Radio communication device, radio communication system, and radio communication method

wireless communication device and wireless communication system, and wireless communication method

technical field

The invention relates to a wireless device and wireless communication system, and wireless communication method, especially to a wireless communication system with multiple end ammeters and connection points forming.

background technology

And wireless LAN, a known based on IEEE802.11 (the IEEE802.11 system comprises a IEEE802.11a system and system IEEE802.11b) for AND/OR system (ISO/IEC8802-11: (1999) square the ANSI/IEEE Std 802.11, 1999) publications. The wireless system, and cross Micronesia type, that further provided with a same of ensuring consistency between datum secret WEP (e equivalent secret) in the. Wherein of the; the IEEE802.11 wireless LAN safety level-based, having suitable WEP and (mode and) of the pneumoelectric WEP and (mode).

The leads to IEEE802.11 wireless LAN product, performing any one of communication according to non-WEP mode adapted such WEP encryption method for WEP mode and without adapted; moreover, is suitable for WEP WEP mode, encryption with the rank different 64 and 128 encryption mode, wherein springs are suitable for wireless LAN realizing communication. Here, a rank of encrypted is higher; and safe layer is higher, method for is carried out a stronger encryption.

And based on one IEEE802.11 wireless LAN form, comprising a 1 point (lower further called base station (access point))A terminal of wireless customers the point (lower further connected with terminal) basic operating unit (BSS) such composed of unit, with prepare multiple BSS structure networks system.

With the tectonic element between the BSS is called distribution system. The base station having the function of the DS connected; the information transmission between BSS and DS by point. Therefore, the terminal can is fixed point with belonging to the terminal housing of the BSS.

The terminal belonging to BSS, a through base station and belonging to the terminal housing of the BSS, wherein the same horizontal a base stations and program. Intervals; when the terminal with the connecting point the same and joint and program.

A IEEE802.11 stipulation's wireless LAN, and AC frame body, a control for access control; and guide with the frame and representative's management with the data frame of the frame, and data communication based. Here, the inverted, connected, and processing using management using frame.

Sending and receiving data frame between the terminal and point the ACK/NAK front, wherein the same horizontal ring and connected to process.

A IEEE802.11 stipulation's wireless LAN, a terminal to the base station inquired for using and encryption method WEP. Namely, the first support, a terminal for WEP to the base station requirement, received the other base station is connected with the WEP condition sent, and rotator are connected between the base station and terminal. Capable of WEP according to sending and receiving of such are frame.

And a IEEE802.11 stipulation the form of wireless LAN, comprising BSS of which with, a called IBSS (comprising a basic operating unit). The IBSS, without prepare point; IBSS equal to the communication form of terminal by each communication. Moreover, the IBSS, without substrate is connected to process, similar, without substrate processing a joint. The IBSS; the terminal without undergo processing chip is filled on the frame data sending and receiving.

, Wherein the existing wireless LAN, and safety countermeasure, communication data encrypting. The communication for encrypting function (WEP the function), a used for connection request one side of the terminal is screwed connection request side for example point requirement. The receiving the other base station side, and capable is connected to the requiring WEP function, and receiving the requirement, communication data encrypting and terminal. Intervals; and is a safety layer of communication command of the support side and guide determining.

A extrapolate of a now on WEP addition, the rank different or more of encryption method equal encryption and keeps in wireless LAN than a WEP safe power layer encryption method. Therefore, the other is correspondingly the encryption method, device for encrypting rank and width of careful safety layer.

The; the wireless any, AND/OR to each BSS, ensuring consistency between datum to the safety, stipulates the lowest encryption rank a pre-formed, not only and it is allowed with the upper rank encryption communication system. Additionally, wherein a communication it lead and encryption method for type, encryption intensity and corresponding electrode of careful safety layer questions.

Additionally, wherein the no need to distinguish when the IBSS data transmission frame; therefore, a data frame for transmitting is not encrypted, and it ensuring consistency between datum the safety question and system.

Additionally, and it ensuring consistency between datum in advance of each of BSS the BSS safety layer, which exists filled with multiple BSS the DS horizontal between the housing of similar to ensuring consistency between datum of the BSS settings safety layer questions.

The invention publicizes the invention target to bottom in claims each wireless LAN basic set and can ensuring consistency between datum to be in advance of performing a wireless communication a threshold safety layer for encrypting is implemented as a wireless communication device and wireless communication system, and wireless communication method.

To the invention, a a wireless communication device, the wireless communication device belonging to the received from the transmission 1st frame 1st wireless signal section of the wireless communication device, sending, A transmission 1st) connected to the safety part is field, the wireless device comprises a memory device and safety layer and device and 2nd transmission frame generation device, and transmitting part; The memory device and memory suitable non-encryption 1st safety layer and according to encryption method and encryption strength determining 2nd and 3rd safety layer,The safe layer by for device with the determine 1st wireless signal section is 1 used inherent a safety layer on the 1-th 3rd safety selecting layer,The 2nd transmission frame generation device and compares the transmission frame the safety 1 layer and a reference safety layer, is fixed in the safety 1 layer is lower than the reference safety layer rejects and 1st wireless device the connection of cooled connected; when the safety 1 layer at least two bulbs is a safety permitted layer is between 1st wireless device and connected with the permitted, a substrate where the is connected to reject and grant the transmission 2nd frame; The transmission part for transmitting the transmission 2nd frame is the 1st wireless communication device.

Additionally, according to the invention, wireless communication system comprises a wireless communication device 2nd and wireless communication device of 1st wireless signal section; The is a wireless device of 1st wireless signal - comprising a 1st memory device and 1st transmission frame generation transmitting apparatus,The 1st storage device from the pneumoelectric non-encryption 1st) and a layer of the wireless device for supporting and are according to 1 used inherent a safety setting level for encrypting method and encryption strength determining 2nd and a safe 3rd layer selecting to 1st the wireless signal - saving, wherein a safety layer and 1-3rd safety layer,The 1st transmission frame generation sending production wheel reading in the reference safety layer and 1-3rd safety layer field 1st transmission frame and transmitting; The wireless 2nd device comprises a receiving part and 2nd memory device and 2nd transmission frame generation device and transmitting part; The receiving part receiving and transmitting 1st frame; The 2nd memory unit saving 1st) and a layer of the wireless device for supporting and connected to the encryption method and encryption strength determining inherent safety layer,The 2nd transmission frame generation device and compares the transmission 1st frame is 1 and inherent safety layer and reference safety layer, is fixed in the inherent safety layer is lower than the reference safety layer rejects and 1st wireless device the connection of cooled connected; when the safety 4th layer at least two bulbs is a safety permitted layer is between 1st wireless device and connected with the permitted, a production while to the inherent safety layer field and recording is connected to reject and connected on the side grant field 2nd, transmissionThe transmission part for transmitting the transmission 2nd frame is the 1st wireless communication device.

Additionally, according to the invention, wireless communication system comprises a wireless device of 1st wireless signal section, and is a wireless device of 1st wireless signal - comprising a 1st memory device and 1st transmission frame generation transmitting apparatus,The 1st storage device from the pneumoelectric non-encryption 1st) and a layer of the wireless device for supporting and according to 1 used inherent a safety layer for encrypting method and encryption strength determining 2nd and a safe 3rd layer selecting by are 1st the wireless signal - saving, wherein a safety layer and 1-3rd safety layer,The 1st transmission frame generation sending production wheel reading in the reference safety layer field 1st transmission frame and a.

Additionally, according to the invention, radiocommunication method comprises the following: programThe first all the safety layer field 1st transmission frame of the transmission 1st); andFrom and are determined according to 1 used inherent a safety layer for encrypting method and encryption strength determining 2nd and a safe 3rd layer selecting with the pneumoelectric non-encryption safety 1st and 1st the wireless signal section and maintaining; The is 1 and a layer of with the transmission frame with the reference safety layer, is fixed in the safety 1 layer is lower than the reference safety layer rejects 1st and wireless communication device the connection of cooled connected; when the safety 1 layer at least two bulbs is a safety permitted layer is 1st and wireless communication device and connected with the permitted, a substrate where the is connected to reject and connected with the grant the side 2nd transmission frame; Replies the transmission 2nd frame is the 1st) transmission.

The simple instructional diagram of the auxiliary shape is 1 to hint is in the invention relates and communication system diagram.

Digital is 2 to shown are in digital 1 base station an example of diagram of a circuit.

Digital is 3 to shown are in digital 1 wireless terminal an example of diagram of a circuit.

Digital is 4 to shown are in digital 1 of MAC the frame schematic drawing structure of IEEE802.11 of communication system and base station and terminal block is transmitted stipulated.

Digital is 5 to shown are in digital 1 a safety table having table of communication system and base station or a terminal with.

Digital is 6 to shown are in digital 1 the safety table having the table of communication system and base station or a terminal with.

Digital is 7 to show is in communication system and base station and a terminal processing movement of for flow position is instructional 1 diagram.

Image 8A is in shown the digital 1 of the schematic drawing of are frame structure according IEEE802.11 communication system and base station and terminal block is transmitted stipulated.

Image 8B is in a description the position 8A frame and content table.

Image 9A and 9B and is in shown the digital 1 of the IEEE802.11 stipulation of communication system and base station and terminal and transmitting in the support frame and in response the frame schematic drawing of structure.

Digital is 10 to shown are in digital 1 for updating system communication base station or a terminal with safety type table entry.

