DEVICE, METHOD AND COMPUTER READABLE MEDIUM FOR RESISTING DOWNGRADE ATTACKS

1 . User equipment, comprising:

a memory having instructions stored thereon;

a processor configured to execute the instructions stored on the memory to cause the user equipment to carry out operations comprising:

applying an only-WIFI Protected Access 3 (WPA3) rule to the user equipment;

determining if the user equipment is in a connected state;

when a network device is determined to be in a WIFI Protected Access 2 (WPA2) mode, receiving a notification from the network device to delete the only-WPA3 rule while the user equipment is in the connected state; and

in response to receiving the notification, deleting the only-WPA3 rule,

wherein the only-WPA3 rule only allows the user equipment to use WPA3 to access the network device, and does not allow the user equipment to use other security authentication types with lower security than WPA3 to access the network device.

2 . The user equipment according to claim 1 , wherein the network device is in WPA3 transition mode, and the WPA3 transition mode allows WPA3-enabled user equipment to use WPA3 to access the network device, and also allows WPA2-enabled user equipment to use WPA2 to access the network device.

3 . The user equipment according to claim 1 , wherein the other security authentication types comprise at least one of wired equivalent privacy (WEP), WIFI Protected Access (WPA), or WIFI Protected Access 2 (WPA2).

4 . The user equipment according to claim 1 , wherein the processor is further configured to execute the instructions stored on the memory to cause the user equipment to perform the following operation:

in a case of applying the only-WPA3 rule, when the user equipment is re-connected to the network device, using WPA3 for access.

5 . The user equipment according to claim 1 , wherein when the network device becomes in WPA2 mode, the processor is further configured to execute the instructions stored on the memory to cause the user equipment to perform operations comprising:

receiving a user input for deleting the only-WPA3 rule; and

in response to receiving the user input, deleting the only-WPA3 rule.

6 . The user equipment according to claim 1 , wherein when the network device becomes in WPA2 mode, the processor is further configured to execute the instructions stored on the memory to cause the user equipment to perform one or more following operations:

receiving a notification from the network device to delete the only-WPA3 rule in the connected state, in response to receiving the notification, deleting the only-WPA3 rule, and in a case of deleting the only-WPA3 rule, when the user equipment is re-connected to the network device, using WPA2 for access; and

receiving a notification from the network device to delete the only-WPA3 rule in the connected state, in response to receiving user input, deleting the only-WPA3 rule, and in the case of deleting the only-WPA3 rule, when the user equipment is re-connected to the network device, using WPA2 for access.

7 . The user equipment according to claim 1 , wherein the processor is further configured to execute the instructions stored on the memory to cause the user equipment to perform the following operation:

determining a service set identifier (SSID) and a medium access control (MAC) address of the network device upon accessing the network device for a first time, so as to identify the network device.

8 . A method executed by a user equipment, wherein the method comprises:

applying an only-WIFI Protected Access 3 (WPA3) rule to the user equipment,

wherein the only-WPA3 rule only allows the user equipment to use WPA3 to access a network device, and does not allow the user equipment to use other security authentication types with lower security than WPA3 to access the network device, and

wherein when the network device becomes in WPA2 mode and upon determining that the user equipment is in a connected state, the method further comprises any one or more of:

receiving a notification from the network device to delete the only-WPA3 rule in the connected state and, in response to receiving the notification, deleting the only-WPA3 rule, and when the user equipment is re-connected to the network device after deleting the only-WPA3 rule, using WPA2 for access; and

receiving a notification from the network device to delete the only-WPA3 rule in the connected state and, in response to receiving user input, deleting the only-WPA3 rule, and, when the user equipment is re-connected to the network device after deleting the only-WPA3 rule, using WPA2 for access.

9 . The method according to claim 8 , wherein the network device is in WPA3 transition mode, and the WPA3 transition mode allows WPA3-enabled user equipment to use WPA3 to access the network device, and also allows WIFI Protected Access 2 (WPA2)-enabled user equipment to use WPA2 to access the network device.

10 . The method according to claim 8 , wherein the other security authentication types comprise at least one of wired equivalent privacy (WEP), WIFI Protected Access (WPA), or WIFI Protected Access 2 (WPA2).

11 . The method according to claim 8 , further comprising:

in a case of applying the only-WPA3 rule, when the user equipment is re-connected to the network device, using WPA3 for access.

12 . The method according to claim 8 , wherein when the network device becomes in WPA2 mode, the method further comprises:

receiving a notification from the network device to delete the only-WPA3 rule in the connected state; and

in response to receiving the notification, deleting the only-WPA3 rule.

13 . The method according to claim 8 , wherein when the network device becomes in WPA2 mode, the method further comprises:

receiving a user input for deleting the only-WPA3 rule; and

in response to receiving the user input, deleting the only-WPA3 rule.

14 . A non-transitory computer-readable medium having instructions stored thereon that, when executed by a processor of user equipment, cause the user equipment to perform operations comprising:

applying an only-WIFI Protected Access 3(WPA 3 ) rule to the user equipment;

determining if the user equipment is in a connected state;

when a network device is determined to be in a WIFI Protected Access 2 (WPA2) mode, receiving a notification from the network device to delete the only-WPA3 rule while the user equipment is in the connected state; and

in response to receiving the notification, deleting the only-WPA3 rule,

wherein the only-WPA3 rule only allows the user equipment to use WPA3 to access the network device, and does not allow the user equipment to use other security authentication types with lower security than WPA3 to access the network device.

15 . The non-transitory computer-readable medium according to claim 14 , wherein the network device is in WPA3 transition mode, and the WPA3 transition mode allows WPA3-enabled user equipment to use WPA3 to access the network device, and also allows WIFI Protected Access 2 (WPA2)-enabled user equipment to use WPA2 to access the network device.

16 . The non-transitory computer-readable medium according to claim 14 , wherein the other security authentication types comprise at least one of wired equivalent privacy (WEP), WIFI Protected Access (WPA), or WIFI Protected Access 2 (WPA2).

17 . The non-transitory computer-readable medium according to claim 14 , wherein when the network device becomes in WPA2 mode, the non-transitory computer-readable medium further comprises instructions that, when executed by the processor of the user equipment, cause the user equipment to perform operations comprising:

receiving a notification from the network device to delete the only-WPA3 rule in the connected state;

in response to receiving the notification, deleting the only-WPA3 rule; and

using WPA2 to access the network device.

18 . The non-transitory computer-readable medium according to claim 14 , wherein when the network device becomes in WPA2 mode, the non-transitory computer-readable medium further comprises instructions that, when executed by the processor of the user equipment, cause the user equipment to perform operations comprising:

receiving a user input for deleting the only-WPA3 rule;

in response to receiving the user input, deleting the only-WPA3 rule; and using WPA2 to access the network device.