WO2018076356A1

WO2018076356A1 - Communication method, network device, and terminal

Info

Publication number: WO2018076356A1
Application number: PCT/CN2016/104090
Authority: WO
Inventors: 韩云博; 方平; 丁志明; 李小仙; 杨云松
Original assignee: 华为技术有限公司
Priority date: 2016-10-31
Filing date: 2016-10-31
Publication date: 2018-05-03

Abstract

Provided in embodiments of the present invention are a communication method, a network device, and a terminal. The communication method provided in the embodiments of the present invention may comprise: a first device (a network device, such as an access point) receives a wakeup confirmation frame transmitted by a second device (a terminal), the wakeup confirmation frame comprising indication information for indicating that the terminal is woken up by a wakeup receiver of the terminal; and when the first device determines, on the basis of the indication information, that no wakeup frame is transmitted to a second device within a preset time period, the first device transmits to the second device a message carrying updated identification information for use in communication with the second device. The method, by updating identification information, prevents the terminal from coming under attack by an attacker, thus reducing additional power consumption for the terminal, and reducing signaling overhead in the terminal when a WUR is not under attack.

Description

Communication method, network device and terminal

Technical field

The embodiments of the present invention relate to the field of communications, and in particular, to a communication method, a network device, and a terminal.

Background technique

With the evolution of the WLAN (Wireless Local Area Network) standard, in a Wireless Fidelity (WiFi) network, terminals (such as workstations) may have a large number of messages (such as the No data phase). A portion of the energy is wasted in the listening channel when there is no reception signal. IEEE (Institute of Electrical and Electronic Engineers) 802.11 working group is preparing to reduce WiFi power by using Low Power Wake Up Radio (LP-WUR) (hereinafter referred to as WUR) as the core technology. Consumption. It can be seen that in the communication process between the network device in the WiFi network, such as a wireless access point (AP) and the terminal, a communication method for reducing the power consumption of the terminal is needed.

The prior art communication method for reducing the power consumption of the terminal is to use the low power WUR instead of the wireless transceiver to listen to the channel when the medium is idle. When the wireless transceiver of the terminal enters deep sleep, the low power WUR wakes up and starts working. When the AP needs to communicate with the terminal with the WUR and the wireless transceiver, the AP sends a Wake Up Packet (WUP) to the WUR of the terminal, and the WUR that receives the WUP sets the WUR ID in the WUP (ie, the WUR identification information, In the identification of WUR), it is compared with the WUR ID that it is assigned. If the comparison result is consistent, WUR thinks that the WUP is sent to itself, then WUR wakes up the wireless transceiver of the terminal, WUR goes to sleep again, and AP wakes up. The wireless transceiver communicates. After the terminal's wireless transceiver communicates with the AP, it will go to sleep. At the same time, the WUR wakes up and starts to listen to whether there is a WUP sent to itself to wake up the wireless transceiver again.

Wake-up receiver WUR in order to achieve low power consumption, its circuit structure, frame structure design (such as WUP), etc. Need to be relatively simple, and low complexity and other factors, vulnerable to attack. Therefore, in order to prevent being attacked, a simplified Frame Authentication Code (FAC) message is added to the WUP to authenticate whether the frame is sent by the AP associated with the terminal. Broadly speaking, the FAC is part of the WUR ID (ie, the WUR's identification information) and is used by the WUR to identify whether the WUP is sent to itself. In a narrow sense, the FAC is a verification message that helps the WUR determine whether the WUP is a legitimate message. The general term used in this specification is to treat the FAC as part of the WUR ID.

The FAC is updated every time the WUR wakes up the wireless transceiver successfully, that is, the WUR ID is updated each time the wireless transceiver is successfully woken up, which brings additional signaling overhead, out-of-step risk and power consumption. The out-of-synchronization refers to the phenomenon that the AP and the terminal do not update the WUR ID of the WUR (for example, the terminal updates the FAC to the WUR, but the AP side has not been updated).

Summary of the invention

The embodiment of the present invention provides a communication method, a network device, and a terminal. The method effectively reduces the waste of the listening channel when the terminal is idle, and ensures the communication security of the terminal.

In a first aspect, a communication method is provided, the method comprising: a first device (a network device, such as an access point) receiving a wake-up acknowledgement frame sent by a wireless transceiver (such as an 802.11 transceiver module) of a second device (terminal), The wakeup acknowledgement frame can be a control frame, a data frame, or a management frame. The wakeup confirmation frame includes wakeup indication information, where the wakeup indication information is used to indicate that the wireless transceiver of the second device is awake by the wakeup receiver of the second device after receiving the wakeup frame, and the wakeup frame includes the first identification information of the wakeup receiver, The first identification information is identification information currently used by the wake-up receiver, wherein the first identification information may be complete WUR identification information or part of WUR identification information, such as a complete Medium Access Control (MAC) address or can distinguish Partial address of the MAC address. When the first device determines that the awake frame has been sent to the second device in the preset time period, the first device sends the first message to the second device, where the first message is when the first device sends the awake frame. A message to be sent to the second device has been determined, the first message being a data frame to enable communication between the first device and the second device. When the first device determines the preset time according to the wakeup indication information When the awake frame is not sent to the second device in the segment, the first device sends a second message to the second device, where the second message may be a data frame, a control frame, or a management frame, and the second message includes a wake-up receiver. The indication information of the second identifier information or the second identifier information is used by the second device to update the identifier information currently used by the wake-up receiver according to the indication information of the second identifier information or the second identifier information, so as to ensure communication security of the terminal.

In an optional implementation, when the first device needs to transmit other information (such as data) in addition to the second identifier information, the first device first sends a second message including the second identifier information to the second device, and then Transfer subsequent messages. In order to ensure that the transmission of the subsequent message is in the awake state of the wireless transceiver of the second device, and the second message carrying the second identification information has been received, to avoid the first device and the first device caused by the wireless transceiver of the second device entering the sleep state The second device does not synchronize the WUR identification information, and the resulting out-of-step situation.

In an optional implementation, before the first device sends the second message to the second device, the first device encrypts the second message to ensure that the updated second identifier information is not obtained by other devices (attackers). .

In an optional implementation, after the first device sends the second message to the second device, the first device receives, by the second device, the identifier that is currently used by the wake-up receiver according to the indication information of the second identifier information or the second identifier information. The confirmation message of the second message sent after the information, the confirmation message includes the identity verification information of the second device. The first device determines the attribute information of the second device according to the identity verification information; the first device communicates with the second device according to the attribute information of the second device, so that the first device further confirms that the second device has been woken up.

In an optional implementation, the wake-up acknowledgement frame further includes attribute information of the second device, such as address information of the terminal.

After the first device receives the wakeup acknowledgement frame sent by the wireless transceiver of the second device, the first device determines the current protection mode of the second device according to the attribute information of the second device, that is, determines that the second device is currently working on the first device. Which protection mode is provided. The first device identifies the duration of the second device working in the current protection mode, and determines whether the current protection mode is based on the recognition result. Switching is performed so that the first device updates the WUR ID of the WUR while avoiding attacks by the attacker, thereby reducing signaling overhead and reducing additional power consumption.

In an optional implementation, the first device identifies the duration of the second device working in the current protection mode, and specifically includes: after the first device determines that the current protection mode of the second device is the first protection mode, the first The protection mode is that each time the wireless transceiver of the second device is woken up by the wakeup receiver of the second device, the first device updates the mode of waking up the identification information of the receiver. The first device identifies whether the second device is attacked within the first duration of the first protection mode. The second device is attacked, that is, the first device receives the wakeup acknowledgement message sent by the second device, but the first device does not send the wakeup frame to the second device within a preset time period. After the first device determines that the awake frame is sent to the second device in the preset time period, the first device switches the current protection mode of the second device according to the recognition result, which includes: when When the first device recognizes that the second device works in the first protection mode for more than the first duration, and the second device is not attacked within the first duration, the first device changes the current protection mode of the second device from The first protection mode is switched to the second protection mode. In the multi-round communication, the method avoids the second device being in the first protection mode with large overhead for a long time, and can flexibly place the second device under different security protection strengths according to actual situations.

In an optional implementation, the first device identifies the duration of the second device working in the current protection mode, and specifically includes: after the first device determines that the current protection mode of the second device is the second protection mode, the second The protection mode is that the first device receives the wake-up acknowledgement frame sent by the wireless transceiver of the second device, and determines that the second device is updated when the first device does not send the wake-up frame to the wake-up receiver of the second device within the preset time period. The mode of waking up the receiver's identification information. The first device identifies the second duration and the number of attacks of the second device operating in the second protection mode. The second device is attacked, that is, the first device receives the wakeup acknowledgement message sent by the second device, but the first device does not send the wakeup frame to the second device within the preset time period. After the first device determines that the awake frame is not sent to the second device in the preset time period, the first device switches the current protection mode of the second device according to the recognition result, which includes: Device identifies the second set The first device switches the current protection mode of the second device from the second protection mode to the first time when the second device is not in the second protection mode and the second device is attacked by the attacker. Protection mode. The method avoids the continuous attack of the second device in the multiple rounds of communication, and can flexibly place the second device under different security protection strengths according to actual situations.

In a second aspect, another communication method is provided, the method comprising: the wake-up receiver of the second device wakes up the wireless transceiver of the second device after receiving the wake-up frame, and the wake-up frame includes the first identification information of the wake-up receiver, The first identification information is identification information currently used by the wake-up receiver.

The first identifier information may be complete WUR identifier information or part of WUR identifier information, such as a complete MAC address or a partial address that can distinguish the MAC address.

After being awake, the wireless transceiver of the second device sends a wakeup acknowledgement frame to the first device, and the wakeup acknowledgement frame may be a control frame, a data frame, or a management frame. The wakeup acknowledgement frame includes wakeup indication information, and the wakeup indication information is used to indicate that the wireless transceiver of the second device is woken up by the wakeup receiver of the second device after receiving the wakeup frame.

The second device receives the first message sent by the first device, where the first message is that after the first device receives the awake indication information, it is determined that the first device sends the awake frame to the second device after the preset time period, and the first device sends the first message. The message is that the first device has determined to send a message to the second device when sending the wake-up frame, and the first message may be a data frame to implement communication between the first device and the second device. or,

The second device receives the second message sent by the first device, and the second message is that after the first device receives the wake-up indication information, the first device determines that the first device does not send the wake-up frame to the second device after the preset time period, the first device sends the second message. The second message may be a data frame, a control frame or a management frame, and the second message includes indication information of the second identifier information or the second identifier information of the wake-up receiver, and the wake-up reception is updated according to the second identifier information or the second identifier information indication information. The identifier information currently used by the device is used by the second device to update the identifier information currently used by the wake-up receiver according to the second identifier information or the indication information of the second identifier information, so as to ensure communication security of the terminal.

In an optional implementation, when the first device has other information besides the second identification information, When the data needs to be transmitted, the second device sequentially receives the second message that is sent by the first device, including the second identifier information, and the subsequent message. In order to ensure that the wireless transceiver of the second device is in the awake state, the subsequent message is received to prevent the first device and the second device from updating the WUR identification information due to the wireless device of the second device entering the sleep state. Step situation.

In an optional implementation, the second message is sent after the first device is encrypted, to ensure that the new second identification information is not obtained by other devices (attackers).

In an optional implementation, after the second device updates the identifier information currently used by the wakeup receiver according to the second identifier information or the second identifier information indication information,

The second device sends a confirmation message of the second message to the first device, where the confirmation message includes the identity verification information of the second device, so that the first device determines the attribute information of the second device according to the identity verification information, and then performs the Communication. The attribute information may be identity information of the terminal or identifier information of the wake-up receiver of the terminal.