Digital 11) is in a shown the digital 1 communication system and base station of the terminal of the schematic drawing of the guide frame structure IEEE802.11 is stipulated.

Digital 12) is in communication system and base station shown from the digital 1 to a terminal informing in advance of the BSS lowest rank safety layer and a base station requirement connecting processing program the current position of the base station is.

Digital is 13 to are made shown the digital 1 in the response frame informing a layer of the communication system and base station and terminal, a to inspect the safety layer processing program current map.

Image 14A and image 14B is in shown the digital 1) and joint support frame according IEEE802.11 of communication system and base station and terminal block is transmitted stipulated and a joint response the frame schematic drawing of structure.

Digital is 15 to are made shown the digital 1 the joint response frame informing a layer of the communication system and base station and terminal, a to inspect the safety layer and processing program current map.

Digital is 16 to hint is in this invention claims other embodiments and communication system diagram.

Digital 17 is used to explain when shown the digital 16 in communication system is connected with wireless communication device and wireless communication device to send of the other is further connected with wireless communication device is request side processing method of for flow map.

Digital 18 is used to explain when shown the digital 16 in communication system is connected with wireless communication device and wireless communication device to send of the other is further connected with wireless communication device is request side processing method of for flow map.

Digital is 19 to hint is in this invention claims other embodiments and communication system diagram.

Digital 20) is provided with instructional diagram 19 cooling in a communication system terminal end of the wirelessly connected with the processing flow sequence map.

The digital 21) is provided with instructional diagram 19 cooling in a communication system terminal end of the wirelessly connected with a terminal processing movement of for flow map.

Digital is 22 to hint is in this invention claims other embodiments and communication system diagram.

Digital 23) is provided with instructional diagram 22 cooling in a communication system terminal end of the wirelessly connected with the terminal of the current of image processing operation.

Digital is 24 to hint is in this invention claims other embodiments and communication system diagram.

The lower best form of the invention is brief description for drawings the invention the form of wireless communication system.

, First performing formed on the following in wireless LAN system, the pneumoelectric or more of encryption method, wherein encryption realizing type obtaining difference. Additionally, setting is carried out the safety layer of stipulation to the encryption rank a pre-formed. Which exists to multiple types of encryption method are different rank, wherein the rotating internal encryption realizing encryption 1, rank the encryption intensity's degrees is rank, a heat-radiating 1 safety layer the. Therefore, and a there is one encryption intensity, a encryption realizing type of different, providing different rank and wherein a layer. For example, a safety layer, an encryption strength - side in turn to enc.0, enc.1 and enc.2,…. enc (n-1) such a n. A are the same intensity's encryption method with multiple, wherein the type of rank different safety layer. , Wherein the safe 1 layer, encryption method of communication 1 type. Additionally, and maintain the same type encryption method, wherein the encryption strength when with different rank differently; each stipulations and rank communication a layer of.

A a IEEE802.11 stipulation's wireless LAN system, a safety layer lowest rank with no encrypt with, namely is no adapted to WEP (e equivalent secret) is rank with.

The presentation of wireless LAN device of IEEE802.11 stipulation, and a suitable for WEP condition, is formed WEP such with ranks 2 and 64 or 128. Therefore, the following emitter, and multiple safety layer, an IEEE802.11 a stipulation wireless LAN same, and (1) with a WEP, an (2) is with WEP, an (3) via a WEP, and 64 WEP, an (4) via a WEP, and 128' WEP such 3 ranks situations end of the emitter for example. The condition; the safety highest condition is (4) with a WEP, and 128' WEP, further (3) with a WEP, and 64' WEP with is next to the high safety. Wherein the enc.0 with (2) of it is provided with WEP with, a enc.1 with (3) with a WEP, and 64' WEP with, a enc.2 with (4) with a WEP, and 128 WEP with a.

The following emitter, only invention WEP 1 such encryption method for situation. The, and maintain the encryption method of WEP; and a correspondingly the encryption method and is different and safety setting strength multiple ranks, which can the substrate of emitter and is suitable for the invention is any encryption method and similar.

The embodiment form of the invention, the invention is suitable for the invention is a wireless LAN system condition according IEEE802.11 is stipulated. Specifically invention may include a wireless communication device suitable for constituting a wireless LAN the system condition in base station or terminal according IEEE802.11 is stipulated.

The (1st and first); the 1st the form of the invention, and a wireless communication system, invention is formed by multiple terminal is of 2 line (WL11-WL12) and on the terminal (WL11-WL12) connectivity's wireless base station AP1 is 1 BSS (basic operation unit of the communication system.

Digital 1 hints is in 1BSS (hereafter is a BSS1). BSS1 is composed of a mobile base station AP1 and a base station AP1 number of terminals; multiple terminal for example are 2 wireless terminal (of call terminal WL11) and WL12 here.

Digital 1) as to belong with 1BSS1 different 2BSS (hereafter is a BSS2) base station AP2 and is not to BSS1 and BSS2 terminal WL13.

The BSS1 setting lowest safety layer (enc_low) is a allowed. The embodiment example's wireless communication system, lowest safety layer (enc_low) of BSS1 allowed is a layer of the enc.1. The digital 1, enc_low=enc.1 indicated lowest safety layer (enc_low) is allowed is a layer of the enc.1. The base station AP1 addition, the enc.1 such a safety layer, further - comprising a support than the safety layer of enc.1 a rank high safety layer of the enc.2. Therefore, wherein the enc.2 of the highest work layer (enc_high) of the BSS1 capable of. The digital 1, enc_high=enc.2 unit of highest work layer (enc_high) is composed of enc.2. Base station AP1 and connected with the base station AP1 terminal or the base station to the enc.1 of the safe and corresponding to the information in advance of the base station AP1. Similar, a to the enc.1 with a device crossly other end of the base stations a relay base station AP1 the safety layer of the socket are preset wherein the base station AP1.

On the other side, the safety layer is WL11 terminal is provided with a enc.0 and enc.1 shape, a safety layer is WL12 terminal is provided with a enc.0 and enc.1” and enc.2 a.

Digital 2 cooling shown the digital 1 base station AP1 the diagram of a circuit. The following emitter, wherein the need to distinguish base station AP1 and base station AP2 when or a bearing is of the emitter called, base station AND simply.

Shown and a digital 2, wherein receiving portion 11 and 20 antenna a command signal from terminal, comprising a substrate processing received signal of demodulation and decoding. The transmission part 12, wherein the substrate is connected with the antenna 20 to the sending of signal transmission terminal, and signal feed antenna 20.

An from receiving portion 11 received to signal receiving the control part 13, performing invention (explain to the following based on IEEE802.11 system, the IEEE802.11 system comprises a IEEE802.11a system and system IEEE802.11b) and processing of stipulation equal. The receiving control part 13, the embodiment and base station and decoding processing of an anti-theft layer respectively housing, wherein the received signal deciphers, converting a data. The decryption providing data information processing part 15, are divided into video, audio, characters and data, same key processing.

The transmission control part 14 based on the information processing part 15 supplies' data, for producing is equal divided into multiple colour areas IEEE802.11 transmission processing of stipulation according to the data of broadcasting or unicast transmission to a terminal equal. The transmission control part 14, corresponding to the data and base station support of encrypted transmission processing of an anti-theft layer housing. Controlled part 14 productions the data 12 to transmit the terminal via the transmission part and a command signal from the transmission. Shown the digital 2 the safety (21 is in a rear.

Digital is 3 to hinted are shown the digital 1 WL11 terminal, WL12 and WL13 an example of circuit composed of a diagram. The following emitter, which has no need to distinguish terminal WL11, WL12 and WL13 isochronism or a bearing is the same terminal situations emitter, a called terminal WL.

Terminal WL comprising an antenna 100, wherein the received 100 signals' receiving portion 101, wherein the receiving part 101 control receiving portion 105, wherein the antenna 100 signals' the transmission part 107, wherein the transmission part 107 transmission control part 106, production transmission the data of data or processing method for example displays the information processing part of display part on the position is not shown 108, and a table 110.

Information processing part from 108 wireline network 109 receiving data of the information processing part 108), or according to a user manufacturing data transmission data of operation production. The transmitting data in user fault when the transmission of the data transmission generating transmission requirement, wherein the transmission requirement, wherein the transmitting data transfer to the transmission part 107. The transmission part 107, wherein the data transmission conversion according to the specification determining digital data, a three-hole of IP packet according to IEEE802.11 the stipulation MAC a Media Access Control frame), converting assigned frequency and digital data RECEIVED frame is of 2.4GHz the wireless signal, thereby antenna 100 and radio wave transmission.

On the other side, and receiving part 101 voltage to the numerical data of the received signal of the antenna 100 is received MAC frame, a field information from the RECEIVED frame and for receiving data, energy to the information processing part 108. The information processing part 108 in a manner and a data to display handling of screen equal. The information processing 108 part is further on the outer parts are information processings. Moreover, the safety 110 invention claims a rear.

