructions of attempting reporting after being connected to described wireless network failure situation or successful result.
11. a computer-readable medium that contains computer executable instructions on it, described computer executable instructions is used to carry out following method:
Be connected on the equipment of wireless network, receiving about the information of participant's wireless device of attempting being connected to described wireless network and about configuration information being offered the information of the method for described participant's wireless device by described wireless network; And
Provide configuration information via described method.
12. computer-readable medium as claimed in claim 11 is characterized in that, described reception is carried out via not encrypted and not protected channel.
13. computer-readable medium as claimed in claim 11 is characterized in that, described wireless network is the Wi-Fi wireless network, and wherein said reception is carried out via the management frames of described Wi-Fi wireless network or the data connection frame of interim foundation.
14. computer-readable medium as claimed in claim 13 is characterized in that, described providing via the management frames of described Wi-Fi wireless network or the data connection frame of interim foundation carried out.
15. computer-readable medium as claimed in claim 13 is characterized in that, describedly provides capable via frequency band diplomacy swap-in.
16. computer-readable medium as claimed in claim 11, it is characterized in that, described wireless network is the Wi-Fi wireless network, and wherein said provide via the management frames of described Wi-Fi wireless network or the interim data of setting up connect frame one of them carries out at least.
17. computer-readable medium as claimed in claim 11 is characterized in that, describedly provides capable via frequency band diplomacy swap-in.
18. computer-readable medium as claimed in claim 11, it is characterized in that, also comprise, will compare about the information of described participant's equipment and tabulation through approval device, if and in information matches and the described tabulation one is consistent, then provides configuration information automatically via described method.
19. computer-readable medium as claimed in claim 11 is characterized in that, also comprises, provides alarm in response to receiving described information.
20. computer-readable medium as claimed in claim 11 is characterized in that, comprises that also the request user imports PIN, described PIN is provided by described participant's wireless device.
21. a computer-readable medium that contains computer executable instructions on it, described computer executable instructions is used to carry out following method:
On wireless device, by the information of wireless network broadcast about hoc meeting, described information comprises PIN number of described meeting, described broadcasting via management frames and the interim data of setting up be connected frame one of them carries out at least, described information is included in the described management frames;
Receive configuration information so that be connected to described hoc meeting; And
Utilize described configuration information, attempt being connected to described meeting.
22. the computer-readable medium of a storage computation machine executable instruction on it, described computer executable instructions is used to carry out following method:
Be connected on the equipment of wireless network, receiving about the information of participant's wireless device of attempting being connected to described wireless network and about the information of the method that receives configuration information by described wireless network; And
Assess described equipment at the participant list; And
If described equipment is positioned on the described participant list, then configuration information is offered described equipment via described method.
23. computer-readable medium as claimed in claim 22 is characterized in that, each among the described participant on the described participant list all has unique identifier.
24. computer-readable medium as claimed in claim 23 is characterized in that, each participant's described unique identifier is made up of MAC Address or static ip address or name.
25. computer-readable medium as claimed in claim 24 is characterized in that, described participant and described registrant can be by being connected direct communication in the frequency band.