In an optional implementation, the wake-up acknowledgement frame further includes the attribute information of the second device, so that the first device determines, according to the attribute information, the current protection mode of the second device, and the duration of the second device working in the current protection mode. Identifying, and switching, according to the recognition result, the current protection mode between the at least two protection modes, where the at least two protection modes include a first protection mode and a second protection mode; wherein the first protection mode is second each time After the wireless transceiver of the device is woken up by the wakeup receiver of the second device, the first device updates the mode of waking up the identifier information of the receiver; the second protection mode is the wakeup sent by the wireless transceiver of the second device receiving the second device. The frame is confirmed, and a mode of updating the identification information of the wake-up receiver when the first device does not send the wake-up frame to the wake-up receiver of the second device within the preset time period is determined. The method avoids the continuous attack of the second device in the multiple rounds of communication, and can flexibly place the second device under different security protection strengths according to actual situations.

In a third aspect, a network device is provided, the network device having a function of implementing the behavior of the network device in the actual method. This function can be implemented in hardware or in hardware by executing the corresponding software. The hardware or software includes one or more modules corresponding to the functions described above.

In a fourth aspect, a terminal is provided, the terminal having a function of realizing terminal behavior in the actual method. This function can be implemented in hardware or in hardware by executing the corresponding software. The hardware or software includes one or more modules corresponding to the functions described above.

In a fifth aspect, another network device is provided, which may include: a receiver, a transmitter, and a processor. The receiver is configured to receive a wake-up acknowledgement frame sent by the wireless transceiver of the terminal, and the wake-up acknowledgement frame includes wake-up indication information, where the wake-up indication information is used to indicate that the wireless transceiver of the terminal is wake-up by the wake-up receiver of the terminal, wake up after receiving the wake-up frame, and wake up The frame includes first identification information of the wake-up receiver, and the first identification information is identifier information currently used by the wake-up receiver. The processor is configured to determine, according to the wakeup indication information, that the wakeup frame has been sent to the terminal within a preset time period. The transmitter is configured to: when the processor determines that the wake-up frame has been sent to the terminal within the preset time period, send the first message to the terminal, where the first message is a message that the network device has determined to send to the terminal when sending the wake-up frame. The processor is further configured to determine, according to the wakeup indication information, that the wakeup frame is not sent to the terminal within a preset time period. The transmitter is further configured to: when the processor determines that the wakeup frame is not sent to the terminal within the preset time period, send the second message to the terminal, where the second message includes the second identifier information of the wakeup receiver or the indication information of the second identifier information. And updating, by the terminal, the identifier information currently used by the wakeup receiver according to the indication information of the second identifier information or the second identifier information.

The network device can also include a memory for storing program instructions and data necessary for the network device.

In an optional implementation, before the transmitter sends the second message to the terminal, the processor is further configured to perform encryption processing on the second message.

In an optional implementation, after the sender sends the second message to the terminal, the receiver is further configured to receive an acknowledgement message sent by the terminal for the second message, where the acknowledgement message of the second message is the terminal according to the second identifier. The information or the indication information of the second identification information is sent after the identifier information currently used by the wake-up receiver is updated, and the confirmation message of the second message includes the identity verification information of the terminal. The processor is further configured to determine the attribute information of the terminal according to the identity verification information of the terminal, and communicate with the terminal according to the attribute information of the terminal. The attribute information may be identity information of the terminal, or terminal Wake up the identification information of the receiver.

In an optional implementation, the wakeup acknowledgement frame further includes the attribute information of the terminal; after receiving the wakeup acknowledgement frame sent by the wireless transceiver of the terminal, the processor is further configured to determine the current protection mode of the terminal according to the attribute information of the terminal. Identifying the duration of the terminal working in the current protection mode, and switching the current protection mode between at least two protection modes according to the recognition result, where the at least two protection modes include the first protection mode And the second protection mode.

In an optional implementation, after the processor determines that the current protection mode of the terminal is the first protection mode, the first protection mode is that each time the wireless transceiver of the terminal is woken up by the wakeup receiver of the terminal, the processor updates the terminal. The mode of waking up the receiver's identification information. The processor is specifically configured to identify the first duration in which the terminal operates in the first protection mode. The attack means that the receiver receives the wakeup acknowledgement message sent by the terminal, but the sender does not send the wakeup frame to the terminal within a preset time period. After the processor determines, according to the waking indication information, that the awake frame has been sent to the terminal within the preset time period, when the processor recognizes that the terminal works in the first protection mode for more than the first duration, and the terminal is in the first duration When the attack has not been attacked, the processor switches the current protection mode of the terminal from the first protection mode to the second protection mode.

In an optional implementation, after the processor determines that the current protection mode of the terminal is the second protection mode, the second protection mode is a wake-up acknowledgement frame sent by the wireless transceiver of the receiver receiving terminal, and determines the preset time. When the intra-segment transmitter does not transmit a wake-up frame to the wake-up receiver of the terminal, the mode of the terminal's wake-up receiver identification information is updated. The processor is specifically configured to identify the second duration and the number of attacks in which the terminal works in the second protection mode. The attack of the terminal means that the receiver receives the wakeup acknowledgement message sent by the terminal, but the receiver does not send the wakeup frame to the terminal within a preset time period. After the processor determines, according to the wakeup indication information, that the wakeup frame is not sent to the terminal within a preset time period, when the processor recognizes that the terminal works in the second protection mode, the time does not exceed the second duration, and the terminal When the number of attacks is not less than the attack threshold, the processor switches the current protection mode of the terminal from the second protection mode to the first protection mode.

In a sixth aspect, a computer storage medium is provided for storage for the network device Computer software instructions comprising programs designed to perform the above aspects.

In a seventh aspect, another terminal is provided, the terminal comprising: a wake-up receiver, a processor and a wireless transceiver. The wake-up receiver is used to receive the wake-up frame. The processor is configured to wake up the wireless transceiver of the terminal after receiving the wake-up frame, where the wake-up frame includes the first identifier information of the wake-up receiver, where the first identifier information is identifier information currently used by the wake-up receiver. The wireless transceiver is configured to send a wake-up acknowledgement frame to the network device, where the wake-up acknowledgement frame includes wake-up indication information, and the wake-up indication information is used to indicate that the wireless transceiver is the wake-up receiver wakes up after receiving the wake-up frame. The wireless transceiver is configured to receive the first message sent by the network device, where the first message is that after the network device receives the wake-up indication information, the network device determines that the network device sends the wake-up frame to the wake-up receiver after the preset time period, and the first message is The network device has determined the message to be sent to the wireless transceiver when transmitting the wake-up frame. Or the wireless transceiver is further configured to receive a second message sent by the network device, where the second message is that after the network device receives the wake-up indication information, the network device determines that the network device does not send the wake-up frame to the wake-up receiver after the preset time period, The second message includes indication information of the second identification information or the second identification information of the wake-up receiver, the second identification information or the indication information of the second identification information. The processor updates the identifier currently used by the wake-up receiver according to the second identification information or the second identification information indication information.

The terminal can also include a memory for storing program instructions and data necessary for the terminal.

In an optional implementation, the second message is sent after the network device is encrypted.

In an optional implementation, after the processor updates the identifier information currently used by the wakeup receiver according to the second identifier information or the indication information of the second identifier information,

The wireless transceiver sends an acknowledgement message of the second message to the network device, where the acknowledgement message includes the identity verification information of the terminal, so that the network device determines the identity information of the terminal according to the identity verification information, and then communicates with the network device.

In an optional implementation, the wake-up acknowledgement frame further includes attribute information of the terminal, so that the network device determines, according to the attribute information, that the current protection mode of the terminal identifies the duration of the terminal working in the current protection mode, and according to the recognition result, The current protection mode is between at least two protection modes The switching is performed, and the at least two protection modes include a first protection mode and a second protection mode.

The first protection mode is that after the wireless transceiver is woken up by the wake-up receiver, the network device updates the mode of waking up the identifier information of the receiver; and the second protection mode is that the network device receives the wake-up acknowledgement frame sent by the wireless transceiver. And determining a mode for updating the identifier information of the wake-up receiver when the network device does not send the wake-up frame to the wake-up receiver within the preset time period.

In still another aspect, a computer storage medium is provided for storing computer software instructions for use with the network device described above, including a program designed to perform the above aspects.

DRAWINGS

FIG. 1 is a schematic structural diagram of a WLAN system according to an embodiment of the present disclosure;

2 is a schematic structural diagram of an AP and a terminal shown in FIG. 1;

FIG. 3 is a signaling interaction diagram of a communication method according to an embodiment of the present invention;

4 is a frame structure of a wake-up acknowledgement frame according to an embodiment of the present invention;

FIG. 5 is a frame structure of a wake-up acknowledgement frame in the prior art; FIG.

FIG. 6 is a frame structure of another wake-up acknowledgement frame according to an embodiment of the present invention;

FIG. 7 is a schematic diagram of a frame structure of another wake-up acknowledgement frame according to an embodiment of the present invention;

FIG. 8 is a schematic diagram of a frame structure of another wake-up acknowledgement frame according to an embodiment of the present invention;

FIG. 9 is a schematic diagram of a frame structure of another wake-up acknowledgement frame according to an embodiment of the present invention;

FIG. 10 is a flowchart of a communication method according to an embodiment of the present invention;

FIG. 11 is a flowchart of a state switching of a protection mode according to an embodiment of the present invention;

FIG. 12 is a flowchart of another communication method according to an embodiment of the present invention;

FIG. 13 is a schematic structural diagram of a network device according to an embodiment of the present disclosure;

FIG. 14 is a schematic structural diagram of a terminal according to an embodiment of the present disclosure;

FIG. 15 is a schematic structural diagram of another network device according to an embodiment of the present disclosure;

FIG. 16 is a schematic structural diagram of another terminal according to an embodiment of the present invention.

detailed description

The technical solution of the present invention will be further described in detail below through the accompanying drawings and embodiments.

The communication method provided by the present invention can be applied to a WLAN system, which can include a terminal and an AP.

Taking the WLAN system shown in FIG. 1 as an example, the WLAN system may include an AP (first device), a terminal (second device) associated with the AP, and an attacker AP1 (third device).

The terminal may be referred to as a user equipment (UE), a mobile station (MS), a mobile terminal, a computer, a microcomputer, or the like, or may be a 5G terminal. For example, the terminal may be a mobile phone (or "cellular" phone), a mobile computer, a computer with a mobile terminal, a smart watch, etc., for example, the terminal may also be portable, pocket-sized, handheld, built-in or on-board Mobile devices that exchange voice and/or data with wireless access devices. The invention is not limited thereto, for example, the terminal further includes a terminal with wired access with multiple bearer features.

As shown in FIG. 2, the terminal may include a wireless transceiver (such as an 802.11 primary transceiver module, also referred to as a WiFi transceiver) and a WUR, which is used to receive a wake-up frame to wake up the wireless transceiver. The AP includes at least a wireless transceiver (such as an 802.11 primary transceiver module).

In the communication process, the WLAN system involves communication between the AP and the WUR in the terminal, communication between the wireless transceiver of the terminal and the wireless transceiver of the AP, communication from the attacker AP1 to the WUR in the terminal, and the attacker AP1 to AP communication.

The communication between the attacker AP1 and the WUR of the terminal may include: the attacker AP1 sends the wakeup frame WUP containing the WUR identification information to the WUR of the terminal by acquiring the WUR identification information (WUR ID) in the terminal, in an attempt to wake up the terminal. Communication of the wireless transceiver.

The communication from the attacker AP1 to the AP may include: the attacker AP1 sends a message to the AP through the wireless transceiver masquerading as the terminal, and causes the AP to update the communication of the identification information to the WUR of the terminal.

Among them, the WUR identification information (WUR ID) can be updated, that is, all can be changed, or can be The WUR identification information may include a single user (SU) ID, a multi-user (MU) ID, and a broadcast ID of the WUR, and any one of the WUR IDs may wake up the wireless transceiver of the terminal. . The WUR identification information can be updated in its entirety or partially. The identification information of the WUR may also include a simplified frame verification code (FAC), that is, the identification information of the WUR is updated by the change of the FAC.