Shown and a digital 4 of the IEEE802.11 stipulation's MAC frame such of storing the control information maximum 30 bytes MAC titles, comprising deposited the maximum 2312 bytes data fields (frame main message), and a investigating has voltage is the frame check module (FCS) is field of data correctly. MAC title storing the front MAC rack disposed on the control information frame control field and terminal for transmitting data to wait for indicating (time); and phase BSS OF waiting time /ID field. A BSS with base station, AND and BSS OF description base station AND address. Moreover, comprising a MAC title preparing from the address 1 field to the address 4 field and sequential control fields. The address 1 described field communication system MAC address in ultimate destination address; the address 2 fields described communication system MAC address in source address, transmitting the RECEIVED frame the address field 3 descriptions by the transmission destination's address, where the address 4 fields with the is RECEIVED frame by the source address address.

The control frame of MAC frame, which the description with a protocol version protocol version field, which is device is a type field and sub-type field. With the following 3 types of MAC frame; the type of fabricating the field type of The Zheng rod (2). Moreover, the internal sub-type unit in detail the sub-type field. Namely, comprising (1) and managing type a control for and frame (2) access control uses a data frame of the frame and (3) data communication a. A guide and respectively connected with the frame and sub-type in (1) management or the connection frame. Moreover, comprising a ACK frame and sub-type in (2) control apparatus (), (RTS Connected To Send), or CTS (Cear To Send) such control and frame. (4) Are having such special type of the sub-type field of detail the sub-type of MAC frame.

The control frame, comprising a to DS field (1) and A DS field (1). They are data frame made of MAC frame; the internal frame for region of the first or the connection frame, reads on "0”, is not used. Of MAC frame is the data frame; and data destination address is wired LAN, 1 and claims From DS field. Preparation to retain field, the WEP field and field of the frame control. Retains the field is provided with a user read-, wherein the embodiment of this invention, such with a connection invention which is add layer of secrecy the content description field. The reinforced layer of secrecy corresponding to acquire the attribute decision of data. A for requirement confidentiality content data, and determining is higher than the heating layer of secrecy; the add layer of secrecy the content description field. The embedding field heating layer of secrecy of the terminal and signal switching between point for. The WEP field, when using the WEP condition, where 1.

Is digital 1 to explain BSS1 the once.

The shown the digital 1 to BSS1, determining for pre-twisted patching bar according to by a pre-formed the BSS1 layer is limit's safety layer (here is an enc.1') for communication. Namely, the BSS1 base station AP1 and terminal WL11-WL12 are “enc.1 shape or the base station AP1 supporting the range of safety layer embodiments of enc.1 of the safety layer is a layer of.

A memory part in base station AP1 and terminal WL11-WL12 are, wherein the memory part is a table. One memory the base station AP1 safety table has base station AP1 makes the safety meter and a BSS1 lowest rank the safety layer the safety table member is WL11 terminal and a layer of WL12 the support is one. Intervals; and better unit is the safety table and each safe layer encrypting method based onCurrent value information of information or key generation key for a lower is equal (such encryptionThe information with a lower here of called encryption parameter simply). Additionally, terminal WL11-WL12 is connected with the safety table storage part, BSS1 support safety layer the safety layer and terminal supporting the safety layer of lowest rank, and a safe layer of the encryption parameters and memory the safety table.

Shown and a digital 5, wherein the base station AP1 safety or 21, wherein a corner and encrypting method based on of each safe differentThe data encrypting parameter of a lower is registered together by a layer of BSS1 supporting the base station AP1 cm; a safety layer is BSS1 the terminal with WL11-WL12. Moreover, the safety table 21 and registers are as BSS1 the safety layer in multiple sinking safety setting level base station AP1 is. The digital 5, wherein the recording with a safety layer of enc.1 of represents the lowest rank of ○ the symbols.

The encryption parameter of the tentative is provided with a WEP condition and invention claims a key according IEEE802.11 stipulated (key1, key2) and (IV preset vector) equal. Sometimes is an emitter, safe layer and a called safety information with the safety layer encryption communication parameter of.

Digital 6 cooling BSS1 the safety table on terminal WL11-WL12 110 registering contents. Shown and a digital 6, the register information security of the terminal security sides of the table terminal and base station of AP1 BSS1 with a pre-formed. Connected with the safety system for base station AP1 communication, and shown the digital 6 such, and without log the BSS1 of the base station AP1 belongs to the corner of lowest rank safety information. Additionally, a terminal (110) is also a base station anti-theft side surface and shown the digital 5 21 via same.

Additionally, and registers shown the digital 6 the safety table in digital 5 the base station AP1 and terminals' safety layer wants the predetermined BSS1 lowest rank and then. Additionally, with the information security of the corresponding terminals, and BSS1 without register the leads of the safety layer with.

Additionally, digital 5 shown and a digital 6 a safety setting table when the BSS1 initial lead. The initial lead, a shape of 5, shown the digital 6 the form of the table also be of image display; an is one of the picture. The digital 5 shown and a digital 6 on the table, AP1, WL1 and WL2 formed by a base station AP1 and terminal WL1 and WL2 address are.

The shown the digital 1 to BSS1, a pre-formed setting layer is limit's a layer of enc.1 of the safe and performing communication between base station AP1 and terminal WL11-WL12 according to obtain the BSS1.

The, is shown the digital the 7 end points to explain for base station AP1 connected with BSS1 is made of arm shown the digital 1 to the BSS1 terminal WL13 situation.

Terminal WL13 received from the base station AP1 transmission a guide frame according IEEE802.11 is stipulated. To the stipulation of IEEE802.11, a receiving guide frame, and first and in the protocol, is provided with the first or the connection frame, reads in the terminal WL13 safety layer and advising base station AP1 information.

The left and an illustration the digital 7 of the chip frame the terminal WL13 safe and informing base station AP1 condition device. The wire, a safety layer is hypothesis terminal with WL13 is an enc.0” and enc.1 a.

Image 8A as a IEEE802.11 stipulation used MAC frame are frame frame message formatting according shown the digital 4. Embodiments of the first frame is provided with distinguishing without using the universal key opened and system for universal key the inverted algorithm for general key system. The distinguishing the algorithm serial number of invention describes “0” of the opening system, where “1” to the universal key system. A first algorithm serial number 0 determinations' is system, image to 8B, such a first support plate) is respectively service serial number (ATSN) =1 and =2 frame and first support frame. The ATSN=1 are connected with the base station AP1 a terminal WL, wherein code state field are retained. The ATSN=2 are connected with the terminal WL a base station, AP1 on the connecting to reject or the grant as one state wherein the code coding. A first algorithm serial number 0 determinations' is system, comprises a searching message of the frame is not coated to encrypt. The general key system, (are request)) is respectively service serial number (ATSN) =1-4 frame and first support frame. ATSN=1 or 3 are adjacent to deliver base station AP1 a terminal WL, wherein code state are retained. ATSN=2 or 4 chip is adjacent to WL terminal and base station AP1, a connected to reject or the grant and recording and wherein state coding and decoding. The general cryptographic system, preparation with a searching message of encrypted the ATSN=2 and 3 are adjacent; the ATSN=1 and 4 are with the searching message is no prepare to encrypt.

A ATSN=1 determining frame are in transmission connection request side transmission. The other frame, wherein code state field are retained, currently is not used. Therefore, and adding to send of the connection request in the code state of one side of a layer of enc.1 shape or “enc.2 a. The emitter of one embodiment, reads to send of the connection request side a layer of enc.1 shape or “enc.2 a. The ATSN=1 are frame, a are 107) is provided with a terminal WL13 transmission part and base station AP1 the safety layer of the (e.g. enc.1 an SC the data to an wherein state coding one; the ATSN=1 are frame to digital 7 steps as S2, such a to base station AP1. The safe layer is further in an shown the digital 4 MAC frame the embedding field.

An electromagnetic received ATSN=1 the first frame base station AP1 processing operation. A such on, to step S1 as from the guide for base station AP1 normally output end such a terminal WL13 detection. Responded the detecting, a terminal WL13 transmission control part 106 coated ATSN=1 the first frame, referred to the safety or “110” enc.1 or “enc.2 of reads the safety layer and frame stipulation for part of the code state of the main message. Reads the safety layer are frame and guide frame communication base station according AP1 is connected with the terminal WL13 transmission control part (106) at taking destination address methods for address 2, a step S2 such as to transmit base station AP1. The base station AP1 receiving respectively frame; the base station AP1 receiving control part 13 a reading the reception ATSN=1 are frame stipulation part for example frame main message code state the safety layer WL13 terminal of enc.1 shape or “enc.1 a picking device, and registering the base station AP1 safety (21 BSS1 lowest rank's a layer of enc_low compares the. A pedal S3 such as, a terminal WL13 informing a safety layer of the terminal WL13 of enc.1 shape or “enc.1 for security layer for base station AP1 supporting rod enc.1 shape or “enc.1 moreover the lowest rank a layer of enc_low a above said BSS1, connecting for determining grant terminal WL13. The terminal WL13 safety layer is not the base station AP1 support security situational layer or a base station AP1 supporting the safety layer of not connected to the BSS1 lowest rank of enc_low of the safety layer, determining for connection of cooled WL13 terminal.

The invention S3, wherein for base station AP1 rejection terminal, WL13 according to any stipulation of IEEE802.11, the ATSN=2 frame are controlled part 12 preparations a controller, reads to indicate according to the code state the connection is defeated the code state; and S4 such as replies the ATSN=2 are frame is WL13 terminal. Terminal WL13 to the S5 of such judging is coated with refused connected with the information ATSN=2 for receiving the first frame contains a n-type ohm times. The N secondary equal to the reading of the terminal security side (110 progressions safety (=N). Initially, a safety layer for base station AP1 support is a low rank, terminal WL13 the low rank safe and informing base station, which is rejected enhanced, wherein a layer, a step S2 of such informing enhanced the safety layer. Informing terminal security of the N a layer of supporting 110; and S5 such as, when terminal WL13 passes through THE secondary receiving ATSN=2 are frame, a judging and base station AP1 is refused connected; to the S15 such as at connection of the stage.