Applications Claiming Priority (5)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US67417005P | 2005-04-22 | 2005-04-22 | |
| US60/674,170 | 2005-04-22 | ||
| US11/143,385 | 2005-06-02 | ||
| US11/143,385 US7616594B2 (en) | 2005-04-22 | 2005-06-02 | Wireless device discovery and configuration |
| PCT/US2006/015057 WO2006116061A2 (en) | 2005-04-22 | 2006-04-20 | Wireless device discovery and configuration |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101288063A true CN101288063A (en) | 2008-10-15 |
| CN101288063B CN101288063B (en) | 2011-08-03 |
Family
ID=40059355
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2006800129444A Active CN101288063B (en) | 2005-04-22 | 2006-04-20 | Wireless device discovery and configuration |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN101288063B (en) |
| ZA (1) | ZA200708854B (en) |
Cited By (15)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102273311A (en) * | 2008-12-30 | 2011-12-07 | 诺基亚公司 | Ad hoc network initiation |
| CN102474741A (en) * | 2009-07-28 | 2012-05-23 | 皇家飞利浦电子股份有限公司 | Diagnosing and resolving wireless network malfunctions |
| CN102523287A (en) * | 2010-12-16 | 2012-06-27 | 微软公司 | Wireless network interface with infrastructure and direct modes |
| US8239672B2 (en) | 2008-10-31 | 2012-08-07 | Ralink Technology, Corp. | Method of automatically establishing a security link for a wireless communication system and related communication device |
| US8792429B2 (en) | 2010-12-14 | 2014-07-29 | Microsoft Corporation | Direct connection with side channel control |
| US8923770B2 (en) | 2010-12-09 | 2014-12-30 | Microsoft Corporation | Cognitive use of multiple regulatory domains |
| US8948382B2 (en) | 2010-12-16 | 2015-02-03 | Microsoft Corporation | Secure protocol for peer-to-peer network |
| US9008610B2 (en) | 2010-12-17 | 2015-04-14 | Microsoft Corporation | Operating system supporting cost aware applications |
| US9294545B2 (en) | 2010-12-16 | 2016-03-22 | Microsoft Technology Licensing, Llc | Fast join of peer to peer group with power saving mode |
| CN105429695A (en) * | 2015-10-28 | 2016-03-23 | 京信通信技术(广州)有限公司 | Method and device of detecting wireless equipment information |
| US9542203B2 (en) | 2010-12-06 | 2017-01-10 | Microsoft Technology Licensing, Llc | Universal dock for context sensitive computing device |
| CN103733543B (en) * | 2011-08-11 | 2017-06-09 | 三星电子株式会社 | For the apparatus and method of holding equipment to device service |
| CN107105069A (en) * | 2012-07-26 | 2017-08-29 | 联发科技股份有限公司 | The processing method that device is searched |
| CN107211474A (en) * | 2015-02-10 | 2017-09-26 | 德州仪器公司 | The configuration of wireless device |
| CN110099393A (en) * | 2018-01-30 | 2019-08-06 | 阿里巴巴集团控股有限公司 | Monitor the methods, devices and systems of the network insertion state of distribution net equipment |
-
2006
- 2006-04-20 ZA ZA200708854A patent/ZA200708854B/en unknown
- 2006-04-20 CN CN2006800129444A patent/CN101288063B/en active Active
Cited By (31)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8239672B2 (en) | 2008-10-31 | 2012-08-07 | Ralink Technology, Corp. | Method of automatically establishing a security link for a wireless communication system and related communication device |
| CN102273311B (en) * | 2008-12-30 | 2015-04-08 | 诺基亚公司 | Ad hoc network initiation |
| CN102273311A (en) * | 2008-12-30 | 2011-12-07 | 诺基亚公司 | Ad hoc network initiation |
| CN102474741A (en) * | 2009-07-28 | 2012-05-23 | 皇家飞利浦电子股份有限公司 | Diagnosing and resolving wireless network malfunctions |
| CN102474741B (en) * | 2009-07-28 | 2015-04-22 | 皇家飞利浦电子股份有限公司 | Diagnosing and resolving wireless network malfunctions |
| US9870028B2 (en) | 2010-12-06 | 2018-01-16 | Microsoft Technology Licensing, Llc | Universal dock for context sensitive computing device |
| US9542203B2 (en) | 2010-12-06 | 2017-01-10 | Microsoft Technology Licensing, Llc | Universal dock for context sensitive computing device |
| US9178652B2 (en) | 2010-12-09 | 2015-11-03 | Microsoft Technology Licensing, Llc | Cognitive use of multiple regulatory domains |
| US8923770B2 (en) | 2010-12-09 | 2014-12-30 | Microsoft Corporation | Cognitive use of multiple regulatory domains |
| US9462479B2 (en) | 2010-12-09 | 2016-10-04 | Microsoft Technology Licensing, Llc | Cognitive use of multiple regulatory domains |
| US9801074B2 (en) | 2010-12-09 | 2017-10-24 | Microsoft Technology Licensing, Llc | Cognitive use of multiple regulatory domains |
| US9450995B2 (en) | 2010-12-14 | 2016-09-20 | Microsoft Technology Licensing, Llc | Direct connection with side channel control |