Since the WUR ID is updated in the prior art regardless of whether or not the WUR is attacked, new signaling overhead, out-of-step risk, and additional power consumption are introduced, and at the same time, there is a lack of targeting for different situations (if there is no attack). The flexibility of adopting the same strategy). Therefore, before the AP communicates with the associated at least one terminal in the embodiment of the present invention, the AP may perform protection mode setting on the at least one terminal, thereby facilitating updating the WUR ID of the WUR in the terminal to avoid attack by the attacker AP1. The second device wakes up the protection of the receiver, thereby reducing signaling overhead, reducing additional power consumption, and improving the working flexibility of the WUR in the terminal for different situations.

It should be noted that the AP may provide protection for at least one terminal by including one or more protection modes, and the AP may provide the following protection modes:

The AP can set a strict protection mode for the terminal (recorded as the first protection mode), or set a loose protection mode for the terminal (referred to as the second protection mode).

The first protection mode refers to a mode in which the AP updates the identification information of the WUR after the wireless transceiver of the terminal is successfully awake by its WUR. The method for the AP to update the WUR identification information may be any of the following two methods:

In the first mode, after the WUR of the terminal successfully wakes up the wireless transceiver of the terminal, the AP sends a frame authentication code (FAC) message or a new WUR used for the next communication of the WUR of the terminal to the wireless transceiver of the terminal. ID, and after the communication between the AP and the terminal's wireless transceiver ends, the AP updates the FAC with the WUR of the terminal.

In the second mode, the AP does not directly send the FAC information used by the WUR of the terminal to the wireless transceiver of the terminal, but when the AP is associated with the terminal, or when the current protection mode of the terminal is switched to the first protection mode, The AP sends a key to the wireless transceiver of the terminal, and the AP and the terminal Use the same algorithm separately, and use the key and some current information (such as the FAC used by the WUR of the terminal at the time of communication) to calculate the new FAC information (ie, the new identifier) used by the WUR for the next communication between the AP and the terminal. Information), after the communication between the AP and the wireless transceiver of the terminal ends, the AP updates the FAC information of the WUR synchronously with the WUR of the terminal, and does not require additional message interaction.

The second protection mode is that when the AP receives the wakeup acknowledgement frame sent by the terminal, and determines that the AP does not send the WUP to the WUR of the terminal within the preset time period, the identifier information of the WUR may be updated, and the terminal receives the terminal at the AP. The sent wakeup confirmation frame determines the mode of not updating the WUR identification information when the AP has sent the WUP to the WUR of the terminal within the preset time period.

The wake-up acknowledgement frame WUP is sent by the wireless transceiver of the terminal to the AP after the wireless transceiver of the terminal is successfully woken up by the WUR, and the wireless transceiver of the portable terminal has been woken up by the WUR.

Optionally, the AP may set the first duration, the second duration, and the first integer (attack threshold).

The first duration of the first protection mode is to maintain the duration of the WUR of the terminal that is not awake or attacked by the terminal. The AP determines whether the current protection mode of the terminal needs to be switched from the first protection mode to the second protection mode.

The false wake-up refers to the behavior of the wireless transceiver that wakes up the terminal after receiving the WUR error of the terminal and receiving the wake-up frame of the WUR in the other terminal (the WUR of the terminal mistakenly believes that the AP sends the wake-up frame to the AP). It should be noted that the probability that the terminal is erroneously awake in a short time is very low.

The WUR of the terminal is attacked, which refers to the behavior of the wireless transceiver that wakes up the terminal after the WUR of the terminal receives the wake-up frame sent by the attacker AP1. It should be noted that if there is an attacker AP1, the terminal will be continuously attacked in a short time, thereby continuously waking up the wireless transceiver.

The AP receives the wake-up acknowledgement frame sent by the wireless transceiver of the terminal. If the wake-up frame is not sent to the WUR of the terminal within the preset time period, the AP considers that the terminal is falsely awake or attacked. At this time, the AP determines whether the time that the terminal continues to be erroneously awake or attacked exceeds the first duration. If the first duration is exceeded, the AP switches the current protection mode of the terminal from the first protection mode to the second protection mode. After a period of time, the AP updates the identification information of the WUR and sets the first duration again.

It should be noted that the AP judges that the terminal is continuously awake or attacked by the AP: It is assumed that the wake-up frame is not sent to the WUR of the terminal within the time period, but when the wake-up acknowledgement frame sent by the wireless transceiver of the terminal is continuously received, the AP considers that the terminal continues to be awake or attacked by mistake (in the present specification, "wrong wake-up or The expression "by attack" is unified as "attacked").

The second duration and the first integer act in the second protection mode. The second duration is the duration of whether the WUR of the AP records the first integer attack, and is used to determine whether the current protection mode of the terminal needs to be switched from the second protection mode to the first protection mode to determine whether the WUR of the terminal is sustained. Sexual attack to avoid protection mode switching caused by the terminal being awake. The first integer is the threshold of the number of times the WUR of the terminal is continuously attacked. When the number of attacks by the terminal in the second time is not less than the first integer number, the AP considers that the WUR of the terminal is much more likely to be attacked than the false wakeup. If it is less than the first integer number, the AP considers that the WUR of the terminal has a certain probability of being awakened by mistake.

The terminal works in the first duration of the first protection mode. After the wireless transceiver of the terminal is successfully awake by the WUR, the AP updates the identification information of the WUR; the terminal works in the first protection mode, and after the first duration, The terminal has not been attacked for the first time period, and the AP switches the current protection mode of the terminal from the first protection mode to the second protection mode.

In the second duration of the second protection mode, the AP receives the wake-up acknowledgement frame, and determines that the AP does not send the WUP to the WUR of the terminal within the preset time period, and if the terminal is attacked by at least the first integer, the AP will be the terminal. The current protection mode is switched from the second protection mode to the first protection mode to update the WUR identification information. If the terminal is less than the first integer attack, the AP may not update the WUR identification information according to the actual situation. In the second protection mode, and the AP receives the wake-up acknowledgement frame, and determines that the AP does not send the WUP to the WUR of the terminal within the preset time period, the AP interacts with the terminal to complete the current round of communication normally.

Optionally, the AP may further include a first timer, a second timer, and a third timer.

The first timer is used to time the first protection mode to determine if it has operated for a sufficient amount of time due to additional overhead and risk.

The second timer is used to time the second protection mode to determine whether the WUR is subjected to a persistent attack to avoid false wake-up of the terminal.

The third timer is used to set a preset time period to determine whether the terminal is attacked.

In the first protection mode, when the working state of the first timer is the timing state, each time the wireless transceiver of the terminal is successfully woken up by the WUR, the AP updates the identification information of the WUR; When the state changes to the stop state, the AP switches the current protection mode of the terminal from the first protection mode to the second protection mode.

In the second protection mode, the AP receives the wake-up acknowledgement frame, and determines that the AP does not send the WUP to the WUR of the terminal within the preset time period, and the working state of the second timer is the timed state, and the AP considers that the terminal is continuously attacked. The AP switches the current protection mode of the terminal from the second protection mode to the first protection mode to update the WUR identification information. When the AP receives the wakeup acknowledgement frame, it determines that the AP does not send the WUP to the WUR of the terminal within the preset time period. And the working state of the second timer is a stop state, and the AP interacts with the terminal to complete the current round of communication normally.

Optionally, the AP performs the same protection mode setting on at least one terminal, or performs the same protection mode setting on at least two terminals.

In an example, the protection mode setting of the three terminals by the AP is taken as an example, and the setting result of the AP to the terminal protection mode may be as shown in the terminal protection mode table 1.

Table 1

终端terminal	保护模式Protection mode
终端1Terminal 1	第一保护模式First protection mode
终端2Terminal 2	第二保护模式Second protection mode
终端3Terminal 3	第一保护模式First protection mode

In Table 1, terminal 1 is set to operate in a first protection mode (current protection mode), terminal 2 is set to operate in a second protection mode, and terminal 3 is set to operate in a first protection mode. It can be understood that the AP can query the current protection mode of the terminal through the attribute information of the terminal. The attribute information of the terminal may be the identity information of the terminal or the wake-up receiver of the terminal. Identification information, and so on.

Optionally, according to actual needs of the user, the AP may set the duration of the timing state of the second timer to be shorter than the duration of the timing state of the first timer, and if the duration of the timing state of the second timer may be set to 1 hour, The duration of the timing state of the first timer can be set to 6 hours to prevent the wireless transceiver of the terminal from sleeping prematurely, and the AP and the terminal are not synchronized to update the WUR ID, that is, out of synchronization. In order to avoid the persistent attack and give the AP the ability to flexibly select the current protection mode of the terminal among different protection strengths, the AP can reasonably switch the current protection mode of the terminal between the first protection mode and the second protection mode. The functions of the first timer and the second timer can be implemented by a software program.

In the following, in the communication process, the attacker AP1 obtains the first identification information of the WUR in the terminal and sends the WUP to the WUR of the terminal; the AP associates a terminal as an example, and details the communication method between the AP and the terminal.

FIG. 3 is a signaling interaction diagram of a communication method according to an embodiment of the present invention. As shown in FIG. 3, the method may include:

Step 310: The AP receives a wake-up acknowledgement frame sent by the wireless transceiver of the terminal, where the wake-up acknowledgement frame may include first indication information (wake-up indication information), where the first indication information is used to indicate that the wireless transceiver of the terminal is awakened by the terminal. The receiver wakes up after receiving the wake-up frame.

The wakeup acknowledgement frame can be a control frame, a data frame, or a management frame. The first indication information may be identified by at least one bit in each of the foregoing frame structures.

Optionally, before step 310, step 308 is performed, and the AP or the attacker AP1 may send a wake-up frame to the terminal to wake up the terminal.

When the AP has a downlink message to send to the terminal, the AP sends a wake-up frame to the WUR of the terminal to wake up the wireless transceiver of the terminal. The wake-up frame WUP may include first identification information (original identification information) of the wake-up receiver, and the first identification information may be complete WUR identification information or partial WUR identification information, such as complete Medium Access Control (MAC). Address, or energy zone Partial address of the MAC address.

When the attacker AP1 monitors the first identification information of the terminal, the attacker AP1 sends a wake-up frame to the WUR of the terminal to wake up the wireless transceiver of the terminal, that is, the terminal is attacked by the attacker AP1.

Step 309, after receiving the wake-up frame, the WUR of the terminal sends a first trigger signal to the wireless transceiver of the terminal for waking up the wireless transceiver of the terminal. After waking up the wireless transceiver of the terminal, the WUR of the terminal goes to sleep.

Going back to step 310, further, if the AP receives the wake-up acknowledgement frame sent by the wireless transceiver of the terminal within the preset time period, the AP considers that the wireless transceiver of the terminal is successfully awake. If the AP does not receive the wake-up acknowledgement frame sent by the wireless transceiver of the terminal, the AP considers that the wireless transceiver of the terminal is attacked.

The manner in which the AP sets the preset time period may include, but is not limited to, a manner of setting a preset time period by using a third timer, for example, the AP may set the preset time period of the third timer from 50 ms to zero. Or increase from zero to 50 ms; or, by recording the time A of transmitting the wake-up frame and the time B of receiving the wake-up acknowledgement frame sent by the terminal, the manner of whether the difference between the time A and the time B is within the preset time period is obtained. It can be understood that the AP sends a wake-up frame to the terminal. If the AP does not receive the wake-up acknowledgement frame sent by the wireless transceiver of the terminal within the preset time period, the AP does not successfully wake up the wireless transceiver of the terminal.

