Distributed MESH network key management method and wireless access point device

Abstract

The invention provides a distributed MESH network key management method which comprises the following steps: dividing a MESH network into a plurality of MKD areas by taking an authentication party as a center, taking an MP (mesh access point) as the authentication party as an MKD (MESHKey Distributor), forming an MKD area by the MP and all authenticated parties MP taking the MP as the authentication party, distributing MPTK-Anonce for the authenticated parties in the MKD area through the MKD in each MKD area and enabling the authenticated parties to negotiate a key on each layer according to the MPTK-Anonce distributed by the MKD in the MKD area. The invention also provides an MP. With the adoption of the distributed MESH network key management method and the MP, when any MP is added intodifferent MKD areas as the authenticated parties, a password is negotiated in the different MKD areas according to different MPTK-Anonce, so that the safety of the key management is increased.

Description

technical field [0001] The invention relates to mobile communication technology, in particular to a distributed MESH network link encryption method and wireless access point equipment. Background technique [0002] The wireless local area network conforming to the IEEE802.11s standard is called a mesh (MESH) network. At present, according to different configuration management methods and security policy application methods, MESH networks are divided into two types: centralized control and distributed. In a distributed MESH network, there is no management and configuration center in the network, and each MESH network wireless access point (Mesh Access Point, MP) operates independently, that is: each MP independently configures, independently applies security policies, and independently forwards data message. A specific example of a distributed MESH network structure is figure 1 As shown, the five MPs shown in the figure are marked as MP1, MP2, MP3, MP4 and MP5 respectively...

AI Technical Summary

Problems solved by technology

[0008] However, using the above key management method, since the MPTK-Anonce of the same MP joining the same network is fixed, and in the process of negotiating PTK in the above four handshakes, the MPTK-Anonce carried in the first message is not encrypted, so The same value appears repeatedly in the 4-way handshake message, which increases the possibility of MPTK-Anonce being monitored and obtained, thus increasing the possibility of the key being cracked, thereby reducing the security of the MESH link

Images