| US8792429B2 (en) | 2010-12-14 | 2014-07-29 | Microsoft Corporation | Direct connection with side channel control |
| US9813466B2 (en) | 2010-12-14 | 2017-11-07 | Microsoft Technology Licensing, Llc | Direct connection with side channel control |
| US9294545B2 (en) | 2010-12-16 | 2016-03-22 | Microsoft Technology Licensing, Llc | Fast join of peer to peer group with power saving mode |
| US9998522B2 (en) | 2010-12-16 | 2018-06-12 | Microsoft Technology Licensing, Llc | Fast join of peer to peer group with power saving mode |
| CN102523287B (en) * | 2010-12-16 | 2015-06-24 | 微软公司 | Wireless network interface with infrastructure and direct modes |
| US10575174B2 (en) | 2010-12-16 | 2020-02-25 | Microsoft Technology Licensing, Llc | Secure protocol for peer-to-peer network |
| US8948382B2 (en) | 2010-12-16 | 2015-02-03 | Microsoft Corporation | Secure protocol for peer-to-peer network |
| US9596220B2 (en) | 2010-12-16 | 2017-03-14 | Microsoft Technology Licensing, Llc | Secure protocol for peer-to-peer network |
| CN102523287A (en) * | 2010-12-16 | 2012-06-27 | 微软公司 | Wireless network interface with infrastructure and direct modes |
| US9338309B2 (en) | 2010-12-17 | 2016-05-10 | Microsoft Technology Licensing, Llc | Operating system supporting cost aware applications |
| US10044515B2 (en) | 2010-12-17 | 2018-08-07 | Microsoft Technology Licensing, Llc | Operating system supporting cost aware applications |
| US9008610B2 (en) | 2010-12-17 | 2015-04-14 | Microsoft Corporation | Operating system supporting cost aware applications |
| US9680604B2 (en) | 2011-08-11 | 2017-06-13 | Samsung Electronics Co., Ltd | Method and apparatus for device to device communication |
| CN103733543B (en) * | 2011-08-11 | 2017-06-09 | 三星电子株式会社 | For the apparatus and method of holding equipment to device service |
| CN107105069A (en) * | 2012-07-26 | 2017-08-29 | 联发科技股份有限公司 | The processing method that device is searched |
| CN107211474A (en) * | 2015-02-10 | 2017-09-26 | 德州仪器公司 | The configuration of wireless device |
| CN105429695A (en) * | 2015-10-28 | 2016-03-23 | 京信通信技术(广州)有限公司 | Method and device of detecting wireless equipment information |
| CN105429695B (en) * | 2015-10-28 | 2019-01-25 | 京信通信系统（中国）有限公司 | A kind of method and device for finding out wireless device information |
| CN110099393A (en) * | 2018-01-30 | 2019-08-06 | 阿里巴巴集团控股有限公司 | Monitor the methods, devices and systems of the network insertion state of distribution net equipment |
Also Published As
| Publication number | Publication date |
|---|---|
| CN101288063B (en) | 2011-08-03 |
| ZA200708854B (en) | 2009-01-28 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101288063B (en) | Wireless device discovery and configuration | |
| US11153081B2 (en) | System for user-friendly access control setup using a protected setup | |
| EP1872250B1 (en) | Wireless device discovery and configuration | |
| US8169987B2 (en) | Managed access point protocol | |
| US7853983B2 (en) | Communicating data from a data producer to a data receiver | |
| CN100486173C (en) | Configuring of network settings of thin client devices using portable storage media | |
| US20050066197A1 (en) | Communication apparatus and method, and program for applying security policy | |
| US11736304B2 (en) | Secure authentication of remote equipment | |
| CN101953117A (en) | Efficient and transparent remote wakeup | |
| WO2006135872A2 (en) | Establishing wireless universal serial bus (wusb) connection via a trusted medium | |
| US20230045486A1 (en) | Apparatus and Methods for Encrypted Communication | |
| EP4057588A1 (en) | Secure key management device, authentication system, wide area network and method for generating session keys | |
| CN117061115A (en) | Key negotiation method, key negotiation apparatus, computer device, and computer-readable storage medium | |
| Marginean et al. | sDOMO–A Simple Protocol for Home Automation and Robotic Systems | |
| Zidbeck et al. | PN platforms |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| ASS | Succession or assignment of patent right |
Owner name: MICROSOFT TECHNOLOGY LICENSING LLC Free format text: FORMER OWNER: MICROSOFT CORP. Effective date: 20150525 |
|
| C41 | Transfer of patent application or patent right or utility model | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20150525 Address after: Washington State Patentee after: Micro soft technique license Co., Ltd Address before: Washington State Patentee before: Microsoft Corp. |