On the other side, the grant terminal connection WL13 condition, base station AP1 to are provided with terminal WL13 with a terminal WL13 informing the encryption parameter of safety communication layer; and S6 such as to automatically to the stipulation of IEEE802.11,) to transmit the searching message ATSN=2 the first frame, reads to indicate of the the first code state with the successful the code; and S6 such as to the terminal WL13 acknowledge.

The terminal WL13, wherein when the first ATSN=2 frame, determining base station AP1 and safety layer between terminal WL13 is of a layer of the enc.1. Additionally, terminal WL13 connected with the encryption parameter of safety communication layer, is provided with IV and for obtaining user in advance, according to any stipulation of IEEE802.11, to the S7 are in such terminal is WL13 with WEP function for a comprises a searching message the frame main message to encrypt. Additionally, terminal WL13 preparation ATSN=3 are frame, saves with the encrypted searching message in the main, message to the S8 such a to base station AP1.

The receiving ATSN=3 are frame base station AP1, similar to the stipulation of IEEE802.11, to the S9 as a key with a terminal WL13 a total for base station AP1 such a searching encryption and decryption message in the ATSN=3 the first frame saving. The searching message for searching message and transmission of the decryption compares; and S10 such as to automatically to wherein said inspection data encryptingA.

Verifying and a plurality of the failure, similar to the stipulation of IEEE802.11, preparation to the inform of the ATSN=4 are frame, a indicate for determining result of failure of the state's code reads wherein code state; and S11 such as, replies terminal WL13 the ATSN=4 are frame. Authentication result of failure a method for encrypting method of different in base station AP1 and terminal WL13. Therefore, and S14 such as, confirmed according ATSN=4 are frame FORM times; the exchange WL13 terminal encryption method, loop to step S2, repeatedly time of S2- of S10. Here, THE second terminal is WL13 encryption method for realizing, WL13 terminal capable of receiving THE secondary ATSN=4 are adjacent. , Wherein WL13 terminal, and a receiving THE secondary ATSN=4 are adjacent; the encryption method inconsistent condition, terminal WL13 of cooled and connected with the base station AP1. Therefore, the terminal side, the encryption method for without prepare base station AP1 to provide; and S15 of such conclusion connection program.

On the other side, and invention S10 data result of the success shape, and base station AP1 to the S12 such as such to act according to any stipulation of IEEE802.11 similar, wherein the inform of the ATSN=4 are frame substrate-processing to WL13 terminal. The terminal WL13, wherein when the; and S12 such as switch, and following by a IEEE802.11 stipulation speaker. Namely, terminal WL13 as the S13 such in the support frame is base station AP1, responded the support, the base station AP1 the is connected to the response terminal WL13 such to IEEE802.11 processing operation. The speaker is finished normally; and WL13 terminal and base station AP1, and frame data sending and receiving. The data frame for sending and receiving encrypts is 64 WEP functions.

The terminal WL13 and a base station AP1, when determining wherein WL13 terminal and communication safety layer encryption and between parameter base station AP1, the middle information security a register wherein a table 21 and 110. Namely, the terminal WL13, comprising shown the digital 7 in S7 obtaining encryption parameter; the base station AP1 safety information security register 110 table. Moreover, the base station AP1; the shape of 7 S10 is confirmed successfully, a terminal WL13 safety information security register 21 table. Namely, shown the digital 4 MAC frame the address 2) are terminal, WL13 according to the register safety information with the address 2 second the safety table 21. Shown and a digital 10 such as to the target connected with the base station AP1 safety table of the terminal WL13 safety information. Also similarly register of the volume of the terminal WL13 safety table for base station AP1 safety information. Namely, shown the digital 4 MAC frame the address 2 is in base station, AP1 according to the register safety information with the address 2 the second terminal WL13 safety table 110. The novel supplement terminal WL13 safety layer and terminal for WL13 safety information to 7 of claim S2 safety layer with digitally.

Intervals; and register base station in the terminal security sides of the table safety information; and terminal of the preselection the base station multiple sinking the safety layer, finally, wherein the S33, refuse is connected with the base station. Here, base station anti-theft information at least a lead is pre-formed to the BSS lowest rank and a layer of the base station is. The other testing; when the terminal with the base station once, composed of a base station, and a terminal for the safety layer for supporting and a base station determining lowest rank the safety layer, digital to 7 of fixing S2 such safe and informing base station.

Moreover, the multiple sinking enc_low the safety layer information security of the terminal WL related information security in base station AND a table and better and at least as the base station is in BSS for determining a pre-formed. With the register, a BSS for base station, belonging to the frame MAC address for 1 to determine BSS of shown the digital 4, wherein the address and a layer of description safety table. A provided with such BSS and registering, wherein the base station to the safety layer of the unicast message centre of the terminal using of the preselection the lowest rank is additionally and a safe layer of the terminal is supported. Moreover, the terminal WL according to BSS base station AND belongs to playing a layer of communication and broadcast communication is provided with a preselection intervals formed dealing with a realizes the safety layer is the lowest rank enc_low and receiving the supporting terminal. Namely, the shape of 7 S5 pores, wherein the base station AP1 is refused connected, informs with a layer of formerly informed differently and better is higher rank safety layer, once multiple colours connection. A safety layer is while informing terminal with WL13 and stipulation maximum value of THE secondary connection request.

Base station AP1 further can be a terminal WL13 informing of the request source or the lowest rank the safety layer for base station according AP1 supporting the BSS1 the terminal plastic the lowest rank safety layer and enc_low. The informing and is made of IEEE802.11 stipulation the management of MAC frame and informing a frame according to currently is not used for control. For example, wherein the management on the frame, a sub-type are “0110” a “0111” and frame with; the control using the frame, a sub-type are “0000” a “1001” and frame with. The shown the digital 7 in order S4, wherein the connection for base station AP1 rejection terminal, and a transmitting the ATSN=2 are frame transferring the frame of the is not used, informs the lowest rank enc_low the safety layer. Moreover, wherein the S4 or a step S6, a front transmitting the ATSN=2 are frame transferring the frame with an infrared, informs the lowest rank enc_low the safety layer. Additionally, a front distinguishing or joint or processing data frame for transmitting the frame for starting equal suitable time transmission chip adopts, informs the lowest rank enc_low the safety layer.

A IEEE802.11 stipulation MAC frame in the frame, image to 9A and 9B in such, wherein the main message of capabilities information of the used is not used for page domain reserved area. Can also using the is not used area, a informs BSS1 lowest rank safety enc_low layer or a base station AP1 support is a layer of the lowest rank enc_low and a request supply terminal WL13 and base station AP1.

, Wherein the upper 1st for forming, when flowing belonging the terminal WL11 and WL12 the BSS1 without belong to WL13 terminal in BSS1 connected with the base station AP1 condition, first (1) and terminal WL13 to base station AP1 informing terminal WL13 for security layer. The shown the digital 7 the current, the informing a first frame.

(2) In base station AP1, which the safety layer of the terminal WL13 informing is a safety layer for base station AP1 support. Additionally, which is in advance of the BSS1 lowest rank enc_low safe and a, permitted of the connection of WL13, a casing end of the processing movement for connection. The, a safety layer of terminal WL13 informing is made of as to BSS1 lowest rank safety layer, is of cooled WL13 terminal.

(3) In grant voltage the ACK/NAK a terminal WL13, according to the need, same is in for encryptingInformation of a process identification of encrypted parameter.

, Wherein according to the embodiment 1st, form of the BSS wireless LAN basic group; the order of a pre-formed determining layer encryption lower limiting the wireless communication of safety layer to be.

The part (1) condition; each terminal WL13 terminal WL13 for supporting a safety layer and informing base station AP1 the highest rank enc_high, and base station AP1 rejection terminal WL13 on-off of the shape of. Intervals; a rotating rank enc_high safe and informing base station, AP1 is 1 times request connected with the judging whether with the base station AP1 connected;, and can reduce the useless communication load.

Intervals; each base stations or terminals in BSS1 and better when the safety table register the first lead to the base station or the terminal of BSS1 corresponding is BSS1 the safety information the lowest rank enc_low the safety layer. The when the base stations or terminal capable to the safety table to the other by the terminal or the base station is connected with the address determining is expected safety preselection layer is not rejected at lower limit safety layer is informs.

The is 1st for forming; a step S2, terminal WL13 a single hope in a safety 1 layer informing base station AP1 with the corresponding for base station AP1, which is interposed between adjacent condition very clamped obviously. Terminal WL13 oneself with precise or, further although is not multiple safety layer is a full a terminal WL13 informing base station AP1. Additionally, a terminal is WL13 support safety layer safety layer enc_high the highest rank a terminal WL13 informing base station AP1.

An electromagnetic the full or, although is not full it is a security situational the base station AP1 processing movement of the step S2 informing terminal WL13 oneself with.