In an example, the preset time period is set by using the third timer as an example. According to the actual design requirements of the user or the operator, different or the same preset time periods may be set for different terminals associated with the AP. If the AP wants to delay the wireless transceiver of the terminal after delaying for a period of time (such as delay of 300ms), the AP may set the preset time period of the third timer for the terminal to the remaining 30-0ms of the third timer (eg, from 300ms). The countdown starts from +50ms, the first 300ms is the delay time), or the third timer is between 300-350ms (positive counting from 0ms, the first 300ms is the delayed time). It can be understood that the AP can simultaneously wake up multiple terminals associated with the AP by setting a delay time for the preset time period.

Optionally, when the wakeup acknowledgement frame is a control frame, the wakeup acknowledgement frame may be an improved PS-Poll frame or a new control frame.

As shown in FIG. 4, the control frame includes a frame control (FC) field, an ID field of an ID value assigned by the AP for the wireless transceiver of the AP, a receive address (RA) field, and a transmit address (transmit address). , TA) domain, WUR identification information (may be WUR ID Index) domain and frame check sequence (FCS), wherein the ID domain and the WUR identification information field are optional.

In an example, when the wakeup acknowledgement frame is an improved PS-Poll frame (the ID field is optional), that is, the WUR identification information field is added in the PS-Poll frame, and the WUR identification information field is used to carry the second indication information. The second indication information may indicate complete or partial first identification information (such as a single user ID, multi-user ID or broadcast ID of the WUR) in the wake-up frame WUP, or location information indicating the first identification information in the wake-up frame WUP . When the WUR identification information field can contain 2 bits, different first identification information can be configured with different address information. For example, address 01 assigns a single user ID of WUR; address 10, assigns a first multi-user ID of WUR (one of multi-user IDs); address 11, assigns a first broadcast ID of WUR (one of multi-broadcast IDs).

In another example, when the wakeup acknowledgement frame is a new control frame, at least one indicator bit may be reserved in the FC domain to identify the first indication information. This method can include:

(1) indicating the first indication information in a subtype subfield of the FC domain. As shown in FIG. 5, when the type type subfield in the FC domain indicates that the frame is a control frame (that is, the type subfield value is set to B3B2 is 01), four sub-indicators are reserved in the subtype subtype subfield (0000). -0011), but in the 802.11ax standard, one of the four indicator bits reserved by the subtype subfield needs to be occupied by an indication bit, so that one of the remaining three indicator bits can be used in the subtype subfield to identify the An indication message. Where B2-B7 represents the bit

(2) indicating the first indication information in a control frame extension (control frame extension) field. As shown in FIG. 6, when the type subfield in the FC domain is indicated as a control frame (ie, a type subfield value) When set to 01), and the subtype subfield is 0110, the B11-B8 bits of the FC domain are control frame extension fields, and seven indicator bits (0000, 0001, 1011-1111) are reserved in the control frame extension field. Thus, the first indication information can be identified by one of seven indicator bits in the control frame extension field.

(3) indicating the first indication information in other reserved idle bits except the subtype field and the control frame extension field in the control frame. As shown in FIG. 7, the frame type is a control frame, and the subtype field value is not 0110 (ie, there is no control frame extension field), the protocol version field is used to indicate the protocol of the frame; the type field and the subtype are (subtype) field, used to jointly indicate the type of the frame; To DS field, indicating that the frame is a basic service set (BSS) sent to the routing server (DS); the From DS field indicates that the frame is The frame sent by the DS to the BSS; the more frag field is used to indicate whether the long frame is segmented, whether there are other frames, and the retry field is used for frame retransmission, and the receiving terminal utilizes The domain eliminates the retransmission frame; the power management domain, 1 indicates that the STA is in the power saving mode; 0 indicates that it is in the non-power saving mode; and the More Data field: 1 indicates that at least one data frame is to be sent. Protected frame: Indicates whether the frame body part contains data processed by the key set; the order field: 1 indicates whether the long frame segment transmission is strictly numbered. Left six indicator positions (B8-B11, B14-B15) It is an idle bit (the six indicator bits are set to zero by default), that is, there is no special meaning, so the first indication information can be identified by one of the six indication bits in B8-B11, B14-B15.

Optionally, when the wakeup acknowledgement frame is a data frame, the wakeup acknowledgement frame may be a new null data packet (NDP) frame.

Functionally, the NDP frame is similar to the PS-Poll frame to inform the terminal that it has awake, but structurally, the frame length of the NDP frame is shorter than the frame length of the PS-Poll frame, which can save transmission time, such as the 802.11ah protocol. The length of the NDP frame (NDP_1M PS-Poll) with the PS-Poll frame function of 1 MHz is 25 bits, the length of the NDP_2M PS-Poll with the bandwidth of 2 MHz is 37 bits, and the traditional PS-Poll frame is 160 bits, and the bandwidth is 20 MHz. .

As shown in FIG. 8, the data frame may include an NDP Frame Control (NDP FC Control) field, a short receiving address RA field, a short sending address TA field, and a WUR identification information field carrying indication information.

The NDP frame control field can be used to indicate the frame type of the WUR wakeup acknowledgement frame. The indication information in the WUR identification information field may indicate that the terminal is awake, wake up the complete or short first identification information in the frame WUP (such as the single user ID of the WUR, the first multi-user ID or the first broadcast ID), or indicate wake-up Location information of the first identification information in the frame WUP.

Optionally, when the wakeup acknowledgement frame is a management frame, for example, the wakeup acknowledgement frame may be a function frame, and the function frame is a management subtype frame for requesting the AP to take necessary actions, such as a channel switch announcement.

As shown in FIG. 9, the management frame may include an FC domain, a Duration field, a Receive Address field (Address1), a Send Address (Address2) field, a Receiver Address (Address3) field, and a Sequence Control (Sequence Control) field. HT Control (HT Control) field, Frame Body field and Frame Check (FCS). The Duration field is used to schedule the time occupied by the channel. The Address3 field can be the receiving address of the final recipient after the transmitted message is forwarded multiple times over Ethernet. The Sequence Control field is used to reassemble frame fragments or discard duplicate frames. The Frame Body field is used to carry specific types and interpretation information of some frames, such as channel switching announcements. The HT Control field is used to indicate some control information. It should be noted that the frame format of the management frame is independent of the subtype of the frame, and the address field field does not change with the subtype of the frame. When the subtype of the frame changes, only the Frame Body field changes.

As shown in FIG. 9, as a management frame of the wakeup acknowledgement frame, the Frame Body field includes at least two parts, a Category field and a WUR ID Index field. The Category field is used to indicate that the management frame is a wake-up acknowledgement frame. The WUR ID index field is used to carry the second indication information, where the second indication information may indicate complete or partial first identification information (such as a single user ID, multi-user ID or broadcast ID of the WUR) in the wake-up frame WUP, or The location information of the first identification information in the wakeup frame WUP.

It can be understood that if the terminal can only be awakened by the WUR through a unique first identifier, the frame length of the WUR ID Index field in the wakeup acknowledgement frame can be 0 bits, where the AP can The WUR wakeup confirmation frame is judged to have a WUR ID Index field by the received WUR wakeup confirmation frame length.

Optionally, if the wakeup acknowledgement frame is a function frame in the management frame, the first indication information in the Category field may be used to determine whether the management frame has a WUR ID Index field.

Step 320: The AP sends the first message or the second message to the terminal according to the first indication information.

The first message is a data frame, and the second message may be a data frame, a control frame, or a management frame.

Optionally, before performing step 320, the AP determines, according to the first indication information, whether the awake frame is sent to the terminal within a preset time period.

When the AP determines, according to the first indication information, that the awake frame has been sent to the terminal within the preset time period, that is, the wireless transceiver of the terminal is normally awake by the AP, the AP sends a first message to the terminal, where the first message may include The first data information is used to implement normal communication between the terminal and the AP.

When the AP determines, according to the first indication information, that the awake frame is not sent to the terminal within the preset time period, that is, the wireless transceiver of the terminal is awake by mistake or the WUR is attacked by the attacker AP1, and the AP sends and receives the awake to the terminal. And sending the second message, the second message may include the second identifier information of the wake-up receiver, where the second identifier information is obtained by the AP by updating the first identifier information, so as to prevent the WUR of the terminal from being continuously attacked and continuously waking up the terminal. The wireless transceiver causes the energy of the terminal to be quickly consumed, and achieves normal communication between the terminal and the AP.

Optionally, before the AP sends the second message to the wireless transceiver of the terminal, the AP performs encryption processing on the second message. The AP encryption method may include:

(1) The AP adopts a process similar to updating the Group Temporal Key (GTK) in 802.11. The AP sends an improved message of the Extensible Authentication Protocol over LAN (EAPOL) key to the terminal.

The message may include an encrypted data portion (ie, second identification information) and Message Integrity Code (MIC) information for verifying the identity of the sender (eg, AP).

(2) The AP defines a new encrypted management frame that is similar to a functional frame. The management frame carrier can carry MIC and some other encrypted information (such as second identification information).

(3) The AP uses the encrypted data frame, and the data part carries the second identification information.

Optionally, the second message may further include indication information, such as a key, for waking up the second identifier information of the receiver, to indicate that the terminal uses the same algorithm to calculate the AP and the terminal by using the key and the first identifier information. The second identification information used by the WUR for the next communication.

Optionally, if the AP needs to transmit other information (such as a data frame carrying the first data information) in addition to the second identifier information, the AP sends the second message including the second identifier information to the terminal, and then transmits the subsequent message. (such as data frames). In this way, the transmission of the subsequent message ensures that the wireless transceiver of the terminal is awake and has received the second message carrying the second identification information, so as to prevent the AP and the terminal from updating the WUR identification information due to the wireless transceiver of the terminal entering the sleep state. , that is, the second identification information.

Step 330: The terminal sends an acknowledgement message to the AP.

If the wireless transceiver of the terminal receives the first message, the terminal sends a first acknowledgement message (a confirmation message for the first message) to the AP. If the wireless transceiver of the terminal receives the second message, the terminal sends a second acknowledgement message (a confirmation message for the second message) to the AP.

The first acknowledgement message and the second acknowledgement message may be a control frame (such as ACK), a data frame (such as data+ACK, etc.), or a management frame.

It can be understood that the first confirmation message and the second confirmation message may be the same or different.

When the AP determines that the WUR has sent a wake-up frame to the WUR of the terminal, that is, the wireless transceiver of the terminal is awake by the AP, the first acknowledgement message is used to instruct the terminal to receive the first data information. After all the messages between the AP and the terminal are transmitted, the wireless transceiver of the terminal can wait for a period of time (for example, 100 ms) to enter the sleep state. During this time, the terminal can wait for the third acknowledgement message sent by the AP, the third acknowledgement message. It is used to indicate that the AP receives the foregoing first acknowledgement message sent by the terminal. When the wireless transceiver of the terminal is going to sleep, the wireless transceiver sends a second trigger signal to the WUR for waking up the WUR. This round of communication is completed.

When the AP determines that the wake-up frame is not sent to the WUR of the terminal within a preset time period, that is, the wireless transceiver of the terminal is awake by mistake or is attacked by the attacker AP1, the second acknowledgement message may include the terminal. The authentication information (such as MIC) enables the AP to determine the attribute information of the terminal, such as the identity information of the terminal, according to the authentication information, so that the AP communicates with the terminal.

It should be noted that when the AP updates the GTK process in the improved 802.11 protocol, the second acknowledgement message may be the improved EAPOL_key response frame. The second confirmation message may include MIC information of the terminal. The second acknowledgement message may also be a frame of the improved Action frame, and the frame body may carry the MIC information.

After all the messages between the AP and the terminal are transmitted, the wireless transceiver of the terminal can wait for a period of time (for example, 100 ms) to enter the sleep state. During this time, the terminal can wait for the third acknowledgement message sent by the AP, the third acknowledgement message. It is used to indicate that the AP receives the foregoing acknowledgement message sent by the terminal. By pushing the wireless transceiver of the terminal to enter the sleep time, the terminal and the AP can confirm each other to obtain the second identification information, thereby reducing the risk of losing synchronization. When the wireless transceiver of the terminal is going to sleep, the wireless transceiver sends a second trigger signal to the WUR for waking up the WUR, and the AP and the terminal also update the corresponding WUR identification information. This round of communication is completed.

