Encryption mechanism used in multi-band channel access

1. A method of wireless communication performed by a first wireless station (STA) comprising at least a first transceiver and a second transceiver, the method comprising:

generating a first Media Access Control (MAC) address for said first transceiver and a second MAC address for said second transceiver;

constructing an Additional Authentication Data (AAD) using a third MAC address;

encrypting a first frame to generate an encrypted first frame;

said first transceiver and said second transceiver performing clear channel assessment (CCA) independently of each other;

after said encrypting, obtaining a first transmission opportunity (TXOP) on a second channel; and

in said first TXOP, said second transceiver transmitting said encrypted first frame on said second channel for receipt by a second wireless STA, wherein said transmitting is performed without re-encrypting said first frame subsequent to said obtaining, wherein a first channel is associated with a first set of virtual access points (APs), wherein said second channel is associated with a second set of virtual APs, and wherein said first and second sets have different Basic Serve Set Identifier (BSSID) sets, and wherein the third MAC address comprises a value associated with a first MAC address of a first AP of the first set of virtual APs, and associated with a second MAC address of a second AP of the second set of virtual APs.

2. The method of claim 1 , further comprising:

encrypting a second frame using said AAD to generate an encrypted second frame; and

obtaining a second TXOP on said first channel, wherein said second TXOP is concurrent with said first TXOP; and

said first transceiver transmitting said encrypted second frame to said second wireless STA simultaneously with said second transceiver transmitting said encrypted first frame.

3. The method of claim 2 , wherein said first transceiver and said second transceiver are operable to enable said first wireless STA to communicate with said second wireless STA in a full duplex manner.

4. The method of claim 2 , wherein the encrypted first frame and the encrypted second frame comprise a same MAC address.

5. The method of claim 1 , wherein said first and second sets have a same Basic Serve Set Identifier (BSSID) set, and further comprising: selecting a first virtual AP from said first set and a second virtual AP from said second set, wherein said first and second virtual APs have a same BSSID; and associating said second transceiver with said first virtual AP and said second transceiver with said second virtual AP, and wherein said AAD is constructed using said same BSSID.

6. The method of claim 1 , wherein said deriving comprises masking selected bits of each BSSID in said different BSSID sets to a same value and wherein further said different Basic Serve Set Identifier (BSSID) sets of said first set and said second set are derived from a single reference BSSID.

7. The method of claim 1 , further comprising:

constructing a different AAD using said second MAC address;

encrypting a third frame using said different AAD;

obtaining a third TXOP on said first channel wherein said third TXOP is concurrent with said first TXOP; and

said first transceiver transmitting said third frame to said second wireless STA simultaneously with said second transceiver transmitting said encrypted first frame.

8. The method of claim 7 , further comprising setting an indication in a MAC header of said encrypted first frame to signal said second wireless STA to use channel information associated with said first channel for decryption and relay detection.

9. The method of claim 8 , wherein said channel information comprises Pairwise Transparent Key security Association (PTKSA), Group Transparent Key security Association, (GTKSA), Packet Number (PN) and relay counters,

and further comprising maintaining respective channel information for said first channel and said second channel.

10. The method of claim 8 , wherein said setting said indication comprises:

setting a control ID value in an A-control field to indicate multi-channel content in said first TXOP;

specifying a first channel ID for said first channel in said A-control field.

11. The method of claim 8 , wherein said setting said indication comprises:

specifying an operating class to indicate a regulatory domain of said first channel; and

identifying a primary channel of an operating BSS in said first channel.

12. The method of claim 1 , further comprising in said first TXOP, said first transceiver transmitting a second frame on said first channel for receipt by said second wireless STA, wherein said transmitting said second frame on said first channel is performed substantially simultaneously with said second transceiver transmitting said encrypted first frame on said second channel.

13. The method of claim 12 , wherein said first MAC address and said second MAC address are the same MAC address.

14. A wireless communication device comprising:

a memory;

a processor coupled to said memory;

a first transceiver coupled to said memory and configured to perform wireless communication on a first channel; and

a second transceiver coupled to said memory and configured to perform wireless communication on a second channel, wherein said memory stores instructions that, when executed by said processor, cause said wireless communication device to perform a method of:

generating a first Media Access Control (MAC) address for said first transceiver and a second MAC address for said second transceiver;

constructing an Additional Authentication Data (AAD) by using a third MAC address;

encrypting a first frame to generate an encrypted first frame;

said first transceiver and said second transceiver performing clear channel assessment (CCA) independently of each other;

after said encrypting, obtaining a first transmission opportunity (TXOP) on said second channel; and

in said first TXOP, said second transceiver transmitting said encrypted first frame on said second channel for receipt by a second wireless STA, wherein said transmitting is performed without re-encrypting said first frame subsequent to said obtaining, wherein said first channel is associated with a first set of virtual access points (APs) and said second channel is associated with a second set of virtual APs, wherein said first and second sets have different Basic Serve Set Identifier (BSSID) sets,

wherein the third MAC address comprises a value associated with a first MAC address of a first AP of the first set of virtual APs, and associated with a second MAC address of a second AP of the second set of virtual APs.

15. The wireless communication device of claim 14 , wherein said method further comprises:

encrypting a second frame using said AAD to generate an encrypted second frame; and

obtaining a second TXOP on said first channel wherein said second TXOP is concurrent with said first TXOP; and

said first transceiver transmitting said encrypted second frame to said second wireless STA simultaneously with said second transceiver transmitting said encrypted first frame.

16. The wireless communication device of claim 15 , wherein said first transceiver and said second transceiver are operable to enable said first wireless STA to communicate with said second wireless STA in a full duplex manner.

17. The method of claim 15 , wherein the encrypted first frame and the encrypted second frame comprise a same MAC address.

18. The wireless communication device of claim 15 , wherein said first and second sets have a same Basic Serve Set Identifier (BSSID) set, and wherein said method further comprises:

selecting a first virtual AP from said first set and a second virtual AP from said second set that have a same BSSID; and

associating said second transceiver with said first virtual AP and said second transceiver with said second virtual AP, and wherein said AAD is constructed using said same BSSID.

19. The wireless communication device of claim 14 , wherein said deriving comprises masking selected bits of each BSSID in said different BSSID sets to a same value.

20. The wireless communication device of claim 14 , wherein said method further comprises:

constructing a different AAD using said second MAC address;

encrypting a third frame using said different AAD;

obtaining a third TXOP on said first channel wherein said third TXOP is concurrent with said first TXOP; and

said first transceiver transmitting said third frame to said second wireless STA simultaneously with said second transceiver transmitting said encrypted first frame.

21. The wireless communication device of claim 20 , wherein said method further comprises setting an indication in a MAC header of said encrypted first frame to signal said second wireless STA to use channel information associated with said first channel for decryption and relay detection.

22. The wireless communication device of claim 21 , wherein said channel information comprises Pairwise Transparent Key security Association (PTKSA), Group Transparent Key security Association, (GTKSA), Packet Number (PN) and relay counters,

and further comprising maintaining respective channel information for said first channel and said second channel.

23. The wireless communication device of claim 21 , wherein said setting said indication comprises:

setting a control ID value in an A-control field to indicate multi-channel content in said first TXOP; and

specifying a first channel ID for said first channel in said A-control field.

24. The wireless communication device of claim 21 , wherein said setting said indication comprises:

specifying an operating class to indicate a regulatory domain of said first channel; and

identifying a primary channel of an operating BSS in said first channel.