The shown the digital 7 in order S2, comprising multiple safety layer according to transmit the base station terminal WL13 oneself. The base station AP1, a step S3 of the safety layer contains with lowest rank suitable safety layer is enc_low and device thereof by a layer of BSS1 supporting. Base station AP1 when a safety layer member connected with the output terminal grant WL13. Additionally, base station AP1 when without comprises a safety layer member; the connection of output terminal WL13 is rejected. The rejection terminal WL13 voltage condition; and forward to the S4. The connection of grant terminal WL13, safe layer lowest rank enc_low and a layer of the BSS1 base station AP1 following selecting WL13 terminal and base station AP1 supporting. When the lowest rank enc_low the safety layer BSS1 with multiple, base station and AP1 1. And the selecting, wherein the lowest, or the highest, or the device for selecting references, further - is fixed to the. Safety 1 layers of base station AP1 of to cryptographic secret communication the safety layer of the terminal WL13. For example, which the safety layer of terminal WL13 informing is an enc.0” and enc.1, a grant terminal WL13 to the connection for base station AP1, WL13 terminal and communication safety layer and base station AP1 of the enc.1.

A lower selecting the safe and informing terminal WL13 condition, capable, a step of S6 is transmitted ATSN=2 the first frame of digital 7 equal, which is composed IEEE802.11 stipulation the management of MAC frame and a control a frame frame according currently is not equal.

The terminal WL13, and method for selecting the safety informing layer, and a preparation hereafter.

The BSS1, and is in advance of the BSS1 lowest rank enc_low the safety layer, which is necessarily flowing corresponding the same safety layer.

Moreover, the BSS1, and a connecting the opposite party and according to different safety layer communication. Namely, here, a to determined to the BSS1 lowest rank enc_low the safety layer, which safety layer according special is defined on one end of communication base station AP1 a pre-formed. A gland each terminal security different layer with the base station AP1 communication, can enhance the wireless secret communication.

Digital 7 the invention is not to BSS1 WL13 terminal and base station AP1 the operation and connected; further - to be a arm terminal emitter WL13 corresponding to BBS1 terminal WL11-WL12. The terminal WL11-WL12 flowing connected with the base station AP1 connection; and device according to shown the digital 7, wherein a digital 7 in informing S2 at time of different safety layer, connected; a change and a layer of wherein the target. The ACK/NAK, logging on BSS1 lowest rank a layer of the terminals' safety different, therefore, selecting the lowest rank and a layer of the safe and supporting terminal; the step S2 informing is the safety layer. Additionally, and a not changing safety layer, which are hereafter, can form the encryption parameter (WEP condition for key and IV equal).

Similar shape, 7 emitter is also serve as the base station connection a request from the terminal from belonging to the are different BSS base station to the base station requirement connection device. Namely, the emitter terminal WL13 be digital 7 base station, AP1 live to belong base station AP2 with an BSS1 different BSS base stations for example here is BSS2 base station AP2. , Wherein according to the 1st for forming, the communication the base stations of the DS communication can also dynamically the communication between each layer is a safety layer is.

When the terminal of BSS1 for of the terminal of the terminal WL11 and BSS1 for example terminal WL12 communication is probably connection base station AP1 end of the through communication base station AP1, and is a base station AP1 the DC communication the terminal.

WL11-WL12 terminal and base station AP1 the flowing and registering and connection of the safety tables are party and ACK/NAK, and abbreviate for sending and receiving the safety layer and are of encrypted parameter equal. The receiving the support side; and power supply of the frame and registers for security table, and capable to the safety table according to the multiple sinking the safety layer and requirement of communication source in BSS1 by a pre-formed.

The base station AP1 and terminal WL11-WL12 the safety of different is connected with the opposite party platform is perpendicular to the are fixed in the dipole safety layer information security used. The safe information and BSS1 for registering multiple sinking enc_low the safety layer with.

When the initial lead, base station and AP1 terminal in WL11-WL12 BSS1 safety meter can also recording the identical content, such as BSS1 the device for shown the digital 5, wherein registers are supporting the anti-theft alarm layer information security and a BSS1 and lowest rank safety setting layer.

Moreover, the BSS1, base station AP1 and terminal WL11-12 further supports the lowest safety layer according to BSS1 allowed of the enc.1. Therefore, wherein one end of WL11-WL12 playing, the broadcast data frame isochronism the BSS1, the frame body frame message according to allowing lowest safety layer encryption. Thus, and BSS1, a ensuring consistency between datum lowest safety layer is allowed.

Intervals; the upper 1st for forming, a bearing is one of the first of IEEE802.11 stipulation and the connected source request supporting the safety inspection layer, a common with identification processing of encrypted parameter of the connecting request source and connecting request target; however, a separating the processing 2, a IEEE802.11 stipulation in the same processing to the front. Additionally, a consider for time connected to a first performing a the first ACK/NAK. The ACK/NAK, with intensive end of the processing 2 of the chip, and separately; and in first time. The, wherein separation 2 processing the situations, in front of identifying processing of encrypted parameter and safety inspection layer is fuse via line.

(The embodiment 2nd) form the invention is fixed by a pre-formed layer is limit's safety layer shown the digital 1 the base station playing of such BSS1 at the lower limit safety layer (2nd) and communication system in the BSS1 by. The emitter, a a 2nd example's the communication system, abbreviates with 1st to form the same emitter, is digital 12 to explain wherein diversity.

The embodiment 2nd example's communication system, a reading the BSS at lower limit a layer of the IEEE802.11 stipulation's guide frame, transmitting the guide frame.

Digital 11 cooling is provided with a MAC frame structure guide frame the format of the main IEEE802.11 message stipulated. The guide frame of capabilities information in a reserved area is used by the area. Base station AP1 reads the BSS1 lowest rank safety layer or a base station AP1 support anti-theft alarm layer of the lowest rank the reserved or area is completely is not multiple safety layer, and informs the safety layer.

The base station AP1 transmission control part 14 reads the BSS1 lowest rank safety layer or a base station AP1 support anti-theft alarm layer of the lowest rank the guide frame for or completely is not multiple safety layer, and the broadcasting. Digital 12 of S21 such as, is received the guide a terminal. The guide of which is not arm to the BSS1 terminal for example shown the digital 1 the terminal WL13 receiving.

The terminal WL13 receiving portion 101; and, comprising shown the BSS1 lowest rank safety layer is a step S22 such receiving the guide reads, a pores in order to S23 such a safety layer of terminal WL13 support whether a BSS1 lowest rank the safety layer. Here, the safety layer of terminal WL13 a support is made of the terminal WL13 safety table is pre-formed. When there is no BSS1 lowest rank and a layer of the terminal WL13 safety layer, a cooled and connected with the base station AP1 ended, wherein the processing.

Here, the BSS1 lowest rank's safety layer is an enc.1, a terminal WL13 supporting rod enc.0” and enc.1 shape, therefore, terminal WL13 of a base station AP1 connection. With BSS1 lowest rank and a layer of the terminal WL13 safety layer, therefore, terminal WL13 selecting of the enc.1 such a safety layer, starting to the base station AP1 connection request. , Namely from top to shape of 7, S2 the safety layer for informing, and lower end, and a 1st for forming emitter movement same.

The, wherein the ACK/NAK, wherein the insulating inform the lowest rank the safety layer from the terminal WL side; therefore, the base station AP1, and abbreviate shape of 7 S3. Additionally, terminal WL13 the safety layer of the step S2 and terminal WL13 oneself with, a guide frame informing the lowest rank and a layer of BSS1 (such safety layer with multiple, selecting wire or multiple of expected or 1, the invention claims a safety layer is capable of the highest, or the lowest, or the safety layer of expectation, informs base station AP1 the step S2.

, Wherein the corner of multiple lower limit safety layer BSS1 base station AP1 by broadcast the BSS at lower limit safety layer, wherein a terminal WL13 preselection is connected to for security layer is opposite party platform is connected; therefore, capable of reducing communication load is no need.

Moreover, the WL13 terminal and base station AP1 transmission detecting requirement a detection request); the ends, base station and AP1 is composed of response a detection response) informing safety layer.

(The embodiment 3rd) is formed on the fixing 1st for forming, invention according to the smooth embodiment of the first of IEEE802.11 stipulation and ACK/NAK, and is capable further conceive for are connected, first performing are the ACK/NAK. The embodiment 3rd, form of the condition; and shown the digital 1 BSS1 the ACK/NAK the current image end of the emitter of the reference shown the digital 13.

Here, and 1st forming the same; the invention with an electric to the BSS1 base station AP1 condition to the BSS1 terminal WL13 requirement, and without invention and 1st for forming different component.

Terminal WL13 to the S31 such as received from the base station AP1 transmission guide frame, hereafter, connected base station AP1; and S32 such as military and online leaders connected to the other frame to transmit the base station AP1.

A having such, a IEEE802.11 stipulation MAC frame connected to 9A position and 9B such as, wherein a message of capabilities information of the preparing is not used for connecting the reserved area. 1 The terminal WL13 transmission part 107 reads the terminal WL13 supporting the safety layer at least expected the reserved area; and S32 such as to transmit base station AP1. For example, here; the terminal WL13 transmission part 107, reads configuration anti-theft alarm layer is with ('enc.0 of the enc.1( 1) of enc.1 of the data, a to base station AP1.

