Multicast service processing method and access point

Patent metadata

Field	Value
Publication number	US-11432140-B2
Application number	US-201916563682-A
Country	US
Kind code	B2
Filing date	Sep 6, 2019
Priority date	Mar 9, 2017
Publication date	Aug 30, 2022
Grant date	Aug 30, 2022

Abstract

A multicast service processing method and an access point are disclosed. The method includes: generating, by an access point (AP), a first group addressed frame and an individually addressed frame based on a multicast packet, where the first group addressed frame is encrypted by a first multicast key, and the individually addressed frame is encrypted by a unicast key of a second terminal.

First claim

What is claimed is:

1. A method, comprising:
generating, by an access point (AP), a first group-addressed frame and an individually-addressed frame based on a multicast packet to be sent to terminals in a multicast group; and
sending, by the AP, the first group-addressed frame and the individually-addressed frame;
wherein:
the terminals in the multicast group comprise a first terminal and a second terminal;
a type of the first terminal is a first type, a multicast key of any terminal of the first type that associates with the AP is a first multicast key, a type of the second terminal is a second type, a multicast key of any terminal of the second type that associates with the AP is a second multicast key, and the first multicast key and the second multicast key are different;
a receiver address of the first group-addressed frame is a group address of the multicast group, and the first group-addressed frame is encrypted using the first multicast key;
a receiver address of the individually-addressed frame is an address of the second terminal, wherein the individually-addressed frame is encrypted using a unicast key of the second terminal, and wherein the individually-addressed frame is based on the same multicast packet as the first group-addressed frame; and
for each terminal of the multicast group, only one of the first multicast key or the second multicast key is sent to the respective terminal, wherein the first terminal receives the first multicast key, wherein the second terminal receives the second multicast key and the unicast key, and wherein the second terminal is able to decrypt the individually-addressed frame to receive the multicast packet using the unicast key but is unable to decrypt the first group-addressed frame to receive the multicast packet using the second multicast key.

2. The method according to claim 1 , further comprising:
generating, by the AP, a second group-addressed frame and a third group-addressed frame based on a to-be-sent broadcast packet; and
sending, by the AP, the second group-addressed frame and the third group-addressed frame;
wherein:
a receiver address of the second group-addressed frame is a first broadcast address, and the second group-addressed frame is encrypted using the first multicast key; and
a receiver address of the third group-addressed frame is a second broadcast address, and the third group-addressed frame is encrypted using the second multicast key.

3. The method according to claim 2 , wherein:
a plurality of terminals of the first type associated with the AP share the first multicast key; or
a plurality of terminals of the second type associated with the AP share the second multicast key.

4. The method according to claim 2 , wherein a plurality of terminals of the first type associated with the AP share the first multicast key.

5. The method according to claim 2 , wherein a plurality of terminals of the second type associated with the AP share the second multicast key.

6. The method according to claim 1 , wherein:
a plurality of terminals of the first type associated with the AP share the first multicast key; or
a plurality of terminals of the second type associated with the AP share the second multicast key.

7. The method according to claim 1 , wherein a plurality of terminals of the first type associated with the AP share the first multicast key.

8. The method according to claim 1 , wherein a plurality of terminals of the second type associated with the AP share the second multicast key.

9. An access point (AP), comprising:
a transceiver; and
a processing circuit;
wherein:
the processing circuit is configured to generate a first group-addressed frame and an individually-addressed frame based on a multicast packet to be sent to terminals in a multicast group;
the transceiver is configured to send the first group-addressed frame and the individually-addressed frame;
the terminals in the multicast group comprise a first terminal and a second terminal;
a type of the first terminal is a first type, a multicast key of any terminal of the first type that associate with the AP is a first multicast key, a type of the second terminal is a second type, a multicast key of any terminal of the second type that associates with the AP is a second multicast key, and the first multicast key and the second multicast key are different;
a receiver address of the first group-addressed frame is a group address of the multicast group, and the first group-addressed frame is encrypted using the first multicast key; and
a receiver address of the individually-addressed frame is an address of the second terminal, wherein the individually-addressed frame is encrypted using a unicast key of the second terminal, and wherein the individually-addressed frame is based on the same multicast packet as the first group-addressed frame; and
for each terminal of the multicast group, only one of the first multicast key or the second multicast key is sent to the respective terminal, wherein the first terminal receives the first multicast key, wherein the second terminal receives the second multicast key and the unicast key, and wherein the second terminal is able to decrypt the individually-addressed frame to receive the multicast packet using the unicast key but is unable to decrypt the first group-addressed frame to receive the multicast packet using the second multicast key.

10. The AP according to claim 9 , wherein:
the processing circuit is further configured to generate a second group-addressed frame and a third group-addressed frame based on a to-be-sent broadcast packet; and
the transceiver is further configured to send the second group-addressed frame and the third group-addressed frame;
a receiver address of the second group-addressed frame is a first broadcast address, and the second group-addressed frame is encrypted using the first multicast key; and
a receiver address of the third group-addressed frame is a second broadcast address, and the third group-addressed frame is encrypted using the second multicast key.

11. The AP according to claim 9 , wherein:
a plurality of terminals of the first type associated with the AP share the first multicast key.

12. The AP according to claim 9 , wherein:
a plurality of terminals of the second type associated with the AP share the second multicast key.

13. A system, comprising:
an access point (AP); and
a plurality of terminals, the plurality of terminals comprising a first terminal and a second terminal, the plurality of terminals being comprised in a multicast group;
wherein the AP is configured to:
generate a first group-addressed frame and an individually-addressed frame based on a multicast packet to be sent to the plurality of terminals in the multicast group; and
send the first group-addressed frame and the individually-addressed frame;

wherein:
a type of the first terminal is a first type, a multicast key of any terminal of the first type that associates with the AP is a first multicast key, a type of the second terminal is a second type, a multicast key of any terminal of the second type that associates the AP is a second multicast key, and the first multicast key and the second multicast key are different;
a receiver address of the first group-addressed frame is a group address of the multicast group, and the first group-addressed frame is encrypted using the first multicast key;
a receiver address of the individually-addressed frame is an address of the second terminal, wherein the individually-addressed frame is encrypted using a unicast key of the second terminal, and wherein the individually-addressed frame is based on

Assignees

• Huawei Tech Co Ltd

Inventors

• Zhang Lin
• Yang Ya
• Wang Xiaojun

Classifications

• H04L2101/622

  Layer-2 addresses, e.g. medium access control [MAC] addresses · CPC title

• H04W12/041 Primary

  Key generation or derivation · CPC title

• H04W88/08

  Access point devices · CPC title

• H04W4/06 Primary

  Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services · CPC title

• H04L12/189

  in combination with wireless systems (selective distribution or broadcast in wireless communication networks H04W4/06) · CPC title