Optionally, if the terminal has the second data information that needs to be transmitted to the AP, the first acknowledgement message and the second acknowledgement message may further include the second data information.

Each step in the foregoing method implements the first indication information that the wireless receiver carrying the terminal in the wakeup acknowledgement frame sent by the WUR wakes up to the AP after the wireless receiver of the terminal is awake by the WUR is WUX awake, so that the AP sends the WUP according to whether the WUP has been sent before. It is determined whether the WUR is attacked, and whether to update the WUR ID, thereby effectively reducing the waste of the listening channel when the terminal is idle, and ensuring the communication security of the terminal by updating the WUR ID.

Further, after the AP receives the wakeup acknowledgement frame sent by the terminal, the AP determines the current protection mode of the terminal according to the wakeup acknowledgement frame. The wakeup acknowledgement frame may include attribute information of the terminal, such as address information of the terminal.

Optionally, the AP may obtain the current protection mode of the terminal from the protection mode table of the terminal according to the address information of the terminal, that is, the current terminal works in the first protection mode or in the second protection mode.

In one example, the AP identifies the length of time that the terminal has been active in the current protection mode and the number of times the attack was attacked within that duration. That is, the AP identifies whether the duration of the WUR that has not been attacked exceeds the first duration for the terminal operating in the first protection mode; or, the AP operates the terminal in the second protection mode, and the WUR is in the Whether the number of attacks received within two hours exceeds the first integer for identification. The AP switches the current protection mode of the terminal between the at least two protection modes according to the identification result, and the at least two protection modes include a first protection mode and a second protection mode.

When the terminal is in the first protection mode, and the duration of the WUR of the terminal is not attacked for more than the first duration, the AP switches the current protection mode of the terminal from the first protection mode to the second protection mode to avoid being in the first time for a long time. Protect the mode with more overhead and risk. Subsequent communications will operate in the first protection mode. This round of communication ends when all message interactions are completed.

When the terminal is in the first protection mode, and the duration of the terminal's WUR is not exceeded, the AP updates the WUR in the terminal after receiving the wake-up acknowledgement frame, that is, after the terminal is woken up. An identification information. This round of communication ends when all message interactions are completed. The process of updating the first identifier information by the AP may be performed when the AP associates with the terminal, and the AP sends a key to the wireless transceiver of the terminal, and the AP and the terminal use the same algorithm to pass the key and the current information (such as the current communication). The FAC or FCS used by the WUR calculates the new FAC information used by the AP and the WUR for the next communication. After the communication between the AP and the wireless transceiver is successfully completed, the AP and the terminal synchronize the FAC information in the WUR. The AP can also take steps. The manner in which the encrypted second message is sent to the terminal in 320.

When the terminal is in the second protection mode, and the number of times the WUR of the terminal is attacked in the second time period reaches at least the first integer, the AP replaces the first identification information of the WUR, and switches the current protection mode of the terminal from the second protection mode to The first protection mode. That is to say, the communication after the terminal will operate in the first protection mode. In the first protection mode, each time the WUR successfully wakes up the wireless transceiver of the terminal, the AP updates the identification information of the WUR. End this round of communication and wait for the next round of communication. It should be noted that the probability of a false wake-up occurring continuously or repeatedly in the second time period is extremely small. Therefore, if one or more APs have not sent the WUP in the second time period, the wireless transceiver of the terminal is used by the terminal WUR. In the case of waking up, the AP considers that the WUR of the terminal is subjected to a persistent attack, and the AP switches the current protection mode of the terminal from the second protection mode to the first protection mode.

When the terminal is in the second protection mode, the AP determines that the wake-up frame is not sent to the terminal within the preset time, and the number of times the WUR of the terminal is attacked within the second time period does not reach the first integer, the AP determines that the WUR of the terminal is attacked. Update the WUR identification information without changing the protection mode of the terminal. The first integer here is a positive integer.

It should be noted that the AP determines that the current protection mode of the terminal is not immediately switched from the second protection mode to the first protection mode after the WUR is attacked, in order to avoid false wake-up caused by a small probability. That is to say, if the terminal is occasionally woken up by mistake for a period of time (the criterion is that the wireless transceiver of the terminal is attacked less than the first integer number within the second time period), the AP does not switch the protection mode to avoid false wake-up.

When the terminal is in the second protection mode, and the AP determines that the awake frame is sent to the WUR of the terminal within the preset time, the AP sends a first message to the terminal, where the first message may include the first data information to implement the connection between the terminal and the AP. Normal communication.

In another example, the AP identifies the operating state of the timer in the current protected mode. That is, the AP identifies the working state of the first timer in the first protection mode; or, the AP identifies the working state of the second timer in the second protection mode. The AP switches the current protection mode of the terminal according to the recognition result of the timer state.

When the terminal is in the first protection mode, and the working state of the first timer is the stop state, the AP switches the current protection mode of the terminal from the first protection mode to the second protection mode to avoid being in the first protection mode for a long time. It creates more overhead and risk. Subsequent communications will operate in the first protection mode. This round of communication ends when all message interactions are completed.

When the terminal is in the first protection mode, and the working state of the first timer is the timed state, the AP updates the WUR of the terminal every time the AP receives the wakeup acknowledgement frame, that is, after the wireless transceiver of the terminal is woken up. An identification information. This round of communication ends when all message interactions are completed. The process of updating the first identifier information may be performed when the AP associates with the terminal, and the AP sends a key to the terminal. The wireless transceiver, the AP and the terminal use the same algorithm to calculate the new FAC information used by the AP and the WUR for the next communication by the key and the current information (such as the FAC or FCS used in the communication WUR). After the communication with the wireless transceiver is successfully completed, the AP synchronizes with the terminal to update the FAC information in the WUR. The method of sending the encrypted second message to the terminal in step 320 may also be adopted.

When the terminal is in the second protection mode, and the AP determines that the wake-up frame is not sent to the terminal within the preset time, and the working state of the second timer is the timed state, the AP switches the current protection mode of the terminal from the second protection mode to the first A protection mode, that is, the AP turns off the second timer, starts the first timer, and sets the duration of the timing state. That is to say, the subsequent communication will operate in the first protection mode. Before the first timer expires, the AP updates the WUR identification information each time the WUR successfully wakes up the wireless transceiver. End this round of communication and wait for the next round of communication.

It should be noted that the probability of a false wake-up occurring continuously or repeatedly in the timed state of the second timer is extremely small, so that the AP does not transmit the WUP again during the time period, but the wireless transceiver of the terminal is the WUR of the terminal. In the case of waking up, the AP considers that the terminal is subjected to a persistent attack, and the AP switches the current protection mode of the terminal to the first protection mode. The first timer can set a longer timing state duration, so that the attacker AP1 is allowed to leave in the timing state of the first timer, and avoid switching the current protection mode of the terminal back to the second protection mode in a short time.

When the terminal is in the second protection mode, the AP determines that the wake-up frame is not sent to the terminal within the preset time, and when the working state of the second timer is the stop state, the AP starts the second timer and sets the duration of the timed state. Complete communication of all messages and wait for the next round of communication.

It should be noted that the AP determines that the current protection mode of the terminal is not immediately switched to the first protection mode after the WUR is attacked, in order to avoid false triggering caused by a small probability. That is to say, if the terminal is attacked for the first time (the criterion is that there is no second timer being counted), the AP does not switch the current protection mode of the terminal to avoid false triggering.

When the terminal is in the second protection mode, and the AP determines that the awake frame is sent to the terminal within the preset time, the AP sends a first message to the terminal, where the first message may include the first data information, so as to implement normal communication between the terminal and the AP. .

FIG. 10 is a flowchart of a communication method according to an embodiment of the present invention. As shown in FIG. 10, the method includes:

Step 1001: The AP or the attacker AP1 sends a wake-up frame to the terminal to successfully wake up the terminal.

The AP or the attacker AP1 sends a wake-up frame to the WUR of the terminal, and successfully wakes up the wireless transceiver of the terminal.

Step 1002: The AP receives a wakeup acknowledgement frame sent by the terminal.

The AP receives the wake-up acknowledgement frame sent by the wireless transceiver of the terminal.

Step 1003: The AP determines a current protection mode of the terminal according to the wakeup acknowledgement frame.

If the AP determines that the current protection mode of the terminal is the first protection mode, step 1004 is performed;

If the AP determines that the current protection mode of the terminal is the second protection mode, step 1006 is performed.

Step 1004: The current protection mode of the terminal is the first protection mode, and the AP updates the identifier information of the terminal WUR, and then step 1005 is performed.

Optionally, during the execution of step 1004, data transmission may be performed between the AP and the terminal.

Step 1005: End the current round communication, and wait for the next AP or the attacker AP1 to send a wake-up frame to the WUR of the terminal and successfully wake up the terminal, and return to step 1001.

Step 1006: The current protection mode of the terminal is a second protection mode, and the AP determines whether the WUR of the terminal is attacked.

If the AP determines that the WUR of the terminal is attacked, step 1008 is performed;

If the AP determines that the WUR of the terminal is not attacked, step 1007 is performed.

Step 1007: The AP and the terminal transmit data, and then step 1005 is performed.

Step 1008: The AP updates the identifier information of the terminal WUR, and then performs step 1005.

Optionally, during the execution of step 1007, data transmission may be performed between the AP and the terminal.

FIG. 11 is a flowchart of state switching of a protection mode according to an embodiment of the present invention. As shown in FIG. 11, the method includes:

Step 1101: The terminal is in the first protection mode.

Step 1102: When the duration of the terminal that is not erroneously awake or not attacked exceeds the first duration, the AP switches the current protection mode of the terminal from the first protection mode to the second protection mode, and proceeds to step 1103.

Step 1103: The terminal is in the second protection mode.

Step 1104: When the terminal is subjected to at least a first integer attack or a false wake-up within the second duration, the AP switches the current protection mode of the terminal from the second protection mode to the first protection mode, and proceeds to step 1101.

FIG. 12 is a flowchart of another communication method according to an embodiment of the present invention. As shown in FIG. 12, the method includes:

Step 1201: The AP or the attacker AP1 sends a wake-up frame to the WUR of the terminal.

Step 1202: The AP receives a wake-up acknowledgement frame sent by the terminal wireless transceiver, and determines a current protection mode of the terminal.

Step 1203: When the current protection mode of the terminal is the first protection mode, the AP determines the working state of the first timer at this time.

Step 1204: If the first timer is in the stop state, after the AP switches the current protection mode of the terminal from the first protection mode to the second protection mode, step 1205 is performed.

Step 1205: End the current round communication, and the AP waits to receive the wakeup acknowledgement frame sent by the terminal again. After receiving the new wakeup acknowledgement frame, the process returns to step 1201.

Step 1206: After the first timer is in the timed state, the AP updates the identifier information of the WUR, and then performs step 1205.

Step 1207: When the current protection mode of the terminal is the second protection mode, the AP determines whether the terminal is attacked at this time.

Step 1208: If the AP determines that the terminal is not awake by mistake or is not attacked, the AP performs step 1205.

Step 1209: After the AP determines that the terminal is attacked, the AP updates the WUR identification information, and then performs step 1010.

Step 1210: The AP determines the working state of the second timer at this time.

Step 1211: If the second timer is in the stop state, after the AP restarts the second timer, step 1205 is performed.

Step 1212: If the second timer is in the counting state, after the AP switches the current protection mode of the terminal from the second protection mode to the first protection mode, step 1205 is performed.