And the receiving to wherein the base station AP1 processing movement and 1st forming the same. , Wherein the base station AP1 receiving control part 13 a reading in the receiving the other connection frame (in request) with the safety WL13 layer and, and registering the base station AP1 safety (21 BSS1 multiple sinking safety layer compares the safety layer. A terminal WL13 informing a safety layer of the terminal WL13 is the safety layer for base station AP1 support. Additionally, wherein the BSS1 lowest rank safety layer is; and S33 as the connection of such judging grant terminal WL13. Intervals; when BSS1 lowest rank safety layer is; and S22 as the connection of such of cooled WL13 terminal. Namely, the rejection terminal connection WL13 condition, for example according to any stipulation of IEEE802.11; and S34 pores (such in response code state) is an configuration of the joint response the frame is connected defeated of the code, replies terminal WL13. Terminal through WL13 receiving, the output refused is connected with the base station AP1, wherein the table at connection program.

On the other side, the grant terminal connection WL13 condition, a shape of enc.1 and communication terminal from WL13 informing BSS1 the safety layer of lowest rank's, according to any stipulation of IEEE802.11, (in response code state) is an to indicate that a joint response frame is connected with the successful the code; and S36 such as to the terminal WL13 acknowledge.

A wherein said that a terminal WL13, according to any stipulation of IEEE802.11, filled with co-ground with authentication method of encrypted parameter between WL13 terminal and base station AP1; and S37 such as transmission chip frame. Are frame transmission processing of the chip according automatically to the stipulation embodiment of IEEE802.11. And the processing, and a plurality of according to stipulation the embodiment of IEEE802.11, therefore, abbreviates wherein emitter.

The 3rd for forming condition, a straight with 1st to form the ACK/NAK the same; meanwhile, which is adapted such or more of bracket according to 1st of forming invention.

(The embodiment 4th) form; and shown the digital 1 the wireless LAN and system for example emitter, wherein all terminal multiple base depots' regions mobiles the communication a fuse of each region of the BSS safety layer technique. The embodiment 4th form the invention in the terminal WL mobile's state of the lower so-called mobile environment and further ensuring consistency between datum of BSS ends of the base stations to belong in the corner of multiple lower limit safe and method. Such is substantially to the 1st the form in each BSS base stations, a terminal and a request, other end informs the safety layer, only the safety layer is an for BSS in advance of multiple lower limiting the connection of safe and a condition grant the terminal, a common with encryption parameter authentication processing the transitional part is the same between the base station and terminal in the.

A IEEE802.11 stipulation wireless LAN system, when digital 1 WL13 terminal and base station AP2; the driven to base station AP1 the condition in a same, and WL13 terminal and base station AP1 a joint. The connector for ended a normal, sending and receiving data frame.

The embodiment 4th, formed with a request is not used for connecting the base station AP1 a connection frame claim from WL13 terminal and), advising terminal WL13 safety layer.

The, is shown the digital the 15 end points to explain, wherein shown the digital 1 in wireless LAN system is terminal WL13 from the base station area AP2 mobile to the base station AP1 area and base station AP1 the joint situation. The digital 15, the same part using the same as symbol digital 13, abbreviates wherein emitter, only invention different program.

Terminal WL13 to the S31 such as received by the base station AP1 transmission guide frame, connected base station AP1; and S51 are in such with other frame to transmit the base station AP1.

A IEEE802.11 stipulation MAC frame and connection frame, and shown the digital such 14, wherein a message of capabilities information') is made by the reserved area.

The terminal WL13 transmission of 107 to the S51 such as the reserved reads area of the terminal WL13 supporting the safety layer (1) is at least expected, a to base station AP1. For example, wherein the terminal WL13 transmission part 107, reads the anti-theft alarm layer is with ('enc.0 of the enc.1') of enc.1 of the data, a to base station AP1.

Wherein the joint and base station AP1 processing operation, wherein a digital 13 emitter same; therefore, hopes for is shape of 13 S33 related emitter. , And a step S33 rejection terminal WL13 number, condition according to any stipulation of IEEE802.11, reads to indicate that a connecting state code and connection is defeated the code state; and S52 such as to acknowledge terminal WL13. Moreover, the grant terminal connection WL13, condition according to any stipulation of IEEE802.11, wherein in the response frame the code state to an to indicate connected with the successful wherein the code; and S53 such as to acknowledge terminal WL13.

The base station AP1 grant terminal WL13 voltage condition, lower layers with parameter encryption and base station AP1 and terminal WL13. Therefore, a digital to 15 S37- of the S44 in such, comprising the same shape to 13, according to any stipulation of IEEE802.11, time for with co-ground authentication method of encrypted parameter is sleeved with program between WL13 terminal and base station AP1.

Additionally, a terminal WL13 the joint requirement frame, a description with the base station and terminal WL13 connected now side of the base station AP2 address. The address equal to shown the digital 14 'at the presentation AND a address. Therefore, and shown the digital 15 such, without the substrate are the program, according to with a a address AND, base station AP1 connecting base station AP2. Base station AP1 requirement and registering in base station AP2 safety table terminal WL13 the transmission of safety information, a transmitting the safety information, so as the safety information security the table. Adhesive layer, a parameter encryption and base station AP1 and terminal WL13. Therefore, the terminal WL13 on the base station AP1 grant connected with the S53 pores, terminal WL13 to and communication between base station AP2 of the terminal is WL13 connecting with the base station AP1 similar to the safety layer encryption sending and receiving of data frame.

The embodiment 4th and communication system, a straight with 1st for forming the same; meanwhile, which is adapted such or more of bracket according to 1st of forming invention.

(The embodiment 5th) is above; the 1-th 4th form's the communication system, terminal WL13 the lowest rank the safety layer for base station AP1 the BSS1 is realized the communication according to determined and base station AP1 a pre-formed. The, when the communication while WL13 terminal and base station AP1 terminal WL13 and base station AP1 is not pin to the BSS1 the terminal or wireless stations in the communication, and between the safety layer of communication in advance of the BSS1 lowest rank is lower, and it say with the winding BSS1 lowest rank safety layer. Therefore, wherein the 5th form's communication system, terminal and WL13 shown the digital 16 such, and is carried out the wirelessly connected with a rotating terminal WL14 the ACK/NAK, and maintain the terminal WL13 requirement and base station AP1, a shaft according to the program of the invention is in advance of the BSS1 lowest rank safety.

The terminal WL13 according to dissatisfied is in advance of the BSS1 lowest safety layer safety layer with other end of the base stations in the wirelessly connected with, terminal WL13 it is connected with the base station or the terminal of BSS1, which is a basic circuit. Therefore, which is connected with the or the base station in BSS1, need to and using such a low level wirelessly connected with a pre-formed, or increasing safety layer of the wirelessly connected with a BSS1 lowest rank and.

Lower ends, a corresponding device, abbreviates with the emitter of are installed in the 1-th 4th for forming, invention different device.

The digital 16, the same part using the same as symbol digital 1, abbreviates wherein emitter. Shown the digital 16 the terminal WL14 supporting the safety layer is only of the enc.0. The terminal WL13 switch is connected with the base station AP1 requirement, terminal WL13 the wireless terminal is WL14, mounted on the communication safety layer is an enc.0 a.

An electromagnetic terminal WL13 such a switch and a BSS1 base station AP1 connection request situation.

First, such of the several 2nd the form of the is shown the digital the 17 end points to explain according informed is in advance of the guide to the BSS1 lowest security situational layer. The ACK/NAK, terminal WL13 from the guide part for obtaining capable of the wirelessly connected with the base station AP1 lowest safety layer is a enc.1 a. Therefore, terminal WL13 of substrates forward front shape of 13 S32, shown same in shape 17 the operation process.

The shape of claims 17 S61 confirmed that wherein a coated in the terminal WL13 a layer of the lowest rank according to BSS1 allowed of enc.1 of the safety layer. With a coated enc.1 of the terminal WL13 the safety layer, from top to the S62. The invention S62, inspection terminal WL13 and wirelessly connected with now the terminal is WL14 terminal and terminal WL13 the safety layer between of the lowest rank there is a allowed of BSS1 of enc.1 of the. A lowest rank terminal according WL13 and transmission control part 14 communication safety layer is the allowed of BSS1 of enc.1 of, which are forward to the S64, starting terminal WL13 and connected between communication base station AP1. Namely, the terminal WL13, same shape of 13 S32 later processing. On the other side, wherein WL13 terminal and safety layer between terminal WL14 is not meets of the lowest rank according BSS1 allowed ('enc.1'); and forward to the S63, upper part of the terminal WL13 and wirelessly connected with a terminal WL14, from top to the S64.

A having such, wherein WL13 terminal and terminal WL14 the safety layer between of communication is an enc.0 shape, therefore, and forward from the S62 to the S63, upper part of the terminal WL13 and wirelessly connected with a terminal WL14. A terminal according WL13 is finished by the solution of IEEE802.11 stipulation portion (Deauthentication); and forward to the S64.

, Wherein a terminal WL13, wherein the safe layer is arranged between WL14 terminal are connected now from claim connected with the safety layer for base station AP1 broadcast is lower, a pre-formed upper part of the terminal WL13 and wirelessly connected with the terminal WL14, the other end of WL13 to the base station AP1 connection. Therefore, a warm-keeping the BSS1 layer is limit's safety layer is truly same WL13 terminal and wirelessly connected with the base station AP1.

The invention S63, the once shutting of terminal WL13 and wirelessly connected with the terminal WL14, terminal WL13 and terminal WL14 is a press BSS1 the lowest rank the safety layer end of the wirelessly connected with the once.

The emitter, invention terminal WL13 without and wirelessly connected with a terminal WL14 1 such ACK/NAK, wherein the terminal WL13 wirelessly connected with multiple terminal or multiple base stations situations, and is equally to the safety layer 1 (1) inspection. A safety layer is the BSS1 lowest rank, and is a closed of the connection of terminal WL13 is a while, terminal WL13 connected to the BSS1 lowest rank the safety once layer, a start to the connection for base station AP1.

The emitter, and terminal WL14 and wirelessly connected with the terminal WL13 condition end of the emitter and invention, wherein it further comprises a a succession of program with an BSS1 different BSS2 base station AP2 processing movements. , Wherein the output end of the support side and receiving the support side tube is a terminal is in base station, performing multiple BSS with be lowest limiting the DS communication of safety layer are. The output end of the connection request one side of the base station, comprising the base station wirelessly connected with multiple terminal or the base station, condition in such condition, with the similar 1 1 safety inspection layer, and an upper BSS lowest rank of substrates are connected, while the upper part of the is a while, connecting according to BSS the lowest rank and a layer of substrates are connected to the need, hereafter, starting to the connection of base station the expected.

, A to such that a 1st, 3rd, 4th) for forming the invention refers according to shown the digital the 18 end points to explain for are connected, and is connected with the inspection WL13 terminal security situational layer. Shown the digital 18 the processing movement and shape of 7 S3 and digital 13 and 15 shape of S33 and horizontal.

The inspection WL13 terminal security situational layer, to, such terminal WL13; the other are connected in series or, the other connection frame is not used for area is in the terminal WL13 safety layer; meanwhile, reads the pores (1 )(2 )at least 1 and.

(1 )Is terminal WL13 system for wirelessly connected with the terminal or the base station whether there is.

(2 )WL13 terminal and a realizes the wirelessly connected with the safety layer between terminal or the base station.

Here, wherein WL13 terminal and wirelessly connected with a condition with multiple terminal or the base stations, wherein an not with the area and related comprising a full layer.

The base station AP1; and S71 such as the frame, first; and S72 such as inspection terminal WL13 safety layer. The terminal WL13 safety layer dissatisfied of the BSS1 lowest safety layer, from top to the S73, refuses connected. , Namely to such that a 1st, 3rd, 4th) for forming the invention, and is united, or the connection frame of the inverted to the terminal WL13 informing connection rejection.

On the other side, the terminal WL13 safety layer is a layer of base station AP1 support, which is a BSS1 setting lowest safety layer, from top to the S74. The no exist according to said (1 )or (2 )judgings information now and terminal WL13 and wirelessly connected with a terminal and base station, and forward to the S75, the wirelessly connected with the grant terminal WL13. , Namely to such that a 1st, 3rd, 4th) for forming the invention, and is united, or and connection frame of the first wireless a grant informing terminal WL13; meanwhile, and same one processing similar. The processing, a digital 7 in S6 and shape of 13 S36 and shape of 15 S53 equal with. Time according to said (1 )or (2 )information, a judging exists now and terminal WL13 and wirelessly connected with the terminal or the base station, and forward to the S76.

The invention S76, and is contained in the information of the S71 receiving by (2 )as when WL13 terminal and a realizes the wirelessly connected with the safety layer between terminal of WL14, wherein a safety layer. When the safety layer and terminal WL14 in front of the BSS1 lowest safety layer, from top to the S75, a wireless of grant terminal WL13. On the other side, wherein when safety layer dissatisfied lead terminal with WL14 the BSS1 preliminarily other surface or the no comprises a information of the S71 receiving said pores in (2 )information, wherein the safe layer and terminal WL14 is unclear, from top to the S77, rejects from the terminal connection WL13 request. Such for 1st, 3rd, 4th) for forming of a chip, is united, or the connection frame rejects the connection request informing terminal WL13.

The invention S77, can not inform to reject connection request, and further, is united, or the connection frame of the inverted informs the indication and terminal WL14 wirelessly connected with a cut-off such requirement similar. The condition; each terminal WL13 upper part of the wirelessly connected with the terminal WL14, and capable of being plugged with the base station AP1 connection. Therefore, terminal WL13 upper part of the wirelessly connected with the terminal WL14, a of the conclusion the cooling chip according IEEE802.11 is stipulated capable of the once a base station AP1 requirement connection.

Moreover, wherein the S77, comprising rejecting the connection request, and a MAC management frame of IEEE802.11 stipulation with control and a frame of the frame according currently is not, used for of the management with the ACK/NAK, the sub-type are “0110” a “0111” and frame, with the ACK/NAK, the sub-type are “0000” a “1001” and frame, comprising informed of the lowest rank according BSS1 allowed. With a lowest rank informing condition according BSS1 is allowed; each terminal WL14 supporting the lowest safety layer, a terminal WL13 connected with the safety layer, and once to the base station AP1 requirement connection.

Moreover, wherein the emitter, the terminal WL13 without end of the wirelessly connected with the ACK/NAK end of the emitter and invention claims a terminal WL14 1 such. The, and several and wirelessly connected with a plurality of terminal or the base stations the ACK/NAK, with the same, whether there is informed end is connected by terminal WL13 the terminal or the base station, the best 1 and 1 to inform wherein a rank. The safe multiple layers of wireless communication from the terminal WL13 informing connected, base station AP1 a rope is a layer of the S76.

A having such, and in used for connecting the support side associated and wirelessly connected with the other end of the base stations the ACK/NAK, wherein the safe layer of the wirelessly connected with a unclear, when or a dissatisfied receiving the connection request one side at lower limit safety layer, a rejecting the connection request, a ensuring consistency between datum for receiving the support side at lower limit safety layer. The electromagnetic fixed with WL14 terminal and wireless terminal is WL13 condition end is distributed and invention, which is adapted to the BSS1 different other BSS2 base station AP2 processing operation. , Wherein the output end of the support side and receiving the support side tube is a terminal is in base station, performing multiple BSS protecting layer lower limit of the safety layer DS communication. The output end of the connection request side for base station, sometimes and wirelessly connected with a plurality of terminal or the base stations the base station. Such condition further provided with same, comprising best the terminal or the base station according output end of the connection request one side of inform whether there is connected best is further inform wherein each safe layer. The receiving the support side, wherein multiple a layer of wireless communication issuing from the side informing of the support, connected in order S76, a rope each safe layer.

(The embodiment 6th) is formed on the fixing 1st form's the wireless system, invention the other with the base station the ACK/NAK, which is connecting terminal condition is suitable similar method and other terminal. Here, and shown the digital 19 such; and belonging to the terminal WL12 requirement connected with BSS1 is not pin to the BSS1 terminal WL15 condition and emitter and invention. A layer of terminal WL15 a support is installed with a enc.0. Wherein the terminal WL12 power BSS1, therefore, the terminal WL12 communication, need to ensuring consistency between datum in multiple lower limit safety layer according to BSS1 by a pre-formed. Therefore, the ACK/NAK similar processing movement device and terminal WL15 the shown the digital between the terminal and base station between 7 WL12 terminal.

Digital 20 cooling a terminal WL15 and sequence processing and terminal WL15 terminal to claim WL12 condition connection terminal WL12. The digital 20, the same part using the same as symbol digital 7, abbreviation invention is an emitter diversity.

The digital 20, shown the digital 7 the base station and processing movement and processing movement of communication terminal WL12. Therefore, an step S1 of the lower guide substrate-processing. The invention claims S2- S12 and digital 7 same. No need for connecting device.

Shown and a digital 20; and connection between the terminal WL12 and terminal WL15, a receiving request connected with the WL12 inspection of the side output end is request one side of the terminal WL15 safety layer. Here, the output end is request one side of the terminal security layer is arranged on the support side of the safety layer of supporting device. Additionally, and BSS1 lowest safety layer on the connection request's the sides of terminal, then connected with grant terminal WL15. A top of the support side terminal security layer is not receiving connection request one side of the safety layer of supporting device or a BSS1 lowest safety layer in receiving the connection request sides of the terminal is; and connection of cooled WL15 terminal. To be connected; a same is in with the safety layer of the handle processing movement of encrypted parameter.

The terminal WL12 a terminal WL13 receiving connection request, wherein springs wherein WL12 terminal for performing a wirelessly connected with a base station AP1, terminal WL12 shown same in shape 20 such processing operation.

The digital 19, WL15 terminal is suitable possibly without undergo the inverted, and transmitting the data frame by the terminal WL12 mode is a hoc mode. A such mode, is shown the digital 21 the current image emitter in the terminal WL12 processing operation.

Terminal WL12 to the S81 such as, a terminal WL15 is not base station direct to receiving data frame of terminal WL12 transmission. Such data frame is of according to any stipulation of IEEE802.11, shown is in shape 4 in a frame control of MAC frame of To DS” and FromDS is a “0”, therefore of the easily judging.

The terminal WL12 receiving portion 101, wherein when the data frame; each of S82 such as, with the power supply the safety information of address of a register the terminal WL12 safety table 110.

The terminal WL15 information security register the safety table, method of terminal WL15 and terminal WL12 registered the safety table BSS1 the lowest rank the safety layer and communication in any according to determined a pre-formed, or is fixed to a such layer communication. Therefore, from top to the S83, terminal WL12 for of the terminal WL15 transmission of the IEEE802.11 stipulation data frame ACK frame of a plastic switch, the data front end WL15 to send and receiving.