In the communication method provided by the embodiment of the present invention, the AP receives the wake-up acknowledgement frame that is sent by the terminal and includes the first indication information, to indicate that the terminal is woken up by the wake-up receiver of the terminal. When the AP determines, according to the first indication information, that the awake frame is not sent to the terminal within the preset time, the AP sends a second message, that is, the updated identifier information, that includes the second identifier information of the waking receiver to the terminal. The AP receives the second confirmation message that is sent by the terminal, including the identity verification information of the terminal, and then the AP determines the attribute information of the terminal according to the identity verification information; the AP communicates with the terminal according to the attribute information of the terminal. At the same time, according to whether the WUR of the terminal is attacked, the current protection mode is switched. To avoid persistent attacks by the attacker AP1. This method improves the AP's flexible switching policy in different protection modes to reduce the additional power consumption of the terminal and reduce the signaling overhead when the WUR is not attacked in the terminal.

Corresponding to the foregoing method, an embodiment of the present invention provides a network device.

FIG. 13 is a network device according to an embodiment of the present invention. As shown in FIG. 13, the network device, such as an access point AP, may include: a receiving unit 1301, a sending unit 1302, and a processing unit 1303.

The receiving unit 1301 is configured to receive a wake-up acknowledgement frame sent by the wireless transceiver unit of the terminal, where the wake-up acknowledgement frame includes wake-up indication information, where the wake-up indication information is used to indicate that the wireless transceiver unit of the terminal is after receiving the wake-up frame by the wake-up receiving unit of the terminal The wake-up frame includes the first identifier information of the wake-up receiving unit, where the first identifier information is identifier information currently used by the wake-up receiving unit.

The processing unit 1303 is configured to determine, according to the wakeup indication information, that the wakeup frame has been sent to the terminal within a preset time period.

The sending unit 1302 is configured to: when the processing unit 1303 determines that the terminal has been sent within the preset time period When the frame is awakened, the first message is sent to the terminal, where the first message is a message that the access point has determined to send to the terminal when sending the wake-up frame, such as data information, for communicating with the terminal; or

The processing unit 1303 is further configured to determine, according to the wakeup indication information, that the wakeup frame is not sent to the terminal within the preset time period.

The sending unit 1302 is further configured to: when the processing unit 1303 determines that the wake-up frame is not sent to the terminal within the preset time period, send the second message to the terminal. The second message includes the second identification information of the awake receiving unit of the terminal or the indication information of the second identification information, for the terminal to update the identifier information currently used by the awake receiving unit according to the indication information of the second identification information or the second identification information.

Optionally, before the sending unit 1302 sends the second message to the terminal, the processing unit 1303 is further configured to perform encryption processing on the second message.

Optionally, after the sending unit 1302 sends the second message to the terminal,

The receiving unit 1301 is further configured to receive an acknowledgment message sent by the terminal for the second message, where the acknowledgment message of the second message is that the terminal updates the identifier currently used by the awake receiving unit according to the indication information of the second identifier information or the second identifier information. After the information is sent, the confirmation message of the second message includes the identity verification information of the terminal.

The processing unit 1303 is further configured to determine, according to the identity verification information of the terminal, attribute information of the terminal, and communicate with the AP according to the attribute information of the terminal.

Optionally, the wakeup acknowledgement frame may further include attribute information of the terminal;

After the receiving unit 1301 receives the wake-up acknowledgement frame sent by the wireless transceiver unit of the terminal,

The processing unit 1303 is further configured to determine a current protection mode of the terminal according to the attribute information of the terminal.

Identifying the duration of the terminal working in the current protection mode, and switching the current protection mode of the terminal between the at least two protection modes according to the recognition result, where the at least two protection modes include the first protection mode and the second protection mode .

Optionally, the current protection mode of the terminal may be the first protection mode or the second protection mode.

The processing unit 1303 is specifically configured to identify the first duration in which the terminal works in the first protection mode. Alternatively, the second duration and the number of attacks in which the terminal works in the second protection mode are identified.

The attacking of the terminal means that the receiving unit 1301 receives the wakeup acknowledgement message sent by the access point, but the sending unit does not send the wakeup frame to the access point within a preset time period.

After the processing unit 1303 determines, according to the wakeup indication information, that the wakeup frame has been sent to the terminal within the preset time period,

When the processing unit 1303 recognizes that the time when the terminal works in the first protection mode exceeds the first duration, and the second device is not attacked within the first duration, the processing unit 1303 sets the current protection mode of the terminal from Switching the first protection mode to the second protection mode; or,

When the processing unit 1303 recognizes that the time when the terminal works in the second protection mode does not exceed the second duration, and the number of times the terminal is attacked is not less than the attack threshold, the processing unit 1303 switches the current protection mode of the terminal from the second protection mode. Go to the first protection mode.

The functions of the function modules of the access point in the embodiment of the present invention can be implemented by using the various method steps provided in FIG. 3 . Therefore, the specific working process and beneficial effects of the access point provided by the present invention are not described herein.

Corresponding to the foregoing method, an embodiment of the present invention provides a terminal.

FIG. 14 is a terminal according to an embodiment of the present invention. As shown in FIG. 14, the terminal may include: a wake-up receiving unit 1401, a processing unit 1402, and a wireless transceiver unit 1403.

The wakeup receiving unit 1401 is configured to receive a wakeup frame.

The processing unit 1402 is configured to wake up the wireless transceiver unit 1403 after receiving the wake-up frame, where the wake-up frame includes the first identifier information of the wake-up receiving unit 1401, where the first identifier information is identifier information currently used by the wake-up receiving unit 1401.

The wireless transceiver unit 1403 is configured to send a wake-up acknowledgement frame to the AP, where the wake-up acknowledgement frame includes wake-up indication information, and the wake-up indication information is used to indicate that the wireless transceiver unit 1403 is wake-up by the wake-up receiving unit 1401 of the terminal after receiving the wake-up frame.

The wireless transceiver unit 1403 is further configured to receive the first message sent by the AP, where the first message is that the AP determines, after receiving the awake indication information, that the AP sends the awake receiving unit 1401 within a preset time period. After the wake-up frame is sent, the first message is a message that the AP has determined to send to the wireless transceiver unit 1403 when the wake-up frame is sent. or,

And receiving, by the AP, the second message, after the AP receives the awake indication information, determining that the AP does not send the awake frame to the awake receiving unit 1401 within a preset time period, where the second message includes the awake receiving unit 1401. Two indication information or indication information of the second identification information.

The processing unit 1402 is further configured to update the identifier currently used by the awake receiving unit 1401 according to the second identification information or the indication information of the second identification information.

Optionally, the second message is sent by the AP after being encrypted.

Optionally, after the processing unit 1402 updates the identifier information currently used by the wake receiving unit 1401 according to the second identifier information or the indication information of the second identifier information,

The wireless transceiver unit 1403 is further configured to send an acknowledgement message of the second message to the AP, where the acknowledgement message includes the identity verification information of the terminal, so that the AP determines the attribute information of the terminal according to the identity verification information, and then communicates with the AP.

Optionally, the wake-up acknowledgement frame further includes attribute information of the terminal, so that the AP determines the current protection mode of the terminal according to the attribute information of the terminal, and identifies the duration of the terminal working in the current protection mode, and according to the recognition result, the current The protection mode switches between at least two protection modes, the at least two protection modes including a first protection mode and a second protection mode.

It can be understood that the wireless transceiver unit 1403 can include a receiving unit and a transmitting unit.

The functions of the functional modules of the terminal in the embodiment of the present invention can be implemented by using the various method steps provided in FIG. 3 . Therefore, the specific working process and beneficial effects of the terminal provided by the present invention are not described herein.

Corresponding to the above method, the embodiment of the present invention further provides another network device.

FIG. 15 is another network device according to an embodiment of the present invention. As shown in FIG. 15, the network device, such as an access point, may include a wireless transceiver 1510 (such as an 802.11 primary transceiver module), a processor 1520, a memory 1530, and Transceiver antenna 1540, wireless transceiver 1510 has a receiver and a transmitter The function. Transceiver antenna 1540 can also be considered as part of wireless transceiver 1510, in which case transceiver antenna 1540 may not be depicted in FIG.

The processor 1520 stores the instruction message and the data message to be sent through the wireless transceiver 1510 in the memory 1530, and after the processor 1520 prepares the instruction or data to be transmitted, sends a notification to the wireless transceiver 1510 to indicate that it is ready The transmitted data, finally the wireless transceiver 1510 retrieves the command or data to be transmitted from the memory 1530 and transmits it through the transceiver antenna 1540. The wireless transceiver 1510 needs to modulate the content of the message to be sent into an electrical signal to be transmitted from the transceiver antenna 1540 in the form of electromagnetic waves, and the wireless transceiver 1510 needs to receive the electromagnetic wave signal through the transmitting and receiving antenna 1540 and analyze the other signals therefrom. The message that the device sends to itself.

The processor 1520 can be a central processing unit (CPU), or a combination of a CPU and a hardware chip. The hardware chip may be an application-specific integrated circuit (ASIC), a programmable logic device (PLD), or a combination thereof. The PLD may be a complex programmable logic device (CPLD), a field-programmable gate array (FPGA), a general array logic (GAL), or any combination thereof.

The memory 1530 may include a volatile memory such as a random-access memory (RAM); the memory 1530 may also include a non-volatile memory such as a read-only memory (read) -only memory, ROM), flash memory, hard disk drive (HDD) or solid-state drive (SSD). The memory 1530 may also include a combination of the above types of memories.

In conjunction with the method shown in FIG. 3, the working process of each functional device of the access point may include:

The wireless transceiver 1510 (which can implement the functions of the receiver and the transmitter described above) is configured to receive a wake-up acknowledgement frame sent by the wireless transceiver of the terminal, and the wake-up acknowledgement frame includes wake-up indication information. The The wakeup indication information is used to indicate that the wireless transceiver of the terminal is awake by the wakeup receiver of the terminal after receiving the wakeup frame, and the wakeup frame includes the first identifier information of the wakeup receiver, and the first identifier information is the identifier currently used by the wakeup receiver. information.

The processor 1520 is configured to determine, according to the wakeup indication information, that the wakeup frame has been sent to the terminal within a preset time period.

The wireless transceiver 1510 is further configured to: when the processor determines that the wake-up frame has been sent to the terminal within the preset time period, send the first message to the terminal, where the first message is that the network device determines to send to the terminal when sending the wake-up frame Message.

The processor 1520 is further configured to determine, according to the wakeup indication information, that the wakeup frame is not sent to the terminal within the preset time period.

The wireless transceiver 1510 is further configured to: when the processor 1520 determines that the wakeup frame is not sent to the terminal within the preset time period, send the second message to the terminal, where the second message includes the second identifier information or the second identifier of the wakeup receiver. The indication information of the information is used by the terminal to update the identifier information currently used by the wake-up receiver according to the indication information of the second identifier information or the second identifier information.

Optionally, the access point may also include a transmitter WUR 1550 (not shown in Figure 15) dedicated to transmitting the WUP. The WUR 1550 is triggered to transmit a WUP by the wireless transceiver 1510 or the processor 1520 when there is data transmission. The WUP is transmitted by the transceiver antenna 1540. The wireless transceiver 1510 and the WUR 1550 can operate in the same frequency band, and the transceiver antenna 1540 can include the same antenna. The wireless transceiver 1510 and the WUR 1550 can also operate in a non-band, and the transceiver antenna 1540 includes multiple antennas suitable for different frequency bands, that is, the antennas used by the wireless transceiver 1510 and the WUR 1550 are different.

It should be noted that, due to the implementation manner and the beneficial effects of the solutions of the devices in the network device in the foregoing embodiments, reference may be made to the method embodiments and the beneficial effects shown in FIG. 3, and thus details are not described herein.

FIG. 16 is another terminal according to an embodiment of the present invention. As shown in FIG. 16, the terminal includes at least a wake-up receiver 1610, a processor 1620, and a wireless transceiver 1630 (such as an 802.11 main transceiver module). Memory 1640 and transceiver antenna 1650.

The wireless transceiver 1630 retrieves an instruction message or data message received by the wireless transceiver 1630 from the memory 1640 and processes it to obtain an instruction or data. The wake-up receiver 1610 receives the wake-up frame sent by the other device through the transceiver antenna 1650. When the wake-up receiver 1610 receives the wake-up frame sent to itself, it sends a trigger signal to the processor 1620 to cause the processor 1620 to trigger the wireless transceiver 1630. To wake up the wireless transceiver 1630. The wireless transceiver 1630 needs to modulate the content of the message to be sent into an electrical signal to be transmitted from the transmitting and receiving antenna 1650 in the form of electromagnetic waves, and the wireless transceiver 1630 needs to receive the electromagnetic wave signal through the transmitting and receiving antenna 1650 and parse out the other signal. The message that the device sends to itself.

The processor 1620 can be a CPU, or a combination of a CPU and a hardware chip. The above hardware chip may be an ASIC, a PLD, or a combination thereof. The above PLD may be a CPLD, an FPGA, a GAL, or any combination thereof.

Memory 1640 can include volatile memory, such as random access memory; memory 1640 can also include non-volatile memory, such as read only memory, flash memory, hard disk or solid state hard disk. The memory 1640 may also include a combination of the above types of memories.

In conjunction with the method shown in FIG. 3, the working process of each functional device of the terminal may include:

The receiver 1610 is woken up for receiving a wake-up frame.

The processor 1620 is configured to wake up the wireless transceiver 1630 of the terminal after receiving the wake-up frame, where the wake-up frame includes first identifier information of the wake-up receiver, where the first identifier information is identifier information currently used by the wake-up receiver.

The wireless transceiver 1630 is configured to send a wakeup acknowledgement frame to the AP, where the wakeup acknowledgement frame includes wakeup indication information, and the wakeup indication information is used to indicate that the wireless transceiver 1630 is the wakeup receiver 1610 to wake up after receiving the wakeup frame.

The wireless transceiver 1630 is further configured to receive the first message sent by the AP, where the first message is that the AP determines that the AP sends the wakeup to the wakeup receiver 1610 within a preset time period after receiving the wakeup indication information. After the frame is sent, the first message is a message that the AP has determined to send to the wireless transceiver 1630 when sending the wake-up frame; or

The wireless transceiver 1630 is further configured to receive a second message sent by the AP, where the second message is that after the AP receives the wake-up indication information, the AP determines that the AP does not send the wake-up frame to the wake-up receiver 1610 after the preset time period, and the second message is sent. The message includes indication information of the second identification information or the second identification information of the wake-up receiver 1610, and the indication information of the second identification information or the second identification information;

The processor 1620 updates the identifier currently used by the wake receiver 1610 according to the second identification information or the second identification information indication information.

It should be noted that the wireless transceiver 1630 and the wake-up receiver 1610 can operate in the same frequency band, and the transceiver antenna 1650 includes one antenna. The wireless transceiver 1630 and the wake-up receiver 1610 can also operate in different frequency bands. The transceiver antenna 1650 can include multiple antennas suitable for different frequency bands, and the antennas used by the wireless transceiver 1630 and the wake-up receiver 1610 are different.

For the implementation manners and the beneficial effects of the solutions of the terminals in the foregoing embodiments, reference may be made to the method embodiments and the beneficial effects shown in FIG. 3, and thus details are not described herein.

A person skilled in the art should further appreciate that the elements and algorithm steps of the various examples described in connection with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both, in order to clearly illustrate hardware and software. Interchangeability, the composition and steps of the various examples have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods for implementing the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present invention.

It will be understood by those skilled in the art that all or part of the steps of implementing the above embodiments may be performed by a program, and the program may be stored in a computer readable storage medium, which is non-transitory ( English: non-transitory) media, such as random access memory, read-only memory, flash memory, hard disk, solid state disk, tape (English: Magnetic tape), floppy disk (English: floppy disk), optical disc (English: optical disc) and any combination thereof.

The above is only a preferred embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or within the technical scope disclosed by the present invention. Alternatives are intended to be covered by the scope of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

A communication method, characterized in that the method comprises:

Receiving, by the first device, a wake-up acknowledgement frame sent by the wireless transceiver of the second device, where the wake-up acknowledgement frame includes wake-up indication information, where the wake-up indication information is used to indicate that the wireless transceiver of the second device is the second The wake-up receiver of the device wakes up after receiving the wake-up frame, where the wake-up frame includes first identifier information of the wake-up receiver, where the first identifier information is identifier information currently used by the wake-up receiver;

When the first device determines, according to the awake indication information, that the awake frame has been sent to the second device within a preset time period, the first device sends a first message to the second device. The first message is a message that the first device has determined to send to the second device when sending the wake-up frame;

When the first device determines, according to the awake indication information, that the awake frame is not sent to the second device within a preset time period, the first device sends a second message to the second device, The second message includes the second identifier information of the wake-up receiver or the indication information of the second identifier information, where the second device is used according to the second identifier information or the second identifier information. The indication information updates the identification information currently used by the wake-up receiver.
The method according to claim 1, wherein before the sending, by the first device, the second message to the second device, the method further comprises:

The first device performs encryption processing on the second message.
The method according to claim 1 or 2, wherein after the first device sends the second message to the second device, the method further includes:

Receiving, by the first device, an acknowledgement message of the second message sent by the second device, where the confirmation message of the second message is that the second device is configured according to the second identifier information or the second identifier information The indication information is sent after the identifier information currently used by the wake-up receiver is updated, and the confirmation message includes the identity verification information of the second device;

Determining, by the first device, the second device according to the identity verification information of the second device Attribute information

The first device communicates with the second device according to the attribute information of the second device.
The method according to claim 1 or 2, wherein the wake-up acknowledgement frame further includes attribute information of the second device;

After the first device receives the wake-up acknowledgement frame sent by the wireless transceiver of the second device, the method further includes:

Determining, by the first device, a current protection mode of the second device according to the attribute information of the second device;

Determining, by the first device, a duration of operation of the second device in the current protection mode;

And the first device switches between the at least two protection modes according to the recognition result, where the at least two protection modes include a first protection mode and a second protection mode.
The method according to claim 4, wherein the determining, by the first device, the duration of the second device operating in the current protection mode, specifically includes:

After the first device determines that the current protection mode of the second device is the first protection mode, the first protection mode is that each time the wireless transceiver of the second device is received by the second device After the device wakes up, the first device updates a mode of the identifier information of the wake-up receiver;

Determining, by the first device, whether the second device is attacked during the first duration of the first protection mode;

The second device is attacked by the first device, and the first device receives the wakeup confirmation message sent by the second device, but the first device does not go to the second within a preset time period. The device sends the wake-up frame;

After the first device determines, according to the awake indication information, that the awake frame has been sent to the second device within a preset time period, the first device performs the current protection mode according to the recognition result. Switching, specifically includes:

When the first device recognizes that the second device is working in the first protection mode When the first duration is exceeded, and the second device is not attacked within the first duration, the first device switches the current protection mode of the second device from the first protection mode. To the second protection mode.
The method according to claim 4, wherein the determining, by the first device, the duration of the second device operating in the current protection mode, specifically includes:

After the first device determines that the current protection mode of the second device is the second protection mode, the second protection mode is that the first device receives the wake-up confirmation sent by the wireless transceiver of the second device. a frame, and determining, when the first device does not send a wake-up frame to the wake-up receiver of the second device within the preset time period, updating a mode of the identifier information of the wake-up receiver of the second device;

The first device identifies the second duration and the number of attacks in the second protection mode of the second device;

The second device is attacked by the first device, and the first device receives the wakeup confirmation message sent by the second device, but the first device does not go to the second within a preset time period. The device sends the wake-up frame;

After the first device determines, according to the awake indication information, that the awake frame is not sent to the second device within a preset time period, the first device performs the current protection mode according to the recognition result. Switching, specifically includes:

When the first device recognizes that the time when the second device works in the second protection mode does not exceed the second duration, and the number of times the second device is attacked is not less than the number of attacks, the The first device switches the current protection mode of the second device from the second protection mode to the first protection mode.
A communication method, characterized in that the method comprises:

The wake-up receiver of the second device wakes up the wireless transceiver of the second device after receiving the wake-up frame, where the wake-up frame includes first identification information of the wake-up receiver, and the first identification information is the wake-up Identification information currently used by the receiver;

After being awake, the wireless transceiver of the second device sends a wakeup acknowledgement frame to the first device, where the wakeup acknowledgement frame includes wakeup indication information, and the wakeup indication information is used to indicate the wireless transceiver of the second device. Waking up by the wake-up receiver of the second device after receiving the wake-up frame;

The second device receives the first message sent by the first device, where the first message is that the first device determines, after receiving the awake indication information, that the first device is in a preset time period. After the second device sends the wake-up frame, the first message is a message that the first device has determined to send to the second device when sending the wake-up frame; or

Receiving, by the second device, the second message that is sent by the first device, where the second message is that, after receiving the awake indication information, the first device determines that the first device is not within a preset time period. Sending the wake-up frame to the second device, where the second message includes the second identifier information of the wake-up receiver or the indication information of the second identifier information,

And the second device updates the identifier information currently used by the wakeup receiver according to the second identifier information or the second identifier information indication information.
The method according to claim 7, wherein the second message is sent after the first device is encrypted.
The method according to claim 7 or 8, wherein the second device updates the identifier information currently used by the wake-up receiver according to the second identifier information or the second identifier information indication information, The method further includes:

The second device sends an acknowledgement message of the second message to the first device, where the acknowledgement message includes identity verification information of the second device, so that the first device determines according to the identity verification information. After the attribute information of the second device is output, the second device is in communication according to the attribute information of the second device.
The method according to claim 7 or 8, wherein the wake-up acknowledgement frame further includes attribute information of the second device, so that the first device determines the second device according to the attribute information. Current protection mode, identifying a duration of operation of the second device in the current protection mode, and according to the recognition result, the current protection mode is in at least two protection modes Switching between the modes, the at least two protection modes including a first protection mode and a second protection mode; wherein the first protection mode is that each time the wireless transceiver of the second device is used by the second device After the wake-up receiver wakes up, the first device updates a mode of the identifier information of the wake-up receiver; the second protection mode is sent by the wireless device that receives the second device by the first device. Wake up the acknowledgement frame and determine a mode of updating the identifier information of the wake-up receiver when the first device does not send a wake-up frame to the wake-up receiver of the second device within the preset time period.
A network device, where the network device includes:

a receiving unit, configured to receive a wake-up acknowledgement frame sent by the wireless transceiver of the terminal, where the wake-up acknowledgement frame includes wake-up indication information, where the wake-up indication information is used to indicate that the wireless transceiver unit of the terminal is received by the terminal The unit wakes up after receiving the wake-up frame, where the wake-up frame includes first identifier information of the wake-up receiving unit, where the first identifier information is identifier information currently used by the wake-up receiving unit;

a processing unit, configured to determine, according to the wakeup indication information, that the wakeup frame has been sent to the terminal within a preset time period;

a sending unit, configured to: when the processing unit determines that the wake-up frame has been sent to the terminal within a preset time period, send a first message to the terminal, where the first message is sent by the network device The message to be sent to the terminal has been determined when the frame is awakened; or

The processing unit is further configured to: according to the awake indication information, determine that the wake-up frame is not sent to the terminal within a preset time period;

The sending unit is further configured to: when the processing unit determines that the wake-up frame is not sent to the first device within a preset time period, send a second message to the terminal, where the second message includes the And waking up the second identifier information of the receiving unit or the indication information of the second identifier information, for the terminal to update, according to the second identifier information or the indication information of the second identifier information, the current use of the wakeup receiving unit Identification information.
The network device according to claim 11, wherein before the sending unit sends the second message to the terminal,

The processing unit is further configured to perform encryption processing on the second message.
The network device according to claim 11 or 12, wherein after the sending unit sends the second message to the terminal,