On the other side, and S82, wherein the terminal WL15 safety layer information is not registered the safety layer; and, and terminal WL15 safety table is unclear, therefore, terminal WL12 and it on the communication terminal with WL15. Therefore, from top to the S84, the ACK frame without, sending to the terminal WL15 informing other are intention. The informing and is made of MAC management frame of IEEE802.11 stipulation with control and a frame of the frame according currently is not, used for of the management with the ACK/NAK, the sub-type are “0110” a “0111” and frame, a control in a condition; the sub-type are “0000” a “1001” and frame.

The receiving notice terminal WL15 to the shown the digital 20 the step S2 later processing movement and.

The is 5th form's the communication precedence, terminal and WL13 shown the digital 16 such is carried out the wirelessly connected with a rotating terminal WL14 the ACK/NAK, invention is used for base station AP1 other is easy for pre-twisted patching bar of a base station AP1 BSS1 lowest rank safe and method. And the communication, the invention according shown and a digital such 22, wherein WL15 terminal is carried out the wirelessly connected with a rotating terminal WL16 the terminal WL15 requirement and terminal WL12 connection situation.

Here, a safety layer of terminal WL16 a support is installed with a enc.0. Wherein the terminal WL12 power BSS1, therefore, the terminal WL12 starting to corresponding, need to ensuring consistency between datum in multiple lower limit safety layer according to BSS1 by a pre-formed. Therefore, and ACK/NAK similar processing movement of a terminal WL12 and shown the digital 18.

Digital 23 cooling a terminal WL15 and sequence processing and terminal WL15 terminal to claim WL12 condition connection terminal WL12. The digital 23, the same part using the same as symbol digital 18, abbreviation invention of the following of different point. Namely, the digital 23, 18 digital base station and terminal WL13 processing movement are corresponding to WL12 terminal and terminal WL15 processing movement, for processing substantially similar sequence processing and shown the digital 18. Therefore, a reference image 23 emitter, and base station and terminal in WL13 18 and emitter shape and tool for WL12 terminal and terminal WL15, which has no need end of the special emitter is connected to understand.

Moreover, the digital 22), and is undergo the inverted to transmit the data frame is terminal WL15 fixedly connected to the terminal WL12 mode, wherein the hoc mode, terminal WL12 can also comprises and digital 12 current image processing movement, shown same in shape 23 such processing operation. The terminal WL12 of S81 does not as terminal WL12 a terminal WL15 through the base station and direct according to digital 21 and a address data frame, and better is forward plugged to the S84, to the terminal WL15 informing claim distinction's intention same, which shown the digital 23 the processing to movement fuse section is very line. Wherein the terminal WL15 information security register the terminal WL12 safety table; therefore, and a terminal WL15 the terminal WL12 the wireless connection of the terminal is not restricted on the BSS1 layer is limit's safety of layer is a terminal WL12 and communication.

The emitter, the terminal WL15 without end of the wirelessly connected with the ACK/NAK end of the emitter and invention claims a terminal WL16 1, further disposed on the wirelessly connected with a plurality of terminal or the base stations the ACK/NAK further provided with same, wherein a terminal is WL15 informed end is connected with the or the base station, the best 1 and 1 to inform the safety rank. The safe multiple layers of wireless communication from the terminal WL15 informing connected, terminal WL12 a rope is a layer of the S76.

A having emitter, such according to the 6th for forming, and when housing and multiple terminal, and one 1 safety layer terminal according to BSS to determine a pre-formed and water-blocking, ensuring consistency between datum of the safety layer.

(The embodiment 7th) is formed in the 1-th 6th for forming, invention claims an BSS the security situational layer. The same process is further in order the safety condition in IBSS.

The embodiment 7th form; and shown the digital 24 such as IBSSI end of the emitter and invention.

The digital 24, IBSS1 for example 3 WL31-WL33 terminal is composed of multiple. Terminal WL31 supporting a layer of the enc.0 and enc.1, a terminal WL32 supporting a layer of the enc.0 and enc.1” and enc.2, a terminal WL33 supporting a layer of the enc.0 and enc.1 a.

To the stipulation of IEEE802.11, IBSS through the base station, without undergo the are multiple terminals in the IBSS certification process, sending and receiving data frame by. The terminals in IBSS1 with a safety table, register to form the IBSS1 the terminals' safety information in the safety table; and IBSS1 preset layer is limit's the safety layer, and a ensuring consistency between datum at the lower limiting the terminals in IBSS1 the safety layer.

Therefore, the invention never power to IDBSS1 process is not registered the safety table terminal WL34 constituting to 1 IBSS1 multiple terminal for example terminal claim WL31 connected with the processing operation.

The processing movement with 6th to form the same, terminal WL31 is best to implement shown the digital 21 such processing operation, wherein the data transmission for security information and receiving is not registered for security table, a power supply of the data frame is advising of terminal WL34 transmission colours are. With a terminal WL34 transmission chip frame, a best to implement shown the digital 23 such processing operation. The shown the digital 23 terminal WL15 replaceable to WL34 terminal. Namely, terminal WL34 reads in the terminal WL34 safety layer are frame; meanwhile, wherein reads (1 )(2 )at least 1, transmitted to WL31 terminal. WL31 terminal capable of receiving such are frame of terminal WL34, the embodiment shown and a digital 23 the terminal WL12 similar processing operation.

, Wherein the IBSS, a ensuring consistency between datum in advance to the IBSS at lower limit safety layer.

Moreover, the horizontal between multiple terminals, and one 1 safety layer terminal according to IBSS lead is at lower limiting the bars are preset, ensuring consistency between datum of the safety layer.

A such of invention on the 1-th 7th for forming, base station and terminal such a wireless LAN wireless communication device at least 1 )and better are multiple) safety layer, a lower (x1) and (x8) is in a said that wherein capable to for ensuring consistency between datum of BSS or the IBSS to the wireless LAN basic set in advance of encrypted at lower limiting the wireless communication of safety layer is the signal sections. Moreover, the horizontal between multiple wireless communication device, at least 1 of multiple wireless communication device and a layer of the testing, lowest rank safety layer signal section of the front most lower limiting the bars are preset for of wireless communication device and BSS or the IBSS, flowing ensuring consistency between datum the multiple sinking the safety layer. And the following (x1) and (x8) is Ming for base station situation's, wherein the has better to the function of the base station and terminal is similar.

(x1) which makes device and 1st the wireless device requirement connected with the wireless device, at least informs the used and 1st wireless devices in a layer of safety layer is of a corresponding to the wireless 1st 1 device for device with is a safety 1st layer.

(x2) works as the wireless 1st device with other; and device thereof and associated and 1st the wireless device and 2nd wireless device is an of the wireless device, and informs and 2nd the wireless device for message centre with the safe and 2nd safety layer used.

(x3) is the 1st wireless device for base station condition, playing of the lowest rank safety layer is the 1st wireless device, and selecting the lowest rank and a layer of the safety layer for device with, wherein informs the safety layer is the 1st wireless device with other.

(x4) is the 1st wireless device for base station, condition in multicast is connected with the safety layer is the 1st wireless device, and selecting the safety layer is device for with with the broadcasting any consistent a layer of safety ranks, wherein the informs selecting to the wireless 1st device requirement connected with the safety layer.

(x5) with device 3rd, wherein with to 3rd, wherein when device for from and other wireless devices' 4th wireless receiving device is requests, A at least for is in a layer of thereby 4th wireless device for informing a wireless 4th device for device with safety layer (3rd) and a layer of for device with, moreover signal section of which is a device for a lead for pre-twisted patching bar (i.e. the invention BSS or IBSS) when lowest rank, wherein the is connected with the 4th wireless device, a (b) at least a safety 3rd layer isTo the other preliminarily time, the connection of cooled and 4th wireless communication device.

(X5 ') is signal when the device 3rd and a safe 3rd layer is an for device of lead for pre-twisted patching bar (i.e. the invention BSS or IBSS) and when the lowest rank the wireless 4th device with said and 4th wireless device and 5th wireless devices and methods for wireless devices with a connected; when the secure position 4th safety layer is by a communication between the wireless 5th device is the lowest rank, and then permitted with a connection of the 4th wireless device, (b) works and safe 3rd layer is made ofThe low rank or above the safety 4th layer is made of preliminarily the time, when or the 4th wireless communication device and associated with the 5th wireless communication device, connected to the safety 4th layer is unclear; the connection of cooled and 4th and wireless communication device.

(x7) is for device for base station condition, a broadcast in advance of said signal is a safety layer or the lowest rank of lowest rank multiple safety 4th) device for device is.

(x8) with 5th, wherein when the 5th device of informs safety layer from the wireless 4th device, and is in advance of the multiple safety layer of the lowest rank and a layer of signal portion thereof is device, and claim 1, informs the wireless 4th and device.

The recording and is further in the invention relates form's process for invention can the program in the executing, saves (floppy disk, hardware equal), CD (CD-ROM, a DVD equal), the semiconductor memory and storage medias claims a floppy disk.

The merits and distortions' a provide to the field of status. Therefore, is not restricted here are arrayed and nuts and bolts and representative embodiment of the emitter is wider from the invention. Therefore, downward invents the concept of the chip is separated from the comprising a claim and equivalent content is defined the spirit or the lower input terminal performing or more of distortions.