The receiving unit is further configured to receive an acknowledgement message of the second message sent by the terminal, where the confirmation message of the second message is that the second device is configured according to the second identifier information or the second identifier The indication information of the information is sent after the identifier information currently used by the waking receiving unit is updated, and the confirmation message includes the identity verification information of the terminal;

The processing unit is further configured to determine attribute information of the terminal according to the identity verification information of the terminal;

Communicating with the terminal according to the attribute information of the terminal.
The network device according to claim 11 or 12, wherein the wake-up acknowledgement frame further includes attribute information of the terminal;

After the receiving unit receives the wake-up acknowledgement frame sent by the wireless transceiver unit of the terminal,

The processing unit is further configured to determine a current protection mode of the terminal according to the attribute information of the terminal;

Identifying a duration of operation of the terminal in the current protection mode;

And switching, according to the recognition result, the current protection mode between at least two protection modes, where the at least two protection modes include a first protection mode and a second protection mode.
The network device according to claim 14, wherein after the processing unit determines that the current protection mode of the terminal is the first protection mode, the first protection mode is that each time the wireless transceiver unit of the terminal is After the wake-up receiving unit of the terminal wakes up, the processing unit updates a mode of the identifier information of the wake-up receiving unit of the terminal;

The processing unit is specifically configured to: identify, by the terminal, the first duration of the first protection mode, and whether the terminal is attacked during the first duration;

The receiving unit receives the wake-up confirmation message sent by the terminal, but the sending unit does not send the message to the terminal within a preset time period. Wake up frame

Determining, after the processing unit sends the wake-up frame to the terminal within a preset time period, according to the wake-up indication information,

When the processing unit recognizes that the terminal works in the first protection mode for more than the first duration, and the terminal is not attacked within the first duration, the processing unit will The current protection mode of the terminal is switched from the first protection mode to the second protection mode.
The network device according to claim 14, wherein after the processing unit determines that the current protection mode of the terminal is the second protection mode, the second protection mode is that the terminal is received by the receiving unit. Updating the wake-up confirmation frame sent by the wireless transceiver unit, and determining that, when the sending unit does not send the wake-up frame to the wake-up receiving unit of the terminal within the preset time period, updating the identifier information of the wake-up receiving unit of the terminal mode;

The processing unit is specifically configured to identify a second duration and an attack number of the terminal working in the second protection mode;

The receiving unit receives the wakeup acknowledgement message sent by the terminal, but the sending unit does not send the wakeup frame to the terminal within a preset time period;

After the processing unit determines, according to the awake indication information, that the wake-up frame is not sent to the terminal within a preset time period,

When the processing unit recognizes that the time when the terminal works in the second protection mode does not exceed the second duration, and the number of times the terminal is attacked is not less than the attack threshold, the processing unit Switching the current protection mode of the terminal from the second protection mode to the first protection mode.
A terminal, comprising: a wake-up receiving unit, a processing unit, and a wireless transceiver unit,

The wake-up receiving unit is configured to receive a wake-up frame;

The processing unit is configured to wake up the wireless transceiver unit of the terminal after receiving the wake-up frame, where the wake-up frame includes first identifier information of the wake-up receiving unit, where the first identifier information is the wake-up receiving unit Identification information currently in use;

The wireless transceiver unit is configured to send a wakeup confirmation frame to the network device, where the wakeup acknowledgement frame includes wakeup indication information, where the wakeup indication information is used to indicate that the wireless transceiver unit is received by the wakeup receiving unit of the terminal Wake up after the wake-up frame;

The wireless transceiver unit is further configured to receive a first message sent by the network device, where the first message is that the network device determines, after receiving the awake indication information, that the network device is within a preset time period. And sending, after sending the wake-up frame to the wake-up receiving unit, the first message is a message that the network device has determined to send to the wireless transceiver unit when sending the wake-up frame; or

Receiving a second message sent by the network device, where the second message is that, after receiving the awake indication information, the network device determines that the network device does not send a wakeup to the awake receiving unit within a preset time period. After the frame is sent, the second message includes the second identifier information of the wakeup receiving unit or the indication information of the second identifier information;

The processing unit updates the identifier currently used by the wake-up receiving unit according to the second identifier information or the indication information of the second identifier information.
The terminal according to claim 17, wherein the second message is sent after the network device is encrypted.
The terminal according to claim 17 or 18, wherein the processing unit updates the identifier information currently used by the wake-up receiving unit according to the second identifier information or the indication information of the second identifier information,

The wireless transceiver unit is further configured to send an acknowledgement message of the second message to the network device, where the confirmation message includes identity verification information of the terminal, so that the network device determines according to the identity verification information. After the attribute information of the terminal is output, communication is performed with the network device.
The terminal according to claim 15 or 16, wherein the wake-up acknowledgement frame further includes attribute information of the terminal, so that the network device determines a current protection mode of the terminal according to the attribute information, Identifying a duration of the working in the current protection mode, and switching the current protection mode between at least two protection modes according to the recognition result, where the at least two protection modes include the first protection Mode and second protection mode;

The first protection mode is that after the wireless transceiver unit is awake by the wake-up receiving unit, the processing unit updates a mode of the identifier information of the wake-up receiving unit; the second protection mode is Receiving, by the network device, a wake-up acknowledgement frame sent by the wireless transceiver unit, and determining that the wake-up receiving unit identifier information is updated when the network device does not send a wake-up frame to the wake-up receiving unit within the preset time period Mode.
A network device, where the network device includes:

a receiver, configured to receive a wake-up acknowledgement frame sent by the wireless transceiver of the terminal, where the wake-up acknowledgement frame includes wake-up indication information, where the wake-up indication information is used to indicate that the wireless transceiver of the terminal is received by the terminal The device wakes up after receiving the wake-up frame, where the wake-up frame includes first identifier information of the wake-up receiver, where the first identifier information is identifier information currently used by the wake-up receiver;

a processor, configured to determine, according to the wakeup indication information, that the wakeup frame has been sent to the terminal within a preset time period;

a transmitter, configured to send a first message to the terminal when the processor determines that the wake-up frame has been sent to the terminal within a preset time period, where the first message is that the network device is The message to be sent to the terminal has been determined when the wake-up frame is sent;

The processor is further configured to determine, according to the awake indication information, that the awake frame is not sent to the terminal within a preset time period;

The transmitter is further configured to: when the processor determines that the wake-up frame is not sent to the terminal within a preset time period, send a second message to the terminal, where the second message includes the wake-up Connect The second identifier information of the receiver or the indication information of the second identifier information, for the terminal to update, according to the second identifier information or the indication information of the second identifier information, the current use of the wakeup receiver Identification information.
The network device according to claim 21, wherein before the sender sends the second message to the terminal,

The processor is further configured to perform encryption processing on the second message.
The network device according to claim 21 or 22, after the sender sends the second message to the terminal,

The receiver is further configured to receive an acknowledgement message sent by the terminal for the second message, where the confirmation message of the second message is that the second device is based on the second identifier information or the second And the indication information of the identifier information is sent after updating the identifier information currently used by the wake-up receiver, where the acknowledgement message includes identity verification information of the terminal;

The processor is further configured to determine attribute information of the terminal according to the identity verification information of the terminal;

Communicating with the terminal according to the attribute information of the terminal.
The network device according to claim 21 or 22, wherein the wakeup acknowledgement frame further includes attribute information of the terminal;

After the receiver receives the wake-up acknowledgement frame sent by the wireless transceiver of the terminal,

The processor is further configured to determine a current protection mode of the terminal according to the attribute information of the terminal;

Identifying a duration of operation of the terminal in the current protection mode;

And switching, according to the recognition result, the current protection mode between at least two protection modes, where the at least two protection modes include a first protection mode and a second protection mode.
The network device according to claim 24, wherein after the processor determines that the current protection mode of the terminal is the first protection mode, the first protection mode is wireless each time the terminal After the transceiver is woken up by the wakeup receiver of the terminal, the processors are updated a mode of the terminal waking up the identification information of the receiver;

The processor is specifically configured to: identify, by the terminal, a first duration of the first protection mode, and whether the terminal is attacked during the first duration;

The attacking of the terminal means that the receiver receives the wakeup acknowledgement message sent by the terminal, but the receiver does not send the wakeup frame to the terminal within a preset time period;

Determining, after the processor according to the awake indication information, that the wake-up frame has been sent to the terminal within a preset time period, when the processor identifies that the terminal works in the first protection mode The processor switches the current protection mode of the terminal from the first protection mode to the first time when the time exceeds the first duration and the terminal is not attacked within the first duration Second protection mode.
The network device according to claim 24, wherein after the processor determines that the current protection mode of the terminal is the second protection mode, the second protection mode is that the terminal is received by the receiver. Updating the wake-up acknowledgement frame sent by the wireless transceiver, and determining that when the transmitter does not send the wake-up frame to the wake-up receiver of the terminal within the preset time period, updating the identifier information of the wake-up receiver of the terminal mode;

The processor is specifically configured to identify a second duration and an attack number of the terminal working in the second protection mode;

The attacking of the terminal means that the receiver receives the wakeup acknowledgement message sent by the terminal, but the receiver does not send the wakeup frame to the terminal within a preset time period;

Determining, after the processor according to the awake indication information, that the awake frame is not sent to the terminal within a preset time period, when the processor identifies that the terminal works in the second protection mode The processor switches the current protection mode of the terminal from the second protection mode to the first when the time of the terminal is not longer than the second attack time, and the number of times the terminal is attacked is not less than the attack number threshold Protection mode.
A terminal, the terminal comprising: a wake-up receiver, a processor and none Line transceiver,

The wake-up receiver is configured to receive a wake-up frame;

The processor is configured to wake up the wireless transceiver of the terminal after receiving the wake-up frame, where the wake-up frame includes first identifier information of the wake-up receiver, where the first identifier information is Declaring the identification information currently used by the receiver;

The wireless transceiver is configured to send a wake-up acknowledgement frame to the network device, where the wake-up acknowledgement frame includes wake-up indication information, where the wake-up indication information is used to indicate that the wireless transceiver is received by the wake-up receiver Wake up after wake-up frame;

The wireless transceiver is configured to receive a first message sent by the network device, where the first message is that the network device determines, after receiving the awake indication information, that the network device is in a preset time period Sending, after the wake-up receiver sends the wake-up frame, the first message is a message that the network device has determined to send to the wireless transceiver when sending the wake-up frame; or

The wireless transceiver is further configured to receive a second message sent by the network device, where the second message is that the network device determines that the network device is within a preset time period after receiving the awake indication information Not sending the wake-up frame to the wake-up receiver, where the second message includes the second identifier information of the wake-up receiver or the indication information of the second identifier information, the second identifier information or the Two indication information of the identification information;

And the processor updates the identifier currently used by the wakeup receiver according to the second identifier information or the second identifier information indication information.
The terminal according to claim 27, wherein the second message is sent after the network device is encrypted.
The terminal according to claim 27 or 28, wherein the processor updates the identification information currently used by the wake-up receiver according to the second identification information or the indication information of the second identification information,

The wireless transceiver sends an acknowledgement message of the second message to the network device, where the acknowledgement message includes identity verification information of the terminal, so that the network device performs verification according to the identity After determining the identification information of the terminal, the information communicates with the network device.
The terminal according to claim 27 or 28, wherein the wake-up acknowledgement frame further includes attribute information of the terminal, so that the network device determines a current protection mode of the terminal according to the attribute information, Identifying a duration of the working in the current protection mode, and switching the current protection mode between at least two protection modes according to the recognition result, where the at least two protection modes include the first protection Mode and second protection mode;

The first protection mode is a mode in which the processor updates the identification information of the wake-up receiver after the wireless transceiver is woken up by the wake-up receiver; the second protection mode is Receiving, by the network device, a wake-up acknowledgement frame sent by the wireless transceiver, and determining that the wake-up receiver identification information is updated when the network device does not send a wake-up frame to the wake-up receiver within the preset time period Mode.